dineway 0.1.49 → 0.2.1

package/dist/astro/routes/api/widget-components.mjs

@@ -1,5 +1,5 @@
-import { n as apiSuccess, r as handleError } from "../../../error-DCSuUAZW.mjs";
-import { t as getWidgetComponents } from "../../../components--pg6zBvu.mjs";
+import { n as apiSuccess, r as handleError } from "../../../error-CSVaQNZy.mjs";
+import { t as getWidgetComponents } from "../../../components-DImzlLhb.mjs";
 
 //#region src/astro/routes/api/widget-components.ts
 const prerender = false;

package/dist/astro/routes/robots.txt.mjs

@@ -1,12 +1,13 @@
 import "../../dialect-helpers-fk43GbDb.mjs";
 import "../../base64-F8-DUraK.mjs";
-import "../../types-CSgR9nQB.mjs";
-import "../../loader--GOYux8M.mjs";
-import "../../media-CbKyYukG.mjs";
-import "../../options-LsPjZlqD.mjs";
-import "../../request-cache-ho99schz.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-CUXOxzsT.mjs";
-import { n as getPublicOrigin } from "../../public-url-B_m9IwdV.mjs";
+import "../../types-ChxYDRvx.mjs";
+import "../../loader-aWkkc1_o.mjs";
+import "../../object-cache-D51qOseS.mjs";
+import "../../media-CVMOoywq.mjs";
+import "../../options-DQPTH5n0.mjs";
+import "../../request-cache-CBFjCwSt.mjs";
+import { a as getSiteSettingsWithDb } from "../../settings-BECcAIRH.mjs";
+import { n as getPublicOrigin } from "../../public-url-Cp6hyjVR.mjs";
 
 //#region src/astro/routes/robots.txt.ts
 const prerender = false;

package/dist/astro/routes/sitemap-_collection_.xml.mjs

@@ -1,15 +1,17 @@
 import "../../dialect-helpers-fk43GbDb.mjs";
 import { n as getI18nConfig, r as isI18nEnabled } from "../../config-CVssduLe.mjs";
 import "../../base64-F8-DUraK.mjs";
-import "../../types-CSgR9nQB.mjs";
-import "../../loader--GOYux8M.mjs";
-import "../../media-CbKyYukG.mjs";
-import "../../options-LsPjZlqD.mjs";
-import "../../request-cache-ho99schz.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-CUXOxzsT.mjs";
-import { t as handleSitemapData } from "../../seo-5lJOtB5J.mjs";
-import { n as localizePath, t as interpolateUrlPattern } from "../../resolve-DTuDyYKs.mjs";
-import { n as getPublicOrigin } from "../../public-url-B_m9IwdV.mjs";
+import "../../types-ChxYDRvx.mjs";
+import "../../loader-aWkkc1_o.mjs";
+import "../../object-cache-D51qOseS.mjs";
+import "../../media-CVMOoywq.mjs";
+import "../../options-DQPTH5n0.mjs";
+import "../../request-cache-CBFjCwSt.mjs";
+import { a as getSiteSettingsWithDb } from "../../settings-BECcAIRH.mjs";
+import { t as handleSitemapData } from "../../seo-BLszyJxd.mjs";
+import { n as localizePath, t as interpolateUrlPattern } from "../../resolve-DE71WcL9.mjs";
+import { t as buildSeoImageUrl } from "../../media-url-BdoLPvg8.mjs";
+import { n as getPublicOrigin } from "../../public-url-Cp6hyjVR.mjs";
 
 //#region src/astro/routes/sitemap-[collection].xml.ts
 const prerender = false;
@@ -61,23 +63,30 @@ const GET = async ({ params, locals, url }) => {
 			return absolute;
 		};
 		const lines = ["<?xml version=\"1.0\" encoding=\"UTF-8\"?>"];
-		lines.push(i18nEnabled ? "<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:xhtml=\"http://www.w3.org/1999/xhtml\">" : "<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">");
+		lines.push(i18nEnabled ? "<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:xhtml=\"http://www.w3.org/1999/xhtml\" xmlns:image=\"http://www.google.com/schemas/sitemap-image/1.1\">" : "<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:image=\"http://www.google.com/schemas/sitemap-image/1.1\">");
 		const writeUrl = async (entry, siblings) => {
 			const loc = await resolveEntryUrl(entry);
 			if (loc === null) return;
 			lines.push("  <url>");
 			lines.push(`    <loc>${escapeXml(loc)}</loc>`);
 			lines.push(`    <lastmod>${escapeXml(entry.updatedAt)}</lastmod>`);
-			if (i18nEnabled && siblings && siblings.length > 1) {
-				for (const sibling of siblings) {
+			if (entry.image) {
+				const imageLoc = buildSeoImageUrl(entry.image, siteUrl);
+				lines.push("    <image:image>");
+				lines.push(`      <image:loc>${escapeXml(imageLoc)}</image:loc>`);
+				lines.push("    </image:image>");
+			}
+			const alternateEntries = siblings ?? (i18nEnabled ? [entry] : null);
+			if (i18nEnabled && alternateEntries) {
+				for (const sibling of alternateEntries) {
 					const siblingLoc = await resolveEntryUrl(sibling);
 					if (siblingLoc === null) continue;
 					lines.push(`    <xhtml:link rel="alternate" hreflang="${escapeXml(sibling.locale)}" href="${escapeXml(siblingLoc)}" />`);
 				}
-				const defaultSibling = i18nConfig && siblings.find((sibling) => sibling.locale === i18nConfig.defaultLocale);
+				const defaultSibling = i18nConfig && alternateEntries.find((sibling) => sibling.locale === i18nConfig.defaultLocale);
 				let xDefaultLoc = null;
 				if (defaultSibling) xDefaultLoc = await resolveEntryUrl(defaultSibling);
-				if (xDefaultLoc === null) for (const sibling of siblings) {
+				if (xDefaultLoc === null) for (const sibling of alternateEntries) {
 					const siblingLoc = await resolveEntryUrl(sibling);
 					if (siblingLoc !== null) {
 						xDefaultLoc = siblingLoc;

package/dist/astro/routes/sitemap.xml.mjs

@@ -1,13 +1,14 @@
 import "../../dialect-helpers-fk43GbDb.mjs";
 import "../../base64-F8-DUraK.mjs";
-import "../../types-CSgR9nQB.mjs";
-import "../../loader--GOYux8M.mjs";
-import "../../media-CbKyYukG.mjs";
-import "../../options-LsPjZlqD.mjs";
-import "../../request-cache-ho99schz.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-CUXOxzsT.mjs";
-import { t as handleSitemapData } from "../../seo-5lJOtB5J.mjs";
-import { n as getPublicOrigin } from "../../public-url-B_m9IwdV.mjs";
+import "../../types-ChxYDRvx.mjs";
+import "../../loader-aWkkc1_o.mjs";
+import "../../object-cache-D51qOseS.mjs";
+import "../../media-CVMOoywq.mjs";
+import "../../options-DQPTH5n0.mjs";
+import "../../request-cache-CBFjCwSt.mjs";
+import { a as getSiteSettingsWithDb } from "../../settings-BECcAIRH.mjs";
+import { t as handleSitemapData } from "../../seo-BLszyJxd.mjs";
+import { n as getPublicOrigin } from "../../public-url-Cp6hyjVR.mjs";
 
 //#region src/astro/routes/sitemap.xml.ts
 const prerender = false;

package/dist/astro/session-driver.d.mts

@@ -1,4 +1,4 @@
-import { t as Database } from "../types-CuJOqHfM.mjs";
+import { t as Database } from "../types-DuQn1G7-.mjs";
 import { Kysely } from "kysely";
 
 //#region src/astro/session-driver.d.ts

package/dist/astro/session-driver.mjs

@@ -1,7 +1,7 @@
 import { a as currentTimestampValue } from "../dialect-helpers-fk43GbDb.mjs";
 import "../base64-F8-DUraK.mjs";
-import "../types-CSgR9nQB.mjs";
-import { r as getDb } from "../loader--GOYux8M.mjs";
+import "../types-ChxYDRvx.mjs";
+import { r as getDb } from "../loader-aWkkc1_o.mjs";
 
 //#region src/astro/session-driver.ts
 function createDinewaySessionDriver(dbFactory = getDb) {

package/dist/astro/types.d.mts

@@ -1,15 +1,14 @@
-import { i as ContentItem } from "../types-DRIKLmJI.mjs";
-import { Cr as MediaListResponse, Gt as EmailPipeline, Kt as HookPipeline, Ri as ContentListResponse, _i as MediaItem, lr as SandboxRunner, t as DinewayConfig, wr as MediaResponse, zi as ContentResponse } from "../runtime-C4-2lSFg.mjs";
-import { t as Database } from "../types-CuJOqHfM.mjs";
-import { A as PageMetadataContribution, D as PageFragmentContribution, X as ResolvedPlugin, ct as Element, q as PublicPageContext } from "../types-DSPGWjxO.mjs";
-import "../types-Dryvv7LH.mjs";
-import { f as MediaProvider, p as MediaProviderCapabilities } from "../placeholder-CXfoCtCd.mjs";
-import "../runner-09sTqtv0.mjs";
-import "../index-CZiWCQDp.mjs";
-import { d as Storage } from "../types-DZpT-PnG.mjs";
-import "../byline-fields-uJlygdzM.mjs";
-import "../types-GaCtZ1k9.mjs";
-import "../validate-DzjCdy6v.mjs";
+import { i as ContentItem } from "../types-opjX_kz6.mjs";
+import { Aa as MediaResponse, As as ContentResponse, D as PageMetadataContribution, Ga as HookPipeline, Ha as SandboxedPluginEntry, M as PluginActor, Wa as EmailPipeline, Za as SandboxRunner, at as PluginRouteApiTokenPolicy, es as MediaItem, gt as PublicPageContext, jt as PublicationAuthorizationService, ka as MediaListResponse, ks as ContentListResponse, ot as PluginRouteAuthorization, ro as DinewayConfig, to as PluginMcpRegistry, v as HttpAccess, vt as ResolvedPlugin, w as PageFragmentContribution, ys as Element } from "../types-DwoUifGE.mjs";
+import { t as Database } from "../types-DuQn1G7-.mjs";
+import { f as MediaProvider, p as MediaProviderCapabilities } from "../placeholder-DkWkXfDI.mjs";
+import "../runner-D6hzs8L9.mjs";
+import "../index-DcnOCD1e.mjs";
+import "../types-g0zMtraY.mjs";
+import { d as Storage } from "../types-wFu80FrO.mjs";
+import "../validate-CbVFoJgc.mjs";
+import "../byline-fields-Ckeqd1OY.mjs";
+import "../types-Cw0PeCT_.mjs";
 import "../index.mjs";
 import { Kysely } from "kysely";
 
@@ -254,6 +253,7 @@ interface DinewayHandlers {
   }) => Promise<HandlerResponse>;
   handleContentUnpublish: (collection: string, id: string) => Promise<HandlerResponse>;
   handleContentSchedule: (collection: string, id: string, scheduledAt: string) => Promise<HandlerResponse>;
+  createPublicationAuthorizationService: () => Pick<PublicationAuthorizationService, "publishAuthorizedContent" | "publishAuthorizedDueContent" | "scheduleAuthorizedContent" | "unscheduleAuthorizedContent">;
   handleContentUnschedule: (collection: string, id: string) => Promise<HandlerResponse>;
   handleContentCountScheduled: (collection: string) => Promise<HandlerResponse>;
   handleContentDiscardDraft: (collection: string, id: string) => Promise<HandlerResponse>;
@@ -298,10 +298,16 @@ interface DinewayHandlers {
     };
   }>>;
   handleRevisionRestore: (revisionId: string, callerUserId: string) => Promise<HandlerResponse>;
-  handlePluginApiRoute: (pluginId: string, method: string, path: string, request: Request) => Promise<HandlerResponse>;
+  handlePluginApiRoute: (pluginId: string, method: string, path: string, request: Request, invocation?: {
+    actor?: PluginActor | null;
+  }) => Promise<HandlerResponse>;
   handlePublicPluginApiRoute: (pluginId: string, method: string, path: string, request: Request) => Promise<HandlerResponse>;
   getPluginRouteMeta: (pluginId: string, path: string) => {
     public: boolean;
+    body: "json" | "raw";
+    maxBodyBytes?: number;
+    authorization?: PluginRouteAuthorization;
+    apiTokenPolicy?: PluginRouteApiTokenPolicy;
   } | null;
   getMediaProvider: (providerId: string) => MediaProvider | undefined;
   getMediaProviderList: () => Array<{
@@ -316,6 +322,9 @@ interface DinewayHandlers {
   hooks: HookPipeline;
   email: EmailPipeline | null;
   configuredPlugins: ResolvedPlugin[];
+  sandboxedPluginEntries: SandboxedPluginEntry[];
+  getPluginMcpRegistry: () => PluginMcpRegistry;
+  getPluginHttpAccess: (pluginId: string) => HttpAccess | undefined;
   config: DinewayConfig;
   getManifest: () => Promise<DinewayManifest>;
   invalidateManifest: () => void;

package/dist/{audit-BeNsSyfU.mjs → audit-B2pRxZ20.mjs}

@@ -1,4 +1,4 @@
-import { i as encodeCursor, r as decodeCursor } from "./types-CSgR9nQB.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-ChxYDRvx.mjs";
 import { ulid } from "ulidx";
 
 //#region src/database/repositories/audit.ts

package/dist/auth/providers/github.d.mts

@@ -1,4 +1,4 @@
-import { r as AuthProviderDescriptor } from "../../types-Dryvv7LH.mjs";
+import { r as AuthProviderDescriptor } from "../../types-g0zMtraY.mjs";
 
 //#region src/auth/providers/github.d.ts
 /**

package/dist/auth/providers/google.d.mts

@@ -1,4 +1,4 @@
-import { r as AuthProviderDescriptor } from "../../types-Dryvv7LH.mjs";
+import { r as AuthProviderDescriptor } from "../../types-g0zMtraY.mjs";
 
 //#region src/auth/providers/google.d.ts
 /**

package/dist/{auth-control-guard-Dr14I98m.mjs → auth-control-guard-D71jourk.mjs}

@@ -1,4 +1,4 @@
-import { t as apiError } from "./error-DCSuUAZW.mjs";
+import { t as apiError } from "./error-CSVaQNZy.mjs";
 
 //#region src/api/auth-control-guard.ts
 function rejectApiTokenAuthControlWrite(locals, resource) {

package/dist/{authorize-BLO0m7fW.mjs → authorize-ZXPGPwKn.mjs}

@@ -1,4 +1,4 @@
-import { t as apiError } from "./error-DCSuUAZW.mjs";
+import { t as apiError } from "./error-CSVaQNZy.mjs";
 import { canActOnOwn, hasPermission } from "@dineway-ai/auth";
 
 //#region src/api/authorize.ts

package/dist/{briefing-CkTee1ex.mjs → briefing-0rf-su3-.mjs}

@@ -1,10 +1,10 @@
-import { i as encodeCursor, r as decodeCursor } from "./types-CSgR9nQB.mjs";
-import { t as SiteActivityRepository } from "./site-activity-DONFrMBJ.mjs";
-import { t as ReviewRequestRepository } from "./review-requests-BW2NxY-l.mjs";
-import { t as withTransaction } from "./transaction-CFLhEOuH.mjs";
-import { n as isSiteContextType, t as SITE_CONTEXT_TYPES } from "./context-types-r8oFvyOq.mjs";
-import { n as SchemaRegistry } from "./registry-D7HACema.mjs";
-import { a as getSiteSettingsWithDb } from "./settings-CUXOxzsT.mjs";
+import { i as encodeCursor, r as decodeCursor } from "./types-ChxYDRvx.mjs";
+import { t as SiteActivityRepository } from "./site-activity-h8smOlYI.mjs";
+import { t as ReviewRequestRepository } from "./review-requests-CTWGnWUt.mjs";
+import { t as withTransaction } from "./transaction-0LEAAy8R.mjs";
+import { n as isSiteContextType, t as SITE_CONTEXT_TYPES } from "./context-types-eBuMDAg-.mjs";
+import { n as SchemaRegistry } from "./registry-BYYyb2tF.mjs";
+import { a as getSiteSettingsWithDb } from "./settings-BECcAIRH.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 
@@ -162,10 +162,33 @@ function buildPluginInfo(plugin, state, marketplaceUrl) {
 		iconUrl: isMarketplace && marketplaceUrl ? marketplaceIconUrl(marketplaceUrl, plugin.id) : void 0
 	};
 }
+function buildSandboxedPluginInfo(entry, state) {
+	const status = state?.status ?? "active";
+	const enabled = status === "active";
+	return {
+		id: entry.id,
+		name: state?.displayName || entry.id,
+		version: entry.version,
+		package: void 0,
+		enabled,
+		status,
+		source: "config",
+		sandboxed: true,
+		marketplaceVersion: void 0,
+		capabilities: entry.capabilities,
+		hasAdminPages: (entry.adminPages?.length ?? 0) > 0,
+		hasDashboardWidgets: (entry.adminWidgets?.length ?? 0) > 0,
+		hasHooks: false,
+		installedAt: state?.installedAt?.toISOString(),
+		activatedAt: state?.activatedAt?.toISOString() ?? void 0,
+		deactivatedAt: state?.deactivatedAt?.toISOString() ?? void 0,
+		description: state?.description ?? void 0
+	};
+}
 /**
 * List all configured plugins with their state
 */
-async function handlePluginList(db, configuredPlugins, marketplaceUrl) {
+async function handlePluginList(db, configuredPlugins, sandboxedPluginEntries, marketplaceUrl) {
 	try {
 		const allStates = await new PluginStateRepository(db).getAll();
 		const stateMap = new Map(allStates.map((s) => [s.pluginId, s]));
@@ -173,6 +196,11 @@ async function handlePluginList(db, configuredPlugins, marketplaceUrl) {
 		const items = configuredPlugins.map((plugin) => {
 			return buildPluginInfo(plugin, stateMap.get(plugin.id) ?? null, marketplaceUrl);
 		});
+		for (const entry of sandboxedPluginEntries) {
+			if (configuredIds.has(entry.id)) continue;
+			configuredIds.add(entry.id);
+			items.push(buildSandboxedPluginInfo(entry, stateMap.get(entry.id) ?? null));
+		}
 		for (const state of allStates) {
 			if (state.source !== "marketplace") continue;
 			if (configuredIds.has(state.pluginId)) continue;
@@ -212,20 +240,26 @@ async function handlePluginList(db, configuredPlugins, marketplaceUrl) {
 /**
 * Get a single plugin's info
 */
-async function handlePluginGet(db, configuredPlugins, pluginId, marketplaceUrl) {
+async function handlePluginGet(db, configuredPlugins, sandboxedPluginEntries, pluginId, marketplaceUrl) {
 	try {
+		const stateRepo = new PluginStateRepository(db);
 		const plugin = configuredPlugins.find((p) => p.id === pluginId);
-		if (!plugin) return {
+		if (plugin) return {
+			success: true,
+			data: { item: buildPluginInfo(plugin, await stateRepo.get(pluginId), marketplaceUrl) }
+		};
+		const sandboxed = sandboxedPluginEntries.find((entry) => entry.id === pluginId);
+		if (sandboxed) return {
+			success: true,
+			data: { item: buildSandboxedPluginInfo(sandboxed, await stateRepo.get(pluginId)) }
+		};
+		return {
 			success: false,
 			error: {
 				code: "NOT_FOUND",
 				message: `Plugin not found: ${pluginId}`
 			}
 		};
-		return {
-			success: true,
-			data: { item: buildPluginInfo(plugin, await new PluginStateRepository(db).get(pluginId), marketplaceUrl) }
-		};
 	} catch {
 		return {
 			success: false,
@@ -239,20 +273,26 @@ async function handlePluginGet(db, configuredPlugins, pluginId, marketplaceUrl)
 /**
 * Enable a plugin
 */
-async function handlePluginEnable(db, configuredPlugins, pluginId) {
+async function handlePluginEnable(db, configuredPlugins, sandboxedPluginEntries, pluginId) {
 	try {
+		const stateRepo = new PluginStateRepository(db);
 		const plugin = configuredPlugins.find((p) => p.id === pluginId);
-		if (!plugin) return {
+		if (plugin) return {
+			success: true,
+			data: { item: buildPluginInfo(plugin, await stateRepo.enable(pluginId, plugin.version)) }
+		};
+		const sandboxed = sandboxedPluginEntries.find((entry) => entry.id === pluginId);
+		if (sandboxed) return {
+			success: true,
+			data: { item: buildSandboxedPluginInfo(sandboxed, await stateRepo.enable(pluginId, sandboxed.version)) }
+		};
+		return {
 			success: false,
 			error: {
 				code: "NOT_FOUND",
 				message: `Plugin not found: ${pluginId}`
 			}
 		};
-		return {
-			success: true,
-			data: { item: buildPluginInfo(plugin, await new PluginStateRepository(db).enable(pluginId, plugin.version)) }
-		};
 	} catch {
 		return {
 			success: false,
@@ -266,20 +306,26 @@ async function handlePluginEnable(db, configuredPlugins, pluginId) {
 /**
 * Disable a plugin
 */
-async function handlePluginDisable(db, configuredPlugins, pluginId) {
+async function handlePluginDisable(db, configuredPlugins, sandboxedPluginEntries, pluginId) {
 	try {
+		const stateRepo = new PluginStateRepository(db);
 		const plugin = configuredPlugins.find((p) => p.id === pluginId);
-		if (!plugin) return {
+		if (plugin) return {
+			success: true,
+			data: { item: buildPluginInfo(plugin, await stateRepo.disable(pluginId, plugin.version)) }
+		};
+		const sandboxed = sandboxedPluginEntries.find((entry) => entry.id === pluginId);
+		if (sandboxed) return {
+			success: true,
+			data: { item: buildSandboxedPluginInfo(sandboxed, await stateRepo.disable(pluginId, sandboxed.version)) }
+		};
+		return {
 			success: false,
 			error: {
 				code: "NOT_FOUND",
 				message: `Plugin not found: ${pluginId}`
 			}
 		};
-		return {
-			success: true,
-			data: { item: buildPluginInfo(plugin, await new PluginStateRepository(db).disable(pluginId, plugin.version)) }
-		};
 	} catch {
 		return {
 			success: false,
@@ -614,6 +660,7 @@ const MAX_ACTIVITY_LIMIT = 100;
 const DEFAULT_TOKEN_BUDGET = 8e3;
 const TOKEN_CHARS = 4;
 const RELATIVE_SINCE_PATTERN = /^(\d+)(m|h|d|w)$/i;
+const PLUGIN_SCOPE_PREFIX_PATTERN = /^[a-z][a-z0-9_-]*$/;
 var SiteBriefingError = class extends Error {
 	constructor(message, code) {
 		super(message);
@@ -625,6 +672,7 @@ var SiteBriefingAssembler = class {
 	db;
 	storage;
 	configuredPlugins;
+	sandboxedPluginEntries;
 	marketplaceUrl;
 	permissions;
 	now;
@@ -632,6 +680,7 @@ var SiteBriefingAssembler = class {
 		this.db = options.db;
 		this.storage = options.storage ?? null;
 		this.configuredPlugins = options.configuredPlugins ?? [];
+		this.sandboxedPluginEntries = options.sandboxedPluginEntries ?? [];
 		this.marketplaceUrl = options.marketplaceUrl;
 		this.permissions = {
 			canReadContent: false,
@@ -734,7 +783,7 @@ var SiteBriefingAssembler = class {
 	}
 	async loadPluginSection() {
 		if (!this.permissions.canReadPlugins) return omittedSection({ active: [] }, "missing plugins:read permission");
-		const result = await handlePluginList(this.db, this.configuredPlugins, this.marketplaceUrl);
+		const result = await handlePluginList(this.db, this.configuredPlugins, this.sandboxedPluginEntries, this.marketplaceUrl);
 		if (!result.success || !result.data) return omittedSection({ active: [] }, "plugin list could not be loaded");
 		return includedSection({ active: result.data.items.filter((plugin) => plugin.enabled).map((plugin) => summarizePlugin(plugin)) });
 	}
@@ -825,6 +874,19 @@ function parseSiteBriefingScope(scope) {
 			pluginId: parts[1]
 		};
 	}
+	if (parts.length >= 3 && PLUGIN_SCOPE_PREFIX_PATTERN.test(parts[0] ?? "") && parts.slice(1).every((part) => part.length > 0)) {
+		const pluginId = parts[0];
+		return {
+			type: "plugin_extension",
+			scope,
+			ancestors: [
+				"site",
+				`plugin:${pluginId}`,
+				scope
+			],
+			pluginId
+		};
+	}
 	if (parts[0] === "taxonomy" && parts.length === 2 && parts[1].length > 0) {
 		const resolved = `taxonomy:${parts[1]}`;
 		return {
@@ -843,7 +905,7 @@ function parseSiteBriefingScope(scope) {
 			menuId: parts[1]
 		};
 	}
-	throw new SiteBriefingError(`Invalid scope "${scope}". Expected site, collection:{slug}, content:{collection}:{id}, plugin:{id}, taxonomy:{id}, or menu:{id}.`, "INVALID_SCOPE");
+	throw new SiteBriefingError(`Invalid scope "${scope}". Expected a core scope or a namespaced plugin scope such as restaurant:location:{id}.`, "INVALID_SCOPE");
 }
 function formatSiteBriefingText(briefing) {
 	const lines = [];

package/dist/{briefing-DJX6irto.mjs → briefing-kRhegBoF.mjs}

@@ -1,4 +1,4 @@
-import { t as SiteBriefingAssembler } from "./briefing-CkTee1ex.mjs";
+import { t as SiteBriefingAssembler } from "./briefing-0rf-su3-.mjs";
 
 //#region src/api/handlers/briefing.ts
 async function handleSiteBriefingGet(options, input) {
@@ -9,6 +9,7 @@ async function handleSiteBriefingGet(options, input) {
 				db: options.db,
 				storage: options.storage ?? null,
 				configuredPlugins: options.configuredPlugins ?? [],
+				sandboxedPluginEntries: options.sandboxedPluginEntries ?? [],
 				marketplaceUrl: options.marketplaceUrl,
 				permissions: options.permissions
 			}).assemble(input) }