emdash 0.11.1 → 0.13.0

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/index.mjs

@@ -0,0 +1,51 @@
+import "../../../../../../../dialect-helpers-BKCvISIQ.mjs";
+import "../../../../../../../content-D6YG26WG.mjs";
+import "../../../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../../../types-CwXMEPRr.mjs";
+import "../../../../../../../media-Dg7he9uK.mjs";
+import "../../../../../../../user-Dr1bOCqS.mjs";
+import "../../../../../../../taxonomy-wPfusMK9.mjs";
+import "../../../../../../../comment-Dd9MI82-.mjs";
+import "../../../../../../../options-BL4X94qY.mjs";
+import "../../../../../../../menus-DOzIecHi.mjs";
+import "../../../../../../../redirect-DkaDxq8e.mjs";
+import "../../../../../../../byline-D09BaS4j.mjs";
+import "../../../../../../../seo-DRq9-EPP.mjs";
+import { r as handleMarketplaceGetPlugin } from "../../../../../../../api-ayIQ7rIe.mjs";
+import "../../../../../../../request-cache-dzCt8TZB.mjs";
+import "../../../../../../../dashboard-BmWSIUwY.mjs";
+import "../../../../../../../fts-manager-B633C-kQ.mjs";
+import "../../../../../../../registry-BnCeHYsf.mjs";
+import "../../../../../../../loader-Cs6-Bqe6.mjs";
+import "../../../../../../../schema-BmqagCwG.mjs";
+import "../../../../../../../zod-generator-DSyz01KE.mjs";
+import "../../../../../../../seo-BoR4wCUh.mjs";
+import "../../../../../../../sections-Cm-zb-gZ.mjs";
+import "../../../../../../../settings-xQKsWnzQ.mjs";
+import "../../../../../../../settings-CBBj7HUd.mjs";
+import "../../../../../../../taxonomies-Cn9UpaR2.mjs";
+import "../../../../../../../taxonomies-Dc0mzlms.mjs";
+import "../../../../../../../manifest-schema-HCtSh4Jq.mjs";
+import "../../../../../../../types-Db67HHlU.mjs";
+import "../../../../../../../ssrf-DzFN_qV-.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../../error-tSQWIl5U.mjs";
+import "../../../../../../../parse-BFTPon-J.mjs";
+import "../../../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../../../setup-BGAJ2uXs.mjs";
+import { n as requirePerm } from "../../../../../../../authorize-BlyCH-96.mjs";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/[id]/index.ts
+const prerender = false;
+const GET = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const denied = requirePerm(user, "plugins:read");
+	if (denied) return denied;
+	if (!id) return apiError("INVALID_REQUEST", "Plugin ID required", 400);
+	return unwrapResult(await handleMarketplaceGetPlugin(emdash.config.marketplace, id));
+};
+
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/plugins/marketplace/[id]/index.ts"],"sourcesContent":["/**\n * Marketplace plugin detail proxy endpoint\n *\n * GET /_emdash/api/admin/plugins/marketplace/:id - Get plugin details\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleMarketplaceGetPlugin } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Plugin ID required\", 400);\n\t}\n\n\tconst result = await handleMarketplaceGetPlugin(emdash.config.marketplace, id);\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,sBAAsB,IAAI;AAK9D,QAAO,aAFQ,MAAM,2BAA2B,OAAO,OAAO,aAAa,GAAG,CAEnD"}

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/install.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/[id]/install.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=install.d.mts.map

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/install.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.mts","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/plugins/marketplace/[id]/install.ts"],"mappings":";;;cAca,SAAA;AAAA,cAMA,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/install.mjs

@@ -0,0 +1,69 @@
+import "../../../../../../../dialect-helpers-BKCvISIQ.mjs";
+import "../../../../../../../content-D6YG26WG.mjs";
+import "../../../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../../../types-CwXMEPRr.mjs";
+import "../../../../../../../media-Dg7he9uK.mjs";
+import "../../../../../../../user-Dr1bOCqS.mjs";
+import "../../../../../../../taxonomy-wPfusMK9.mjs";
+import "../../../../../../../comment-Dd9MI82-.mjs";
+import "../../../../../../../options-BL4X94qY.mjs";
+import "../../../../../../../menus-DOzIecHi.mjs";
+import "../../../../../../../redirect-DkaDxq8e.mjs";
+import "../../../../../../../byline-D09BaS4j.mjs";
+import "../../../../../../../seo-DRq9-EPP.mjs";
+import { i as handleMarketplaceInstall } from "../../../../../../../api-ayIQ7rIe.mjs";
+import "../../../../../../../request-cache-dzCt8TZB.mjs";
+import "../../../../../../../dashboard-BmWSIUwY.mjs";
+import "../../../../../../../fts-manager-B633C-kQ.mjs";
+import "../../../../../../../registry-BnCeHYsf.mjs";
+import "../../../../../../../loader-Cs6-Bqe6.mjs";
+import "../../../../../../../schema-BmqagCwG.mjs";
+import "../../../../../../../zod-generator-DSyz01KE.mjs";
+import "../../../../../../../seo-BoR4wCUh.mjs";
+import "../../../../../../../sections-Cm-zb-gZ.mjs";
+import "../../../../../../../settings-xQKsWnzQ.mjs";
+import "../../../../../../../settings-CBBj7HUd.mjs";
+import "../../../../../../../taxonomies-Cn9UpaR2.mjs";
+import "../../../../../../../taxonomies-Dc0mzlms.mjs";
+import "../../../../../../../manifest-schema-HCtSh4Jq.mjs";
+import "../../../../../../../types-Db67HHlU.mjs";
+import "../../../../../../../ssrf-DzFN_qV-.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../../error-tSQWIl5U.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../../../parse-BFTPon-J.mjs";
+import "../../../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../../../setup-BGAJ2uXs.mjs";
+import { n as requirePerm } from "../../../../../../../authorize-BlyCH-96.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/[id]/install.ts
+const prerender = false;
+const installBodySchema = z.object({ version: z.string().min(1).optional() });
+const POST = async ({ params, request, locals }) => {
+	try {
+		const { emdash, user } = locals;
+		const { id } = params;
+		if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+		const denied = requirePerm(user, "plugins:manage");
+		if (denied) return denied;
+		if (!id) return apiError("INVALID_REQUEST", "Plugin ID required", 400);
+		const body = await parseOptionalBody(request, installBodySchema, {});
+		if (isParseError(body)) return body;
+		const configuredPluginIds = new Set(emdash.configuredPlugins.map((p) => p.id));
+		const siteOrigin = new URL(request.url).origin;
+		const result = await handleMarketplaceInstall(emdash.db, emdash.storage, emdash.getSandboxRunner(), emdash.config.marketplace, id, {
+			version: body.version,
+			configuredPluginIds,
+			siteOrigin
+		});
+		if (!result.success) return unwrapResult(result);
+		await emdash.syncMarketplacePlugins();
+		return unwrapResult(result, 201);
+	} catch (error) {
+		console.error("[marketplace-install] Unhandled error:", error);
+		return handleError(error, "Failed to install plugin from marketplace", "INSTALL_FAILED");
+	}
+};
+
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=install.mjs.map

package/dist/astro/routes/api/admin/plugins/marketplace/_id_/install.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/plugins/marketplace/[id]/install.ts"],"sourcesContent":["/**\n * Marketplace plugin install endpoint\n *\n * POST /_emdash/api/admin/plugins/marketplace/:id/install - Install a marketplace plugin\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMarketplaceInstall } from \"#api/index.js\";\nimport { isParseError, parseOptionalBody } from \"#api/parse.js\";\n\nexport const prerender = false;\n\nconst installBodySchema = z.object({\n\tversion: z.string().min(1).optional(),\n});\n\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\ttry {\n\t\tconst { emdash, user } = locals;\n\t\tconst { id } = params;\n\n\t\tif (!emdash?.db) {\n\t\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t\t}\n\n\t\tconst denied = requirePerm(user, \"plugins:manage\");\n\t\tif (denied) return denied;\n\n\t\tif (!id) {\n\t\t\treturn apiError(\"INVALID_REQUEST\", \"Plugin ID required\", 400);\n\t\t}\n\n\t\tconst body = await parseOptionalBody(request, installBodySchema, {});\n\t\tif (isParseError(body)) return body;\n\n\t\tconst configuredPluginIds = new Set<string>(\n\t\t\temdash.configuredPlugins.map((p: { id: string }) => p.id),\n\t\t);\n\n\t\tconst siteOrigin = new URL(request.url).origin;\n\n\t\tconst result = await handleMarketplaceInstall(\n\t\t\temdash.db,\n\t\t\temdash.storage,\n\t\t\temdash.getSandboxRunner(),\n\t\t\temdash.config.marketplace,\n\t\t\tid,\n\t\t\t{ version: body.version, configuredPluginIds, siteOrigin },\n\t\t);\n\n\t\tif (!result.success) return unwrapResult(result);\n\n\t\tawait emdash.syncMarketplacePlugins();\n\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\tconsole.error(\"[marketplace-install] Unhandled error:\", error);\n\t\treturn handleError(error, \"Failed to install plugin from marketplace\", \"INSTALL_FAILED\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAM,oBAAoB,EAAE,OAAO,EAClC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,EACrC,CAAC;AAEF,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;AACpE,KAAI;EACH,MAAM,EAAE,QAAQ,SAAS;EACzB,MAAM,EAAE,OAAO;AAEf,MAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;EAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,MAAI,OAAQ,QAAO;AAEnB,MAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,sBAAsB,IAAI;EAG9D,MAAM,OAAO,MAAM,kBAAkB,SAAS,mBAAmB,EAAE,CAAC;AACpE,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,sBAAsB,IAAI,IAC/B,OAAO,kBAAkB,KAAK,MAAsB,EAAE,GAAG,CACzD;EAED,MAAM,aAAa,IAAI,IAAI,QAAQ,IAAI,CAAC;EAExC,MAAM,SAAS,MAAM,yBACpB,OAAO,IACP,OAAO,SACP,OAAO,kBAAkB,EACzB,OAAO,OAAO,aACd,IACA;GAAE,SAAS,KAAK;GAAS;GAAqB;GAAY,CAC1D;AAED,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAEhD,QAAM,OAAO,wBAAwB;AAErC,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,UAAQ,MAAM,0CAA0C,MAAM;AAC9D,SAAO,YAAY,OAAO,6CAA6C,iBAAiB"}

package/dist/astro/routes/api/admin/plugins/marketplace/index.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/admin/plugins/marketplace/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/plugins/marketplace/index.ts"],"mappings":";;;cAYa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/admin/plugins/marketplace/index.mjs

@@ -0,0 +1,58 @@
+import "../../../../../../dialect-helpers-BKCvISIQ.mjs";
+import "../../../../../../content-D6YG26WG.mjs";
+import "../../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../../types-CwXMEPRr.mjs";
+import "../../../../../../media-Dg7he9uK.mjs";
+import "../../../../../../user-Dr1bOCqS.mjs";
+import "../../../../../../taxonomy-wPfusMK9.mjs";
+import "../../../../../../comment-Dd9MI82-.mjs";
+import "../../../../../../options-BL4X94qY.mjs";
+import "../../../../../../menus-DOzIecHi.mjs";
+import "../../../../../../redirect-DkaDxq8e.mjs";
+import "../../../../../../byline-D09BaS4j.mjs";
+import "../../../../../../seo-DRq9-EPP.mjs";
+import { a as handleMarketplaceSearch } from "../../../../../../api-ayIQ7rIe.mjs";
+import "../../../../../../request-cache-dzCt8TZB.mjs";
+import "../../../../../../dashboard-BmWSIUwY.mjs";
+import "../../../../../../fts-manager-B633C-kQ.mjs";
+import "../../../../../../registry-BnCeHYsf.mjs";
+import "../../../../../../loader-Cs6-Bqe6.mjs";
+import "../../../../../../schema-BmqagCwG.mjs";
+import "../../../../../../zod-generator-DSyz01KE.mjs";
+import "../../../../../../seo-BoR4wCUh.mjs";
+import "../../../../../../sections-Cm-zb-gZ.mjs";
+import "../../../../../../settings-xQKsWnzQ.mjs";
+import "../../../../../../settings-CBBj7HUd.mjs";
+import "../../../../../../taxonomies-Cn9UpaR2.mjs";
+import "../../../../../../taxonomies-Dc0mzlms.mjs";
+import "../../../../../../manifest-schema-HCtSh4Jq.mjs";
+import "../../../../../../types-Db67HHlU.mjs";
+import "../../../../../../ssrf-DzFN_qV-.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-tSQWIl5U.mjs";
+import "../../../../../../parse-BFTPon-J.mjs";
+import "../../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../../setup-BGAJ2uXs.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BlyCH-96.mjs";
+
+//#region src/astro/routes/api/admin/plugins/marketplace/index.ts
+const prerender = false;
+const GET = async ({ url, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const denied = requirePerm(user, "plugins:read");
+	if (denied) return denied;
+	const query = url.searchParams.get("q") ?? void 0;
+	const category = url.searchParams.get("category") ?? void 0;
+	const cursor = url.searchParams.get("cursor") ?? void 0;
+	const limitParam = url.searchParams.get("limit");
+	const limit = limitParam ? Math.min(Math.max(1, parseInt(limitParam, 10) || 50), 100) : void 0;
+	return unwrapResult(await handleMarketplaceSearch(emdash.config.marketplace, query, {
+		category,
+		cursor,
+		limit
+	}));
+};
+
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/admin/plugins/marketplace/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/plugins/marketplace/index.ts"],"sourcesContent":["/**\n * Marketplace search proxy endpoint\n *\n * GET /_emdash/api/admin/plugins/marketplace - Search marketplace plugins\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleMarketplaceSearch } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tconst query = url.searchParams.get(\"q\") ?? undefined;\n\tconst category = url.searchParams.get(\"category\") ?? undefined;\n\tconst cursor = url.searchParams.get(\"cursor\") ?? undefined;\n\tconst limitParam = url.searchParams.get(\"limit\");\n\tconst limit = limitParam ? Math.min(Math.max(1, parseInt(limitParam, 10) || 50), 100) : undefined;\n\n\tconst result = await handleMarketplaceSearch(emdash.config.marketplace, query, {\n\t\tcategory,\n\t\tcursor,\n\t\tlimit,\n\t});\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,IAAI,aAAa,IAAI,IAAI,IAAI;CAC3C,MAAM,WAAW,IAAI,aAAa,IAAI,WAAW,IAAI;CACrD,MAAM,SAAS,IAAI,aAAa,IAAI,SAAS,IAAI;CACjD,MAAM,aAAa,IAAI,aAAa,IAAI,QAAQ;CAChD,MAAM,QAAQ,aAAa,KAAK,IAAI,KAAK,IAAI,GAAG,SAAS,YAAY,GAAG,IAAI,GAAG,EAAE,IAAI,GAAG;AAQxF,QAAO,aANQ,MAAM,wBAAwB,OAAO,OAAO,aAAa,OAAO;EAC9E;EACA;EACA;EACA,CAAC,CAEyB"}

package/dist/astro/routes/api/admin/plugins/registry/install.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/plugins/registry/install.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=install.d.mts.map

package/dist/astro/routes/api/admin/plugins/registry/install.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/plugins/registry/install.ts"],"mappings":";;;cAsBa,SAAA;AAAA,cAoCA,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/admin/plugins/registry/install.mjs

@@ -0,0 +1,72 @@
+import "../../../../../../dialect-helpers-BKCvISIQ.mjs";
+import "../../../../../../content-D6YG26WG.mjs";
+import "../../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../../types-CwXMEPRr.mjs";
+import "../../../../../../media-Dg7he9uK.mjs";
+import "../../../../../../user-Dr1bOCqS.mjs";
+import "../../../../../../taxonomy-wPfusMK9.mjs";
+import "../../../../../../comment-Dd9MI82-.mjs";
+import "../../../../../../options-BL4X94qY.mjs";
+import "../../../../../../menus-DOzIecHi.mjs";
+import "../../../../../../redirect-DkaDxq8e.mjs";
+import "../../../../../../byline-D09BaS4j.mjs";
+import "../../../../../../seo-DRq9-EPP.mjs";
+import { t as handleRegistryInstall } from "../../../../../../api-ayIQ7rIe.mjs";
+import "../../../../../../request-cache-dzCt8TZB.mjs";
+import "../../../../../../dashboard-BmWSIUwY.mjs";
+import "../../../../../../fts-manager-B633C-kQ.mjs";
+import "../../../../../../registry-BnCeHYsf.mjs";
+import "../../../../../../loader-Cs6-Bqe6.mjs";
+import "../../../../../../schema-BmqagCwG.mjs";
+import "../../../../../../zod-generator-DSyz01KE.mjs";
+import "../../../../../../seo-BoR4wCUh.mjs";
+import "../../../../../../sections-Cm-zb-gZ.mjs";
+import "../../../../../../settings-xQKsWnzQ.mjs";
+import "../../../../../../settings-CBBj7HUd.mjs";
+import "../../../../../../taxonomies-Cn9UpaR2.mjs";
+import "../../../../../../taxonomies-Dc0mzlms.mjs";
+import "../../../../../../manifest-schema-HCtSh4Jq.mjs";
+import "../../../../../../types-Db67HHlU.mjs";
+import "../../../../../../ssrf-DzFN_qV-.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../error-tSQWIl5U.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-BFTPon-J.mjs";
+import "../../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../../setup-BGAJ2uXs.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BlyCH-96.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/admin/plugins/registry/install.ts
+const prerender = false;
+const installBodySchema = z.object({
+	did: z.string().min(1).max(2048).regex(/^did:[a-z]+:/, "Invalid DID"),
+	slug: z.string().min(1).max(64).regex(/^[a-zA-Z][a-zA-Z0-9_-]*$/, "Invalid slug"),
+	version: z.string().min(1).max(64).optional(),
+	acknowledgedDeclaredAccess: z.unknown().optional()
+});
+const POST = async ({ request, locals }) => {
+	try {
+		const { emdash, user } = locals;
+		if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+		const denied = requirePerm(user, "plugins:manage");
+		if (denied) return denied;
+		const body = await parseBody(request, installBodySchema);
+		if (isParseError(body)) return body;
+		const reservedPluginIds = new Set([...emdash.configuredPlugins.map((p) => p.id), ...(emdash.config.sandboxed ?? []).map((p) => p.id)]);
+		const result = await handleRegistryInstall(emdash.db, emdash.storage, emdash.getSandboxRunner(), emdash.config.experimental?.registry, {
+			did: body.did,
+			slug: body.slug,
+			version: body.version,
+			acknowledgedDeclaredAccess: body.acknowledgedDeclaredAccess
+		}, { configuredPluginIds: reservedPluginIds });
+		if (!result.success) return unwrapResult(result);
+		await emdash.syncRegistryPlugins();
+		return unwrapResult(result, 201);
+	} catch (error) {
+		console.error("[registry-install] Unhandled error:", error);
+		return handleError(error, "Failed to install plugin from registry", "INSTALL_FAILED");
+	}
+};
+
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=install.mjs.map

package/dist/astro/routes/api/admin/plugins/registry/install.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/plugins/registry/install.ts"],"sourcesContent":["/**\n * Registry plugin install endpoint\n *\n * POST /_emdash/api/admin/plugins/registry/install\n *\n * Installs a plugin from the experimental decentralized plugin registry\n * (see RFC 0001). The browser resolves `(handle, slug) → (did, slug)`\n * via the aggregator before posting and sends the publisher DID\n * directly; the server skips the resolvePackage round-trip and looks\n * up the package by DID. Sending DID rather than handle means installs\n * work for publishers whose handle the aggregator couldn't resolve at\n * view time (handle is best-effort per the lexicon).\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleRegistryInstall } from \"#api/index.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\n\nexport const prerender = false;\n\nconst installBodySchema = z.object({\n\t/**\n\t * Publisher DID. Required. Browser is expected to resolve\n\t * `(handle, slug) → did` against the aggregator before posting.\n\t */\n\tdid: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(2048)\n\t\t// Loose match -- atproto DID specs allow `did:plc:*` and\n\t\t// `did:web:*` plus future methods. Reject anything that\n\t\t// doesn't even start with `did:` rather than enumerating\n\t\t// methods here; downstream lexicon validation tightens.\n\t\t.regex(/^did:[a-z]+:/, \"Invalid DID\"),\n\t/** Package slug. */\n\tslug: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(64)\n\t\t// Mirrors the lexicon's slug grammar: ASCII letter followed by\n\t\t// letters / digits / `-` / `_`. Rejects anything that could\n\t\t// confuse the R2 prefix or the URL.\n\t\t.regex(/^[a-zA-Z][a-zA-Z0-9_-]*$/, \"Invalid slug\"),\n\t/** Optional explicit version. Defaults to the aggregator's latest. */\n\tversion: z.string().min(1).max(64).optional(),\n\t/**\n\t * Capabilities the admin acknowledged in the consent dialog, lifted\n\t * from the release record's declaredAccess block at browse time.\n\t * Compared against the bundle's manifest to detect drift between the\n\t * dialog and the install POST.\n\t */\n\tacknowledgedDeclaredAccess: z.unknown().optional(),\n});\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\ttry {\n\t\tconst { emdash, user } = locals;\n\n\t\tif (!emdash?.db) {\n\t\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t\t}\n\n\t\tconst denied = requirePerm(user, \"plugins:manage\");\n\t\tif (denied) return denied;\n\n\t\tconst body = await parseBody(request, installBodySchema);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Block registry installs whose derived `pluginId` collides with\n\t\t// any build-time-reserved id: configured (in-process) plugins, and\n\t\t// sandboxed plugins declared in `config.sandboxed`. The runtime\n\t\t// caches sandboxed plugins by id; a registry install at the same\n\t\t// id would silently shadow or coexist with the build-time entry.\n\t\tconst reservedPluginIds = new Set<string>([\n\t\t\t...emdash.configuredPlugins.map((p: { id: string }) => p.id),\n\t\t\t...(emdash.config.sandboxed ?? []).map((p: { id: string }) => p.id),\n\t\t]);\n\n\t\tconst result = await handleRegistryInstall(\n\t\t\temdash.db,\n\t\t\temdash.storage,\n\t\t\temdash.getSandboxRunner(),\n\t\t\temdash.config.experimental?.registry,\n\t\t\t{\n\t\t\t\tdid: body.did,\n\t\t\t\tslug: body.slug,\n\t\t\t\tversion: body.version,\n\t\t\t\tacknowledgedDeclaredAccess: body.acknowledgedDeclaredAccess,\n\t\t\t},\n\t\t\t{ configuredPluginIds: reservedPluginIds },\n\t\t);\n\n\t\tif (!result.success) return unwrapResult(result);\n\n\t\t// Sync runtime so the new plugin becomes active without a worker restart.\n\t\tawait emdash.syncRegistryPlugins();\n\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\tconsole.error(\"[registry-install] Unhandled error:\", error);\n\t\treturn handleError(error, \"Failed to install plugin from registry\", \"INSTALL_FAILED\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,YAAY;AAEzB,MAAM,oBAAoB,EAAE,OAAO;CAKlC,KAAK,EACH,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,KAAK,CAKT,MAAM,gBAAgB,cAAc;CAEtC,MAAM,EACJ,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,GAAG,CAIP,MAAM,4BAA4B,eAAe;CAEnD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU;CAO7C,4BAA4B,EAAE,SAAS,CAAC,UAAU;CAClD,CAAC;AAEF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;AAC5D,KAAI;EACH,MAAM,EAAE,QAAQ,SAAS;AAEzB,MAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;EAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,MAAI,OAAQ,QAAO;EAEnB,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAO/B,MAAM,oBAAoB,IAAI,IAAY,CACzC,GAAG,OAAO,kBAAkB,KAAK,MAAsB,EAAE,GAAG,EAC5D,IAAI,OAAO,OAAO,aAAa,EAAE,EAAE,KAAK,MAAsB,EAAE,GAAG,CACnE,CAAC;EAEF,MAAM,SAAS,MAAM,sBACpB,OAAO,IACP,OAAO,SACP,OAAO,kBAAkB,EACzB,OAAO,OAAO,cAAc,UAC5B;GACC,KAAK,KAAK;GACV,MAAM,KAAK;GACX,SAAS,KAAK;GACd,4BAA4B,KAAK;GACjC,EACD,EAAE,qBAAqB,mBAAmB,CAC1C;AAED,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAGhD,QAAM,OAAO,qBAAqB;AAElC,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,UAAQ,MAAM,uCAAuC,MAAM;AAC3D,SAAO,YAAY,OAAO,0CAA0C,iBAAiB"}

package/dist/astro/routes/api/admin/plugins/updates.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/plugins/updates.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=updates.d.mts.map

package/dist/astro/routes/api/admin/plugins/updates.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updates.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/plugins/updates.ts"],"mappings":";;;cAYa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/admin/plugins/updates.mjs

@@ -0,0 +1,49 @@
+import "../../../../../dialect-helpers-BKCvISIQ.mjs";
+import "../../../../../content-D6YG26WG.mjs";
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import "../../../../../media-Dg7he9uK.mjs";
+import "../../../../../user-Dr1bOCqS.mjs";
+import "../../../../../taxonomy-wPfusMK9.mjs";
+import "../../../../../comment-Dd9MI82-.mjs";
+import "../../../../../options-BL4X94qY.mjs";
+import "../../../../../menus-DOzIecHi.mjs";
+import "../../../../../redirect-DkaDxq8e.mjs";
+import "../../../../../byline-D09BaS4j.mjs";
+import "../../../../../seo-DRq9-EPP.mjs";
+import { c as handleMarketplaceUpdateCheck } from "../../../../../api-ayIQ7rIe.mjs";
+import "../../../../../request-cache-dzCt8TZB.mjs";
+import "../../../../../dashboard-BmWSIUwY.mjs";
+import "../../../../../fts-manager-B633C-kQ.mjs";
+import "../../../../../registry-BnCeHYsf.mjs";
+import "../../../../../loader-Cs6-Bqe6.mjs";
+import "../../../../../schema-BmqagCwG.mjs";
+import "../../../../../zod-generator-DSyz01KE.mjs";
+import "../../../../../seo-BoR4wCUh.mjs";
+import "../../../../../sections-Cm-zb-gZ.mjs";
+import "../../../../../settings-xQKsWnzQ.mjs";
+import "../../../../../settings-CBBj7HUd.mjs";
+import "../../../../../taxonomies-Cn9UpaR2.mjs";
+import "../../../../../taxonomies-Dc0mzlms.mjs";
+import "../../../../../manifest-schema-HCtSh4Jq.mjs";
+import "../../../../../types-Db67HHlU.mjs";
+import "../../../../../ssrf-DzFN_qV-.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
+import "../../../../../parse-BFTPon-J.mjs";
+import "../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../setup-BGAJ2uXs.mjs";
+import { n as requirePerm } from "../../../../../authorize-BlyCH-96.mjs";
+
+//#region src/astro/routes/api/admin/plugins/updates.ts
+const prerender = false;
+const GET = async ({ locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const denied = requirePerm(user, "plugins:read");
+	if (denied) return denied;
+	return unwrapResult(await handleMarketplaceUpdateCheck(emdash.db, emdash.config.marketplace));
+};
+
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=updates.mjs.map

package/dist/astro/routes/api/admin/plugins/updates.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"updates.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/plugins/updates.ts"],"sourcesContent":["/**\n * Marketplace update check endpoint\n *\n * GET /_emdash/api/admin/plugins/updates - Check for marketplace plugin updates\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleMarketplaceUpdateCheck } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tconst result = await handleMarketplaceUpdateCheck(emdash.db, emdash.config.marketplace);\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAInB,QAAO,aAFQ,MAAM,6BAA6B,OAAO,IAAI,OAAO,OAAO,YAAY,CAE5D"}

package/dist/astro/routes/api/admin/themes/marketplace/_id_/index.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/themes/marketplace/[id]/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/admin/themes/marketplace/_id_/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/themes/marketplace/[id]/index.ts"],"mappings":";;;cAYa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/admin/themes/marketplace/_id_/index.mjs

@@ -0,0 +1,51 @@
+import "../../../../../../../dialect-helpers-BKCvISIQ.mjs";
+import "../../../../../../../content-D6YG26WG.mjs";
+import "../../../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../../../types-CwXMEPRr.mjs";
+import "../../../../../../../media-Dg7he9uK.mjs";
+import "../../../../../../../user-Dr1bOCqS.mjs";
+import "../../../../../../../taxonomy-wPfusMK9.mjs";
+import "../../../../../../../comment-Dd9MI82-.mjs";
+import "../../../../../../../options-BL4X94qY.mjs";
+import "../../../../../../../menus-DOzIecHi.mjs";
+import "../../../../../../../redirect-DkaDxq8e.mjs";
+import "../../../../../../../byline-D09BaS4j.mjs";
+import "../../../../../../../seo-DRq9-EPP.mjs";
+import { l as handleThemeGetDetail } from "../../../../../../../api-ayIQ7rIe.mjs";
+import "../../../../../../../request-cache-dzCt8TZB.mjs";
+import "../../../../../../../dashboard-BmWSIUwY.mjs";
+import "../../../../../../../fts-manager-B633C-kQ.mjs";
+import "../../../../../../../registry-BnCeHYsf.mjs";
+import "../../../../../../../loader-Cs6-Bqe6.mjs";
+import "../../../../../../../schema-BmqagCwG.mjs";
+import "../../../../../../../zod-generator-DSyz01KE.mjs";
+import "../../../../../../../seo-BoR4wCUh.mjs";
+import "../../../../../../../sections-Cm-zb-gZ.mjs";
+import "../../../../../../../settings-xQKsWnzQ.mjs";
+import "../../../../../../../settings-CBBj7HUd.mjs";
+import "../../../../../../../taxonomies-Cn9UpaR2.mjs";
+import "../../../../../../../taxonomies-Dc0mzlms.mjs";
+import "../../../../../../../manifest-schema-HCtSh4Jq.mjs";
+import "../../../../../../../types-Db67HHlU.mjs";
+import "../../../../../../../ssrf-DzFN_qV-.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../../error-tSQWIl5U.mjs";
+import "../../../../../../../parse-BFTPon-J.mjs";
+import "../../../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../../../setup-BGAJ2uXs.mjs";
+import { n as requirePerm } from "../../../../../../../authorize-BlyCH-96.mjs";
+
+//#region src/astro/routes/api/admin/themes/marketplace/[id]/index.ts
+const prerender = false;
+const GET = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const denied = requirePerm(user, "plugins:read");
+	if (denied) return denied;
+	if (!id) return apiError("INVALID_REQUEST", "Theme ID required", 400);
+	return unwrapResult(await handleThemeGetDetail(emdash.config.marketplace, id));
+};
+
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/admin/themes/marketplace/_id_/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/themes/marketplace/[id]/index.ts"],"sourcesContent":["/**\n * Theme marketplace detail proxy endpoint\n *\n * GET /_emdash/api/admin/themes/marketplace/:id - Get theme details\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleThemeGetDetail } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Theme ID required\", 400);\n\t}\n\n\tconst result = await handleThemeGetDetail(emdash.config.marketplace, id);\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAK7D,QAAO,aAFQ,MAAM,qBAAqB,OAAO,OAAO,aAAa,GAAG,CAE7C"}

package/dist/astro/routes/api/admin/themes/marketplace/_id_/thumbnail.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/themes/marketplace/[id]/thumbnail.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=thumbnail.d.mts.map

package/dist/astro/routes/api/admin/themes/marketplace/_id_/thumbnail.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thumbnail.d.mts","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/themes/marketplace/[id]/thumbnail.ts"],"mappings":";;;cAca,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/admin/themes/marketplace/_id_/thumbnail.mjs

@@ -0,0 +1,39 @@
+import "../../../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../../../types-CwXMEPRr.mjs";
+import { t as apiError } from "../../../../../../../error-tSQWIl5U.mjs";
+import { n as requirePerm } from "../../../../../../../authorize-BlyCH-96.mjs";
+
+//#region src/astro/routes/api/admin/themes/marketplace/[id]/thumbnail.ts
+const prerender = false;
+const GET = async ({ params, url, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const denied = requirePerm(user, "plugins:read");
+	if (denied) return denied;
+	const marketplaceUrl = emdash.config.marketplace;
+	if (!marketplaceUrl || !id) return apiError("NOT_CONFIGURED", "Marketplace not configured", 400);
+	const width = url.searchParams.get("w");
+	const target = new URL(`/api/v1/themes/${encodeURIComponent(id)}/thumbnail`, marketplaceUrl);
+	if (width) target.searchParams.set("w", width);
+	try {
+		const resp = await fetch(target.href);
+		if (!resp.ok) return new Response(resp.body, {
+			status: resp.status,
+			headers: {
+				"Content-Type": resp.headers.get("Content-Type") ?? "application/octet-stream",
+				"Cache-Control": "private, no-store"
+			}
+		});
+		return new Response(resp.body, { headers: {
+			"Content-Type": resp.headers.get("Content-Type") ?? "image/png",
+			"Cache-Control": "private, no-store"
+		} });
+	} catch {
+		return apiError("PROXY_ERROR", "Failed to fetch thumbnail", 502);
+	}
+};
+
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=thumbnail.mjs.map

package/dist/astro/routes/api/admin/themes/marketplace/_id_/thumbnail.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"thumbnail.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/themes/marketplace/[id]/thumbnail.ts"],"sourcesContent":["/**\n * Theme marketplace thumbnail proxy\n *\n * GET /_emdash/api/admin/themes/marketplace/:id/thumbnail - Proxy thumbnail from marketplace\n *\n * Avoids CORS/auth issues when the marketplace Worker is behind Cloudflare Access\n * or on a different origin. The admin UI uses this instead of linking directly.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError } from \"#api/error.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, url, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tconst marketplaceUrl = emdash.config.marketplace;\n\tif (!marketplaceUrl || !id) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"Marketplace not configured\", 400);\n\t}\n\n\tconst width = url.searchParams.get(\"w\");\n\tconst target = new URL(`/api/v1/themes/${encodeURIComponent(id)}/thumbnail`, marketplaceUrl);\n\tif (width) target.searchParams.set(\"w\", width);\n\n\ttry {\n\t\tconst resp = await fetch(target.href);\n\t\tif (!resp.ok) {\n\t\t\t// Allowlist: only forward Content-Type from upstream.\n\t\t\t// Never copy all upstream headers (denylist approach leaks\n\t\t\t// headers we haven't anticipated).\n\t\t\treturn new Response(resp.body, {\n\t\t\t\tstatus: resp.status,\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": resp.headers.get(\"Content-Type\") ?? \"application/octet-stream\",\n\t\t\t\t\t\"Cache-Control\": \"private, no-store\",\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\n\t\treturn new Response(resp.body, {\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": resp.headers.get(\"Content-Type\") ?? \"image/png\",\n\t\t\t\t\"Cache-Control\": \"private, no-store\",\n\t\t\t},\n\t\t});\n\t} catch {\n\t\treturn apiError(\"PROXY_ERROR\", \"Failed to fetch thumbnail\", 502);\n\t}\n};\n"],"mappings":";;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,KAAK,aAAa;CAC/D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,iBAAiB,OAAO,OAAO;AACrC,KAAI,CAAC,kBAAkB,CAAC,GACvB,QAAO,SAAS,kBAAkB,8BAA8B,IAAI;CAGrE,MAAM,QAAQ,IAAI,aAAa,IAAI,IAAI;CACvC,MAAM,SAAS,IAAI,IAAI,kBAAkB,mBAAmB,GAAG,CAAC,aAAa,eAAe;AAC5F,KAAI,MAAO,QAAO,aAAa,IAAI,KAAK,MAAM;AAE9C,KAAI;EACH,MAAM,OAAO,MAAM,MAAM,OAAO,KAAK;AACrC,MAAI,CAAC,KAAK,GAIT,QAAO,IAAI,SAAS,KAAK,MAAM;GAC9B,QAAQ,KAAK;GACb,SAAS;IACR,gBAAgB,KAAK,QAAQ,IAAI,eAAe,IAAI;IACpD,iBAAiB;IACjB;GACD,CAAC;AAGH,SAAO,IAAI,SAAS,KAAK,MAAM,EAC9B,SAAS;GACR,gBAAgB,KAAK,QAAQ,IAAI,eAAe,IAAI;GACpD,iBAAiB;GACjB,EACD,CAAC;SACK;AACP,SAAO,SAAS,eAAe,6BAA6B,IAAI"}

package/dist/astro/routes/api/admin/themes/marketplace/index.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/themes/marketplace/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/admin/themes/marketplace/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/themes/marketplace/index.ts"],"mappings":";;;cAYa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}