@emdash-cms/admin 0.13.0 → 0.15.0

package/dist/index.js

@@ -1,7 +1,7 @@
-import { c as fetchAuthMode, d as throwResponseError, i as fetchPlugins, l as fetchManifest, n as enablePlugin, o as API_BASE, r as fetchPlugin, s as apiFetch, t as disablePlugin, u as parseApiResponse } from "./plugins-qrjvPK4g.js";
-import { a as SUPPORTED_LOCALES, i as DEFAULT_LOCALE, l as resolveLocale, n as useLocale, o as SUPPORTED_LOCALE_CODES, t as LocaleDirectionProvider } from "./LocaleDirectionProvider-rC0KuZjM.js";
+import { c as fetchAuthMode, d as throwResponseError, i as fetchPlugins, l as fetchManifest, n as enablePlugin, o as API_BASE, r as fetchPlugin, s as apiFetch, t as disablePlugin, u as parseApiResponse } from "./plugins-BZzztFdK.js";
+import { a as SUPPORTED_LOCALES, i as DEFAULT_LOCALE, l as resolveLocale, n as useLocale, o as SUPPORTED_LOCALE_CODES, t as LocaleDirectionProvider } from "./LocaleDirectionProvider-C-w4lOU2.js";
 import "./locales/index.js";
-import { Badge, Button, Checkbox, CommandPalette, Dialog, Input, InputArea, Label, LinkButton, Loader, Popover, Select, Sidebar as KumoSidebar, Switch, Tabs, Toast, Toasty, Tooltip, buttonVariants, useSidebar } from "@cloudflare/kumo";
+import { Autocomplete, Badge, Button, Checkbox, CommandPalette, Dialog, Input, InputArea, Label, LinkButton, Loader, Popover, Select, Sidebar as KumoSidebar, Switch, Tabs, Toast, Toasty, Tooltip, buttonVariants, useSidebar } from "@cloudflare/kumo";
 import { i18n } from "@lingui/core";
 import { I18nProvider, Trans, useLingui } from "@lingui/react";
 import { QueryClient, QueryClientProvider, useInfiniteQuery, useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
@@ -27,12 +27,13 @@ import { TableHeader } from "@tiptap/extension-table-header";
 import { TableRow } from "@tiptap/extension-table-row";
 import TextAlign from "@tiptap/extension-text-align";
 import Typography from "@tiptap/extension-typography";
-import { EditorContent, Node as Node$2, NodeViewWrapper, ReactNodeViewRenderer, mergeAttributes as mergeAttributes$1, useEditor, useEditorState } from "@tiptap/react";
+import { EditorContent, Node as Node$2, NodeViewContent, NodeViewWrapper, ReactNodeViewRenderer, mergeAttributes as mergeAttributes$1, useEditor, useEditorState } from "@tiptap/react";
 import { BubbleMenu } from "@tiptap/react/menus";
 import StarterKit from "@tiptap/starter-kit";
 import { Plugin, PluginKey } from "@tiptap/pm/state";
 import { Decoration, DecorationSet } from "@tiptap/pm/view";
 import { createPortal } from "react-dom";
+import CodeBlock$1 from "@tiptap/extension-code-block";
 import { DragHandle } from "@tiptap/extension-drag-handle-react";
 import { isAllowedUri } from "@tiptap/extension-link";
 import { BlockRenderer } from "@emdash-cms/blocks";
@@ -1956,6 +1957,7 @@ async function fetchBylines(options) {
 	if (options?.search) params.set("search", options.search);
 	if (options?.isGuest !== void 0) params.set("isGuest", String(options.isGuest));
 	if (options?.userId) params.set("userId", options.userId);
+	if (options?.locale) params.set("locale", options.locale);
 	if (options?.cursor) params.set("cursor", options.cursor);
 	if (options?.limit) params.set("limit", String(options.limit));
 	return parseApiResponse(await apiFetch(`${API_BASE}/admin/bylines${params.toString() ? `?${params}` : ""}`), "Failed to fetch bylines");
@@ -1984,6 +1986,26 @@ async function deleteByline(id) {
 		message: "Failed to delete byline"
 	}));
 }
+/**
+* Fetch every translation of a byline (siblings sharing the same
+* translation_group).
+*/
+async function fetchBylineTranslations(id) {
+	return parseApiResponse(await apiFetch(`${API_BASE}/admin/bylines/${id}/translations`), "Failed to fetch byline translations");
+}
+/**
+* Create a new locale variant of a byline. The new row joins the source's
+* `translation_group`. Body defaults — slug, display name, avatar, website —
+* inherit from the source when omitted, so editors only have to fill in the
+* localized bio (and optionally a localized display name).
+*/
+async function createBylineTranslation(id, input) {
+	return parseApiResponse(await apiFetch(`${API_BASE}/admin/bylines/${id}/translations`, {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify(input)
+	}), "Failed to create byline translation");
+}
 
 //#endregion
 //#region src/lib/api/menus.ts
@@ -5525,6 +5547,392 @@ function Suggestion({ pluginKey = SuggestionPluginKey, editor, char = "@", allow
 }
 var index_default = Suggestion;
 
+//#endregion
+//#region src/components/editor/codeBlockLanguages.ts
+const CODE_BLOCK_LANGUAGES = [
+	{
+		id: "plaintext",
+		label: "Plain text",
+		aliases: [
+			"text",
+			"plain",
+			"txt"
+		]
+	},
+	{
+		id: "astro",
+		label: "Astro"
+	},
+	{
+		id: "bash",
+		label: "Bash",
+		aliases: [
+			"sh",
+			"shell",
+			"zsh"
+		]
+	},
+	{
+		id: "c",
+		label: "C"
+	},
+	{
+		id: "cpp",
+		label: "C++",
+		aliases: ["c++"]
+	},
+	{
+		id: "csharp",
+		label: "C#",
+		aliases: ["cs", "c#"]
+	},
+	{
+		id: "css",
+		label: "CSS"
+	},
+	{
+		id: "diff",
+		label: "Diff",
+		aliases: ["patch"]
+	},
+	{
+		id: "dockerfile",
+		label: "Dockerfile",
+		aliases: ["docker"]
+	},
+	{
+		id: "go",
+		label: "Go",
+		aliases: ["golang"]
+	},
+	{
+		id: "graphql",
+		label: "GraphQL",
+		aliases: ["gql"]
+	},
+	{
+		id: "html",
+		label: "HTML"
+	},
+	{
+		id: "java",
+		label: "Java"
+	},
+	{
+		id: "javascript",
+		label: "JavaScript",
+		aliases: ["js"]
+	},
+	{
+		id: "json",
+		label: "JSON"
+	},
+	{
+		id: "jsx",
+		label: "JSX"
+	},
+	{
+		id: "kotlin",
+		label: "Kotlin",
+		aliases: ["kt"]
+	},
+	{
+		id: "markdown",
+		label: "Markdown",
+		aliases: ["md"]
+	},
+	{
+		id: "mdx",
+		label: "MDX"
+	},
+	{
+		id: "php",
+		label: "PHP"
+	},
+	{
+		id: "python",
+		label: "Python",
+		aliases: ["py"]
+	},
+	{
+		id: "ruby",
+		label: "Ruby",
+		aliases: ["rb"]
+	},
+	{
+		id: "rust",
+		label: "Rust",
+		aliases: ["rs"]
+	},
+	{
+		id: "scss",
+		label: "SCSS",
+		aliases: ["sass"]
+	},
+	{
+		id: "sql",
+		label: "SQL"
+	},
+	{
+		id: "svelte",
+		label: "Svelte"
+	},
+	{
+		id: "swift",
+		label: "Swift"
+	},
+	{
+		id: "toml",
+		label: "TOML"
+	},
+	{
+		id: "tsx",
+		label: "TSX"
+	},
+	{
+		id: "typescript",
+		label: "TypeScript",
+		aliases: ["ts"]
+	},
+	{
+		id: "vue",
+		label: "Vue"
+	},
+	{
+		id: "xml",
+		label: "XML"
+	},
+	{
+		id: "yaml",
+		label: "YAML",
+		aliases: ["yml"]
+	}
+];
+/**
+* Look up a language by id or alias. Case-insensitive.
+* Returns the canonical entry, or `null` if not found in the curated list.
+*/
+function findLanguage(value) {
+	if (!value) return null;
+	const needle = value.trim().toLowerCase();
+	if (!needle) return null;
+	for (const lang of CODE_BLOCK_LANGUAGES) {
+		if (lang.id === needle) return lang;
+		if (lang.aliases?.includes(needle)) return lang;
+	}
+	return null;
+}
+/**
+* Normalize a user-entered language string to a canonical id where possible.
+* Unknown inputs are sanitized to a single safe class token: lowercased,
+* trimmed, with any character outside `[a-z0-9_-]` (including whitespace,
+* dots, slashes, etc.) collapsed to `-`. This keeps the stored value safe
+* to interpolate into a `language-{id}` CSS class without splitting on
+* whitespace.
+*
+* Examples:
+*   normalizeLanguage("TypeScript")   -> "typescript" (canonical id)
+*   normalizeLanguage("ts")           -> "typescript" (alias)
+*   normalizeLanguage("Objective C")  -> "objective-c" (sanitized)
+*   normalizeLanguage("F#")           -> "f-" (sanitized)
+*   normalizeLanguage("")             -> undefined
+*/
+const DISALLOWED_CHARS_RE = /[^a-z0-9_-]+/g;
+const LEADING_TRAILING_HYPHENS_RE = /^-+|-+$/g;
+function normalizeLanguage(value) {
+	if (!value) return void 0;
+	const trimmed = value.trim();
+	if (!trimmed) return void 0;
+	const match = findLanguage(trimmed);
+	if (match) return match.id;
+	return trimmed.toLowerCase().replace(DISALLOWED_CHARS_RE, "-").replace(LEADING_TRAILING_HYPHENS_RE, "") || void 0;
+}
+/**
+* Human-readable label for a stored language id. Falls back to the id itself
+* for unknown values so the editor never shows "undefined".
+*/
+function languageLabel(value) {
+	if (!value) return "Plain text";
+	const match = findLanguage(value);
+	if (match) return match.label;
+	return value;
+}
+
+//#endregion
+//#region src/components/editor/CodeBlockNode.tsx
+/**
+* Code block node with language picker.
+*
+* Wraps the base `@tiptap/extension-code-block` with a React node view that
+* overlays a small language chip in the top-right corner. Clicking the chip
+* opens a popover with a Kumo Autocomplete: a free-form text input plus a
+* filtered list of curated language suggestions. The value is persisted on
+* the node's `language` attribute and round-trips through Portable Text as
+* `block.language`.
+*
+* The picker accepts arbitrary strings (not restricted to the curated list)
+* so that less common languages can still be used. Free-form input is
+* sanitized to a single safe CSS class token via `normalizeLanguage` so the
+* frontend's `language-{id}` class stays well-formed.
+*/
+const LANGUAGE_ITEMS = CODE_BLOCK_LANGUAGES.map((l) => l.label);
+function filterLanguages(item, query) {
+	if (!query) return true;
+	const needle = query.toLowerCase();
+	const lang = CODE_BLOCK_LANGUAGES.find((l) => l.label === item);
+	if (!lang) return false;
+	if (lang.label.toLowerCase().includes(needle)) return true;
+	if (lang.id.toLowerCase().includes(needle)) return true;
+	return lang.aliases?.some((alias) => alias.toLowerCase().includes(needle)) ?? false;
+}
+function CodeBlockNodeView({ node, updateAttributes, selected }) {
+	const { _: _t } = useLingui();
+	const [isEditing, setIsEditing] = React$1.useState(false);
+	const storedLanguage = typeof node.attrs.language === "string" ? node.attrs.language : "";
+	const [draft, setDraft] = React$1.useState(() => languageLabel(storedLanguage));
+	const popoverRef = React$1.useRef(null);
+	React$1.useEffect(() => {
+		if (!isEditing) setDraft(languageLabel(storedLanguage));
+	}, [storedLanguage, isEditing]);
+	const openPicker = React$1.useCallback(() => {
+		setDraft(storedLanguage ? languageLabel(storedLanguage) : "");
+		setIsEditing(true);
+	}, [storedLanguage]);
+	const closePicker = React$1.useCallback(() => {
+		setIsEditing(false);
+		setDraft(languageLabel(storedLanguage));
+	}, [storedLanguage]);
+	const commit = React$1.useCallback((value) => {
+		updateAttributes({ language: normalizeLanguage(value ?? draft) ?? null });
+		setIsEditing(false);
+	}, [draft, updateAttributes]);
+	const handleKeyDown = (e) => {
+		if (e.key === "Enter") {
+			e.preventDefault();
+			commit();
+		} else if (e.key === "Escape") {
+			e.preventDefault();
+			closePicker();
+		}
+	};
+	React$1.useEffect(() => {
+		if (!isEditing) return void 0;
+		const onMouseDown = (event) => {
+			const target = event.target instanceof Node ? event.target : null;
+			if (popoverRef.current && target && !popoverRef.current.contains(target)) closePicker();
+		};
+		document.addEventListener("mousedown", onMouseDown);
+		return () => document.removeEventListener("mousedown", onMouseDown);
+	}, [isEditing, closePicker]);
+	const label = languageLabel(storedLanguage);
+	const chipPersistent = isEditing || Boolean(storedLanguage) || selected;
+	return /* @__PURE__ */ jsxs(NodeViewWrapper, {
+		className: "group relative my-4",
+		"data-language": storedLanguage || void 0,
+		children: [/* @__PURE__ */ jsx("pre", {
+			className: "emdash-code-block",
+			children: /* @__PURE__ */ jsx(NodeViewContent, { as: "code" })
+		}), /* @__PURE__ */ jsx("div", {
+			className: "absolute end-2 top-2 select-none",
+			contentEditable: false,
+			children: isEditing ? /* @__PURE__ */ jsxs("div", {
+				ref: popoverRef,
+				className: "flex items-center gap-1 rounded-md border bg-kumo-overlay p-1 shadow-lg",
+				onKeyDown: handleKeyDown,
+				children: [
+					/* @__PURE__ */ jsxs(Autocomplete, {
+						items: LANGUAGE_ITEMS,
+						value: draft,
+						onValueChange: (next) => setDraft(next),
+						filter: filterLanguages,
+						children: [/* @__PURE__ */ jsx(Autocomplete.InputGroup, {
+							size: "sm",
+							placeholder: _t({
+								id: "vXIe7J",
+								message: "Language"
+							})
+						}), /* @__PURE__ */ jsxs(Autocomplete.Content, {
+							sideOffset: 4,
+							children: [/* @__PURE__ */ jsx(Autocomplete.List, { children: (item) => /* @__PURE__ */ jsx(Autocomplete.Item, {
+								value: item,
+								children: item
+							}, item) }), /* @__PURE__ */ jsx(Autocomplete.Empty, { children: _t({
+								id: "4TVVsS",
+								message: "No matches"
+							}) })]
+						})]
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						type: "button",
+						variant: "ghost",
+						shape: "square",
+						className: "h-7 w-7",
+						onMouseDown: (e) => e.preventDefault(),
+						onClick: () => commit(),
+						title: _t({
+							id: "Ek42QX",
+							message: "Apply language"
+						}),
+						"aria-label": _t({
+							id: "Ek42QX",
+							message: "Apply language"
+						}),
+						children: /* @__PURE__ */ jsx(Check, { className: "h-4 w-4" })
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						type: "button",
+						variant: "ghost",
+						shape: "square",
+						className: "h-7 w-7",
+						onMouseDown: (e) => e.preventDefault(),
+						onClick: closePicker,
+						title: _t({
+							id: "dEgA5A",
+							message: "Cancel"
+						}),
+						"aria-label": _t({
+							id: "dEgA5A",
+							message: "Cancel"
+						}),
+						children: /* @__PURE__ */ jsx(X, { className: "h-4 w-4" })
+					})
+				]
+			}) : /* @__PURE__ */ jsx("button", {
+				type: "button",
+				tabIndex: chipPersistent ? 0 : -1,
+				onMouseDown: (e) => e.preventDefault(),
+				onClick: openPicker,
+				className: "rounded-md border bg-kumo-overlay/90 px-2 py-1 text-xs text-kumo-subtle opacity-0 transition-opacity hover:text-kumo-strong focus:opacity-100 focus:outline-none focus:ring-2 focus:ring-kumo-brand group-hover:opacity-100 data-[persistent=true]:opacity-100",
+				"data-persistent": chipPersistent ? "true" : "false",
+				title: _t({
+					id: "9cbOH7",
+					message: "Set language"
+				}),
+				"aria-label": _t({
+					id: "q/A3pF",
+					message: "Set language (current: {label})",
+					values: { label }
+				}),
+				"aria-hidden": chipPersistent ? void 0 : true,
+				children: storedLanguage ? label : _t({
+					id: "9cbOH7",
+					message: "Set language"
+				})
+			})
+		})]
+	});
+}
+/**
+* TipTap extension: code block with an inline language picker node view.
+*
+* Drop-in replacement for StarterKit's default `codeBlock`. Configure
+* `StarterKit.configure({ codeBlock: false })` and add this extension to
+* the editor's extensions array.
+*/
+const CodeBlockExtension = CodeBlock$1.extend({ addNodeView() {
+	return ReactNodeViewRenderer(CodeBlockNodeView);
+} });
+
 //#endregion
 //#region src/components/editor/BlockMenu.tsx
 const blockTransforms = [
@@ -8153,6 +8561,7 @@ function PortableTextEditor({ value, onChange, placeholder = "Start writing...",
 					color: "#3b82f6",
 					width: 2
 				},
+				codeBlock: false,
 				link: {
 					openOnClick: false,
 					enableClickSelection: true,
@@ -8160,6 +8569,7 @@ function PortableTextEditor({ value, onChange, placeholder = "Start writing...",
 				},
 				underline: {}
 			}),
+			CodeBlockExtension,
 			ImageExtension,
 			MarkdownLinkExtension,
 			PluginBlockExtension,
@@ -8262,8 +8672,7 @@ function PortableTextEditor({ value, onChange, placeholder = "Start writing...",
 		if (!editor || !pluginBlockModal) return;
 		const { id, ...data } = values;
 		const editPos = editingBlockPosRef.current;
-		if (editPos !== null) {
-			const { tr } = editor.state;
+		if (editPos !== null) editor.chain().command(({ tr }) => {
 			const node = tr.doc.nodeAt(editPos);
 			if (node?.type.name === "pluginBlock") {
 				tr.setNodeMarkup(editPos, void 0, {
@@ -8271,9 +8680,11 @@ function PortableTextEditor({ value, onChange, placeholder = "Start writing...",
 					id: typeof id === "string" ? id : node.attrs.id,
 					data
 				});
-				editor.view.dispatch(tr);
+				return true;
 			}
-		} else editor.chain().focus().insertContent({
+			return false;
+		}).run();
+		else editor.chain().focus().insertContent({
 			type: "pluginBlock",
 			attrs: {
 				blockType: pluginBlockModal.type,
@@ -10373,7 +10784,7 @@ function formatScheduledDate(dateStr) {
 /**
 * Content editor with dynamic field rendering
 */
-function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSaving, onSave, onAutosave, isAutosaving, lastAutosaveAt, onPublish, onUnpublish, onDiscardDraft, onSchedule, onUnschedule, isScheduling, supportsDrafts = false, supportsRevisions = false, supportsPreview = false, currentUser, users, onAuthorChange, availableBylines, selectedBylines, onBylinesChange, onQuickCreateByline, onQuickEditByline, onDelete, isDeleting, i18n, translations, onTranslate, pluginBlocks, hasSeo = false, onSeoChange, manifest }) {
+function ContentEditor({ collection, collectionLabel, item, fields, isNew, entryLocale, isSaving, onSave, onAutosave, isAutosaving, lastAutosaveAt, onPublish, onUnpublish, onDiscardDraft, onSchedule, onUnschedule, isScheduling, supportsDrafts = false, supportsRevisions = false, supportsPreview = false, currentUser, users, onAuthorChange, availableBylines, availableBylinesLoaded, selectedBylines, onBylinesChange, onQuickCreateByline, onQuickEditByline, onDelete, isDeleting, i18n, translations, onTranslate, pluginBlocks, hasSeo = false, onSeoChange, manifest }) {
 	const { _: _t } = useLingui();
 	const navigate = useNavigate$1();
 	const [formData, setFormData] = React$1.useState(item?.data || {});
@@ -10384,6 +10795,7 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 		bylineId: entry.byline.id,
 		roleLabel: entry.roleLabel
 	})) ?? []);
+	const [bylinesTouched, setBylinesTouched] = React$1.useState(false);
 	const [portableTextEditor, setPortableTextEditor] = React$1.useState(null);
 	const [blockSidebarPanel, setBlockSidebarPanel] = React$1.useState(null);
 	const handleBlockSidebarOpen = React$1.useCallback((panel) => {
@@ -10425,6 +10837,7 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 			bylines: nextBylines
 		}));
 		pendingAutosaveStateRef.current = null;
+		setBylinesTouched(false);
 	}
 	const itemDataString = React$1.useMemo(() => item ? JSON.stringify(item.data) : "", [item?.data]);
 	React$1.useEffect(() => {
@@ -10446,6 +10859,7 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 				})) ?? []
 			}));
 			pendingAutosaveStateRef.current = null;
+			setBylinesTouched(false);
 		}
 	}, [
 		item?.updatedAt,
@@ -10455,6 +10869,7 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 	]);
 	const activeBylines = isNew ? selectedBylines ?? [] : internalBylines;
 	const handleBylinesChange = React$1.useCallback((next) => {
+		setBylinesTouched(true);
 		if (isNew) {
 			onBylinesChange?.(next);
 			return;
@@ -10497,13 +10912,13 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 			if (hasInvalidUrls(formDataRef.current)) return;
 			const payload = {
 				data: formDataRef.current,
-				slug: slugRef.current || void 0,
-				bylines: activeBylines
+				slug: slugRef.current || void 0
 			};
+			if (bylinesTouched) payload.bylines = activeBylines;
 			pendingAutosaveStateRef.current = serializeEditorState({
 				data: payload.data,
 				slug: payload.slug || "",
-				bylines: payload.bylines
+				bylines: activeBylines
 			});
 			onAutosave(payload);
 		}, AUTOSAVE_DELAY);
@@ -10519,6 +10934,7 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 		isSaving,
 		isAutosaving,
 		activeBylines,
+		bylinesTouched,
 		hasInvalidUrls
 	]);
 	const handleSubmit = (e) => {
@@ -10528,11 +10944,12 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 			clearTimeout(autosaveTimeoutRef.current);
 			autosaveTimeoutRef.current = null;
 		}
-		onSave?.({
+		const payload = {
 			data: formData,
-			slug: slug || void 0,
-			bylines: activeBylines
-		});
+			slug: slug || void 0
+		};
+		if (isNew || bylinesTouched) payload.bylines = activeBylines;
+		onSave?.(payload);
 	};
 	const [isLoadingPreview, setIsLoadingPreview] = React$1.useState(false);
 	const urlPattern = manifest?.collections[collection]?.urlPattern;
@@ -11066,9 +11483,12 @@ function ContentEditor({ collection, collectionLabel, item, fields, isNew, isSav
 							}), /* @__PURE__ */ jsx(BylineCreditsEditor, {
 								credits: activeBylines,
 								bylines: availableBylines ?? [],
+								bylinesLoaded: availableBylinesLoaded,
 								onChange: handleBylinesChange,
 								onQuickCreate: onQuickCreateByline,
-								onQuickEdit: onQuickEditByline
+								onQuickEdit: onQuickEditByline,
+								entryLocale: item?.locale ?? entryLocale,
+								i18n
 							})]
 						}),
 						i18n && item && !isNew && /* @__PURE__ */ jsx("div", {
@@ -11725,7 +12145,7 @@ function FileFieldRenderer({ id, label, value, onChange, required, allowedMimeTy
 		]
 	});
 }
-function BylineCreditsEditor({ credits, bylines, onChange, onQuickCreate, onQuickEdit }) {
+function BylineCreditsEditor({ credits, bylines, onChange, onQuickCreate, onQuickEdit, entryLocale, i18n, bylinesLoaded = true }) {
 	const { _: _t7 } = useLingui();
 	const [selectedBylineId, setSelectedBylineId] = React$1.useState("");
 	const [quickName, setQuickName] = React$1.useState("");
@@ -11768,6 +12188,27 @@ function BylineCreditsEditor({ credits, bylines, onChange, onQuickCreate, onQuic
 	return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-3",
 		children: [
+			!!i18n && i18n.locales.length > 1 && bylinesLoaded && bylines.length === 0 && !!entryLocale && /* @__PURE__ */ jsxs("div", {
+				className: "rounded border border-dashed p-3 text-sm space-y-2",
+				children: [/* @__PURE__ */ jsx("p", {
+					className: "text-kumo-subtle",
+					children: _t7({
+						id: "Tmb8Fw",
+						message: "No bylines available in {entryLocale}. Create a variant from the Bylines page before crediting one on this entry.",
+						values: { entryLocale }
+					})
+				}), /* @__PURE__ */ jsx(RouterLinkButton, {
+					to: "/bylines",
+					search: { locale: entryLocale ?? void 0 },
+					variant: "secondary",
+					size: "sm",
+					children: _t7({
+						id: "yXD9HA",
+						message: "Manage bylines in {entryLocale}",
+						values: { entryLocale }
+					})
+				})]
+			}),
 			/* @__PURE__ */ jsxs("div", {
 				className: "flex gap-2",
 				children: [/* @__PURE__ */ jsx(Select, {
@@ -17600,10 +18041,10 @@ function formatInstallCount(count) {
 * Lists each requested capability with a human-readable explanation.
 * User must explicitly confirm before the action proceeds.
 */
-function CapabilityConsentDialog({ mode, pluginName, capabilities, allowedHosts, newCapabilities = [], auditVerdict, isPending = false, error, onConfirm, onCancel }) {
+function CapabilityConsentDialog({ mode, pluginName, capabilities, allowedHosts, newCapabilities = [], newlyPublicRoutes = [], auditVerdict, isPending = false, error, onConfirm, onCancel }) {
 	const { _: _t } = useLingui();
 	const newSet = new Set(newCapabilities);
-	const isUpdate = mode === "update" || newCapabilities.length > 0;
+	const isUpdate = mode === "update" || newCapabilities.length > 0 || newlyPublicRoutes.length > 0;
 	return /* @__PURE__ */ jsxs("div", {
 		className: "fixed inset-0 z-50 flex items-center justify-center",
 		role: "dialog",
@@ -17644,31 +18085,60 @@ function CapabilityConsentDialog({ mode, pluginName, capabilities, allowedHosts,
 				}),
 				/* @__PURE__ */ jsxs("div", {
 					className: "px-6 py-4 space-y-3",
-					children: [capabilities.map((cap) => {
-						const isNew = newSet.has(cap);
-						return /* @__PURE__ */ jsxs("div", {
-							className: cn("flex items-start gap-3 rounded-md p-2 text-sm", isNew ? "bg-warning/10 border border-warning/30" : "bg-kumo-tint/50"),
-							children: [/* @__PURE__ */ jsx(ShieldCheck, { className: cn("mt-0.5 h-4 w-4 shrink-0", isNew ? "text-warning" : "text-kumo-subtle") }), /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("span", {
-								className: cn(isNew && "font-medium"),
-								children: describeCapability(cap, allowedHosts)
-							}), isNew && /* @__PURE__ */ jsx("span", {
-								className: "ms-2 text-xs text-warning font-medium",
-								children: _t({
-									id: "p6NueD",
-									message: "NEW"
+					children: [
+						capabilities.map((cap) => {
+							const isNew = newSet.has(cap);
+							return /* @__PURE__ */ jsxs("div", {
+								className: cn("flex items-start gap-3 rounded-md p-2 text-sm", isNew ? "bg-warning/10 border border-warning/30" : "bg-kumo-tint/50"),
+								children: [/* @__PURE__ */ jsx(ShieldCheck, { className: cn("mt-0.5 h-4 w-4 shrink-0", isNew ? "text-warning" : "text-kumo-subtle") }), /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("span", {
+									className: cn(isNew && "font-medium"),
+									children: describeCapability(cap, allowedHosts)
+								}), isNew && /* @__PURE__ */ jsx("span", {
+									className: "ms-2 text-xs text-warning font-medium",
+									children: _t({
+										id: "p6NueD",
+										message: "NEW"
+									})
+								})] })]
+							}, cap);
+						}),
+						newlyPublicRoutes.length > 0 && /* @__PURE__ */ jsxs("div", {
+							className: "rounded-md border border-warning/30 bg-warning/10 p-3 text-sm",
+							children: [
+								/* @__PURE__ */ jsxs("div", {
+									className: "flex items-center gap-2 font-medium text-warning",
+									children: [/* @__PURE__ */ jsx(Warning, { className: "h-4 w-4 shrink-0" }), _t({
+										id: "NXruDe",
+										message: "New public routes"
+									})]
+								}),
+								/* @__PURE__ */ jsx("p", {
+									className: "mt-1 text-xs text-kumo-subtle",
+									children: _t({
+										id: "qCUL4n",
+										message: "This update exposes the following routes without authentication:"
+									})
+								}),
+								/* @__PURE__ */ jsx("ul", {
+									className: "mt-2 space-y-1 ps-5 text-xs",
+									children: newlyPublicRoutes.map((route) => /* @__PURE__ */ jsx("li", {
+										className: "list-disc font-mono",
+										children: route
+									}, route))
 								})
-							})] })]
-						}, cap);
-					}), auditVerdict && auditVerdict !== "pass" && /* @__PURE__ */ jsxs("div", {
-						className: cn("flex items-center gap-2 rounded-md p-3 text-sm mt-2", auditVerdict === "warn" ? "bg-warning/10 text-warning" : "bg-kumo-danger/10 text-kumo-danger"),
-						children: [auditVerdict === "warn" ? /* @__PURE__ */ jsx(Warning, { className: "h-4 w-4 shrink-0" }) : /* @__PURE__ */ jsx(ShieldWarning, { className: "h-4 w-4 shrink-0" }), /* @__PURE__ */ jsx("span", { children: auditVerdict === "warn" ? _t({
-							id: "zPUuMZ",
-							message: "Security audit flagged potential concerns with this plugin."
-						}) : _t({
-							id: "nvVzbM",
-							message: "Security audit flagged this plugin as potentially unsafe."
-						}) })]
-					})]
+							]
+						}),
+						auditVerdict && auditVerdict !== "pass" && /* @__PURE__ */ jsxs("div", {
+							className: cn("flex items-center gap-2 rounded-md p-3 text-sm mt-2", auditVerdict === "warn" ? "bg-warning/10 text-warning" : "bg-kumo-danger/10 text-kumo-danger"),
+							children: [auditVerdict === "warn" ? /* @__PURE__ */ jsx(Warning, { className: "h-4 w-4 shrink-0" }) : /* @__PURE__ */ jsx(ShieldWarning, { className: "h-4 w-4 shrink-0" }), /* @__PURE__ */ jsx("span", { children: auditVerdict === "warn" ? _t({
+								id: "zPUuMZ",
+								message: "Security audit flagged potential concerns with this plugin."
+							}) : _t({
+								id: "nvVzbM",
+								message: "Security audit flagged this plugin as potentially unsafe."
+							}) })]
+						})
+					]
 				}),
 				/* @__PURE__ */ jsx(DialogError, {
 					message: error,
@@ -17707,6 +18177,332 @@ function CapabilityConsentDialog({ mode, pluginName, capabilities, allowedHosts,
 	});
 }
 
+//#endregion
+//#region src/lib/api/registry.ts
+let cachedDiscovery = null;
+async function getDiscoveryClient(config) {
+	if (cachedDiscovery && cachedDiscovery.config.aggregatorUrl === config.aggregatorUrl && cachedDiscovery.config.acceptLabelers === config.acceptLabelers) return cachedDiscovery.client;
+	const DiscoveryClient = (await import("@emdash-cms/registry-client/discovery")).DiscoveryClient;
+	const discovery = new DiscoveryClient({
+		aggregatorUrl: config.aggregatorUrl,
+		acceptLabelers: config.acceptLabelers
+	});
+	const wrapped = {
+		async searchPackages(opts) {
+			return discovery.searchPackages({
+				q: opts.q,
+				cursor: opts.cursor,
+				limit: opts.limit
+			});
+		},
+		async resolvePackage(handle, slug) {
+			return discovery.resolvePackage({
+				handle,
+				slug
+			});
+		},
+		async getPackage(did, slug) {
+			return discovery.getPackage({
+				did,
+				slug
+			});
+		},
+		async getLatestRelease(did, slug) {
+			return discovery.getLatestRelease({
+				did,
+				package: slug
+			});
+		},
+		async listReleases(did, slug, opts) {
+			return discovery.listReleases({
+				did,
+				package: slug,
+				cursor: opts?.cursor,
+				limit: opts?.limit
+			});
+		}
+	};
+	cachedDiscovery = {
+		config,
+		client: wrapped
+	};
+	return wrapped;
+}
+/**
+* Returns whether a release should be considered installable given the
+* configured policy. Currently implements the minimum-release-age check
+* described in RFC 0001's "Pre-label gap and launch tempo" section,
+* plus the `minimumReleaseAgeExclude` allowlist.
+*
+* Returns `false` (release blocked) when the policy is configured but
+* the release is missing a valid `indexedAt` -- we fail closed rather
+* than silently letting unbounded-age releases through.
+*/
+function releasePassesPolicy(release, pkg, policy, now = Date.now()) {
+	if (!policy?.minimumReleaseAgeSeconds) return true;
+	if (releaseExemptFromMinimumAge(policy.minimumReleaseAgeExclude, pkg.did, pkg.slug)) return true;
+	const indexedAt = Date.parse(release.indexedAt);
+	if (!Number.isFinite(indexedAt)) return false;
+	return (now - indexedAt) / 1e3 >= policy.minimumReleaseAgeSeconds;
+}
+/**
+* Canonicalize a capabilities list for set-style comparison. Mirrors
+* the server-side helper `canonicalCapabilitiesForDriftCheck` in
+* `packages/core/src/registry/config.ts` -- both sides must produce
+* the same canonical shape so the install handler's drift check is
+* stable across reorderings, duplicates, and junk entries.
+*
+* Filters non-strings, deduplicates, and sorts lexically.
+*/
+function canonicalCapabilitiesForDriftCheck(value) {
+	if (!Array.isArray(value)) return [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const entry of value) if (typeof entry === "string" && entry.length > 0) seen.add(entry);
+	return [...seen].toSorted();
+}
+/**
+* Matches a `(publisher_did, slug)` against the
+* `minimumReleaseAgeExclude` allowlist. Mirrors the server-side helper
+* of the same name in `packages/core/src/registry/config.ts`.
+*
+* DID-only on purpose: handles are aggregator-supplied envelope data
+* and accepting them as a trust input would let a compromised
+* aggregator bypass the holdback by claiming any handle for any
+* package. DIDs are tied to the AT URI of the record itself.
+*
+* Entries from the config list have already been lowercased at
+* manifest build time, so this only needs to lowercase the runtime
+* values for comparison.
+*/
+function releaseExemptFromMinimumAge(exclude, publisherDid, slug) {
+	if (!exclude || exclude.length === 0) return false;
+	const didLower = publisherDid.toLowerCase();
+	const fullDid = `${didLower}/${slug.toLowerCase()}`;
+	for (const entry of exclude) {
+		if (entry === didLower) return true;
+		if (entry === fullDid) return true;
+	}
+	return false;
+}
+async function searchRegistryPackages(config, opts) {
+	return (await getDiscoveryClient(config)).searchPackages(opts);
+}
+async function resolveRegistryPackage(config, handle, slug) {
+	return (await getDiscoveryClient(config)).resolvePackage(handle, slug);
+}
+async function getRegistryPackage(config, did, slug) {
+	return (await getDiscoveryClient(config)).getPackage(did, slug);
+}
+async function listRegistryReleases(config, did, slug, opts) {
+	return (await getDiscoveryClient(config)).listReleases(did, slug, opts);
+}
+/**
+* Resolve a publisher DID to its claimed handle using the same
+* `LocalActorResolver` pattern as `@emdash-cms/plugin-cli` and
+* `@emdash-cms/auth-atproto`. Bidirectional verification (handle's
+* domain points back to the same DID) is part of the resolver --
+* `LocalActorResolver` returns the sentinel `"handle.invalid"` when
+* the `alsoKnownAs` handle is present but doesn't round-trip.
+*
+* Three distinct outcomes the UI can render:
+*
+*   - `{ status: "ok", handle }` — verified handle, round-trip OK.
+*   - `{ status: "invalid" }` — DID claims a handle but it doesn't
+*     resolve back. The publisher's handle setup is broken; the admin
+*     should see a clear "Invalid handle" indicator rather than the
+*     raw DID.
+*   - `{ status: "missing" }` — no handle claimed at all (no
+*     `alsoKnownAs`), or the DID document couldn't be fetched (network
+*     error, unsupported DID method).
+*/
+let actorResolver = null;
+async function getActorResolver() {
+	if (actorResolver) return actorResolver;
+	const { CompositeDidDocumentResolver, CompositeHandleResolver, DohJsonHandleResolver, LocalActorResolver, PlcDidDocumentResolver, WebDidDocumentResolver, WellKnownHandleResolver } = await import("@atcute/identity-resolver");
+	actorResolver = new LocalActorResolver({
+		handleResolver: new CompositeHandleResolver({ methods: {
+			dns: new DohJsonHandleResolver({ dohUrl: "https://cloudflare-dns.com/dns-query" }),
+			http: new WellKnownHandleResolver()
+		} }),
+		didDocumentResolver: new CompositeDidDocumentResolver({ methods: {
+			plc: new PlcDidDocumentResolver(),
+			web: new WebDidDocumentResolver()
+		} })
+	});
+	return actorResolver;
+}
+/**
+* localStorage-backed cache for DID→handle resolutions. Handles are
+* stable for hours-to-days in practice, but bound the cache so a
+* compromised handle eventually flips back to "invalid" without a
+* forced refresh. 24h matches the typical atproto handle TTL.
+*
+* Failures (network errors, unsupported DID method) are *not* cached --
+* those should retry on the next render.
+*/
+const HANDLE_CACHE_TTL_MS = 1440 * 60 * 1e3;
+const HANDLE_CACHE_KEY_PREFIX = "emdash:did-handle:";
+function isCachedResolution(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const candidate = value;
+	return typeof candidate.expiresAt === "number" && typeof candidate.resolution === "object" && candidate.resolution !== null;
+}
+function readHandleCache(did) {
+	if (typeof localStorage === "undefined") return null;
+	try {
+		const raw = localStorage.getItem(`${HANDLE_CACHE_KEY_PREFIX}${did}`);
+		if (!raw) return null;
+		const parsed = JSON.parse(raw);
+		if (!isCachedResolution(parsed) || parsed.expiresAt < Date.now()) return null;
+		return parsed.resolution;
+	} catch {
+		return null;
+	}
+}
+function writeHandleCache(did, resolution) {
+	if (typeof localStorage === "undefined") return;
+	try {
+		const entry = {
+			resolution,
+			expiresAt: Date.now() + HANDLE_CACHE_TTL_MS
+		};
+		localStorage.setItem(`${HANDLE_CACHE_KEY_PREFIX}${did}`, JSON.stringify(entry));
+	} catch {}
+}
+async function resolveDidToHandle(did) {
+	const cached = readHandleCache(did);
+	if (cached) return cached;
+	let result;
+	try {
+		const resolved = await (await getActorResolver()).resolve(did);
+		if (resolved.handle === "handle.invalid") result = { status: "invalid" };
+		else if (resolved.handle) result = {
+			status: "ok",
+			handle: resolved.handle
+		};
+		else result = { status: "missing" };
+	} catch (err) {
+		console.warn(`[registry] DID->handle resolution failed for ${did}:`, err);
+		return { status: "missing" };
+	}
+	writeHandleCache(did, result);
+	return result;
+}
+const INSTALL_ENDPOINT = `${API_BASE}/admin/plugins/registry/install`;
+/**
+* Install a plugin from the registry.
+*
+* Posts to the EmDash server, which re-resolves the same `(handle,
+* slug)` against the aggregator, re-verifies the bundle's checksum
+* against the signed release record, and writes the install. Surfaces
+* structured error codes (`RELEASE_YANKED`, `CHECKSUM_MISMATCH`,
+* `DECLARED_ACCESS_DRIFT`, etc.) that callers map to localized
+* messages.
+*/
+async function installRegistryPlugin(body) {
+	return parseApiResponse(await apiFetch(INSTALL_ENDPOINT, {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify(body)
+	}), i18n._({
+		id: "/LWKyx",
+		message: "Failed to install plugin"
+	}));
+}
+/**
+* Server-side escalation gate raised by the update endpoint when the
+* target version widens the trust contract. Carries the diff the user
+* needs to see in the consent dialog before the call is retried with the
+* matching `confirm*` flag.
+*/
+var RegistryUpdateEscalationError = class extends Error {
+	code;
+	capabilityChanges;
+	routeVisibilityChanges;
+	constructor(code, message, capabilityChanges, routeVisibilityChanges) {
+		super(message);
+		this.name = "RegistryUpdateEscalationError";
+		this.code = code;
+		this.capabilityChanges = capabilityChanges;
+		this.routeVisibilityChanges = routeVisibilityChanges;
+	}
+};
+/**
+* Update a registry-source plugin to a newer version.
+* `POST /_emdash/api/admin/plugins/registry/:id/update`
+*
+* Called without `confirm*` flags first, this throws
+* `RegistryUpdateEscalationError` when the target version widens
+* permissions; the caller renders a consent dialog populated from the
+* error's diff, then re-calls with the matching `confirm*` flag once
+* the user agrees.
+*/
+async function updateRegistryPlugin(pluginId, opts = {}) {
+	const response = await apiFetch(`${API_BASE}/admin/plugins/registry/${encodeURIComponent(pluginId)}/update`, {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify(opts)
+	});
+	if (response.ok) return;
+	const escalation = parseEscalation(await response.clone().json().catch(() => void 0));
+	if (escalation) throw escalation;
+	await throwResponseError(response, i18n._({
+		id: "8m84rO",
+		message: "Failed to update plugin"
+	}));
+}
+function parseEscalation(body) {
+	if (!body || typeof body !== "object" || !("error" in body)) return null;
+	const error = body.error;
+	if (!error || typeof error !== "object" || !("code" in error)) return null;
+	const code = error.code;
+	if (code !== "CAPABILITY_ESCALATION" && code !== "ROUTE_VISIBILITY_ESCALATION") return null;
+	const details = "details" in error && error.details && typeof error.details === "object" ? error.details : {};
+	const capabilityChanges = normaliseCapabilityChanges("capabilityChanges" in details ? details.capabilityChanges : void 0);
+	const routeVisibilityChanges = normaliseRouteVisibilityChanges("routeVisibilityChanges" in details ? details.routeVisibilityChanges : void 0);
+	return new RegistryUpdateEscalationError(code, "message" in error && typeof error.message === "string" ? error.message : i18n._({
+		id: "dgD7yY",
+		message: "Plugin update requires re-consent"
+	}), capabilityChanges, routeVisibilityChanges);
+}
+function normaliseCapabilityChanges(value) {
+	if (!value || typeof value !== "object") return {
+		added: [],
+		removed: []
+	};
+	const v = value;
+	return {
+		added: Array.isArray(v.added) ? v.added.filter((s) => typeof s === "string") : [],
+		removed: Array.isArray(v.removed) ? v.removed.filter((s) => typeof s === "string") : []
+	};
+}
+function normaliseRouteVisibilityChanges(value) {
+	if (!value || typeof value !== "object") return void 0;
+	const v = value;
+	if (!Array.isArray(v.newlyPublic)) return void 0;
+	const newlyPublic = v.newlyPublic.filter((s) => typeof s === "string");
+	return newlyPublic.length > 0 ? { newlyPublic } : void 0;
+}
+/**
+* Uninstall a registry-source plugin.
+* `POST /_emdash/api/admin/plugins/registry/:id/uninstall`
+*
+* The server refuses to uninstall non-registry sources, so calling this
+* with a marketplace or config plugin id is a no-op error rather than a
+* destructive cross-source action.
+*/
+async function uninstallRegistryPlugin(pluginId, opts = {}) {
+	const response = await apiFetch(`${API_BASE}/admin/plugins/registry/${encodeURIComponent(pluginId)}/uninstall`, {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify(opts)
+	});
+	if (!response.ok) await throwResponseError(response, i18n._({
+		id: "IDxl65",
+		message: "Failed to uninstall plugin"
+	}));
+}
+
 //#endregion
 //#region src/components/PluginManager.tsx
 /**
@@ -17796,7 +18592,7 @@ function PluginManager({ manifest }) {
 		if (!updates) return /* @__PURE__ */ new Map();
 		return new Map(updates.map((u) => [u.pluginId, u]));
 	}, [updates]);
-	const hasMarketplacePlugins = plugins?.some((p) => p.source === "marketplace");
+	const hasUpdatableSources = plugins?.some((p) => p.source === "marketplace" || p.source === "registry");
 	if (isLoading) return /* @__PURE__ */ jsxs("div", {
 		className: "space-y-6",
 		children: [/* @__PURE__ */ jsx("h1", {
@@ -17844,7 +18640,7 @@ function PluginManager({ manifest }) {
 				}), /* @__PURE__ */ jsxs("div", {
 					className: "flex items-center gap-3",
 					children: [
-						hasMarketplacePlugins && /* @__PURE__ */ jsx(Button, {
+						hasUpdatableSources && /* @__PURE__ */ jsx(Button, {
 							variant: "ghost",
 							onClick: () => void refetchUpdates(),
 							disabled: isCheckingUpdates,
@@ -17939,15 +18735,17 @@ function PluginCard({ plugin, updateInfo, onEnable, onDisable, isToggling, hasMa
 	const [expanded, setExpanded] = React$1.useState(false);
 	const [showUpdateConsent, setShowUpdateConsent] = React$1.useState(false);
 	const [showUninstallConfirm, setShowUninstallConfirm] = React$1.useState(false);
+	const [registryEscalation, setRegistryEscalation] = React$1.useState(null);
 	const queryClient = useQueryClient();
 	const toastManager = Toast.useToastManager();
 	const isMarketplace = plugin.source === "marketplace";
 	const isRegistry = plugin.source === "registry";
 	const hasUpdate = !!updateInfo && updateInfo.installed !== updateInfo.latest;
 	const updateMutation = useMutation({
-		mutationFn: () => updateMarketplacePlugin(plugin.id, { confirmCapabilities: true }),
+		mutationFn: (opts) => isRegistry ? updateRegistryPlugin(plugin.id, opts) : updateMarketplacePlugin(plugin.id, { confirmCapabilities: true }),
 		onSuccess: () => {
 			setShowUpdateConsent(false);
+			setRegistryEscalation(null);
 			queryClient.invalidateQueries({ queryKey: ["plugins"] });
 			queryClient.invalidateQueries({ queryKey: ["plugin-updates"] });
 			queryClient.invalidateQueries({ queryKey: ["manifest"] });
@@ -17965,10 +18763,29 @@ function PluginCard({ plugin, updateInfo, onEnable, onDisable, isToggling, hasMa
 					}
 				})
 			});
+		},
+		onError: (err) => {
+			if (err instanceof RegistryUpdateEscalationError) {
+				setRegistryEscalation(err);
+				setShowUpdateConsent(true);
+			}
 		}
 	});
+	const handleUpdateClick = () => {
+		if (isRegistry) {
+			setRegistryEscalation(null);
+			updateMutation.mutate({});
+		} else setShowUpdateConsent(true);
+	};
+	const handleUpdateConfirm = () => {
+		if (isRegistry) {
+			const opts = { confirmCapabilityChanges: true };
+			if (registryEscalation?.code === "ROUTE_VISIBILITY_ESCALATION") opts.confirmRouteVisibilityChanges = true;
+			updateMutation.mutate(opts);
+		} else updateMutation.mutate({});
+	};
 	const uninstallMutation = useMutation({
-		mutationFn: (deleteData) => uninstallMarketplacePlugin(plugin.id, { deleteData }),
+		mutationFn: (deleteData) => isRegistry ? uninstallRegistryPlugin(plugin.id, { deleteData }) : uninstallMarketplacePlugin(plugin.id, { deleteData }),
 		onSuccess: () => {
 			setShowUninstallConfirm(false);
 			queryClient.invalidateQueries({ queryKey: ["plugins"] });
@@ -18097,7 +18914,7 @@ function PluginCard({ plugin, updateInfo, onEnable, onDisable, isToggling, hasMa
 							hasUpdate && /* @__PURE__ */ jsx(Button, {
 								variant: "outline",
 								size: "sm",
-								onClick: () => setShowUpdateConsent(true),
+								onClick: handleUpdateClick,
 								disabled: updateMutation.isPending,
 								children: updateMutation.isPending ? _t2({
 									id: "RXbEvi",
@@ -18261,7 +19078,7 @@ function PluginCard({ plugin, updateInfo, onEnable, onDisable, isToggling, hasMa
 							] })
 						]
 					}),
-					isMarketplace && /* @__PURE__ */ jsx("div", {
+					(isMarketplace || isRegistry) && /* @__PURE__ */ jsx("div", {
 						className: "pt-2 border-t",
 						children: /* @__PURE__ */ jsx(Button, {
 							variant: "ghost",
@@ -18274,13 +19091,6 @@ function PluginCard({ plugin, updateInfo, onEnable, onDisable, isToggling, hasMa
 								message: "Uninstall"
 							})
 						})
-					}),
-					isRegistry && /* @__PURE__ */ jsx("div", {
-						className: "pt-2 border-t text-xs text-kumo-subtle",
-						children: _t2({
-							id: "YvXVtr",
-							message: "Uninstall is not yet available for registry plugins. Disable the plugin to stop it from running; full uninstall will land in a follow-up."
-						})
 					})
 				]
 			})]
@@ -18289,12 +19099,14 @@ function PluginCard({ plugin, updateInfo, onEnable, onDisable, isToggling, hasMa
 			mode: "update",
 			pluginName: plugin.name,
 			capabilities: plugin.capabilities,
-			newCapabilities: [],
+			newCapabilities: registryEscalation?.capabilityChanges.added ?? [],
+			newlyPublicRoutes: registryEscalation?.routeVisibilityChanges?.newlyPublic ?? [],
 			isPending: updateMutation.isPending,
-			error: getMutationError(updateMutation.error),
-			onConfirm: () => updateMutation.mutate(),
+			error: updateMutation.error instanceof RegistryUpdateEscalationError ? null : getMutationError(updateMutation.error),
+			onConfirm: handleUpdateConfirm,
 			onCancel: () => {
 				setShowUpdateConsent(false);
+				setRegistryEscalation(null);
 				updateMutation.reset();
 			}
 		}),
@@ -21951,235 +22763,6 @@ function Redirects() {
 	});
 }
 
-//#endregion
-//#region src/lib/api/registry.ts
-let cachedDiscovery = null;
-async function getDiscoveryClient(config) {
-	if (cachedDiscovery && cachedDiscovery.config.aggregatorUrl === config.aggregatorUrl && cachedDiscovery.config.acceptLabelers === config.acceptLabelers) return cachedDiscovery.client;
-	const DiscoveryClient = (await import("@emdash-cms/registry-client/discovery")).DiscoveryClient;
-	const discovery = new DiscoveryClient({
-		aggregatorUrl: config.aggregatorUrl,
-		acceptLabelers: config.acceptLabelers
-	});
-	const wrapped = {
-		async searchPackages(opts) {
-			return await discovery.searchPackages({
-				q: opts.q,
-				cursor: opts.cursor,
-				limit: opts.limit
-			});
-		},
-		async resolvePackage(handle, slug) {
-			return await discovery.resolvePackage({
-				handle,
-				slug
-			});
-		},
-		async getPackage(did, slug) {
-			return await discovery.getPackage({
-				did,
-				slug
-			});
-		},
-		async getLatestRelease(did, slug) {
-			return await discovery.getLatestRelease({
-				did,
-				package: slug
-			});
-		},
-		async listReleases(did, slug, cursor) {
-			return await discovery.listReleases({
-				did,
-				package: slug,
-				cursor
-			});
-		}
-	};
-	cachedDiscovery = {
-		config,
-		client: wrapped
-	};
-	return wrapped;
-}
-/**
-* Returns whether a release should be considered installable given the
-* configured policy. Currently implements the minimum-release-age check
-* described in RFC 0001's "Pre-label gap and launch tempo" section,
-* plus the `minimumReleaseAgeExclude` allowlist.
-*
-* Returns `false` (release blocked) when the policy is configured but
-* the release is missing a valid `indexedAt` -- we fail closed rather
-* than silently letting unbounded-age releases through.
-*/
-function releasePassesPolicy(release, pkg, policy, now = Date.now()) {
-	if (!policy?.minimumReleaseAgeSeconds) return true;
-	if (releaseExemptFromMinimumAge(policy.minimumReleaseAgeExclude, pkg.did, pkg.slug)) return true;
-	const indexedAt = Date.parse(release.indexedAt);
-	if (!Number.isFinite(indexedAt)) return false;
-	return (now - indexedAt) / 1e3 >= policy.minimumReleaseAgeSeconds;
-}
-/**
-* Canonicalize a capabilities list for set-style comparison. Mirrors
-* the server-side helper `canonicalCapabilitiesForDriftCheck` in
-* `packages/core/src/registry/config.ts` -- both sides must produce
-* the same canonical shape so the install handler's drift check is
-* stable across reorderings, duplicates, and junk entries.
-*
-* Filters non-strings, deduplicates, and sorts lexically.
-*/
-function canonicalCapabilitiesForDriftCheck(value) {
-	if (!Array.isArray(value)) return [];
-	const seen = /* @__PURE__ */ new Set();
-	for (const entry of value) if (typeof entry === "string" && entry.length > 0) seen.add(entry);
-	return [...seen].toSorted();
-}
-/**
-* Matches a `(publisher_did, slug)` against the
-* `minimumReleaseAgeExclude` allowlist. Mirrors the server-side helper
-* of the same name in `packages/core/src/registry/config.ts`.
-*
-* DID-only on purpose: handles are aggregator-supplied envelope data
-* and accepting them as a trust input would let a compromised
-* aggregator bypass the holdback by claiming any handle for any
-* package. DIDs are tied to the AT URI of the record itself.
-*
-* Entries from the config list have already been lowercased at
-* manifest build time, so this only needs to lowercase the runtime
-* values for comparison.
-*/
-function releaseExemptFromMinimumAge(exclude, publisherDid, slug) {
-	if (!exclude || exclude.length === 0) return false;
-	const didLower = publisherDid.toLowerCase();
-	const fullDid = `${didLower}/${slug.toLowerCase()}`;
-	for (const entry of exclude) {
-		if (entry === didLower) return true;
-		if (entry === fullDid) return true;
-	}
-	return false;
-}
-async function searchRegistryPackages(config, opts) {
-	return (await getDiscoveryClient(config)).searchPackages(opts);
-}
-async function resolveRegistryPackage(config, handle, slug) {
-	return (await getDiscoveryClient(config)).resolvePackage(handle, slug);
-}
-async function getRegistryPackage(config, did, slug) {
-	return (await getDiscoveryClient(config)).getPackage(did, slug);
-}
-async function getLatestRegistryRelease(config, did, slug) {
-	return (await getDiscoveryClient(config)).getLatestRelease(did, slug);
-}
-/**
-* Resolve a publisher DID to its claimed handle using the same
-* `LocalActorResolver` pattern as `@emdash-cms/plugin-cli` and
-* `@emdash-cms/auth-atproto`. Bidirectional verification (handle's
-* domain points back to the same DID) is part of the resolver --
-* `LocalActorResolver` returns the sentinel `"handle.invalid"` when
-* the `alsoKnownAs` handle is present but doesn't round-trip.
-*
-* Three distinct outcomes the UI can render:
-*
-*   - `{ status: "ok", handle }` — verified handle, round-trip OK.
-*   - `{ status: "invalid" }` — DID claims a handle but it doesn't
-*     resolve back. The publisher's handle setup is broken; the admin
-*     should see a clear "Invalid handle" indicator rather than the
-*     raw DID.
-*   - `{ status: "missing" }` — no handle claimed at all (no
-*     `alsoKnownAs`), or the DID document couldn't be fetched (network
-*     error, unsupported DID method).
-*/
-let actorResolver = null;
-async function getActorResolver() {
-	if (actorResolver) return actorResolver;
-	const { CompositeDidDocumentResolver, CompositeHandleResolver, DohJsonHandleResolver, LocalActorResolver, PlcDidDocumentResolver, WebDidDocumentResolver, WellKnownHandleResolver } = await import("@atcute/identity-resolver");
-	actorResolver = new LocalActorResolver({
-		handleResolver: new CompositeHandleResolver({ methods: {
-			dns: new DohJsonHandleResolver({ dohUrl: "https://cloudflare-dns.com/dns-query" }),
-			http: new WellKnownHandleResolver()
-		} }),
-		didDocumentResolver: new CompositeDidDocumentResolver({ methods: {
-			plc: new PlcDidDocumentResolver(),
-			web: new WebDidDocumentResolver()
-		} })
-	});
-	return actorResolver;
-}
-/**
-* localStorage-backed cache for DID→handle resolutions. Handles are
-* stable for hours-to-days in practice, but bound the cache so a
-* compromised handle eventually flips back to "invalid" without a
-* forced refresh. 24h matches the typical atproto handle TTL.
-*
-* Failures (network errors, unsupported DID method) are *not* cached --
-* those should retry on the next render.
-*/
-const HANDLE_CACHE_TTL_MS = 1440 * 60 * 1e3;
-const HANDLE_CACHE_KEY_PREFIX = "emdash:did-handle:";
-function readHandleCache(did) {
-	if (typeof localStorage === "undefined") return null;
-	try {
-		const raw = localStorage.getItem(`${HANDLE_CACHE_KEY_PREFIX}${did}`);
-		if (!raw) return null;
-		const parsed = JSON.parse(raw);
-		if (!parsed || typeof parsed.expiresAt !== "number" || parsed.expiresAt < Date.now()) return null;
-		return parsed.resolution;
-	} catch {
-		return null;
-	}
-}
-function writeHandleCache(did, resolution) {
-	if (typeof localStorage === "undefined") return;
-	try {
-		const entry = {
-			resolution,
-			expiresAt: Date.now() + HANDLE_CACHE_TTL_MS
-		};
-		localStorage.setItem(`${HANDLE_CACHE_KEY_PREFIX}${did}`, JSON.stringify(entry));
-	} catch {}
-}
-async function resolveDidToHandle(did) {
-	const cached = readHandleCache(did);
-	if (cached) return cached;
-	let result;
-	try {
-		const resolved = await (await getActorResolver()).resolve(did);
-		if (resolved.handle === "handle.invalid") result = { status: "invalid" };
-		else if (resolved.handle) result = {
-			status: "ok",
-			handle: resolved.handle
-		};
-		else result = { status: "missing" };
-	} catch (err) {
-		console.warn(`[registry] DID->handle resolution failed for ${did}:`, err);
-		return { status: "missing" };
-	}
-	writeHandleCache(did, result);
-	return result;
-}
-const INSTALL_ENDPOINT = `${API_BASE}/admin/plugins/registry/install`;
-/**
-* Install a plugin from the registry.
-*
-* Posts to the EmDash server, which re-resolves the same `(handle,
-* slug)` against the aggregator, re-verifies the bundle's checksum
-* against the signed release record, and writes the install. Surfaces
-* structured error codes (`RELEASE_YANKED`, `CHECKSUM_MISMATCH`,
-* `DECLARED_ACCESS_DRIFT`, etc.) that callers map to localized
-* messages.
-*/
-async function installRegistryPlugin(body) {
-	const response = await apiFetch(INSTALL_ENDPOINT, {
-		method: "POST",
-		headers: { "Content-Type": "application/json" },
-		body: JSON.stringify(body)
-	});
-	if (!response.ok) await throwResponseError(response, i18n._({
-		id: "/LWKyx",
-		message: "Failed to install plugin"
-	}));
-	return (await response.json()).data;
-}
-
 //#endregion
 //#region src/components/PublisherHandle.tsx
 /**
@@ -22392,7 +22975,9 @@ function RegistryBrowse({ config, installedRegistryUris = /* @__PURE__ */ new Se
 function RegistryPackageCard({ pkg, installed }) {
 	const { _: _t2 } = useLingui();
 	const linkSegment = usePublisherHandle(pkg.did, pkg.handle).handle ?? pkg.did;
-	const profile = pkg.profile;
+	const name = pkg.profile?.name;
+	const description = pkg.profile?.description;
+	const license = pkg.profile?.license;
 	const verified = (pkg.labels ?? []).some((l) => l.val === "verified");
 	return /* @__PURE__ */ jsx(Link$1, {
 		to: "/plugins/marketplace/$pluginId",
@@ -22410,7 +22995,7 @@ function RegistryPackageCard({ pkg, installed }) {
 						className: "flex items-center gap-2",
 						children: [/* @__PURE__ */ jsx("h2", {
 							className: "truncate font-semibold",
-							children: profile.name ?? pkg.slug
+							children: name ?? pkg.slug
 						}), verified ? /* @__PURE__ */ jsx(ShieldCheck, {
 							className: "h-4 w-4 shrink-0 text-kumo-brand",
 							"aria-label": _t2({
@@ -22424,9 +23009,13 @@ function RegistryPackageCard({ pkg, installed }) {
 						aggregatorHandle: pkg.handle,
 						variant: "card"
 					}),
-					profile.description ? /* @__PURE__ */ jsx("p", {
+					description ? /* @__PURE__ */ jsx("p", {
 						className: "mt-2 line-clamp-2 text-sm text-kumo-default",
-						children: profile.description
+						children: description
+					}) : null,
+					license ? /* @__PURE__ */ jsx("p", {
+						className: "mt-2 text-xs text-kumo-subtle",
+						children: license
 					}) : null,
 					installed ? /* @__PURE__ */ jsx("div", {
 						className: "mt-3",
@@ -22467,7 +23056,7 @@ function RegistryPluginDetail({ pluginId, config }) {
 	const { data: installedPlugins } = useQuery({
 		queryKey: ["plugins"],
 		queryFn: async () => {
-			const { fetchPlugins } = await import("./plugins-qrjvPK4g.js").then((n) => n.a);
+			const { fetchPlugins } = await import("./plugins-BZzztFdK.js").then((n) => n.a);
 			return fetchPlugins();
 		}
 	});
@@ -22488,20 +23077,63 @@ function RegistryPluginDetail({ pluginId, config }) {
 		enabled: Boolean(publisher && slug)
 	});
 	const handleResult = usePublisherHandle(pkg?.did ?? "", pkg?.handle);
-	const { data: release } = useQuery({
+	const { data: releasesData } = useQuery({
 		queryKey: [
 			"registry",
-			"latest-release",
+			"releases",
 			config.aggregatorUrl,
+			config.acceptLabelers,
 			pkg?.did,
 			slug
 		],
-		queryFn: () => getLatestRegistryRelease(config, pkg.did, slug),
+		queryFn: () => listRegistryReleases(config, pkg.did, slug, { limit: 100 }),
 		enabled: Boolean(pkg?.did && slug)
 	});
-	const ext = (release?.release)?.extensions?.["com.emdashcms.experimental.package.releaseExtension"];
+	const releases = React$1.useMemo(() => (releasesData?.releases ?? []).filter((r) => r.release !== null && !isYanked(r)), [releasesData]);
+	const hasFilteredAllReleases = (releasesData?.releases.length ?? 0) > 0 && releases.length === 0;
+	const defaultVersion = React$1.useMemo(() => {
+		if (!pkg || releases.length === 0) return void 0;
+		return (releases.find((r) => releasePassesPolicy(r, {
+			did: pkg.did,
+			slug
+		}, config.policy)) ?? releases[0])?.version;
+	}, [
+		pkg,
+		releases,
+		slug,
+		config.policy
+	]);
+	const [selectedVersion, setSelectedVersion] = React$1.useState(void 0);
+	const [prevPluginId, setPrevPluginId] = React$1.useState(pluginId);
+	if (prevPluginId !== pluginId) {
+		setPrevPluginId(pluginId);
+		setSelectedVersion(void 0);
+	}
+	if (selectedVersion !== void 0 && releases.length > 0 && !releases.some((r) => r.version === selectedVersion)) setSelectedVersion(void 0);
+	const effectiveVersion = selectedVersion ?? defaultVersion;
+	const release = React$1.useMemo(() => releases.find((r) => r.version === effectiveVersion), [releases, effectiveVersion]);
+	const isPreRelease = release ? isPreReleaseVersion(release.version) : false;
+	const ext = (release?.release?.extensions)?.["com.emdashcms.experimental.package.releaseExtension"];
 	const capabilities = Array.isArray(ext?.capabilities) ? canonicalCapabilitiesForDriftCheck(ext?.capabilities) : canonicalCapabilitiesForDriftCheck(declaredAccessToCapabilityList(ext?.declaredAccess));
-	const profile = pkg?.profile;
+	const pkgProfile = pkg?.profile ?? null;
+	const displayName = pkgProfile?.name;
+	const description = pkgProfile?.description;
+	const licenseText = pkgProfile?.license;
+	const keywordList = pkgProfile?.keywords ?? [];
+	const authorList = (pkgProfile?.authors ?? []).map((a) => ({
+		name: a.name,
+		url: safeExternalHref(a.url),
+		email: safeEmail(a.email)
+	}));
+	const securityList = (pkgProfile?.security ?? []).flatMap((c) => {
+		const url = safeExternalHref(c.url);
+		const email = safeEmail(c.email);
+		return url || email ? [{
+			url,
+			email
+		}] : [];
+	});
+	const repoHref = safeExternalHref(release?.release?.repo);
 	const verified = (pkg?.labels ?? []).some((l) => l.val === "verified");
 	const policyOk = release && pkg ? releasePassesPolicy(release, {
 		did: pkg.did,
@@ -22566,7 +23198,7 @@ function RegistryPluginDetail({ pluginId, config }) {
 		children: [
 			/* @__PURE__ */ jsx(BackLink, {}),
 			/* @__PURE__ */ jsxs("div", {
-				className: "flex items-start gap-4",
+				className: "flex flex-wrap items-start gap-4",
 				children: [
 					/* @__PURE__ */ jsx("div", {
 						className: "rounded-xl bg-kumo-subtle p-3 text-kumo-subtle",
@@ -22582,7 +23214,7 @@ function RegistryPluginDetail({ pluginId, config }) {
 								className: "flex items-center gap-2",
 								children: [/* @__PURE__ */ jsx("h1", {
 									className: "truncate text-3xl font-bold",
-									children: profile?.name ?? slug
+									children: displayName ?? slug
 								}), verified ? /* @__PURE__ */ jsx(ShieldCheck, {
 									className: "h-5 w-5 shrink-0 text-kumo-brand",
 									"aria-label": _t({
@@ -22606,40 +23238,88 @@ function RegistryPluginDetail({ pluginId, config }) {
 									})
 								]
 							}),
-							release ? /* @__PURE__ */ jsxs("p", {
-								className: "text-xs text-kumo-subtle",
-								children: [
-									_t({
-										id: "YYdC3A",
-										message: "Version {0}",
-										values: { 0: release.version }
-									}),
-									" · ",
-									_t({
-										id: "294VT5",
-										message: "indexed {0}",
-										values: { 0: formatDate(release.indexedAt) }
-									})
-								]
+							release ? /* @__PURE__ */ jsxs("div", {
+								className: "mt-1 flex flex-wrap items-center gap-2",
+								children: [/* @__PURE__ */ jsxs("p", {
+									className: "text-xs text-kumo-subtle",
+									children: [
+										_t({
+											id: "YYdC3A",
+											message: "Version {0}",
+											values: { 0: release.version }
+										}),
+										" · ",
+										_t({
+											id: "294VT5",
+											message: "indexed {0}",
+											values: { 0: formatDate(release.indexedAt) }
+										})
+									]
+								}), isPreRelease ? /* @__PURE__ */ jsx(Badge, { children: _t({
+									id: "omrja/",
+									message: "Pre-release"
+								}) }) : null]
 							}) : null
 						]
 					}),
-					/* @__PURE__ */ jsx("div", { children: isInstalled ? /* @__PURE__ */ jsx(Button, {
-						variant: "secondary",
-						disabled: true,
-						children: _t({
-							id: "eQkgKV",
-							message: "Installed"
-						})
-					}) : /* @__PURE__ */ jsx(Button, {
-						variant: "primary",
-						disabled: !release || !policyOk || handleResult.status === "invalid",
-						onClick: () => setShowConsent(true),
-						children: _t({
-							id: "TKQ7K+",
-							message: "Install"
-						})
-					}) })
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex min-w-0 flex-wrap items-center gap-2",
+						children: [releases.length > 1 ? /* @__PURE__ */ jsx(Select, {
+							"aria-label": _t({
+								id: "eE0JZ4",
+								message: "Version"
+							}),
+							className: "w-full max-w-[220px]",
+							value: effectiveVersion ?? "",
+							onValueChange: (v) => setSelectedVersion(v ?? void 0),
+							renderValue: (v) => typeof v === "string" ? v : "",
+							children: releases.map((r) => {
+								const preRelease = isPreReleaseVersion(r.version);
+								const policyBlocked = !releasePassesPolicy(r, {
+									did: pkg.did,
+									slug
+								}, config.policy);
+								return /* @__PURE__ */ jsx(Select.Option, {
+									value: r.version,
+									children: /* @__PURE__ */ jsxs("span", {
+										className: "flex items-center gap-2",
+										children: [
+											/* @__PURE__ */ jsx("span", { children: r.version }),
+											preRelease ? /* @__PURE__ */ jsx("span", {
+												className: "text-xs text-kumo-subtle",
+												children: _t({
+													id: "D2C1D+",
+													message: "(pre-release)"
+												})
+											}) : null,
+											policyBlocked ? /* @__PURE__ */ jsx("span", {
+												className: "text-xs text-kumo-subtle",
+												children: _t({
+													id: "W3SUIF",
+													message: "(too new)"
+												})
+											}) : null
+										]
+									})
+								}, r.version);
+							})
+						}) : null, isInstalled ? /* @__PURE__ */ jsx(Button, {
+							variant: "secondary",
+							disabled: true,
+							children: _t({
+								id: "eQkgKV",
+								message: "Installed"
+							})
+						}) : /* @__PURE__ */ jsx(Button, {
+							variant: "primary",
+							disabled: !release || !policyOk || handleResult.status === "invalid",
+							onClick: () => setShowConsent(true),
+							children: _t({
+								id: "TKQ7K+",
+								message: "Install"
+							})
+						})]
+					})
 				]
 			}),
 			handleResult.status === "invalid" ? /* @__PURE__ */ jsxs("div", {
@@ -22659,6 +23339,23 @@ function RegistryPluginDetail({ pluginId, config }) {
 					})
 				})] })]
 			}) : null,
+			hasFilteredAllReleases ? /* @__PURE__ */ jsxs("div", {
+				className: "flex items-start gap-3 rounded-md border border-kumo-warning bg-kumo-warning/10 p-4 text-kumo-warning",
+				role: "status",
+				children: [/* @__PURE__ */ jsx(Warning, { className: "mt-0.5 h-5 w-5 shrink-0" }), /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("p", {
+					className: "font-medium",
+					children: _t({
+						id: "rqsq95",
+						message: "No installable releases"
+					})
+				}), /* @__PURE__ */ jsx("p", {
+					className: "mt-1 text-sm text-kumo-default",
+					children: _t({
+						id: "o+La9d",
+						message: "Every published release of this plugin has been withdrawn or could not be verified. Check back later, or contact the publisher."
+					})
+				})] })]
+			}) : null,
 			release && !policyOk ? /* @__PURE__ */ jsxs("div", {
 				className: "flex items-start gap-3 rounded-md border border-kumo-warning bg-kumo-warning/10 p-4 text-kumo-warning",
 				role: "status",
@@ -22677,10 +23374,82 @@ function RegistryPluginDetail({ pluginId, config }) {
 					})
 				})] })]
 			}) : null,
-			profile?.description ? /* @__PURE__ */ jsx("p", {
+			description ? /* @__PURE__ */ jsx("p", {
 				className: "text-base text-kumo-default",
-				children: profile.description
+				children: description
+			}) : null,
+			licenseText || repoHref || keywordList.length > 0 ? /* @__PURE__ */ jsxs("section", {
+				className: "flex flex-wrap items-center gap-2",
+				children: [
+					licenseText ? /* @__PURE__ */ jsx(LicenseBadge, { license: licenseText }) : null,
+					keywordList.map((k) => /* @__PURE__ */ jsx(Badge, { children: k }, k)),
+					repoHref ? /* @__PURE__ */ jsx(LinkButton, {
+						href: repoHref,
+						external: true,
+						variant: "secondary",
+						children: _t({
+							id: "n/I+da",
+							message: "View source"
+						})
+					}) : null
+				]
 			}) : null,
+			authorList.length > 0 ? /* @__PURE__ */ jsxs("section", { children: [/* @__PURE__ */ jsx("h2", {
+				className: "text-sm font-semibold text-kumo-subtle",
+				children: _t({
+					id: "dpqPBg",
+					message: "Authors"
+				})
+			}), /* @__PURE__ */ jsx("ul", {
+				className: "mt-2 space-y-1",
+				children: authorList.map((a, i) => /* @__PURE__ */ jsxs("li", {
+					className: "flex flex-wrap items-center gap-x-3 gap-y-1 text-sm",
+					children: [
+						/* @__PURE__ */ jsx("span", {
+							className: "font-medium text-kumo-default",
+							children: a.name
+						}),
+						a.url ? /* @__PURE__ */ jsx("a", {
+							href: a.url,
+							target: "_blank",
+							rel: "noreferrer",
+							className: "text-kumo-brand hover:underline",
+							children: _t({
+								id: "On0aF2",
+								message: "Website"
+							})
+						}) : null,
+						a.email ? /* @__PURE__ */ jsx("a", {
+							href: `mailto:${a.email}`,
+							className: "text-kumo-brand hover:underline",
+							children: a.email
+						}) : null
+					]
+				}, `${a.name}-${i}`))
+			})] }) : null,
+			securityList.length > 0 ? /* @__PURE__ */ jsxs("section", { children: [/* @__PURE__ */ jsx("h2", {
+				className: "text-sm font-semibold text-kumo-subtle",
+				children: _t({
+					id: "FDZXmz",
+					message: "Security contacts"
+				})
+			}), /* @__PURE__ */ jsx("ul", {
+				className: "mt-2 space-y-1",
+				children: securityList.map((c, i) => /* @__PURE__ */ jsxs("li", {
+					className: "flex flex-wrap items-center gap-x-3 gap-y-1 text-sm",
+					children: [c.email ? /* @__PURE__ */ jsx("a", {
+						href: `mailto:${c.email}`,
+						className: "text-kumo-brand hover:underline",
+						children: c.email
+					}) : null, c.url ? /* @__PURE__ */ jsx("a", {
+						href: c.url,
+						target: "_blank",
+						rel: "noreferrer",
+						className: "text-kumo-brand hover:underline",
+						children: c.url
+					}) : null]
+				}, `${c.email ?? c.url ?? "contact"}-${i}`))
+			})] }) : null,
 			capabilities.length > 0 ? /* @__PURE__ */ jsxs("section", { children: [/* @__PURE__ */ jsx("h2", {
 				className: "text-sm font-semibold text-kumo-subtle",
 				children: _t({
@@ -22693,7 +23462,7 @@ function RegistryPluginDetail({ pluginId, config }) {
 			})] }) : null,
 			showConsent && release ? /* @__PURE__ */ jsx(CapabilityConsentDialog, {
 				mode: "install",
-				pluginName: profile?.name ?? slug,
+				pluginName: displayName ?? slug,
 				capabilities,
 				isPending: installMutation.isPending,
 				error: getMutationError(installMutation.error),
@@ -22737,6 +23506,33 @@ function declaredAccessToCapabilityList(declaredAccess) {
 	}
 	return out;
 }
+const PRE_RELEASE_VERSION_RE = /^\d+\.\d+\.\d+-/;
+/**
+* Detects semver pre-release identifiers (`1.0.0-alpha.1`, `2.0.0-rc.2`). The
+* release lexicon does not enforce semver shape, so a permissive `includes("-")`
+* check would light up the badge for malformed values like `-1.0.0` or
+* `abc-def`. Require a `MAJOR.MINOR.PATCH-` prefix instead.
+*/
+function isPreReleaseVersion(version) {
+	return PRE_RELEASE_VERSION_RE.test(version);
+}
+const YANKED_LABEL_VALUE = "security:yanked";
+/**
+* Aggregators forward labels applied by their configured labellers. `security:yanked`
+* is a hard-enforcement label that publishers can self-apply (or that a labeller
+* applies on their behalf) to retract a release after publication. Sites whose
+* `acceptLabelers` config includes the labeller never see yanked releases at all
+* (server filtering), but sites without it receive yanked releases interleaved
+* with installable ones — filter them out so they never reach the picker.
+*
+* `neg` (negated labels) is intentionally ignored to match the server install
+* handler, which only checks `l.val === "security:yanked"`. Diverging here would
+* let the UI surface an install affordance the server will reject with
+* `RELEASE_YANKED`. Honoring `neg` on both sides is a separate follow-up.
+*/
+function isYanked(release) {
+	return (release.labels ?? []).some((l) => l.val === YANKED_LABEL_VALUE);
+}
 function formatDate(iso) {
 	try {
 		return new Date(iso).toLocaleDateString();
@@ -22744,6 +23540,61 @@ function formatDate(iso) {
 		return iso;
 	}
 }
+/**
+* SPDX page URL for a license, or `null` when the value isn't a single
+* SPDX identifier (compound expressions like "MIT OR Apache-2.0" and the
+* literal "proprietary" have no canonical spdx.org page).
+*/
+/**
+* Validate an untrusted aggregator-supplied URL for use in an `href`.
+* Returns the normalised URL only when it is an absolute `http(s)` URL;
+* everything else (relative, `javascript:`, `data:`, garbage, non-string)
+* returns `null`. The profile/release records are pass-throughs from a
+* remote service, so an unsanitised `href` is stored XSS in the
+* authenticated admin origin.
+*/
+function safeExternalHref(value) {
+	if (typeof value !== "string" || value.length === 0) return null;
+	let parsed;
+	try {
+		parsed = new URL(value);
+	} catch {
+		return null;
+	}
+	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
+	return parsed.href;
+}
+const EMAIL_RE = /^[^\s@<>()[\]\\,;:"?&=%/]+@[^\s@<>()[\]\\,;:"?&=%/]+\.[^\s@<>()[\]\\,;:"?&=%/]+$/;
+function safeEmail(value) {
+	if (typeof value !== "string") return null;
+	const email = value.trim();
+	if (email.length === 0 || email.length > 320) return null;
+	return EMAIL_RE.test(email) ? email : null;
+}
+const SPDX_SINGLE_ID_RE = /^[A-Za-z0-9.+-]+$/;
+function spdxLicenseHref(license) {
+	const id = license.trim();
+	if (!SPDX_SINGLE_ID_RE.test(id)) return null;
+	if (id.toLowerCase() === "proprietary") return null;
+	return `https://spdx.org/licenses/${id}.html`;
+}
+function LicenseBadge({ license }) {
+	const { _: _t3 } = useLingui();
+	const href = spdxLicenseHref(license);
+	if (!href) return /* @__PURE__ */ jsx(Badge, { children: license });
+	return /* @__PURE__ */ jsx("a", {
+		href,
+		target: "_blank",
+		rel: "noreferrer",
+		"aria-label": _t3({
+			id: "4Q1BOX",
+			message: "View the {license} license on spdx.org",
+			values: { license }
+		}),
+		className: "hover:opacity-80",
+		children: /* @__PURE__ */ jsx(Badge, { children: license })
+	});
+}
 function formatHoldback(seconds) {
 	if (seconds <= 0) return "0s";
 	if (seconds < 3600) return `${Math.round(seconds / 60)} min`;
@@ -34067,6 +34918,13 @@ function AuthorMappingStep({ authorMappings, emdashUsers, onMappingChange, onCon
 
 //#endregion
 //#region src/routes/bylines.tsx
+/**
+* True when the load-more snapshot still matches the current filter state.
+* Used to discard appends from requests whose filters have changed mid-flight.
+*/
+function loadMoreSnapshotMatches(snapshot, current) {
+	return snapshot.search === current.search && snapshot.guestFilter === current.guestFilter && snapshot.locale === current.locale;
+}
 function toFormState(byline) {
 	if (!byline) return {
 		slug: "",
@@ -34092,21 +34950,39 @@ function getUserLabel(user) {
 function BylinesPage() {
 	const { _: _t } = useLingui();
 	const queryClient = useQueryClient();
+	const navigate = useNavigate$1();
+	const { locale: routeLocale } = useSearch({ from: "/_admin/bylines" });
 	const [search, setSearch] = React$1.useState("");
 	const [guestFilter, setGuestFilter] = React$1.useState("all");
 	const [selectedId, setSelectedId] = React$1.useState(null);
 	const [showDeleteConfirm, setShowDeleteConfirm] = React$1.useState(false);
 	const [allItems, setAllItems] = React$1.useState([]);
 	const [nextCursor, setNextCursor] = React$1.useState(void 0);
+	const { data: manifest } = useQuery({
+		queryKey: ["manifest"],
+		queryFn: fetchManifest
+	});
+	const i18n = useI18nConfig(manifest);
+	const isMultiLocale = !!i18n && i18n.locales.length > 1;
+	const activeLocale = routeLocale ?? i18n?.defaultLocale ?? void 0;
+	const handleLocaleChange = (locale) => {
+		navigate({
+			to: "/bylines",
+			search: { locale: locale || void 0 }
+		});
+		setSelectedId(null);
+	};
 	const { data, isLoading, error } = useQuery({
 		queryKey: [
 			"bylines",
 			search,
-			guestFilter
+			guestFilter,
+			activeLocale ?? null
 		],
 		queryFn: () => fetchBylines({
 			search: search || void 0,
 			isGuest: guestFilter === "all" ? void 0 : guestFilter === "guest",
+			locale: activeLocale,
 			limit: 50
 		})
 	});
@@ -34122,28 +34998,44 @@ function BylinesPage() {
 	});
 	const users = usersData?.items ?? [];
 	const loadMoreMutation = useMutation({
-		mutationFn: async () => {
-			if (!nextCursor) return null;
-			return fetchBylines({
-				search: search || void 0,
-				isGuest: guestFilter === "all" ? void 0 : guestFilter === "guest",
-				limit: 50,
-				cursor: nextCursor
-			});
+		mutationFn: async (snapshot) => {
+			return {
+				result: await fetchBylines({
+					search: snapshot.search || void 0,
+					isGuest: snapshot.guestFilter === "all" ? void 0 : snapshot.guestFilter === "guest",
+					locale: snapshot.locale,
+					limit: 50,
+					cursor: snapshot.cursor
+				}),
+				snapshot
+			};
 		},
-		onSuccess: (result) => {
-			if (result) {
-				setAllItems((prev) => [...prev, ...result.items]);
-				setNextCursor(result.nextCursor);
-			}
+		onSuccess: ({ result, snapshot }) => {
+			if (!loadMoreSnapshotMatches(snapshot, {
+				search,
+				guestFilter,
+				locale: activeLocale
+			})) return;
+			setAllItems((prev) => [...prev, ...result.items]);
+			setNextCursor(result.nextCursor);
 		}
 	});
 	const items = allItems;
-	const selected = items.find((item) => item.id === selectedId) ?? null;
+	const { data: selectedRemote } = useQuery({
+		queryKey: ["byline", selectedId],
+		queryFn: () => selectedId ? fetchByline(selectedId) : Promise.resolve(null),
+		enabled: !!selectedId
+	});
+	const selected = selectedRemote ?? items.find((item) => item.id === selectedId) ?? null;
 	const [form, setForm] = React$1.useState(() => toFormState(null));
 	React$1.useEffect(() => {
 		setForm(toFormState(selected));
-	}, [selectedId, selected]);
+	}, [selected]);
+	const { data: translationsData } = useQuery({
+		queryKey: ["byline-translations", selectedId],
+		queryFn: () => selectedId ? fetchBylineTranslations(selectedId) : Promise.resolve({ items: [] }),
+		enabled: !!selectedId && isMultiLocale
+	});
 	const createMutation = useMutation({
 		mutationFn: () => createByline({
 			slug: form.slug,
@@ -34151,7 +35043,8 @@ function BylinesPage() {
 			bio: form.bio || null,
 			websiteUrl: form.websiteUrl || null,
 			userId: form.userId,
-			isGuest: form.isGuest
+			isGuest: form.isGuest,
+			locale: activeLocale
 		}),
 		onSuccess: (created) => {
 			queryClient.invalidateQueries({ queryKey: ["bylines"] });
@@ -34172,6 +35065,7 @@ function BylinesPage() {
 		},
 		onSuccess: () => {
 			queryClient.invalidateQueries({ queryKey: ["bylines"] });
+			if (selectedId) queryClient.invalidateQueries({ queryKey: ["byline", selectedId] });
 		}
 	});
 	const deleteMutation = useMutation({
@@ -34185,6 +35079,26 @@ function BylinesPage() {
 			setShowDeleteConfirm(false);
 		}
 	});
+	const [pendingTranslationLocale, setPendingTranslationLocale] = React$1.useState(null);
+	const translateMutation = useMutation({
+		mutationFn: (targetLocale) => {
+			if (!selectedId) throw new Error("No byline selected");
+			setPendingTranslationLocale(targetLocale);
+			return createBylineTranslation(selectedId, { locale: targetLocale });
+		},
+		onSettled: () => {
+			setPendingTranslationLocale(null);
+		},
+		onSuccess: (created) => {
+			queryClient.invalidateQueries({ queryKey: ["bylines"] });
+			if (selectedId) queryClient.invalidateQueries({ queryKey: ["byline-translations", selectedId] });
+			navigate({
+				to: "/bylines",
+				search: { locale: created.locale }
+			});
+			setSelectedId(created.id);
+		}
+	});
 	if (isLoading) return /* @__PURE__ */ jsx("div", {
 		className: "flex items-center justify-center min-h-[30vh]",
 		children: /* @__PURE__ */ jsx(Loader, {})
@@ -34198,230 +35112,273 @@ function BylinesPage() {
 		})
 	});
 	const isSaving = createMutation.isPending || updateMutation.isPending;
-	const mutationError = createMutation.error || updateMutation.error || deleteMutation.error;
+	const mutationError = createMutation.error || updateMutation.error || deleteMutation.error || translateMutation.error;
 	return /* @__PURE__ */ jsxs("div", {
-		className: "grid grid-cols-1 gap-6 lg:grid-cols-[320px_1fr]",
+		className: "space-y-4",
 		children: [
+			isMultiLocale && i18n && activeLocale ? /* @__PURE__ */ jsxs("div", {
+				className: "flex items-center justify-between",
+				children: [/* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx("h1", {
+					className: "text-2xl font-semibold",
+					children: _t({
+						id: "xLGa7J",
+						message: "Bylines"
+					})
+				}) }), /* @__PURE__ */ jsx(LocaleSwitcher, {
+					locales: i18n.locales,
+					defaultLocale: i18n.defaultLocale,
+					value: activeLocale,
+					onChange: handleLocaleChange
+				})]
+			}) : null,
 			/* @__PURE__ */ jsxs("div", {
-				className: "rounded-lg border p-4",
+				className: "grid grid-cols-1 gap-6 lg:grid-cols-[320px_1fr]",
 				children: [/* @__PURE__ */ jsxs("div", {
-					className: "mb-4 space-y-2",
-					children: [/* @__PURE__ */ jsx(Input, {
-						placeholder: _t({
-							id: "4L2LjM",
-							message: "Search bylines"
-						}),
-						value: search,
-						onChange: (e) => setSearch(e.target.value)
-					}), /* @__PURE__ */ jsxs("div", {
-						className: "flex items-center gap-2",
-						children: [/* @__PURE__ */ jsx("div", {
-							className: "flex-1",
-							children: /* @__PURE__ */ jsx(Select, {
-								"aria-label": _t({
-									id: "kYxs0a",
-									message: "Filter byline type"
-								}),
-								value: guestFilter,
-								onValueChange: (v) => setGuestFilter(v ?? "all"),
-								items: {
-									all: _t({
-										id: "VK3dVJ",
-										message: "All bylines"
-									}),
-									guest: _t({
-										id: "+0jFzA",
-										message: "Guest only"
+					className: "rounded-lg border p-4",
+					children: [/* @__PURE__ */ jsxs("div", {
+						className: "mb-4 space-y-2",
+						children: [/* @__PURE__ */ jsx(Input, {
+							placeholder: _t({
+								id: "4L2LjM",
+								message: "Search bylines"
+							}),
+							value: search,
+							onChange: (e) => setSearch(e.target.value)
+						}), /* @__PURE__ */ jsxs("div", {
+							className: "flex items-center gap-2",
+							children: [/* @__PURE__ */ jsx("div", {
+								className: "flex-1",
+								children: /* @__PURE__ */ jsx(Select, {
+									"aria-label": _t({
+										id: "kYxs0a",
+										message: "Filter byline type"
 									}),
-									linked: _t({
-										id: "RZ5T1J",
-										message: "Linked only"
-									})
+									value: guestFilter,
+									onValueChange: (v) => setGuestFilter(v ?? "all"),
+									items: {
+										all: _t({
+											id: "VK3dVJ",
+											message: "All bylines"
+										}),
+										guest: _t({
+											id: "+0jFzA",
+											message: "Guest only"
+										}),
+										linked: _t({
+											id: "RZ5T1J",
+											message: "Linked only"
+										})
+									},
+									className: "w-full"
+								})
+							}), /* @__PURE__ */ jsx(Button, {
+								variant: "secondary",
+								onClick: () => {
+									setSelectedId(null);
+									setForm(toFormState(null));
 								},
-								className: "w-full"
-							})
-						}), /* @__PURE__ */ jsx(Button, {
-							variant: "secondary",
-							onClick: () => {
-								setSelectedId(null);
-								setForm(toFormState(null));
-							},
-							children: _t({
-								id: "isRobC",
-								message: "New"
-							})
+								children: _t({
+									id: "isRobC",
+									message: "New"
+								})
+							})]
 						})]
+					}), /* @__PURE__ */ jsxs("div", {
+						className: "space-y-2 max-h-[70vh] overflow-auto",
+						children: [
+							items.map((item) => {
+								return /* @__PURE__ */ jsxs("button", {
+									type: "button",
+									onClick: () => setSelectedId(item.id),
+									className: `w-full rounded border p-3 text-start ${item.id === selectedId ? "border-kumo-brand bg-kumo-brand/10" : "border-kumo-line"}`,
+									children: [/* @__PURE__ */ jsx("p", {
+										className: "font-medium",
+										children: item.displayName
+									}), /* @__PURE__ */ jsxs("p", {
+										className: "text-xs text-kumo-subtle",
+										children: [item.slug, item.isGuest ? _t({
+											id: "89z9Fh",
+											message: " - Guest"
+										}) : item.userId ? _t({
+											id: "X4uMa1",
+											message: " - Linked"
+										}) : ""]
+									})]
+								}, item.id);
+							}),
+							items.length === 0 && /* @__PURE__ */ jsx("p", {
+								className: "text-sm text-kumo-subtle",
+								children: _t({
+									id: "Qc/a/A",
+									message: "No bylines found"
+								})
+							}),
+							nextCursor && /* @__PURE__ */ jsx(Button, {
+								variant: "secondary",
+								className: "w-full mt-2",
+								onClick: () => loadMoreMutation.mutate({
+									search,
+									guestFilter,
+									locale: activeLocale,
+									cursor: nextCursor
+								}),
+								disabled: loadMoreMutation.isPending,
+								children: loadMoreMutation.isPending ? _t({
+									id: "Z3FXyt",
+									message: "Loading..."
+								}) : _t({
+									id: "yQ2kGp",
+									message: "Load more"
+								})
+							})
+						]
 					})]
 				}), /* @__PURE__ */ jsxs("div", {
-					className: "space-y-2 max-h-[70vh] overflow-auto",
+					className: "rounded-lg border p-6 space-y-6",
 					children: [
-						items.map((item) => {
-							return /* @__PURE__ */ jsxs("button", {
-								type: "button",
-								onClick: () => setSelectedId(item.id),
-								className: `w-full rounded border p-3 text-start ${item.id === selectedId ? "border-kumo-brand bg-kumo-brand/10" : "border-kumo-line"}`,
-								children: [/* @__PURE__ */ jsx("p", {
-									className: "font-medium",
-									children: item.displayName
-								}), /* @__PURE__ */ jsxs("p", {
-									className: "text-xs text-kumo-subtle",
-									children: [item.slug, item.isGuest ? _t({
-										id: "89z9Fh",
-										message: " - Guest"
-									}) : item.userId ? _t({
-										id: "X4uMa1",
-										message: " - Linked"
-									}) : ""]
-								})]
-							}, item.id);
-						}),
-						items.length === 0 && /* @__PURE__ */ jsx("p", {
-							className: "text-sm text-kumo-subtle",
-							children: _t({
-								id: "Qc/a/A",
-								message: "No bylines found"
-							})
-						}),
-						nextCursor && /* @__PURE__ */ jsx(Button, {
-							variant: "secondary",
-							className: "w-full mt-2",
-							onClick: () => loadMoreMutation.mutate(),
-							disabled: loadMoreMutation.isPending,
-							children: loadMoreMutation.isPending ? _t({
-								id: "Z3FXyt",
-								message: "Loading..."
+						/* @__PURE__ */ jsx("h2", {
+							className: "text-lg font-semibold",
+							children: selected ? _t({
+								id: "N6j2JH",
+								message: "Edit {0}",
+								values: { 0: selected.displayName }
 							}) : _t({
-								id: "yQ2kGp",
-								message: "Load more"
+								id: "d6HWlw",
+								message: "Create byline"
 							})
-						})
-					]
-				})]
-			}),
-			/* @__PURE__ */ jsxs("div", {
-				className: "rounded-lg border p-6",
-				children: [/* @__PURE__ */ jsx("h2", {
-					className: "text-lg font-semibold mb-4",
-					children: selected ? _t({
-						id: "N6j2JH",
-						message: "Edit {0}",
-						values: { 0: selected.displayName }
-					}) : _t({
-						id: "d6HWlw",
-						message: "Create byline"
-					})
-				}), /* @__PURE__ */ jsxs("div", {
-					className: "space-y-4",
-					children: [
-						/* @__PURE__ */ jsx(Input, {
-							label: _t({
-								id: "pfa8F0",
-								message: "Display name"
-							}),
-							value: form.displayName,
-							onChange: (e) => setForm((prev) => ({
-								...prev,
-								displayName: e.target.value
-							}))
-						}),
-						/* @__PURE__ */ jsx(Input, {
-							label: _t({
-								id: "L85WcV",
-								message: "Slug"
-							}),
-							value: form.slug,
-							onChange: (e) => setForm((prev) => ({
-								...prev,
-								slug: e.target.value
-							}))
-						}),
-						/* @__PURE__ */ jsx(Input, {
-							label: _t({
-								id: "XYcw7G",
-								message: "Website URL"
-							}),
-							value: form.websiteUrl,
-							onChange: (e) => setForm((prev) => ({
-								...prev,
-								websiteUrl: e.target.value
-							}))
-						}),
-						/* @__PURE__ */ jsx(InputArea, {
-							label: _t({
-								id: "E+oKCO",
-								message: "Bio"
-							}),
-							value: form.bio,
-							onChange: (e) => setForm((prev) => ({
-								...prev,
-								bio: e.target.value
-							})),
-							rows: 5
 						}),
-						/* @__PURE__ */ jsx(Select, {
-							label: _t({
-								id: "nti0N3",
-								message: "Linked user"
-							}),
-							value: form.userId ?? "",
-							onValueChange: (v) => {
-								const val = v || null;
-								setForm((prev) => ({
-									...prev,
-									userId: val,
-									isGuest: val ? false : prev.isGuest
-								}));
-							},
-							items: {
-								"": _t({
-									id: "n9o2+L",
-									message: "No linked user"
+						/* @__PURE__ */ jsxs("div", {
+							className: "space-y-4",
+							children: [
+								/* @__PURE__ */ jsx(Input, {
+									label: _t({
+										id: "pfa8F0",
+										message: "Display name"
+									}),
+									value: form.displayName,
+									onChange: (e) => setForm((prev) => ({
+										...prev,
+										displayName: e.target.value
+									}))
 								}),
-								...Object.fromEntries(users.map((u) => [u.id, getUserLabel(u)]))
-							},
-							className: "w-full"
-						}),
-						/* @__PURE__ */ jsx(Switch, {
-							label: _t({
-								id: "6CRaxp",
-								message: "Guest byline"
-							}),
-							checked: form.isGuest,
-							onCheckedChange: (checked) => setForm((prev) => ({
-								...prev,
-								isGuest: checked,
-								userId: checked ? null : prev.userId
-							}))
+								/* @__PURE__ */ jsx(Input, {
+									label: _t({
+										id: "L85WcV",
+										message: "Slug"
+									}),
+									value: form.slug,
+									onChange: (e) => setForm((prev) => ({
+										...prev,
+										slug: e.target.value
+									}))
+								}),
+								/* @__PURE__ */ jsx(Input, {
+									label: _t({
+										id: "XYcw7G",
+										message: "Website URL"
+									}),
+									value: form.websiteUrl,
+									onChange: (e) => setForm((prev) => ({
+										...prev,
+										websiteUrl: e.target.value
+									}))
+								}),
+								/* @__PURE__ */ jsx(InputArea, {
+									label: _t({
+										id: "E+oKCO",
+										message: "Bio"
+									}),
+									value: form.bio,
+									onChange: (e) => setForm((prev) => ({
+										...prev,
+										bio: e.target.value
+									})),
+									rows: 5
+								}),
+								/* @__PURE__ */ jsx(Select, {
+									label: _t({
+										id: "nti0N3",
+										message: "Linked user"
+									}),
+									value: form.userId ?? "",
+									onValueChange: (v) => {
+										const val = v || null;
+										setForm((prev) => ({
+											...prev,
+											userId: val,
+											isGuest: val ? false : prev.isGuest
+										}));
+									},
+									items: {
+										"": _t({
+											id: "n9o2+L",
+											message: "No linked user"
+										}),
+										...Object.fromEntries(users.map((u) => [u.id, getUserLabel(u)]))
+									},
+									className: "w-full"
+								}),
+								/* @__PURE__ */ jsx(Switch, {
+									label: _t({
+										id: "6CRaxp",
+										message: "Guest byline"
+									}),
+									checked: form.isGuest,
+									onCheckedChange: (checked) => setForm((prev) => ({
+										...prev,
+										isGuest: checked,
+										userId: checked ? null : prev.userId
+									}))
+								}),
+								/* @__PURE__ */ jsx(DialogError, { message: getMutationError(mutationError) }),
+								/* @__PURE__ */ jsxs("div", {
+									className: "flex gap-2 pt-2",
+									children: [/* @__PURE__ */ jsx(Button, {
+										onClick: () => {
+											if (selected) updateMutation.mutate();
+											else createMutation.mutate();
+										},
+										disabled: !form.displayName || !form.slug || isSaving,
+										children: isSaving ? _t({
+											id: "XvjC4F",
+											message: "Saving..."
+										}) : selected ? _t({
+											id: "tfDRzk",
+											message: "Save"
+										}) : _t({
+											id: "hYgDIe",
+											message: "Create"
+										})
+									}), selected && /* @__PURE__ */ jsx(Button, {
+										variant: "destructive",
+										onClick: () => setShowDeleteConfirm(true),
+										disabled: deleteMutation.isPending,
+										children: _t({
+											id: "cnGeoo",
+											message: "Delete"
+										})
+									})]
+								})
+							]
 						}),
-						/* @__PURE__ */ jsx(DialogError, { message: getMutationError(mutationError) }),
-						/* @__PURE__ */ jsxs("div", {
-							className: "flex gap-2 pt-2",
-							children: [/* @__PURE__ */ jsx(Button, {
-								onClick: () => {
-									if (selected) updateMutation.mutate();
-									else createMutation.mutate();
+						selected && isMultiLocale && i18n ? /* @__PURE__ */ jsx("div", {
+							className: "border-t pt-6",
+							children: /* @__PURE__ */ jsx(TranslationsPanel, {
+								locales: i18n.locales,
+								defaultLocale: i18n.defaultLocale,
+								currentLocale: selected.locale,
+								translations: translationsData?.items ?? [],
+								onOpen: (summary) => {
+									navigate({
+										to: "/bylines",
+										search: { locale: summary.locale }
+									});
+									setSelectedId(summary.id);
 								},
-								disabled: !form.displayName || !form.slug || isSaving,
-								children: isSaving ? _t({
-									id: "XvjC4F",
-									message: "Saving..."
-								}) : selected ? _t({
-									id: "tfDRzk",
-									message: "Save"
-								}) : _t({
-									id: "hYgDIe",
-									message: "Create"
-								})
-							}), selected && /* @__PURE__ */ jsx(Button, {
-								variant: "destructive",
-								onClick: () => setShowDeleteConfirm(true),
-								disabled: deleteMutation.isPending,
-								children: _t({
-									id: "cnGeoo",
-									message: "Delete"
-								})
-							})]
-						})
+								onCreate: (locale) => translateMutation.mutate(locale),
+								pendingLocale: pendingTranslationLocale
+							})
+						}) : null
 					]
 				})]
 			}),
@@ -35989,10 +36946,11 @@ function ContentNewPage() {
 		queryKey: ["manifest"],
 		queryFn: fetchManifest
 	});
+	const pickerLocale = locale ?? manifest?.i18n?.defaultLocale;
 	const createMutation = useMutation({
 		mutationFn: (data) => createContent(collection, {
 			...data,
-			locale
+			locale: pickerLocale
 		}),
 		onSuccess: (result) => {
 			queryClient.invalidateQueries({ queryKey: ["content", collection] });
@@ -36006,14 +36964,23 @@ function ContentNewPage() {
 		}
 	});
 	const pluginBlocks = React$1.useMemo(() => manifest ? getPluginBlocks(manifest) : [], [manifest]);
-	const { data: bylinesData } = useQuery({
-		queryKey: ["bylines"],
-		queryFn: () => fetchBylines({ limit: 100 })
+	const { data: bylinesData, isSuccess: bylinesLoaded } = useQuery({
+		queryKey: [
+			"bylines",
+			"picker",
+			pickerLocale ?? null
+		],
+		queryFn: () => fetchBylines({
+			locale: pickerLocale,
+			limit: 100
+		}),
+		enabled: !!manifest
 	});
 	const createBylineMutation = useMutation({
 		mutationFn: (input) => createByline({
 			...input,
-			isGuest: true
+			isGuest: true,
+			locale: pickerLocale
 		}),
 		onSuccess: () => {
 			queryClient.invalidateQueries({ queryKey: ["bylines"] });
@@ -36039,10 +37006,13 @@ function ContentNewPage() {
 		collectionLabel: collectionConfig.labelSingular || collectionConfig.label,
 		fields: collectionConfig.fields,
 		isNew: true,
+		entryLocale: pickerLocale,
+		i18n: manifest?.i18n,
 		isSaving: createMutation.isPending,
 		onSave: handleSave,
 		pluginBlocks,
 		availableBylines: bylinesData?.items,
+		availableBylinesLoaded: bylinesLoaded,
 		selectedBylines,
 		onBylinesChange: setSelectedBylines,
 		onQuickCreateByline: async (input) => {
@@ -36152,14 +37122,24 @@ function ContentEditPage() {
 		enabled: !!currentUser && currentUser.role >= ROLE_EDITOR,
 		staleTime: 300 * 1e3
 	});
-	const { data: bylinesData } = useQuery({
-		queryKey: ["bylines"],
-		queryFn: () => fetchBylines({ limit: 100 })
+	const itemLocale = rawItem?.locale ?? void 0;
+	const { data: bylinesData, isSuccess: bylinesLoaded } = useQuery({
+		queryKey: [
+			"bylines",
+			"picker",
+			itemLocale ?? null
+		],
+		queryFn: () => fetchBylines({
+			locale: itemLocale,
+			limit: 100
+		}),
+		enabled: !!itemLocale
 	});
 	const createBylineMutation = useMutation({
 		mutationFn: (input) => createByline({
 			...input,
-			isGuest: true
+			isGuest: true,
+			locale: itemLocale
 		}),
 		onSuccess: () => {
 			queryClient.invalidateQueries({ queryKey: ["bylines"] });
@@ -36542,6 +37522,7 @@ function ContentEditPage() {
 		hasSeo: collectionConfig.hasSeo,
 		onSeoChange: handleSeoChange,
 		availableBylines: bylinesData?.items,
+		availableBylinesLoaded: bylinesLoaded,
 		onQuickCreateByline: async (input) => {
 			return await createBylineMutation.mutateAsync(input);
 		},
@@ -36834,7 +37815,7 @@ function MarketplaceBrowsePage() {
 	const { data: plugins } = useQuery({
 		queryKey: ["plugins"],
 		queryFn: async () => {
-			const { fetchPlugins } = await import("./plugins-qrjvPK4g.js").then((n) => n.a);
+			const { fetchPlugins } = await import("./plugins-BZzztFdK.js").then((n) => n.a);
 			return fetchPlugins();
 		}
 	});
@@ -36865,7 +37846,7 @@ function MarketplaceDetailPage() {
 	const { data: plugins } = useQuery({
 		queryKey: ["plugins"],
 		queryFn: async () => {
-			const { fetchPlugins } = await import("./plugins-qrjvPK4g.js").then((n) => n.a);
+			const { fetchPlugins } = await import("./plugins-BZzztFdK.js").then((n) => n.a);
 			return fetchPlugins();
 		}
 	});
@@ -36949,10 +37930,15 @@ const usersRoute = createRoute({
 	path: "/users",
 	component: UsersPage
 });
+function parseBylinesLocaleSearch(search) {
+	if (typeof search.locale === "string" && search.locale.length > 0) return { locale: search.locale };
+	return { locale: void 0 };
+}
 const bylinesRoute = createRoute({
 	getParentRoute: () => adminLayoutRoute,
 	path: "/bylines",
-	component: BylinesPage
+	component: BylinesPage,
+	validateSearch: parseBylinesLocaleSearch
 });
 const contentTypesListRoute = createRoute({
 	getParentRoute: () => adminLayoutRoute,
@@ -37337,5 +38323,5 @@ function AdminApp({ pluginAdmins = EMPTY_PLUGINS, authProviders = EMPTY_AUTH_PRO
 }
 
 //#endregion
-export { API_BASE, API_TOKEN_SCOPES, AdminApp, AdminApp as App, AuthProviderProvider, CAPABILITY_LABELS, ContentEditor, ContentList, DEFAULT_LOCALE, Dashboard, EditorHeader, Header, Link, LoginPage, MediaLibrary, MediaPickerModal, PasskeyLogin, PasskeyRegistration, PluginAdminProvider, PortableTextEditor, SUPPORTED_LOCALES, SUPPORTED_LOCALE_CODES, SaveButton, Settings, SetupWizard, Shell, KumoSidebar as Sidebar, SidebarNav, analyzeWpPluginSite, analyzeWxr, apiFetch, bulkCommentAction, checkPluginUpdates, cn, compareRevisions, completeSignup, createAdminRouter, createAllowedDomain, createApiToken, createByline, createCollection, createContent, createField, createMenu, createMenuItem, createMenuTranslation, createRedirect, createSection, createTaxonomy, createTerm, createTermTranslation, createWidget, createWidgetArea, deleteAllowedDomain, deleteByline, deleteCollection, deleteComment, deleteContent, deleteField, deleteFromProvider, deleteMedia, deleteMenu, deleteMenuItem, deletePasskey, deleteRedirect, deleteSection, deleteTerm, deleteWidget, deleteWidgetArea, describeCapability, disablePlugin, disableUser, discardDraft, duplicateContent, enablePlugin, enableUser, executeWpPluginImport, executeWxrImport, fetch404Summary, fetchAllowedDomains, fetchApiTokens, fetchAuthMode, fetchByline, fetchBylines, fetchCollection, fetchCollections, fetchComment, fetchCommentCounts, fetchComments, fetchContent, fetchContentList, fetchDashboardStats, fetchEmailSettings, fetchFields, fetchManifest, fetchMarketplacePlugin, fetchMediaList, fetchMediaProviders, fetchMenu, fetchMenuTranslations, fetchMenus, fetchOrphanedTables, fetchPasskeys, fetchPlugin, fetchPlugins, fetchProviderMedia, fetchRedirects, fetchRevision, fetchRevisions, fetchSection, fetchSections, fetchSettings, fetchTaxonomyDef, fetchTaxonomyDefs, fetchTermTranslations, fetchTerms, fetchTheme, fetchTranslations, fetchTrashedContent, fetchUser, fetchUsers, fetchWidgetArea, fetchWidgetAreas, fetchWidgetComponents, generatePreviewUrl, getDraftStatus, getPreviewUrl, hasAllowedDomains, importWxrMedia, installMarketplacePlugin, inviteUser, parseApiResponse, permanentDeleteContent, prepareWxrImport, probeImportUrl, publishContent, registerOrphanedTable, renamePasskey, reorderFields, reorderMenuItems, reorderWidgets, requestSignup, resolveLocale, restoreContent, restoreRevision, revokeApiToken, rewriteContentUrls, scheduleContent, searchMarketplace, searchThemes, sendRecoveryLink, sendTestEmail, setSearchEnabled, throwResponseError, uninstallMarketplacePlugin, unpublishContent, unscheduleContent, updateAllowedDomain, updateByline, updateCollection, updateCommentStatus, updateContent, updateField, updateMarketplacePlugin, updateMedia, updateMenu, updateMenuItem, updateRedirect, updateSection, updateSettings, updateTerm, updateUser, updateWidget, uploadMedia, uploadToProvider, useAuthProviderList, useAuthProviders, useCurrentUser, useLocale, useNavigate, useParams, usePluginAdmins, usePluginField, usePluginHasPages, usePluginHasWidgets, usePluginPage, usePluginWidget, validateInviteToken, verifySignupToken };
+export { API_BASE, API_TOKEN_SCOPES, AdminApp, AdminApp as App, AuthProviderProvider, CAPABILITY_LABELS, ContentEditor, ContentList, DEFAULT_LOCALE, Dashboard, EditorHeader, Header, Link, LoginPage, MediaLibrary, MediaPickerModal, PasskeyLogin, PasskeyRegistration, PluginAdminProvider, PortableTextEditor, SUPPORTED_LOCALES, SUPPORTED_LOCALE_CODES, SaveButton, Settings, SetupWizard, Shell, KumoSidebar as Sidebar, SidebarNav, analyzeWpPluginSite, analyzeWxr, apiFetch, bulkCommentAction, checkPluginUpdates, cn, compareRevisions, completeSignup, createAdminRouter, createAllowedDomain, createApiToken, createByline, createBylineTranslation, createCollection, createContent, createField, createMenu, createMenuItem, createMenuTranslation, createRedirect, createSection, createTaxonomy, createTerm, createTermTranslation, createWidget, createWidgetArea, deleteAllowedDomain, deleteByline, deleteCollection, deleteComment, deleteContent, deleteField, deleteFromProvider, deleteMedia, deleteMenu, deleteMenuItem, deletePasskey, deleteRedirect, deleteSection, deleteTerm, deleteWidget, deleteWidgetArea, describeCapability, disablePlugin, disableUser, discardDraft, duplicateContent, enablePlugin, enableUser, executeWpPluginImport, executeWxrImport, fetch404Summary, fetchAllowedDomains, fetchApiTokens, fetchAuthMode, fetchByline, fetchBylineTranslations, fetchBylines, fetchCollection, fetchCollections, fetchComment, fetchCommentCounts, fetchComments, fetchContent, fetchContentList, fetchDashboardStats, fetchEmailSettings, fetchFields, fetchManifest, fetchMarketplacePlugin, fetchMediaList, fetchMediaProviders, fetchMenu, fetchMenuTranslations, fetchMenus, fetchOrphanedTables, fetchPasskeys, fetchPlugin, fetchPlugins, fetchProviderMedia, fetchRedirects, fetchRevision, fetchRevisions, fetchSection, fetchSections, fetchSettings, fetchTaxonomyDef, fetchTaxonomyDefs, fetchTermTranslations, fetchTerms, fetchTheme, fetchTranslations, fetchTrashedContent, fetchUser, fetchUsers, fetchWidgetArea, fetchWidgetAreas, fetchWidgetComponents, generatePreviewUrl, getDraftStatus, getPreviewUrl, hasAllowedDomains, importWxrMedia, installMarketplacePlugin, inviteUser, parseApiResponse, permanentDeleteContent, prepareWxrImport, probeImportUrl, publishContent, registerOrphanedTable, renamePasskey, reorderFields, reorderMenuItems, reorderWidgets, requestSignup, resolveLocale, restoreContent, restoreRevision, revokeApiToken, rewriteContentUrls, scheduleContent, searchMarketplace, searchThemes, sendRecoveryLink, sendTestEmail, setSearchEnabled, throwResponseError, uninstallMarketplacePlugin, unpublishContent, unscheduleContent, updateAllowedDomain, updateByline, updateCollection, updateCommentStatus, updateContent, updateField, updateMarketplacePlugin, updateMedia, updateMenu, updateMenuItem, updateRedirect, updateSection, updateSettings, updateTerm, updateUser, updateWidget, uploadMedia, uploadToProvider, useAuthProviderList, useAuthProviders, useCurrentUser, useLocale, useNavigate, useParams, usePluginAdmins, usePluginField, usePluginHasPages, usePluginHasWidgets, usePluginPage, usePluginWidget, validateInviteToken, verifySignupToken };
 //# sourceMappingURL=index.js.map