@emdash-cms/admin 0.11.1 → 0.13.0

package/dist/index.js

@@ -1,5 +1,5 @@
 import { c as fetchAuthMode, d as throwResponseError, i as fetchPlugins, l as fetchManifest, n as enablePlugin, o as API_BASE, r as fetchPlugin, s as apiFetch, t as disablePlugin, u as parseApiResponse } from "./plugins-qrjvPK4g.js";
-import { a as SUPPORTED_LOCALES, i as DEFAULT_LOCALE, l as resolveLocale, n as useLocale, o as SUPPORTED_LOCALE_CODES, t as LocaleDirectionProvider } from "./LocaleDirectionProvider-PhIYobDG.js";
+import { a as SUPPORTED_LOCALES, i as DEFAULT_LOCALE, l as resolveLocale, n as useLocale, o as SUPPORTED_LOCALE_CODES, t as LocaleDirectionProvider } from "./LocaleDirectionProvider-rC0KuZjM.js";
 import "./locales/index.js";
 import { Badge, Button, Checkbox, CommandPalette, Dialog, Input, InputArea, Label, LinkButton, Loader, Popover, Select, Sidebar as KumoSidebar, Switch, Tabs, Toast, Toasty, Tooltip, buttonVariants, useSidebar } from "@cloudflare/kumo";
 import { i18n } from "@lingui/core";
@@ -10,7 +10,7 @@ import * as React$1 from "react";
 import React, { createContext, useCallback, useContext, useEffect, useState } from "react";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { Dialog as Dialog$1 } from "@cloudflare/kumo/primitives";
-import { ArrowCounterClockwise, ArrowRight, ArrowRightIcon, ArrowSquareOut, ArrowUUpLeft, ArrowUUpRight, ArrowsClockwise, ArrowsInSimple, ArrowsLeftRight, ArrowsOutSimple, BracketsCurly, Calendar, CalendarBlank, CaretDown, CaretRightIcon, CaretUp, CaretUpDown, ChatCircle, Check, CheckCircle, CircleDashed, CircleNotch, ClockCounterClockwise, Cloud, Code, CodeBlock, Columns, Copy, Cube, Database, DeviceMobile, DotsSixVertical, DownloadSimple, Envelope, EnvelopeSimple, Eye, EyeSlash, File, FileArrowDown, FileText, FloppyDisk, FolderOpen, Gear, GithubLogo, Globe, GlobeSimple, GridFour, HardDrive, Hash, Image as Image$1, ImageSquare, Info, Key, Link as Link$2, LinkBreak, LinkSimple, List, ListBullets, ListChecks, ListNumbers, MagnifyingGlass, Minus, Monitor, Moon, Palette, PaperPlaneTilt, Paperclip, Paragraph, Pencil, PencilSimple, PlugsConnected, Plus, Prohibit, PuzzlePiece, Quotes, Rows, Ruler, ShareNetwork, Shield, ShieldCheck, ShieldWarning, SignOut, SlidersHorizontal, Sparkle, SquaresFour, Stack, Storefront, Sun, Table, TextAlignCenter, TextAlignLeft, TextAlignRight, TextB, TextHOne, TextHThree, TextHTwo, TextItalic, TextStrikethrough, TextT, TextUnderline, ToggleLeft, Trash, Upload, User, UserCircle, UserPlus, Users, Warning, WarningCircle, WebhooksLogo, X, YoutubeLogo } from "@phosphor-icons/react";
+import { ArrowCounterClockwise, ArrowRight, ArrowRightIcon, ArrowSquareOut, ArrowUUpLeft, ArrowUUpRight, ArrowsClockwise, ArrowsInSimple, ArrowsLeftRight, ArrowsOutSimple, BracketsCurly, Calendar, CalendarBlank, CaretDown, CaretRightIcon, CaretUp, CaretUpDown, ChatCircle, Check, CheckCircle, CircleDashed, CircleNotch, ClockCounterClockwise, Cloud, Code, CodeBlock, Columns, Copy, Cube, Database, DeviceMobile, DotsSixVertical, DownloadSimple, Envelope, EnvelopeSimple, Eye, EyeSlash, File, FileArrowDown, FileText, FloppyDisk, FolderOpen, Gear, GithubLogo, Globe, GlobeSimple, GridFour, HardDrive, Hash, Image as Image$1, ImageBroken, ImageSquare, Info, Key, Link as Link$2, LinkBreak, LinkSimple, List, ListBullets, ListChecks, ListNumbers, MagnifyingGlass, Minus, Monitor, Moon, Palette, PaperPlaneTilt, Paperclip, Paragraph, Pencil, PencilSimple, PlugsConnected, Plus, Prohibit, PuzzlePiece, Quotes, Rows, Ruler, ShareNetwork, Shield, ShieldCheck, ShieldWarning, SignOut, SlidersHorizontal, Sparkle, SquaresFour, Stack, Storefront, Sun, Table, TextAlignCenter, TextAlignLeft, TextAlignRight, TextB, TextHOne, TextHThree, TextHTwo, TextItalic, TextStrikethrough, TextT, TextUnderline, ToggleLeft, Trash, Upload, User, UserCircle, UserPlus, Users, Warning, WarningCircle, WebhooksLogo, X, YoutubeLogo } from "@phosphor-icons/react";
 import { clsx } from "clsx";
 import { twMerge } from "tailwind-merge";
 import { DndContext, DragOverlay, KeyboardSensor, PointerSensor, closestCenter, rectIntersection, useDraggable, useDroppable, useSensor, useSensors } from "@dnd-kit/core";
@@ -2053,7 +2053,7 @@ async function createMenuItem(menuName, input, options = {}) {
 * Update a menu item
 */
 async function updateMenuItem(menuName, itemId, input, options = {}) {
-	return parseApiResponse(await apiFetch(withLocale$1(`${API_BASE}/menus/${menuName}/items?id=${itemId}`, options.locale), {
+	return parseApiResponse(await apiFetch(withLocale$1(`${API_BASE}/menus/${menuName}/items/${itemId}`, options.locale), {
 		method: "PUT",
 		headers: { "Content-Type": "application/json" },
 		body: JSON.stringify(input)
@@ -2063,7 +2063,7 @@ async function updateMenuItem(menuName, itemId, input, options = {}) {
 * Delete a menu item
 */
 async function deleteMenuItem(menuName, itemId, options = {}) {
-	const response = await apiFetch(withLocale$1(`${API_BASE}/menus/${menuName}/items?id=${itemId}`, options.locale), { method: "DELETE" });
+	const response = await apiFetch(withLocale$1(`${API_BASE}/menus/${menuName}/items/${itemId}`, options.locale), { method: "DELETE" });
 	if (!response.ok) await throwResponseError(response, i18n._({
 		id: "HNaiZF",
 		message: "Failed to delete menu item"
@@ -3122,7 +3122,7 @@ function probeImageDimensions(url, errorMessage) {
 		img.src = url;
 	});
 }
-function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "image/", mimeTypeFilters, fieldId, title: providedTitle, hideUrlInput = false, mediaKind = "image" }) {
+function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "image/", mimeTypeFilters, fieldId, title: providedTitle, hideUrlInput = false, mediaKind = "image", localOnly = false }) {
 	const { _: _t } = useLingui();
 	const isFileKind = mediaKind === "file";
 	const filters = React$1.useMemo(() => {
@@ -3170,11 +3170,11 @@ function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "imag
 			setUploadError(null);
 			setProviderDimensions({});
 		}
-	}, [open]);
+	}, [open, localOnly]);
 	const { data: providers } = useQuery({
 		queryKey: ["media-providers"],
 		queryFn: fetchMediaProviders,
-		enabled: open,
+		enabled: open && !localOnly,
 		placeholderData: []
 	});
 	const activeProviderInfo = React$1.useMemo(() => {
@@ -3191,12 +3191,15 @@ function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "imag
 		};
 		return providers?.find((p) => p.id === activeProvider);
 	}, [activeProvider, providers]);
-	const { data: localData, isLoading: localLoading } = useQuery({
+	const { data: localData, isLoading: localLoading, fetchNextPage: fetchNextLocalPage, hasNextPage: hasNextLocalPage, isFetchingNextPage: isFetchingNextLocalPage } = useInfiniteQuery({
 		queryKey: ["media", filters?.join(",") ?? ""],
-		queryFn: () => fetchMediaList({
+		queryFn: ({ pageParam }) => fetchMediaList({
 			mimeType: filters,
-			limit: 50
+			cursor: pageParam,
+			limit: 100
 		}),
+		initialPageParam: void 0,
+		getNextPageParam: (lastPage) => lastPage.nextCursor,
 		enabled: open && activeProvider === "local"
 	});
 	const { data: providerData, isLoading: providerLoading } = useQuery({
@@ -3211,9 +3214,9 @@ function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "imag
 			limit: 50,
 			query: searchQuery || void 0
 		}),
-		enabled: open && activeProvider !== "local"
+		enabled: open && !localOnly && activeProvider !== "local"
 	});
-	const isLoading = activeProvider === "local" ? localLoading : providerLoading;
+	const isLoading = activeProvider === "local" ? localLoading || isFetchingNextLocalPage : providerLoading;
 	const [uploadError, setUploadError] = React$1.useState(null);
 	const uploadLocalMutation = useMutation({
 		mutationFn: (file) => uploadMedia(file, { fieldId }),
@@ -3255,11 +3258,14 @@ function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "imag
 				if (!old) return old;
 				return {
 					...old,
-					items: old.items.map((item) => item.id === id ? {
-						...item,
-						width,
-						height
-					} : item)
+					pages: old.pages.map((page) => ({
+						...page,
+						items: page.items.map((item) => item.id === id ? {
+							...item,
+							width,
+							height
+						} : item)
+					}))
 				};
 			});
 			if (selectedItem?.providerId === "local" && selectedItem.item.id === id) setSelectedItem({
@@ -3285,11 +3291,11 @@ function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "imag
 		});
 	}, [dimensionsMutation]);
 	const items = React$1.useMemo(() => {
-		if (activeProvider === "local") return (localData?.items || []).filter((item) => matchesAnyFilter(item.mimeType, filters));
+		if (activeProvider === "local") return (localData?.pages.flatMap((page) => page.items) || []).filter((item) => matchesAnyFilter(item.mimeType, filters));
 		return providerData?.items || [];
 	}, [
 		activeProvider,
-		localData?.items,
+		localData,
 		providerData?.items,
 		filters
 	]);
@@ -3399,7 +3405,7 @@ function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "imag
 			name: "Library",
 			icon: void 0
 		}];
-		if (providers) {
+		if (providers && !localOnly) {
 			for (const p of providers) if (p.id !== "local") tabs.push({
 				id: p.id,
 				name: p.name,
@@ -3407,7 +3413,7 @@ function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "imag
 			});
 		}
 		return tabs;
-	}, [providers]);
+	}, [providers, localOnly]);
 	return /* @__PURE__ */ jsx(Dialog.Root, {
 		open,
 		onOpenChange: handleClose,
@@ -3444,7 +3450,7 @@ function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "imag
 						})
 					})]
 				}),
-				!hideUrlInput && /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsxs("div", {
+				!hideUrlInput && !localOnly && /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsxs("div", {
 					className: "border-b pb-4",
 					children: [
 						/* @__PURE__ */ jsx(Label, { children: _t({
@@ -3581,9 +3587,9 @@ function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "imag
 					}) : null,
 					className: "mb-3"
 				}),
-				/* @__PURE__ */ jsx("div", {
+				/* @__PURE__ */ jsxs("div", {
 					className: "flex-1 overflow-y-auto min-h-0",
-					children: isLoading ? /* @__PURE__ */ jsx("div", {
+					children: [isLoading && items.length === 0 ? /* @__PURE__ */ jsx("div", {
 						className: "flex items-center justify-center h-full",
 						children: /* @__PURE__ */ jsx(Loader, {})
 					}) : items.length === 0 ? /* @__PURE__ */ jsxs("div", {
@@ -3662,7 +3668,22 @@ function MediaPickerModal({ open, onOpenChange, onSelect, mimeTypeFilter = "imag
 								}));
 							}
 						}, item.id))
-					})
+					}), activeProvider === "local" && hasNextLocalPage && /* @__PURE__ */ jsx("div", {
+						className: "flex justify-center py-3",
+						children: /* @__PURE__ */ jsx(Button, {
+							variant: "outline",
+							size: "sm",
+							onClick: () => void fetchNextLocalPage(),
+							disabled: isFetchingNextLocalPage,
+							children: isFetchingNextLocalPage ? _t({
+								id: "Z3FXyt",
+								message: "Loading..."
+							}) : _t({
+								id: "a4N/Bg",
+								message: "Load More"
+							})
+						})
+					})]
 				}),
 				/* @__PURE__ */ jsxs("div", {
 					className: "flex flex-col-reverse sm:flex-row sm:justify-end sm:space-x-2 border-t pt-4",
@@ -3853,7 +3874,11 @@ function ProviderMediaItem({ item, selected, onClick, onDoubleClick, onDimension
 function BlockKitMediaPickerField({ actionId, label, placeholder, mimeTypeFilter, value, onChange }) {
 	const { _: _t } = useLingui();
 	const [pickerOpen, setPickerOpen] = React$1.useState(false);
+	const [imageBroken, setImageBroken] = React$1.useState(false);
 	const url = typeof value === "string" && value.length > 0 ? value : "";
+	React$1.useEffect(() => {
+		setImageBroken(false);
+	}, [url]);
 	const filter = mimeTypeFilter ?? "image/";
 	const canPreview = isSafePreviewUrl(url);
 	const handleSelect = (item) => {
@@ -3868,14 +3893,50 @@ function BlockKitMediaPickerField({ actionId, label, placeholder, mimeTypeFilter
 			className: "text-sm font-medium mb-1.5 block",
 			children: label
 		}),
-		canPreview ? /* @__PURE__ */ jsxs("div", {
+		canPreview ? imageBroken ? /* @__PURE__ */ jsxs("div", {
+			className: "relative group min-h-20",
+			children: [/* @__PURE__ */ jsxs("div", {
+				className: "min-h-20 w-full rounded-md border border-kumo-line bg-kumo-muted flex items-center justify-center gap-2 text-kumo-subtle",
+				children: [/* @__PURE__ */ jsx(ImageBroken, { className: "h-5 w-5" }), /* @__PURE__ */ jsx("span", {
+					className: "text-sm",
+					children: _t({
+						id: "1pdLQw",
+						message: "Image not found"
+					})
+				})]
+			}), /* @__PURE__ */ jsxs("div", {
+				className: "absolute top-2 end-2 opacity-0 pointer-events-none group-hover:opacity-100 group-hover:pointer-events-auto group-focus-within:opacity-100 group-focus-within:pointer-events-auto transition-opacity flex gap-1",
+				children: [/* @__PURE__ */ jsx(Button, {
+					type: "button",
+					size: "sm",
+					variant: "secondary",
+					onClick: () => setPickerOpen(true),
+					children: _t({
+						id: "o+XJ9D",
+						message: "Change"
+					})
+				}), /* @__PURE__ */ jsx(Button, {
+					type: "button",
+					shape: "square",
+					variant: "destructive",
+					className: "h-8 w-8",
+					onClick: () => onChange(actionId, ""),
+					"aria-label": _t({
+						id: "t/YqKh",
+						message: "Remove"
+					}),
+					children: /* @__PURE__ */ jsx(X, { className: "h-4 w-4" })
+				})]
+			})]
+		}) : /* @__PURE__ */ jsxs("div", {
 			className: "relative group",
 			children: [/* @__PURE__ */ jsx("img", {
 				src: url,
 				alt: "",
-				className: "max-h-40 w-full rounded-md border border-kumo-line object-contain bg-kumo-muted",
+				className: "max-h-40 min-h-20 w-full rounded-md border border-kumo-line object-contain bg-kumo-muted",
 				referrerPolicy: "no-referrer",
-				loading: "lazy"
+				loading: "lazy",
+				onError: () => setImageBroken(true)
 			}), /* @__PURE__ */ jsxs("div", {
 				className: "absolute top-2 end-2 opacity-0 pointer-events-none group-hover:opacity-100 group-hover:pointer-events-auto group-focus-within:opacity-100 group-focus-within:pointer-events-auto transition-opacity flex gap-1",
 				children: [/* @__PURE__ */ jsx(Button, {
@@ -7381,6 +7442,10 @@ function SlashCommandMenu({ state, onCommand, onClose: _onClose, setSelectedInde
 		const selected = container.querySelector(`[data-index="${state.selectedIndex}"]`);
 		if (selected) selected.scrollIntoView({ block: "nearest" });
 	}, [state.selectedIndex, state.isOpen]);
+	const hasMouseMovedRef = React$1.useRef(false);
+	React$1.useEffect(() => {
+		if (!state.isOpen) hasMouseMovedRef.current = false;
+	}, [state.isOpen]);
 	if (!state.isOpen) return null;
 	return createPortal(/* @__PURE__ */ jsx("div", {
 		ref: (node) => {
@@ -7389,6 +7454,9 @@ function SlashCommandMenu({ state, onCommand, onClose: _onClose, setSelectedInde
 		},
 		style: floatingStyles,
 		className: "z-[100] rounded-lg border bg-kumo-overlay p-1 shadow-lg min-w-[220px] max-h-[300px] overflow-y-auto",
+		onPointerMove: () => {
+			hasMouseMovedRef.current = true;
+		},
 		children: state.items.length === 0 ? /* @__PURE__ */ jsx("p", {
 			className: "text-sm text-kumo-subtle px-3 py-2",
 			children: _t({
@@ -7400,7 +7468,9 @@ function SlashCommandMenu({ state, onCommand, onClose: _onClose, setSelectedInde
 			"data-index": index,
 			className: cn("flex items-center gap-3 w-full px-3 py-2 text-sm rounded text-start", index === state.selectedIndex ? "bg-kumo-tint text-kumo-default" : "hover:bg-kumo-tint/50"),
 			onClick: () => onCommand(item),
-			onMouseEnter: () => setSelectedIndex(index),
+			onMouseEnter: () => {
+				if (hasMouseMovedRef.current) setSelectedIndex(index);
+			},
 			children: [/* @__PURE__ */ jsx(item.icon, { className: "h-4 w-4 text-kumo-subtle flex-shrink-0" }), /* @__PURE__ */ jsxs("div", {
 				className: "flex flex-col",
 				children: [/* @__PURE__ */ jsx("span", {
@@ -7969,7 +8039,7 @@ function PortableTextEditor({ value, onChange, placeholder = "Start writing...",
 	/** When editing an existing block, store the node position for updateAttributes */
 	const editingBlockPosRef = React$1.useRef(null);
 	const [sectionPickerOpen, setSectionPickerOpen] = React$1.useState(false);
-	const [slashMenuState, setSlashMenuState] = React$1.useState({
+	const [slashMenuState, setSlashMenuStateRaw] = React$1.useState({
 		isOpen: false,
 		items: [],
 		selectedIndex: 0,
@@ -7977,9 +8047,11 @@ function PortableTextEditor({ value, onChange, placeholder = "Start writing...",
 		range: null
 	});
 	const slashMenuStateRef = React$1.useRef(slashMenuState);
-	React$1.useEffect(() => {
-		slashMenuStateRef.current = slashMenuState;
-	}, [slashMenuState]);
+	const setSlashMenuState = React$1.useCallback((action) => {
+		const next = typeof action === "function" ? action(slashMenuStateRef.current) : action;
+		slashMenuStateRef.current = next;
+		setSlashMenuStateRaw(next);
+	}, []);
 	const slashCommands = React$1.useMemo(() => {
 		const cmds = [...defaultSlashCommands];
 		cmds.push({
@@ -11374,7 +11446,11 @@ function JsonFieldEditor({ label, id, value, onChange, required }) {
 function ImageFieldRenderer({ id, label, description, value, onChange, required, allowedMimeTypes, fieldId }) {
 	const { _: _t5 } = useLingui();
 	const [pickerOpen, setPickerOpen] = React$1.useState(false);
+	const [imageBroken, setImageBroken] = React$1.useState(false);
 	const displayUrl = typeof value === "string" ? value : value?.previewUrl || value?.src || (value && (!value.provider || value.provider === "local") ? `/_emdash/api/media/file/${typeof value.meta?.storageKey === "string" ? value.meta.storageKey : value.id}` : void 0);
+	React$1.useEffect(() => {
+		setImageBroken(false);
+	}, [displayUrl]);
 	const handleSelect = (item) => {
 		const isLocalProvider = !item.provider || item.provider === "local";
 		onChange({
@@ -11397,12 +11473,48 @@ function ImageFieldRenderer({ id, label, description, value, onChange, required,
 		id,
 		children: [
 			/* @__PURE__ */ jsx(Label, { children: label }),
-			displayUrl ? /* @__PURE__ */ jsxs("div", {
+			displayUrl ? imageBroken ? /* @__PURE__ */ jsxs("div", {
+				className: "mt-2 relative group",
+				children: [/* @__PURE__ */ jsxs("div", {
+					className: "min-h-20 rounded-lg border bg-kumo-muted flex items-center justify-center gap-2 text-kumo-subtle",
+					children: [/* @__PURE__ */ jsx(ImageBroken, { className: "h-5 w-5" }), /* @__PURE__ */ jsx("span", {
+						className: "text-sm",
+						children: _t5({
+							id: "1pdLQw",
+							message: "Image not found"
+						})
+					})]
+				}), /* @__PURE__ */ jsxs("div", {
+					className: "absolute top-2 end-2 opacity-0 group-hover:opacity-100 transition-opacity flex gap-1",
+					children: [/* @__PURE__ */ jsx(Button, {
+						type: "button",
+						size: "sm",
+						variant: "secondary",
+						onClick: () => setPickerOpen(true),
+						children: _t5({
+							id: "o+XJ9D",
+							message: "Change"
+						})
+					}), /* @__PURE__ */ jsx(Button, {
+						type: "button",
+						shape: "square",
+						variant: "destructive",
+						className: "h-8 w-8",
+						onClick: handleRemove,
+						"aria-label": _t5({
+							id: "5ywtDz",
+							message: "Remove image"
+						}),
+						children: /* @__PURE__ */ jsx(X, { className: "h-4 w-4" })
+					})]
+				})]
+			}) : /* @__PURE__ */ jsxs("div", {
 				className: "mt-2 relative group",
 				children: [/* @__PURE__ */ jsx("img", {
 					src: displayUrl,
 					alt: "",
-					className: "max-h-48 rounded-lg border object-cover"
+					className: "max-h-48 min-h-20 rounded-lg border object-cover",
+					onError: () => setImageBroken(true)
 				}), /* @__PURE__ */ jsxs("div", {
 					className: "absolute top-2 end-2 opacity-0 group-hover:opacity-100 transition-opacity flex gap-1",
 					children: [/* @__PURE__ */ jsx(Button, {
@@ -12068,7 +12180,7 @@ function getItemTitle$1(item) {
 /**
 * Content list view with table display and trash tab
 */
-function ContentList({ collection, collectionLabel, items, trashedItems = [], isLoading, isTrashedLoading, onDelete, onDuplicate, onRestore, onPermanentDelete, onLoadMore, onLoadMoreTrashed, hasMore, hasMoreTrashed, trashedCount = 0, i18n: i18n$2, activeLocale, onLocaleChange, urlPattern, sort, onSortChange }) {
+function ContentList({ collection, collectionLabel, items, trashedItems = [], isLoading, isTrashedLoading, onDelete, onDuplicate, onRestore, onPermanentDelete, onLoadMore, onLoadMoreTrashed, hasMore, hasMoreTrashed, trashedCount = 0, i18n, activeLocale, onLocaleChange, urlPattern, sort, onSortChange, total }) {
 	const { _: _t } = useLingui();
 	const [activeTab, setActiveTab] = React$1.useState("all");
 	const [searchQuery, setSearchQuery] = React$1.useState("");
@@ -12082,13 +12194,16 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 		const query = searchQuery.toLowerCase();
 		return items.filter((item) => getItemTitle$1(item).toLowerCase().includes(query));
 	}, [items, searchQuery]);
-	const totalPages = Math.max(1, Math.ceil(filteredItems.length / PAGE_SIZE));
-	const paginatedItems = filteredItems.slice(page * PAGE_SIZE, (page + 1) * PAGE_SIZE);
+	const effectiveTotal = typeof total === "number" && !searchQuery ? total : filteredItems.length;
+	const totalPages = Math.max(1, Math.ceil(effectiveTotal / PAGE_SIZE));
+	const clampedPage = Math.min(page, totalPages - 1);
+	const paginatedItems = filteredItems.slice(clampedPage * PAGE_SIZE, (clampedPage + 1) * PAGE_SIZE);
 	React$1.useEffect(() => {
-		if (page >= totalPages - 1 && hasMore && onLoadMore && !searchQuery) onLoadMore();
+		if (!hasMore || !onLoadMore || searchQuery) return;
+		if (clampedPage >= Math.ceil(filteredItems.length / PAGE_SIZE) - 1) onLoadMore();
 	}, [
-		page,
-		totalPages,
+		clampedPage,
+		filteredItems.length,
 		hasMore,
 		onLoadMore,
 		searchQuery
@@ -12103,9 +12218,9 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 					children: [/* @__PURE__ */ jsx("h1", {
 						className: "text-2xl font-bold",
 						children: collectionLabel
-					}), i18n$2 && activeLocale && onLocaleChange && /* @__PURE__ */ jsx(LocaleSwitcher, {
-						locales: i18n$2.locales,
-						defaultLocale: i18n$2.defaultLocale,
+					}), i18n && activeLocale && onLocaleChange && /* @__PURE__ */ jsx(LocaleSwitcher, {
+						locales: i18n.locales,
+						defaultLocale: i18n.defaultLocale,
 						value: activeLocale,
 						onChange: onLocaleChange,
 						size: "sm"
@@ -12199,7 +12314,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 										message: "Status"
 									})
 								}),
-								i18n$2 && /* @__PURE__ */ jsx(SortableTh, {
+								i18n && /* @__PURE__ */ jsx(SortableTh, {
 									field: "locale",
 									sort,
 									onSortChange,
@@ -12229,7 +12344,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 						}) }), /* @__PURE__ */ jsx("tbody", {
 							className: "divide-y divide-kumo-line",
 							children: isLoading && items.length === 0 ? /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsx("td", {
-								colSpan: i18n$2 ? 5 : 4,
+								colSpan: i18n ? 5 : 4,
 								className: "px-4 py-8 text-center text-kumo-subtle",
 								children: /* @__PURE__ */ jsxs("span", {
 									className: "inline-flex items-center gap-2",
@@ -12239,7 +12354,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 									})]
 								})
 							}) }) : items.length === 0 ? /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsxs("td", {
-								colSpan: i18n$2 ? 5 : 4,
+								colSpan: i18n ? 5 : 4,
 								className: "px-4 py-8 text-center text-kumo-subtle",
 								children: [
 									_t({
@@ -12260,7 +12375,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 									})
 								]
 							}) }) : paginatedItems.length === 0 ? /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsx("td", {
-								colSpan: i18n$2 ? 5 : 4,
+								colSpan: i18n ? 5 : 4,
 								className: "px-4 py-8 text-center text-kumo-subtle",
 								children: _t({
 									id: "huTRDC",
@@ -12272,7 +12387,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 								collection,
 								onDelete,
 								onDuplicate,
-								showLocale: !!i18n$2,
+								showLocale: !!i18n,
 								urlPattern
 							}, item.id))
 						})]
@@ -12282,21 +12397,11 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 					className: "flex items-center justify-between",
 					children: [/* @__PURE__ */ jsx("span", {
 						className: "text-sm text-kumo-subtle",
-						children: searchQuery ? i18n._({
-							id: "Zzkfda",
-							message: "{0, plural, one {# item matching \"{searchQuery}\"} other {# items matching \"{searchQuery}\"}}",
-							values: {
-								0: filteredItems.length,
-								searchQuery
-							}
-						}) : i18n._({
-							id: "Ufffi8",
-							message: "{0, plural, one {#{1} item} other {#{2} items}}",
-							values: {
-								0: filteredItems.length,
-								1: hasMore ? "+" : "",
-								2: hasMore ? "+" : ""
-							}
+						children: renderItemCount({
+							searchQuery,
+							filteredCount: filteredItems.length,
+							total,
+							hasMore
 						})
 					}), /* @__PURE__ */ jsxs("div", {
 						className: "flex items-center gap-2",
@@ -12304,8 +12409,8 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 							/* @__PURE__ */ jsx(Button, {
 								variant: "outline",
 								shape: "square",
-								disabled: page === 0,
-								onClick: () => setPage(page - 1),
+								disabled: clampedPage === 0,
+								onClick: () => setPage(clampedPage - 1),
 								"aria-label": _t({
 									id: "aHKcKc",
 									message: "Previous page"
@@ -12318,7 +12423,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 							/* @__PURE__ */ jsxs("span", {
 								className: "text-sm",
 								children: [
-									page + 1,
+									clampedPage + 1,
 									" / ",
 									totalPages
 								]
@@ -12326,8 +12431,8 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 							/* @__PURE__ */ jsx(Button, {
 								variant: "outline",
 								shape: "square",
-								disabled: page >= totalPages - 1,
-								onClick: () => setPage(page + 1),
+								disabled: clampedPage >= totalPages - 1,
+								onClick: () => setPage(clampedPage + 1),
 								"aria-label": _t({
 									id: "/dqduX",
 									message: "Next page"
@@ -12477,6 +12582,38 @@ function SortableTh({ field, sort, onSortChange, label }) {
 		})
 	});
 }
+/**
+* Render the row-count line above pagination. The rules are:
+* - A search query always wins — say how many matches there are.
+* - When the server reported a total, use it (no `+` suffix needed —
+*   we know the count).
+* - Otherwise fall back to the pre-refactor behavior: loaded count,
+*   with `+` when there are more pages the user hasn't fetched yet.
+*/
+function renderItemCount({ searchQuery, filteredCount, total, hasMore }) {
+	if (searchQuery) return i18n._({
+		id: "WqhW35",
+		message: "{filteredCount, plural, one {# item matching \"{searchQuery}\"} other {# items matching \"{searchQuery}\"}}",
+		values: {
+			filteredCount,
+			searchQuery
+		}
+	});
+	if (typeof total === "number") return i18n._({
+		id: "Q/6//K",
+		message: "{total, plural, one {# item} other {# items}}",
+		values: { total }
+	});
+	return i18n._({
+		id: "FWXiie",
+		message: "{filteredCount, plural, one {#{0} item} other {#{1} items}}",
+		values: {
+			0: hasMore ? "+" : "",
+			1: hasMore ? "+" : "",
+			filteredCount
+		}
+	});
+}
 function ContentListItem({ item, collection, onDelete, onDuplicate, showLocale, urlPattern }) {
 	const { _: _t2 } = useLingui();
 	const title = getItemTitle$1(item);
@@ -17805,6 +17942,7 @@ function PluginCard({ plugin, updateInfo, onEnable, onDisable, isToggling, hasMa
 	const queryClient = useQueryClient();
 	const toastManager = Toast.useToastManager();
 	const isMarketplace = plugin.source === "marketplace";
+	const isRegistry = plugin.source === "registry";
 	const hasUpdate = !!updateInfo && updateInfo.installed !== updateInfo.latest;
 	const updateMutation = useMutation({
 		mutationFn: () => updateMarketplacePlugin(plugin.id, { confirmCapabilities: true }),
@@ -18136,6 +18274,13 @@ function PluginCard({ plugin, updateInfo, onEnable, onDisable, isToggling, hasMa
 								message: "Uninstall"
 							})
 						})
+					}),
+					isRegistry && /* @__PURE__ */ jsx("div", {
+						className: "pt-2 border-t text-xs text-kumo-subtle",
+						children: _t2({
+							id: "YvXVtr",
+							message: "Uninstall is not yet available for registry plugins. Disable the plugin to stop it from running; full uninstall will land in a follow-up."
+						})
 					})
 				]
 			})]
@@ -18284,7 +18429,7 @@ function MarketplacePluginDetail({ pluginId, installedPluginIds = /* @__PURE__ *
 	const isInstalled = installedPluginIds.has(pluginId);
 	if (isLoading) return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
-		children: [/* @__PURE__ */ jsx(BackLink, {}), /* @__PURE__ */ jsxs("div", {
+		children: [/* @__PURE__ */ jsx(BackLink$1, {}), /* @__PURE__ */ jsxs("div", {
 			className: "animate-pulse space-y-4",
 			children: [
 				/* @__PURE__ */ jsxs("div", {
@@ -18302,7 +18447,7 @@ function MarketplacePluginDetail({ pluginId, installedPluginIds = /* @__PURE__ *
 	});
 	if (error || !plugin) return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
-		children: [/* @__PURE__ */ jsx(BackLink, {}), /* @__PURE__ */ jsxs("div", {
+		children: [/* @__PURE__ */ jsx(BackLink$1, {}), /* @__PURE__ */ jsxs("div", {
 			className: "rounded-lg border border-kumo-danger/50 bg-kumo-danger/10 p-6 text-center",
 			children: [
 				/* @__PURE__ */ jsx(Warning, { className: "mx-auto h-8 w-8 text-kumo-danger" }),
@@ -18340,7 +18485,7 @@ function MarketplacePluginDetail({ pluginId, installedPluginIds = /* @__PURE__ *
 	return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
 		children: [
-			/* @__PURE__ */ jsx(BackLink, {}),
+			/* @__PURE__ */ jsx(BackLink$1, {}),
 			/* @__PURE__ */ jsxs("div", {
 				className: "flex flex-col gap-4 sm:flex-row sm:items-start sm:justify-between",
 				children: [/* @__PURE__ */ jsxs("div", {
@@ -18619,7 +18764,7 @@ function MarketplacePluginDetail({ pluginId, installedPluginIds = /* @__PURE__ *
 		]
 	});
 }
-function BackLink() {
+function BackLink$1() {
 	const { _: _t2 } = useLingui();
 	return /* @__PURE__ */ jsxs(Link$1, {
 		to: "/plugins/marketplace",
@@ -18966,7 +19111,7 @@ function MediaDetailPanel({ item, onClose, onDeleted }) {
 											message: "Uploaded:"
 										})
 									}),
-									/* @__PURE__ */ jsx("span", { children: formatDate(item.createdAt) })
+									/* @__PURE__ */ jsx("span", { children: formatDate$1(item.createdAt) })
 								]
 							})
 						]
@@ -19084,7 +19229,7 @@ function MediaDetailPanel({ item, onClose, onDeleted }) {
 		onConfirm: () => deleteMutation.mutate()
 	})] });
 }
-function formatDate(isoString) {
+function formatDate$1(isoString) {
 	return new Date(isoString).toLocaleDateString(void 0, {
 		year: "numeric",
 		month: "short",
@@ -19099,7 +19244,7 @@ function formatDate(isoString) {
 /**
 * Media library component with upload, provider tabs, and grid view
 */
-function MediaLibrary({ items = [], isLoading, onUpload, onDelete, onItemUpdated }) {
+function MediaLibrary({ items = [], isLoading, onUpload, onDelete, onItemUpdated, hasMore, onLoadMore }) {
 	const { _: _t } = useLingui();
 	const [viewMode, setViewMode] = React$1.useState("grid");
 	const [selectedItem, setSelectedItem] = React$1.useState(null);
@@ -19437,7 +19582,7 @@ function MediaLibrary({ items = [], isLoading, onUpload, onDelete, onItemUpdated
 					className: "ps-9"
 				})]
 			}),
-			currentLoading ? /* @__PURE__ */ jsx("div", {
+			currentLoading && currentItems.length === 0 && currentProviderItems.length === 0 ? /* @__PURE__ */ jsx("div", {
 				className: "flex items-center justify-center py-12",
 				children: /* @__PURE__ */ jsx(Loader, {})
 			}) : activeProvider === "local" && currentItems.length === 0 ? /* @__PURE__ */ jsxs("div", {
@@ -19601,6 +19746,21 @@ function MediaLibrary({ items = [], isLoading, onUpload, onDelete, onItemUpdated
 					})]
 				})
 			}),
+			activeProvider === "local" && hasMore && onLoadMore && /* @__PURE__ */ jsx("div", {
+				className: "flex justify-center",
+				children: /* @__PURE__ */ jsx(Button, {
+					variant: "outline",
+					onClick: onLoadMore,
+					disabled: isLoading,
+					children: isLoading ? _t({
+						id: "Z3FXyt",
+						message: "Loading..."
+					}) : _t({
+						id: "a4N/Bg",
+						message: "Load More"
+					})
+				})
+			}),
 			selectedItem && /* @__PURE__ */ jsx(MediaDetailPanel, {
 				item: selectedItem,
 				onClose: () => setSelectedItem(null),
@@ -20266,7 +20426,7 @@ function MenuEditor() {
 		newItems[targetIndex] = currentItem;
 		const reorderedItems = newItems.map((item, i) => ({
 			id: item.id,
-			parentId: item.parent_id,
+			parentId: item.parentId,
 			sortOrder: i
 		}));
 		setLocalItems(newItems);
@@ -20545,9 +20705,9 @@ function MenuEditor() {
 							children: item.label
 						}), /* @__PURE__ */ jsxs("div", {
 							className: "text-sm text-kumo-subtle",
-							children: [item.type === "custom" ? item.custom_url : /* @__PURE__ */ jsx("span", {
+							children: [item.type === "custom" ? item.customUrl : /* @__PURE__ */ jsx("span", {
 								className: "inline-flex items-center rounded-full bg-kumo-brand/10 px-2 py-0.5 text-xs font-medium text-kumo-brand",
-								children: item.reference_collection ?? item.type
+								children: item.referenceCollection ?? item.type
 							}), item.target === "_blank" && _t({
 								id: "+Lmv8u",
 								message: " (opens in new window)"
@@ -20669,7 +20829,7 @@ function MenuEditor() {
 									id: "TQJouj",
 									message: "Enter a URL (https://…) or a relative path (/…)"
 								}),
-								defaultValue: editingItem.custom_url || ""
+								defaultValue: editingItem.customUrl || ""
 							}),
 							/* @__PURE__ */ jsxs(Select, {
 								label: _t({
@@ -21791,6 +21951,806 @@ function Redirects() {
 	});
 }
 
+//#endregion
+//#region src/lib/api/registry.ts
+let cachedDiscovery = null;
+async function getDiscoveryClient(config) {
+	if (cachedDiscovery && cachedDiscovery.config.aggregatorUrl === config.aggregatorUrl && cachedDiscovery.config.acceptLabelers === config.acceptLabelers) return cachedDiscovery.client;
+	const DiscoveryClient = (await import("@emdash-cms/registry-client/discovery")).DiscoveryClient;
+	const discovery = new DiscoveryClient({
+		aggregatorUrl: config.aggregatorUrl,
+		acceptLabelers: config.acceptLabelers
+	});
+	const wrapped = {
+		async searchPackages(opts) {
+			return await discovery.searchPackages({
+				q: opts.q,
+				cursor: opts.cursor,
+				limit: opts.limit
+			});
+		},
+		async resolvePackage(handle, slug) {
+			return await discovery.resolvePackage({
+				handle,
+				slug
+			});
+		},
+		async getPackage(did, slug) {
+			return await discovery.getPackage({
+				did,
+				slug
+			});
+		},
+		async getLatestRelease(did, slug) {
+			return await discovery.getLatestRelease({
+				did,
+				package: slug
+			});
+		},
+		async listReleases(did, slug, cursor) {
+			return await discovery.listReleases({
+				did,
+				package: slug,
+				cursor
+			});
+		}
+	};
+	cachedDiscovery = {
+		config,
+		client: wrapped
+	};
+	return wrapped;
+}
+/**
+* Returns whether a release should be considered installable given the
+* configured policy. Currently implements the minimum-release-age check
+* described in RFC 0001's "Pre-label gap and launch tempo" section,
+* plus the `minimumReleaseAgeExclude` allowlist.
+*
+* Returns `false` (release blocked) when the policy is configured but
+* the release is missing a valid `indexedAt` -- we fail closed rather
+* than silently letting unbounded-age releases through.
+*/
+function releasePassesPolicy(release, pkg, policy, now = Date.now()) {
+	if (!policy?.minimumReleaseAgeSeconds) return true;
+	if (releaseExemptFromMinimumAge(policy.minimumReleaseAgeExclude, pkg.did, pkg.slug)) return true;
+	const indexedAt = Date.parse(release.indexedAt);
+	if (!Number.isFinite(indexedAt)) return false;
+	return (now - indexedAt) / 1e3 >= policy.minimumReleaseAgeSeconds;
+}
+/**
+* Canonicalize a capabilities list for set-style comparison. Mirrors
+* the server-side helper `canonicalCapabilitiesForDriftCheck` in
+* `packages/core/src/registry/config.ts` -- both sides must produce
+* the same canonical shape so the install handler's drift check is
+* stable across reorderings, duplicates, and junk entries.
+*
+* Filters non-strings, deduplicates, and sorts lexically.
+*/
+function canonicalCapabilitiesForDriftCheck(value) {
+	if (!Array.isArray(value)) return [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const entry of value) if (typeof entry === "string" && entry.length > 0) seen.add(entry);
+	return [...seen].toSorted();
+}
+/**
+* Matches a `(publisher_did, slug)` against the
+* `minimumReleaseAgeExclude` allowlist. Mirrors the server-side helper
+* of the same name in `packages/core/src/registry/config.ts`.
+*
+* DID-only on purpose: handles are aggregator-supplied envelope data
+* and accepting them as a trust input would let a compromised
+* aggregator bypass the holdback by claiming any handle for any
+* package. DIDs are tied to the AT URI of the record itself.
+*
+* Entries from the config list have already been lowercased at
+* manifest build time, so this only needs to lowercase the runtime
+* values for comparison.
+*/
+function releaseExemptFromMinimumAge(exclude, publisherDid, slug) {
+	if (!exclude || exclude.length === 0) return false;
+	const didLower = publisherDid.toLowerCase();
+	const fullDid = `${didLower}/${slug.toLowerCase()}`;
+	for (const entry of exclude) {
+		if (entry === didLower) return true;
+		if (entry === fullDid) return true;
+	}
+	return false;
+}
+async function searchRegistryPackages(config, opts) {
+	return (await getDiscoveryClient(config)).searchPackages(opts);
+}
+async function resolveRegistryPackage(config, handle, slug) {
+	return (await getDiscoveryClient(config)).resolvePackage(handle, slug);
+}
+async function getRegistryPackage(config, did, slug) {
+	return (await getDiscoveryClient(config)).getPackage(did, slug);
+}
+async function getLatestRegistryRelease(config, did, slug) {
+	return (await getDiscoveryClient(config)).getLatestRelease(did, slug);
+}
+/**
+* Resolve a publisher DID to its claimed handle using the same
+* `LocalActorResolver` pattern as `@emdash-cms/plugin-cli` and
+* `@emdash-cms/auth-atproto`. Bidirectional verification (handle's
+* domain points back to the same DID) is part of the resolver --
+* `LocalActorResolver` returns the sentinel `"handle.invalid"` when
+* the `alsoKnownAs` handle is present but doesn't round-trip.
+*
+* Three distinct outcomes the UI can render:
+*
+*   - `{ status: "ok", handle }` — verified handle, round-trip OK.
+*   - `{ status: "invalid" }` — DID claims a handle but it doesn't
+*     resolve back. The publisher's handle setup is broken; the admin
+*     should see a clear "Invalid handle" indicator rather than the
+*     raw DID.
+*   - `{ status: "missing" }` — no handle claimed at all (no
+*     `alsoKnownAs`), or the DID document couldn't be fetched (network
+*     error, unsupported DID method).
+*/
+let actorResolver = null;
+async function getActorResolver() {
+	if (actorResolver) return actorResolver;
+	const { CompositeDidDocumentResolver, CompositeHandleResolver, DohJsonHandleResolver, LocalActorResolver, PlcDidDocumentResolver, WebDidDocumentResolver, WellKnownHandleResolver } = await import("@atcute/identity-resolver");
+	actorResolver = new LocalActorResolver({
+		handleResolver: new CompositeHandleResolver({ methods: {
+			dns: new DohJsonHandleResolver({ dohUrl: "https://cloudflare-dns.com/dns-query" }),
+			http: new WellKnownHandleResolver()
+		} }),
+		didDocumentResolver: new CompositeDidDocumentResolver({ methods: {
+			plc: new PlcDidDocumentResolver(),
+			web: new WebDidDocumentResolver()
+		} })
+	});
+	return actorResolver;
+}
+/**
+* localStorage-backed cache for DID→handle resolutions. Handles are
+* stable for hours-to-days in practice, but bound the cache so a
+* compromised handle eventually flips back to "invalid" without a
+* forced refresh. 24h matches the typical atproto handle TTL.
+*
+* Failures (network errors, unsupported DID method) are *not* cached --
+* those should retry on the next render.
+*/
+const HANDLE_CACHE_TTL_MS = 1440 * 60 * 1e3;
+const HANDLE_CACHE_KEY_PREFIX = "emdash:did-handle:";
+function readHandleCache(did) {
+	if (typeof localStorage === "undefined") return null;
+	try {
+		const raw = localStorage.getItem(`${HANDLE_CACHE_KEY_PREFIX}${did}`);
+		if (!raw) return null;
+		const parsed = JSON.parse(raw);
+		if (!parsed || typeof parsed.expiresAt !== "number" || parsed.expiresAt < Date.now()) return null;
+		return parsed.resolution;
+	} catch {
+		return null;
+	}
+}
+function writeHandleCache(did, resolution) {
+	if (typeof localStorage === "undefined") return;
+	try {
+		const entry = {
+			resolution,
+			expiresAt: Date.now() + HANDLE_CACHE_TTL_MS
+		};
+		localStorage.setItem(`${HANDLE_CACHE_KEY_PREFIX}${did}`, JSON.stringify(entry));
+	} catch {}
+}
+async function resolveDidToHandle(did) {
+	const cached = readHandleCache(did);
+	if (cached) return cached;
+	let result;
+	try {
+		const resolved = await (await getActorResolver()).resolve(did);
+		if (resolved.handle === "handle.invalid") result = { status: "invalid" };
+		else if (resolved.handle) result = {
+			status: "ok",
+			handle: resolved.handle
+		};
+		else result = { status: "missing" };
+	} catch (err) {
+		console.warn(`[registry] DID->handle resolution failed for ${did}:`, err);
+		return { status: "missing" };
+	}
+	writeHandleCache(did, result);
+	return result;
+}
+const INSTALL_ENDPOINT = `${API_BASE}/admin/plugins/registry/install`;
+/**
+* Install a plugin from the registry.
+*
+* Posts to the EmDash server, which re-resolves the same `(handle,
+* slug)` against the aggregator, re-verifies the bundle's checksum
+* against the signed release record, and writes the install. Surfaces
+* structured error codes (`RELEASE_YANKED`, `CHECKSUM_MISMATCH`,
+* `DECLARED_ACCESS_DRIFT`, etc.) that callers map to localized
+* messages.
+*/
+async function installRegistryPlugin(body) {
+	const response = await apiFetch(INSTALL_ENDPOINT, {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify(body)
+	});
+	if (!response.ok) await throwResponseError(response, i18n._({
+		id: "/LWKyx",
+		message: "Failed to install plugin"
+	}));
+	return (await response.json()).data;
+}
+
+//#endregion
+//#region src/components/PublisherHandle.tsx
+/**
+* Renders an atproto publisher's identity, with three branches:
+*
+*   - **Verified handle**: shows `@handle`. Our local
+*     `LocalActorResolver` round-tripped the DID document's
+*     `alsoKnownAs` back to the same DID (verified by DNS TXT or
+*     `.well-known`, not by the aggregator).
+*   - **Unverified publisher**: DID document claims a handle but the
+*     handle's domain doesn't point back to the same DID, OR the
+*     aggregator's claimed handle doesn't match the bidirectionally
+*     verified one. Treat as untrusted -- the publisher might be
+*     impersonating someone else, or the aggregator might be lying
+*     about a handle. Surface as `Unverified publisher` in error
+*     styling. Callers should also disable destructive actions
+*     (install, etc.).
+*   - **Missing handle**: no handle claimed in the DID document (no
+*     `alsoKnownAs`), or the DID document couldn't be fetched
+*     (network error, unsupported DID method).
+*
+* `aggregatorHandle` is what the registry's `searchPackages` /
+* `resolvePackage` endpoint returned for this DID. It is NEVER trusted
+* on its own -- the aggregator is an untrusted indexer that could be
+* compromised or buggy. We always run our own DID->handle round-trip
+* via `LocalActorResolver` (cached in localStorage for 24h) and use
+* the aggregator's value only to *cross-check*: if the aggregator
+* claims a handle that differs from what the DID document
+* bidirectionally verifies, the publisher is marked invalid.
+*/
+/** Trailing dot(s) on an FQDN, stripped before handle comparison. */
+const TRAILING_DOT = /\.+$/;
+/**
+* Hook form: returns the same tri-state result without rendering. Use
+* when a parent needs to coordinate UI (e.g. disable install) based on
+* the resolution.
+*/
+function usePublisherHandle(did, aggregatorHandle) {
+	const { data: didHandleResolution, isPending } = useQuery({
+		queryKey: [
+			"registry",
+			"did-handle",
+			did
+		],
+		queryFn: () => resolveDidToHandle(did),
+		enabled: Boolean(did),
+		staleTime: 300 * 1e3
+	});
+	if (isPending || !didHandleResolution) return { status: "missing" };
+	if (didHandleResolution.status === "missing") return { status: "missing" };
+	if (didHandleResolution.status === "invalid") return { status: "invalid" };
+	const verifiedHandle = didHandleResolution.handle.toLowerCase();
+	if (aggregatorHandle) {
+		if (aggregatorHandle.toLowerCase().replace(TRAILING_DOT, "") !== verifiedHandle) return { status: "invalid" };
+	}
+	return {
+		status: "ok",
+		handle: didHandleResolution.handle
+	};
+}
+function PublisherHandle({ did, aggregatorHandle, onResolved, variant = "card", className }) {
+	const { _: _t } = useLingui();
+	const result = usePublisherHandle(did, aggregatorHandle);
+	const onResolvedRef = React$1.useRef(onResolved);
+	onResolvedRef.current = onResolved;
+	React$1.useEffect(() => {
+		onResolvedRef.current?.(result);
+	}, [result.status, result.handle]);
+	const textClass = variant === "card" ? "text-xs" : "text-sm";
+	if (result.status === "ok" && result.handle) return /* @__PURE__ */ jsxs("span", {
+		className: `truncate ${textClass} text-kumo-subtle ${className ?? ""}`,
+		children: ["@", result.handle]
+	});
+	if (result.status === "invalid") return /* @__PURE__ */ jsx("span", {
+		className: `truncate ${textClass} font-medium text-kumo-error ${className ?? ""}`,
+		children: _t({
+			id: "N3r0DC",
+			message: "Unverified publisher"
+		})
+	});
+	return /* @__PURE__ */ jsx("span", {
+		className: `truncate ${textClass} text-kumo-subtle ${className ?? ""}`,
+		children: did
+	});
+}
+
+//#endregion
+//#region src/components/RegistryBrowse.tsx
+/**
+* Registry Browse
+*
+* Grid of plugin cards backed by the experimental decentralized plugin
+* registry's aggregator. Search box debounces directly into the
+* aggregator's `searchPackages` XRPC -- the aggregator is a public,
+* read-only service, so no server proxy is involved.
+*
+* Cards navigate to `/plugins/marketplace/$pluginId` (the same path the
+* marketplace browse uses); the router branches to the registry detail
+* component when `manifest.registry` is configured.
+*/
+function RegistryBrowse({ config, installedRegistryUris = /* @__PURE__ */ new Set() }) {
+	const { _: _t } = useLingui();
+	const [searchQuery, setSearchQuery] = React$1.useState("");
+	const [debouncedQuery, setDebouncedQuery] = React$1.useState("");
+	React$1.useEffect(() => {
+		const timer = setTimeout(setDebouncedQuery, 300, searchQuery);
+		return () => clearTimeout(timer);
+	}, [searchQuery]);
+	const { data, isLoading, error, fetchNextPage, hasNextPage, isFetchingNextPage } = useInfiniteQuery({
+		queryKey: [
+			"registry",
+			"search",
+			config.aggregatorUrl,
+			debouncedQuery
+		],
+		queryFn: ({ pageParam }) => searchRegistryPackages(config, {
+			q: debouncedQuery || void 0,
+			cursor: pageParam,
+			limit: 20
+		}),
+		initialPageParam: void 0,
+		getNextPageParam: (lastPage) => lastPage.cursor
+	});
+	const packages = data?.pages.flatMap((p) => p.packages);
+	return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-6",
+		children: [
+			/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("h1", {
+				className: "text-3xl font-bold",
+				children: _t({
+					id: "jNlCXv",
+					message: "Plugin Registry"
+				})
+			}), /* @__PURE__ */ jsx("p", {
+				className: "mt-1 text-kumo-subtle",
+				children: _t({
+					id: "ceMA7u",
+					message: "Browse and install plugins published to the decentralized registry."
+				})
+			})] }),
+			/* @__PURE__ */ jsx("div", {
+				className: "flex flex-col gap-3 sm:flex-row sm:items-center",
+				children: /* @__PURE__ */ jsxs("div", {
+					className: "relative flex-1",
+					children: [/* @__PURE__ */ jsx(MagnifyingGlass, { className: "absolute start-3 top-1/2 h-4 w-4 -translate-y-1/2 text-kumo-subtle" }), /* @__PURE__ */ jsx(Input, {
+						type: "search",
+						placeholder: _t({
+							id: "slq1pb",
+							message: "Search plugins..."
+						}),
+						value: searchQuery,
+						onChange: (e) => setSearchQuery(e.target.value),
+						className: "ps-9",
+						"aria-label": _t({
+							id: "S4qZX0",
+							message: "Search plugins"
+						})
+					})]
+				})
+			}),
+			error ? /* @__PURE__ */ jsx("div", {
+				className: "rounded-md border border-kumo-error bg-kumo-error/10 p-4 text-kumo-error",
+				role: "alert",
+				children: _t({
+					id: "obuqKa",
+					message: "Failed to load plugins. The registry aggregator may be unreachable."
+				})
+			}) : null,
+			isLoading ? /* @__PURE__ */ jsx("div", {
+				className: "grid grid-cols-1 gap-4 sm:grid-cols-2 lg:grid-cols-3",
+				children: Array.from({ length: 6 }).map((_, i) => /* @__PURE__ */ jsx("div", { className: "h-32 animate-pulse rounded-md border border-kumo-border bg-kumo-subtle" }, i))
+			}) : null,
+			packages && packages.length === 0 ? /* @__PURE__ */ jsx("div", {
+				className: "rounded-md border border-kumo-border bg-kumo-subtle p-8 text-center text-kumo-subtle",
+				children: debouncedQuery ? _t({
+					id: "5ZLwXV",
+					message: "No plugins match \"{debouncedQuery}\".",
+					values: { debouncedQuery }
+				}) : _t({
+					id: "+ugpTI",
+					message: "No plugins have been published to this registry yet."
+				})
+			}) : null,
+			packages && packages.length > 0 ? /* @__PURE__ */ jsx("div", {
+				className: "grid grid-cols-1 gap-4 sm:grid-cols-2 lg:grid-cols-3",
+				children: packages.map((pkg) => /* @__PURE__ */ jsx(RegistryPackageCard, {
+					pkg,
+					installed: installedRegistryUris.has(pkg.uri)
+				}, pkg.uri))
+			}) : null,
+			hasNextPage ? /* @__PURE__ */ jsx("div", {
+				className: "flex justify-center",
+				children: /* @__PURE__ */ jsx("button", {
+					type: "button",
+					className: "rounded-md border border-kumo-border bg-kumo-surface px-4 py-2 text-sm hover:bg-kumo-subtle disabled:opacity-50",
+					onClick: () => fetchNextPage(),
+					disabled: isFetchingNextPage,
+					children: isFetchingNextPage ? _t({
+						id: "Z3FXyt",
+						message: "Loading..."
+					}) : _t({
+						id: "yQ2kGp",
+						message: "Load more"
+					})
+				})
+			}) : null
+		]
+	});
+}
+function RegistryPackageCard({ pkg, installed }) {
+	const { _: _t2 } = useLingui();
+	const linkSegment = usePublisherHandle(pkg.did, pkg.handle).handle ?? pkg.did;
+	const profile = pkg.profile;
+	const verified = (pkg.labels ?? []).some((l) => l.val === "verified");
+	return /* @__PURE__ */ jsx(Link$1, {
+		to: "/plugins/marketplace/$pluginId",
+		params: { pluginId: `${linkSegment}/${pkg.slug}` },
+		className: "block rounded-md border border-kumo-border bg-kumo-surface p-4 transition-colors hover:bg-kumo-subtle focus:outline-none focus-visible:ring-2 focus-visible:ring-kumo-brand",
+		children: /* @__PURE__ */ jsxs("div", {
+			className: "flex items-start gap-3",
+			children: [/* @__PURE__ */ jsx("div", {
+				className: "mt-1 rounded-md bg-kumo-subtle p-2 text-kumo-subtle",
+				children: /* @__PURE__ */ jsx(PuzzlePiece, { className: "h-5 w-5" })
+			}), /* @__PURE__ */ jsxs("div", {
+				className: "min-w-0 flex-1",
+				children: [
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex items-center gap-2",
+						children: [/* @__PURE__ */ jsx("h2", {
+							className: "truncate font-semibold",
+							children: profile.name ?? pkg.slug
+						}), verified ? /* @__PURE__ */ jsx(ShieldCheck, {
+							className: "h-4 w-4 shrink-0 text-kumo-brand",
+							"aria-label": _t2({
+								id: "70QfpA",
+								message: "Verified publisher"
+							})
+						}) : null]
+					}),
+					/* @__PURE__ */ jsx(PublisherHandle, {
+						did: pkg.did,
+						aggregatorHandle: pkg.handle,
+						variant: "card"
+					}),
+					profile.description ? /* @__PURE__ */ jsx("p", {
+						className: "mt-2 line-clamp-2 text-sm text-kumo-default",
+						children: profile.description
+					}) : null,
+					installed ? /* @__PURE__ */ jsx("div", {
+						className: "mt-3",
+						children: /* @__PURE__ */ jsx(Badge, {
+							variant: "success",
+							children: _t2({
+								id: "eQkgKV",
+								message: "Installed"
+							})
+						})
+					}) : null
+				]
+			})]
+		})
+	});
+}
+
+//#endregion
+//#region src/components/RegistryPluginDetail.tsx
+/**
+* Registry Plugin Detail
+*
+* Detail view for a plugin from the experimental decentralized plugin
+* registry. Resolves `(handle, slug)` directly against the configured
+* aggregator; install routes through the EmDash server's
+* `/_emdash/api/admin/plugins/registry/install` endpoint, which
+* re-resolves and re-verifies before writing the install.
+*
+* Identified in the URL by a `pluginId` that is `${handle}/${slug}`.
+* The router wraps this component when `manifest.registry` is set on
+* the same route the marketplace detail uses, so existing bookmarks /
+* sidebar entries stay stable.
+*/
+function RegistryPluginDetail({ pluginId, config }) {
+	const { _: _t } = useLingui();
+	const queryClient = useQueryClient();
+	const [showConsent, setShowConsent] = React$1.useState(false);
+	const { data: installedPlugins } = useQuery({
+		queryKey: ["plugins"],
+		queryFn: async () => {
+			const { fetchPlugins } = await import("./plugins-qrjvPK4g.js").then((n) => n.a);
+			return fetchPlugins();
+		}
+	});
+	const slashIdx = pluginId.lastIndexOf("/");
+	const publisher = slashIdx > 0 ? pluginId.slice(0, slashIdx) : "";
+	const slug = slashIdx > 0 ? pluginId.slice(slashIdx + 1) : "";
+	const isDid = publisher.startsWith("did:");
+	const { data: pkg, isLoading: isLoadingPkg } = useQuery({
+		queryKey: [
+			"registry",
+			"package",
+			config.aggregatorUrl,
+			publisher,
+			slug,
+			isDid
+		],
+		queryFn: () => isDid ? getRegistryPackage(config, publisher, slug) : resolveRegistryPackage(config, publisher, slug),
+		enabled: Boolean(publisher && slug)
+	});
+	const handleResult = usePublisherHandle(pkg?.did ?? "", pkg?.handle);
+	const { data: release } = useQuery({
+		queryKey: [
+			"registry",
+			"latest-release",
+			config.aggregatorUrl,
+			pkg?.did,
+			slug
+		],
+		queryFn: () => getLatestRegistryRelease(config, pkg.did, slug),
+		enabled: Boolean(pkg?.did && slug)
+	});
+	const ext = (release?.release)?.extensions?.["com.emdashcms.experimental.package.releaseExtension"];
+	const capabilities = Array.isArray(ext?.capabilities) ? canonicalCapabilitiesForDriftCheck(ext?.capabilities) : canonicalCapabilitiesForDriftCheck(declaredAccessToCapabilityList(ext?.declaredAccess));
+	const profile = pkg?.profile;
+	const verified = (pkg?.labels ?? []).some((l) => l.val === "verified");
+	const policyOk = release && pkg ? releasePassesPolicy(release, {
+		did: pkg.did,
+		slug
+	}, config.policy) : true;
+	const installedEntry = React$1.useMemo(() => {
+		if (!pkg || !installedPlugins) return void 0;
+		return installedPlugins.find((p) => p.source === "registry" && p.registryPublisherDid === pkg.did && p.registrySlug === slug);
+	}, [
+		pkg,
+		installedPlugins,
+		slug
+	]);
+	const isInstalled = Boolean(installedEntry);
+	const installMutation = useMutation({
+		mutationFn: () => {
+			if (!pkg) throw new Error("Package not loaded");
+			return installRegistryPlugin({
+				did: pkg.did,
+				slug,
+				version: release?.version,
+				acknowledgedDeclaredAccess: capabilities
+			});
+		},
+		onSuccess: () => {
+			setShowConsent(false);
+			queryClient.invalidateQueries({ queryKey: ["plugins"] });
+			queryClient.invalidateQueries({ queryKey: ["manifest"] });
+			queryClient.invalidateQueries({ queryKey: ["registry"] });
+		}
+	});
+	if (isLoadingPkg) return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-6",
+		children: [/* @__PURE__ */ jsx(BackLink, {}), /* @__PURE__ */ jsxs("div", {
+			className: "animate-pulse space-y-4",
+			children: [
+				/* @__PURE__ */ jsxs("div", {
+					className: "flex items-center gap-4",
+					children: [/* @__PURE__ */ jsx("div", { className: "h-16 w-16 rounded-xl bg-kumo-subtle" }), /* @__PURE__ */ jsxs("div", {
+						className: "space-y-2",
+						children: [/* @__PURE__ */ jsx("div", { className: "h-6 w-48 rounded bg-kumo-subtle" }), /* @__PURE__ */ jsx("div", { className: "h-4 w-32 rounded bg-kumo-subtle" })]
+					})]
+				}),
+				/* @__PURE__ */ jsx("div", { className: "h-4 w-full rounded bg-kumo-subtle" }),
+				/* @__PURE__ */ jsx("div", { className: "h-4 w-3/4 rounded bg-kumo-subtle" })
+			]
+		})]
+	});
+	if (!pkg) return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-6",
+		children: [/* @__PURE__ */ jsx(BackLink, {}), /* @__PURE__ */ jsx("div", {
+			className: "rounded-md border border-kumo-error bg-kumo-error/10 p-4 text-kumo-error",
+			role: "alert",
+			children: _t({
+				id: "wZ5IqF",
+				message: "Plugin not found. The publisher handle or slug may be incorrect."
+			})
+		})]
+	});
+	return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-6",
+		children: [
+			/* @__PURE__ */ jsx(BackLink, {}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex items-start gap-4",
+				children: [
+					/* @__PURE__ */ jsx("div", {
+						className: "rounded-xl bg-kumo-subtle p-3 text-kumo-subtle",
+						children: /* @__PURE__ */ jsx("span", {
+							"aria-hidden": true,
+							className: "block h-10 w-10"
+						})
+					}),
+					/* @__PURE__ */ jsxs("div", {
+						className: "min-w-0 flex-1",
+						children: [
+							/* @__PURE__ */ jsxs("div", {
+								className: "flex items-center gap-2",
+								children: [/* @__PURE__ */ jsx("h1", {
+									className: "truncate text-3xl font-bold",
+									children: profile?.name ?? slug
+								}), verified ? /* @__PURE__ */ jsx(ShieldCheck, {
+									className: "h-5 w-5 shrink-0 text-kumo-brand",
+									"aria-label": _t({
+										id: "70QfpA",
+										message: "Verified publisher"
+									})
+								}) : null]
+							}),
+							/* @__PURE__ */ jsxs("p", {
+								className: "text-sm text-kumo-subtle",
+								children: [
+									_t({
+										id: "D3P+jw",
+										message: "Published by"
+									}),
+									" ",
+									/* @__PURE__ */ jsx(PublisherHandle, {
+										did: pkg.did,
+										aggregatorHandle: pkg.handle,
+										variant: "detail"
+									})
+								]
+							}),
+							release ? /* @__PURE__ */ jsxs("p", {
+								className: "text-xs text-kumo-subtle",
+								children: [
+									_t({
+										id: "YYdC3A",
+										message: "Version {0}",
+										values: { 0: release.version }
+									}),
+									" · ",
+									_t({
+										id: "294VT5",
+										message: "indexed {0}",
+										values: { 0: formatDate(release.indexedAt) }
+									})
+								]
+							}) : null
+						]
+					}),
+					/* @__PURE__ */ jsx("div", { children: isInstalled ? /* @__PURE__ */ jsx(Button, {
+						variant: "secondary",
+						disabled: true,
+						children: _t({
+							id: "eQkgKV",
+							message: "Installed"
+						})
+					}) : /* @__PURE__ */ jsx(Button, {
+						variant: "primary",
+						disabled: !release || !policyOk || handleResult.status === "invalid",
+						onClick: () => setShowConsent(true),
+						children: _t({
+							id: "TKQ7K+",
+							message: "Install"
+						})
+					}) })
+				]
+			}),
+			handleResult.status === "invalid" ? /* @__PURE__ */ jsxs("div", {
+				className: "flex items-start gap-3 rounded-md border border-kumo-error bg-kumo-error/10 p-4 text-kumo-error",
+				role: "alert",
+				children: [/* @__PURE__ */ jsx(Warning, { className: "mt-0.5 h-5 w-5 shrink-0" }), /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("p", {
+					className: "font-medium",
+					children: _t({
+						id: "R9fBA+",
+						message: "We couldn't verify this publisher's identity"
+					})
+				}), /* @__PURE__ */ jsx("p", {
+					className: "mt-1 text-sm text-kumo-default",
+					children: _t({
+						id: "Iu2xLX",
+						message: "This publisher claims a name they couldn't prove they own — possibly impersonating someone else. Install is disabled. If you know the publisher and trust them, ask them to fix their identity setup before retrying."
+					})
+				})] })]
+			}) : null,
+			release && !policyOk ? /* @__PURE__ */ jsxs("div", {
+				className: "flex items-start gap-3 rounded-md border border-kumo-warning bg-kumo-warning/10 p-4 text-kumo-warning",
+				role: "status",
+				children: [/* @__PURE__ */ jsx(Warning, { className: "mt-0.5 h-5 w-5 shrink-0" }), /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("p", {
+					className: "font-medium",
+					children: _t({
+						id: "+2GRS6",
+						message: "Release is too new to install"
+					})
+				}), /* @__PURE__ */ jsx("p", {
+					className: "mt-1 text-sm text-kumo-default",
+					children: _t({
+						id: "77FdWO",
+						message: "Your site requires releases to be at least {0} old before they can be installed. This release will become installable later.",
+						values: { 0: formatHoldback(config.policy?.minimumReleaseAgeSeconds ?? 0) }
+					})
+				})] })]
+			}) : null,
+			profile?.description ? /* @__PURE__ */ jsx("p", {
+				className: "text-base text-kumo-default",
+				children: profile.description
+			}) : null,
+			capabilities.length > 0 ? /* @__PURE__ */ jsxs("section", { children: [/* @__PURE__ */ jsx("h2", {
+				className: "text-sm font-semibold text-kumo-subtle",
+				children: _t({
+					id: "FENDVB",
+					message: "Declared permissions"
+				})
+			}), /* @__PURE__ */ jsx("div", {
+				className: "mt-2 flex flex-wrap gap-2",
+				children: capabilities.map((c) => /* @__PURE__ */ jsx(Badge, { children: c }, c))
+			})] }) : null,
+			showConsent && release ? /* @__PURE__ */ jsx(CapabilityConsentDialog, {
+				mode: "install",
+				pluginName: profile?.name ?? slug,
+				capabilities,
+				isPending: installMutation.isPending,
+				error: getMutationError(installMutation.error),
+				onConfirm: () => installMutation.mutate(),
+				onCancel: () => {
+					setShowConsent(false);
+					installMutation.reset();
+				}
+			}) : null
+		]
+	});
+}
+function BackLink() {
+	const { _: _t2 } = useLingui();
+	return /* @__PURE__ */ jsxs(Link$1, {
+		to: "/plugins/marketplace",
+		className: "inline-flex items-center gap-1 text-sm text-kumo-subtle hover:text-kumo-default",
+		children: [/* @__PURE__ */ jsx(ArrowPrev, { className: "h-4 w-4" }), _t2({
+			id: "fnGsOh",
+			message: "Back to plugins"
+		})]
+	});
+}
+/**
+* Flatten an RFC-0001 `declaredAccess` block (`{ content: { read: true },
+* email: { send: { allowedHosts: [...] } }, ... }`) into the legacy
+* `capabilities: string[]` shape that the existing sandbox runtime
+* enforces today. One entry per declared operation under each
+* category. Unknown values are skipped silently -- the consent dialog
+* shows only what the current runtime recognises.
+*/
+function declaredAccessToCapabilityList(declaredAccess) {
+	if (!declaredAccess || typeof declaredAccess !== "object") return [];
+	const out = [];
+	for (const [category, value] of Object.entries(declaredAccess)) {
+		if (!value || typeof value !== "object") continue;
+		for (const [operation, opValue] of Object.entries(value)) {
+			if (opValue === false) continue;
+			out.push(`${category}:${operation}`);
+		}
+	}
+	return out;
+}
+function formatDate(iso) {
+	try {
+		return new Date(iso).toLocaleDateString();
+	} catch {
+		return iso;
+	}
+}
+function formatHoldback(seconds) {
+	if (seconds <= 0) return "0s";
+	if (seconds < 3600) return `${Math.round(seconds / 60)} min`;
+	if (seconds < 1440 * 60) return `${Math.round(seconds / 60 / 60)} h`;
+	return `${Math.round(seconds / 60 / 60 / 24)} d`;
+}
+
 //#endregion
 //#region src/components/SandboxedPluginPage.tsx
 /**
@@ -24556,15 +25516,25 @@ function GeneralSettings() {
 								/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx(Label, { children: _t({
 									id: "iG7KNr",
 									message: "Logo"
-								}) }), formData.logo?.url ? /* @__PURE__ */ jsxs("div", {
+								}) }), formData.logo?.mediaId ? /* @__PURE__ */ jsxs("div", {
 									className: "mt-2 space-y-2",
-									children: [/* @__PURE__ */ jsx("img", {
+									children: [formData.logo.url ? /* @__PURE__ */ jsx("img", {
 										src: formData.logo.url,
 										alt: formData.logo.alt || _t({
 											id: "iG7KNr",
 											message: "Logo"
 										}),
 										className: "h-16 rounded border bg-kumo-tint object-contain p-2"
+									}) : /* @__PURE__ */ jsxs("div", {
+										className: "flex min-h-16 items-center gap-2 rounded border border-dashed bg-kumo-tint px-3 py-2 text-sm text-kumo-subtle",
+										role: "status",
+										children: [/* @__PURE__ */ jsx(WarningCircle, {
+											className: "h-4 w-4 flex-shrink-0",
+											"aria-hidden": "true"
+										}), /* @__PURE__ */ jsx("span", { children: _t({
+											id: "Ja5IhY",
+											message: "The referenced logo is no longer available. Pick a new one or remove the reference."
+										}) })]
 									}), /* @__PURE__ */ jsxs("div", {
 										className: "flex gap-2",
 										children: [/* @__PURE__ */ jsx(Button, {
@@ -24603,15 +25573,25 @@ function GeneralSettings() {
 								/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx(Label, { children: _t({
 									id: "+Qaboy",
 									message: "Favicon"
-								}) }), formData.favicon?.url ? /* @__PURE__ */ jsxs("div", {
+								}) }), formData.favicon?.mediaId ? /* @__PURE__ */ jsxs("div", {
 									className: "mt-2 space-y-2",
-									children: [/* @__PURE__ */ jsx("img", {
+									children: [formData.favicon.url ? /* @__PURE__ */ jsx("img", {
 										src: formData.favicon.url,
 										alt: _t({
 											id: "+Qaboy",
 											message: "Favicon"
 										}),
 										className: "h-8 w-8 rounded border bg-kumo-tint object-contain p-1"
+									}) : /* @__PURE__ */ jsxs("div", {
+										className: "flex min-h-8 items-center gap-2 rounded border border-dashed bg-kumo-tint px-2 py-1 text-xs text-kumo-subtle",
+										role: "status",
+										children: [/* @__PURE__ */ jsx(WarningCircle, {
+											className: "h-3 w-3 flex-shrink-0",
+											"aria-hidden": "true"
+										}), /* @__PURE__ */ jsx("span", { children: _t({
+											id: "z58F7a",
+											message: "Referenced favicon unavailable."
+										}) })]
 									}), /* @__PURE__ */ jsxs("div", {
 										className: "flex gap-2",
 										children: [/* @__PURE__ */ jsx(Button, {
@@ -24722,6 +25702,7 @@ function GeneralSettings() {
 				onOpenChange: setLogoPickerOpen,
 				onSelect: handleLogoSelect,
 				mimeTypeFilter: "image/",
+				localOnly: true,
 				title: _t({
 					id: "JUZ3aC",
 					message: "Select Logo"
@@ -24732,6 +25713,7 @@ function GeneralSettings() {
 				onOpenChange: setFaviconPickerOpen,
 				onSelect: handleFaviconSelect,
 				mimeTypeFilter: "image/",
+				localOnly: true,
 				title: _t({
 					id: "LmzxcB",
 					message: "Select Favicon"
@@ -25237,6 +26219,7 @@ function SeoSettings() {
 	});
 	const [formData, setFormData] = React$1.useState({});
 	const [saveStatus, setSaveStatus] = React$1.useState(null);
+	const [ogImagePickerOpen, setOgImagePickerOpen] = React$1.useState(false);
 	React$1.useEffect(() => {
 		if (settings) setFormData(settings);
 	}, [settings]);
@@ -25281,6 +26264,29 @@ function SeoSettings() {
 			}
 		}));
 	};
+	const handleDefaultOgImageSelect = (media) => {
+		setFormData((prev) => ({
+			...prev,
+			seo: {
+				...prev.seo,
+				defaultOgImage: {
+					mediaId: media.id,
+					alt: media.alt || "",
+					url: media.url
+				}
+			}
+		}));
+		setOgImagePickerOpen(false);
+	};
+	const handleDefaultOgImageRemove = () => {
+		setFormData((prev) => ({
+			...prev,
+			seo: {
+				...prev.seo,
+				defaultOgImage: void 0
+			}
+		}));
+	};
 	if (isLoading) return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
 		children: [/* @__PURE__ */ jsxs("div", {
@@ -25363,6 +26369,73 @@ function SeoSettings() {
 									message: "Character between page title and site name (e.g., \"My Post | My Site\")"
 								})
 							}),
+							/* @__PURE__ */ jsxs("div", { children: [
+								/* @__PURE__ */ jsx(Label, { children: _t({
+									id: "rqCo6p",
+									message: "Default Social Image"
+								}) }),
+								/* @__PURE__ */ jsx("p", {
+									className: "mt-1 text-sm text-kumo-subtle",
+									children: _t({
+										id: "YkLTCK",
+										message: "Used as the fallback Open Graph image when a page has none. Recommended size: 1200×630."
+									})
+								}),
+								formData.seo?.defaultOgImage?.mediaId ? /* @__PURE__ */ jsxs("div", {
+									className: "mt-2 space-y-2",
+									children: [formData.seo.defaultOgImage.url ? /* @__PURE__ */ jsx("img", {
+										src: formData.seo.defaultOgImage.url,
+										alt: formData.seo.defaultOgImage.alt || _t({
+											id: "GOoV+w",
+											message: "Default social image"
+										}),
+										className: "h-32 rounded border bg-kumo-tint object-contain p-2"
+									}) : /* @__PURE__ */ jsxs("div", {
+										className: "flex min-h-32 items-center gap-2 rounded border border-dashed bg-kumo-tint px-3 py-2 text-sm text-kumo-subtle",
+										role: "status",
+										children: [/* @__PURE__ */ jsx(WarningCircle, {
+											className: "h-4 w-4 flex-shrink-0",
+											"aria-hidden": "true"
+										}), /* @__PURE__ */ jsx("span", { children: _t({
+											id: "xPSZCT",
+											message: "The referenced image is no longer available. Pick a new one or remove the reference."
+										}) })]
+									}), /* @__PURE__ */ jsxs("div", {
+										className: "flex gap-2",
+										children: [/* @__PURE__ */ jsx(Button, {
+											type: "button",
+											variant: "outline",
+											size: "sm",
+											icon: /* @__PURE__ */ jsx(Upload, {}),
+											onClick: () => setOgImagePickerOpen(true),
+											children: _t({
+												id: "mwX/w0",
+												message: "Change Image"
+											})
+										}), /* @__PURE__ */ jsx(Button, {
+											type: "button",
+											variant: "outline",
+											size: "sm",
+											icon: /* @__PURE__ */ jsx(X, {}),
+											onClick: handleDefaultOgImageRemove,
+											children: _t({
+												id: "t/YqKh",
+												message: "Remove"
+											})
+										})]
+									})]
+								}) : /* @__PURE__ */ jsx(Button, {
+									type: "button",
+									variant: "outline",
+									icon: /* @__PURE__ */ jsx(Upload, {}),
+									onClick: () => setOgImagePickerOpen(true),
+									className: "mt-2",
+									children: _t({
+										id: "bAiEJP",
+										message: "Select Image"
+									})
+								})
+							] }),
 							/* @__PURE__ */ jsx(Input, {
 								label: _t({
 									id: "uP6I1q",
@@ -25414,6 +26487,22 @@ function SeoSettings() {
 						})
 					})
 				})]
+			}),
+			/* @__PURE__ */ jsx(MediaPickerModal, {
+				open: ogImagePickerOpen,
+				onOpenChange: setOgImagePickerOpen,
+				onSelect: handleDefaultOgImageSelect,
+				mimeTypeFilters: [
+					"image/jpeg",
+					"image/png",
+					"image/webp",
+					"image/gif"
+				],
+				localOnly: true,
+				title: _t({
+					id: "lxsmBp",
+					message: "Select Default Social Image"
+				})
 			})
 		]
 	});
@@ -26790,7 +27879,16 @@ function SidebarNav({ manifest }) {
 			minRole: ROLE_ADMIN$1
 		}
 	];
-	if (manifest.marketplace) adminItems.push({
+	if (manifest.registry) adminItems.push({
+		to: "/plugins/marketplace",
+		label: _t({
+			id: "kVxO/O",
+			message: "Registry"
+		}),
+		icon: Storefront,
+		minRole: ROLE_ADMIN$1
+	});
+	else if (manifest.marketplace) adminItems.push({
 		to: "/plugins/marketplace",
 		label: _t({
 			id: "Zt5PUS",
@@ -26798,7 +27896,8 @@ function SidebarNav({ manifest }) {
 		}),
 		icon: Storefront,
 		minRole: ROLE_ADMIN$1
-	}, {
+	});
+	if (manifest.marketplace) adminItems.push({
 		to: "/themes/marketplace",
 		label: _t({
 			id: "fJ3EbT",
@@ -34839,6 +35938,7 @@ function ContentListPage() {
 	const items = React$1.useMemo(() => {
 		return data?.pages.flatMap((page) => page.items) || [];
 	}, [data]);
+	const total = data?.pages[0]?.total ?? items.length;
 	if (!manifest) return /* @__PURE__ */ jsx(LoadingScreen, {});
 	const collectionConfig = manifest.collections[collection];
 	if (!collectionConfig) return /* @__PURE__ */ jsx(NotFoundPage, { message: `Collection "${collection}" not found` });
@@ -34869,7 +35969,8 @@ function ContentListPage() {
 		onLocaleChange: handleLocaleChange,
 		urlPattern: collectionConfig.urlPattern,
 		sort,
-		onSortChange: setSort
+		onSortChange: setSort,
+		total
 	});
 }
 const contentNewRoute = createRoute({
@@ -35460,9 +36561,14 @@ const mediaRoute = createRoute({
 });
 function MediaPage() {
 	const queryClient = useQueryClient();
-	const { data, isLoading, error } = useQuery({
+	const { data, fetchNextPage, hasNextPage, isFetchingNextPage, isLoading, error } = useInfiniteQuery({
 		queryKey: ["media"],
-		queryFn: () => fetchMediaList()
+		queryFn: ({ pageParam }) => fetchMediaList({
+			cursor: pageParam,
+			limit: 100
+		}),
+		initialPageParam: void 0,
+		getNextPageParam: (lastPage) => lastPage.nextCursor
 	});
 	const uploadMutation = useMutation({
 		mutationFn: (file) => uploadMedia(file),
@@ -35476,10 +36582,15 @@ function MediaPage() {
 			queryClient.invalidateQueries({ queryKey: ["media"] });
 		}
 	});
+	const items = React$1.useMemo(() => {
+		return data?.pages.flatMap((page) => page.items) || [];
+	}, [data]);
 	if (error) return /* @__PURE__ */ jsx(ErrorScreen, { error: error.message });
 	return /* @__PURE__ */ jsx(MediaLibrary, {
-		items: data?.items || [],
-		isLoading,
+		items,
+		isLoading: isLoading || isFetchingNextPage,
+		hasMore: !!hasNextPage,
+		onLoadMore: () => void fetchNextPage(),
 		onUpload: (file) => uploadMutation.mutate(file),
 		onDelete: (id) => deleteMutation.mutate(id)
 	});
@@ -35716,6 +36827,10 @@ const marketplaceBrowseRoute = createRoute({
 	component: MarketplaceBrowsePage
 });
 function MarketplaceBrowsePage() {
+	const { data: manifest } = useQuery({
+		queryKey: ["manifest"],
+		queryFn: fetchManifest
+	});
 	const { data: plugins } = useQuery({
 		queryKey: ["plugins"],
 		queryFn: async () => {
@@ -35723,10 +36838,18 @@ function MarketplaceBrowsePage() {
 			return fetchPlugins();
 		}
 	});
-	return /* @__PURE__ */ jsx(MarketplaceBrowse, { installedPluginIds: React$1.useMemo(() => {
+	const installedIds = React$1.useMemo(() => {
 		if (!plugins) return /* @__PURE__ */ new Set();
 		return new Set(plugins.map((p) => p.id));
-	}, [plugins]) });
+	}, [plugins]);
+	if (manifest?.registry) {
+		const installedRegistryUris = new Set((plugins ?? []).filter((p) => p.source === "registry" && p.registryPublisherDid && p.registrySlug).map((p) => `at://${p.registryPublisherDid}/com.emdashcms.experimental.package.profile/${p.registrySlug}`));
+		return /* @__PURE__ */ jsx(RegistryBrowse, {
+			config: manifest.registry,
+			installedRegistryUris
+		});
+	}
+	return /* @__PURE__ */ jsx(MarketplaceBrowse, { installedPluginIds: installedIds });
 }
 const marketplaceDetailRoute = createRoute({
 	getParentRoute: () => adminLayoutRoute,
@@ -35735,6 +36858,10 @@ const marketplaceDetailRoute = createRoute({
 });
 function MarketplaceDetailPage() {
 	const { pluginId } = useParams({ from: "/_admin/plugins/marketplace/$pluginId" });
+	const { data: manifest } = useQuery({
+		queryKey: ["manifest"],
+		queryFn: fetchManifest
+	});
 	const { data: plugins } = useQuery({
 		queryKey: ["plugins"],
 		queryFn: async () => {
@@ -35742,12 +36869,18 @@ function MarketplaceDetailPage() {
 			return fetchPlugins();
 		}
 	});
+	const installedIds = React$1.useMemo(() => {
+		if (!plugins) return /* @__PURE__ */ new Set();
+		return new Set(plugins.map((p) => p.id));
+	}, [plugins]);
+	const looksLikeRegistryId = pluginId.includes("/");
+	if (manifest?.registry && looksLikeRegistryId) return /* @__PURE__ */ jsx(RegistryPluginDetail, {
+		pluginId,
+		config: manifest.registry
+	});
 	return /* @__PURE__ */ jsx(MarketplacePluginDetail, {
 		pluginId,
-		installedPluginIds: React$1.useMemo(() => {
-			if (!plugins) return /* @__PURE__ */ new Set();
-			return new Set(plugins.map((p) => p.id));
-		}, [plugins])
+		installedPluginIds: installedIds
 	});
 }
 const themeMarketplaceBrowseRoute = createRoute({