@emdash-cms/admin 0.12.0 → 0.13.0

package/dist/index.js

@@ -1,5 +1,5 @@
 import { c as fetchAuthMode, d as throwResponseError, i as fetchPlugins, l as fetchManifest, n as enablePlugin, o as API_BASE, r as fetchPlugin, s as apiFetch, t as disablePlugin, u as parseApiResponse } from "./plugins-qrjvPK4g.js";
-import { a as SUPPORTED_LOCALES, i as DEFAULT_LOCALE, l as resolveLocale, n as useLocale, o as SUPPORTED_LOCALE_CODES, t as LocaleDirectionProvider } from "./LocaleDirectionProvider-cjRhNz57.js";
+import { a as SUPPORTED_LOCALES, i as DEFAULT_LOCALE, l as resolveLocale, n as useLocale, o as SUPPORTED_LOCALE_CODES, t as LocaleDirectionProvider } from "./LocaleDirectionProvider-rC0KuZjM.js";
 import "./locales/index.js";
 import { Badge, Button, Checkbox, CommandPalette, Dialog, Input, InputArea, Label, LinkButton, Loader, Popover, Select, Sidebar as KumoSidebar, Switch, Tabs, Toast, Toasty, Tooltip, buttonVariants, useSidebar } from "@cloudflare/kumo";
 import { i18n } from "@lingui/core";
@@ -10,7 +10,7 @@ import * as React$1 from "react";
 import React, { createContext, useCallback, useContext, useEffect, useState } from "react";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { Dialog as Dialog$1 } from "@cloudflare/kumo/primitives";
-import { ArrowCounterClockwise, ArrowRight, ArrowRightIcon, ArrowSquareOut, ArrowUUpLeft, ArrowUUpRight, ArrowsClockwise, ArrowsInSimple, ArrowsLeftRight, ArrowsOutSimple, BracketsCurly, Calendar, CalendarBlank, CaretDown, CaretRightIcon, CaretUp, CaretUpDown, ChatCircle, Check, CheckCircle, CircleDashed, CircleNotch, ClockCounterClockwise, Cloud, Code, CodeBlock, Columns, Copy, Cube, Database, DeviceMobile, DotsSixVertical, DownloadSimple, Envelope, EnvelopeSimple, Eye, EyeSlash, File, FileArrowDown, FileText, FloppyDisk, FolderOpen, Gear, GithubLogo, Globe, GlobeSimple, GridFour, HardDrive, Hash, Image as Image$1, ImageSquare, Info, Key, Link as Link$2, LinkBreak, LinkSimple, List, ListBullets, ListChecks, ListNumbers, MagnifyingGlass, Minus, Monitor, Moon, Palette, PaperPlaneTilt, Paperclip, Paragraph, Pencil, PencilSimple, PlugsConnected, Plus, Prohibit, PuzzlePiece, Quotes, Rows, Ruler, ShareNetwork, Shield, ShieldCheck, ShieldWarning, SignOut, SlidersHorizontal, Sparkle, SquaresFour, Stack, Storefront, Sun, Table, TextAlignCenter, TextAlignLeft, TextAlignRight, TextB, TextHOne, TextHThree, TextHTwo, TextItalic, TextStrikethrough, TextT, TextUnderline, ToggleLeft, Trash, Upload, User, UserCircle, UserPlus, Users, Warning, WarningCircle, WebhooksLogo, X, YoutubeLogo } from "@phosphor-icons/react";
+import { ArrowCounterClockwise, ArrowRight, ArrowRightIcon, ArrowSquareOut, ArrowUUpLeft, ArrowUUpRight, ArrowsClockwise, ArrowsInSimple, ArrowsLeftRight, ArrowsOutSimple, BracketsCurly, Calendar, CalendarBlank, CaretDown, CaretRightIcon, CaretUp, CaretUpDown, ChatCircle, Check, CheckCircle, CircleDashed, CircleNotch, ClockCounterClockwise, Cloud, Code, CodeBlock, Columns, Copy, Cube, Database, DeviceMobile, DotsSixVertical, DownloadSimple, Envelope, EnvelopeSimple, Eye, EyeSlash, File, FileArrowDown, FileText, FloppyDisk, FolderOpen, Gear, GithubLogo, Globe, GlobeSimple, GridFour, HardDrive, Hash, Image as Image$1, ImageBroken, ImageSquare, Info, Key, Link as Link$2, LinkBreak, LinkSimple, List, ListBullets, ListChecks, ListNumbers, MagnifyingGlass, Minus, Monitor, Moon, Palette, PaperPlaneTilt, Paperclip, Paragraph, Pencil, PencilSimple, PlugsConnected, Plus, Prohibit, PuzzlePiece, Quotes, Rows, Ruler, ShareNetwork, Shield, ShieldCheck, ShieldWarning, SignOut, SlidersHorizontal, Sparkle, SquaresFour, Stack, Storefront, Sun, Table, TextAlignCenter, TextAlignLeft, TextAlignRight, TextB, TextHOne, TextHThree, TextHTwo, TextItalic, TextStrikethrough, TextT, TextUnderline, ToggleLeft, Trash, Upload, User, UserCircle, UserPlus, Users, Warning, WarningCircle, WebhooksLogo, X, YoutubeLogo } from "@phosphor-icons/react";
 import { clsx } from "clsx";
 import { twMerge } from "tailwind-merge";
 import { DndContext, DragOverlay, KeyboardSensor, PointerSensor, closestCenter, rectIntersection, useDraggable, useDroppable, useSensor, useSensors } from "@dnd-kit/core";
@@ -2053,7 +2053,7 @@ async function createMenuItem(menuName, input, options = {}) {
 * Update a menu item
 */
 async function updateMenuItem(menuName, itemId, input, options = {}) {
-	return parseApiResponse(await apiFetch(withLocale$1(`${API_BASE}/menus/${menuName}/items?id=${itemId}`, options.locale), {
+	return parseApiResponse(await apiFetch(withLocale$1(`${API_BASE}/menus/${menuName}/items/${itemId}`, options.locale), {
 		method: "PUT",
 		headers: { "Content-Type": "application/json" },
 		body: JSON.stringify(input)
@@ -2063,7 +2063,7 @@ async function updateMenuItem(menuName, itemId, input, options = {}) {
 * Delete a menu item
 */
 async function deleteMenuItem(menuName, itemId, options = {}) {
-	const response = await apiFetch(withLocale$1(`${API_BASE}/menus/${menuName}/items?id=${itemId}`, options.locale), { method: "DELETE" });
+	const response = await apiFetch(withLocale$1(`${API_BASE}/menus/${menuName}/items/${itemId}`, options.locale), { method: "DELETE" });
 	if (!response.ok) await throwResponseError(response, i18n._({
 		id: "HNaiZF",
 		message: "Failed to delete menu item"
@@ -3874,7 +3874,11 @@ function ProviderMediaItem({ item, selected, onClick, onDoubleClick, onDimension
 function BlockKitMediaPickerField({ actionId, label, placeholder, mimeTypeFilter, value, onChange }) {
 	const { _: _t } = useLingui();
 	const [pickerOpen, setPickerOpen] = React$1.useState(false);
+	const [imageBroken, setImageBroken] = React$1.useState(false);
 	const url = typeof value === "string" && value.length > 0 ? value : "";
+	React$1.useEffect(() => {
+		setImageBroken(false);
+	}, [url]);
 	const filter = mimeTypeFilter ?? "image/";
 	const canPreview = isSafePreviewUrl(url);
 	const handleSelect = (item) => {
@@ -3889,14 +3893,50 @@ function BlockKitMediaPickerField({ actionId, label, placeholder, mimeTypeFilter
 			className: "text-sm font-medium mb-1.5 block",
 			children: label
 		}),
-		canPreview ? /* @__PURE__ */ jsxs("div", {
+		canPreview ? imageBroken ? /* @__PURE__ */ jsxs("div", {
+			className: "relative group min-h-20",
+			children: [/* @__PURE__ */ jsxs("div", {
+				className: "min-h-20 w-full rounded-md border border-kumo-line bg-kumo-muted flex items-center justify-center gap-2 text-kumo-subtle",
+				children: [/* @__PURE__ */ jsx(ImageBroken, { className: "h-5 w-5" }), /* @__PURE__ */ jsx("span", {
+					className: "text-sm",
+					children: _t({
+						id: "1pdLQw",
+						message: "Image not found"
+					})
+				})]
+			}), /* @__PURE__ */ jsxs("div", {
+				className: "absolute top-2 end-2 opacity-0 pointer-events-none group-hover:opacity-100 group-hover:pointer-events-auto group-focus-within:opacity-100 group-focus-within:pointer-events-auto transition-opacity flex gap-1",
+				children: [/* @__PURE__ */ jsx(Button, {
+					type: "button",
+					size: "sm",
+					variant: "secondary",
+					onClick: () => setPickerOpen(true),
+					children: _t({
+						id: "o+XJ9D",
+						message: "Change"
+					})
+				}), /* @__PURE__ */ jsx(Button, {
+					type: "button",
+					shape: "square",
+					variant: "destructive",
+					className: "h-8 w-8",
+					onClick: () => onChange(actionId, ""),
+					"aria-label": _t({
+						id: "t/YqKh",
+						message: "Remove"
+					}),
+					children: /* @__PURE__ */ jsx(X, { className: "h-4 w-4" })
+				})]
+			})]
+		}) : /* @__PURE__ */ jsxs("div", {
 			className: "relative group",
 			children: [/* @__PURE__ */ jsx("img", {
 				src: url,
 				alt: "",
-				className: "max-h-40 w-full rounded-md border border-kumo-line object-contain bg-kumo-muted",
+				className: "max-h-40 min-h-20 w-full rounded-md border border-kumo-line object-contain bg-kumo-muted",
 				referrerPolicy: "no-referrer",
-				loading: "lazy"
+				loading: "lazy",
+				onError: () => setImageBroken(true)
 			}), /* @__PURE__ */ jsxs("div", {
 				className: "absolute top-2 end-2 opacity-0 pointer-events-none group-hover:opacity-100 group-hover:pointer-events-auto group-focus-within:opacity-100 group-focus-within:pointer-events-auto transition-opacity flex gap-1",
 				children: [/* @__PURE__ */ jsx(Button, {
@@ -7402,6 +7442,10 @@ function SlashCommandMenu({ state, onCommand, onClose: _onClose, setSelectedInde
 		const selected = container.querySelector(`[data-index="${state.selectedIndex}"]`);
 		if (selected) selected.scrollIntoView({ block: "nearest" });
 	}, [state.selectedIndex, state.isOpen]);
+	const hasMouseMovedRef = React$1.useRef(false);
+	React$1.useEffect(() => {
+		if (!state.isOpen) hasMouseMovedRef.current = false;
+	}, [state.isOpen]);
 	if (!state.isOpen) return null;
 	return createPortal(/* @__PURE__ */ jsx("div", {
 		ref: (node) => {
@@ -7410,6 +7454,9 @@ function SlashCommandMenu({ state, onCommand, onClose: _onClose, setSelectedInde
 		},
 		style: floatingStyles,
 		className: "z-[100] rounded-lg border bg-kumo-overlay p-1 shadow-lg min-w-[220px] max-h-[300px] overflow-y-auto",
+		onPointerMove: () => {
+			hasMouseMovedRef.current = true;
+		},
 		children: state.items.length === 0 ? /* @__PURE__ */ jsx("p", {
 			className: "text-sm text-kumo-subtle px-3 py-2",
 			children: _t({
@@ -7421,7 +7468,9 @@ function SlashCommandMenu({ state, onCommand, onClose: _onClose, setSelectedInde
 			"data-index": index,
 			className: cn("flex items-center gap-3 w-full px-3 py-2 text-sm rounded text-start", index === state.selectedIndex ? "bg-kumo-tint text-kumo-default" : "hover:bg-kumo-tint/50"),
 			onClick: () => onCommand(item),
-			onMouseEnter: () => setSelectedIndex(index),
+			onMouseEnter: () => {
+				if (hasMouseMovedRef.current) setSelectedIndex(index);
+			},
 			children: [/* @__PURE__ */ jsx(item.icon, { className: "h-4 w-4 text-kumo-subtle flex-shrink-0" }), /* @__PURE__ */ jsxs("div", {
 				className: "flex flex-col",
 				children: [/* @__PURE__ */ jsx("span", {
@@ -11397,7 +11446,11 @@ function JsonFieldEditor({ label, id, value, onChange, required }) {
 function ImageFieldRenderer({ id, label, description, value, onChange, required, allowedMimeTypes, fieldId }) {
 	const { _: _t5 } = useLingui();
 	const [pickerOpen, setPickerOpen] = React$1.useState(false);
+	const [imageBroken, setImageBroken] = React$1.useState(false);
 	const displayUrl = typeof value === "string" ? value : value?.previewUrl || value?.src || (value && (!value.provider || value.provider === "local") ? `/_emdash/api/media/file/${typeof value.meta?.storageKey === "string" ? value.meta.storageKey : value.id}` : void 0);
+	React$1.useEffect(() => {
+		setImageBroken(false);
+	}, [displayUrl]);
 	const handleSelect = (item) => {
 		const isLocalProvider = !item.provider || item.provider === "local";
 		onChange({
@@ -11420,12 +11473,48 @@ function ImageFieldRenderer({ id, label, description, value, onChange, required,
 		id,
 		children: [
 			/* @__PURE__ */ jsx(Label, { children: label }),
-			displayUrl ? /* @__PURE__ */ jsxs("div", {
+			displayUrl ? imageBroken ? /* @__PURE__ */ jsxs("div", {
+				className: "mt-2 relative group",
+				children: [/* @__PURE__ */ jsxs("div", {
+					className: "min-h-20 rounded-lg border bg-kumo-muted flex items-center justify-center gap-2 text-kumo-subtle",
+					children: [/* @__PURE__ */ jsx(ImageBroken, { className: "h-5 w-5" }), /* @__PURE__ */ jsx("span", {
+						className: "text-sm",
+						children: _t5({
+							id: "1pdLQw",
+							message: "Image not found"
+						})
+					})]
+				}), /* @__PURE__ */ jsxs("div", {
+					className: "absolute top-2 end-2 opacity-0 group-hover:opacity-100 transition-opacity flex gap-1",
+					children: [/* @__PURE__ */ jsx(Button, {
+						type: "button",
+						size: "sm",
+						variant: "secondary",
+						onClick: () => setPickerOpen(true),
+						children: _t5({
+							id: "o+XJ9D",
+							message: "Change"
+						})
+					}), /* @__PURE__ */ jsx(Button, {
+						type: "button",
+						shape: "square",
+						variant: "destructive",
+						className: "h-8 w-8",
+						onClick: handleRemove,
+						"aria-label": _t5({
+							id: "5ywtDz",
+							message: "Remove image"
+						}),
+						children: /* @__PURE__ */ jsx(X, { className: "h-4 w-4" })
+					})]
+				})]
+			}) : /* @__PURE__ */ jsxs("div", {
 				className: "mt-2 relative group",
 				children: [/* @__PURE__ */ jsx("img", {
 					src: displayUrl,
 					alt: "",
-					className: "max-h-48 rounded-lg border object-cover"
+					className: "max-h-48 min-h-20 rounded-lg border object-cover",
+					onError: () => setImageBroken(true)
 				}), /* @__PURE__ */ jsxs("div", {
 					className: "absolute top-2 end-2 opacity-0 group-hover:opacity-100 transition-opacity flex gap-1",
 					children: [/* @__PURE__ */ jsx(Button, {
@@ -12091,7 +12180,7 @@ function getItemTitle$1(item) {
 /**
 * Content list view with table display and trash tab
 */
-function ContentList({ collection, collectionLabel, items, trashedItems = [], isLoading, isTrashedLoading, onDelete, onDuplicate, onRestore, onPermanentDelete, onLoadMore, onLoadMoreTrashed, hasMore, hasMoreTrashed, trashedCount = 0, i18n: i18n$2, activeLocale, onLocaleChange, urlPattern, sort, onSortChange }) {
+function ContentList({ collection, collectionLabel, items, trashedItems = [], isLoading, isTrashedLoading, onDelete, onDuplicate, onRestore, onPermanentDelete, onLoadMore, onLoadMoreTrashed, hasMore, hasMoreTrashed, trashedCount = 0, i18n, activeLocale, onLocaleChange, urlPattern, sort, onSortChange, total }) {
 	const { _: _t } = useLingui();
 	const [activeTab, setActiveTab] = React$1.useState("all");
 	const [searchQuery, setSearchQuery] = React$1.useState("");
@@ -12105,13 +12194,16 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 		const query = searchQuery.toLowerCase();
 		return items.filter((item) => getItemTitle$1(item).toLowerCase().includes(query));
 	}, [items, searchQuery]);
-	const totalPages = Math.max(1, Math.ceil(filteredItems.length / PAGE_SIZE));
-	const paginatedItems = filteredItems.slice(page * PAGE_SIZE, (page + 1) * PAGE_SIZE);
+	const effectiveTotal = typeof total === "number" && !searchQuery ? total : filteredItems.length;
+	const totalPages = Math.max(1, Math.ceil(effectiveTotal / PAGE_SIZE));
+	const clampedPage = Math.min(page, totalPages - 1);
+	const paginatedItems = filteredItems.slice(clampedPage * PAGE_SIZE, (clampedPage + 1) * PAGE_SIZE);
 	React$1.useEffect(() => {
-		if (page >= totalPages - 1 && hasMore && onLoadMore && !searchQuery) onLoadMore();
+		if (!hasMore || !onLoadMore || searchQuery) return;
+		if (clampedPage >= Math.ceil(filteredItems.length / PAGE_SIZE) - 1) onLoadMore();
 	}, [
-		page,
-		totalPages,
+		clampedPage,
+		filteredItems.length,
 		hasMore,
 		onLoadMore,
 		searchQuery
@@ -12126,9 +12218,9 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 					children: [/* @__PURE__ */ jsx("h1", {
 						className: "text-2xl font-bold",
 						children: collectionLabel
-					}), i18n$2 && activeLocale && onLocaleChange && /* @__PURE__ */ jsx(LocaleSwitcher, {
-						locales: i18n$2.locales,
-						defaultLocale: i18n$2.defaultLocale,
+					}), i18n && activeLocale && onLocaleChange && /* @__PURE__ */ jsx(LocaleSwitcher, {
+						locales: i18n.locales,
+						defaultLocale: i18n.defaultLocale,
 						value: activeLocale,
 						onChange: onLocaleChange,
 						size: "sm"
@@ -12222,7 +12314,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 										message: "Status"
 									})
 								}),
-								i18n$2 && /* @__PURE__ */ jsx(SortableTh, {
+								i18n && /* @__PURE__ */ jsx(SortableTh, {
 									field: "locale",
 									sort,
 									onSortChange,
@@ -12252,7 +12344,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 						}) }), /* @__PURE__ */ jsx("tbody", {
 							className: "divide-y divide-kumo-line",
 							children: isLoading && items.length === 0 ? /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsx("td", {
-								colSpan: i18n$2 ? 5 : 4,
+								colSpan: i18n ? 5 : 4,
 								className: "px-4 py-8 text-center text-kumo-subtle",
 								children: /* @__PURE__ */ jsxs("span", {
 									className: "inline-flex items-center gap-2",
@@ -12262,7 +12354,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 									})]
 								})
 							}) }) : items.length === 0 ? /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsxs("td", {
-								colSpan: i18n$2 ? 5 : 4,
+								colSpan: i18n ? 5 : 4,
 								className: "px-4 py-8 text-center text-kumo-subtle",
 								children: [
 									_t({
@@ -12283,7 +12375,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 									})
 								]
 							}) }) : paginatedItems.length === 0 ? /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsx("td", {
-								colSpan: i18n$2 ? 5 : 4,
+								colSpan: i18n ? 5 : 4,
 								className: "px-4 py-8 text-center text-kumo-subtle",
 								children: _t({
 									id: "huTRDC",
@@ -12295,7 +12387,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 								collection,
 								onDelete,
 								onDuplicate,
-								showLocale: !!i18n$2,
+								showLocale: !!i18n,
 								urlPattern
 							}, item.id))
 						})]
@@ -12305,21 +12397,11 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 					className: "flex items-center justify-between",
 					children: [/* @__PURE__ */ jsx("span", {
 						className: "text-sm text-kumo-subtle",
-						children: searchQuery ? i18n._({
-							id: "Zzkfda",
-							message: "{0, plural, one {# item matching \"{searchQuery}\"} other {# items matching \"{searchQuery}\"}}",
-							values: {
-								0: filteredItems.length,
-								searchQuery
-							}
-						}) : i18n._({
-							id: "Ufffi8",
-							message: "{0, plural, one {#{1} item} other {#{2} items}}",
-							values: {
-								0: filteredItems.length,
-								1: hasMore ? "+" : "",
-								2: hasMore ? "+" : ""
-							}
+						children: renderItemCount({
+							searchQuery,
+							filteredCount: filteredItems.length,
+							total,
+							hasMore
 						})
 					}), /* @__PURE__ */ jsxs("div", {
 						className: "flex items-center gap-2",
@@ -12327,8 +12409,8 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 							/* @__PURE__ */ jsx(Button, {
 								variant: "outline",
 								shape: "square",
-								disabled: page === 0,
-								onClick: () => setPage(page - 1),
+								disabled: clampedPage === 0,
+								onClick: () => setPage(clampedPage - 1),
 								"aria-label": _t({
 									id: "aHKcKc",
 									message: "Previous page"
@@ -12341,7 +12423,7 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 							/* @__PURE__ */ jsxs("span", {
 								className: "text-sm",
 								children: [
-									page + 1,
+									clampedPage + 1,
 									" / ",
 									totalPages
 								]
@@ -12349,8 +12431,8 @@ function ContentList({ collection, collectionLabel, items, trashedItems = [], is
 							/* @__PURE__ */ jsx(Button, {
 								variant: "outline",
 								shape: "square",
-								disabled: page >= totalPages - 1,
-								onClick: () => setPage(page + 1),
+								disabled: clampedPage >= totalPages - 1,
+								onClick: () => setPage(clampedPage + 1),
 								"aria-label": _t({
 									id: "/dqduX",
 									message: "Next page"
@@ -12500,6 +12582,38 @@ function SortableTh({ field, sort, onSortChange, label }) {
 		})
 	});
 }
+/**
+* Render the row-count line above pagination. The rules are:
+* - A search query always wins — say how many matches there are.
+* - When the server reported a total, use it (no `+` suffix needed —
+*   we know the count).
+* - Otherwise fall back to the pre-refactor behavior: loaded count,
+*   with `+` when there are more pages the user hasn't fetched yet.
+*/
+function renderItemCount({ searchQuery, filteredCount, total, hasMore }) {
+	if (searchQuery) return i18n._({
+		id: "WqhW35",
+		message: "{filteredCount, plural, one {# item matching \"{searchQuery}\"} other {# items matching \"{searchQuery}\"}}",
+		values: {
+			filteredCount,
+			searchQuery
+		}
+	});
+	if (typeof total === "number") return i18n._({
+		id: "Q/6//K",
+		message: "{total, plural, one {# item} other {# items}}",
+		values: { total }
+	});
+	return i18n._({
+		id: "FWXiie",
+		message: "{filteredCount, plural, one {#{0} item} other {#{1} items}}",
+		values: {
+			0: hasMore ? "+" : "",
+			1: hasMore ? "+" : "",
+			filteredCount
+		}
+	});
+}
 function ContentListItem({ item, collection, onDelete, onDuplicate, showLocale, urlPattern }) {
 	const { _: _t2 } = useLingui();
 	const title = getItemTitle$1(item);
@@ -17828,6 +17942,7 @@ function PluginCard({ plugin, updateInfo, onEnable, onDisable, isToggling, hasMa
 	const queryClient = useQueryClient();
 	const toastManager = Toast.useToastManager();
 	const isMarketplace = plugin.source === "marketplace";
+	const isRegistry = plugin.source === "registry";
 	const hasUpdate = !!updateInfo && updateInfo.installed !== updateInfo.latest;
 	const updateMutation = useMutation({
 		mutationFn: () => updateMarketplacePlugin(plugin.id, { confirmCapabilities: true }),
@@ -18159,6 +18274,13 @@ function PluginCard({ plugin, updateInfo, onEnable, onDisable, isToggling, hasMa
 								message: "Uninstall"
 							})
 						})
+					}),
+					isRegistry && /* @__PURE__ */ jsx("div", {
+						className: "pt-2 border-t text-xs text-kumo-subtle",
+						children: _t2({
+							id: "YvXVtr",
+							message: "Uninstall is not yet available for registry plugins. Disable the plugin to stop it from running; full uninstall will land in a follow-up."
+						})
 					})
 				]
 			})]
@@ -18307,7 +18429,7 @@ function MarketplacePluginDetail({ pluginId, installedPluginIds = /* @__PURE__ *
 	const isInstalled = installedPluginIds.has(pluginId);
 	if (isLoading) return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
-		children: [/* @__PURE__ */ jsx(BackLink, {}), /* @__PURE__ */ jsxs("div", {
+		children: [/* @__PURE__ */ jsx(BackLink$1, {}), /* @__PURE__ */ jsxs("div", {
 			className: "animate-pulse space-y-4",
 			children: [
 				/* @__PURE__ */ jsxs("div", {
@@ -18325,7 +18447,7 @@ function MarketplacePluginDetail({ pluginId, installedPluginIds = /* @__PURE__ *
 	});
 	if (error || !plugin) return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
-		children: [/* @__PURE__ */ jsx(BackLink, {}), /* @__PURE__ */ jsxs("div", {
+		children: [/* @__PURE__ */ jsx(BackLink$1, {}), /* @__PURE__ */ jsxs("div", {
 			className: "rounded-lg border border-kumo-danger/50 bg-kumo-danger/10 p-6 text-center",
 			children: [
 				/* @__PURE__ */ jsx(Warning, { className: "mx-auto h-8 w-8 text-kumo-danger" }),
@@ -18363,7 +18485,7 @@ function MarketplacePluginDetail({ pluginId, installedPluginIds = /* @__PURE__ *
 	return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
 		children: [
-			/* @__PURE__ */ jsx(BackLink, {}),
+			/* @__PURE__ */ jsx(BackLink$1, {}),
 			/* @__PURE__ */ jsxs("div", {
 				className: "flex flex-col gap-4 sm:flex-row sm:items-start sm:justify-between",
 				children: [/* @__PURE__ */ jsxs("div", {
@@ -18642,7 +18764,7 @@ function MarketplacePluginDetail({ pluginId, installedPluginIds = /* @__PURE__ *
 		]
 	});
 }
-function BackLink() {
+function BackLink$1() {
 	const { _: _t2 } = useLingui();
 	return /* @__PURE__ */ jsxs(Link$1, {
 		to: "/plugins/marketplace",
@@ -18989,7 +19111,7 @@ function MediaDetailPanel({ item, onClose, onDeleted }) {
 											message: "Uploaded:"
 										})
 									}),
-									/* @__PURE__ */ jsx("span", { children: formatDate(item.createdAt) })
+									/* @__PURE__ */ jsx("span", { children: formatDate$1(item.createdAt) })
 								]
 							})
 						]
@@ -19107,7 +19229,7 @@ function MediaDetailPanel({ item, onClose, onDeleted }) {
 		onConfirm: () => deleteMutation.mutate()
 	})] });
 }
-function formatDate(isoString) {
+function formatDate$1(isoString) {
 	return new Date(isoString).toLocaleDateString(void 0, {
 		year: "numeric",
 		month: "short",
@@ -20304,7 +20426,7 @@ function MenuEditor() {
 		newItems[targetIndex] = currentItem;
 		const reorderedItems = newItems.map((item, i) => ({
 			id: item.id,
-			parentId: item.parent_id,
+			parentId: item.parentId,
 			sortOrder: i
 		}));
 		setLocalItems(newItems);
@@ -20583,9 +20705,9 @@ function MenuEditor() {
 							children: item.label
 						}), /* @__PURE__ */ jsxs("div", {
 							className: "text-sm text-kumo-subtle",
-							children: [item.type === "custom" ? item.custom_url : /* @__PURE__ */ jsx("span", {
+							children: [item.type === "custom" ? item.customUrl : /* @__PURE__ */ jsx("span", {
 								className: "inline-flex items-center rounded-full bg-kumo-brand/10 px-2 py-0.5 text-xs font-medium text-kumo-brand",
-								children: item.reference_collection ?? item.type
+								children: item.referenceCollection ?? item.type
 							}), item.target === "_blank" && _t({
 								id: "+Lmv8u",
 								message: " (opens in new window)"
@@ -20707,7 +20829,7 @@ function MenuEditor() {
 									id: "TQJouj",
 									message: "Enter a URL (https://…) or a relative path (/…)"
 								}),
-								defaultValue: editingItem.custom_url || ""
+								defaultValue: editingItem.customUrl || ""
 							}),
 							/* @__PURE__ */ jsxs(Select, {
 								label: _t({
@@ -21829,6 +21951,806 @@ function Redirects() {
 	});
 }
 
+//#endregion
+//#region src/lib/api/registry.ts
+let cachedDiscovery = null;
+async function getDiscoveryClient(config) {
+	if (cachedDiscovery && cachedDiscovery.config.aggregatorUrl === config.aggregatorUrl && cachedDiscovery.config.acceptLabelers === config.acceptLabelers) return cachedDiscovery.client;
+	const DiscoveryClient = (await import("@emdash-cms/registry-client/discovery")).DiscoveryClient;
+	const discovery = new DiscoveryClient({
+		aggregatorUrl: config.aggregatorUrl,
+		acceptLabelers: config.acceptLabelers
+	});
+	const wrapped = {
+		async searchPackages(opts) {
+			return await discovery.searchPackages({
+				q: opts.q,
+				cursor: opts.cursor,
+				limit: opts.limit
+			});
+		},
+		async resolvePackage(handle, slug) {
+			return await discovery.resolvePackage({
+				handle,
+				slug
+			});
+		},
+		async getPackage(did, slug) {
+			return await discovery.getPackage({
+				did,
+				slug
+			});
+		},
+		async getLatestRelease(did, slug) {
+			return await discovery.getLatestRelease({
+				did,
+				package: slug
+			});
+		},
+		async listReleases(did, slug, cursor) {
+			return await discovery.listReleases({
+				did,
+				package: slug,
+				cursor
+			});
+		}
+	};
+	cachedDiscovery = {
+		config,
+		client: wrapped
+	};
+	return wrapped;
+}
+/**
+* Returns whether a release should be considered installable given the
+* configured policy. Currently implements the minimum-release-age check
+* described in RFC 0001's "Pre-label gap and launch tempo" section,
+* plus the `minimumReleaseAgeExclude` allowlist.
+*
+* Returns `false` (release blocked) when the policy is configured but
+* the release is missing a valid `indexedAt` -- we fail closed rather
+* than silently letting unbounded-age releases through.
+*/
+function releasePassesPolicy(release, pkg, policy, now = Date.now()) {
+	if (!policy?.minimumReleaseAgeSeconds) return true;
+	if (releaseExemptFromMinimumAge(policy.minimumReleaseAgeExclude, pkg.did, pkg.slug)) return true;
+	const indexedAt = Date.parse(release.indexedAt);
+	if (!Number.isFinite(indexedAt)) return false;
+	return (now - indexedAt) / 1e3 >= policy.minimumReleaseAgeSeconds;
+}
+/**
+* Canonicalize a capabilities list for set-style comparison. Mirrors
+* the server-side helper `canonicalCapabilitiesForDriftCheck` in
+* `packages/core/src/registry/config.ts` -- both sides must produce
+* the same canonical shape so the install handler's drift check is
+* stable across reorderings, duplicates, and junk entries.
+*
+* Filters non-strings, deduplicates, and sorts lexically.
+*/
+function canonicalCapabilitiesForDriftCheck(value) {
+	if (!Array.isArray(value)) return [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const entry of value) if (typeof entry === "string" && entry.length > 0) seen.add(entry);
+	return [...seen].toSorted();
+}
+/**
+* Matches a `(publisher_did, slug)` against the
+* `minimumReleaseAgeExclude` allowlist. Mirrors the server-side helper
+* of the same name in `packages/core/src/registry/config.ts`.
+*
+* DID-only on purpose: handles are aggregator-supplied envelope data
+* and accepting them as a trust input would let a compromised
+* aggregator bypass the holdback by claiming any handle for any
+* package. DIDs are tied to the AT URI of the record itself.
+*
+* Entries from the config list have already been lowercased at
+* manifest build time, so this only needs to lowercase the runtime
+* values for comparison.
+*/
+function releaseExemptFromMinimumAge(exclude, publisherDid, slug) {
+	if (!exclude || exclude.length === 0) return false;
+	const didLower = publisherDid.toLowerCase();
+	const fullDid = `${didLower}/${slug.toLowerCase()}`;
+	for (const entry of exclude) {
+		if (entry === didLower) return true;
+		if (entry === fullDid) return true;
+	}
+	return false;
+}
+async function searchRegistryPackages(config, opts) {
+	return (await getDiscoveryClient(config)).searchPackages(opts);
+}
+async function resolveRegistryPackage(config, handle, slug) {
+	return (await getDiscoveryClient(config)).resolvePackage(handle, slug);
+}
+async function getRegistryPackage(config, did, slug) {
+	return (await getDiscoveryClient(config)).getPackage(did, slug);
+}
+async function getLatestRegistryRelease(config, did, slug) {
+	return (await getDiscoveryClient(config)).getLatestRelease(did, slug);
+}
+/**
+* Resolve a publisher DID to its claimed handle using the same
+* `LocalActorResolver` pattern as `@emdash-cms/plugin-cli` and
+* `@emdash-cms/auth-atproto`. Bidirectional verification (handle's
+* domain points back to the same DID) is part of the resolver --
+* `LocalActorResolver` returns the sentinel `"handle.invalid"` when
+* the `alsoKnownAs` handle is present but doesn't round-trip.
+*
+* Three distinct outcomes the UI can render:
+*
+*   - `{ status: "ok", handle }` — verified handle, round-trip OK.
+*   - `{ status: "invalid" }` — DID claims a handle but it doesn't
+*     resolve back. The publisher's handle setup is broken; the admin
+*     should see a clear "Invalid handle" indicator rather than the
+*     raw DID.
+*   - `{ status: "missing" }` — no handle claimed at all (no
+*     `alsoKnownAs`), or the DID document couldn't be fetched (network
+*     error, unsupported DID method).
+*/
+let actorResolver = null;
+async function getActorResolver() {
+	if (actorResolver) return actorResolver;
+	const { CompositeDidDocumentResolver, CompositeHandleResolver, DohJsonHandleResolver, LocalActorResolver, PlcDidDocumentResolver, WebDidDocumentResolver, WellKnownHandleResolver } = await import("@atcute/identity-resolver");
+	actorResolver = new LocalActorResolver({
+		handleResolver: new CompositeHandleResolver({ methods: {
+			dns: new DohJsonHandleResolver({ dohUrl: "https://cloudflare-dns.com/dns-query" }),
+			http: new WellKnownHandleResolver()
+		} }),
+		didDocumentResolver: new CompositeDidDocumentResolver({ methods: {
+			plc: new PlcDidDocumentResolver(),
+			web: new WebDidDocumentResolver()
+		} })
+	});
+	return actorResolver;
+}
+/**
+* localStorage-backed cache for DID→handle resolutions. Handles are
+* stable for hours-to-days in practice, but bound the cache so a
+* compromised handle eventually flips back to "invalid" without a
+* forced refresh. 24h matches the typical atproto handle TTL.
+*
+* Failures (network errors, unsupported DID method) are *not* cached --
+* those should retry on the next render.
+*/
+const HANDLE_CACHE_TTL_MS = 1440 * 60 * 1e3;
+const HANDLE_CACHE_KEY_PREFIX = "emdash:did-handle:";
+function readHandleCache(did) {
+	if (typeof localStorage === "undefined") return null;
+	try {
+		const raw = localStorage.getItem(`${HANDLE_CACHE_KEY_PREFIX}${did}`);
+		if (!raw) return null;
+		const parsed = JSON.parse(raw);
+		if (!parsed || typeof parsed.expiresAt !== "number" || parsed.expiresAt < Date.now()) return null;
+		return parsed.resolution;
+	} catch {
+		return null;
+	}
+}
+function writeHandleCache(did, resolution) {
+	if (typeof localStorage === "undefined") return;
+	try {
+		const entry = {
+			resolution,
+			expiresAt: Date.now() + HANDLE_CACHE_TTL_MS
+		};
+		localStorage.setItem(`${HANDLE_CACHE_KEY_PREFIX}${did}`, JSON.stringify(entry));
+	} catch {}
+}
+async function resolveDidToHandle(did) {
+	const cached = readHandleCache(did);
+	if (cached) return cached;
+	let result;
+	try {
+		const resolved = await (await getActorResolver()).resolve(did);
+		if (resolved.handle === "handle.invalid") result = { status: "invalid" };
+		else if (resolved.handle) result = {
+			status: "ok",
+			handle: resolved.handle
+		};
+		else result = { status: "missing" };
+	} catch (err) {
+		console.warn(`[registry] DID->handle resolution failed for ${did}:`, err);
+		return { status: "missing" };
+	}
+	writeHandleCache(did, result);
+	return result;
+}
+const INSTALL_ENDPOINT = `${API_BASE}/admin/plugins/registry/install`;
+/**
+* Install a plugin from the registry.
+*
+* Posts to the EmDash server, which re-resolves the same `(handle,
+* slug)` against the aggregator, re-verifies the bundle's checksum
+* against the signed release record, and writes the install. Surfaces
+* structured error codes (`RELEASE_YANKED`, `CHECKSUM_MISMATCH`,
+* `DECLARED_ACCESS_DRIFT`, etc.) that callers map to localized
+* messages.
+*/
+async function installRegistryPlugin(body) {
+	const response = await apiFetch(INSTALL_ENDPOINT, {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify(body)
+	});
+	if (!response.ok) await throwResponseError(response, i18n._({
+		id: "/LWKyx",
+		message: "Failed to install plugin"
+	}));
+	return (await response.json()).data;
+}
+
+//#endregion
+//#region src/components/PublisherHandle.tsx
+/**
+* Renders an atproto publisher's identity, with three branches:
+*
+*   - **Verified handle**: shows `@handle`. Our local
+*     `LocalActorResolver` round-tripped the DID document's
+*     `alsoKnownAs` back to the same DID (verified by DNS TXT or
+*     `.well-known`, not by the aggregator).
+*   - **Unverified publisher**: DID document claims a handle but the
+*     handle's domain doesn't point back to the same DID, OR the
+*     aggregator's claimed handle doesn't match the bidirectionally
+*     verified one. Treat as untrusted -- the publisher might be
+*     impersonating someone else, or the aggregator might be lying
+*     about a handle. Surface as `Unverified publisher` in error
+*     styling. Callers should also disable destructive actions
+*     (install, etc.).
+*   - **Missing handle**: no handle claimed in the DID document (no
+*     `alsoKnownAs`), or the DID document couldn't be fetched
+*     (network error, unsupported DID method).
+*
+* `aggregatorHandle` is what the registry's `searchPackages` /
+* `resolvePackage` endpoint returned for this DID. It is NEVER trusted
+* on its own -- the aggregator is an untrusted indexer that could be
+* compromised or buggy. We always run our own DID->handle round-trip
+* via `LocalActorResolver` (cached in localStorage for 24h) and use
+* the aggregator's value only to *cross-check*: if the aggregator
+* claims a handle that differs from what the DID document
+* bidirectionally verifies, the publisher is marked invalid.
+*/
+/** Trailing dot(s) on an FQDN, stripped before handle comparison. */
+const TRAILING_DOT = /\.+$/;
+/**
+* Hook form: returns the same tri-state result without rendering. Use
+* when a parent needs to coordinate UI (e.g. disable install) based on
+* the resolution.
+*/
+function usePublisherHandle(did, aggregatorHandle) {
+	const { data: didHandleResolution, isPending } = useQuery({
+		queryKey: [
+			"registry",
+			"did-handle",
+			did
+		],
+		queryFn: () => resolveDidToHandle(did),
+		enabled: Boolean(did),
+		staleTime: 300 * 1e3
+	});
+	if (isPending || !didHandleResolution) return { status: "missing" };
+	if (didHandleResolution.status === "missing") return { status: "missing" };
+	if (didHandleResolution.status === "invalid") return { status: "invalid" };
+	const verifiedHandle = didHandleResolution.handle.toLowerCase();
+	if (aggregatorHandle) {
+		if (aggregatorHandle.toLowerCase().replace(TRAILING_DOT, "") !== verifiedHandle) return { status: "invalid" };
+	}
+	return {
+		status: "ok",
+		handle: didHandleResolution.handle
+	};
+}
+function PublisherHandle({ did, aggregatorHandle, onResolved, variant = "card", className }) {
+	const { _: _t } = useLingui();
+	const result = usePublisherHandle(did, aggregatorHandle);
+	const onResolvedRef = React$1.useRef(onResolved);
+	onResolvedRef.current = onResolved;
+	React$1.useEffect(() => {
+		onResolvedRef.current?.(result);
+	}, [result.status, result.handle]);
+	const textClass = variant === "card" ? "text-xs" : "text-sm";
+	if (result.status === "ok" && result.handle) return /* @__PURE__ */ jsxs("span", {
+		className: `truncate ${textClass} text-kumo-subtle ${className ?? ""}`,
+		children: ["@", result.handle]
+	});
+	if (result.status === "invalid") return /* @__PURE__ */ jsx("span", {
+		className: `truncate ${textClass} font-medium text-kumo-error ${className ?? ""}`,
+		children: _t({
+			id: "N3r0DC",
+			message: "Unverified publisher"
+		})
+	});
+	return /* @__PURE__ */ jsx("span", {
+		className: `truncate ${textClass} text-kumo-subtle ${className ?? ""}`,
+		children: did
+	});
+}
+
+//#endregion
+//#region src/components/RegistryBrowse.tsx
+/**
+* Registry Browse
+*
+* Grid of plugin cards backed by the experimental decentralized plugin
+* registry's aggregator. Search box debounces directly into the
+* aggregator's `searchPackages` XRPC -- the aggregator is a public,
+* read-only service, so no server proxy is involved.
+*
+* Cards navigate to `/plugins/marketplace/$pluginId` (the same path the
+* marketplace browse uses); the router branches to the registry detail
+* component when `manifest.registry` is configured.
+*/
+function RegistryBrowse({ config, installedRegistryUris = /* @__PURE__ */ new Set() }) {
+	const { _: _t } = useLingui();
+	const [searchQuery, setSearchQuery] = React$1.useState("");
+	const [debouncedQuery, setDebouncedQuery] = React$1.useState("");
+	React$1.useEffect(() => {
+		const timer = setTimeout(setDebouncedQuery, 300, searchQuery);
+		return () => clearTimeout(timer);
+	}, [searchQuery]);
+	const { data, isLoading, error, fetchNextPage, hasNextPage, isFetchingNextPage } = useInfiniteQuery({
+		queryKey: [
+			"registry",
+			"search",
+			config.aggregatorUrl,
+			debouncedQuery
+		],
+		queryFn: ({ pageParam }) => searchRegistryPackages(config, {
+			q: debouncedQuery || void 0,
+			cursor: pageParam,
+			limit: 20
+		}),
+		initialPageParam: void 0,
+		getNextPageParam: (lastPage) => lastPage.cursor
+	});
+	const packages = data?.pages.flatMap((p) => p.packages);
+	return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-6",
+		children: [
+			/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("h1", {
+				className: "text-3xl font-bold",
+				children: _t({
+					id: "jNlCXv",
+					message: "Plugin Registry"
+				})
+			}), /* @__PURE__ */ jsx("p", {
+				className: "mt-1 text-kumo-subtle",
+				children: _t({
+					id: "ceMA7u",
+					message: "Browse and install plugins published to the decentralized registry."
+				})
+			})] }),
+			/* @__PURE__ */ jsx("div", {
+				className: "flex flex-col gap-3 sm:flex-row sm:items-center",
+				children: /* @__PURE__ */ jsxs("div", {
+					className: "relative flex-1",
+					children: [/* @__PURE__ */ jsx(MagnifyingGlass, { className: "absolute start-3 top-1/2 h-4 w-4 -translate-y-1/2 text-kumo-subtle" }), /* @__PURE__ */ jsx(Input, {
+						type: "search",
+						placeholder: _t({
+							id: "slq1pb",
+							message: "Search plugins..."
+						}),
+						value: searchQuery,
+						onChange: (e) => setSearchQuery(e.target.value),
+						className: "ps-9",
+						"aria-label": _t({
+							id: "S4qZX0",
+							message: "Search plugins"
+						})
+					})]
+				})
+			}),
+			error ? /* @__PURE__ */ jsx("div", {
+				className: "rounded-md border border-kumo-error bg-kumo-error/10 p-4 text-kumo-error",
+				role: "alert",
+				children: _t({
+					id: "obuqKa",
+					message: "Failed to load plugins. The registry aggregator may be unreachable."
+				})
+			}) : null,
+			isLoading ? /* @__PURE__ */ jsx("div", {
+				className: "grid grid-cols-1 gap-4 sm:grid-cols-2 lg:grid-cols-3",
+				children: Array.from({ length: 6 }).map((_, i) => /* @__PURE__ */ jsx("div", { className: "h-32 animate-pulse rounded-md border border-kumo-border bg-kumo-subtle" }, i))
+			}) : null,
+			packages && packages.length === 0 ? /* @__PURE__ */ jsx("div", {
+				className: "rounded-md border border-kumo-border bg-kumo-subtle p-8 text-center text-kumo-subtle",
+				children: debouncedQuery ? _t({
+					id: "5ZLwXV",
+					message: "No plugins match \"{debouncedQuery}\".",
+					values: { debouncedQuery }
+				}) : _t({
+					id: "+ugpTI",
+					message: "No plugins have been published to this registry yet."
+				})
+			}) : null,
+			packages && packages.length > 0 ? /* @__PURE__ */ jsx("div", {
+				className: "grid grid-cols-1 gap-4 sm:grid-cols-2 lg:grid-cols-3",
+				children: packages.map((pkg) => /* @__PURE__ */ jsx(RegistryPackageCard, {
+					pkg,
+					installed: installedRegistryUris.has(pkg.uri)
+				}, pkg.uri))
+			}) : null,
+			hasNextPage ? /* @__PURE__ */ jsx("div", {
+				className: "flex justify-center",
+				children: /* @__PURE__ */ jsx("button", {
+					type: "button",
+					className: "rounded-md border border-kumo-border bg-kumo-surface px-4 py-2 text-sm hover:bg-kumo-subtle disabled:opacity-50",
+					onClick: () => fetchNextPage(),
+					disabled: isFetchingNextPage,
+					children: isFetchingNextPage ? _t({
+						id: "Z3FXyt",
+						message: "Loading..."
+					}) : _t({
+						id: "yQ2kGp",
+						message: "Load more"
+					})
+				})
+			}) : null
+		]
+	});
+}
+function RegistryPackageCard({ pkg, installed }) {
+	const { _: _t2 } = useLingui();
+	const linkSegment = usePublisherHandle(pkg.did, pkg.handle).handle ?? pkg.did;
+	const profile = pkg.profile;
+	const verified = (pkg.labels ?? []).some((l) => l.val === "verified");
+	return /* @__PURE__ */ jsx(Link$1, {
+		to: "/plugins/marketplace/$pluginId",
+		params: { pluginId: `${linkSegment}/${pkg.slug}` },
+		className: "block rounded-md border border-kumo-border bg-kumo-surface p-4 transition-colors hover:bg-kumo-subtle focus:outline-none focus-visible:ring-2 focus-visible:ring-kumo-brand",
+		children: /* @__PURE__ */ jsxs("div", {
+			className: "flex items-start gap-3",
+			children: [/* @__PURE__ */ jsx("div", {
+				className: "mt-1 rounded-md bg-kumo-subtle p-2 text-kumo-subtle",
+				children: /* @__PURE__ */ jsx(PuzzlePiece, { className: "h-5 w-5" })
+			}), /* @__PURE__ */ jsxs("div", {
+				className: "min-w-0 flex-1",
+				children: [
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex items-center gap-2",
+						children: [/* @__PURE__ */ jsx("h2", {
+							className: "truncate font-semibold",
+							children: profile.name ?? pkg.slug
+						}), verified ? /* @__PURE__ */ jsx(ShieldCheck, {
+							className: "h-4 w-4 shrink-0 text-kumo-brand",
+							"aria-label": _t2({
+								id: "70QfpA",
+								message: "Verified publisher"
+							})
+						}) : null]
+					}),
+					/* @__PURE__ */ jsx(PublisherHandle, {
+						did: pkg.did,
+						aggregatorHandle: pkg.handle,
+						variant: "card"
+					}),
+					profile.description ? /* @__PURE__ */ jsx("p", {
+						className: "mt-2 line-clamp-2 text-sm text-kumo-default",
+						children: profile.description
+					}) : null,
+					installed ? /* @__PURE__ */ jsx("div", {
+						className: "mt-3",
+						children: /* @__PURE__ */ jsx(Badge, {
+							variant: "success",
+							children: _t2({
+								id: "eQkgKV",
+								message: "Installed"
+							})
+						})
+					}) : null
+				]
+			})]
+		})
+	});
+}
+
+//#endregion
+//#region src/components/RegistryPluginDetail.tsx
+/**
+* Registry Plugin Detail
+*
+* Detail view for a plugin from the experimental decentralized plugin
+* registry. Resolves `(handle, slug)` directly against the configured
+* aggregator; install routes through the EmDash server's
+* `/_emdash/api/admin/plugins/registry/install` endpoint, which
+* re-resolves and re-verifies before writing the install.
+*
+* Identified in the URL by a `pluginId` that is `${handle}/${slug}`.
+* The router wraps this component when `manifest.registry` is set on
+* the same route the marketplace detail uses, so existing bookmarks /
+* sidebar entries stay stable.
+*/
+function RegistryPluginDetail({ pluginId, config }) {
+	const { _: _t } = useLingui();
+	const queryClient = useQueryClient();
+	const [showConsent, setShowConsent] = React$1.useState(false);
+	const { data: installedPlugins } = useQuery({
+		queryKey: ["plugins"],
+		queryFn: async () => {
+			const { fetchPlugins } = await import("./plugins-qrjvPK4g.js").then((n) => n.a);
+			return fetchPlugins();
+		}
+	});
+	const slashIdx = pluginId.lastIndexOf("/");
+	const publisher = slashIdx > 0 ? pluginId.slice(0, slashIdx) : "";
+	const slug = slashIdx > 0 ? pluginId.slice(slashIdx + 1) : "";
+	const isDid = publisher.startsWith("did:");
+	const { data: pkg, isLoading: isLoadingPkg } = useQuery({
+		queryKey: [
+			"registry",
+			"package",
+			config.aggregatorUrl,
+			publisher,
+			slug,
+			isDid
+		],
+		queryFn: () => isDid ? getRegistryPackage(config, publisher, slug) : resolveRegistryPackage(config, publisher, slug),
+		enabled: Boolean(publisher && slug)
+	});
+	const handleResult = usePublisherHandle(pkg?.did ?? "", pkg?.handle);
+	const { data: release } = useQuery({
+		queryKey: [
+			"registry",
+			"latest-release",
+			config.aggregatorUrl,
+			pkg?.did,
+			slug
+		],
+		queryFn: () => getLatestRegistryRelease(config, pkg.did, slug),
+		enabled: Boolean(pkg?.did && slug)
+	});
+	const ext = (release?.release)?.extensions?.["com.emdashcms.experimental.package.releaseExtension"];
+	const capabilities = Array.isArray(ext?.capabilities) ? canonicalCapabilitiesForDriftCheck(ext?.capabilities) : canonicalCapabilitiesForDriftCheck(declaredAccessToCapabilityList(ext?.declaredAccess));
+	const profile = pkg?.profile;
+	const verified = (pkg?.labels ?? []).some((l) => l.val === "verified");
+	const policyOk = release && pkg ? releasePassesPolicy(release, {
+		did: pkg.did,
+		slug
+	}, config.policy) : true;
+	const installedEntry = React$1.useMemo(() => {
+		if (!pkg || !installedPlugins) return void 0;
+		return installedPlugins.find((p) => p.source === "registry" && p.registryPublisherDid === pkg.did && p.registrySlug === slug);
+	}, [
+		pkg,
+		installedPlugins,
+		slug
+	]);
+	const isInstalled = Boolean(installedEntry);
+	const installMutation = useMutation({
+		mutationFn: () => {
+			if (!pkg) throw new Error("Package not loaded");
+			return installRegistryPlugin({
+				did: pkg.did,
+				slug,
+				version: release?.version,
+				acknowledgedDeclaredAccess: capabilities
+			});
+		},
+		onSuccess: () => {
+			setShowConsent(false);
+			queryClient.invalidateQueries({ queryKey: ["plugins"] });
+			queryClient.invalidateQueries({ queryKey: ["manifest"] });
+			queryClient.invalidateQueries({ queryKey: ["registry"] });
+		}
+	});
+	if (isLoadingPkg) return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-6",
+		children: [/* @__PURE__ */ jsx(BackLink, {}), /* @__PURE__ */ jsxs("div", {
+			className: "animate-pulse space-y-4",
+			children: [
+				/* @__PURE__ */ jsxs("div", {
+					className: "flex items-center gap-4",
+					children: [/* @__PURE__ */ jsx("div", { className: "h-16 w-16 rounded-xl bg-kumo-subtle" }), /* @__PURE__ */ jsxs("div", {
+						className: "space-y-2",
+						children: [/* @__PURE__ */ jsx("div", { className: "h-6 w-48 rounded bg-kumo-subtle" }), /* @__PURE__ */ jsx("div", { className: "h-4 w-32 rounded bg-kumo-subtle" })]
+					})]
+				}),
+				/* @__PURE__ */ jsx("div", { className: "h-4 w-full rounded bg-kumo-subtle" }),
+				/* @__PURE__ */ jsx("div", { className: "h-4 w-3/4 rounded bg-kumo-subtle" })
+			]
+		})]
+	});
+	if (!pkg) return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-6",
+		children: [/* @__PURE__ */ jsx(BackLink, {}), /* @__PURE__ */ jsx("div", {
+			className: "rounded-md border border-kumo-error bg-kumo-error/10 p-4 text-kumo-error",
+			role: "alert",
+			children: _t({
+				id: "wZ5IqF",
+				message: "Plugin not found. The publisher handle or slug may be incorrect."
+			})
+		})]
+	});
+	return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-6",
+		children: [
+			/* @__PURE__ */ jsx(BackLink, {}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex items-start gap-4",
+				children: [
+					/* @__PURE__ */ jsx("div", {
+						className: "rounded-xl bg-kumo-subtle p-3 text-kumo-subtle",
+						children: /* @__PURE__ */ jsx("span", {
+							"aria-hidden": true,
+							className: "block h-10 w-10"
+						})
+					}),
+					/* @__PURE__ */ jsxs("div", {
+						className: "min-w-0 flex-1",
+						children: [
+							/* @__PURE__ */ jsxs("div", {
+								className: "flex items-center gap-2",
+								children: [/* @__PURE__ */ jsx("h1", {
+									className: "truncate text-3xl font-bold",
+									children: profile?.name ?? slug
+								}), verified ? /* @__PURE__ */ jsx(ShieldCheck, {
+									className: "h-5 w-5 shrink-0 text-kumo-brand",
+									"aria-label": _t({
+										id: "70QfpA",
+										message: "Verified publisher"
+									})
+								}) : null]
+							}),
+							/* @__PURE__ */ jsxs("p", {
+								className: "text-sm text-kumo-subtle",
+								children: [
+									_t({
+										id: "D3P+jw",
+										message: "Published by"
+									}),
+									" ",
+									/* @__PURE__ */ jsx(PublisherHandle, {
+										did: pkg.did,
+										aggregatorHandle: pkg.handle,
+										variant: "detail"
+									})
+								]
+							}),
+							release ? /* @__PURE__ */ jsxs("p", {
+								className: "text-xs text-kumo-subtle",
+								children: [
+									_t({
+										id: "YYdC3A",
+										message: "Version {0}",
+										values: { 0: release.version }
+									}),
+									" · ",
+									_t({
+										id: "294VT5",
+										message: "indexed {0}",
+										values: { 0: formatDate(release.indexedAt) }
+									})
+								]
+							}) : null
+						]
+					}),
+					/* @__PURE__ */ jsx("div", { children: isInstalled ? /* @__PURE__ */ jsx(Button, {
+						variant: "secondary",
+						disabled: true,
+						children: _t({
+							id: "eQkgKV",
+							message: "Installed"
+						})
+					}) : /* @__PURE__ */ jsx(Button, {
+						variant: "primary",
+						disabled: !release || !policyOk || handleResult.status === "invalid",
+						onClick: () => setShowConsent(true),
+						children: _t({
+							id: "TKQ7K+",
+							message: "Install"
+						})
+					}) })
+				]
+			}),
+			handleResult.status === "invalid" ? /* @__PURE__ */ jsxs("div", {
+				className: "flex items-start gap-3 rounded-md border border-kumo-error bg-kumo-error/10 p-4 text-kumo-error",
+				role: "alert",
+				children: [/* @__PURE__ */ jsx(Warning, { className: "mt-0.5 h-5 w-5 shrink-0" }), /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("p", {
+					className: "font-medium",
+					children: _t({
+						id: "R9fBA+",
+						message: "We couldn't verify this publisher's identity"
+					})
+				}), /* @__PURE__ */ jsx("p", {
+					className: "mt-1 text-sm text-kumo-default",
+					children: _t({
+						id: "Iu2xLX",
+						message: "This publisher claims a name they couldn't prove they own — possibly impersonating someone else. Install is disabled. If you know the publisher and trust them, ask them to fix their identity setup before retrying."
+					})
+				})] })]
+			}) : null,
+			release && !policyOk ? /* @__PURE__ */ jsxs("div", {
+				className: "flex items-start gap-3 rounded-md border border-kumo-warning bg-kumo-warning/10 p-4 text-kumo-warning",
+				role: "status",
+				children: [/* @__PURE__ */ jsx(Warning, { className: "mt-0.5 h-5 w-5 shrink-0" }), /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("p", {
+					className: "font-medium",
+					children: _t({
+						id: "+2GRS6",
+						message: "Release is too new to install"
+					})
+				}), /* @__PURE__ */ jsx("p", {
+					className: "mt-1 text-sm text-kumo-default",
+					children: _t({
+						id: "77FdWO",
+						message: "Your site requires releases to be at least {0} old before they can be installed. This release will become installable later.",
+						values: { 0: formatHoldback(config.policy?.minimumReleaseAgeSeconds ?? 0) }
+					})
+				})] })]
+			}) : null,
+			profile?.description ? /* @__PURE__ */ jsx("p", {
+				className: "text-base text-kumo-default",
+				children: profile.description
+			}) : null,
+			capabilities.length > 0 ? /* @__PURE__ */ jsxs("section", { children: [/* @__PURE__ */ jsx("h2", {
+				className: "text-sm font-semibold text-kumo-subtle",
+				children: _t({
+					id: "FENDVB",
+					message: "Declared permissions"
+				})
+			}), /* @__PURE__ */ jsx("div", {
+				className: "mt-2 flex flex-wrap gap-2",
+				children: capabilities.map((c) => /* @__PURE__ */ jsx(Badge, { children: c }, c))
+			})] }) : null,
+			showConsent && release ? /* @__PURE__ */ jsx(CapabilityConsentDialog, {
+				mode: "install",
+				pluginName: profile?.name ?? slug,
+				capabilities,
+				isPending: installMutation.isPending,
+				error: getMutationError(installMutation.error),
+				onConfirm: () => installMutation.mutate(),
+				onCancel: () => {
+					setShowConsent(false);
+					installMutation.reset();
+				}
+			}) : null
+		]
+	});
+}
+function BackLink() {
+	const { _: _t2 } = useLingui();
+	return /* @__PURE__ */ jsxs(Link$1, {
+		to: "/plugins/marketplace",
+		className: "inline-flex items-center gap-1 text-sm text-kumo-subtle hover:text-kumo-default",
+		children: [/* @__PURE__ */ jsx(ArrowPrev, { className: "h-4 w-4" }), _t2({
+			id: "fnGsOh",
+			message: "Back to plugins"
+		})]
+	});
+}
+/**
+* Flatten an RFC-0001 `declaredAccess` block (`{ content: { read: true },
+* email: { send: { allowedHosts: [...] } }, ... }`) into the legacy
+* `capabilities: string[]` shape that the existing sandbox runtime
+* enforces today. One entry per declared operation under each
+* category. Unknown values are skipped silently -- the consent dialog
+* shows only what the current runtime recognises.
+*/
+function declaredAccessToCapabilityList(declaredAccess) {
+	if (!declaredAccess || typeof declaredAccess !== "object") return [];
+	const out = [];
+	for (const [category, value] of Object.entries(declaredAccess)) {
+		if (!value || typeof value !== "object") continue;
+		for (const [operation, opValue] of Object.entries(value)) {
+			if (opValue === false) continue;
+			out.push(`${category}:${operation}`);
+		}
+	}
+	return out;
+}
+function formatDate(iso) {
+	try {
+		return new Date(iso).toLocaleDateString();
+	} catch {
+		return iso;
+	}
+}
+function formatHoldback(seconds) {
+	if (seconds <= 0) return "0s";
+	if (seconds < 3600) return `${Math.round(seconds / 60)} min`;
+	if (seconds < 1440 * 60) return `${Math.round(seconds / 60 / 60)} h`;
+	return `${Math.round(seconds / 60 / 60 / 24)} d`;
+}
+
 //#endregion
 //#region src/components/SandboxedPluginPage.tsx
 /**
@@ -26957,7 +27879,16 @@ function SidebarNav({ manifest }) {
 			minRole: ROLE_ADMIN$1
 		}
 	];
-	if (manifest.marketplace) adminItems.push({
+	if (manifest.registry) adminItems.push({
+		to: "/plugins/marketplace",
+		label: _t({
+			id: "kVxO/O",
+			message: "Registry"
+		}),
+		icon: Storefront,
+		minRole: ROLE_ADMIN$1
+	});
+	else if (manifest.marketplace) adminItems.push({
 		to: "/plugins/marketplace",
 		label: _t({
 			id: "Zt5PUS",
@@ -26965,7 +27896,8 @@ function SidebarNav({ manifest }) {
 		}),
 		icon: Storefront,
 		minRole: ROLE_ADMIN$1
-	}, {
+	});
+	if (manifest.marketplace) adminItems.push({
 		to: "/themes/marketplace",
 		label: _t({
 			id: "fJ3EbT",
@@ -35006,6 +35938,7 @@ function ContentListPage() {
 	const items = React$1.useMemo(() => {
 		return data?.pages.flatMap((page) => page.items) || [];
 	}, [data]);
+	const total = data?.pages[0]?.total ?? items.length;
 	if (!manifest) return /* @__PURE__ */ jsx(LoadingScreen, {});
 	const collectionConfig = manifest.collections[collection];
 	if (!collectionConfig) return /* @__PURE__ */ jsx(NotFoundPage, { message: `Collection "${collection}" not found` });
@@ -35036,7 +35969,8 @@ function ContentListPage() {
 		onLocaleChange: handleLocaleChange,
 		urlPattern: collectionConfig.urlPattern,
 		sort,
-		onSortChange: setSort
+		onSortChange: setSort,
+		total
 	});
 }
 const contentNewRoute = createRoute({
@@ -35893,6 +36827,10 @@ const marketplaceBrowseRoute = createRoute({
 	component: MarketplaceBrowsePage
 });
 function MarketplaceBrowsePage() {
+	const { data: manifest } = useQuery({
+		queryKey: ["manifest"],
+		queryFn: fetchManifest
+	});
 	const { data: plugins } = useQuery({
 		queryKey: ["plugins"],
 		queryFn: async () => {
@@ -35900,10 +36838,18 @@ function MarketplaceBrowsePage() {
 			return fetchPlugins();
 		}
 	});
-	return /* @__PURE__ */ jsx(MarketplaceBrowse, { installedPluginIds: React$1.useMemo(() => {
+	const installedIds = React$1.useMemo(() => {
 		if (!plugins) return /* @__PURE__ */ new Set();
 		return new Set(plugins.map((p) => p.id));
-	}, [plugins]) });
+	}, [plugins]);
+	if (manifest?.registry) {
+		const installedRegistryUris = new Set((plugins ?? []).filter((p) => p.source === "registry" && p.registryPublisherDid && p.registrySlug).map((p) => `at://${p.registryPublisherDid}/com.emdashcms.experimental.package.profile/${p.registrySlug}`));
+		return /* @__PURE__ */ jsx(RegistryBrowse, {
+			config: manifest.registry,
+			installedRegistryUris
+		});
+	}
+	return /* @__PURE__ */ jsx(MarketplaceBrowse, { installedPluginIds: installedIds });
 }
 const marketplaceDetailRoute = createRoute({
 	getParentRoute: () => adminLayoutRoute,
@@ -35912,6 +36858,10 @@ const marketplaceDetailRoute = createRoute({
 });
 function MarketplaceDetailPage() {
 	const { pluginId } = useParams({ from: "/_admin/plugins/marketplace/$pluginId" });
+	const { data: manifest } = useQuery({
+		queryKey: ["manifest"],
+		queryFn: fetchManifest
+	});
 	const { data: plugins } = useQuery({
 		queryKey: ["plugins"],
 		queryFn: async () => {
@@ -35919,12 +36869,18 @@ function MarketplaceDetailPage() {
 			return fetchPlugins();
 		}
 	});
+	const installedIds = React$1.useMemo(() => {
+		if (!plugins) return /* @__PURE__ */ new Set();
+		return new Set(plugins.map((p) => p.id));
+	}, [plugins]);
+	const looksLikeRegistryId = pluginId.includes("/");
+	if (manifest?.registry && looksLikeRegistryId) return /* @__PURE__ */ jsx(RegistryPluginDetail, {
+		pluginId,
+		config: manifest.registry
+	});
 	return /* @__PURE__ */ jsx(MarketplacePluginDetail, {
 		pluginId,
-		installedPluginIds: React$1.useMemo(() => {
-			if (!plugins) return /* @__PURE__ */ new Set();
-			return new Set(plugins.map((p) => p.id));
-		}, [plugins])
+		installedPluginIds: installedIds
 	});
 }
 const themeMarketplaceBrowseRoute = createRoute({