emdash 0.15.0 → 0.16.0

package/dist/astro/routes/api/admin/plugins/registry/artifact.mjs

@@ -0,0 +1,301 @@
+import "../../../../../../dialect-helpers-BKCvISIQ.mjs";
+import "../../../../../../content-8voQNTXX.mjs";
+import "../../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../../types-B0bmgwMG.mjs";
+import "../../../../../../media-CKQd8AYU.mjs";
+import "../../../../../../user-hUSOaIJy.mjs";
+import "../../../../../../taxonomy-zqGQUqgu.mjs";
+import "../../../../../../comment-C76G-9tz.mjs";
+import "../../../../../../options-BL4X94qY.mjs";
+import "../../../../../../menus-arUNspyU.mjs";
+import "../../../../../../redirect-CjfDGrTd.mjs";
+import "../../../../../../byline-BDylH_m4.mjs";
+import "../../../../../../seo-BGCyDlkb.mjs";
+import { c as validateAggregatorUrl, o as coerceRegistryConfig, t as assertSafeArtifactUrl } from "../../../../../../api-BNKqxyFX.mjs";
+import "../../../../../../request-cache-dzCt8TZB.mjs";
+import "../../../../../../dashboard-BeaFSPpx.mjs";
+import "../../../../../../fts-manager-C_b-4x8u.mjs";
+import "../../../../../../registry-Cyp-dx6J.mjs";
+import "../../../../../../loader-D-vIJjfY.mjs";
+import "../../../../../../schema-CI9mYPX3.mjs";
+import "../../../../../../zod-generator-B80aap1J.mjs";
+import "../../../../../../seo-Dq707mNQ.mjs";
+import "../../../../../../sections-DBbCDIAT.mjs";
+import "../../../../../../settings-BSXRtTzk.mjs";
+import "../../../../../../settings-DfwNyQkf.mjs";
+import "../../../../../../resolve-D6sM-SgF.mjs";
+import "../../../../../../taxonomies-CcvrMLbR.mjs";
+import "../../../../../../taxonomies-4vx0nmMr.mjs";
+import "../../../../../../manifest-schema-Czqf0TLu.mjs";
+import "../../../../../../types-1NNkmTIn.mjs";
+import "../../../../../../ssrf-MZ-zrG6-.mjs";
+import { t as apiError } from "../../../../../../error-ChfADBuu.mjs";
+import "../../../../../../parse-DHbXfvxO.mjs";
+import "../../../../../../redirects-COMLwsV5.mjs";
+import "../../../../../../setup-Cf_TyOv5.mjs";
+import { n as requirePerm } from "../../../../../../authorize-Bn4S4DUT.mjs";
+
+//#region src/astro/routes/api/admin/plugins/registry/artifact.ts
+const prerender = false;
+/**
+* Image content types the proxy will pass through. Anything else is rejected.
+*
+* SVG is deliberately excluded: it is active content (an `<svg><script>`
+* executes when navigated to as a top-level document), and the publisher
+* supplies the bytes. Rather than serve it behind mitigations, we refuse it
+* end-to-end — the publish CLI rejects SVG artifacts too, so a conforming
+* release never references one. AVIF is included.
+*/
+const ALLOWED_IMAGE_TYPES = new Set([
+	"image/png",
+	"image/jpeg",
+	"image/webp",
+	"image/gif",
+	"image/avif"
+]);
+/** Artifact kinds the proxy can resolve. `screenshot` additionally needs `index`. */
+const ALLOWED_KINDS = new Set([
+	"icon",
+	"banner",
+	"screenshot"
+]);
+/** Loose DID shape (`did:method:id`); the aggregator lexicon is authoritative. */
+const DID_PATTERN = /^did:[a-z]+:.+/;
+/** Slug grammar: ASCII letter then letters / digits / `-` / `_`. Mirrors the install route. */
+const SLUG_PATTERN = /^[a-zA-Z][a-zA-Z0-9_-]*$/;
+/** Non-negative integer, for the screenshot index param. */
+const INDEX_PATTERN = /^\d+$/;
+/** Cap proxied images so a hostile host can't stream an unbounded body. */
+const MAX_IMAGE_BYTES = 5 * 1024 * 1024;
+/** Redirect hops to follow, re-validating each target against SSRF rules. */
+const MAX_REDIRECTS = 5;
+/** Wall-clock budget covering connect + headers + body for the artifact fetch. */
+const FETCH_TIMEOUT_MS = 15e3;
+/** Per-aggregator-request timeout and overall budget for release resolution. */
+const AGGREGATOR_REQUEST_TIMEOUT_MS = 15e3;
+const AGGREGATOR_TOTAL_BUDGET_MS = 3e4;
+/** Bound the version search: 20 pages * 50 per page = 1000 releases worth. */
+const MAX_LIST_PAGES = 20;
+/** Build a fetch that enforces a per-request and per-budget timeout. Mirrors the install handler. */
+function timedFetch(totalDeadline) {
+	return (input, init) => {
+		const now = Date.now();
+		const remaining = Math.max(0, totalDeadline - now);
+		if (remaining === 0) return Promise.reject(/* @__PURE__ */ new Error("Aggregator request budget exhausted"));
+		const timeout = Math.min(AGGREGATOR_REQUEST_TIMEOUT_MS, remaining);
+		const controller = new AbortController();
+		const timer = setTimeout(() => controller.abort(), timeout);
+		const callerSignal = init?.signal;
+		if (callerSignal) if (callerSignal.aborted) controller.abort(callerSignal.reason);
+		else callerSignal.addEventListener("abort", () => controller.abort(callerSignal.reason));
+		return fetch(input, {
+			...init,
+			signal: controller.signal
+		}).finally(() => {
+			clearTimeout(timer);
+		});
+	};
+}
+/**
+* Narrow one entry of a release's `artifacts` map to a usable image URL.
+*
+* The embedded `release` record is lexicon-validated at the DiscoveryClient
+* boundary, but `artifacts` is an aggregator pass-through typed `unknown`, so
+* the entry's shape is not guaranteed. Returns the `url` string only when the
+* value is an object carrying a non-empty string `url`; everything else
+* (missing key, wrong type, no `url`) yields `null`.
+*/
+function declaredArtifactUrl(value) {
+	if (!value || typeof value !== "object") return null;
+	const url = value.url;
+	if (typeof url !== "string" || url.length === 0) return null;
+	return url;
+}
+/**
+* Resolve the declared artifact URL for `(kind, index)` from a release's
+* `artifacts` map. Returns `null` when the requested artifact isn't present
+* or doesn't carry a usable URL.
+*/
+function resolveDeclaredUrl(artifacts, kind, index) {
+	if (!artifacts || typeof artifacts !== "object") return null;
+	const map = artifacts;
+	if (kind === "icon") return declaredArtifactUrl(map.icon);
+	if (kind === "banner") return declaredArtifactUrl(map.banner);
+	const screenshots = map.screenshots;
+	if (!Array.isArray(screenshots)) return null;
+	if (index < 0 || index >= screenshots.length) return null;
+	return declaredArtifactUrl(screenshots[index]);
+}
+const GET = async ({ url, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const denied = requirePerm(user, "plugins:read");
+	if (denied) return denied;
+	const did = url.searchParams.get("did");
+	const slug = url.searchParams.get("slug");
+	const kind = url.searchParams.get("kind");
+	const versionParam = url.searchParams.get("version");
+	const indexParam = url.searchParams.get("index");
+	if (!did || !slug || !kind) return apiError("INVALID_REQUEST", "Missing did, slug, or kind", 400);
+	if (did.length > 256 || !DID_PATTERN.test(did)) return apiError("INVALID_REQUEST", "Invalid did", 400);
+	if (slug.length > 64 || !SLUG_PATTERN.test(slug)) return apiError("INVALID_REQUEST", "Invalid slug", 400);
+	if (!ALLOWED_KINDS.has(kind)) return apiError("INVALID_REQUEST", "Invalid kind", 400);
+	let index = 0;
+	if (kind === "screenshot") {
+		if (indexParam === null) return apiError("INVALID_REQUEST", "Missing index for screenshot", 400);
+		if (!INDEX_PATTERN.test(indexParam)) return apiError("INVALID_REQUEST", "Invalid index", 400);
+		index = Number(indexParam);
+		if (!Number.isSafeInteger(index)) return apiError("INVALID_REQUEST", "Invalid index", 400);
+	}
+	let version;
+	if (versionParam !== null && versionParam.length > 0) {
+		if (versionParam.length > 64) return apiError("INVALID_REQUEST", "Invalid version", 400);
+		version = versionParam;
+	}
+	const registryConfig = coerceRegistryConfig(emdash.config.experimental?.registry);
+	if (!registryConfig) return apiError("REGISTRY_NOT_CONFIGURED", "Registry is not configured", 400);
+	try {
+		validateAggregatorUrl(registryConfig.aggregatorUrl);
+	} catch {
+		return apiError("REGISTRY_NOT_CONFIGURED", "Registry aggregator URL is invalid", 500);
+	}
+	let declaredUrl;
+	try {
+		const resolved = await resolveArtifactUrl(registryConfig, did, slug, version, kind, index);
+		if (resolved === null) return apiError("ARTIFACT_NOT_FOUND", "Artifact not found", 404);
+		declaredUrl = resolved;
+	} catch {
+		return apiError("ARTIFACT_RESOLVE_FAILED", "Failed to resolve artifact", 502);
+	}
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+	try {
+		let current;
+		try {
+			current = await assertSafeArtifactUrl(declaredUrl);
+		} catch {
+			return apiError("ARTIFACT_URL_REJECTED", "Artifact URL is not allowed", 400);
+		}
+		let response;
+		for (let hop = 0;; hop++) {
+			response = await fetch(current.href, {
+				redirect: "manual",
+				signal: controller.signal
+			});
+			if (response.status < 300 || response.status >= 400) break;
+			const location = response.headers.get("location");
+			if (!location) break;
+			if (hop === MAX_REDIRECTS) return apiError("ARTIFACT_URL_REJECTED", "Too many redirects", 502);
+			let next;
+			try {
+				next = await assertSafeArtifactUrl(new URL(location, current).href);
+			} catch {
+				return apiError("ARTIFACT_URL_REJECTED", "Redirect target is not allowed", 400);
+			}
+			current = next;
+		}
+		if (!response.ok) return apiError("ARTIFACT_FETCH_FAILED", "Failed to fetch artifact", 502);
+		const contentType = (response.headers.get("content-type") ?? "").split(";", 1)[0].trim().toLowerCase();
+		if (!ALLOWED_IMAGE_TYPES.has(contentType)) return apiError("ARTIFACT_NOT_IMAGE", "Artifact is not an allowed image type", 415);
+		const declaredLength = response.headers.get("content-length");
+		if (declaredLength) {
+			const declared = Number(declaredLength);
+			if (Number.isFinite(declared) && declared > MAX_IMAGE_BYTES) return apiError("ARTIFACT_TOO_LARGE", "Artifact exceeds size limit", 413);
+		}
+		const bytes = await readCapped(response, MAX_IMAGE_BYTES);
+		if (bytes === null) return apiError("ARTIFACT_TOO_LARGE", "Artifact exceeds size limit", 413);
+		return new Response(bytes, { headers: {
+			"Content-Type": contentType,
+			"Cache-Control": "private, no-store",
+			"X-Content-Type-Options": "nosniff",
+			"Content-Disposition": "attachment",
+			"Content-Security-Policy": "default-src 'none'; sandbox"
+		} });
+	} catch {
+		return apiError("ARTIFACT_FETCH_FAILED", "Failed to fetch artifact", 502);
+	} finally {
+		clearTimeout(timer);
+	}
+};
+/**
+* Resolve the declared artifact URL for `(did, slug, version, kind, index)`
+* from the aggregator's release record. Mirrors the install handler's release
+* lookup. Returns `null` when the package/release/artifact isn't found.
+*
+* Self-contained to this route: the install/update handlers are intentionally
+* left untouched, so a small amount of resolution-pattern duplication is
+* accepted here.
+*/
+async function resolveArtifactUrl(registryConfig, did, slug, version, kind, index) {
+	const { DiscoveryClient } = await import("@emdash-cms/registry-client/discovery");
+	const aggregatorDeadline = Date.now() + AGGREGATOR_TOTAL_BUDGET_MS;
+	const discovery = new DiscoveryClient({
+		aggregatorUrl: registryConfig.aggregatorUrl,
+		acceptLabelers: registryConfig.acceptLabelers,
+		fetch: timedFetch(aggregatorDeadline)
+	});
+	const publisherDid = did;
+	const releaseView = await (async () => {
+		if (!version) return discovery.getLatestRelease({
+			did: publisherDid,
+			package: slug
+		});
+		let cursor;
+		const seenCursors = /* @__PURE__ */ new Set();
+		for (let page = 0; page < MAX_LIST_PAGES; page++) {
+			if (cursor !== void 0) {
+				if (seenCursors.has(cursor)) break;
+				seenCursors.add(cursor);
+			}
+			const result = await discovery.listReleases({
+				did: publisherDid,
+				package: slug,
+				cursor,
+				limit: 50
+			});
+			for (const r of result.releases) if (r.version === version) return r;
+			if (!result.cursor) break;
+			cursor = result.cursor;
+		}
+	})();
+	if (!releaseView?.release) return null;
+	return resolveDeclaredUrl(releaseView.release.artifacts, kind, index);
+}
+/**
+* Read a response body into memory, aborting once it exceeds `limit`. Returns
+* `null` when the cap is breached (the streamed body lied about / omitted
+* Content-Length). The cap is the real defence against an unbounded body.
+*/
+async function readCapped(response, limit) {
+	const body = response.body;
+	if (!body) {
+		const buf = new Uint8Array(await response.arrayBuffer());
+		return buf.length > limit ? null : buf;
+	}
+	const reader = body.getReader();
+	const chunks = [];
+	let total = 0;
+	while (true) {
+		const { done, value } = await reader.read();
+		if (done) break;
+		if (value) {
+			total += value.length;
+			if (total > limit) {
+				await reader.cancel();
+				return null;
+			}
+			chunks.push(value);
+		}
+	}
+	const combined = new Uint8Array(total);
+	let offset = 0;
+	for (const chunk of chunks) {
+		combined.set(chunk, offset);
+		offset += chunk.length;
+	}
+	return combined;
+}
+
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=artifact.mjs.map

package/dist/astro/routes/api/admin/plugins/registry/artifact.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/plugins/registry/artifact.ts"],"sourcesContent":["/**\n * Registry artifact proxy\n *\n * GET /_emdash/api/admin/plugins/registry/artifact?did=&slug=&version=&kind=&index=\n *\n * Proxies an icon / screenshot / banner image referenced by a registry\n * release record so the admin UI can display it without cross-origin\n * requests to arbitrary publisher hosting.\n *\n * Trust model (CRITICAL): the proxy never accepts an artifact URL from the\n * client. The caller addresses an artifact by its coordinates\n * `(did, slug, version, kind, index)`; the server resolves the *declared*\n * URL from the validated release record fetched from the configured\n * aggregator. The proxy can therefore only ever fetch a URL the publisher\n * declared in their signed release — not an arbitrary caller-supplied URL.\n *\n * The publisher-declared URL is still untrusted (an attacker who controls a\n * publisher record, or the aggregator, can point it anywhere), so the\n * resolved URL passes through the SSRF defences (`assertSafeArtifactUrl`,\n * re-validated on every redirect hop) before any fetch, and only allowlisted\n * image content types are served back.\n */\n\nimport type { Did } from \"@atcute/lexicons\";\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError } from \"#api/error.js\";\nimport { assertSafeArtifactUrl } from \"#api/index.js\";\n\nimport { coerceRegistryConfig, validateAggregatorUrl } from \"../../../../../../registry/config.js\";\n\nexport const prerender = false;\n\n/**\n * Image content types the proxy will pass through. Anything else is rejected.\n *\n * SVG is deliberately excluded: it is active content (an `<svg><script>`\n * executes when navigated to as a top-level document), and the publisher\n * supplies the bytes. Rather than serve it behind mitigations, we refuse it\n * end-to-end — the publish CLI rejects SVG artifacts too, so a conforming\n * release never references one. AVIF is included.\n */\nconst ALLOWED_IMAGE_TYPES = new Set([\n\t\"image/png\",\n\t\"image/jpeg\",\n\t\"image/webp\",\n\t\"image/gif\",\n\t\"image/avif\",\n]);\n\n/** Artifact kinds the proxy can resolve. `screenshot` additionally needs `index`. */\nconst ALLOWED_KINDS = new Set([\"icon\", \"banner\", \"screenshot\"]);\n\n/** Loose DID shape (`did:method:id`); the aggregator lexicon is authoritative. */\nconst DID_PATTERN = /^did:[a-z]+:.+/;\n/** Slug grammar: ASCII letter then letters / digits / `-` / `_`. Mirrors the install route. */\nconst SLUG_PATTERN = /^[a-zA-Z][a-zA-Z0-9_-]*$/;\n/** Non-negative integer, for the screenshot index param. */\nconst INDEX_PATTERN = /^\\d+$/;\n\n/** Cap proxied images so a hostile host can't stream an unbounded body. */\nconst MAX_IMAGE_BYTES = 5 * 1024 * 1024;\n\n/** Redirect hops to follow, re-validating each target against SSRF rules. */\nconst MAX_REDIRECTS = 5;\n\n/** Wall-clock budget covering connect + headers + body for the artifact fetch. */\nconst FETCH_TIMEOUT_MS = 15_000;\n\n/** Per-aggregator-request timeout and overall budget for release resolution. */\nconst AGGREGATOR_REQUEST_TIMEOUT_MS = 15_000;\nconst AGGREGATOR_TOTAL_BUDGET_MS = 30_000;\n\n/** Bound the version search: 20 pages * 50 per page = 1000 releases worth. */\nconst MAX_LIST_PAGES = 20;\n\n/** Build a fetch that enforces a per-request and per-budget timeout. Mirrors the install handler. */\nfunction timedFetch(totalDeadline: number): typeof fetch {\n\treturn (input: Parameters<typeof fetch>[0], init?: Parameters<typeof fetch>[1]) => {\n\t\tconst now = Date.now();\n\t\tconst remaining = Math.max(0, totalDeadline - now);\n\t\tif (remaining === 0) {\n\t\t\treturn Promise.reject(new Error(\"Aggregator request budget exhausted\"));\n\t\t}\n\t\tconst timeout = Math.min(AGGREGATOR_REQUEST_TIMEOUT_MS, remaining);\n\t\tconst controller = new AbortController();\n\t\tconst timer = setTimeout(() => controller.abort(), timeout);\n\t\tconst callerSignal = init?.signal;\n\t\tif (callerSignal) {\n\t\t\tif (callerSignal.aborted) controller.abort(callerSignal.reason);\n\t\t\telse callerSignal.addEventListener(\"abort\", () => controller.abort(callerSignal.reason));\n\t\t}\n\t\treturn fetch(input, { ...init, signal: controller.signal }).finally(() => {\n\t\t\tclearTimeout(timer);\n\t\t});\n\t};\n}\n\n/**\n * Narrow one entry of a release's `artifacts` map to a usable image URL.\n *\n * The embedded `release` record is lexicon-validated at the DiscoveryClient\n * boundary, but `artifacts` is an aggregator pass-through typed `unknown`, so\n * the entry's shape is not guaranteed. Returns the `url` string only when the\n * value is an object carrying a non-empty string `url`; everything else\n * (missing key, wrong type, no `url`) yields `null`.\n */\nfunction declaredArtifactUrl(value: unknown): string | null {\n\tif (!value || typeof value !== \"object\") return null;\n\t// eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- narrowed to non-null object above; url checked below\n\tconst entry = value as Record<string, unknown>;\n\tconst url = entry.url;\n\tif (typeof url !== \"string\" || url.length === 0) return null;\n\treturn url;\n}\n\n/**\n * Resolve the declared artifact URL for `(kind, index)` from a release's\n * `artifacts` map. Returns `null` when the requested artifact isn't present\n * or doesn't carry a usable URL.\n */\nfunction resolveDeclaredUrl(artifacts: unknown, kind: string, index: number): string | null {\n\tif (!artifacts || typeof artifacts !== \"object\") return null;\n\t// eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- narrowed to non-null object above; each entry shape-narrowed by declaredArtifactUrl\n\tconst map = artifacts as Record<string, unknown>;\n\n\tif (kind === \"icon\") return declaredArtifactUrl(map.icon);\n\tif (kind === \"banner\") return declaredArtifactUrl(map.banner);\n\t// kind === \"screenshot\"\n\tconst screenshots = map.screenshots;\n\tif (!Array.isArray(screenshots)) return null;\n\tif (index < 0 || index >= screenshots.length) return null;\n\treturn declaredArtifactUrl(screenshots[index]);\n}\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tconst did = url.searchParams.get(\"did\");\n\tconst slug = url.searchParams.get(\"slug\");\n\tconst kind = url.searchParams.get(\"kind\");\n\tconst versionParam = url.searchParams.get(\"version\");\n\tconst indexParam = url.searchParams.get(\"index\");\n\n\tif (!did || !slug || !kind) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Missing did, slug, or kind\", 400);\n\t}\n\tif (did.length > 256 || !DID_PATTERN.test(did)) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Invalid did\", 400);\n\t}\n\tif (slug.length > 64 || !SLUG_PATTERN.test(slug)) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Invalid slug\", 400);\n\t}\n\tif (!ALLOWED_KINDS.has(kind)) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Invalid kind\", 400);\n\t}\n\n\tlet index = 0;\n\tif (kind === \"screenshot\") {\n\t\tif (indexParam === null) {\n\t\t\treturn apiError(\"INVALID_REQUEST\", \"Missing index for screenshot\", 400);\n\t\t}\n\t\tif (!INDEX_PATTERN.test(indexParam)) {\n\t\t\treturn apiError(\"INVALID_REQUEST\", \"Invalid index\", 400);\n\t\t}\n\t\tindex = Number(indexParam);\n\t\tif (!Number.isSafeInteger(index)) {\n\t\t\treturn apiError(\"INVALID_REQUEST\", \"Invalid index\", 400);\n\t\t}\n\t}\n\n\tlet version: string | undefined;\n\tif (versionParam !== null && versionParam.length > 0) {\n\t\tif (versionParam.length > 64) {\n\t\t\treturn apiError(\"INVALID_REQUEST\", \"Invalid version\", 400);\n\t\t}\n\t\tversion = versionParam;\n\t}\n\n\tconst registryConfig = coerceRegistryConfig(emdash.config.experimental?.registry);\n\tif (!registryConfig) {\n\t\treturn apiError(\"REGISTRY_NOT_CONFIGURED\", \"Registry is not configured\", 400);\n\t}\n\ttry {\n\t\tvalidateAggregatorUrl(registryConfig.aggregatorUrl);\n\t} catch {\n\t\treturn apiError(\"REGISTRY_NOT_CONFIGURED\", \"Registry aggregator URL is invalid\", 500);\n\t}\n\n\t// Resolve the publisher-declared artifact URL from the release record.\n\tlet declaredUrl: string;\n\ttry {\n\t\tconst resolved = await resolveArtifactUrl(registryConfig, did, slug, version, kind, index);\n\t\tif (resolved === null) {\n\t\t\treturn apiError(\"ARTIFACT_NOT_FOUND\", \"Artifact not found\", 404);\n\t\t}\n\t\tdeclaredUrl = resolved;\n\t} catch {\n\t\treturn apiError(\"ARTIFACT_RESOLVE_FAILED\", \"Failed to resolve artifact\", 502);\n\t}\n\n\tconst controller = new AbortController();\n\tconst timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n\ttry {\n\t\t// `assertSafeArtifactUrl` validates scheme / credentials / loopback +\n\t\t// resolves the hostname and rejects private / link-local / metadata\n\t\t// targets (DNS-rebinding defence). It throws a plain Error on any\n\t\t// block, so a rejection here means the URL is unsafe.\n\t\tlet current: URL;\n\t\ttry {\n\t\t\tcurrent = await assertSafeArtifactUrl(declaredUrl);\n\t\t} catch {\n\t\t\treturn apiError(\"ARTIFACT_URL_REJECTED\", \"Artifact URL is not allowed\", 400);\n\t\t}\n\n\t\tlet response: Response;\n\t\tfor (let hop = 0; ; hop++) {\n\t\t\tresponse = await fetch(current.href, { redirect: \"manual\", signal: controller.signal });\n\t\t\tif (response.status < 300 || response.status >= 400) break;\n\t\t\tconst location = response.headers.get(\"location\");\n\t\t\tif (!location) break;\n\t\t\tif (hop === MAX_REDIRECTS) {\n\t\t\t\treturn apiError(\"ARTIFACT_URL_REJECTED\", \"Too many redirects\", 502);\n\t\t\t}\n\t\t\tlet next: URL;\n\t\t\ttry {\n\t\t\t\tnext = await assertSafeArtifactUrl(new URL(location, current).href);\n\t\t\t} catch {\n\t\t\t\treturn apiError(\"ARTIFACT_URL_REJECTED\", \"Redirect target is not allowed\", 400);\n\t\t\t}\n\t\t\tcurrent = next;\n\t\t}\n\n\t\tif (!response.ok) {\n\t\t\treturn apiError(\"ARTIFACT_FETCH_FAILED\", \"Failed to fetch artifact\", 502);\n\t\t}\n\n\t\t// Content-Type allowlist: only image types are proxied. A non-image\n\t\t// (HTML error page, JSON, octet-stream) is rejected so the admin\n\t\t// never renders publisher-controlled markup from the EmDash origin.\n\t\tconst rawType = response.headers.get(\"content-type\") ?? \"\";\n\t\tconst contentType = rawType.split(\";\", 1)[0]!.trim().toLowerCase();\n\t\tif (!ALLOWED_IMAGE_TYPES.has(contentType)) {\n\t\t\treturn apiError(\"ARTIFACT_NOT_IMAGE\", \"Artifact is not an allowed image type\", 415);\n\t\t}\n\n\t\tconst declaredLength = response.headers.get(\"content-length\");\n\t\tif (declaredLength) {\n\t\t\tconst declared = Number(declaredLength);\n\t\t\tif (Number.isFinite(declared) && declared > MAX_IMAGE_BYTES) {\n\t\t\t\treturn apiError(\"ARTIFACT_TOO_LARGE\", \"Artifact exceeds size limit\", 413);\n\t\t\t}\n\t\t}\n\n\t\tconst bytes = await readCapped(response, MAX_IMAGE_BYTES);\n\t\tif (bytes === null) {\n\t\t\treturn apiError(\"ARTIFACT_TOO_LARGE\", \"Artifact exceeds size limit\", 413);\n\t\t}\n\n\t\t// Only the allowlisted Content-Type is forwarded — never copy other\n\t\t// upstream headers. `private, no-store` keeps publisher images out of\n\t\t// shared caches in the authenticated admin origin.\n\t\t//\n\t\t// SVG is not in the allowlist, so active-content bytes never reach\n\t\t// here. `Content-Disposition: attachment`, the sandbox CSP, and\n\t\t// `nosniff` remain as defence-in-depth: they force a download and\n\t\t// neutralise script/plugins for any image type if a client navigates\n\t\t// directly to the proxy URL.\n\t\treturn new Response(bytes, {\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": contentType,\n\t\t\t\t\"Cache-Control\": \"private, no-store\",\n\t\t\t\t\"X-Content-Type-Options\": \"nosniff\",\n\t\t\t\t\"Content-Disposition\": \"attachment\",\n\t\t\t\t\"Content-Security-Policy\": \"default-src 'none'; sandbox\",\n\t\t\t},\n\t\t});\n\t} catch {\n\t\treturn apiError(\"ARTIFACT_FETCH_FAILED\", \"Failed to fetch artifact\", 502);\n\t} finally {\n\t\tclearTimeout(timer);\n\t}\n};\n\n/**\n * Resolve the declared artifact URL for `(did, slug, version, kind, index)`\n * from the aggregator's release record. Mirrors the install handler's release\n * lookup. Returns `null` when the package/release/artifact isn't found.\n *\n * Self-contained to this route: the install/update handlers are intentionally\n * left untouched, so a small amount of resolution-pattern duplication is\n * accepted here.\n */\nasync function resolveArtifactUrl(\n\tregistryConfig: { aggregatorUrl: string; acceptLabelers?: string },\n\tdid: string,\n\tslug: string,\n\tversion: string | undefined,\n\tkind: string,\n\tindex: number,\n): Promise<string | null> {\n\t// Lazy-load the discovery client so the `@atcute/client` dependency only\n\t// loads when the registry path is exercised.\n\tconst { DiscoveryClient } = await import(\"@emdash-cms/registry-client/discovery\");\n\n\tconst aggregatorDeadline = Date.now() + AGGREGATOR_TOTAL_BUDGET_MS;\n\tconst discovery = new DiscoveryClient({\n\t\taggregatorUrl: registryConfig.aggregatorUrl,\n\t\tacceptLabelers: registryConfig.acceptLabelers,\n\t\tfetch: timedFetch(aggregatorDeadline),\n\t});\n\n\t// eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- DID shape validated by the route before this call\n\tconst publisherDid = did as Did;\n\n\tconst releaseView = await (async () => {\n\t\tif (!version) {\n\t\t\treturn discovery.getLatestRelease({ did: publisherDid, package: slug });\n\t\t}\n\t\tlet cursor: string | undefined;\n\t\tconst seenCursors = new Set<string>();\n\t\tfor (let page = 0; page < MAX_LIST_PAGES; page++) {\n\t\t\tif (cursor !== undefined) {\n\t\t\t\tif (seenCursors.has(cursor)) break;\n\t\t\t\tseenCursors.add(cursor);\n\t\t\t}\n\t\t\tconst result = await discovery.listReleases({\n\t\t\t\tdid: publisherDid,\n\t\t\t\tpackage: slug,\n\t\t\t\tcursor,\n\t\t\t\tlimit: 50,\n\t\t\t});\n\t\t\tfor (const r of result.releases) {\n\t\t\t\tif (r.version === version) return r;\n\t\t\t}\n\t\t\tif (!result.cursor) break;\n\t\t\tcursor = result.cursor;\n\t\t}\n\t\treturn undefined;\n\t})();\n\n\tif (!releaseView?.release) return null;\n\n\treturn resolveDeclaredUrl(releaseView.release.artifacts, kind, index);\n}\n\n/**\n * Read a response body into memory, aborting once it exceeds `limit`. Returns\n * `null` when the cap is breached (the streamed body lied about / omitted\n * Content-Length). The cap is the real defence against an unbounded body.\n */\nasync function readCapped(response: Response, limit: number): Promise<Uint8Array | null> {\n\tconst body = response.body;\n\tif (!body) {\n\t\tconst buf = new Uint8Array(await response.arrayBuffer());\n\t\treturn buf.length > limit ? null : buf;\n\t}\n\tconst reader = body.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\twhile (true) {\n\t\tconst { done, value } = await reader.read();\n\t\tif (done) break;\n\t\tif (value) {\n\t\t\ttotal += value.length;\n\t\t\tif (total > limit) {\n\t\t\t\tawait reader.cancel();\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\tchunks.push(value);\n\t\t}\n\t}\n\tconst combined = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const chunk of chunks) {\n\t\tcombined.set(chunk, offset);\n\t\toffset += chunk.length;\n\t}\n\treturn combined;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,MAAa,YAAY;;;;;;;;;;AAWzB,MAAM,sBAAsB,IAAI,IAAI;CACnC;CACA;CACA;CACA;CACA;CACA,CAAC;;AAGF,MAAM,gBAAgB,IAAI,IAAI;CAAC;CAAQ;CAAU;CAAa,CAAC;;AAG/D,MAAM,cAAc;;AAEpB,MAAM,eAAe;;AAErB,MAAM,gBAAgB;;AAGtB,MAAM,kBAAkB,IAAI,OAAO;;AAGnC,MAAM,gBAAgB;;AAGtB,MAAM,mBAAmB;;AAGzB,MAAM,gCAAgC;AACtC,MAAM,6BAA6B;;AAGnC,MAAM,iBAAiB;;AAGvB,SAAS,WAAW,eAAqC;AACxD,SAAQ,OAAoC,SAAuC;EAClF,MAAM,MAAM,KAAK,KAAK;EACtB,MAAM,YAAY,KAAK,IAAI,GAAG,gBAAgB,IAAI;AAClD,MAAI,cAAc,EACjB,QAAO,QAAQ,uBAAO,IAAI,MAAM,sCAAsC,CAAC;EAExE,MAAM,UAAU,KAAK,IAAI,+BAA+B,UAAU;EAClE,MAAM,aAAa,IAAI,iBAAiB;EACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,QAAQ;EAC3D,MAAM,eAAe,MAAM;AAC3B,MAAI,aACH,KAAI,aAAa,QAAS,YAAW,MAAM,aAAa,OAAO;MAC1D,cAAa,iBAAiB,eAAe,WAAW,MAAM,aAAa,OAAO,CAAC;AAEzF,SAAO,MAAM,OAAO;GAAE,GAAG;GAAM,QAAQ,WAAW;GAAQ,CAAC,CAAC,cAAc;AACzE,gBAAa,MAAM;IAClB;;;;;;;;;;;;AAaJ,SAAS,oBAAoB,OAA+B;AAC3D,KAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;CAGhD,MAAM,MADQ,MACI;AAClB,KAAI,OAAO,QAAQ,YAAY,IAAI,WAAW,EAAG,QAAO;AACxD,QAAO;;;;;;;AAQR,SAAS,mBAAmB,WAAoB,MAAc,OAA8B;AAC3F,KAAI,CAAC,aAAa,OAAO,cAAc,SAAU,QAAO;CAExD,MAAM,MAAM;AAEZ,KAAI,SAAS,OAAQ,QAAO,oBAAoB,IAAI,KAAK;AACzD,KAAI,SAAS,SAAU,QAAO,oBAAoB,IAAI,OAAO;CAE7D,MAAM,cAAc,IAAI;AACxB,KAAI,CAAC,MAAM,QAAQ,YAAY,CAAE,QAAO;AACxC,KAAI,QAAQ,KAAK,SAAS,YAAY,OAAQ,QAAO;AACrD,QAAO,oBAAoB,YAAY,OAAO;;AAG/C,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,MAAM,IAAI,aAAa,IAAI,MAAM;CACvC,MAAM,OAAO,IAAI,aAAa,IAAI,OAAO;CACzC,MAAM,OAAO,IAAI,aAAa,IAAI,OAAO;CACzC,MAAM,eAAe,IAAI,aAAa,IAAI,UAAU;CACpD,MAAM,aAAa,IAAI,aAAa,IAAI,QAAQ;AAEhD,KAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KACrB,QAAO,SAAS,mBAAmB,8BAA8B,IAAI;AAEtE,KAAI,IAAI,SAAS,OAAO,CAAC,YAAY,KAAK,IAAI,CAC7C,QAAO,SAAS,mBAAmB,eAAe,IAAI;AAEvD,KAAI,KAAK,SAAS,MAAM,CAAC,aAAa,KAAK,KAAK,CAC/C,QAAO,SAAS,mBAAmB,gBAAgB,IAAI;AAExD,KAAI,CAAC,cAAc,IAAI,KAAK,CAC3B,QAAO,SAAS,mBAAmB,gBAAgB,IAAI;CAGxD,IAAI,QAAQ;AACZ,KAAI,SAAS,cAAc;AAC1B,MAAI,eAAe,KAClB,QAAO,SAAS,mBAAmB,gCAAgC,IAAI;AAExE,MAAI,CAAC,cAAc,KAAK,WAAW,CAClC,QAAO,SAAS,mBAAmB,iBAAiB,IAAI;AAEzD,UAAQ,OAAO,WAAW;AAC1B,MAAI,CAAC,OAAO,cAAc,MAAM,CAC/B,QAAO,SAAS,mBAAmB,iBAAiB,IAAI;;CAI1D,IAAI;AACJ,KAAI,iBAAiB,QAAQ,aAAa,SAAS,GAAG;AACrD,MAAI,aAAa,SAAS,GACzB,QAAO,SAAS,mBAAmB,mBAAmB,IAAI;AAE3D,YAAU;;CAGX,MAAM,iBAAiB,qBAAqB,OAAO,OAAO,cAAc,SAAS;AACjF,KAAI,CAAC,eACJ,QAAO,SAAS,2BAA2B,8BAA8B,IAAI;AAE9E,KAAI;AACH,wBAAsB,eAAe,cAAc;SAC5C;AACP,SAAO,SAAS,2BAA2B,sCAAsC,IAAI;;CAItF,IAAI;AACJ,KAAI;EACH,MAAM,WAAW,MAAM,mBAAmB,gBAAgB,KAAK,MAAM,SAAS,MAAM,MAAM;AAC1F,MAAI,aAAa,KAChB,QAAO,SAAS,sBAAsB,sBAAsB,IAAI;AAEjE,gBAAc;SACP;AACP,SAAO,SAAS,2BAA2B,8BAA8B,IAAI;;CAG9E,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,iBAAiB;AACpE,KAAI;EAKH,IAAI;AACJ,MAAI;AACH,aAAU,MAAM,sBAAsB,YAAY;UAC3C;AACP,UAAO,SAAS,yBAAyB,+BAA+B,IAAI;;EAG7E,IAAI;AACJ,OAAK,IAAI,MAAM,IAAK,OAAO;AAC1B,cAAW,MAAM,MAAM,QAAQ,MAAM;IAAE,UAAU;IAAU,QAAQ,WAAW;IAAQ,CAAC;AACvF,OAAI,SAAS,SAAS,OAAO,SAAS,UAAU,IAAK;GACrD,MAAM,WAAW,SAAS,QAAQ,IAAI,WAAW;AACjD,OAAI,CAAC,SAAU;AACf,OAAI,QAAQ,cACX,QAAO,SAAS,yBAAyB,sBAAsB,IAAI;GAEpE,IAAI;AACJ,OAAI;AACH,WAAO,MAAM,sBAAsB,IAAI,IAAI,UAAU,QAAQ,CAAC,KAAK;WAC5D;AACP,WAAO,SAAS,yBAAyB,kCAAkC,IAAI;;AAEhF,aAAU;;AAGX,MAAI,CAAC,SAAS,GACb,QAAO,SAAS,yBAAyB,4BAA4B,IAAI;EAO1E,MAAM,eADU,SAAS,QAAQ,IAAI,eAAe,IAAI,IAC5B,MAAM,KAAK,EAAE,CAAC,GAAI,MAAM,CAAC,aAAa;AAClE,MAAI,CAAC,oBAAoB,IAAI,YAAY,CACxC,QAAO,SAAS,sBAAsB,yCAAyC,IAAI;EAGpF,MAAM,iBAAiB,SAAS,QAAQ,IAAI,iBAAiB;AAC7D,MAAI,gBAAgB;GACnB,MAAM,WAAW,OAAO,eAAe;AACvC,OAAI,OAAO,SAAS,SAAS,IAAI,WAAW,gBAC3C,QAAO,SAAS,sBAAsB,+BAA+B,IAAI;;EAI3E,MAAM,QAAQ,MAAM,WAAW,UAAU,gBAAgB;AACzD,MAAI,UAAU,KACb,QAAO,SAAS,sBAAsB,+BAA+B,IAAI;AAY1E,SAAO,IAAI,SAAS,OAAO,EAC1B,SAAS;GACR,gBAAgB;GAChB,iBAAiB;GACjB,0BAA0B;GAC1B,uBAAuB;GACvB,2BAA2B;GAC3B,EACD,CAAC;SACK;AACP,SAAO,SAAS,yBAAyB,4BAA4B,IAAI;WAChE;AACT,eAAa,MAAM;;;;;;;;;;;;AAarB,eAAe,mBACd,gBACA,KACA,MACA,SACA,MACA,OACyB;CAGzB,MAAM,EAAE,oBAAoB,MAAM,OAAO;CAEzC,MAAM,qBAAqB,KAAK,KAAK,GAAG;CACxC,MAAM,YAAY,IAAI,gBAAgB;EACrC,eAAe,eAAe;EAC9B,gBAAgB,eAAe;EAC/B,OAAO,WAAW,mBAAmB;EACrC,CAAC;CAGF,MAAM,eAAe;CAErB,MAAM,cAAc,OAAO,YAAY;AACtC,MAAI,CAAC,QACJ,QAAO,UAAU,iBAAiB;GAAE,KAAK;GAAc,SAAS;GAAM,CAAC;EAExE,IAAI;EACJ,MAAM,8BAAc,IAAI,KAAa;AACrC,OAAK,IAAI,OAAO,GAAG,OAAO,gBAAgB,QAAQ;AACjD,OAAI,WAAW,QAAW;AACzB,QAAI,YAAY,IAAI,OAAO,CAAE;AAC7B,gBAAY,IAAI,OAAO;;GAExB,MAAM,SAAS,MAAM,UAAU,aAAa;IAC3C,KAAK;IACL,SAAS;IACT;IACA,OAAO;IACP,CAAC;AACF,QAAK,MAAM,KAAK,OAAO,SACtB,KAAI,EAAE,YAAY,QAAS,QAAO;AAEnC,OAAI,CAAC,OAAO,OAAQ;AACpB,YAAS,OAAO;;KAGd;AAEJ,KAAI,CAAC,aAAa,QAAS,QAAO;AAElC,QAAO,mBAAmB,YAAY,QAAQ,WAAW,MAAM,MAAM;;;;;;;AAQtE,eAAe,WAAW,UAAoB,OAA2C;CACxF,MAAM,OAAO,SAAS;AACtB,KAAI,CAAC,MAAM;EACV,MAAM,MAAM,IAAI,WAAW,MAAM,SAAS,aAAa,CAAC;AACxD,SAAO,IAAI,SAAS,QAAQ,OAAO;;CAEpC,MAAM,SAAS,KAAK,WAAW;CAC/B,MAAM,SAAuB,EAAE;CAC/B,IAAI,QAAQ;AACZ,QAAO,MAAM;EACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;AAC3C,MAAI,KAAM;AACV,MAAI,OAAO;AACV,YAAS,MAAM;AACf,OAAI,QAAQ,OAAO;AAClB,UAAM,OAAO,QAAQ;AACrB,WAAO;;AAER,UAAO,KAAK,MAAM;;;CAGpB,MAAM,WAAW,IAAI,WAAW,MAAM;CACtC,IAAI,SAAS;AACb,MAAK,MAAM,SAAS,QAAQ;AAC3B,WAAS,IAAI,OAAO,OAAO;AAC3B,YAAU,MAAM;;AAEjB,QAAO"}

package/dist/astro/routes/api/admin/plugins/registry/install.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/plugins/registry/install.ts"],"mappings":";;;cAsBa,SAAA;AAAA,cAoCA,IAAA,EAAM,QAAA"}
+{"version":3,"file":"install.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/plugins/registry/install.ts"],"mappings":";;;cAyBa,SAAA;AAAA,cAoCA,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/admin/plugins/registry/install.mjs

@@ -1,42 +1,57 @@
 import "../../../../../../dialect-helpers-BKCvISIQ.mjs";
-import "../../../../../../content-C0ooIs-f.mjs";
+import "../../../../../../content-8voQNTXX.mjs";
 import "../../../../../../base64-CqR-7kqF.mjs";
-import "../../../../../../types-ByV5sgsv.mjs";
-import "../../../../../../media-oqRcNiQf.mjs";
-import "../../../../../../user-D3BD5zdT.mjs";
-import "../../../../../../taxonomy-D4Uc2LsZ.mjs";
-import "../../../../../../comment-_yzlBYPx.mjs";
+import "../../../../../../types-B0bmgwMG.mjs";
+import "../../../../../../media-CKQd8AYU.mjs";
+import "../../../../../../user-hUSOaIJy.mjs";
+import "../../../../../../taxonomy-zqGQUqgu.mjs";
+import "../../../../../../comment-C76G-9tz.mjs";
 import "../../../../../../options-BL4X94qY.mjs";
-import "../../../../../../menus-Bjf5R1Qq.mjs";
-import "../../../../../../redirect-CNv4mHX2.mjs";
-import "../../../../../../byline-CTaWkMh5.mjs";
-import "../../../../../../seo-bjDoq9Eg.mjs";
-import { t as handleRegistryInstall } from "../../../../../../api-CLwG_3dh.mjs";
+import "../../../../../../menus-arUNspyU.mjs";
+import "../../../../../../redirect-CjfDGrTd.mjs";
+import "../../../../../../byline-BDylH_m4.mjs";
+import "../../../../../../seo-BGCyDlkb.mjs";
+import { n as handleRegistryInstall } from "../../../../../../api-BNKqxyFX.mjs";
 import "../../../../../../request-cache-dzCt8TZB.mjs";
-import "../../../../../../dashboard-Cqw3ay2X.mjs";
-import "../../../../../../fts-manager-Mnrtn-r2.mjs";
-import "../../../../../../registry-DqrAQDXH.mjs";
-import "../../../../../../loader-Chm5h7Gr.mjs";
-import "../../../../../../schema-Djdlfi5G.mjs";
-import "../../../../../../zod-generator-dvxgmd1M.mjs";
-import "../../../../../../seo-BoR4wCUh.mjs";
-import "../../../../../../sections-DcBIlOq1.mjs";
-import "../../../../../../settings-hcubRfkr.mjs";
-import "../../../../../../settings-CJnKiWuR.mjs";
-import "../../../../../../resolve-Cj98DuqN.mjs";
-import "../../../../../../taxonomies-WamPVA2x.mjs";
-import "../../../../../../taxonomies-CLs9HPE2.mjs";
+import "../../../../../../dashboard-BeaFSPpx.mjs";
+import "../../../../../../fts-manager-C_b-4x8u.mjs";
+import "../../../../../../registry-Cyp-dx6J.mjs";
+import "../../../../../../loader-D-vIJjfY.mjs";
+import "../../../../../../schema-CI9mYPX3.mjs";
+import "../../../../../../zod-generator-B80aap1J.mjs";
+import "../../../../../../seo-Dq707mNQ.mjs";
+import "../../../../../../sections-DBbCDIAT.mjs";
+import "../../../../../../settings-BSXRtTzk.mjs";
+import "../../../../../../settings-DfwNyQkf.mjs";
+import "../../../../../../resolve-D6sM-SgF.mjs";
+import "../../../../../../taxonomies-CcvrMLbR.mjs";
+import "../../../../../../taxonomies-4vx0nmMr.mjs";
 import "../../../../../../manifest-schema-Czqf0TLu.mjs";
 import "../../../../../../types-1NNkmTIn.mjs";
 import "../../../../../../ssrf-MZ-zrG6-.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../error-CPh_8eLq.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../../parse-3-caTKgt.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../error-ChfADBuu.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-DHbXfvxO.mjs";
 import "../../../../../../redirects-COMLwsV5.mjs";
 import "../../../../../../setup-Cf_TyOv5.mjs";
-import { n as requirePerm } from "../../../../../../authorize-Bkwe8kuL.mjs";
+import { n as VERSION } from "../../../../../../version-BTc87L3L.mjs";
+import { n as requirePerm } from "../../../../../../authorize-Bn4S4DUT.mjs";
 import { z } from "zod";
+import { hostEnvFromVersions } from "@emdash-cms/registry-client/env";
 
 //#region src/astro/routes/api/admin/plugins/registry/install.ts
+/**
+* Registry plugin install endpoint
+*
+* POST /_emdash/api/admin/plugins/registry/install
+*
+* Installs a plugin from the experimental decentralized plugin registry
+* (see RFC 0001). The browser resolves `(handle, slug) → (did, slug)`
+* via the aggregator before posting and sends the publisher DID
+* directly; the server skips the resolvePackage round-trip and looks
+* up the package by DID. Sending DID rather than handle means installs
+* work for publishers whose handle the aggregator couldn't resolve at
+* view time (handle is best-effort per the lexicon).
+*/
 const prerender = false;
 const installBodySchema = z.object({
 	did: z.string().min(1).max(2048).regex(/^did:[a-z]+:/, "Invalid DID"),
@@ -58,7 +73,10 @@ const POST = async ({ request, locals }) => {
 			slug: body.slug,
 			version: body.version,
 			acknowledgedDeclaredAccess: body.acknowledgedDeclaredAccess
-		}, { configuredPluginIds: reservedPluginIds });
+		}, {
+			configuredPluginIds: reservedPluginIds,
+			hostEnv: hostEnvFromVersions(VERSION, emdash.config.astroVersion)
+		});
 		if (!result.success) return unwrapResult(result);
 		await emdash.syncRegistryPlugins();
 		return unwrapResult(result, 201);

package/dist/astro/routes/api/admin/plugins/registry/install.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"install.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/plugins/registry/install.ts"],"sourcesContent":["/**\n * Registry plugin install endpoint\n *\n * POST /_emdash/api/admin/plugins/registry/install\n *\n * Installs a plugin from the experimental decentralized plugin registry\n * (see RFC 0001). The browser resolves `(handle, slug) → (did, slug)`\n * via the aggregator before posting and sends the publisher DID\n * directly; the server skips the resolvePackage round-trip and looks\n * up the package by DID. Sending DID rather than handle means installs\n * work for publishers whose handle the aggregator couldn't resolve at\n * view time (handle is best-effort per the lexicon).\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleRegistryInstall } from \"#api/index.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\n\nexport const prerender = false;\n\nconst installBodySchema = z.object({\n\t/**\n\t * Publisher DID. Required. Browser is expected to resolve\n\t * `(handle, slug) → did` against the aggregator before posting.\n\t */\n\tdid: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(2048)\n\t\t// Loose match -- atproto DID specs allow `did:plc:*` and\n\t\t// `did:web:*` plus future methods. Reject anything that\n\t\t// doesn't even start with `did:` rather than enumerating\n\t\t// methods here; downstream lexicon validation tightens.\n\t\t.regex(/^did:[a-z]+:/, \"Invalid DID\"),\n\t/** Package slug. */\n\tslug: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(64)\n\t\t// Mirrors the lexicon's slug grammar: ASCII letter followed by\n\t\t// letters / digits / `-` / `_`. Rejects anything that could\n\t\t// confuse the R2 prefix or the URL.\n\t\t.regex(/^[a-zA-Z][a-zA-Z0-9_-]*$/, \"Invalid slug\"),\n\t/** Optional explicit version. Defaults to the aggregator's latest. */\n\tversion: z.string().min(1).max(64).optional(),\n\t/**\n\t * Capabilities the admin acknowledged in the consent dialog, lifted\n\t * from the release record's declaredAccess block at browse time.\n\t * Compared against the bundle's manifest to detect drift between the\n\t * dialog and the install POST.\n\t */\n\tacknowledgedDeclaredAccess: z.unknown().optional(),\n});\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\ttry {\n\t\tconst { emdash, user } = locals;\n\n\t\tif (!emdash?.db) {\n\t\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t\t}\n\n\t\tconst denied = requirePerm(user, \"plugins:manage\");\n\t\tif (denied) return denied;\n\n\t\tconst body = await parseBody(request, installBodySchema);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Block registry installs whose derived `pluginId` collides with\n\t\t// any build-time-reserved id: configured (in-process) plugins, and\n\t\t// sandboxed plugins declared in `config.sandboxed`. The runtime\n\t\t// caches sandboxed plugins by id; a registry install at the same\n\t\t// id would silently shadow or coexist with the build-time entry.\n\t\tconst reservedPluginIds = new Set<string>([\n\t\t\t...emdash.configuredPlugins.map((p: { id: string }) => p.id),\n\t\t\t...(emdash.config.sandboxed ?? []).map((p: { id: string }) => p.id),\n\t\t]);\n\n\t\tconst result = await handleRegistryInstall(\n\t\t\temdash.db,\n\t\t\temdash.storage,\n\t\t\temdash.getSandboxRunner(),\n\t\t\temdash.config.experimental?.registry,\n\t\t\t{\n\t\t\t\tdid: body.did,\n\t\t\t\tslug: body.slug,\n\t\t\t\tversion: body.version,\n\t\t\t\tacknowledgedDeclaredAccess: body.acknowledgedDeclaredAccess,\n\t\t\t},\n\t\t\t{ configuredPluginIds: reservedPluginIds },\n\t\t);\n\n\t\tif (!result.success) return unwrapResult(result);\n\n\t\t// Sync runtime so the new plugin becomes active without a worker restart.\n\t\tawait emdash.syncRegistryPlugins();\n\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\tconsole.error(\"[registry-install] Unhandled error:\", error);\n\t\treturn handleError(error, \"Failed to install plugin from registry\", \"INSTALL_FAILED\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,YAAY;AAEzB,MAAM,oBAAoB,EAAE,OAAO;CAKlC,KAAK,EACH,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,KAAK,CAKT,MAAM,gBAAgB,cAAc;CAEtC,MAAM,EACJ,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,GAAG,CAIP,MAAM,4BAA4B,eAAe;CAEnD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU;CAO7C,4BAA4B,EAAE,SAAS,CAAC,UAAU;CAClD,CAAC;AAEF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;AAC5D,KAAI;EACH,MAAM,EAAE,QAAQ,SAAS;AAEzB,MAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;EAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,MAAI,OAAQ,QAAO;EAEnB,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAO/B,MAAM,oBAAoB,IAAI,IAAY,CACzC,GAAG,OAAO,kBAAkB,KAAK,MAAsB,EAAE,GAAG,EAC5D,IAAI,OAAO,OAAO,aAAa,EAAE,EAAE,KAAK,MAAsB,EAAE,GAAG,CACnE,CAAC;EAEF,MAAM,SAAS,MAAM,sBACpB,OAAO,IACP,OAAO,SACP,OAAO,kBAAkB,EACzB,OAAO,OAAO,cAAc,UAC5B;GACC,KAAK,KAAK;GACV,MAAM,KAAK;GACX,SAAS,KAAK;GACd,4BAA4B,KAAK;GACjC,EACD,EAAE,qBAAqB,mBAAmB,CAC1C;AAED,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAGhD,QAAM,OAAO,qBAAqB;AAElC,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,UAAQ,MAAM,uCAAuC,MAAM;AAC3D,SAAO,YAAY,OAAO,0CAA0C,iBAAiB"}
+{"version":3,"file":"install.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/plugins/registry/install.ts"],"sourcesContent":["/**\n * Registry plugin install endpoint\n *\n * POST /_emdash/api/admin/plugins/registry/install\n *\n * Installs a plugin from the experimental decentralized plugin registry\n * (see RFC 0001). The browser resolves `(handle, slug) → (did, slug)`\n * via the aggregator before posting and sends the publisher DID\n * directly; the server skips the resolvePackage round-trip and looks\n * up the package by DID. Sending DID rather than handle means installs\n * work for publishers whose handle the aggregator couldn't resolve at\n * view time (handle is best-effort per the lexicon).\n */\n\nimport { hostEnvFromVersions } from \"@emdash-cms/registry-client/env\";\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleRegistryInstall } from \"#api/index.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\n\nimport { VERSION } from \"../../../../../../version.js\";\n\nexport const prerender = false;\n\nconst installBodySchema = z.object({\n\t/**\n\t * Publisher DID. Required. Browser is expected to resolve\n\t * `(handle, slug) → did` against the aggregator before posting.\n\t */\n\tdid: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(2048)\n\t\t// Loose match -- atproto DID specs allow `did:plc:*` and\n\t\t// `did:web:*` plus future methods. Reject anything that\n\t\t// doesn't even start with `did:` rather than enumerating\n\t\t// methods here; downstream lexicon validation tightens.\n\t\t.regex(/^did:[a-z]+:/, \"Invalid DID\"),\n\t/** Package slug. */\n\tslug: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(64)\n\t\t// Mirrors the lexicon's slug grammar: ASCII letter followed by\n\t\t// letters / digits / `-` / `_`. Rejects anything that could\n\t\t// confuse the R2 prefix or the URL.\n\t\t.regex(/^[a-zA-Z][a-zA-Z0-9_-]*$/, \"Invalid slug\"),\n\t/** Optional explicit version. Defaults to the aggregator's latest. */\n\tversion: z.string().min(1).max(64).optional(),\n\t/**\n\t * Capabilities the admin acknowledged in the consent dialog, lifted\n\t * from the release record's declaredAccess block at browse time.\n\t * Compared against the bundle's manifest to detect drift between the\n\t * dialog and the install POST.\n\t */\n\tacknowledgedDeclaredAccess: z.unknown().optional(),\n});\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\ttry {\n\t\tconst { emdash, user } = locals;\n\n\t\tif (!emdash?.db) {\n\t\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t\t}\n\n\t\tconst denied = requirePerm(user, \"plugins:manage\");\n\t\tif (denied) return denied;\n\n\t\tconst body = await parseBody(request, installBodySchema);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Block registry installs whose derived `pluginId` collides with\n\t\t// any build-time-reserved id: configured (in-process) plugins, and\n\t\t// sandboxed plugins declared in `config.sandboxed`. The runtime\n\t\t// caches sandboxed plugins by id; a registry install at the same\n\t\t// id would silently shadow or coexist with the build-time entry.\n\t\tconst reservedPluginIds = new Set<string>([\n\t\t\t...emdash.configuredPlugins.map((p: { id: string }) => p.id),\n\t\t\t...(emdash.config.sandboxed ?? []).map((p: { id: string }) => p.id),\n\t\t]);\n\n\t\tconst result = await handleRegistryInstall(\n\t\t\temdash.db,\n\t\t\temdash.storage,\n\t\t\temdash.getSandboxRunner(),\n\t\t\temdash.config.experimental?.registry,\n\t\t\t{\n\t\t\t\tdid: body.did,\n\t\t\t\tslug: body.slug,\n\t\t\t\tversion: body.version,\n\t\t\t\tacknowledgedDeclaredAccess: body.acknowledgedDeclaredAccess,\n\t\t\t},\n\t\t\t{\n\t\t\t\tconfiguredPluginIds: reservedPluginIds,\n\t\t\t\thostEnv: hostEnvFromVersions(VERSION, emdash.config.astroVersion),\n\t\t\t},\n\t\t);\n\n\t\tif (!result.success) return unwrapResult(result);\n\n\t\t// Sync runtime so the new plugin becomes active without a worker restart.\n\t\tawait emdash.syncRegistryPlugins();\n\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\tconsole.error(\"[registry-install] Unhandled error:\", error);\n\t\treturn handleError(error, \"Failed to install plugin from registry\", \"INSTALL_FAILED\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAa,YAAY;AAEzB,MAAM,oBAAoB,EAAE,OAAO;CAKlC,KAAK,EACH,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,KAAK,CAKT,MAAM,gBAAgB,cAAc;CAEtC,MAAM,EACJ,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,GAAG,CAIP,MAAM,4BAA4B,eAAe;CAEnD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU;CAO7C,4BAA4B,EAAE,SAAS,CAAC,UAAU;CAClD,CAAC;AAEF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;AAC5D,KAAI;EACH,MAAM,EAAE,QAAQ,SAAS;AAEzB,MAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;EAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,MAAI,OAAQ,QAAO;EAEnB,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAO/B,MAAM,oBAAoB,IAAI,IAAY,CACzC,GAAG,OAAO,kBAAkB,KAAK,MAAsB,EAAE,GAAG,EAC5D,IAAI,OAAO,OAAO,aAAa,EAAE,EAAE,KAAK,MAAsB,EAAE,GAAG,CACnE,CAAC;EAEF,MAAM,SAAS,MAAM,sBACpB,OAAO,IACP,OAAO,SACP,OAAO,kBAAkB,EACzB,OAAO,OAAO,cAAc,UAC5B;GACC,KAAK,KAAK;GACV,MAAM,KAAK;GACX,SAAS,KAAK;GACd,4BAA4B,KAAK;GACjC,EACD;GACC,qBAAqB;GACrB,SAAS,oBAAoB,SAAS,OAAO,OAAO,aAAa;GACjE,CACD;AAED,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAGhD,QAAM,OAAO,qBAAqB;AAElC,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,UAAQ,MAAM,uCAAuC,MAAM;AAC3D,SAAO,YAAY,OAAO,0CAA0C,iBAAiB"}

package/dist/astro/routes/api/admin/plugins/updates.mjs

@@ -1,39 +1,39 @@
 import "../../../../../dialect-helpers-BKCvISIQ.mjs";
-import "../../../../../content-C0ooIs-f.mjs";
+import "../../../../../content-8voQNTXX.mjs";
 import "../../../../../base64-CqR-7kqF.mjs";
-import "../../../../../types-ByV5sgsv.mjs";
-import "../../../../../media-oqRcNiQf.mjs";
-import "../../../../../user-D3BD5zdT.mjs";
-import "../../../../../taxonomy-D4Uc2LsZ.mjs";
-import "../../../../../comment-_yzlBYPx.mjs";
+import "../../../../../types-B0bmgwMG.mjs";
+import "../../../../../media-CKQd8AYU.mjs";
+import "../../../../../user-hUSOaIJy.mjs";
+import "../../../../../taxonomy-zqGQUqgu.mjs";
+import "../../../../../comment-C76G-9tz.mjs";
 import "../../../../../options-BL4X94qY.mjs";
-import "../../../../../menus-Bjf5R1Qq.mjs";
-import "../../../../../redirect-CNv4mHX2.mjs";
-import "../../../../../byline-CTaWkMh5.mjs";
-import "../../../../../seo-bjDoq9Eg.mjs";
-import { d as handleMarketplaceUpdateCheck, i as handleRegistryUpdateCheck } from "../../../../../api-CLwG_3dh.mjs";
+import "../../../../../menus-arUNspyU.mjs";
+import "../../../../../redirect-CjfDGrTd.mjs";
+import "../../../../../byline-BDylH_m4.mjs";
+import "../../../../../seo-BGCyDlkb.mjs";
+import { a as handleRegistryUpdateCheck, m as handleMarketplaceUpdateCheck } from "../../../../../api-BNKqxyFX.mjs";
 import "../../../../../request-cache-dzCt8TZB.mjs";
-import "../../../../../dashboard-Cqw3ay2X.mjs";
-import "../../../../../fts-manager-Mnrtn-r2.mjs";
-import "../../../../../registry-DqrAQDXH.mjs";
-import "../../../../../loader-Chm5h7Gr.mjs";
-import "../../../../../schema-Djdlfi5G.mjs";
-import "../../../../../zod-generator-dvxgmd1M.mjs";
-import "../../../../../seo-BoR4wCUh.mjs";
-import "../../../../../sections-DcBIlOq1.mjs";
-import "../../../../../settings-hcubRfkr.mjs";
-import "../../../../../settings-CJnKiWuR.mjs";
-import "../../../../../resolve-Cj98DuqN.mjs";
-import "../../../../../taxonomies-WamPVA2x.mjs";
-import "../../../../../taxonomies-CLs9HPE2.mjs";
+import "../../../../../dashboard-BeaFSPpx.mjs";
+import "../../../../../fts-manager-C_b-4x8u.mjs";
+import "../../../../../registry-Cyp-dx6J.mjs";
+import "../../../../../loader-D-vIJjfY.mjs";
+import "../../../../../schema-CI9mYPX3.mjs";
+import "../../../../../zod-generator-B80aap1J.mjs";
+import "../../../../../seo-Dq707mNQ.mjs";
+import "../../../../../sections-DBbCDIAT.mjs";
+import "../../../../../settings-BSXRtTzk.mjs";
+import "../../../../../settings-DfwNyQkf.mjs";
+import "../../../../../resolve-D6sM-SgF.mjs";
+import "../../../../../taxonomies-CcvrMLbR.mjs";
+import "../../../../../taxonomies-4vx0nmMr.mjs";
 import "../../../../../manifest-schema-Czqf0TLu.mjs";
 import "../../../../../types-1NNkmTIn.mjs";
 import "../../../../../ssrf-MZ-zrG6-.mjs";
-import { t as apiError } from "../../../../../error-CPh_8eLq.mjs";
-import "../../../../../parse-3-caTKgt.mjs";
+import { t as apiError } from "../../../../../error-ChfADBuu.mjs";
+import "../../../../../parse-DHbXfvxO.mjs";
 import "../../../../../redirects-COMLwsV5.mjs";
 import "../../../../../setup-Cf_TyOv5.mjs";
-import { n as requirePerm } from "../../../../../authorize-Bkwe8kuL.mjs";
+import { n as requirePerm } from "../../../../../authorize-Bn4S4DUT.mjs";
 
 //#region src/astro/routes/api/admin/plugins/updates.ts
 const prerender = false;

package/dist/astro/routes/api/admin/themes/marketplace/_id_/index.mjs

@@ -1,39 +1,39 @@
 import "../../../../../../../dialect-helpers-BKCvISIQ.mjs";
-import "../../../../../../../content-C0ooIs-f.mjs";
+import "../../../../../../../content-8voQNTXX.mjs";
 import "../../../../../../../base64-CqR-7kqF.mjs";
-import "../../../../../../../types-ByV5sgsv.mjs";
-import "../../../../../../../media-oqRcNiQf.mjs";
-import "../../../../../../../user-D3BD5zdT.mjs";
-import "../../../../../../../taxonomy-D4Uc2LsZ.mjs";
-import "../../../../../../../comment-_yzlBYPx.mjs";
+import "../../../../../../../types-B0bmgwMG.mjs";
+import "../../../../../../../media-CKQd8AYU.mjs";
+import "../../../../../../../user-hUSOaIJy.mjs";
+import "../../../../../../../taxonomy-zqGQUqgu.mjs";
+import "../../../../../../../comment-C76G-9tz.mjs";
 import "../../../../../../../options-BL4X94qY.mjs";
-import "../../../../../../../menus-Bjf5R1Qq.mjs";
-import "../../../../../../../redirect-CNv4mHX2.mjs";
-import "../../../../../../../byline-CTaWkMh5.mjs";
-import "../../../../../../../seo-bjDoq9Eg.mjs";
-import { f as handleThemeGetDetail } from "../../../../../../../api-CLwG_3dh.mjs";
+import "../../../../../../../menus-arUNspyU.mjs";
+import "../../../../../../../redirect-CjfDGrTd.mjs";
+import "../../../../../../../byline-BDylH_m4.mjs";
+import "../../../../../../../seo-BGCyDlkb.mjs";
+import { h as handleThemeGetDetail } from "../../../../../../../api-BNKqxyFX.mjs";
 import "../../../../../../../request-cache-dzCt8TZB.mjs";
-import "../../../../../../../dashboard-Cqw3ay2X.mjs";
-import "../../../../../../../fts-manager-Mnrtn-r2.mjs";
-import "../../../../../../../registry-DqrAQDXH.mjs";
-import "../../../../../../../loader-Chm5h7Gr.mjs";
-import "../../../../../../../schema-Djdlfi5G.mjs";
-import "../../../../../../../zod-generator-dvxgmd1M.mjs";
-import "../../../../../../../seo-BoR4wCUh.mjs";
-import "../../../../../../../sections-DcBIlOq1.mjs";
-import "../../../../../../../settings-hcubRfkr.mjs";
-import "../../../../../../../settings-CJnKiWuR.mjs";
-import "../../../../../../../resolve-Cj98DuqN.mjs";
-import "../../../../../../../taxonomies-WamPVA2x.mjs";
-import "../../../../../../../taxonomies-CLs9HPE2.mjs";
+import "../../../../../../../dashboard-BeaFSPpx.mjs";
+import "../../../../../../../fts-manager-C_b-4x8u.mjs";
+import "../../../../../../../registry-Cyp-dx6J.mjs";
+import "../../../../../../../loader-D-vIJjfY.mjs";
+import "../../../../../../../schema-CI9mYPX3.mjs";
+import "../../../../../../../zod-generator-B80aap1J.mjs";
+import "../../../../../../../seo-Dq707mNQ.mjs";
+import "../../../../../../../sections-DBbCDIAT.mjs";
+import "../../../../../../../settings-BSXRtTzk.mjs";
+import "../../../../../../../settings-DfwNyQkf.mjs";
+import "../../../../../../../resolve-D6sM-SgF.mjs";
+import "../../../../../../../taxonomies-CcvrMLbR.mjs";
+import "../../../../../../../taxonomies-4vx0nmMr.mjs";
 import "../../../../../../../manifest-schema-Czqf0TLu.mjs";
 import "../../../../../../../types-1NNkmTIn.mjs";
 import "../../../../../../../ssrf-MZ-zrG6-.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../../../error-CPh_8eLq.mjs";
-import "../../../../../../../parse-3-caTKgt.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../../error-ChfADBuu.mjs";
+import "../../../../../../../parse-DHbXfvxO.mjs";
 import "../../../../../../../redirects-COMLwsV5.mjs";
 import "../../../../../../../setup-Cf_TyOv5.mjs";
-import { n as requirePerm } from "../../../../../../../authorize-Bkwe8kuL.mjs";
+import { n as requirePerm } from "../../../../../../../authorize-Bn4S4DUT.mjs";
 
 //#region src/astro/routes/api/admin/themes/marketplace/[id]/index.ts
 const prerender = false;