dineway 0.1.9 → 0.1.12

package/dist/astro/routes/api/admin/plugins/_id_/uninstall.mjs

@@ -0,0 +1,99 @@
+import "../../../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../../../content-CyLkb-qH.mjs";
+import "../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../../media-_7Fxdu45.mjs";
+import "../../../../../../user-CcXq-zoL.mjs";
+import "../../../../../../taxonomy-D5cbhc8u.mjs";
+import "../../../../../../comment-DFO-gWDH.mjs";
+import "../../../../../../options-z8VVg1Ll.mjs";
+import "../../../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../../../redirect-CGl64yOX.mjs";
+import "../../../../../../byline-naZxOPSa.mjs";
+import "../../../../../../seo-CUQctrog.mjs";
+import { a as handleMarketplaceUninstall } from "../../../../../../api-BR7Y0GBo.mjs";
+import "../../../../../../dashboard-DqnYU8EU.mjs";
+import { l as handlePluginList } from "../../../../../../briefing-MVYe_Uyf.mjs";
+import "../../../../../../context-types-C-LwdAxx.mjs";
+import "../../../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../../../registry-C-_hxLqa.mjs";
+import "../../../../../../loader-PZnPxFLc.mjs";
+import "../../../../../../settings-DGtLLSaz.mjs";
+import "../../../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../../../briefing-rty4O-wa.mjs";
+import "../../../../../../review-requests-DIyjw-K_.mjs";
+import "../../../../../../query-CsbOywSY.mjs";
+import "../../../../../../zod-generator-DBVP8D0P.mjs";
+import "../../../../../../schema-BECjUhP8.mjs";
+import "../../../../../../seo-C007Luwn.mjs";
+import "../../../../../../menus-DS3_5nWY.mjs";
+import "../../../../../../sections-B61OxnfB.mjs";
+import "../../../../../../settings-Dzgswvg4.mjs";
+import "../../../../../../taxonomies-D2aZGuns.mjs";
+import "../../../../../../taxonomies-z6Lz91BC.mjs";
+import "../../../../../../manifest-schema-CgFJAp0H.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-BMUPwxgx.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../../parse-C9106ehs.mjs";
+import "../../../../../../redirects-lrlmYXVE.mjs";
+import "../../../../../../import-CNcKWTbp.mjs";
+import "../../../../../../utils-C0ONdBul.mjs";
+import "../../../../../../search-DqTHQqtV.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BAdbMCwC.mjs";
+import { _ as RiskPolicyEvaluator, h as PluginHitlPayloadBuilder } from "../../../../../../site-context-WBxoD99D.mjs";
+import { _ as pluginApiRouteSource, l as logPluginActivity } from "../../../../../../activity-events-B4wp7CrU.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../../../hitl-route-helpers-CSit54Ru.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/admin/plugins/[id]/uninstall.ts
+const prerender = false;
+const uninstallBodySchema = z.object({
+	deleteData: z.boolean().optional(),
+	hitlRequestId: z.string().min(1).optional()
+});
+const POST = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const { id } = params;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const denied = requirePerm(user, "plugins:manage");
+	if (denied) return denied;
+	if (!id) return apiError("INVALID_REQUEST", "Plugin ID required", 400);
+	const body = await parseOptionalBody(request, uninstallBodySchema, {});
+	if (isParseError(body)) return body;
+	const actor = resolveHitlRouteActor(locals);
+	let approvedHitlRequestId = null;
+	const current = await handlePluginList(dineway.db, dineway.configuredPlugins, dineway.config.marketplace);
+	if (!current.success) return unwrapResult(current);
+	const plugin = current.data.items.find((item) => item.id === id && item.source === "marketplace");
+	if (plugin) {
+		const action = await new PluginHitlPayloadBuilder().buildUninstallRequest(plugin, { deleteData: body.deleteData ?? false });
+		const decision = await new RiskPolicyEvaluator({
+			db: dineway.db,
+			handlers: dineway
+		}).evaluateWorkflowHitl({
+			actor: actor.identity,
+			hitlRequestId: body.hitlRequestId,
+			action
+		});
+		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
+		approvedHitlRequestId = decision.required ? decision.hitlRequest.id : null;
+	}
+	const result = await handleMarketplaceUninstall(dineway.db, dineway.storage, id, { deleteData: body.deleteData ?? false });
+	if (!result.success) return unwrapResult(result);
+	await dineway.syncMarketplacePlugins();
+	await logPluginActivity(dineway.db, locals, {
+		action: "uninstalled",
+		pluginId: id,
+		...pluginApiRouteSource("uninstalled"),
+		summary: `Uninstalled plugin ${id}`,
+		detail: {
+			deleteData: body.deleteData ?? false,
+			hitlRequestId: approvedHitlRequestId
+		}
+	});
+	return unwrapResult(result);
+};
+
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/admin/plugins/_id_/update.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/plugins/[id]/update.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/admin/plugins/_id_/update.mjs

@@ -0,0 +1,132 @@
+import "../../../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../../../content-CyLkb-qH.mjs";
+import "../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../../media-_7Fxdu45.mjs";
+import "../../../../../../user-CcXq-zoL.mjs";
+import "../../../../../../taxonomy-D5cbhc8u.mjs";
+import "../../../../../../comment-DFO-gWDH.mjs";
+import "../../../../../../options-z8VVg1Ll.mjs";
+import "../../../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../../../redirect-CGl64yOX.mjs";
+import "../../../../../../byline-naZxOPSa.mjs";
+import "../../../../../../seo-CUQctrog.mjs";
+import { c as handleMarketplaceUpdatePreview, o as handleMarketplaceUpdate } from "../../../../../../api-BR7Y0GBo.mjs";
+import "../../../../../../dashboard-DqnYU8EU.mjs";
+import "../../../../../../briefing-MVYe_Uyf.mjs";
+import "../../../../../../context-types-C-LwdAxx.mjs";
+import "../../../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../../../registry-C-_hxLqa.mjs";
+import "../../../../../../loader-PZnPxFLc.mjs";
+import "../../../../../../settings-DGtLLSaz.mjs";
+import "../../../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../../../briefing-rty4O-wa.mjs";
+import "../../../../../../review-requests-DIyjw-K_.mjs";
+import "../../../../../../query-CsbOywSY.mjs";
+import "../../../../../../zod-generator-DBVP8D0P.mjs";
+import "../../../../../../schema-BECjUhP8.mjs";
+import "../../../../../../seo-C007Luwn.mjs";
+import "../../../../../../menus-DS3_5nWY.mjs";
+import "../../../../../../sections-B61OxnfB.mjs";
+import "../../../../../../settings-Dzgswvg4.mjs";
+import "../../../../../../taxonomies-D2aZGuns.mjs";
+import "../../../../../../taxonomies-z6Lz91BC.mjs";
+import "../../../../../../manifest-schema-CgFJAp0H.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-BMUPwxgx.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../../parse-C9106ehs.mjs";
+import "../../../../../../redirects-lrlmYXVE.mjs";
+import "../../../../../../import-CNcKWTbp.mjs";
+import "../../../../../../utils-C0ONdBul.mjs";
+import "../../../../../../search-DqTHQqtV.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BAdbMCwC.mjs";
+import { _ as RiskPolicyEvaluator, h as PluginHitlPayloadBuilder } from "../../../../../../site-context-WBxoD99D.mjs";
+import { _ as pluginApiRouteSource, l as logPluginActivity } from "../../../../../../activity-events-B4wp7CrU.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../../../hitl-route-helpers-CSit54Ru.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/admin/plugins/[id]/update.ts
+const prerender = false;
+const updateBodySchema = z.object({
+	version: z.string().min(1).optional(),
+	confirmCapabilityChanges: z.boolean().optional(),
+	confirmRouteVisibilityChanges: z.boolean().optional(),
+	hitlRequestId: z.string().min(1).optional()
+});
+const POST = async ({ params, request, locals }) => {
+	const { dineway, user } = locals;
+	const { id } = params;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const denied = requirePerm(user, "plugins:manage");
+	if (denied) return denied;
+	if (!id) return apiError("INVALID_REQUEST", "Plugin ID required", 400);
+	const body = await parseOptionalBody(request, updateBodySchema, {});
+	if (isParseError(body)) return body;
+	const actor = resolveHitlRouteActor(locals);
+	const evaluator = new RiskPolicyEvaluator({
+		db: dineway.db,
+		handlers: dineway
+	});
+	let approvedHitlRequestId = null;
+	let previewDiffs = null;
+	if (evaluator.requiresWorkflowHitl(actor.identity)) {
+		if (!body.version) return apiError("VALIDATION_ERROR", "API-token marketplace updates require an explicit version so the reviewed target is immutable.", 400);
+		const preview = await handleMarketplaceUpdatePreview(dineway.db, dineway.storage, dineway.config.marketplace, id, { version: body.version });
+		if (!preview.success) return unwrapResult(preview);
+		const action = await new PluginHitlPayloadBuilder().buildMarketplaceUpdateRequest({
+			id: preview.data.pluginId,
+			name: preview.data.name,
+			description: preview.data.description,
+			authorName: preview.data.authorName,
+			version: preview.data.version,
+			minDinewayVersion: preview.data.minDinewayVersion,
+			bundleSize: preview.data.bundleSize,
+			checksum: preview.data.checksum,
+			changelog: preview.data.changelog,
+			capabilities: preview.data.capabilities,
+			status: preview.data.status,
+			auditVerdict: preview.data.auditVerdict,
+			imageAuditVerdict: preview.data.imageAuditVerdict,
+			publishedAt: preview.data.publishedAt,
+			oldVersion: preview.data.oldVersion,
+			capabilityChanges: preview.data.capabilityChanges,
+			routeVisibilityChanges: preview.data.routeVisibilityChanges
+		});
+		const decision = await evaluator.evaluateWorkflowHitl({
+			actor: actor.identity,
+			hitlRequestId: body.hitlRequestId,
+			action
+		});
+		if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
+		approvedHitlRequestId = decision.hitlRequest.id;
+		previewDiffs = {
+			hasCapabilityChanges: preview.data.capabilityChanges.added.length > 0 || preview.data.capabilityChanges.removed.length > 0,
+			hasNewPublicRoutes: preview.data.routeVisibilityChanges.newlyPublic.length > 0
+		};
+	}
+	const result = await handleMarketplaceUpdate(dineway.db, dineway.storage, dineway.getSandboxRunner(), dineway.config.marketplace, id, {
+		version: body.version,
+		confirmCapabilityChanges: previewDiffs ? previewDiffs.hasCapabilityChanges || body.confirmCapabilityChanges === true : body.confirmCapabilityChanges,
+		confirmRouteVisibilityChanges: previewDiffs ? previewDiffs.hasNewPublicRoutes || body.confirmRouteVisibilityChanges === true : body.confirmRouteVisibilityChanges
+	});
+	if (!result.success) return unwrapResult(result);
+	await dineway.syncMarketplacePlugins();
+	await logPluginActivity(dineway.db, locals, {
+		action: "updated",
+		pluginId: id,
+		...pluginApiRouteSource("updated"),
+		summary: `Updated plugin ${id}`,
+		detail: {
+			version: result.data.newVersion,
+			oldVersion: result.data.oldVersion,
+			confirmedCapabilityChanges: previewDiffs ? previewDiffs.hasCapabilityChanges : body.confirmCapabilityChanges ?? false,
+			confirmedRouteVisibilityChanges: previewDiffs ? previewDiffs.hasNewPublicRoutes : body.confirmRouteVisibilityChanges ?? false,
+			hitlRequestId: approvedHitlRequestId
+		}
+	});
+	return unwrapResult(result);
+};
+
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/admin/plugins/index.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/plugins/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/admin/plugins/index.mjs

@@ -0,0 +1,53 @@
+import "../../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../../content-CyLkb-qH.mjs";
+import "../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../media-_7Fxdu45.mjs";
+import "../../../../../user-CcXq-zoL.mjs";
+import "../../../../../taxonomy-D5cbhc8u.mjs";
+import "../../../../../comment-DFO-gWDH.mjs";
+import "../../../../../options-z8VVg1Ll.mjs";
+import "../../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../../redirect-CGl64yOX.mjs";
+import "../../../../../byline-naZxOPSa.mjs";
+import "../../../../../seo-CUQctrog.mjs";
+import "../../../../../api-BR7Y0GBo.mjs";
+import "../../../../../dashboard-DqnYU8EU.mjs";
+import { l as handlePluginList } from "../../../../../briefing-MVYe_Uyf.mjs";
+import "../../../../../context-types-C-LwdAxx.mjs";
+import "../../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../../registry-C-_hxLqa.mjs";
+import "../../../../../loader-PZnPxFLc.mjs";
+import "../../../../../settings-DGtLLSaz.mjs";
+import "../../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../../briefing-rty4O-wa.mjs";
+import "../../../../../review-requests-DIyjw-K_.mjs";
+import "../../../../../query-CsbOywSY.mjs";
+import "../../../../../zod-generator-DBVP8D0P.mjs";
+import "../../../../../schema-BECjUhP8.mjs";
+import "../../../../../seo-C007Luwn.mjs";
+import "../../../../../menus-DS3_5nWY.mjs";
+import "../../../../../sections-B61OxnfB.mjs";
+import "../../../../../settings-Dzgswvg4.mjs";
+import "../../../../../taxonomies-D2aZGuns.mjs";
+import "../../../../../taxonomies-z6Lz91BC.mjs";
+import "../../../../../manifest-schema-CgFJAp0H.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../error-BMUPwxgx.mjs";
+import "../../../../../parse-C9106ehs.mjs";
+import "../../../../../redirects-lrlmYXVE.mjs";
+import "../../../../../import-CNcKWTbp.mjs";
+import { n as requirePerm } from "../../../../../authorize-BAdbMCwC.mjs";
+
+//#region src/astro/routes/api/admin/plugins/index.ts
+const prerender = false;
+const GET = async ({ locals }) => {
+	const { dineway, user } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const denied = requirePerm(user, "plugins:read");
+	if (denied) return denied;
+	return unwrapResult(await handlePluginList(dineway.db, dineway.configuredPlugins, dineway.config.marketplace));
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/icon.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/[id]/icon.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/icon.mjs

@@ -0,0 +1,36 @@
+import { t as apiError } from "../../../../../../../error-BMUPwxgx.mjs";
+import { n as requirePerm } from "../../../../../../../authorize-BAdbMCwC.mjs";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/[id]/icon.ts
+const prerender = false;
+const GET = async ({ params, url, locals }) => {
+	const { dineway, user } = locals;
+	const { id } = params;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const denied = requirePerm(user, "plugins:read");
+	if (denied) return denied;
+	const marketplaceUrl = dineway.config.marketplace;
+	if (!marketplaceUrl || !id) return apiError("NOT_CONFIGURED", "Marketplace not configured", 400);
+	const width = url.searchParams.get("w");
+	const target = new URL(`/api/v1/plugins/${encodeURIComponent(id)}/icon`, marketplaceUrl);
+	if (width) target.searchParams.set("w", width);
+	try {
+		const resp = await fetch(target.href);
+		if (!resp.ok) return new Response(resp.body, {
+			status: resp.status,
+			headers: {
+				"Content-Type": resp.headers.get("Content-Type") ?? "application/octet-stream",
+				"Cache-Control": "private, no-store"
+			}
+		});
+		return new Response(resp.body, { headers: {
+			"Content-Type": resp.headers.get("Content-Type") ?? "image/png",
+			"Cache-Control": "private, no-store"
+		} });
+	} catch {
+		return apiError("PROXY_ERROR", "Failed to fetch icon", 502);
+	}
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/index.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/[id]/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/index.mjs

@@ -0,0 +1,55 @@
+import "../../../../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../../../../content-CyLkb-qH.mjs";
+import "../../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../../../media-_7Fxdu45.mjs";
+import "../../../../../../../user-CcXq-zoL.mjs";
+import "../../../../../../../taxonomy-D5cbhc8u.mjs";
+import "../../../../../../../comment-DFO-gWDH.mjs";
+import "../../../../../../../options-z8VVg1Ll.mjs";
+import "../../../../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../../../../redirect-CGl64yOX.mjs";
+import "../../../../../../../byline-naZxOPSa.mjs";
+import "../../../../../../../seo-CUQctrog.mjs";
+import { t as handleMarketplaceGetPlugin } from "../../../../../../../api-BR7Y0GBo.mjs";
+import "../../../../../../../dashboard-DqnYU8EU.mjs";
+import "../../../../../../../briefing-MVYe_Uyf.mjs";
+import "../../../../../../../context-types-C-LwdAxx.mjs";
+import "../../../../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../../../../registry-C-_hxLqa.mjs";
+import "../../../../../../../loader-PZnPxFLc.mjs";
+import "../../../../../../../settings-DGtLLSaz.mjs";
+import "../../../../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../../../../briefing-rty4O-wa.mjs";
+import "../../../../../../../review-requests-DIyjw-K_.mjs";
+import "../../../../../../../query-CsbOywSY.mjs";
+import "../../../../../../../zod-generator-DBVP8D0P.mjs";
+import "../../../../../../../schema-BECjUhP8.mjs";
+import "../../../../../../../seo-C007Luwn.mjs";
+import "../../../../../../../menus-DS3_5nWY.mjs";
+import "../../../../../../../sections-B61OxnfB.mjs";
+import "../../../../../../../settings-Dzgswvg4.mjs";
+import "../../../../../../../taxonomies-D2aZGuns.mjs";
+import "../../../../../../../taxonomies-z6Lz91BC.mjs";
+import "../../../../../../../manifest-schema-CgFJAp0H.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../../error-BMUPwxgx.mjs";
+import "../../../../../../../parse-C9106ehs.mjs";
+import "../../../../../../../redirects-lrlmYXVE.mjs";
+import "../../../../../../../import-CNcKWTbp.mjs";
+import { n as requirePerm } from "../../../../../../../authorize-BAdbMCwC.mjs";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/[id]/index.ts
+const prerender = false;
+const GET = async ({ params, locals }) => {
+	const { dineway, user } = locals;
+	const { id } = params;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const denied = requirePerm(user, "plugins:read");
+	if (denied) return denied;
+	if (!id) return apiError("INVALID_REQUEST", "Plugin ID required", 400);
+	return unwrapResult(await handleMarketplaceGetPlugin(dineway.config.marketplace, id));
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/install.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/[id]/install.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/install.mjs

@@ -0,0 +1,129 @@
+import "../../../../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../../../../content-CyLkb-qH.mjs";
+import "../../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../../../media-_7Fxdu45.mjs";
+import "../../../../../../../user-CcXq-zoL.mjs";
+import "../../../../../../../taxonomy-D5cbhc8u.mjs";
+import "../../../../../../../comment-DFO-gWDH.mjs";
+import "../../../../../../../options-z8VVg1Ll.mjs";
+import "../../../../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../../../../entity-aliases-C0v-yNET.mjs";
+import "../../../../../../../redirect-CGl64yOX.mjs";
+import "../../../../../../../byline-naZxOPSa.mjs";
+import "../../../../../../../seo-CUQctrog.mjs";
+import { n as handleMarketplaceInstall, r as handleMarketplaceInstallPreview } from "../../../../../../../api-BR7Y0GBo.mjs";
+import "../../../../../../../dashboard-DqnYU8EU.mjs";
+import "../../../../../../../briefing-MVYe_Uyf.mjs";
+import "../../../../../../../context-types-C-LwdAxx.mjs";
+import "../../../../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../../../../registry-C-_hxLqa.mjs";
+import "../../../../../../../loader-PZnPxFLc.mjs";
+import "../../../../../../../settings-DGtLLSaz.mjs";
+import "../../../../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../../../../briefing-rty4O-wa.mjs";
+import "../../../../../../../review-requests-DIyjw-K_.mjs";
+import "../../../../../../../query-CsbOywSY.mjs";
+import "../../../../../../../zod-generator-DBVP8D0P.mjs";
+import "../../../../../../../schema-BECjUhP8.mjs";
+import "../../../../../../../seo-C007Luwn.mjs";
+import "../../../../../../../menus-DS3_5nWY.mjs";
+import "../../../../../../../sections-B61OxnfB.mjs";
+import "../../../../../../../settings-Dzgswvg4.mjs";
+import "../../../../../../../taxonomies-D2aZGuns.mjs";
+import "../../../../../../../taxonomies-z6Lz91BC.mjs";
+import "../../../../../../../manifest-schema-CgFJAp0H.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../../error-BMUPwxgx.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../../../parse-C9106ehs.mjs";
+import "../../../../../../../redirects-lrlmYXVE.mjs";
+import "../../../../../../../import-CNcKWTbp.mjs";
+import "../../../../../../../utils-C0ONdBul.mjs";
+import "../../../../../../../search-DqTHQqtV.mjs";
+import { n as requirePerm } from "../../../../../../../authorize-BAdbMCwC.mjs";
+import { _ as RiskPolicyEvaluator, h as PluginHitlPayloadBuilder } from "../../../../../../../site-context-WBxoD99D.mjs";
+import { _ as pluginApiRouteSource, l as logPluginActivity } from "../../../../../../../activity-events-B4wp7CrU.mjs";
+import { i as resolveHitlRouteActor, n as hitlRequiredRouteError, t as ensureWorkflowHitlRouteRequest } from "../../../../../../../hitl-route-helpers-CSit54Ru.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/[id]/install.ts
+const prerender = false;
+const installBodySchema = z.object({
+	version: z.string().min(1).optional(),
+	hitlRequestId: z.string().min(1).optional()
+});
+const POST = async ({ params, request, locals }) => {
+	try {
+		const { dineway, user } = locals;
+		const { id } = params;
+		if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+		const denied = requirePerm(user, "plugins:manage");
+		if (denied) return denied;
+		if (!id) return apiError("INVALID_REQUEST", "Plugin ID required", 400);
+		const body = await parseOptionalBody(request, installBodySchema, {});
+		if (isParseError(body)) return body;
+		const actor = resolveHitlRouteActor(locals);
+		const evaluator = new RiskPolicyEvaluator({
+			db: dineway.db,
+			handlers: dineway
+		});
+		let approvedHitlRequestId = null;
+		if (evaluator.requiresWorkflowHitl(actor.identity)) {
+			if (!body.version) return apiError("VALIDATION_ERROR", "API-token marketplace installs require an explicit version so the reviewed target is immutable.", 400);
+			const preview = await handleMarketplaceInstallPreview(dineway.config.marketplace, id, {
+				version: body.version,
+				siteOrigin: new URL(request.url).origin
+			});
+			if (!preview.success) return unwrapResult(preview);
+			const action = await new PluginHitlPayloadBuilder().buildInstallRequest({
+				id: preview.data.pluginId,
+				name: preview.data.name,
+				description: preview.data.description,
+				authorName: preview.data.authorName,
+				version: preview.data.version,
+				minDinewayVersion: preview.data.minDinewayVersion,
+				bundleSize: preview.data.bundleSize,
+				checksum: preview.data.checksum,
+				changelog: preview.data.changelog,
+				capabilities: preview.data.capabilities,
+				status: preview.data.status,
+				auditVerdict: preview.data.auditVerdict,
+				imageAuditVerdict: preview.data.imageAuditVerdict,
+				publishedAt: preview.data.publishedAt
+			});
+			const decision = await evaluator.evaluateWorkflowHitl({
+				actor: actor.identity,
+				hitlRequestId: body.hitlRequestId,
+				action
+			});
+			if (!decision.allowed) return hitlRequiredRouteError(decision, await ensureWorkflowHitlRouteRequest(dineway.db, locals, decision.action));
+			approvedHitlRequestId = decision.hitlRequest.id;
+		}
+		const configuredPluginIds = new Set(dineway.configuredPlugins.map((p) => p.id));
+		const siteOrigin = new URL(request.url).origin;
+		const result = await handleMarketplaceInstall(dineway.db, dineway.storage, dineway.getSandboxRunner(), dineway.config.marketplace, id, {
+			version: body.version,
+			configuredPluginIds,
+			siteOrigin
+		});
+		if (!result.success) return unwrapResult(result);
+		await dineway.syncMarketplacePlugins();
+		await logPluginActivity(dineway.db, locals, {
+			action: "installed",
+			pluginId: id,
+			...pluginApiRouteSource("installed"),
+			summary: `Installed plugin ${id}`,
+			detail: {
+				version: result.data.version,
+				hitlRequestId: approvedHitlRequestId
+			}
+		});
+		return unwrapResult(result, 201);
+	} catch (error) {
+		console.error("[marketplace-install] Unhandled error:", error);
+		return handleError(error, "Failed to install plugin from marketplace", "INSTALL_FAILED");
+	}
+};
+
+//#endregion
+export { POST, prerender };

package/dist/astro/routes/api/admin/plugins/marketplace/index.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/admin/plugins/marketplace/index.mjs

@@ -0,0 +1,62 @@
+import "../../../../../../dialect-helpers-DhTzaUxP.mjs";
+import "../../../../../../content-CyLkb-qH.mjs";
+import "../../../../../../base64-Cz-aU0X1.mjs";
+import "../../../../../../types-Bs6lTBBW.mjs";
+import "../../../../../../media-_7Fxdu45.mjs";
+import "../../../../../../user-CcXq-zoL.mjs";
+import "../../../../../../taxonomy-D5cbhc8u.mjs";
+import "../../../../../../comment-DFO-gWDH.mjs";
+import "../../../../../../options-z8VVg1Ll.mjs";
+import "../../../../../../site-activity-B8FjLIVh.mjs";
+import "../../../../../../review-requests-C2DIHwlJ.mjs";
+import "../../../../../../redirect-CGl64yOX.mjs";
+import "../../../../../../byline-naZxOPSa.mjs";
+import "../../../../../../seo-CUQctrog.mjs";
+import { i as handleMarketplaceSearch } from "../../../../../../api-BR7Y0GBo.mjs";
+import "../../../../../../dashboard-DqnYU8EU.mjs";
+import "../../../../../../briefing-MVYe_Uyf.mjs";
+import "../../../../../../context-types-C-LwdAxx.mjs";
+import "../../../../../../fts-manager-B1pTNEG_.mjs";
+import "../../../../../../registry-C-_hxLqa.mjs";
+import "../../../../../../loader-PZnPxFLc.mjs";
+import "../../../../../../settings-DGtLLSaz.mjs";
+import "../../../../../../request-cache-DHMRr2Lf.mjs";
+import "../../../../../../briefing-rty4O-wa.mjs";
+import "../../../../../../review-requests-DIyjw-K_.mjs";
+import "../../../../../../query-CsbOywSY.mjs";
+import "../../../../../../zod-generator-DBVP8D0P.mjs";
+import "../../../../../../schema-BECjUhP8.mjs";
+import "../../../../../../seo-C007Luwn.mjs";
+import "../../../../../../menus-DS3_5nWY.mjs";
+import "../../../../../../sections-B61OxnfB.mjs";
+import "../../../../../../settings-Dzgswvg4.mjs";
+import "../../../../../../taxonomies-D2aZGuns.mjs";
+import "../../../../../../taxonomies-z6Lz91BC.mjs";
+import "../../../../../../manifest-schema-CgFJAp0H.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-BMUPwxgx.mjs";
+import "../../../../../../parse-C9106ehs.mjs";
+import "../../../../../../redirects-lrlmYXVE.mjs";
+import "../../../../../../import-CNcKWTbp.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BAdbMCwC.mjs";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/index.ts
+const prerender = false;
+const GET = async ({ url, locals }) => {
+	const { dineway, user } = locals;
+	if (!dineway?.db) return apiError("NOT_CONFIGURED", "Dineway is not initialized", 500);
+	const denied = requirePerm(user, "plugins:read");
+	if (denied) return denied;
+	const query = url.searchParams.get("q") ?? void 0;
+	const category = url.searchParams.get("category") ?? void 0;
+	const cursor = url.searchParams.get("cursor") ?? void 0;
+	const limitParam = url.searchParams.get("limit");
+	const limit = limitParam ? Math.min(Math.max(1, parseInt(limitParam, 10) || 50), 100) : void 0;
+	return unwrapResult(await handleMarketplaceSearch(dineway.config.marketplace, query, {
+		category,
+		cursor,
+		limit
+	}));
+};
+
+//#endregion
+export { GET, prerender };

package/dist/astro/routes/api/admin/plugins/updates.d.mts

@@ -0,0 +1,7 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/plugins/updates.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };