emdash 0.37.0 → 0.39.0

package/dist/plugin-types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-types.d.mts","names":[],"sources":["../src/plugin-types.ts"],"mappings":";;;;;;;;;;;;;UAmGiB,YAAA;EAChB,gBAAA,EAAkB,gBAAA;EAClB,iBAAA,EAAmB,gBAAA;EACnB,mBAAA,EAAqB,gBAAA;EACrB,kBAAA,EAAoB,gBAAA;EACpB,oBAAA,EAAsB,wBAAA;EACtB,mBAAA,EAAqB,uBAAA;EACrB,sBAAA,EAAwB,0BAAA;EACxB,qBAAA,EAAuB,yBAAA;EACvB,sBAAA,EAAwB,0BAAA;EACxB,wBAAA,EAA0B,4BAAA;EAC1B,sBAAA,EAAwB,0BAAA;EACxB,uBAAA,EAAyB,2BAAA;EACzB,yBAAA,EAA2B,6BAAA;EAC3B,oBAAA,EAAsB,wBAAA;EACtB,mBAAA,EAAqB,uBAAA;EACrB,IAAA,EAAM,WAAA;EACN,kBAAA,EAAoB,sBAAA;EACpB,eAAA,EAAiB,mBAAA;EACjB,iBAAA,EAAmB,qBAAA;EACnB,sBAAA,EAAwB,0BAAA;EACxB,kBAAA,EAAoB,sBAAA;EACpB,qBAAA,EAAuB,yBAAA;EACvB,uBAAA,EAAyB,2BAAA;EACzB,eAAA,EAAiB,mBAAA;EACjB,gBAAA,EAAkB,mBAAA;AAAA;;;;;;;UASF,UAAA,iBAA2B,YAAA;EAC3C,OAAA,EAAS,YAAA,CAAa,CAAA;EACtB,QAAA;EACA,OAAA;EACA,YAAA;EACA,WAAA;EACA,SAAA;AAAA;;;;;;KAQW,SAAA,iBAA0B,YAAA,IAAgB,YAAA,CAAa,CAAA,IAAK,UAAA,CAAW,CAAA;;;;;;;;;;;;AAAnF;;;;UAiBiB,gBAAA;EAChB,GAAA;EACA,MAAA;EACA,OAAA,EAAS,MAAA;AAAA;;;;;;;;;UAWO,qBAAA;EAChB,KAAA;EACA,OAAA,EAAS,gBAAA;EACT,WAAA;EAde;;;;;;EAqBf,IAAA,GAAO,QAAA;AAAA;;;;;;;;;;KAYI,YAAA,IACX,QAAA,EAAU,qBAAA,EACV,GAAA,EAAK,aAAA,KACD,OAAA;;AAHL;;;KASY,UAAA,GACT,YAAA;EAEA,OAAA,EAAS,YAAA;EACT,MAAA;EAVS;;;;;EAgBT,YAAA;EACA,KAAA;EACA,UAAA,GAAa,UAAA;AAAA;AAAA,UAGC,gBAAA;EAChB,WAAA;EACA,KAAA;EACA,KAAA,EAAO,OAAA;EACP,MAAA,GAAS,OAAA;EACT,WAAA;AAAA;;;;;;;;;;UAYgB,eAAA;EAChB,KAAA,iBACa,YAAA,IAAgB,CAAA,gCACzB,iCAAA,GAAoC,gCAAA,GACpC,SAAA,CAAU,CAAA;EAEd,MAAA,GAAS,MAAA,SAAe,UAAA;EACxB,GAAA;IAAQ,KAAA,EAAO,MAAA,SAAe,gBAAA;EAAA;AAAA;AAAA,KAGnB,iCAAA,IACX,KAAA,EAAO,gBAAA,EACP,GAAA,EAAK,aAAA,KACD,OAAA,CAAQ,MAAA,oBAA0B,wBAAA;AAAA,UAEtB,gCAAA,SAAyC,IAAA,CACzD,UAAA;EAGA,OAAA,EAAS,iCAAA;AAAA"}
+{"version":3,"file":"plugin-types.d.mts","names":[],"sources":["../src/plugin-types.ts"],"mappings":";;;;;;;;;;;;;;;UAmHiB,YAAA;EAChB,gBAAA,EAAkB,gBAAA;EAClB,iBAAA,EAAmB,gBAAA;EACnB,mBAAA,EAAqB,gBAAA;EACrB,kBAAA,EAAoB,gBAAA;EACpB,oBAAA,EAAsB,wBAAA;EACtB,mBAAA,EAAqB,uBAAA;EACrB,sBAAA,EAAwB,0BAAA;EACxB,qBAAA,EAAuB,yBAAA;EACvB,uBAAA,EAAyB,2BAAA;EACzB,wBAAA,EAA0B,4BAAA;EAC1B,yBAAA,EAA2B,6BAAA;EAC3B,sBAAA,EAAwB,0BAAA;EACxB,wBAAA,EAA0B,4BAAA;EAC1B,sBAAA,EAAwB,0BAAA;EACxB,uBAAA,EAAyB,2BAAA;EACzB,yBAAA,EAA2B,6BAAA;EAC3B,oBAAA,EAAsB,wBAAA;EACtB,mBAAA,EAAqB,uBAAA;EACrB,IAAA,EAAM,WAAA;EACN,kBAAA,EAAoB,sBAAA;EACpB,eAAA,EAAiB,mBAAA;EACjB,iBAAA,EAAmB,qBAAA;EACnB,sBAAA,EAAwB,0BAAA;EACxB,kBAAA,EAAoB,sBAAA;EACpB,qBAAA,EAAuB,yBAAA;EACvB,uBAAA,EAAyB,2BAAA;EACzB,eAAA,EAAiB,mBAAA;EACjB,gBAAA,EAAkB,mBAAA;AAAA;;;;;;;UASF,UAAA,iBAA2B,YAAA;EAC3C,OAAA,EAAS,YAAA,CAAa,CAAA;EACtB,QAAA;EACA,OAAA;EACA,YAAA;EACA,WAAA;EACA,SAAA;AAAA;;;;;AAND;KAcY,SAAA,iBAA0B,YAAA,IAAgB,YAAA,CAAa,CAAA,IAAK,UAAA,CAAW,CAAA;;;;;;;;;;;;;;;;UAiBlE,gBAAA;EAChB,GAAA;EACA,MAAA;EACA,OAAA,EAAS,MAAA;AAAA;AAAA,KAUE,gBAAA,eAA+B,mBAAA,IAAuB,KAAA,kBAC/D,kBAAA,GACA,KAAA,2BAEC,KAAA,mBACC,UAAA,GACA,KAAA,uBACC,gBAAA;AAAA,KAGM,kBAAA;EACP,IAAA;EAAc,KAAA;AAAA;EACd,IAAA;EAAe,KAAA,EAAO,UAAA;AAAA;AAAA,UAEV,kBAAA;EAChB,MAAA;EACA,OAAA,GAAU,WAAA;EACV,IAAA,GAAO,kBAAA;AAAA;AAAA,UAGS,cAAA;EAAA,SACP,sBAAA;EAAA,SACA,MAAA;EAAA,SACA,OAAA,EAAS,KAAA;EAAA,SACT,IAAA,EAAM,kBAAA;AAAA;AAAA,iBAGA,cAAA,CAAe,IAAA,GAAM,kBAAA,GAA0B,cAAA;;;;;;AA3B/D;;;UA8CiB,qBAAA;EAChB,KAAA;EACA,OAAA,EAAS,gBAAA;EACT,WAAA;EA7CG;EA+CH,EAAA,GAAK,iBAAA;EA7CD;;;;;;EAoDJ,IAAA,GAAO,QAAA;AAAA;;;;;;;;AAhDR;;KA4DY,YAAA;EACX,cAAA,CACC,QAAA,EAAU,IAAA,CAAK,qBAAA;IAAoC,KAAA,EAAO,MAAA;EAAA,GAC1D,GAAA,EAAK,aAAA,GACH,OAAA;AAAA;AAAA,UAGM,eAAA;EACT,MAAA;EACA,YAAA;EACA,KAAA;EACA,UAAA,GAAa,UAAA;EACb,OAAA,GAAU,iBAAA;EACV,QAAA,GAAW,uBAAA;AAAA;AAAA,KAGA,iBAAA,eAAgC,mBAAA,IAAuB,eAAA;EAClE,OAAA,EAAS,kBAAA;IAAuB,IAAA,EAAM,KAAA;EAAA;EACtC,OAAA,EAAS,YAAA,CAAa,gBAAA,CAAiB,KAAA;AAAA;AAAA,iBAGxB,WAAA,eAA0B,mBAAA,CAAA,CACzC,MAAA,EAAQ,iBAAA,CAAkB,KAAA,IACxB,iBAAA,CAAkB,KAAA;AAzErB;;;;AAAA,KAiFY,UAAA,GACT,YAAA,IACC,eAAA;EACD,OAAA,EAAS,YAAA;EACT,OAAA,GAAU,kBAAA;AAAA;AAAA,UAGI,gBAAA;EAChB,WAAA;EACA,KAAA;EACA,KAAA,EAAO,OAAA;EACP,MAAA,GAAS,OAAA;EACT,WAAA;AAAA;;;;;;;AAnED;;;UA+EiB,eAAA;EAChB,KAAA,iBACa,YAAA,IAAgB,CAAA,gCACzB,iCAAA,GAAoC,gCAAA,GACpC,SAAA,CAAU,CAAA;EAEd,MAAA,GAAS,MAAA,SAAe,UAAA;EACxB,GAAA;IAAQ,KAAA,EAAO,MAAA,SAAe,gBAAA;EAAA;AAAA;AAAA,KAGnB,iCAAA,IACX,KAAA,EAAO,gBAAA,EACP,GAAA,EAAK,aAAA,KACD,OAAA,CAAQ,MAAA,oBAA0B,wBAAA;AAAA,UAEtB,gCAAA,SAAyC,IAAA,CACzD,UAAA;EAGA,OAAA,EAAS,iCAAA;AAAA"}

package/dist/plugin-types.mjs

@@ -1 +1,18 @@
-export {  };
+//#region src/plugin-types.ts
+function pluginResponse(init = {}) {
+	const headers = [];
+	new Headers(init.headers).forEach((value, name) => headers.push([name, value]));
+	return {
+		__emdashPluginResponse: true,
+		status: init.status ?? 200,
+		headers,
+		body: init.body ?? null
+	};
+}
+function pluginRoute(config) {
+	return config;
+}
+
+//#endregion
+export { pluginResponse, pluginRoute };
+//# sourceMappingURL=plugin-types.mjs.map

package/dist/plugin-types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-types.mjs","names":[],"sources":["../src/plugin-types.ts"],"sourcesContent":["/**\n * `emdash/plugin` — types and lightweight helpers for authoring sandboxed plugins.\n *\n * Type-only imports erase normally. The value exports are small identity and\n * response-builder helpers that the plugin CLI bundles into the sandbox\n * artifact without pulling in the EmDash runtime.\n *\n * Recommended authoring pattern:\n *\n * ```ts\n * import type { SandboxedPlugin } from \"emdash/plugin\";\n *\n * export default {\n *   hooks: {\n *     \"content:beforeSave\": async (event, ctx) => {\n *       // event: ContentHookEvent, ctx: PluginContext — both inferred.\n *       return event.content;\n *     },\n *   },\n *   routes: {\n *     health: async (routeCtx, ctx) => ({ ok: true }),\n *   },\n * } satisfies SandboxedPlugin;\n * ```\n *\n * The `satisfies SandboxedPlugin` annotation drives full inference on\n * every hook handler. Authors should not need to annotate handler\n * params — TypeScript reads the event type from the hook name. The\n * runtime probe at build time reads `default.hooks` and `default.routes`\n * directly; the shape declared here mirrors what the probe consumes.\n *\n * Return types matter: `content:beforeSave` may return a mutated\n * `content` to override the saved fields; `content:beforeDelete` and\n * `comment:beforeCreate` may return `false` to veto; `page:metadata`\n * returns the metadata contribution. The mapped type captures these\n * per-hook return contracts so misuse fails at compile time.\n */\n\nimport type { Permission } from \"@emdash-cms/auth\";\nimport type { PluginUiContext } from \"@emdash-cms/blocks/server\";\nimport type {\n\tPluginFormData,\n\tPluginRouteBodyMode,\n\tPluginRouteMethod,\n\tPluginRouteQuery,\n\tPluginRouteRequest,\n\tPluginRouteResponseMode,\n} from \"@emdash-cms/plugin-types\";\nimport type { ZodType } from \"zod\";\n\nimport type { SandboxHookErrorEnvelope } from \"./plugins/sandbox/hook-result.js\";\nimport type {\n\tActorInfo,\n\tCommentAfterCreateEvent,\n\tCommentAfterCreateHandler,\n\tCommentAfterModerateEvent,\n\tCommentAfterModerateHandler,\n\tCommentBeforeCreateEvent,\n\tCommentBeforeCreateHandler,\n\tCommentModerateEvent,\n\tCommentModerateHandler,\n\tContentAfterDeleteHandler,\n\tContentAfterPublishHandler,\n\tContentAfterRestoreHandler,\n\tContentAfterSaveHandler,\n\tContentAfterScheduleHandler,\n\tContentAfterUnpublishHandler,\n\tContentAfterUnscheduleHandler,\n\tContentBeforePublishHandler,\n\tContentBeforeScheduleHandler,\n\tContentBeforeUnpublishHandler,\n\tContentBeforeDeleteHandler,\n\tContentBeforeSaveHandler,\n\tContentDeleteEvent,\n\tContentHookEvent,\n\tContentPublishStateChangeEvent,\n\tContentRestoreStateChangeEvent,\n\tContentScheduleStateChangeEvent,\n\tContentStateChangeEvent,\n\tCronEvent,\n\tCronHandler,\n\tEmailAfterSendEvent,\n\tEmailAfterSendHandler,\n\tEmailBeforeSendEvent,\n\tEmailBeforeSendHandler,\n\tEmailDeliverEvent,\n\tEmailDeliverHandler,\n\tLifecycleEvent,\n\tLifecycleHandler,\n\tMediaAfterUploadEvent,\n\tMediaBytes,\n\tMediaItem,\n\tMediaMetadataPatch,\n\tMediaAfterUploadHandler,\n\tMediaBeforeUploadHandler,\n\tMediaUploadEvent,\n\tPageFragmentEvent,\n\tPageFragmentHandler,\n\tPageMetadataEvent,\n\tPageMetadataHandler,\n\tPluginContext,\n\tUninstallEvent,\n\tUninstallHandler,\n\tUserInfo,\n} from \"./plugins/types.js\";\n\nexport type { PluginUiContext } from \"@emdash-cms/blocks/server\";\n\n/**\n * Map from hook name to its handler signature. Adding or changing a\n * hook signature in the runtime means updating this map; the rest of\n * the type story flows from it. Authors writing\n * `\"content:beforeSave\": async (event, ctx) => { ... }` get `event`\n * typed as `ContentHookEvent` and `ctx` as `PluginContext` for free.\n */\nexport interface HookHandlers {\n\t\"plugin:install\": LifecycleHandler;\n\t\"plugin:activate\": LifecycleHandler;\n\t\"plugin:deactivate\": LifecycleHandler;\n\t\"plugin:uninstall\": UninstallHandler;\n\t\"content:beforeSave\": ContentBeforeSaveHandler;\n\t\"content:afterSave\": ContentAfterSaveHandler;\n\t\"content:beforeDelete\": ContentBeforeDeleteHandler;\n\t\"content:afterDelete\": ContentAfterDeleteHandler;\n\t\"content:beforePublish\": ContentBeforePublishHandler;\n\t\"content:beforeSchedule\": ContentBeforeScheduleHandler;\n\t\"content:beforeUnpublish\": ContentBeforeUnpublishHandler;\n\t\"content:afterPublish\": ContentAfterPublishHandler;\n\t\"content:afterUnpublish\": ContentAfterUnpublishHandler;\n\t\"content:afterRestore\": ContentAfterRestoreHandler;\n\t\"content:afterSchedule\": ContentAfterScheduleHandler;\n\t\"content:afterUnschedule\": ContentAfterUnscheduleHandler;\n\t\"media:beforeUpload\": MediaBeforeUploadHandler;\n\t\"media:afterUpload\": MediaAfterUploadHandler;\n\tcron: CronHandler;\n\t\"email:beforeSend\": EmailBeforeSendHandler;\n\t\"email:deliver\": EmailDeliverHandler;\n\t\"email:afterSend\": EmailAfterSendHandler;\n\t\"comment:beforeCreate\": CommentBeforeCreateHandler;\n\t\"comment:moderate\": CommentModerateHandler;\n\t\"comment:afterCreate\": CommentAfterCreateHandler;\n\t\"comment:afterModerate\": CommentAfterModerateHandler;\n\t\"page:metadata\": PageMetadataHandler;\n\t\"page:fragments\": PageFragmentHandler;\n}\n\n/**\n * Hook-handler config form. The bare-function form is also accepted\n * (see `HookEntry`) — this is the long form that lets authors override\n * priority, timeout, exclusivity. `errorPolicy` and `dependencies` are\n * read by the host but rarely set by authors.\n */\nexport interface HookConfig<K extends keyof HookHandlers> {\n\thandler: HookHandlers[K];\n\tpriority?: number;\n\ttimeout?: number;\n\tdependencies?: string[];\n\terrorPolicy?: \"continue\" | \"abort\";\n\texclusive?: boolean;\n}\n\n/**\n * Either a bare handler or the config form. The build probe accepts\n * both shapes and the runtime normalises to the config form before\n * dispatch.\n */\nexport type HookEntry<K extends keyof HookHandlers> = HookHandlers[K] | HookConfig<K>;\n\n/**\n * Request fields a route handler can rely on across both trusted and\n * sandboxed execution. Trusted handlers receive a real `Request`\n * (which is structurally compatible — has `url`, `method`, `headers`);\n * sandboxed handlers receive a serialised `{ url, method, headers }`\n * record because Worker Loader can't pass `Request` objects across\n * the boundary. The shared shape is what's actually portable.\n *\n * `headers` is intentionally `Record<string, string>` rather than\n * `Headers` so the sandboxed serialised form (which is a plain\n * record) typechecks. Trusted handlers receiving a real `Headers`\n * object can still call `.get(...)`, but reading via this type's\n * indexing requires the lookup to be lowercased and exact. Authors\n * iterating headers in a portable way should use `Object.entries`.\n */\nexport interface SandboxedRequest {\n\turl: string;\n\tmethod: string;\n\theaders: Record<string, string>;\n}\n\nexport type {\n\tPluginFormData,\n\tPluginFormDataFileEntry,\n\tPluginFormDataTextEntry,\n\tPluginRouteQuery,\n} from \"@emdash-cms/plugin-types\";\n\nexport type PluginRouteInput<TMode extends PluginRouteBodyMode> = TMode extends \"none\"\n\t? PluginRouteQuery\n\t: TMode extends \"text\"\n\t\t? string\n\t\t: TMode extends \"bytes\"\n\t\t\t? Uint8Array\n\t\t\t: TMode extends \"form-data\"\n\t\t\t\t? PluginFormData\n\t\t\t\t: unknown;\n\nexport type PluginResponseBody =\n\t| { kind: \"text\"; value: string }\n\t| { kind: \"bytes\"; value: Uint8Array };\n\nexport interface PluginResponseInit {\n\tstatus?: number;\n\theaders?: HeadersInit;\n\tbody?: PluginResponseBody | null;\n}\n\nexport interface PluginResponse {\n\treadonly __emdashPluginResponse: true;\n\treadonly status: number;\n\treadonly headers: Array<[string, string]>;\n\treadonly body: PluginResponseBody | null;\n}\n\nexport function pluginResponse(init: PluginResponseInit = {}): PluginResponse {\n\tconst headers: Array<[string, string]> = [];\n\tnew Headers(init.headers).forEach((value, name) => headers.push([name, value]));\n\treturn {\n\t\t__emdashPluginResponse: true,\n\t\tstatus: init.status ?? 200,\n\t\theaders,\n\t\tbody: init.body ?? null,\n\t};\n}\n\n/**\n * Context passed to a route handler. Routes get an extra `routeCtx`\n * argument with the call-site input + the originating request, in\n * addition to the standard `PluginContext`.\n *\n * `input` is `unknown` because plugins validate it themselves — no\n * central schema for route payloads.\n */\nexport interface SandboxedRouteContext {\n\tinput: unknown;\n\trequest: SandboxedRequest;\n\trequestMeta?: unknown;\n\t/** Host-attested context for a validated Block Kit request. */\n\tui?: PluginUiContext;\n\t/**\n\t * Authenticated caller, if the route is private. Resolved and\n\t * authorized by the host before dispatch — trust it over any user id\n\t * in the request body. `undefined` for public routes and for machine\n\t * tokens with no bound user.\n\t */\n\tuser?: UserInfo;\n}\n\n/**\n * Route handler. The two-arg shape (`routeCtx`, `pluginCtx`) matches\n * how the standard-format runtime invokes routes — distinct from\n * native plugins, where routes take a single context with the input\n * merged in.\n *\n * Return type is `unknown` because routes serialise their return value\n * to JSON for the caller; authors define their own response shape.\n */\nexport type RouteHandler<TInput = unknown> = {\n\tbivarianceHack(\n\t\trouteCtx: Omit<SandboxedRouteContext, \"input\"> & { input: TInput },\n\t\tctx: PluginContext,\n\t): Promise<unknown>;\n}[\"bivarianceHack\"];\n\ninterface RouteConfigBase {\n\tpublic?: boolean;\n\tcacheControl?: string;\n\tinput?: unknown;\n\tpermission?: Permission;\n\tmethods?: PluginRouteMethod[];\n\tresponse?: PluginRouteResponseMode;\n}\n\nexport type PluginRouteConfig<TMode extends PluginRouteBodyMode> = RouteConfigBase & {\n\trequest: PluginRouteRequest & { body: TMode };\n\thandler: RouteHandler<PluginRouteInput<TMode>>;\n};\n\nexport function pluginRoute<TMode extends PluginRouteBodyMode>(\n\tconfig: PluginRouteConfig<TMode>,\n): PluginRouteConfig<TMode> {\n\treturn config;\n}\n\n/**\n * Route entry — either a bare handler or the config form with\n * `public`, `input` schema, and so on. The build probe accepts both.\n */\nexport type RouteEntry =\n\t| RouteHandler\n\t| (RouteConfigBase & {\n\t\t\thandler: RouteHandler;\n\t\t\trequest?: PluginRouteRequest;\n\t  });\n\nexport interface SandboxedMcpTool {\n\tdescription: string;\n\troute: string;\n\tinput: ZodType;\n\toutput?: ZodType;\n\tdestructive?: boolean;\n}\n\n/**\n * The shape of a sandboxed plugin's default export.\n *\n * Both `hooks` and `routes` are optional — a plugin that only declares\n * one is valid. Hook keys are constrained to the runtime's hook\n * vocabulary so a typo (`\"content:beforSave\"`) is a compile error.\n * Route keys are open because route names are author-chosen URL path\n * segments.\n */\nexport interface SandboxedPlugin {\n\thooks?: {\n\t\t[K in keyof HookHandlers]?: K extends \"content:beforeSave\"\n\t\t\t? SandboxedContentBeforeSaveHandler | SandboxedContentBeforeSaveConfig\n\t\t\t: HookEntry<K>;\n\t};\n\troutes?: Record<string, RouteEntry>;\n\tmcp?: { tools: Record<string, SandboxedMcpTool> };\n}\n\nexport type SandboxedContentBeforeSaveHandler = (\n\tevent: ContentHookEvent,\n\tctx: PluginContext,\n) => Promise<Record<string, unknown> | SandboxHookErrorEnvelope | void>;\n\nexport interface SandboxedContentBeforeSaveConfig extends Omit<\n\tHookConfig<\"content:beforeSave\">,\n\t\"handler\"\n> {\n\thandler: SandboxedContentBeforeSaveHandler;\n}\n\nexport type { SandboxHookErrorEnvelope };\nexport type { NumericDelta, UpdateIfArgs, UpdateIfResult } from \"./plugins/types.js\";\n\n/**\n * Re-export of event types so plugin authors can reference them\n * explicitly when needed (helper functions, type predicates). Most\n * authors won't need these — the mapped type infers them at handler\n * call sites. But the default-export's inferred type also needs them\n * publicly nameable so `satisfies SandboxedPlugin` can produce a\n * portable `.d.mts`.\n */\nexport type {\n\tActorInfo,\n\tCommentAfterCreateEvent,\n\tCommentAfterModerateEvent,\n\tCommentBeforeCreateEvent,\n\tCommentModerateEvent,\n\tContentDeleteEvent,\n\tContentHookEvent,\n\tContentPublishStateChangeEvent,\n\tContentRestoreStateChangeEvent,\n\tContentScheduleStateChangeEvent,\n\tContentStateChangeEvent,\n\tCronEvent,\n\tEmailAfterSendEvent,\n\tEmailBeforeSendEvent,\n\tEmailDeliverEvent,\n\tLifecycleEvent,\n\tMediaAfterUploadEvent,\n\tMediaBytes,\n\tMediaItem,\n\tMediaMetadataPatch,\n\tMediaUploadEvent,\n\tPageFragmentEvent,\n\tPageMetadataEvent,\n\tPluginContext,\n\tUninstallEvent,\n};\n\nexport type {\n\tPaginatedResult,\n\tVersionedValue,\n\tConditionalWriteResult,\n\tConditionalDeleteResult,\n\tSettingsAccess,\n\tRedirectAccess,\n\tRedirectAccessWithWrite,\n\tRedirectCreateInput,\n\tRedirectInfo,\n\tRedirectListOptions,\n\tRedirectStatus,\n\tRedirectUpdateInput,\n\tVersionedRedirect,\n} from \"./plugins/types.js\";\nexport type {\n\tContentActionOrigin,\n\tContentPolicyDecision,\n\tContentPolicyEvent,\n\tContentSchedulePolicyEvent,\n} from \"./plugins/types.js\";\n"],"mappings":";AA+NA,SAAgB,eAAe,OAA2B,EAAE,EAAkB;CAC7E,MAAM,UAAmC,EAAE;AAC3C,KAAI,QAAQ,KAAK,QAAQ,CAAC,SAAS,OAAO,SAAS,QAAQ,KAAK,CAAC,MAAM,MAAM,CAAC,CAAC;AAC/E,QAAO;EACN,wBAAwB;EACxB,QAAQ,KAAK,UAAU;EACvB;EACA,MAAM,KAAK,QAAQ;EACnB;;AAwDF,SAAgB,YACf,QAC2B;AAC3B,QAAO"}

package/dist/plugin-utils.d.mts

@@ -1,13 +1,15 @@
-import "./options-CYb4y7hM.mjs";
-import "./types-FV23hEoW.mjs";
-import "./types-B6GrPic4.mjs";
-import "./relations-DnRK4YIT.mjs";
-import "./index-BJNMCWmu.mjs";
-import "./runner-YKfIMnaF.mjs";
-import "./index-Du8K7bWa.mjs";
-import "./types-DczELMop.mjs";
-import "./hreflang-B6hbAuuO.mjs";
-import "./validate-DUP27OYD.mjs";
+import "./parse-tj9XLNO_.mjs";
+import "./types-CbwqGOXm.mjs";
+import "./types-DEHidMEk.mjs";
+import "./options-DAknChnw.mjs";
+import "./entry-lock-DX7QkqEg.mjs";
+import "./config-DS7e4EZ9.mjs";
+import "./runner-3gfxRsJG.mjs";
+import "./storage-query-CPctdMKX.mjs";
+import "./index-CDwKDkTq.mjs";
+import "./types-CCR3ivXE.mjs";
+import "./hreflang-BgS2FqhH.mjs";
+import "./validate-CyQ7I3xF.mjs";
 import { EmDashHandlers } from "./astro/types.mjs";
 
 //#region src/plugin-utils.d.ts

package/dist/plugin-utils.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-utils.d.mts","names":[],"sources":["../src/plugin-utils.ts"],"mappings":";;;;;;;;;;;;;KAYY,2BAAA,GAA8B,cAAA;AAAA,UAEzB,yBAAA;EAChB,MAAA;IACC,0BAAA,GAA6B,2BAAA;EAAA;AAAA;;;AAF/B;;;;iBAYgB,QAAA,CAAS,KAAA,WAAgB,GAAA,GAAM,OAAA,EAAS,IAAA,GAAO,WAAA,GAAc,OAAA,CAAQ,QAAA;;;;;AAArF;;iBAYgB,8BAAA,CACf,MAAA,EAAQ,yBAAA,sBACN,2BAAA;;;;;;;;;;;;;;;;;iBAqBmB,gBAAA,GAAA,CACrB,QAAA,EAAU,QAAA,EACV,eAAA,YACE,OAAA,CAAQ,CAAA;;;;;;;;;AAHX;;;;;;;;iBA2BsB,eAAA,CAAgB,QAAA,EAAU,QAAA,EAAU,QAAA,WAAmB,OAAA;;;;;;iBAc7D,QAAA,CAAS,KAAA,YAAiB,KAAA,IAAS,MAAA"}
+{"version":3,"file":"plugin-utils.d.mts","names":[],"sources":["../src/plugin-utils.ts"],"mappings":";;;;;;;;;;;;;;;KAYY,2BAAA,GAA8B,cAAA;AAAA,UAEzB,yBAAA;EAChB,MAAA;IACC,0BAAA,GAA6B,2BAAA;EAAA;AAAA;;;;;AAF/B;;iBAYgB,QAAA,CAAS,KAAA,WAAgB,GAAA,GAAM,OAAA,EAAS,IAAA,GAAO,WAAA,GAAc,OAAA,CAAQ,QAAA;;;;;;;iBAYrE,8BAAA,CACf,MAAA,EAAQ,yBAAA,sBACN,2BAAA;;;;;;;;;;;;;;;;;iBAqBmB,gBAAA,GAAA,CACrB,QAAA,EAAU,QAAA,EACV,eAAA,YACE,OAAA,CAAQ,CAAA;;AA1BX;;;;;;;;;AAuBA;;;;;;iBA2BsB,eAAA,CAAgB,QAAA,EAAU,QAAA,EAAU,QAAA,WAAmB,OAAA;;;;;;iBAc7D,QAAA,CAAS,KAAA,YAAiB,KAAA,IAAS,MAAA"}

package/dist/plugins/adapt-sandbox-entry.d.mts

@@ -1,14 +1,16 @@
-import "../options-CYb4y7hM.mjs";
-import "../types-FV23hEoW.mjs";
-import { Dt as ResolvedPlugin } from "../types-B6GrPic4.mjs";
-import "../relations-DnRK4YIT.mjs";
-import { Ar as PluginDescriptor } from "../index-BJNMCWmu.mjs";
-import "../runner-YKfIMnaF.mjs";
-import "../index-Du8K7bWa.mjs";
+import "../parse-tj9XLNO_.mjs";
+import "../types-CbwqGOXm.mjs";
+import { pn as ResolvedPlugin } from "../types-DEHidMEk.mjs";
+import "../options-DAknChnw.mjs";
+import "../entry-lock-DX7QkqEg.mjs";
+import { xr as PluginDescriptor } from "../config-DS7e4EZ9.mjs";
+import "../runner-3gfxRsJG.mjs";
+import "../storage-query-CPctdMKX.mjs";
+import "../index-CDwKDkTq.mjs";
 import { SandboxedPlugin } from "../plugin-types.mjs";
-import "../types-DczELMop.mjs";
-import "../hreflang-B6hbAuuO.mjs";
-import "../validate-DUP27OYD.mjs";
+import "../types-CCR3ivXE.mjs";
+import "../hreflang-BgS2FqhH.mjs";
+import "../validate-CyQ7I3xF.mjs";
 
 //#region src/plugins/adapt-sandbox-entry.d.ts
 /**

package/dist/plugins/adapt-sandbox-entry.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"adapt-sandbox-entry.d.mts","names":[],"sources":["../../src/plugins/adapt-sandbox-entry.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiJgB,iBAAA,CACf,UAAA,EAAY,eAAA,EACZ,UAAA,EAAY,gBAAA,GACV,cAAA"}
+{"version":3,"file":"adapt-sandbox-entry.d.mts","names":[],"sources":["../../src/plugins/adapt-sandbox-entry.ts"],"mappings":";;;;;;;;;;;;;;;;AAwJA;;;;;;;;;;;;;iBAAgB,iBAAA,CACf,UAAA,EAAY,eAAA,EACZ,UAAA,EAAY,gBAAA,GACV,cAAA"}

package/dist/plugins/adapt-sandbox-entry.mjs

@@ -1,5 +1,6 @@
-import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-BNWwR8Vd.mjs";
-import { i as normalizeCapabilities } from "../types-DfuTR6dL.mjs";
+import { n as PLUGIN_CAPABILITIES, t as HOOK_NAMES } from "../manifest-schema-Bkh8SeHd.mjs";
+import { s as normalizePluginCapabilities } from "../types-k--LneIF.mjs";
+import { n as sanitizeHeadersForSandbox } from "../request-meta-C8yl_sIs.mjs";
 
 //#region src/plugins/adapt-sandbox-entry.ts
 /**
@@ -60,6 +61,9 @@ function normalizeRouteEntry(entry) {
 		public: entry.public,
 		permission: entry.permission,
 		cacheControl: entry.cacheControl,
+		methods: entry.methods,
+		request: entry.request,
+		response: entry.response,
 		input: entry.input
 	};
 }
@@ -94,18 +98,19 @@ function adaptSandboxEntry(definition, descriptor) {
 	const usesPublicRouteContext = "id" in definition && typeof definition.id === "string";
 	const resolvedRoutes = {};
 	if (definition.routes) for (const [routeName, rawEntry] of Object.entries(definition.routes)) {
-		const { handler, public: publicFlag, cacheControl, input: inputSchema, permission } = normalizeRouteEntry(rawEntry);
+		const { handler, public: publicFlag, cacheControl, methods, request, response, input: inputSchema, permission } = normalizeRouteEntry(rawEntry);
 		resolvedRoutes[routeName] = {
 			input: inputSchema,
 			public: publicFlag,
 			permission,
 			cacheControl,
+			methods,
+			request,
+			response,
 			handler: async (ctx) => {
 				if (usesPublicRouteContext) return handler(ctx);
-				const headers = {};
-				ctx.request.headers.forEach((value, name) => {
-					headers[name] = value;
-				});
+				const declaredHeaders = request ? request.headers ?? [] : void 0;
+				const headers = sanitizeHeadersForSandbox(ctx.request.headers, declaredHeaders);
 				const requestShape = {
 					url: ctx.request.url,
 					method: ctx.request.method,
@@ -115,20 +120,18 @@ function adaptSandboxEntry(definition, descriptor) {
 					input: ctx.input,
 					request: requestShape,
 					requestMeta: ctx.requestMeta,
-					user: ctx.user
+					user: ctx.user,
+					ui: ctx.ui
 				};
-				const { input: _, request: __, requestMeta: ___, user: ____, ...pluginCtx } = ctx;
+				const { input: _, request: __, requestMeta: ___, user: ____, ui: _____, ...pluginCtx } = ctx;
 				return handler(routeCtx, pluginCtx);
 			}
 		};
 	}
 	const rawCapabilities = descriptor.capabilities ?? [];
 	for (const cap of rawCapabilities) if (!VALID_CAPABILITIES_SET.has(cap)) throw new Error(`Invalid capability "${cap}" in plugin "${pluginId}". Valid capabilities: ${[...VALID_CAPABILITIES_SET].join(", ")}`);
-	const capabilities = normalizeCapabilities(rawCapabilities);
+	const capabilities = normalizePluginCapabilities(rawCapabilities);
 	const allowedHosts = descriptor.allowedHosts ?? [];
-	if (capabilities.includes("content:write") && !capabilities.includes("content:read")) capabilities.push("content:read");
-	if (capabilities.includes("media:write") && !capabilities.includes("media:read")) capabilities.push("media:read");
-	if (capabilities.includes("network:request:unrestricted") && !capabilities.includes("network:request")) capabilities.push("network:request");
 	const rawStorage = descriptor.storage ?? {};
 	const storage = {};
 	for (const [name, config] of Object.entries(rawStorage)) storage[name] = {
@@ -138,6 +141,8 @@ function adaptSandboxEntry(definition, descriptor) {
 	const admin = {};
 	if (descriptor.adminPages) admin.pages = descriptor.adminPages;
 	if (descriptor.adminWidgets) admin.widgets = descriptor.adminWidgets;
+	if (descriptor.editorPanels) admin.editorPanels = descriptor.editorPanels;
+	if (descriptor.editorActions) admin.editorActions = descriptor.editorActions;
 	if (descriptor.settingsSchema) admin.settingsSchema = descriptor.settingsSchema;
 	if (descriptor.portableTextBlocks) admin.portableTextBlocks = descriptor.portableTextBlocks;
 	if (descriptor.fieldWidgets) admin.fieldWidgets = descriptor.fieldWidgets;

package/dist/plugins/adapt-sandbox-entry.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"adapt-sandbox-entry.mjs","names":[],"sources":["../../src/plugins/adapt-sandbox-entry.ts"],"sourcesContent":["/**\n * In-Process Adapter for Standard-Format Plugins\n *\n * Converts a standard plugin definition ({ hooks, routes }) into a\n * ResolvedPlugin compatible with HookPipeline. This allows standard-format\n * plugins to run in-process when placed in the `plugins: []` config array.\n *\n * The adapter wraps each hook and route handler so that the PluginContextFactory\n * provides the same capability-gated context as the native path.\n *\n */\n\nimport type { PluginDescriptor } from \"../astro/integration/runtime.js\";\nimport type { RouteEntry, RouteHandler, SandboxedPlugin } from \"../plugin-types.js\";\nimport { PLUGIN_CAPABILITIES, HOOK_NAMES } from \"./manifest-schema.js\";\nimport { normalizeCapabilities } from \"./types.js\";\nimport type {\n\tResolvedPlugin,\n\tResolvedPluginHooks,\n\tResolvedHook,\n\tPluginRoute,\n\tPluginCapability,\n\tPluginStorageConfig,\n\tPluginAdminConfig,\n} from \"./types.js\";\n\n/**\n * Loose per-hook entry shape used inside the adapter's iteration loop.\n *\n * `SandboxedPlugin.hooks` is a mapped type keyed by hook name, so each\n * entry's type depends on the key. When the adapter iterates with\n * `Object.entries`, the key is `string` (TypeScript can't see the\n * narrowing), so we need a *union* type that covers every hook entry\n * shape — bare handler or config form. This is that union, kept local\n * because it has no use outside the adapter.\n */\n// eslint-disable-next-line typescript-eslint/no-explicit-any -- must accept handlers with specific event types across all hook names\ntype AnyHookHandler = (...args: any[]) => Promise<any>;\ntype AnyHookEntry =\n\t| AnyHookHandler\n\t| {\n\t\t\thandler: AnyHookHandler;\n\t\t\tpriority?: number;\n\t\t\ttimeout?: number;\n\t\t\tdependencies?: string[];\n\t\t\terrorPolicy?: \"continue\" | \"abort\";\n\t\t\texclusive?: boolean;\n\t  };\n\n/**\n * Default hook configuration values\n */\nconst DEFAULT_PRIORITY = 100;\nconst DEFAULT_TIMEOUT = 5000;\nconst DEFAULT_ERROR_POLICY = \"abort\" as const;\n\n/**\n * Check if a hook entry is the config form (has a `handler` property).\n */\nfunction isHookConfig(entry: AnyHookEntry): entry is Exclude<AnyHookEntry, AnyHookHandler> {\n\treturn typeof entry === \"object\" && entry !== null && \"handler\" in entry;\n}\n\n/**\n * Resolve a single hook entry to a ResolvedHook.\n *\n * Sandboxed-format hooks use the standard two-arg convention:\n *   handler(event, ctx)\n *\n * The HookPipeline dispatch methods also call handlers with (event, ctx),\n * so the handler is compatible as-is — we just normalise the\n * surrounding config (priority, timeout, etc.) to its defaults.\n */\nfunction resolveSandboxedHook(entry: AnyHookEntry, pluginId: string): ResolvedHook<AnyHookHandler> {\n\tif (isHookConfig(entry)) {\n\t\treturn {\n\t\t\tpriority: entry.priority ?? DEFAULT_PRIORITY,\n\t\t\ttimeout: entry.timeout ?? DEFAULT_TIMEOUT,\n\t\t\tdependencies: entry.dependencies ?? [],\n\t\t\terrorPolicy: entry.errorPolicy ?? DEFAULT_ERROR_POLICY,\n\t\t\texclusive: entry.exclusive ?? false,\n\t\t\thandler: entry.handler,\n\t\t\tpluginId,\n\t\t};\n\t}\n\n\t// Bare function handler\n\treturn {\n\t\tpriority: DEFAULT_PRIORITY,\n\t\ttimeout: DEFAULT_TIMEOUT,\n\t\tdependencies: [],\n\t\terrorPolicy: DEFAULT_ERROR_POLICY,\n\t\texclusive: false,\n\t\thandler: entry,\n\t\tpluginId,\n\t};\n}\n\n/**\n * Normalise a `RouteEntry` (bare handler or `{ handler, public?, input? }`\n * config) to the config form. The `input` schema is intentionally typed\n * `unknown` in `RouteEntry` — sandboxed plugins describe it loosely\n * because the strict `z.ZodType<TInput>` constraint of the runtime's\n * `PluginRoute` only narrows once the route is wired into the router.\n * The wider type flows through to the runtime which validates at\n * invocation time.\n */\nfunction normalizeRouteEntry(entry: RouteEntry): {\n\thandler: RouteHandler;\n\tpublic?: boolean;\n\tcacheControl?: string;\n\tinput?: PluginRoute[\"input\"];\n\tpermission?: PluginRoute[\"permission\"];\n} {\n\tif (typeof entry === \"function\") {\n\t\treturn { handler: entry };\n\t}\n\treturn {\n\t\thandler: entry.handler,\n\t\tpublic: entry.public,\n\t\tpermission: entry.permission,\n\t\tcacheControl: entry.cacheControl,\n\t\t// eslint-disable-next-line typescript-eslint/no-unsafe-type-assertion -- RouteEntry.input is intentionally `unknown` (sandboxed plugins) and validated by the runtime at invocation time\n\t\tinput: entry.input as PluginRoute[\"input\"],\n\t};\n}\n\nconst VALID_CAPABILITIES_SET = new Set<string>(PLUGIN_CAPABILITIES);\n\nconst VALID_HOOK_NAMES_SET = new Set<string>(HOOK_NAMES);\n\n/**\n * Adapt a sandboxed plugin's default export into a ResolvedPlugin.\n *\n * This is the in-process side of sandboxed-format plugins: it takes\n * the `{ hooks, routes }` default export of a sandboxed plugin and\n * produces a `ResolvedPlugin` that enters the HookPipeline alongside\n * native plugins. The descriptor supplies identity (id, version) and\n * the trust contract (capabilities, allowedHosts, storage); the\n * definition supplies behaviour.\n *\n * @param definition - The plugin's default export (matching `SandboxedPlugin` from `emdash/plugin`).\n * @param descriptor - The plugin descriptor with id, version, capabilities, etc.\n * @returns A ResolvedPlugin compatible with HookPipeline.\n */\nexport function adaptSandboxEntry(\n\tdefinition: SandboxedPlugin,\n\tdescriptor: PluginDescriptor,\n): ResolvedPlugin {\n\tconst pluginId = descriptor.id;\n\tconst version = descriptor.version;\n\n\t// A null / array / non-object `definition` would throw a generic\n\t// `TypeError: Cannot read properties of null` further down the\n\t// loop without the plugin id; surface a useful error first.\n\tif (typeof definition !== \"object\" || definition === null || Array.isArray(definition)) {\n\t\tthrow new Error(\n\t\t\t`Plugin \"${pluginId}\" default export must be an object with ` +\n\t\t\t\t`\\`hooks\\` and/or \\`routes\\` (got ${\n\t\t\t\t\tArray.isArray(definition) ? \"array\" : typeof definition\n\t\t\t\t}). Did you forget \\`export default {...} satisfies SandboxedPlugin\\`?`,\n\t\t);\n\t}\n\n\t// Resolve hooks. `SandboxedPlugin.hooks` is keyed by hook name with\n\t// per-key entry types; iterating with `Object.entries` collapses\n\t// keys to `string`, so we treat each entry as the union `AnyHookEntry`\n\t// for the duration of the loop. The widening from the strict mapped\n\t// type to a plain record is sound because each entry still matches\n\t// one of the bare-handler / config-object shapes captured by\n\t// `AnyHookEntry`.\n\tconst resolvedHooks: ResolvedPluginHooks = {};\n\tif (definition.hooks) {\n\t\t// eslint-disable-next-line typescript-eslint/no-unsafe-type-assertion -- widening the strict mapped type to a string-keyed record for iteration; entries still match AnyHookEntry\n\t\tconst hookMap = definition.hooks as Record<string, AnyHookEntry>;\n\t\tfor (const [hookName, entry] of Object.entries(hookMap)) {\n\t\t\tif (!VALID_HOOK_NAMES_SET.has(hookName)) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Plugin \"${pluginId}\" declares unknown hook \"${hookName}\". ` +\n\t\t\t\t\t\t`Valid hooks: ${[...VALID_HOOK_NAMES_SET].join(\", \")}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\t// The resolved hook has the correct handler type for the hook name.\n\t\t\t// We store it as the generic type and let HookPipeline's typed dispatch\n\t\t\t// methods handle the type narrowing at call time.\n\t\t\t// eslint-disable-next-line typescript-eslint/no-unsafe-type-assertion -- bridging untyped map to typed interface\n\t\t\t(resolvedHooks as Record<string, unknown>)[hookName] = resolveSandboxedHook(entry, pluginId);\n\t\t}\n\t}\n\n\t// Resolve routes: sandboxed format uses (routeCtx, pluginCtx) two-arg\n\t// pattern. Standard format (`definePlugin(...)` as the default export)\n\t// uses the public (ctx: RouteContext) single-arg pattern where\n\t// RouteContext extends PluginContext with { input, request, requestMeta }.\n\t//\n\t// The two conventions disagree on the FIRST argument (`request` is a\n\t// flattened plain object for sandboxed, a real WHATWG `Request` for\n\t// standard), so the wrapper must know which contract the handler was\n\t// written against. `definePlugin` requires `id`, and sandbox-format\n\t// default exports never carry one (identity comes from the manifest's\n\t// slug + publisher) — the same \"no id\" signal definePlugin itself\n\t// documents. Calling a single-arg standard handler with the two-arg\n\t// convention silently hands it the bare route context (JS drops the\n\t// extra argument), so `ctx.storage` / `ctx.email` / etc. are all\n\t// undefined at runtime (#2079).\n\t//\n\t// Route entries can be bare functions or `{ handler, public?, input? }`\n\t// config objects; normalise to the config shape inside the loop.\n\tconst usesPublicRouteContext = \"id\" in definition && typeof definition.id === \"string\";\n\tconst resolvedRoutes: Record<string, PluginRoute> = {};\n\tif (definition.routes) {\n\t\tfor (const [routeName, rawEntry] of Object.entries(definition.routes)) {\n\t\t\tconst normalized = normalizeRouteEntry(rawEntry);\n\t\t\tconst {\n\t\t\t\thandler,\n\t\t\t\tpublic: publicFlag,\n\t\t\t\tcacheControl,\n\t\t\t\tinput: inputSchema,\n\t\t\t\tpermission,\n\t\t\t} = normalized;\n\t\t\tresolvedRoutes[routeName] = {\n\t\t\t\tinput: inputSchema,\n\t\t\t\tpublic: publicFlag,\n\t\t\t\tpermission,\n\t\t\t\tcacheControl,\n\t\t\t\thandler: async (ctx) => {\n\t\t\t\t\tif (usesPublicRouteContext) {\n\t\t\t\t\t\t// The incoming ctx already IS the public RouteContext\n\t\t\t\t\t\t// (full PluginContext + input / real Request /\n\t\t\t\t\t\t// requestMeta) — pass it through unchanged.\n\t\t\t\t\t\t// eslint-disable-next-line typescript-eslint/no-unsafe-type-assertion -- standard-format handlers are authored against the public single-arg PluginRoute contract; the sandbox RouteHandler type on `normalized` is the wider authoring union\n\t\t\t\t\t\treturn (handler as unknown as PluginRoute[\"handler\"])(ctx);\n\t\t\t\t\t}\n\t\t\t\t\t// `ctx.request` is a real WHATWG `Request` (this is the\n\t\t\t\t\t// in-process adapter; the worker-sandbox adapter handles\n\t\t\t\t\t// the serialised case). Flatten `Headers` to the plain\n\t\t\t\t\t// `Record<string, string>` shape that author-facing\n\t\t\t\t\t// `SandboxedRequest` promises so handler bodies are\n\t\t\t\t\t// identical across both adapters.\n\t\t\t\t\tconst headers: Record<string, string> = {};\n\t\t\t\t\tctx.request.headers.forEach((value, name) => {\n\t\t\t\t\t\theaders[name] = value;\n\t\t\t\t\t});\n\t\t\t\t\tconst requestShape = {\n\t\t\t\t\t\turl: ctx.request.url,\n\t\t\t\t\t\tmethod: ctx.request.method,\n\t\t\t\t\t\theaders,\n\t\t\t\t\t};\n\t\t\t\t\tconst routeCtx = {\n\t\t\t\t\t\tinput: ctx.input,\n\t\t\t\t\t\trequest: requestShape,\n\t\t\t\t\t\trequestMeta: ctx.requestMeta,\n\t\t\t\t\t\tuser: ctx.user,\n\t\t\t\t\t};\n\t\t\t\t\tconst { input: _, request: __, requestMeta: ___, user: ____, ...pluginCtx } = ctx;\n\t\t\t\t\treturn handler(routeCtx, pluginCtx);\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\t}\n\n\t// Build capabilities from descriptor.\n\t// Validate against the known set (same as defineNativePlugin). Both\n\t// current and deprecated names are accepted; deprecated names are\n\t// silently normalized to current names below so the runtime only ever\n\t// sees the canonical form.\n\tconst rawCapabilities = descriptor.capabilities ?? [];\n\tfor (const cap of rawCapabilities) {\n\t\tif (!VALID_CAPABILITIES_SET.has(cap)) {\n\t\t\tthrow new Error(\n\t\t\t\t`Invalid capability \"${cap}\" in plugin \"${pluginId}\". ` +\n\t\t\t\t\t`Valid capabilities: ${[...VALID_CAPABILITIES_SET].join(\", \")}`,\n\t\t\t);\n\t\t}\n\t}\n\n\t// Silent normalization: rewrite deprecated names to current names.\n\t// Safe assertion — `normalizeCapabilities` only emits validated input\n\t// plus current names from the rename map, all of which are in the union.\n\t// eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- validated above; normalizeCapabilities only returns capabilities from the union\n\tconst capabilities = normalizeCapabilities(rawCapabilities) as PluginCapability[];\n\tconst allowedHosts = descriptor.allowedHosts ?? [];\n\n\t// Capability implications: broader capabilities imply narrower ones\n\t// (mirrors the normalization in define-plugin.ts for native format).\n\t// Operates on canonical names only.\n\tif (capabilities.includes(\"content:write\") && !capabilities.includes(\"content:read\")) {\n\t\tcapabilities.push(\"content:read\");\n\t}\n\tif (capabilities.includes(\"media:write\") && !capabilities.includes(\"media:read\")) {\n\t\tcapabilities.push(\"media:read\");\n\t}\n\tif (\n\t\tcapabilities.includes(\"network:request:unrestricted\") &&\n\t\t!capabilities.includes(\"network:request\")\n\t) {\n\t\tcapabilities.push(\"network:request\");\n\t}\n\n\t// Build storage config from descriptor.\n\t// StorageCollectionDeclaration uses optional indexes, but PluginStorageConfig\n\t// requires them. Ensure every collection has an indexes array.\n\tconst rawStorage = descriptor.storage ?? {};\n\tconst storage: PluginStorageConfig = {};\n\tfor (const [name, config] of Object.entries(rawStorage)) {\n\t\tstorage[name] = {\n\t\t\tindexes: config.indexes ?? [],\n\t\t\tuniqueIndexes: config.uniqueIndexes,\n\t\t};\n\t}\n\n\t// Build admin config from descriptor.\n\t// Portable Text blocks and field widgets are declarative (Block Kit), so they\n\t// are forwarded for standard/sandboxed plugins just like pages and widgets —\n\t// the admin editor consumes them from the manifest. Only the site-side render\n\t// component (`componentsEntry`) stays native-only.\n\tconst admin: PluginAdminConfig = {};\n\tif (descriptor.adminPages) {\n\t\tadmin.pages = descriptor.adminPages;\n\t}\n\tif (descriptor.adminWidgets) {\n\t\tadmin.widgets = descriptor.adminWidgets;\n\t}\n\tif (descriptor.settingsSchema) {\n\t\tadmin.settingsSchema = descriptor.settingsSchema;\n\t}\n\tif (descriptor.portableTextBlocks) {\n\t\tadmin.portableTextBlocks = descriptor.portableTextBlocks;\n\t}\n\tif (descriptor.fieldWidgets) {\n\t\tadmin.fieldWidgets = descriptor.fieldWidgets;\n\t}\n\n\treturn {\n\t\tid: pluginId,\n\t\tversion,\n\t\tcapabilities,\n\t\tallowedHosts,\n\t\tstorage,\n\t\thooks: resolvedHooks,\n\t\troutes: resolvedRoutes,\n\t\tmcp: {\n\t\t\ttools: Object.fromEntries(\n\t\t\t\tObject.entries(definition.mcp?.tools ?? {}).map(([name, tool]) => [\n\t\t\t\t\tname,\n\t\t\t\t\t{\n\t\t\t\t\t\tdescription: tool.description,\n\t\t\t\t\t\troute: tool.route,\n\t\t\t\t\t\tinput: tool.input,\n\t\t\t\t\t\toutput: tool.output,\n\t\t\t\t\t\tdestructive: tool.destructive,\n\t\t\t\t\t},\n\t\t\t\t]),\n\t\t\t),\n\t\t},\n\t\tadmin,\n\t};\n}\n"],"mappings":";;;;;;;AAoDA,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;;;;AAK7B,SAAS,aAAa,OAAqE;AAC1F,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,aAAa;;;;;;;;;;;;AAapE,SAAS,qBAAqB,OAAqB,UAAgD;AAClG,KAAI,aAAa,MAAM,CACtB,QAAO;EACN,UAAU,MAAM,YAAY;EAC5B,SAAS,MAAM,WAAW;EAC1B,cAAc,MAAM,gBAAgB,EAAE;EACtC,aAAa,MAAM,eAAe;EAClC,WAAW,MAAM,aAAa;EAC9B,SAAS,MAAM;EACf;EACA;AAIF,QAAO;EACN,UAAU;EACV,SAAS;EACT,cAAc,EAAE;EAChB,aAAa;EACb,WAAW;EACX,SAAS;EACT;EACA;;;;;;;;;;;AAYF,SAAS,oBAAoB,OAM3B;AACD,KAAI,OAAO,UAAU,WACpB,QAAO,EAAE,SAAS,OAAO;AAE1B,QAAO;EACN,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,YAAY,MAAM;EAClB,cAAc,MAAM;EAEpB,OAAO,MAAM;EACb;;AAGF,MAAM,yBAAyB,IAAI,IAAY,oBAAoB;AAEnE,MAAM,uBAAuB,IAAI,IAAY,WAAW;;;;;;;;;;;;;;;AAgBxD,SAAgB,kBACf,YACA,YACiB;CACjB,MAAM,WAAW,WAAW;CAC5B,MAAM,UAAU,WAAW;AAK3B,KAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,WAAW,CACrF,OAAM,IAAI,MACT,WAAW,SAAS,2EAElB,MAAM,QAAQ,WAAW,GAAG,UAAU,OAAO,WAC7C,uEACF;CAUF,MAAM,gBAAqC,EAAE;AAC7C,KAAI,WAAW,OAAO;EAErB,MAAM,UAAU,WAAW;AAC3B,OAAK,MAAM,CAAC,UAAU,UAAU,OAAO,QAAQ,QAAQ,EAAE;AACxD,OAAI,CAAC,qBAAqB,IAAI,SAAS,CACtC,OAAM,IAAI,MACT,WAAW,SAAS,2BAA2B,SAAS,kBACvC,CAAC,GAAG,qBAAqB,CAAC,KAAK,KAAK,GACrD;AAMF,GAAC,cAA0C,YAAY,qBAAqB,OAAO,SAAS;;;CAsB9F,MAAM,yBAAyB,QAAQ,cAAc,OAAO,WAAW,OAAO;CAC9E,MAAM,iBAA8C,EAAE;AACtD,KAAI,WAAW,OACd,MAAK,MAAM,CAAC,WAAW,aAAa,OAAO,QAAQ,WAAW,OAAO,EAAE;EAEtE,MAAM,EACL,SACA,QAAQ,YACR,cACA,OAAO,aACP,eANkB,oBAAoB,SAAS;AAQhD,iBAAe,aAAa;GAC3B,OAAO;GACP,QAAQ;GACR;GACA;GACA,SAAS,OAAO,QAAQ;AACvB,QAAI,uBAKH,QAAQ,QAA8C,IAAI;IAQ3D,MAAM,UAAkC,EAAE;AAC1C,QAAI,QAAQ,QAAQ,SAAS,OAAO,SAAS;AAC5C,aAAQ,QAAQ;MACf;IACF,MAAM,eAAe;KACpB,KAAK,IAAI,QAAQ;KACjB,QAAQ,IAAI,QAAQ;KACpB;KACA;IACD,MAAM,WAAW;KAChB,OAAO,IAAI;KACX,SAAS;KACT,aAAa,IAAI;KACjB,MAAM,IAAI;KACV;IACD,MAAM,EAAE,OAAO,GAAG,SAAS,IAAI,aAAa,KAAK,MAAM,MAAM,GAAG,cAAc;AAC9E,WAAO,QAAQ,UAAU,UAAU;;GAEpC;;CASH,MAAM,kBAAkB,WAAW,gBAAgB,EAAE;AACrD,MAAK,MAAM,OAAO,gBACjB,KAAI,CAAC,uBAAuB,IAAI,IAAI,CACnC,OAAM,IAAI,MACT,uBAAuB,IAAI,eAAe,SAAS,yBAC3B,CAAC,GAAG,uBAAuB,CAAC,KAAK,KAAK,GAC9D;CAQH,MAAM,eAAe,sBAAsB,gBAAgB;CAC3D,MAAM,eAAe,WAAW,gBAAgB,EAAE;AAKlD,KAAI,aAAa,SAAS,gBAAgB,IAAI,CAAC,aAAa,SAAS,eAAe,CACnF,cAAa,KAAK,eAAe;AAElC,KAAI,aAAa,SAAS,cAAc,IAAI,CAAC,aAAa,SAAS,aAAa,CAC/E,cAAa,KAAK,aAAa;AAEhC,KACC,aAAa,SAAS,+BAA+B,IACrD,CAAC,aAAa,SAAS,kBAAkB,CAEzC,cAAa,KAAK,kBAAkB;CAMrC,MAAM,aAAa,WAAW,WAAW,EAAE;CAC3C,MAAM,UAA+B,EAAE;AACvC,MAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,WAAW,CACtD,SAAQ,QAAQ;EACf,SAAS,OAAO,WAAW,EAAE;EAC7B,eAAe,OAAO;EACtB;CAQF,MAAM,QAA2B,EAAE;AACnC,KAAI,WAAW,WACd,OAAM,QAAQ,WAAW;AAE1B,KAAI,WAAW,aACd,OAAM,UAAU,WAAW;AAE5B,KAAI,WAAW,eACd,OAAM,iBAAiB,WAAW;AAEnC,KAAI,WAAW,mBACd,OAAM,qBAAqB,WAAW;AAEvC,KAAI,WAAW,aACd,OAAM,eAAe,WAAW;AAGjC,QAAO;EACN,IAAI;EACJ;EACA;EACA;EACA;EACA,OAAO;EACP,QAAQ;EACR,KAAK,EACJ,OAAO,OAAO,YACb,OAAO,QAAQ,WAAW,KAAK,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,UAAU,CACjE,MACA;GACC,aAAa,KAAK;GAClB,OAAO,KAAK;GACZ,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,aAAa,KAAK;GAClB,CACD,CAAC,CACF,EACD;EACD;EACA"}
+{"version":3,"file":"adapt-sandbox-entry.mjs","names":[],"sources":["../../src/plugins/adapt-sandbox-entry.ts"],"sourcesContent":["/**\n * In-Process Adapter for Standard-Format Plugins\n *\n * Converts a standard plugin definition ({ hooks, routes }) into a\n * ResolvedPlugin compatible with HookPipeline. This allows standard-format\n * plugins to run in-process when placed in the `plugins: []` config array.\n *\n * The adapter wraps each hook and route handler so that the PluginContextFactory\n * provides the same capability-gated context as the native path.\n *\n */\n\nimport type { PluginDescriptor } from \"../astro/integration/runtime.js\";\nimport type { RouteEntry, RouteHandler, SandboxedPlugin } from \"../plugin-types.js\";\nimport { PLUGIN_CAPABILITIES, HOOK_NAMES } from \"./manifest-schema.js\";\nimport { sanitizeHeadersForSandbox } from \"./request-meta.js\";\nimport { normalizePluginCapabilities } from \"./types.js\";\nimport type {\n\tResolvedPlugin,\n\tResolvedPluginHooks,\n\tResolvedHook,\n\tPluginRoute,\n\tPluginCapability,\n\tPluginStorageConfig,\n\tPluginAdminConfig,\n} from \"./types.js\";\n\n/**\n * Loose per-hook entry shape used inside the adapter's iteration loop.\n *\n * `SandboxedPlugin.hooks` is a mapped type keyed by hook name, so each\n * entry's type depends on the key. When the adapter iterates with\n * `Object.entries`, the key is `string` (TypeScript can't see the\n * narrowing), so we need a *union* type that covers every hook entry\n * shape — bare handler or config form. This is that union, kept local\n * because it has no use outside the adapter.\n */\n// eslint-disable-next-line typescript-eslint/no-explicit-any -- must accept handlers with specific event types across all hook names\ntype AnyHookHandler = (...args: any[]) => Promise<any>;\ntype AnyHookEntry =\n\t| AnyHookHandler\n\t| {\n\t\t\thandler: AnyHookHandler;\n\t\t\tpriority?: number;\n\t\t\ttimeout?: number;\n\t\t\tdependencies?: string[];\n\t\t\terrorPolicy?: \"continue\" | \"abort\";\n\t\t\texclusive?: boolean;\n\t  };\n\n/**\n * Default hook configuration values\n */\nconst DEFAULT_PRIORITY = 100;\nconst DEFAULT_TIMEOUT = 5000;\nconst DEFAULT_ERROR_POLICY = \"abort\" as const;\n\n/**\n * Check if a hook entry is the config form (has a `handler` property).\n */\nfunction isHookConfig(entry: AnyHookEntry): entry is Exclude<AnyHookEntry, AnyHookHandler> {\n\treturn typeof entry === \"object\" && entry !== null && \"handler\" in entry;\n}\n\n/**\n * Resolve a single hook entry to a ResolvedHook.\n *\n * Sandboxed-format hooks use the standard two-arg convention:\n *   handler(event, ctx)\n *\n * The HookPipeline dispatch methods also call handlers with (event, ctx),\n * so the handler is compatible as-is — we just normalise the\n * surrounding config (priority, timeout, etc.) to its defaults.\n */\nfunction resolveSandboxedHook(entry: AnyHookEntry, pluginId: string): ResolvedHook<AnyHookHandler> {\n\tif (isHookConfig(entry)) {\n\t\treturn {\n\t\t\tpriority: entry.priority ?? DEFAULT_PRIORITY,\n\t\t\ttimeout: entry.timeout ?? DEFAULT_TIMEOUT,\n\t\t\tdependencies: entry.dependencies ?? [],\n\t\t\terrorPolicy: entry.errorPolicy ?? DEFAULT_ERROR_POLICY,\n\t\t\texclusive: entry.exclusive ?? false,\n\t\t\thandler: entry.handler,\n\t\t\tpluginId,\n\t\t};\n\t}\n\n\t// Bare function handler\n\treturn {\n\t\tpriority: DEFAULT_PRIORITY,\n\t\ttimeout: DEFAULT_TIMEOUT,\n\t\tdependencies: [],\n\t\terrorPolicy: DEFAULT_ERROR_POLICY,\n\t\texclusive: false,\n\t\thandler: entry,\n\t\tpluginId,\n\t};\n}\n\n/**\n * Normalise a `RouteEntry` (bare handler or `{ handler, public?, input? }`\n * config) to the config form. The `input` schema is intentionally typed\n * `unknown` in `RouteEntry` — sandboxed plugins describe it loosely\n * because the strict `z.ZodType<TInput>` constraint of the runtime's\n * `PluginRoute` only narrows once the route is wired into the router.\n * The wider type flows through to the runtime which validates at\n * invocation time.\n */\nfunction normalizeRouteEntry(entry: RouteEntry): {\n\thandler: RouteHandler;\n\tpublic?: boolean;\n\tcacheControl?: string;\n\tmethods?: PluginRoute[\"methods\"];\n\trequest?: PluginRoute[\"request\"];\n\tresponse?: PluginRoute[\"response\"];\n\tinput?: PluginRoute[\"input\"];\n\tpermission?: PluginRoute[\"permission\"];\n} {\n\tif (typeof entry === \"function\") {\n\t\treturn { handler: entry };\n\t}\n\treturn {\n\t\thandler: entry.handler,\n\t\tpublic: entry.public,\n\t\tpermission: entry.permission,\n\t\tcacheControl: entry.cacheControl,\n\t\tmethods: entry.methods,\n\t\trequest: entry.request,\n\t\tresponse: entry.response,\n\t\t// eslint-disable-next-line typescript-eslint/no-unsafe-type-assertion -- RouteEntry.input is intentionally `unknown` (sandboxed plugins) and validated by the runtime at invocation time\n\t\tinput: entry.input as PluginRoute[\"input\"],\n\t};\n}\n\nconst VALID_CAPABILITIES_SET = new Set<string>(PLUGIN_CAPABILITIES);\n\nconst VALID_HOOK_NAMES_SET = new Set<string>(HOOK_NAMES);\n\n/**\n * Adapt a sandboxed plugin's default export into a ResolvedPlugin.\n *\n * This is the in-process side of sandboxed-format plugins: it takes\n * the `{ hooks, routes }` default export of a sandboxed plugin and\n * produces a `ResolvedPlugin` that enters the HookPipeline alongside\n * native plugins. The descriptor supplies identity (id, version) and\n * the trust contract (capabilities, allowedHosts, storage); the\n * definition supplies behaviour.\n *\n * @param definition - The plugin's default export (matching `SandboxedPlugin` from `emdash/plugin`).\n * @param descriptor - The plugin descriptor with id, version, capabilities, etc.\n * @returns A ResolvedPlugin compatible with HookPipeline.\n */\nexport function adaptSandboxEntry(\n\tdefinition: SandboxedPlugin,\n\tdescriptor: PluginDescriptor,\n): ResolvedPlugin {\n\tconst pluginId = descriptor.id;\n\tconst version = descriptor.version;\n\n\t// A null / array / non-object `definition` would throw a generic\n\t// `TypeError: Cannot read properties of null` further down the\n\t// loop without the plugin id; surface a useful error first.\n\tif (typeof definition !== \"object\" || definition === null || Array.isArray(definition)) {\n\t\tthrow new Error(\n\t\t\t`Plugin \"${pluginId}\" default export must be an object with ` +\n\t\t\t\t`\\`hooks\\` and/or \\`routes\\` (got ${\n\t\t\t\t\tArray.isArray(definition) ? \"array\" : typeof definition\n\t\t\t\t}). Did you forget \\`export default {...} satisfies SandboxedPlugin\\`?`,\n\t\t);\n\t}\n\n\t// Resolve hooks. `SandboxedPlugin.hooks` is keyed by hook name with\n\t// per-key entry types; iterating with `Object.entries` collapses\n\t// keys to `string`, so we treat each entry as the union `AnyHookEntry`\n\t// for the duration of the loop. The widening from the strict mapped\n\t// type to a plain record is sound because each entry still matches\n\t// one of the bare-handler / config-object shapes captured by\n\t// `AnyHookEntry`.\n\tconst resolvedHooks: ResolvedPluginHooks = {};\n\tif (definition.hooks) {\n\t\t// eslint-disable-next-line typescript-eslint/no-unsafe-type-assertion -- widening the strict mapped type to a string-keyed record for iteration; entries still match AnyHookEntry\n\t\tconst hookMap = definition.hooks as Record<string, AnyHookEntry>;\n\t\tfor (const [hookName, entry] of Object.entries(hookMap)) {\n\t\t\tif (!VALID_HOOK_NAMES_SET.has(hookName)) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Plugin \"${pluginId}\" declares unknown hook \"${hookName}\". ` +\n\t\t\t\t\t\t`Valid hooks: ${[...VALID_HOOK_NAMES_SET].join(\", \")}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\t// The resolved hook has the correct handler type for the hook name.\n\t\t\t// We store it as the generic type and let HookPipeline's typed dispatch\n\t\t\t// methods handle the type narrowing at call time.\n\t\t\t// eslint-disable-next-line typescript-eslint/no-unsafe-type-assertion -- bridging untyped map to typed interface\n\t\t\t(resolvedHooks as Record<string, unknown>)[hookName] = resolveSandboxedHook(entry, pluginId);\n\t\t}\n\t}\n\n\t// Resolve routes: sandboxed format uses (routeCtx, pluginCtx) two-arg\n\t// pattern. Standard format (`definePlugin(...)` as the default export)\n\t// uses the public (ctx: RouteContext) single-arg pattern where\n\t// RouteContext extends PluginContext with { input, request, requestMeta }.\n\t//\n\t// The two conventions disagree on the FIRST argument (`request` is a\n\t// flattened plain object for sandboxed, a real WHATWG `Request` for\n\t// standard), so the wrapper must know which contract the handler was\n\t// written against. `definePlugin` requires `id`, and sandbox-format\n\t// default exports never carry one (identity comes from the manifest's\n\t// slug + publisher) — the same \"no id\" signal definePlugin itself\n\t// documents. Calling a single-arg standard handler with the two-arg\n\t// convention silently hands it the bare route context (JS drops the\n\t// extra argument), so `ctx.storage` / `ctx.email` / etc. are all\n\t// undefined at runtime.\n\t//\n\t// Route entries can be bare functions or `{ handler, public?, input? }`\n\t// config objects; normalise to the config shape inside the loop.\n\tconst usesPublicRouteContext = \"id\" in definition && typeof definition.id === \"string\";\n\tconst resolvedRoutes: Record<string, PluginRoute> = {};\n\tif (definition.routes) {\n\t\tfor (const [routeName, rawEntry] of Object.entries(definition.routes)) {\n\t\t\tconst normalized = normalizeRouteEntry(rawEntry);\n\t\t\tconst {\n\t\t\t\thandler,\n\t\t\t\tpublic: publicFlag,\n\t\t\t\tcacheControl,\n\t\t\t\tmethods,\n\t\t\t\trequest,\n\t\t\t\tresponse,\n\t\t\t\tinput: inputSchema,\n\t\t\t\tpermission,\n\t\t\t} = normalized;\n\t\t\tresolvedRoutes[routeName] = {\n\t\t\t\tinput: inputSchema,\n\t\t\t\tpublic: publicFlag,\n\t\t\t\tpermission,\n\t\t\t\tcacheControl,\n\t\t\t\tmethods,\n\t\t\t\trequest,\n\t\t\t\tresponse,\n\t\t\t\thandler: async (ctx) => {\n\t\t\t\t\tif (usesPublicRouteContext) {\n\t\t\t\t\t\t// The incoming ctx already IS the public RouteContext\n\t\t\t\t\t\t// (full PluginContext + input / real Request /\n\t\t\t\t\t\t// requestMeta) — pass it through unchanged.\n\t\t\t\t\t\t// eslint-disable-next-line typescript-eslint/no-unsafe-type-assertion -- standard-format handlers are authored against the public single-arg PluginRoute contract; the sandbox RouteHandler type on `normalized` is the wider authoring union\n\t\t\t\t\t\treturn (handler as unknown as PluginRoute[\"handler\"])(ctx);\n\t\t\t\t\t}\n\t\t\t\t\t// `ctx.request` is a real WHATWG `Request` (this is the\n\t\t\t\t\t// in-process adapter; the worker-sandbox adapter handles\n\t\t\t\t\t// the serialised case). Flatten `Headers` to the plain\n\t\t\t\t\t// `Record<string, string>` shape that author-facing\n\t\t\t\t\t// `SandboxedRequest` promises so handler bodies are\n\t\t\t\t\t// identical across both adapters.\n\t\t\t\t\tconst declaredHeaders = request ? (request.headers ?? []) : undefined;\n\t\t\t\t\tconst headers = sanitizeHeadersForSandbox(ctx.request.headers, declaredHeaders);\n\t\t\t\t\tconst requestShape = {\n\t\t\t\t\t\turl: ctx.request.url,\n\t\t\t\t\t\tmethod: ctx.request.method,\n\t\t\t\t\t\theaders,\n\t\t\t\t\t};\n\t\t\t\t\tconst routeCtx = {\n\t\t\t\t\t\tinput: ctx.input,\n\t\t\t\t\t\trequest: requestShape,\n\t\t\t\t\t\trequestMeta: ctx.requestMeta,\n\t\t\t\t\t\tuser: ctx.user,\n\t\t\t\t\t\tui: ctx.ui,\n\t\t\t\t\t};\n\t\t\t\t\tconst {\n\t\t\t\t\t\tinput: _,\n\t\t\t\t\t\trequest: __,\n\t\t\t\t\t\trequestMeta: ___,\n\t\t\t\t\t\tuser: ____,\n\t\t\t\t\t\tui: _____,\n\t\t\t\t\t\t...pluginCtx\n\t\t\t\t\t} = ctx;\n\t\t\t\t\treturn handler(routeCtx, pluginCtx);\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\t}\n\n\t// Build capabilities from descriptor.\n\t// Validate against the known set (same as defineNativePlugin). Both\n\t// current and deprecated names are accepted; deprecated names are\n\t// silently normalized to current names below so the runtime only ever\n\t// sees the canonical form.\n\tconst rawCapabilities = descriptor.capabilities ?? [];\n\tfor (const cap of rawCapabilities) {\n\t\tif (!VALID_CAPABILITIES_SET.has(cap)) {\n\t\t\tthrow new Error(\n\t\t\t\t`Invalid capability \"${cap}\" in plugin \"${pluginId}\". ` +\n\t\t\t\t\t`Valid capabilities: ${[...VALID_CAPABILITIES_SET].join(\", \")}`,\n\t\t\t);\n\t\t}\n\t}\n\n\t// Silent normalization: rewrite deprecated names to current names.\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- validated above; normalization only returns capabilities from the union\n\tconst capabilities = normalizePluginCapabilities(rawCapabilities as PluginCapability[]);\n\tconst allowedHosts = descriptor.allowedHosts ?? [];\n\n\t// Build storage config from descriptor.\n\t// StorageCollectionDeclaration uses optional indexes, but PluginStorageConfig\n\t// requires them. Ensure every collection has an indexes array.\n\tconst rawStorage = descriptor.storage ?? {};\n\tconst storage: PluginStorageConfig = {};\n\tfor (const [name, config] of Object.entries(rawStorage)) {\n\t\tstorage[name] = {\n\t\t\tindexes: config.indexes ?? [],\n\t\t\tuniqueIndexes: config.uniqueIndexes,\n\t\t};\n\t}\n\n\t// Build admin config from descriptor.\n\t// Portable Text blocks and field widgets are declarative (Block Kit), so they\n\t// are forwarded for standard/sandboxed plugins just like pages and widgets —\n\t// the admin editor consumes them from the manifest. Only the site-side render\n\t// component (`componentsEntry`) stays native-only.\n\tconst admin: PluginAdminConfig = {};\n\tif (descriptor.adminPages) {\n\t\tadmin.pages = descriptor.adminPages;\n\t}\n\tif (descriptor.adminWidgets) {\n\t\tadmin.widgets = descriptor.adminWidgets;\n\t}\n\tif (descriptor.editorPanels) {\n\t\tadmin.editorPanels = descriptor.editorPanels;\n\t}\n\tif (descriptor.editorActions) {\n\t\tadmin.editorActions = descriptor.editorActions;\n\t}\n\tif (descriptor.settingsSchema) {\n\t\tadmin.settingsSchema = descriptor.settingsSchema;\n\t}\n\tif (descriptor.portableTextBlocks) {\n\t\tadmin.portableTextBlocks = descriptor.portableTextBlocks;\n\t}\n\tif (descriptor.fieldWidgets) {\n\t\tadmin.fieldWidgets = descriptor.fieldWidgets;\n\t}\n\n\treturn {\n\t\tid: pluginId,\n\t\tversion,\n\t\tcapabilities,\n\t\tallowedHosts,\n\t\tstorage,\n\t\thooks: resolvedHooks,\n\t\troutes: resolvedRoutes,\n\t\tmcp: {\n\t\t\ttools: Object.fromEntries(\n\t\t\t\tObject.entries(definition.mcp?.tools ?? {}).map(([name, tool]) => [\n\t\t\t\t\tname,\n\t\t\t\t\t{\n\t\t\t\t\t\tdescription: tool.description,\n\t\t\t\t\t\troute: tool.route,\n\t\t\t\t\t\tinput: tool.input,\n\t\t\t\t\t\toutput: tool.output,\n\t\t\t\t\t\tdestructive: tool.destructive,\n\t\t\t\t\t},\n\t\t\t\t]),\n\t\t\t),\n\t\t},\n\t\tadmin,\n\t};\n}\n"],"mappings":";;;;;;;;AAqDA,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;;;;AAK7B,SAAS,aAAa,OAAqE;AAC1F,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,aAAa;;;;;;;;;;;;AAapE,SAAS,qBAAqB,OAAqB,UAAgD;AAClG,KAAI,aAAa,MAAM,CACtB,QAAO;EACN,UAAU,MAAM,YAAY;EAC5B,SAAS,MAAM,WAAW;EAC1B,cAAc,MAAM,gBAAgB,EAAE;EACtC,aAAa,MAAM,eAAe;EAClC,WAAW,MAAM,aAAa;EAC9B,SAAS,MAAM;EACf;EACA;AAIF,QAAO;EACN,UAAU;EACV,SAAS;EACT,cAAc,EAAE;EAChB,aAAa;EACb,WAAW;EACX,SAAS;EACT;EACA;;;;;;;;;;;AAYF,SAAS,oBAAoB,OAS3B;AACD,KAAI,OAAO,UAAU,WACpB,QAAO,EAAE,SAAS,OAAO;AAE1B,QAAO;EACN,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,YAAY,MAAM;EAClB,cAAc,MAAM;EACpB,SAAS,MAAM;EACf,SAAS,MAAM;EACf,UAAU,MAAM;EAEhB,OAAO,MAAM;EACb;;AAGF,MAAM,yBAAyB,IAAI,IAAY,oBAAoB;AAEnE,MAAM,uBAAuB,IAAI,IAAY,WAAW;;;;;;;;;;;;;;;AAgBxD,SAAgB,kBACf,YACA,YACiB;CACjB,MAAM,WAAW,WAAW;CAC5B,MAAM,UAAU,WAAW;AAK3B,KAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,WAAW,CACrF,OAAM,IAAI,MACT,WAAW,SAAS,2EAElB,MAAM,QAAQ,WAAW,GAAG,UAAU,OAAO,WAC7C,uEACF;CAUF,MAAM,gBAAqC,EAAE;AAC7C,KAAI,WAAW,OAAO;EAErB,MAAM,UAAU,WAAW;AAC3B,OAAK,MAAM,CAAC,UAAU,UAAU,OAAO,QAAQ,QAAQ,EAAE;AACxD,OAAI,CAAC,qBAAqB,IAAI,SAAS,CACtC,OAAM,IAAI,MACT,WAAW,SAAS,2BAA2B,SAAS,kBACvC,CAAC,GAAG,qBAAqB,CAAC,KAAK,KAAK,GACrD;AAMF,GAAC,cAA0C,YAAY,qBAAqB,OAAO,SAAS;;;CAsB9F,MAAM,yBAAyB,QAAQ,cAAc,OAAO,WAAW,OAAO;CAC9E,MAAM,iBAA8C,EAAE;AACtD,KAAI,WAAW,OACd,MAAK,MAAM,CAAC,WAAW,aAAa,OAAO,QAAQ,WAAW,OAAO,EAAE;EAEtE,MAAM,EACL,SACA,QAAQ,YACR,cACA,SACA,SACA,UACA,OAAO,aACP,eATkB,oBAAoB,SAAS;AAWhD,iBAAe,aAAa;GAC3B,OAAO;GACP,QAAQ;GACR;GACA;GACA;GACA;GACA;GACA,SAAS,OAAO,QAAQ;AACvB,QAAI,uBAKH,QAAQ,QAA8C,IAAI;IAQ3D,MAAM,kBAAkB,UAAW,QAAQ,WAAW,EAAE,GAAI;IAC5D,MAAM,UAAU,0BAA0B,IAAI,QAAQ,SAAS,gBAAgB;IAC/E,MAAM,eAAe;KACpB,KAAK,IAAI,QAAQ;KACjB,QAAQ,IAAI,QAAQ;KACpB;KACA;IACD,MAAM,WAAW;KAChB,OAAO,IAAI;KACX,SAAS;KACT,aAAa,IAAI;KACjB,MAAM,IAAI;KACV,IAAI,IAAI;KACR;IACD,MAAM,EACL,OAAO,GACP,SAAS,IACT,aAAa,KACb,MAAM,MACN,IAAI,OACJ,GAAG,cACA;AACJ,WAAO,QAAQ,UAAU,UAAU;;GAEpC;;CASH,MAAM,kBAAkB,WAAW,gBAAgB,EAAE;AACrD,MAAK,MAAM,OAAO,gBACjB,KAAI,CAAC,uBAAuB,IAAI,IAAI,CACnC,OAAM,IAAI,MACT,uBAAuB,IAAI,eAAe,SAAS,yBAC3B,CAAC,GAAG,uBAAuB,CAAC,KAAK,KAAK,GAC9D;CAMH,MAAM,eAAe,4BAA4B,gBAAsC;CACvF,MAAM,eAAe,WAAW,gBAAgB,EAAE;CAKlD,MAAM,aAAa,WAAW,WAAW,EAAE;CAC3C,MAAM,UAA+B,EAAE;AACvC,MAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,WAAW,CACtD,SAAQ,QAAQ;EACf,SAAS,OAAO,WAAW,EAAE;EAC7B,eAAe,OAAO;EACtB;CAQF,MAAM,QAA2B,EAAE;AACnC,KAAI,WAAW,WACd,OAAM,QAAQ,WAAW;AAE1B,KAAI,WAAW,aACd,OAAM,UAAU,WAAW;AAE5B,KAAI,WAAW,aACd,OAAM,eAAe,WAAW;AAEjC,KAAI,WAAW,cACd,OAAM,gBAAgB,WAAW;AAElC,KAAI,WAAW,eACd,OAAM,iBAAiB,WAAW;AAEnC,KAAI,WAAW,mBACd,OAAM,qBAAqB,WAAW;AAEvC,KAAI,WAAW,aACd,OAAM,eAAe,WAAW;AAGjC,QAAO;EACN,IAAI;EACJ;EACA;EACA;EACA;EACA,OAAO;EACP,QAAQ;EACR,KAAK,EACJ,OAAO,OAAO,YACb,OAAO,QAAQ,WAAW,KAAK,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,UAAU,CACjE,MACA;GACC,aAAa,KAAK;GAClB,OAAO,KAAK;GACZ,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,aAAa,KAAK;GAClB,CACD,CAAC,CACF,EACD;EACD;EACA"}

package/dist/plugins/host.d.mts

@@ -0,0 +1,7 @@
+import "../types-CbwqGOXm.mjs";
+import { Ct as MediaMetadataPatch, Ft as PaginatedResult, L as ContentItem, R as ContentListOptions, St as MediaItem, _n as SettingField, xt as MediaBytes } from "../types-DEHidMEk.mjs";
+import { t as OptionsRepository } from "../options-DAknChnw.mjs";
+import { A as RedirectAccessError, D as getSandboxRouteErrorDetails, F as createRedirectAccess, I as createSchemaAccess, P as createMediaAccess, R as createContentAccess, T as createSandboxRouteError, V as createSettingsAccess, Y as PluginStorageRepository, a as readPluginMediaBytes, c as CronAccessImpl, et as ContentRepository, i as parsePluginMediaMetadataPatch, j as createCommentAccess, s as updatePluginMediaMetadata, t as StorageSerializationError, tt as resolvePluginEncryptionKeys } from "../storage-query-CPctdMKX.mjs";
+import { a as resolveContentCreateLocale } from "../config-D3HhLON3.mjs";
+import { ulid } from "ulidx";
+export { type ContentItem, type ContentListOptions, ContentRepository, CronAccessImpl, type MediaBytes, type MediaItem, type MediaMetadataPatch, OptionsRepository, type PaginatedResult, PluginStorageRepository, RedirectAccessError, type SettingField, StorageSerializationError, createCommentAccess, createContentAccess, createMediaAccess, createRedirectAccess, createSandboxRouteError, createSchemaAccess, createSettingsAccess, getSandboxRouteErrorDetails, parsePluginMediaMetadataPatch, readPluginMediaBytes, resolveContentCreateLocale, resolvePluginEncryptionKeys, ulid, updatePluginMediaMetadata };

package/dist/plugins/host.mjs

@@ -0,0 +1,45 @@
+import "../dialect-helpers-CtYdsX4W.mjs";
+import { o as resolveContentCreateLocale } from "../config-CGVeT8Hc.mjs";
+import "../datetime-normalization-PeiEdcRY.mjs";
+import "../after-PcEvMY_6.mjs";
+import { t as OptionsRepository } from "../options-D5WcorD5.mjs";
+import "../base64-DvnNgP7e.mjs";
+import { i as resolvePluginEncryptionKeys } from "../secrets-DNgVgz_e.mjs";
+import { t as ContentRepository } from "../content-DZ3B5qtA.mjs";
+import "../object-cache-DlSVbn5Y.mjs";
+import "../slugify-T5GHH42D.mjs";
+import "../types-BkUg2yHx.mjs";
+import "../media-TBlKCwo7.mjs";
+import "../user-DroRntkx.mjs";
+import "../taxonomy-Dj1vpw5E.mjs";
+import "../comment-DcT8qdPK.mjs";
+import { b as PluginStorageRepository, c as createSchemaAccess, g as readPluginMediaBytes, h as parsePluginMediaMetadataPatch, n as RedirectAccessError, o as createMediaAccess, r as createCommentAccess, s as createRedirectAccess, v as updatePluginMediaMetadata, x as StorageSerializationError, y as createContentAccess } from "../context-B195kjqZ.mjs";
+import "../resolve-BJIS8wKr.mjs";
+import "../redirect-D2Yo-b6S.mjs";
+import "../request-cache-DaMhSQdx.mjs";
+import "../dist-2hDLsLeq.mjs";
+import "../enrich-C2Mk0lwE.mjs";
+import "../entry-locks-CO_KaoU5.mjs";
+import "../seo-_4qmazxz.mjs";
+import "../cache-B0pOlXdM.mjs";
+import "../fts-manager-DMb0sbIQ.mjs";
+import "../loader-t4TxaFiQ.mjs";
+import "../collection-slugs-cache-D9auiKmI.mjs";
+import "../taxonomies-BpqpXJUE.mjs";
+import "../capture-triggers-gxQxnxrJ.mjs";
+import "../activation-CaMfdBt1.mjs";
+import "../collection-deletion-C3Xixmkx.mjs";
+import "../content-refresh-BHLHJgyt.mjs";
+import "../registry-CkuPoZs7.mjs";
+import { u as createSettingsAccess } from "../settings-DmroR53o.mjs";
+import "../taxonomies-ClCo4IGO.mjs";
+import { i as getSandboxRouteErrorDetails, n as createSandboxRouteError } from "../types-ZCnlropY.mjs";
+import "../ssrf-Co1GGFZz.mjs";
+import "../redirects-BCiTaIQ-.mjs";
+import "../status-DLoBmcDz.mjs";
+import "../redirects-ByItliuu.mjs";
+import "../ssrf-BRpTDMV6.mjs";
+import { t as CronAccessImpl } from "../cron-BcR3RN4K.mjs";
+import { ulid } from "ulidx";
+
+export { ContentRepository, CronAccessImpl, OptionsRepository, PluginStorageRepository, RedirectAccessError, StorageSerializationError, createCommentAccess, createContentAccess, createMediaAccess, createRedirectAccess, createSandboxRouteError, createSchemaAccess, createSettingsAccess, getSandboxRouteErrorDetails, parsePluginMediaMetadataPatch, readPluginMediaBytes, resolveContentCreateLocale, resolvePluginEncryptionKeys, ulid, updatePluginMediaMetadata };

package/dist/plugins/http-wire.d.mts

@@ -0,0 +1,25 @@
+//#region src/plugins/http-wire.d.ts
+declare const PLUGIN_HTTP_MAX_REQUEST_BYTES: number;
+declare const PLUGIN_HTTP_MAX_RESPONSE_BYTES: number;
+type PluginHttpRedirectAction = "return" | "follow" | "error";
+interface PluginHttpResponseWire {
+  status: number;
+  statusText: string;
+  headers: Array<[string, string]>;
+  finalUrl: string;
+  redirected: boolean;
+  body: Uint8Array;
+}
+declare const readPluginHttpBytes: (stream: ReadableStream<Uint8Array> | null, limit: number, label: "request" | "response") => Promise<Uint8Array>, bufferPluginHttpRequest: (init: RequestInit | undefined) => Promise<RequestInit | undefined>, decoratePluginHttpResponse: (response: Response, finalUrl: string, redirected: boolean) => Response, pluginHttpResponseFromWire: (wire: PluginHttpResponseWire) => Response;
+declare function rewritePluginHttpRedirect(status: number, init: RequestInit | undefined): RequestInit | undefined;
+declare function pluginHttpRedirectAction(status: number, hasLocation: boolean, init: RequestInit | undefined): PluginHttpRedirectAction;
+declare function pluginHttpResponseToWire(response: Response, finalUrl: string, redirected: boolean): Promise<PluginHttpResponseWire>;
+/**
+ * Generate the dependency-free helper module injected into sandbox wrappers.
+ * Generated isolates cannot resolve host package imports, so both runners embed
+ * the runtime forms of these canonical functions instead.
+ */
+declare function generatePluginHttpWireRuntimeSource(): string;
+//#endregion
+export { PLUGIN_HTTP_MAX_REQUEST_BYTES, PLUGIN_HTTP_MAX_RESPONSE_BYTES, PluginHttpRedirectAction, PluginHttpResponseWire, bufferPluginHttpRequest, decoratePluginHttpResponse, generatePluginHttpWireRuntimeSource, pluginHttpRedirectAction, pluginHttpResponseFromWire, pluginHttpResponseToWire, readPluginHttpBytes, rewritePluginHttpRedirect };
+//# sourceMappingURL=http-wire.d.mts.map

package/dist/plugins/http-wire.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-wire.d.mts","names":[],"sources":["../../src/plugins/http-wire.ts"],"mappings":";cAAa,6BAAA;AAAA,cACA,8BAAA;AAAA,KAWD,wBAAA;AAAA,UAEK,sBAAA;EAChB,MAAA;EACA,UAAA;EACA,OAAA,EAAS,KAAA;EACT,QAAA;EACA,UAAA;EACA,IAAA,EAAM,UAAA;AAAA;AAAA,cAgGN,mBAAA,GAAmB,MAAA,EA1FV,cAAA,CAAe,UAAA,UAAkB,KAAA,UAC5B,KAAA,6BAEX,OAAA,CAAQ,UAAA,GAAA,uBAAA,GAwFY,IAAA,EAtDhB,WAAA,iBACJ,OAAA,CAAQ,WAAA,eAAA,0BAAA,GAsDe,QAAA,EAtCf,QAAA,EAAQ,QAAA,UACF,UAAA,cAEd,QAAA,EAAA,0BAAA,GAoCuB,IAAA,EAvBgB,sBAAA,KAAyB,QAAA;AAAA,iBA0BpD,yBAAA,CACf,MAAA,UACA,IAAA,EAAM,WAAA,eACJ,WAAA;AAAA,iBAaa,wBAAA,CACf,MAAA,UACA,WAAA,WACA,IAAA,EAAM,WAAA,eACJ,wBAAA;AAAA,iBAQmB,wBAAA,CACrB,QAAA,EAAU,QAAA,EACV,QAAA,UACA,UAAA,YACE,OAAA,CAAQ,sBAAA;;AA5IX;;;;iBA8JgB,mCAAA,CAAA"}

package/dist/plugins/http-wire.mjs

@@ -0,0 +1,148 @@
+//#region src/plugins/http-wire.ts
+const PLUGIN_HTTP_MAX_REQUEST_BYTES = 8 * 1024 * 1024;
+const PLUGIN_HTTP_MAX_RESPONSE_BYTES = 8 * 1024 * 1024;
+const REDIRECT_BODY_HEADERS = [
+	"content-encoding",
+	"content-language",
+	"content-location",
+	"content-type",
+	"content-length",
+	"transfer-encoding"
+];
+const PLUGIN_HTTP_REDIRECT_STATUSES = new Set([
+	301,
+	302,
+	303,
+	307,
+	308
+]);
+function createPluginHttpWireRuntime(maxRequestBytes) {
+	async function readPluginHttpBytes(stream, limit, label) {
+		if (!stream) return new Uint8Array();
+		const reader = stream.getReader();
+		const chunks = [];
+		let total = 0;
+		try {
+			while (true) {
+				const { done, value } = await reader.read();
+				if (done) break;
+				total += value.byteLength;
+				if (total > limit) {
+					try {
+						await reader.cancel();
+					} catch {}
+					throw new Error(`Plugin HTTP ${label} body exceeds the ${limit} byte limit`);
+				}
+				chunks.push(value);
+			}
+		} finally {
+			reader.releaseLock();
+		}
+		const bytes = new Uint8Array(total);
+		let offset = 0;
+		for (const chunk of chunks) {
+			bytes.set(chunk, offset);
+			offset += chunk.byteLength;
+		}
+		return bytes;
+	}
+	async function bufferPluginHttpRequest(init) {
+		if (init?.body === void 0 || init.body === null) return init;
+		const encoded = new Response(init.body);
+		const body = await readPluginHttpBytes(encoded.body, maxRequestBytes, "request");
+		const headers = new Headers(init.headers);
+		if (!headers.has("content-type")) {
+			const contentType = encoded.headers.get("content-type");
+			if (contentType) headers.set("content-type", contentType);
+		}
+		const bufferedInit = { ...init };
+		Reflect.deleteProperty(bufferedInit, "duplex");
+		return {
+			...bufferedInit,
+			headers,
+			body: new Uint8Array(body).buffer
+		};
+	}
+	function decoratePluginHttpResponse(response, finalUrl, redirected) {
+		const clone = response.clone.bind(response);
+		Object.defineProperties(response, {
+			url: {
+				configurable: true,
+				value: finalUrl
+			},
+			redirected: {
+				configurable: true,
+				value: redirected
+			},
+			clone: {
+				configurable: true,
+				value: () => decoratePluginHttpResponse(clone(), finalUrl, redirected)
+			}
+		});
+		return response;
+	}
+	function pluginHttpResponseFromWire(wire) {
+		const nullBodyStatus = wire.status === 101 || wire.status === 204 || wire.status === 205 || wire.status === 304;
+		return decoratePluginHttpResponse(new Response(nullBodyStatus ? null : new Uint8Array(wire.body).buffer, {
+			status: wire.status,
+			statusText: wire.statusText,
+			headers: wire.headers
+		}), wire.finalUrl, wire.redirected);
+	}
+	return [
+		readPluginHttpBytes,
+		bufferPluginHttpRequest,
+		decoratePluginHttpResponse,
+		pluginHttpResponseFromWire
+	];
+}
+const [readPluginHttpBytes, bufferPluginHttpRequest, decoratePluginHttpResponse, pluginHttpResponseFromWire] = createPluginHttpWireRuntime(PLUGIN_HTTP_MAX_REQUEST_BYTES);
+function rewritePluginHttpRedirect(status, init) {
+	if (!init) return init;
+	const method = (init.method ?? "GET").toUpperCase();
+	if (!((status === 301 || status === 302) && method === "POST" || status === 303 && method !== "GET" && method !== "HEAD")) return init;
+	const headers = new Headers(init.headers);
+	for (const name of REDIRECT_BODY_HEADERS) headers.delete(name);
+	return {
+		...init,
+		method: "GET",
+		headers,
+		body: void 0
+	};
+}
+function pluginHttpRedirectAction(status, hasLocation, init) {
+	if (!PLUGIN_HTTP_REDIRECT_STATUSES.has(status) || !hasLocation) return "return";
+	const mode = init?.redirect ?? "follow";
+	if (mode === "manual") return "return";
+	if (mode === "error") return "error";
+	return "follow";
+}
+async function pluginHttpResponseToWire(response, finalUrl, redirected) {
+	const headers = [];
+	response.headers.forEach((value, key) => headers.push([key, value]));
+	return {
+		status: response.status,
+		statusText: response.statusText,
+		headers,
+		finalUrl: response.url || finalUrl,
+		redirected: response.redirected || redirected,
+		body: await readPluginHttpBytes(response.body, PLUGIN_HTTP_MAX_RESPONSE_BYTES, "response")
+	};
+}
+/**
+* Generate the dependency-free helper module injected into sandbox wrappers.
+* Generated isolates cannot resolve host package imports, so both runners embed
+* the runtime forms of these canonical functions instead.
+*/
+function generatePluginHttpWireRuntimeSource() {
+	return `const [
+	readPluginHttpBytes,
+	bufferPluginHttpRequest,
+	decoratePluginHttpResponse,
+	pluginHttpResponseFromWire,
+] = (${createPluginHttpWireRuntime.toString()})(${PLUGIN_HTTP_MAX_REQUEST_BYTES});`;
+}
+
+//#endregion
+export { PLUGIN_HTTP_MAX_REQUEST_BYTES, PLUGIN_HTTP_MAX_RESPONSE_BYTES, bufferPluginHttpRequest, decoratePluginHttpResponse, generatePluginHttpWireRuntimeSource, pluginHttpRedirectAction, pluginHttpResponseFromWire, pluginHttpResponseToWire, readPluginHttpBytes, rewritePluginHttpRedirect };
+//# sourceMappingURL=http-wire.mjs.map

package/dist/plugins/http-wire.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-wire.mjs","names":[],"sources":["../../src/plugins/http-wire.ts"],"sourcesContent":["export const PLUGIN_HTTP_MAX_REQUEST_BYTES = 8 * 1024 * 1024;\nexport const PLUGIN_HTTP_MAX_RESPONSE_BYTES = 8 * 1024 * 1024;\nconst REDIRECT_BODY_HEADERS = [\n\t\"content-encoding\",\n\t\"content-language\",\n\t\"content-location\",\n\t\"content-type\",\n\t\"content-length\",\n\t\"transfer-encoding\",\n];\nconst PLUGIN_HTTP_REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);\n\nexport type PluginHttpRedirectAction = \"return\" | \"follow\" | \"error\";\n\nexport interface PluginHttpResponseWire {\n\tstatus: number;\n\tstatusText: string;\n\theaders: Array<[string, string]>;\n\tfinalUrl: string;\n\tredirected: boolean;\n\tbody: Uint8Array;\n}\n\nfunction createPluginHttpWireRuntime(maxRequestBytes: number) {\n\t// oxlint-disable-next-line unicorn/consistent-function-scoping -- local declaration keeps the generated factory dependency-free\n\tasync function readPluginHttpBytes(\n\t\tstream: ReadableStream<Uint8Array> | null,\n\t\tlimit: number,\n\t\tlabel: \"request\" | \"response\",\n\t): Promise<Uint8Array> {\n\t\tif (!stream) return new Uint8Array();\n\t\tconst reader = stream.getReader();\n\t\tconst chunks: Uint8Array[] = [];\n\t\tlet total = 0;\n\t\ttry {\n\t\t\twhile (true) {\n\t\t\t\tconst { done, value } = await reader.read();\n\t\t\t\tif (done) break;\n\t\t\t\ttotal += value.byteLength;\n\t\t\t\tif (total > limit) {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait reader.cancel();\n\t\t\t\t\t} catch {\n\t\t\t\t\t\t// The byte limit remains the caller-visible failure.\n\t\t\t\t\t}\n\t\t\t\t\tthrow new Error(`Plugin HTTP ${label} body exceeds the ${limit} byte limit`);\n\t\t\t\t}\n\t\t\t\tchunks.push(value);\n\t\t\t}\n\t\t} finally {\n\t\t\treader.releaseLock();\n\t\t}\n\n\t\tconst bytes = new Uint8Array(total);\n\t\tlet offset = 0;\n\t\tfor (const chunk of chunks) {\n\t\t\tbytes.set(chunk, offset);\n\t\t\toffset += chunk.byteLength;\n\t\t}\n\t\treturn bytes;\n\t}\n\n\tasync function bufferPluginHttpRequest(\n\t\tinit: RequestInit | undefined,\n\t): Promise<RequestInit | undefined> {\n\t\tif (init?.body === undefined || init.body === null) return init;\n\t\tconst encoded = new Response(init.body);\n\t\tconst body = await readPluginHttpBytes(encoded.body, maxRequestBytes, \"request\");\n\t\tconst headers = new Headers(init.headers);\n\t\tif (!headers.has(\"content-type\")) {\n\t\t\tconst contentType = encoded.headers.get(\"content-type\");\n\t\t\tif (contentType) headers.set(\"content-type\", contentType);\n\t\t}\n\t\tconst bufferedInit = { ...init };\n\t\tReflect.deleteProperty(bufferedInit, \"duplex\");\n\t\treturn { ...bufferedInit, headers, body: new Uint8Array(body).buffer };\n\t}\n\n\t// oxlint-disable-next-line unicorn/consistent-function-scoping -- local declaration keeps the generated factory dependency-free\n\tfunction decoratePluginHttpResponse(\n\t\tresponse: Response,\n\t\tfinalUrl: string,\n\t\tredirected: boolean,\n\t): Response {\n\t\tconst clone = response.clone.bind(response);\n\t\tObject.defineProperties(response, {\n\t\t\turl: { configurable: true, value: finalUrl },\n\t\t\tredirected: { configurable: true, value: redirected },\n\t\t\tclone: {\n\t\t\t\tconfigurable: true,\n\t\t\t\tvalue: () => decoratePluginHttpResponse(clone(), finalUrl, redirected),\n\t\t\t},\n\t\t});\n\t\treturn response;\n\t}\n\n\tfunction pluginHttpResponseFromWire(wire: PluginHttpResponseWire): Response {\n\t\tconst nullBodyStatus =\n\t\t\twire.status === 101 || wire.status === 204 || wire.status === 205 || wire.status === 304;\n\t\tconst response = new Response(nullBodyStatus ? null : new Uint8Array(wire.body).buffer, {\n\t\t\tstatus: wire.status,\n\t\t\tstatusText: wire.statusText,\n\t\t\theaders: wire.headers,\n\t\t});\n\t\treturn decoratePluginHttpResponse(response, wire.finalUrl, wire.redirected);\n\t}\n\n\treturn [\n\t\treadPluginHttpBytes,\n\t\tbufferPluginHttpRequest,\n\t\tdecoratePluginHttpResponse,\n\t\tpluginHttpResponseFromWire,\n\t] as const;\n}\n\nexport const [\n\treadPluginHttpBytes,\n\tbufferPluginHttpRequest,\n\tdecoratePluginHttpResponse,\n\tpluginHttpResponseFromWire,\n] = createPluginHttpWireRuntime(PLUGIN_HTTP_MAX_REQUEST_BYTES);\n\nexport function rewritePluginHttpRedirect(\n\tstatus: number,\n\tinit: RequestInit | undefined,\n): RequestInit | undefined {\n\tif (!init) return init;\n\tconst method = (init.method ?? \"GET\").toUpperCase();\n\tconst rewriteToGet =\n\t\t((status === 301 || status === 302) && method === \"POST\") ||\n\t\t(status === 303 && method !== \"GET\" && method !== \"HEAD\");\n\tif (!rewriteToGet) return init;\n\n\tconst headers = new Headers(init.headers);\n\tfor (const name of REDIRECT_BODY_HEADERS) headers.delete(name);\n\treturn { ...init, method: \"GET\", headers, body: undefined };\n}\n\nexport function pluginHttpRedirectAction(\n\tstatus: number,\n\thasLocation: boolean,\n\tinit: RequestInit | undefined,\n): PluginHttpRedirectAction {\n\tif (!PLUGIN_HTTP_REDIRECT_STATUSES.has(status) || !hasLocation) return \"return\";\n\tconst mode = init?.redirect ?? \"follow\";\n\tif (mode === \"manual\") return \"return\";\n\tif (mode === \"error\") return \"error\";\n\treturn \"follow\";\n}\n\nexport async function pluginHttpResponseToWire(\n\tresponse: Response,\n\tfinalUrl: string,\n\tredirected: boolean,\n): Promise<PluginHttpResponseWire> {\n\tconst headers: Array<[string, string]> = [];\n\tresponse.headers.forEach((value, key) => headers.push([key, value]));\n\treturn {\n\t\tstatus: response.status,\n\t\tstatusText: response.statusText,\n\t\theaders,\n\t\tfinalUrl: response.url || finalUrl,\n\t\tredirected: response.redirected || redirected,\n\t\tbody: await readPluginHttpBytes(response.body, PLUGIN_HTTP_MAX_RESPONSE_BYTES, \"response\"),\n\t};\n}\n\n/**\n * Generate the dependency-free helper module injected into sandbox wrappers.\n * Generated isolates cannot resolve host package imports, so both runners embed\n * the runtime forms of these canonical functions instead.\n */\nexport function generatePluginHttpWireRuntimeSource(): string {\n\treturn `const [\n\treadPluginHttpBytes,\n\tbufferPluginHttpRequest,\n\tdecoratePluginHttpResponse,\n\tpluginHttpResponseFromWire,\n] = (${createPluginHttpWireRuntime.toString()})(${PLUGIN_HTTP_MAX_REQUEST_BYTES});`;\n}\n"],"mappings":";AAAA,MAAa,gCAAgC,IAAI,OAAO;AACxD,MAAa,iCAAiC,IAAI,OAAO;AACzD,MAAM,wBAAwB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;AACD,MAAM,gCAAgC,IAAI,IAAI;CAAC;CAAK;CAAK;CAAK;CAAK;CAAI,CAAC;AAaxE,SAAS,4BAA4B,iBAAyB;CAE7D,eAAe,oBACd,QACA,OACA,OACsB;AACtB,MAAI,CAAC,OAAQ,QAAO,IAAI,YAAY;EACpC,MAAM,SAAS,OAAO,WAAW;EACjC,MAAM,SAAuB,EAAE;EAC/B,IAAI,QAAQ;AACZ,MAAI;AACH,UAAO,MAAM;IACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;AAC3C,QAAI,KAAM;AACV,aAAS,MAAM;AACf,QAAI,QAAQ,OAAO;AAClB,SAAI;AACH,YAAM,OAAO,QAAQ;aACd;AAGR,WAAM,IAAI,MAAM,eAAe,MAAM,oBAAoB,MAAM,aAAa;;AAE7E,WAAO,KAAK,MAAM;;YAEV;AACT,UAAO,aAAa;;EAGrB,MAAM,QAAQ,IAAI,WAAW,MAAM;EACnC,IAAI,SAAS;AACb,OAAK,MAAM,SAAS,QAAQ;AAC3B,SAAM,IAAI,OAAO,OAAO;AACxB,aAAU,MAAM;;AAEjB,SAAO;;CAGR,eAAe,wBACd,MACmC;AACnC,MAAI,MAAM,SAAS,UAAa,KAAK,SAAS,KAAM,QAAO;EAC3D,MAAM,UAAU,IAAI,SAAS,KAAK,KAAK;EACvC,MAAM,OAAO,MAAM,oBAAoB,QAAQ,MAAM,iBAAiB,UAAU;EAChF,MAAM,UAAU,IAAI,QAAQ,KAAK,QAAQ;AACzC,MAAI,CAAC,QAAQ,IAAI,eAAe,EAAE;GACjC,MAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;AACvD,OAAI,YAAa,SAAQ,IAAI,gBAAgB,YAAY;;EAE1D,MAAM,eAAe,EAAE,GAAG,MAAM;AAChC,UAAQ,eAAe,cAAc,SAAS;AAC9C,SAAO;GAAE,GAAG;GAAc;GAAS,MAAM,IAAI,WAAW,KAAK,CAAC;GAAQ;;CAIvE,SAAS,2BACR,UACA,UACA,YACW;EACX,MAAM,QAAQ,SAAS,MAAM,KAAK,SAAS;AAC3C,SAAO,iBAAiB,UAAU;GACjC,KAAK;IAAE,cAAc;IAAM,OAAO;IAAU;GAC5C,YAAY;IAAE,cAAc;IAAM,OAAO;IAAY;GACrD,OAAO;IACN,cAAc;IACd,aAAa,2BAA2B,OAAO,EAAE,UAAU,WAAW;IACtE;GACD,CAAC;AACF,SAAO;;CAGR,SAAS,2BAA2B,MAAwC;EAC3E,MAAM,iBACL,KAAK,WAAW,OAAO,KAAK,WAAW,OAAO,KAAK,WAAW,OAAO,KAAK,WAAW;AAMtF,SAAO,2BALU,IAAI,SAAS,iBAAiB,OAAO,IAAI,WAAW,KAAK,KAAK,CAAC,QAAQ;GACvF,QAAQ,KAAK;GACb,YAAY,KAAK;GACjB,SAAS,KAAK;GACd,CAAC,EAC0C,KAAK,UAAU,KAAK,WAAW;;AAG5E,QAAO;EACN;EACA;EACA;EACA;EACA;;AAGF,MAAa,CACZ,qBACA,yBACA,4BACA,8BACG,4BAA4B,8BAA8B;AAE9D,SAAgB,0BACf,QACA,MAC0B;AAC1B,KAAI,CAAC,KAAM,QAAO;CAClB,MAAM,UAAU,KAAK,UAAU,OAAO,aAAa;AAInD,KAAI,GAFD,WAAW,OAAO,WAAW,QAAQ,WAAW,UACjD,WAAW,OAAO,WAAW,SAAS,WAAW,QAChC,QAAO;CAE1B,MAAM,UAAU,IAAI,QAAQ,KAAK,QAAQ;AACzC,MAAK,MAAM,QAAQ,sBAAuB,SAAQ,OAAO,KAAK;AAC9D,QAAO;EAAE,GAAG;EAAM,QAAQ;EAAO;EAAS,MAAM;EAAW;;AAG5D,SAAgB,yBACf,QACA,aACA,MAC2B;AAC3B,KAAI,CAAC,8BAA8B,IAAI,OAAO,IAAI,CAAC,YAAa,QAAO;CACvE,MAAM,OAAO,MAAM,YAAY;AAC/B,KAAI,SAAS,SAAU,QAAO;AAC9B,KAAI,SAAS,QAAS,QAAO;AAC7B,QAAO;;AAGR,eAAsB,yBACrB,UACA,UACA,YACkC;CAClC,MAAM,UAAmC,EAAE;AAC3C,UAAS,QAAQ,SAAS,OAAO,QAAQ,QAAQ,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC;AACpE,QAAO;EACN,QAAQ,SAAS;EACjB,YAAY,SAAS;EACrB;EACA,UAAU,SAAS,OAAO;EAC1B,YAAY,SAAS,cAAc;EACnC,MAAM,MAAM,oBAAoB,SAAS,MAAM,gCAAgC,WAAW;EAC1F;;;;;;;AAQF,SAAgB,sCAA8C;AAC7D,QAAO;;;;;OAKD,4BAA4B,UAAU,CAAC,IAAI,8BAA8B"}

package/dist/plugins/secret-redactor.d.mts

@@ -0,0 +1,9 @@
+//#region src/plugins/secret-redactor.d.ts
+interface PluginSecretRedactor {
+  add(key: string, value: string): void;
+  redact<T>(value: T): T;
+}
+declare function createPluginSecretRedactor(): PluginSecretRedactor;
+//#endregion
+export { PluginSecretRedactor, createPluginSecretRedactor };
+//# sourceMappingURL=secret-redactor.d.mts.map

package/dist/plugins/secret-redactor.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-redactor.d.mts","names":[],"sources":["../../src/plugins/secret-redactor.ts"],"mappings":";UAAiB,oBAAA;EAChB,GAAA,CAAI,GAAA,UAAa,KAAA;EACjB,MAAA,IAAU,KAAA,EAAO,CAAA,GAAI,CAAA;AAAA;AAAA,iBAGN,0BAAA,CAAA,GAA8B,oBAAA"}

package/dist/plugins/secret-redactor.mjs

@@ -0,0 +1,51 @@
+//#region src/plugins/secret-redactor.ts
+function createPluginSecretRedactor() {
+	const secretsByKey = /* @__PURE__ */ new Map();
+	const secretValues = () => [...new Set([...secretsByKey.values()].flat().filter((value) => value !== void 0))].toSorted((a, b) => b.length - a.length);
+	const redactString = (value) => {
+		let redacted = value;
+		for (const secret of secretValues()) redacted = redacted.replaceAll(secret, "[REDACTED]");
+		return redacted;
+	};
+	const redactValue = (value, seen) => {
+		if (typeof value === "string") return redactString(value);
+		if (typeof value !== "object" || value === null) return value;
+		const existing = seen.get(value);
+		if (existing !== void 0) return existing;
+		if (value instanceof Error) {
+			const redacted = new Error(redactString(value.message));
+			redacted.name = value.name;
+			redacted.stack = value.stack ? redactString(value.stack) : void 0;
+			seen.set(value, redacted);
+			return redacted;
+		}
+		if (Array.isArray(value)) {
+			const redacted = [];
+			seen.set(value, redacted);
+			for (const entry of value) redacted.push(redactValue(entry, seen));
+			return redacted;
+		}
+		if (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null) {
+			const redacted = {};
+			seen.set(value, redacted);
+			for (const [key, entry] of Object.entries(value)) redacted[redactString(key)] = redactValue(entry, seen);
+			return redacted;
+		}
+		return "[NonPlainObject]";
+	};
+	return {
+		add(key, value) {
+			if (value.length === 0) return;
+			const current = secretsByKey.get(key)?.[0];
+			if (current === value) return;
+			secretsByKey.set(key, current ? [value, current] : [value]);
+		},
+		redact(value) {
+			return redactValue(value, /* @__PURE__ */ new WeakMap());
+		}
+	};
+}
+
+//#endregion
+export { createPluginSecretRedactor };
+//# sourceMappingURL=secret-redactor.mjs.map