diff --git a/.dev.vars.example b/.dev.vars.example
new file mode 100644
index 00000000..c4a2258f
--- /dev/null
+++ b/.dev.vars.example
@@ -0,0 +1,9 @@
+AUTH_CLIENT_ID="replace-with-oauth-client-id-from-auth.fossbilling.net"
+AUTH_CLIENT_SECRET="replace-with-oauth-client-secret-from-auth.fossbilling.net"
+SESSION_SECRET="replace-with-openssl-rand-base64-32"
+# Must match the api repo's ASSERTION_SIGNING_SECRET exactly (same shared secret).
+ASSERTION_SIGNING_SECRET="replace-with-openssl-rand-base64-32"
+# Defaults to https://api.fossbilling.net (see wrangler.jsonc). Uncomment to point
+# at a local `api` repo dev server instead (its ASSERTION_SIGNING_SECRET must then
+# match the value above).
+# EXTENSIONS_API_BASE_URL="http://localhost:8787"
diff --git a/README.md b/README.md
index 590cf6d9..1b5d9b91 100644
--- a/README.md
+++ b/README.md
@@ -23,9 +23,9 @@ Extensions can also be installed manually by downloading an archive, extracting
 
 ## Submitting Extensions
 
-Extension submission is currently paused while self-service submission and management are being prepared.
+Sign in (top-right of the site) and visit [/account](https://extensions.fossbilling.org/account). First-time publishers create a [developer profile](https://extensions.fossbilling.org/account/developer) (publisher name, type, URL) — this takes effect immediately, no approval needed, so you can submit new extensions or edit ones you already publish right away. A moderator can separately mark a profile as approved, shown as a badge; extension submissions themselves still go through moderator review before they appear in (or change) the public directory — see [Authentication](#authentication) below for how ownership and moderation work.
 
-If you maintain an extension and would like it to be listed, please open an issue in this repository with a link to the extension and any relevant installation details.
+Your personal [account profile](https://extensions.fossbilling.org/account/profile) (display name, bio) is separate from your developer profile — it's not shown publicly yet, but is there ahead of future features like comments and ratings.
 
 ## Badges
 
@@ -55,6 +55,36 @@ Install dependencies:
 npm install
 ```
 
+Create local secrets:
+
+```bash
+cp .dev.vars.example .dev.vars
+```
+
+`AUTH_CLIENT_ID` / `AUTH_CLIENT_SECRET` are issued by an admin of the
+[`FOSSBilling/auth`](https://github.com/FOSSBilling/auth) service (dynamic client
+registration is disabled there) — request a client with both
+`https://extensions.fossbilling.org/auth/callback` and
+`http://localhost:4321/auth/callback` as redirect URIs. `SESSION_SECRET` can be any
+random string, e.g. `openssl rand -base64 32`.
+
+`ASSERTION_SIGNING_SECRET` must match the
+[`FOSSBilling/api`](https://github.com/FOSSBilling/api) repo's own
+`ASSERTION_SIGNING_SECRET` exactly — it's a shared secret this app uses to prove a
+signed-in user's identity to that repo's `/extensions/v2` submission endpoints (see
+[Authentication](#authentication)). By default `/account` calls the production api at
+`https://api.fossbilling.net`; set `EXTENSIONS_API_BASE_URL` in `.dev.vars` to point at
+a local `api` dev server instead if you're working on that side too.
+
+Apply pending migrations to your local D1 database — safe to re-run any time, it only
+applies whatever hasn't already run against that database (tracked in D1's own
+`d1_migrations` table, shared with the [`FOSSBilling/api`](https://github.com/FOSSBilling/api)
+repo's migrations against this same database):
+
+```bash
+npm run db:migrate:local
+```
+
 Start the development server:
 
 ```bash
@@ -63,6 +93,102 @@ npm run dev
 
 The site uses Cloudflare D1 for extension data, so some pages require a populated local D1 database or a Wrangler-powered local environment to fully match production.
 
+## Authentication
+
+Sign-in is delegated to FOSSBilling's central auth service at
+[auth.fossbilling.net](https://auth.fossbilling.net) via OAuth2/OIDC (Authorization
+Code + PKCE), implemented under `src/pages/auth/` and `src/lib/`. That service is
+identity-only — it never exposes roles or permissions. Extension ownership,
+submitter/moderator status, and any other authorization concept live entirely in this
+app's own `users` table (`src/lib/db/migrations/`), keyed by the auth service's `sub`
+claim, in the same `DB_EXTENSIONS` D1 database this app already reads from.
+
+Sessions are a self-contained, HMAC-signed cookie minted after the initial token
+exchange — this app does not depend on the auth service's own token lifetimes beyond
+that exchange.
+
+### Extension submission, ownership, and moderation
+
+Signed-in users manage two separate profiles from `/account`:
+
+- **Account profile** (`/account/profile`) — personal `display_name`/`bio`, stored only in
+  this app's own `users` table. Written directly to D1 here, not moderated (not yet shown
+  publicly).
+- **Developer profile** (`/account/developer`) — the publisher identity (`developers` row:
+  name, type, URL, bio, avatar, and a private contact email) shown on your extensions in the
+  directory and on your public developer page at `/developer/[id]`. Writes take effect
+  immediately (`PUT /extensions/v2/developers/me`) — there's no moderation gate on creating or
+  editing one. A moderator can mark a profile **approved** as a trust badge
+  (`/account/moderate/developers`); it's cosmetic, not a publish gate, and any edit clears
+  the badge again until it's re-reviewed. `contact_email` is never read by any public-facing
+  query (`getDeveloperById` in `src/lib/database.ts` deliberately omits it) — only
+  `getDeveloperByOwner`, used for the owner's own self-management form, selects it.
+
+An extension submission always targets an existing, owned developer profile — the two are
+deliberately kept separate (rather than letting extension submission implicitly create/edit
+a developer profile).
+
+A profile's owner can hand it to a different account via a **single-use transfer link**
+(`/account/developer`, "Transfer ownership") — the link is only ever shown once, expires
+after 24 hours, and the recipient must explicitly accept it at `/account/developer/transfer/[token]`
+while signed in (`POST /extensions/v2/developers/transfers/{token}/accept`). An account can own at
+most one developer profile, so accepting fails with a 409 if the recipient already has one.
+
+Profiles with no owner at all (`owner_user_id IS NULL` — pre-v2 rows, or ones detached by the
+api repo's owner-uniqueness migration) show an **Unclaimed** badge on their public page and can
+be **claimed**: a signed-in user requests ownership (`POST /extensions/v2/developers/{id}/claim`,
+with an optional note), and a moderator approves or rejects the request at
+`/account/moderate/developers/claims` — there's no automated verification, so approval is a
+judgment call based on the note and the profile itself. This is how legacy, pre-ownership-tracking
+profiles get linked to an actual account.
+
+Both flows keep the badge/moderation trust model consistent: accepting a transfer or having a
+claim approved clears the `approved` badge, same as any other change to who controls a profile.
+
+The api repo renamed its v2-owned `authors` table (and related schemas/routes) to `developers`
+— "author" implied solo/literary authorship, which never fit an entity that can be an
+organization, gets moderated, and can be transferred or claimed. `extensions.author_id`, the
+FK column on the (v1-owned) `extensions` table itself, was deliberately left unrenamed — only
+the table it points to changed — so `src/lib/database.ts`'s queries still select `e.author_id`
+but alias it to `developer_id` before it reaches any app code.
+
+Extension submissions (new extensions and edits) are the one thing still moderated: they go
+into a queue at `/account/moderate` and only take effect once a moderator approves them — a
+higher bar than developer profiles since they carry download URLs and arbitrary readme/website
+content. All writes to the shared `developers`/`extensions` tables — moderated or not — happen in
+the [`FOSSBilling/api`](https://github.com/FOSSBilling/api) repo's `/extensions/v2` service,
+not here; this app never writes to those tables directly. This app's own
+`getExtensionsByOwner`/`getExtensionById`/`getDeveloperByOwner`/`getDeveloperById`/
+`getExtensionsByDeveloperId` (in `src/lib/database.ts`) read the live tables directly, same as
+the public listings — including the public developer page at `/developer/[id]`, which also
+derives an `unclaimed` flag from `owner_user_id IS NULL` (never exposing the raw owner id
+itself, which would leak another user's identifier publicly).
+
+Each request to `/extensions/v2` is authenticated with a short-lived (60s) HMAC-signed
+bearer assertion this app mints per-request (`src/lib/assertion.ts`), proving the
+signed-in user's identity to the api repo without that repo needing to know anything
+about auth.fossbilling.net. See that repo's `src/lib/auth/` for the verification side.
+
+Moderators are flagged via the `is_moderator` column on this repo's `users` table —
+there's no UI to grant it; run directly against D1:
+
+```bash
+npx wrangler d1 execute DB_EXTENSIONS --remote --command "UPDATE users SET is_moderator = 1 WHERE id = '<sub>'"
+```
+
+Production secrets:
+
+```bash
+npx wrangler secret put AUTH_CLIENT_ID
+npx wrangler secret put AUTH_CLIENT_SECRET
+npx wrangler secret put SESSION_SECRET
+npx wrangler secret put ASSERTION_SIGNING_SECRET
+```
+
+```bash
+npm run db:migrate:remote
+```
+
 ## License
 
 The extension directory website is licensed under the GNU Affero General Public License Version 3. See [LICENSE](./LICENSE) for details.
diff --git a/package-lock.json b/package-lock.json
index 879e388b..963e342b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -523,6 +523,37 @@
         "node": ">=14.0.0"
       }
     },
+    "node_modules/@bruits/satteri-wasm32-wasi/node_modules/@emnapi/core": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.1.tgz",
+      "integrity": "sha512-RSvbQmHzdKzNsLYa/wHrbc3KN4sYLKAdPZxqiM2HATqv/SBk2/ENSHpvXGaLOMcsAyz0poEGqkmmKYG3OWiJEQ==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/wasi-threads": "1.2.2",
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@bruits/satteri-wasm32-wasi/node_modules/@emnapi/runtime": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.1.tgz",
+      "integrity": "sha512-vgj7R3y3Wgx24IQaGPA/R6YFXLHVMOZ0uVEyIQPaWs+rd1AzfEMXlAC22FYwO1XkKR6NPsq7mUandH8oIRdZFw==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@bruits/satteri-wasm32-wasi/node_modules/@emnapi/wasi-threads": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz",
+      "integrity": "sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
     "node_modules/@bruits/satteri-win32-arm64-msvc": {
       "version": "0.9.5",
       "resolved": "https://registry.npmjs.org/@bruits/satteri-win32-arm64-msvc/-/satteri-win32-arm64-msvc-0.9.5.tgz",
@@ -792,20 +823,20 @@
       "license": "MIT"
     },
     "node_modules/@emnapi/core": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.1.tgz",
-      "integrity": "sha512-RSvbQmHzdKzNsLYa/wHrbc3KN4sYLKAdPZxqiM2HATqv/SBk2/ENSHpvXGaLOMcsAyz0poEGqkmmKYG3OWiJEQ==",
+      "version": "1.11.3",
+      "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.3.tgz",
+      "integrity": "sha512-zLpS5asjEb7lq8jYLq37N6XKaE41DIexlY1rF/z4/tIl3wo13Sqm28fRyfIsKZD+NZ8mM5RoKkpW/rBcuoSZSg==",
       "license": "MIT",
       "optional": true,
       "dependencies": {
-        "@emnapi/wasi-threads": "1.2.2",
+        "@emnapi/wasi-threads": "1.2.3",
         "tslib": "^2.4.0"
       }
     },
     "node_modules/@emnapi/runtime": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.1.tgz",
-      "integrity": "sha512-vgj7R3y3Wgx24IQaGPA/R6YFXLHVMOZ0uVEyIQPaWs+rd1AzfEMXlAC22FYwO1XkKR6NPsq7mUandH8oIRdZFw==",
+      "version": "1.11.3",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.3.tgz",
+      "integrity": "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA==",
       "license": "MIT",
       "optional": true,
       "dependencies": {
@@ -813,9 +844,9 @@
       }
     },
     "node_modules/@emnapi/wasi-threads": {
-      "version": "1.2.2",
-      "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz",
-      "integrity": "sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==",
+      "version": "1.2.3",
+      "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.3.tgz",
+      "integrity": "sha512-ELEBe8PsLvvJ6QMr0zLt8ffvOHW/dc1m3CEzNMg7aJUv3bMaoDtw2TXyDAwkYBuroxxuHEwhRTLJSe5sya547g==",
       "license": "MIT",
       "optional": true,
       "dependencies": {
@@ -1248,9 +1279,9 @@
       }
     },
     "node_modules/@img/sharp-darwin-arm64": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.2.tgz",
-      "integrity": "sha512-eEieHsMksAW4IiO5NzauESRl2D2qz3J/kwUxUrSfV06A93eEaRfMpHXyUb1mAqrR7i8U9A0GRqE9pjn6u1Jjpg==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.3.tgz",
+      "integrity": "sha512-RMnFX7YQsMoh7lWfcM4NEHHymBX/rLuKNPVM84XE9ONPcaSCDgE7CHIHpSgPcO2xcRthgBy1HfNO319mwhIAkg==",
       "cpu": [
         "arm64"
       ],
@@ -1266,13 +1297,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-darwin-arm64": "1.3.1"
+        "@img/sharp-libvips-darwin-arm64": "1.3.2"
       }
     },
     "node_modules/@img/sharp-darwin-x64": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.2.tgz",
-      "integrity": "sha512-BaktuGPCeHJMARpodR8jK4uKiZrPAy9WrfQW0sdI37clracq8Bp01AYS3SZgi5FS/y5twa9t4+LIuuxQjqRrWw==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.3.tgz",
+      "integrity": "sha512-Xo+5uFBtLN0BKqieTxiFzFPQAUlBbbH5iBKyRX/z1JrbnYsHTfKJnUfL8+p2TPXr1pXqao4eeL4Rl144uDpK9w==",
       "cpu": [
         "x64"
       ],
@@ -1288,20 +1319,20 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-darwin-x64": "1.3.1"
+        "@img/sharp-libvips-darwin-x64": "1.3.2"
       }
     },
     "node_modules/@img/sharp-freebsd-wasm32": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.2.tgz",
-      "integrity": "sha512-YoAxdnd8hPUkvLHd3bWY+YA8nw3xM/RyRopYucNsWHVSan8NLVM3X2volsfoRDcXdUJPg6tXahSd7HXPK7lRnw==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.3.tgz",
+      "integrity": "sha512-lUxcqWIj2wMQ9BrwNjngcr1gWUr5xgaGThBRqPPalIC2n67Cqj1uPh8NnA/ZhAg8hUbKl+kVHKwgUIwe6ZYPrg==",
       "license": "Apache-2.0",
       "optional": true,
       "os": [
         "freebsd"
       ],
       "dependencies": {
-        "@img/sharp-wasm32": "0.35.2"
+        "@img/sharp-wasm32": "0.35.3"
       },
       "engines": {
         "node": ">=20.9.0"
@@ -1311,9 +1342,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-darwin-arm64": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.1.tgz",
-      "integrity": "sha512-4V/M3roRMTYjiwZY9IOVQOE8OyeCxFAkYmyZDrZl51uOKjibm3oeEJ4WAmLxutAfzFbC9jqUiPs2gbnGflH+7g==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.2.tgz",
+      "integrity": "sha512-9J6ypZFpQBj4YnePGoq/S38w6nz+vqg5WZLrLGY4YuSemdMq47GMLBPO42MzwdGwpg/agZ7xzZcFHa48xlywfg==",
       "cpu": [
         "arm64"
       ],
@@ -1327,9 +1358,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-darwin-x64": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.1.tgz",
-      "integrity": "sha512-c0/DxItpJv2+dGhgycJBBgotdqruGYDvA79drdh0MD1dFpy7JzJ/PlXwi1H4rFf0eTy8tgbI91aHDnZIceY3jQ==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.2.tgz",
+      "integrity": "sha512-m2pW1n6cns9VaubNwsZ+c3CRYjxNQWgJ5gPlnL1nbBcpkBvFm6SCFN5o0psFHI8w9n11NKhFkeEDns98tiqbEw==",
       "cpu": [
         "x64"
       ],
@@ -1343,9 +1374,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-arm": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.1.tgz",
-      "integrity": "sha512-aGGy9aWzXgHBG7HNyQPWorZthlp7+x6fDRoPAQbGO3ThcttuTyKIx3NuSHb6zb4gBNq6/yNn9f1cy9nFKS/Vmg==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.2.tgz",
+      "integrity": "sha512-1eMLzy92I4J6rmi4mAT8yC3HxOtniyGELlzGbNMLLeqe052ahFQ0h6LFq+lh5DsDIdYViIDst08abvSbcEdLXQ==",
       "cpu": [
         "arm"
       ],
@@ -1362,9 +1393,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-arm64": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.1.tgz",
-      "integrity": "sha512-JznefmcK9j1JKPz8AkQDh89kjojubyfOasWBPKfzMIhPwsgDy9evpE/naJTXXXmghS1iFwR8u/kTwh/I2/+GCw==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.2.tgz",
+      "integrity": "sha512-dqVSFynCox4C/J8kT16V7SIFAns0IjgLwkvYT7p8LQVmJ5OS5b6tI9IGflxTeuBS//zXeFIUbwt5dwxyZ17cnA==",
       "cpu": [
         "arm64"
       ],
@@ -1381,9 +1412,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-ppc64": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.1.tgz",
-      "integrity": "sha512-1EkwGNCZk6iWNCMWqrvdJ+r1j0PT1zIz60CNPhYnJlK/zyeWqlsPZIe+ocBVqPF8k/Ssee/NCk+tE9Ryrko6ng==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.2.tgz",
+      "integrity": "sha512-3z0NHDxD6n5I9gc05U1eW1AyRm+Gznzq3naMrthPNqE6oYykcogW0l/jfpJdjYnuNl8R7yI9pNbE1XiUeyq0Aw==",
       "cpu": [
         "ppc64"
       ],
@@ -1400,9 +1431,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-riscv64": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.1.tgz",
-      "integrity": "sha512-Ilays+w2bXdnxzxtQdmXR62u8o8GYa3eL4+Gr+1KiE4xperMZUslRaVPJwwPkzlHEjGfXAfRVAa/7CYCtSqsBw==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.2.tgz",
+      "integrity": "sha512-bsb4rI+NldGOsXuej2r8OdSS8+zXDVaCWxyWrcv6kneTOlgAHtZABRzBBCwdsPiD90J4myNJuHpg6kA20ImW/w==",
       "cpu": [
         "riscv64"
       ],
@@ -1419,9 +1450,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-s390x": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.1.tgz",
-      "integrity": "sha512-VfBwVHQTbRoj4XlpA/KLZ7ltgMpz+4WSejFzQ+GnoImjo1PtEJ59QB2qR1xQEeRPYIkNrPIm2L4cICMvz4C2ew==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.2.tgz",
+      "integrity": "sha512-/ABshyj8gCpyIrNXnHn4LorDJ0HHm1VhXPBlxZ8zAtfVPAaSafXPGn+sUSIRiwaSBy0mmFjSjiXI5mkcwdChKQ==",
       "cpu": [
         "s390x"
       ],
@@ -1438,9 +1469,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-x64": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.1.tgz",
-      "integrity": "sha512-+c8ukgwU62DS54nCAjw7keOfHUkmr0B5QHEdcOqRnodF/MNXJbVI8Eopoj4B/0H8Asr65I+A4Amrn7a85/md6A==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.2.tgz",
+      "integrity": "sha512-ITPEtgffGJ0S6G9dRyw/366tJQqFRcHWPHhC+Stpg3Z8AEMrDrTr2lhdz4f/Y/HMbRh//7Z5mBzEpVdi62Oc3w==",
       "cpu": [
         "x64"
       ],
@@ -1457,9 +1488,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linuxmusl-arm64": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.1.tgz",
-      "integrity": "sha512-qlKb/pwbkAi1WMsJrYHk7CuDrd12s27U2QnRhFYUoJNrRCmkosMTttuRFat/DDB3IlDm5qE1TJgZ4JDnHX8Ldw==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.2.tgz",
+      "integrity": "sha512-zE9EdiUzUmg5mDT5a1rk5fYJ6GWPloTwWBYDS14naqHsL+EaMpDj1AWnpLgh3u0YCORv2Tt50wrcrpYqkP97Kw==",
       "cpu": [
         "arm64"
       ],
@@ -1476,9 +1507,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linuxmusl-x64": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.1.tgz",
-      "integrity": "sha512-yO21HwoUVLN8Qa+/SBjQLMYwBWAVJjeGPNe+hc0OUeMeifEtJqu5a1c4HayE1nNpDih9y3/KkoltfkDodmKAlg==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.2.tgz",
+      "integrity": "sha512-m0lrLiUt+lBYnCFr8qV/65yMR4E/c7/wf78I5eKTdkEakFAlZ9QlzEM3QIhhAwVeUhLAHLcCq7a7Vszq/oFNZQ==",
       "cpu": [
         "x64"
       ],
@@ -1495,9 +1526,9 @@
       }
     },
     "node_modules/@img/sharp-linux-arm": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.2.tgz",
-      "integrity": "sha512-SE4kzF2mepn6z+6E7L6lsV8FzuLL6IPQdyX8ZiwROAG/G8td+hP/m7FsFPwidtrF19gvajuC9l6TxAVcsA4S7A==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.3.tgz",
+      "integrity": "sha512-affVWCTLooy8TSxbDx2qkzuDeaWLNVBA+P//FNBirHsXpP2fuBhk5AuboYUnrDnzoXes8GFjpTx0SBFOCRg+FA==",
       "cpu": [
         "arm"
       ],
@@ -1516,13 +1547,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-arm": "1.3.1"
+        "@img/sharp-libvips-linux-arm": "1.3.2"
       }
     },
     "node_modules/@img/sharp-linux-arm64": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.2.tgz",
-      "integrity": "sha512-af12Pnd0ZGu2HfP8NayB0kk6eC/lrfbQE6HlR4jD+34wdJ1Vw9TF6TMn6ZvffT+WgqVsl0hRbmNvz2u/23VmwA==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.3.tgz",
+      "integrity": "sha512-QgKDspHPnrU+GQ55XPhGwyhC8acLVOOSyAvo1oVfFmrIXLkDNmGWzAfDZ4xK8oSA1qBQrALcHX0G5UZni/SuFQ==",
       "cpu": [
         "arm64"
       ],
@@ -1541,13 +1572,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-arm64": "1.3.1"
+        "@img/sharp-libvips-linux-arm64": "1.3.2"
       }
     },
     "node_modules/@img/sharp-linux-ppc64": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.2.tgz",
-      "integrity": "sha512-hYSBm7zcNtDCozCxQHYZJiu63b/bXsgRZuOxCIBZsStMM9Vap47iFHdbX4kCvQsblPB/k+clhELpdQJHQLSHvg==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.3.tgz",
+      "integrity": "sha512-sMd8rDxmpLOwv/7N44klFjOD5DUO7FLdjiXDI0hoxYaf7Ar262dQIEkosE98bps+5HPLtp/EvNqeqQtOycP/IA==",
       "cpu": [
         "ppc64"
       ],
@@ -1566,13 +1597,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-ppc64": "1.3.1"
+        "@img/sharp-libvips-linux-ppc64": "1.3.2"
       }
     },
     "node_modules/@img/sharp-linux-riscv64": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.2.tgz",
-      "integrity": "sha512-qQt0Kc13+Hoan/Awq/qMSQw3L+RI1NCRPgD5cUJ/1WSSmIoysLOc72jlRM3E0OHN9Yr313jgeQ2T+zW+F03QFA==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.3.tgz",
+      "integrity": "sha512-0Eob78yjlYPfL5vMNWAW55l3R9Y6BQS/gOfe0ZcP9mEz9ohhKSt4im1hayiknXgf8AWrFqMvJcKIdmLmEe7yeQ==",
       "cpu": [
         "riscv64"
       ],
@@ -1591,13 +1622,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-riscv64": "1.3.1"
+        "@img/sharp-libvips-linux-riscv64": "1.3.2"
       }
     },
     "node_modules/@img/sharp-linux-s390x": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.2.tgz",
-      "integrity": "sha512-E4fLLfRPzDLlEeDaTzI98OFLcv++WL5ChLLMwPoVd0CIoZQqupBSNbOisPL5am9XsbQ9T84+iiMpUvbFtkunbA==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.3.tgz",
+      "integrity": "sha512-KgAxQ0DxpNOq1rG2t5cgTgShJFGSuU7XO45cqC+1NVOuZnP6tlgZRuSYOfNupGkHID0o3cJOsw4DVeJpMovcGw==",
       "cpu": [
         "s390x"
       ],
@@ -1616,13 +1647,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-s390x": "1.3.1"
+        "@img/sharp-libvips-linux-s390x": "1.3.2"
       }
     },
     "node_modules/@img/sharp-linux-x64": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.2.tgz",
-      "integrity": "sha512-gi0zFJJRLswfCZmHtJdikXPOc5u7qamSOS3NHedLqLd4W8Q0NqjdBr6TTRIgsfFjqfTsHFgdfvJ9LwqSgcHiAA==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.3.tgz",
+      "integrity": "sha512-8pqvxubL2PGdhlPy6GLqzDYMUjyRmKAwKHYKixpdJYBUK7PJ0C029XdsnpFIdgRZG68fZiGdHVWcKPvtiPB4cA==",
       "cpu": [
         "x64"
       ],
@@ -1641,13 +1672,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-x64": "1.3.1"
+        "@img/sharp-libvips-linux-x64": "1.3.2"
       }
     },
     "node_modules/@img/sharp-linuxmusl-arm64": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.2.tgz",
-      "integrity": "sha512-siWbOW1u6HFnFLrp0waKyW7VEf7jYvcDWdrXEFa8AkdAQgEvuu5Fz8/Y70w9EeqAdwDtfU012BhEHHaDqvQNzg==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.3.tgz",
+      "integrity": "sha512-Vz0iQjzzcSX3HCbfwFfCSG/9SCIqyO0mH2sXyiHaAYfBk0cRsCWXRyQYX0ovCK/PAQBbTzQ0dsPQHh5MAFL59w==",
       "cpu": [
         "arm64"
       ],
@@ -1666,13 +1697,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linuxmusl-arm64": "1.3.1"
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.2"
       }
     },
     "node_modules/@img/sharp-linuxmusl-x64": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.2.tgz",
-      "integrity": "sha512-YBqMMcjDi4QGYiSn4vNOYBhmlC4z5AXqkOUUqI2e0AFA4urNv4ESgOgwNl3K+4etQhha0twXlzeF20bbULm9Yg==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.3.tgz",
+      "integrity": "sha512-6O1NPKcDVj9QEdg7Hx549EX8U0rp6yXQERqru6yRN7fGBn32UvIRJUlWnk+8xDCiG76hXVBbX82NZ/ZKr0euIg==",
       "cpu": [
         "x64"
       ],
@@ -1691,13 +1722,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linuxmusl-x64": "1.3.1"
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.2"
       }
     },
     "node_modules/@img/sharp-wasm32": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.2.tgz",
-      "integrity": "sha512-Mrv4JQNYVQ94xH+jzZ9r+gowleN8mv2FTgKT+PI6bx5C0G8TdNYndu161pg2i7uoBwxy2ImPMHrJOM2LZef7Bw==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.3.tgz",
+      "integrity": "sha512-cZ0XkcYGpHZkqW6iCkqTcmUC0CD9DhD5d/qeZlZkfRBn6GnHniZXLUo5+9xw8Iv76YE6LQFN9YNBlKREcCG76w==",
       "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT",
       "optional": true,
       "dependencies": {
@@ -1711,16 +1742,16 @@
       }
     },
     "node_modules/@img/sharp-webcontainers-wasm32": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.2.tgz",
-      "integrity": "sha512-QNV27pxs9wpApEiCfvHM1RDoP1w1+2KrUWWDPEhEwg+latvOrfuhWrHWZKwdSFwU6jh3myjw/yOCRsUIuOft3g==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.3.tgz",
+      "integrity": "sha512-2rnq7bX3NzeR2T4YWgz8qiG4h3TSdMe+vN1iQXpJleSJ3SM5zQ8Fy2SyyXAWlbxpEZ2Y+Z4u1BePgJEYbSy80Q==",
       "cpu": [
         "wasm32"
       ],
       "license": "Apache-2.0",
       "optional": true,
       "dependencies": {
-        "@img/sharp-wasm32": "0.35.2"
+        "@img/sharp-wasm32": "0.35.3"
       },
       "engines": {
         "node": ">=20.9.0"
@@ -1730,9 +1761,9 @@
       }
     },
     "node_modules/@img/sharp-win32-arm64": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.2.tgz",
-      "integrity": "sha512-BiVRYc/t6/Vl3e1hBx0hugG4oN9Pydf4fgMSpxTQJmwGUg/YoXTWHiFeRymHfCZzifxu4F4rpk/I67D0LQ20wQ==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.3.tgz",
+      "integrity": "sha512-4bPwFdMbeC4JQ8L8LOyWp6nsHcboP5fxkp6iPOXz2Vg49R42TuMs2whkJ5OAP4/Ul035qOzy0AecOF9VOscn4w==",
       "cpu": [
         "arm64"
       ],
@@ -1749,9 +1780,9 @@
       }
     },
     "node_modules/@img/sharp-win32-ia32": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.2.tgz",
-      "integrity": "sha512-YYEhx9PImCC7T0tI8JDMi4DB9LwLCXCU5OWNYEXAxh5Q1ShKkyC6byxzoBJ3gEFDnH2lQckWuDe70G7mB2XJog==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.3.tgz",
+      "integrity": "sha512-r53mXsBN6lFUDiST764SvgwUdHAqM4rPAiDzAmf4fLoB6X/rkfyTrLCg6+g17wJJiCmB3JYgHuUldCWUIRFSXw==",
       "cpu": [
         "ia32"
       ],
@@ -1768,9 +1799,9 @@
       }
     },
     "node_modules/@img/sharp-win32-x64": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.2.tgz",
-      "integrity": "sha512-imoOyBcoM/iiUr4J6VPpCNjPnjvP/Gks95898yB8YqoGGYmHYbOyCuNv9FMhFgtaiHFGbHW8bxKqRV6VjtXThQ==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.3.tgz",
+      "integrity": "sha512-D4y1vNeZrIIJCN+uHaWVtH86B+aCrdMYYjicy9pXHvbGZeGYLLSd3wdVuC37FxVXlU1ARsk84eKWfWMXGYEqvA==",
       "cpu": [
         "x64"
       ],
@@ -1832,9 +1863,9 @@
       }
     },
     "node_modules/@lucide/astro": {
-      "version": "1.26.0",
-      "resolved": "https://registry.npmjs.org/@lucide/astro/-/astro-1.26.0.tgz",
-      "integrity": "sha512-Di3/KMcJppA6d8V+ysfDnEBRHaxr2oTAHbPtqpKKs7DFwtOPbAYdfH6yDATPq/TW//Az3eSOd9KmNBwCVhMZ6Q==",
+      "version": "1.27.0",
+      "resolved": "https://registry.npmjs.org/@lucide/astro/-/astro-1.27.0.tgz",
+      "integrity": "sha512-+fhvqNEKqKCPb3qPGDd5xZCMN1o0dtYmNB5tIjtal2FvXQ0X+mXG3pZwefbEPVL7pMA3PkiABnDoIZsM5dOW8Q==",
       "license": "ISC",
       "peerDependencies": {
         "astro": "^4 || ^5 || ^6 || ^7"
@@ -2127,6 +2158,37 @@
         "node": "^20.19.0 || >=22.12.0"
       }
     },
+    "node_modules/@rolldown/binding-wasm32-wasi/node_modules/@emnapi/core": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.1.tgz",
+      "integrity": "sha512-RSvbQmHzdKzNsLYa/wHrbc3KN4sYLKAdPZxqiM2HATqv/SBk2/ENSHpvXGaLOMcsAyz0poEGqkmmKYG3OWiJEQ==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/wasi-threads": "1.2.2",
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@rolldown/binding-wasm32-wasi/node_modules/@emnapi/runtime": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.1.tgz",
+      "integrity": "sha512-vgj7R3y3Wgx24IQaGPA/R6YFXLHVMOZ0uVEyIQPaWs+rd1AzfEMXlAC22FYwO1XkKR6NPsq7mUandH8oIRdZFw==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@rolldown/binding-wasm32-wasi/node_modules/@emnapi/wasi-threads": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz",
+      "integrity": "sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
     "node_modules/@rolldown/binding-win32-arm64-msvc": {
       "version": "1.1.5",
       "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.1.5.tgz",
@@ -4389,69 +4451,652 @@
         "node": ">=22.0.0"
       }
     },
-    "node_modules/mrmime": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz",
-      "integrity": "sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=10"
-      }
-    },
-    "node_modules/muggle-string": {
-      "version": "0.4.1",
-      "resolved": "https://registry.npmjs.org/muggle-string/-/muggle-string-0.4.1.tgz",
-      "integrity": "sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==",
-      "license": "MIT"
-    },
-    "node_modules/nanoid": {
-      "version": "3.3.16",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
-      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/ai"
-        }
+    "node_modules/miniflare/node_modules/@img/sharp-darwin-arm64": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.2.tgz",
+      "integrity": "sha512-eEieHsMksAW4IiO5NzauESRl2D2qz3J/kwUxUrSfV06A93eEaRfMpHXyUb1mAqrR7i8U9A0GRqE9pjn6u1Jjpg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
       ],
-      "license": "MIT",
-      "bin": {
-        "nanoid": "bin/nanoid.cjs"
-      },
       "engines": {
-        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-arm64": "1.3.1"
       }
     },
-    "node_modules/neotraverse": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/neotraverse/-/neotraverse-1.0.1.tgz",
-      "integrity": "sha512-WmmLty1YWwJl9yZi77v2dVIV6X2kuYV8YYBI/G3LWGKdGHmHUvL1z7FW0iDvEvGAwNEoc5x1tOOOyDnf5jJw/w==",
-      "license": "MIT",
+    "node_modules/miniflare/node_modules/@img/sharp-darwin-x64": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.2.tgz",
+      "integrity": "sha512-BaktuGPCeHJMARpodR8jK4uKiZrPAy9WrfQW0sdI37clracq8Bp01AYS3SZgi5FS/y5twa9t4+LIuuxQjqRrWw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
       "engines": {
-        "node": ">= 10"
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-x64": "1.3.1"
       }
     },
-    "node_modules/nlcst-to-string": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/nlcst-to-string/-/nlcst-to-string-4.0.0.tgz",
-      "integrity": "sha512-YKLBCcUYKAg0FNlOBT6aI91qFmSiFKiluk655WzPF+DDMA02qIyy8uiRqI8QXtcFpEvll12LpL5MXqEmAZ+dcA==",
-      "license": "MIT",
+    "node_modules/miniflare/node_modules/@img/sharp-freebsd-wasm32": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.2.tgz",
+      "integrity": "sha512-YoAxdnd8hPUkvLHd3bWY+YA8nw3xM/RyRopYucNsWHVSan8NLVM3X2volsfoRDcXdUJPg6tXahSd7HXPK7lRnw==",
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
       "dependencies": {
-        "@types/nlcst": "^2.0.0"
+        "@img/sharp-wasm32": "0.35.2"
+      },
+      "engines": {
+        "node": ">=20.9.0"
       },
       "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
+        "url": "https://opencollective.com/libvips"
       }
     },
-    "node_modules/node-fetch-native": {
-      "version": "1.6.7",
-      "resolved": "https://registry.npmjs.org/node-fetch-native/-/node-fetch-native-1.6.7.tgz",
-      "integrity": "sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==",
-      "license": "MIT"
-    },
-    "node_modules/node-mock-http": {
-      "version": "1.0.4",
+    "node_modules/miniflare/node_modules/@img/sharp-libvips-darwin-arm64": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.1.tgz",
+      "integrity": "sha512-4V/M3roRMTYjiwZY9IOVQOE8OyeCxFAkYmyZDrZl51uOKjibm3oeEJ4WAmLxutAfzFbC9jqUiPs2gbnGflH+7g==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-libvips-darwin-x64": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.1.tgz",
+      "integrity": "sha512-c0/DxItpJv2+dGhgycJBBgotdqruGYDvA79drdh0MD1dFpy7JzJ/PlXwi1H4rFf0eTy8tgbI91aHDnZIceY3jQ==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-libvips-linux-arm": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.1.tgz",
+      "integrity": "sha512-aGGy9aWzXgHBG7HNyQPWorZthlp7+x6fDRoPAQbGO3ThcttuTyKIx3NuSHb6zb4gBNq6/yNn9f1cy9nFKS/Vmg==",
+      "cpu": [
+        "arm"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-libvips-linux-arm64": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.1.tgz",
+      "integrity": "sha512-JznefmcK9j1JKPz8AkQDh89kjojubyfOasWBPKfzMIhPwsgDy9evpE/naJTXXXmghS1iFwR8u/kTwh/I2/+GCw==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-libvips-linux-ppc64": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.1.tgz",
+      "integrity": "sha512-1EkwGNCZk6iWNCMWqrvdJ+r1j0PT1zIz60CNPhYnJlK/zyeWqlsPZIe+ocBVqPF8k/Ssee/NCk+tE9Ryrko6ng==",
+      "cpu": [
+        "ppc64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-libvips-linux-riscv64": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.1.tgz",
+      "integrity": "sha512-Ilays+w2bXdnxzxtQdmXR62u8o8GYa3eL4+Gr+1KiE4xperMZUslRaVPJwwPkzlHEjGfXAfRVAa/7CYCtSqsBw==",
+      "cpu": [
+        "riscv64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-libvips-linux-s390x": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.1.tgz",
+      "integrity": "sha512-VfBwVHQTbRoj4XlpA/KLZ7ltgMpz+4WSejFzQ+GnoImjo1PtEJ59QB2qR1xQEeRPYIkNrPIm2L4cICMvz4C2ew==",
+      "cpu": [
+        "s390x"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-libvips-linux-x64": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.1.tgz",
+      "integrity": "sha512-+c8ukgwU62DS54nCAjw7keOfHUkmr0B5QHEdcOqRnodF/MNXJbVI8Eopoj4B/0H8Asr65I+A4Amrn7a85/md6A==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-libvips-linuxmusl-arm64": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.1.tgz",
+      "integrity": "sha512-qlKb/pwbkAi1WMsJrYHk7CuDrd12s27U2QnRhFYUoJNrRCmkosMTttuRFat/DDB3IlDm5qE1TJgZ4JDnHX8Ldw==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-libvips-linuxmusl-x64": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.1.tgz",
+      "integrity": "sha512-yO21HwoUVLN8Qa+/SBjQLMYwBWAVJjeGPNe+hc0OUeMeifEtJqu5a1c4HayE1nNpDih9y3/KkoltfkDodmKAlg==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-linux-arm": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.2.tgz",
+      "integrity": "sha512-SE4kzF2mepn6z+6E7L6lsV8FzuLL6IPQdyX8ZiwROAG/G8td+hP/m7FsFPwidtrF19gvajuC9l6TxAVcsA4S7A==",
+      "cpu": [
+        "arm"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm": "1.3.1"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-linux-arm64": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.2.tgz",
+      "integrity": "sha512-af12Pnd0ZGu2HfP8NayB0kk6eC/lrfbQE6HlR4jD+34wdJ1Vw9TF6TMn6ZvffT+WgqVsl0hRbmNvz2u/23VmwA==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm64": "1.3.1"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-linux-ppc64": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.2.tgz",
+      "integrity": "sha512-hYSBm7zcNtDCozCxQHYZJiu63b/bXsgRZuOxCIBZsStMM9Vap47iFHdbX4kCvQsblPB/k+clhELpdQJHQLSHvg==",
+      "cpu": [
+        "ppc64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-ppc64": "1.3.1"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-linux-riscv64": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.2.tgz",
+      "integrity": "sha512-qQt0Kc13+Hoan/Awq/qMSQw3L+RI1NCRPgD5cUJ/1WSSmIoysLOc72jlRM3E0OHN9Yr313jgeQ2T+zW+F03QFA==",
+      "cpu": [
+        "riscv64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-riscv64": "1.3.1"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-linux-s390x": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.2.tgz",
+      "integrity": "sha512-E4fLLfRPzDLlEeDaTzI98OFLcv++WL5ChLLMwPoVd0CIoZQqupBSNbOisPL5am9XsbQ9T84+iiMpUvbFtkunbA==",
+      "cpu": [
+        "s390x"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-s390x": "1.3.1"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-linux-x64": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.2.tgz",
+      "integrity": "sha512-gi0zFJJRLswfCZmHtJdikXPOc5u7qamSOS3NHedLqLd4W8Q0NqjdBr6TTRIgsfFjqfTsHFgdfvJ9LwqSgcHiAA==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-x64": "1.3.1"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-linuxmusl-arm64": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.2.tgz",
+      "integrity": "sha512-siWbOW1u6HFnFLrp0waKyW7VEf7jYvcDWdrXEFa8AkdAQgEvuu5Fz8/Y70w9EeqAdwDtfU012BhEHHaDqvQNzg==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.1"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-linuxmusl-x64": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.2.tgz",
+      "integrity": "sha512-YBqMMcjDi4QGYiSn4vNOYBhmlC4z5AXqkOUUqI2e0AFA4urNv4ESgOgwNl3K+4etQhha0twXlzeF20bbULm9Yg==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.1"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-wasm32": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.2.tgz",
+      "integrity": "sha512-Mrv4JQNYVQ94xH+jzZ9r+gowleN8mv2FTgKT+PI6bx5C0G8TdNYndu161pg2i7uoBwxy2ImPMHrJOM2LZef7Bw==",
+      "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/runtime": "^1.11.1"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-webcontainers-wasm32": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.2.tgz",
+      "integrity": "sha512-QNV27pxs9wpApEiCfvHM1RDoP1w1+2KrUWWDPEhEwg+latvOrfuhWrHWZKwdSFwU6jh3myjw/yOCRsUIuOft3g==",
+      "cpu": [
+        "wasm32"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "dependencies": {
+        "@img/sharp-wasm32": "0.35.2"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-win32-arm64": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.2.tgz",
+      "integrity": "sha512-BiVRYc/t6/Vl3e1hBx0hugG4oN9Pydf4fgMSpxTQJmwGUg/YoXTWHiFeRymHfCZzifxu4F4rpk/I67D0LQ20wQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-win32-ia32": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.2.tgz",
+      "integrity": "sha512-YYEhx9PImCC7T0tI8JDMi4DB9LwLCXCU5OWNYEXAxh5Q1ShKkyC6byxzoBJ3gEFDnH2lQckWuDe70G7mB2XJog==",
+      "cpu": [
+        "ia32"
+      ],
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/@img/sharp-win32-x64": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.2.tgz",
+      "integrity": "sha512-imoOyBcoM/iiUr4J6VPpCNjPnjvP/Gks95898yB8YqoGGYmHYbOyCuNv9FMhFgtaiHFGbHW8bxKqRV6VjtXThQ==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/miniflare/node_modules/sharp": {
+      "version": "0.35.2",
+      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.35.2.tgz",
+      "integrity": "sha512-FVtFjtBCMiJS6yb5CX7Sop45WFMpeGw6oRKuJnXYgf/f1ms/D7LE/ZUSNxnW7rZ/dbslQWYkoqFHGPaDBtaK4w==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@img/colour": "^1.1.0",
+        "detect-libc": "^2.1.2",
+        "semver": "^7.8.4"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-darwin-arm64": "0.35.2",
+        "@img/sharp-darwin-x64": "0.35.2",
+        "@img/sharp-freebsd-wasm32": "0.35.2",
+        "@img/sharp-libvips-darwin-arm64": "1.3.1",
+        "@img/sharp-libvips-darwin-x64": "1.3.1",
+        "@img/sharp-libvips-linux-arm": "1.3.1",
+        "@img/sharp-libvips-linux-arm64": "1.3.1",
+        "@img/sharp-libvips-linux-ppc64": "1.3.1",
+        "@img/sharp-libvips-linux-riscv64": "1.3.1",
+        "@img/sharp-libvips-linux-s390x": "1.3.1",
+        "@img/sharp-libvips-linux-x64": "1.3.1",
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.1",
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.1",
+        "@img/sharp-linux-arm": "0.35.2",
+        "@img/sharp-linux-arm64": "0.35.2",
+        "@img/sharp-linux-ppc64": "0.35.2",
+        "@img/sharp-linux-riscv64": "0.35.2",
+        "@img/sharp-linux-s390x": "0.35.2",
+        "@img/sharp-linux-x64": "0.35.2",
+        "@img/sharp-linuxmusl-arm64": "0.35.2",
+        "@img/sharp-linuxmusl-x64": "0.35.2",
+        "@img/sharp-webcontainers-wasm32": "0.35.2",
+        "@img/sharp-win32-arm64": "0.35.2",
+        "@img/sharp-win32-ia32": "0.35.2",
+        "@img/sharp-win32-x64": "0.35.2"
+      }
+    },
+    "node_modules/mrmime": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz",
+      "integrity": "sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/muggle-string": {
+      "version": "0.4.1",
+      "resolved": "https://registry.npmjs.org/muggle-string/-/muggle-string-0.4.1.tgz",
+      "integrity": "sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==",
+      "license": "MIT"
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.16",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
+      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
+    "node_modules/neotraverse": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/neotraverse/-/neotraverse-1.0.1.tgz",
+      "integrity": "sha512-WmmLty1YWwJl9yZi77v2dVIV6X2kuYV8YYBI/G3LWGKdGHmHUvL1z7FW0iDvEvGAwNEoc5x1tOOOyDnf5jJw/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 10"
+      }
+    },
+    "node_modules/nlcst-to-string": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/nlcst-to-string/-/nlcst-to-string-4.0.0.tgz",
+      "integrity": "sha512-YKLBCcUYKAg0FNlOBT6aI91qFmSiFKiluk655WzPF+DDMA02qIyy8uiRqI8QXtcFpEvll12LpL5MXqEmAZ+dcA==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/nlcst": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
+    "node_modules/node-fetch-native": {
+      "version": "1.6.7",
+      "resolved": "https://registry.npmjs.org/node-fetch-native/-/node-fetch-native-1.6.7.tgz",
+      "integrity": "sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==",
+      "license": "MIT"
+    },
+    "node_modules/node-mock-http": {
+      "version": "1.0.4",
       "resolved": "https://registry.npmjs.org/node-mock-http/-/node-mock-http-1.0.4.tgz",
       "integrity": "sha512-8DY+kFsDkNXy1sJglUfuODx1/opAGJGyrTuFqEoN90oRc2Vk0ZbD4K2qmKXBBEhZQzdKHIVfEJpDU8Ak2NJEvQ==",
       "license": "MIT"
@@ -4646,9 +5291,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.22",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.22.tgz",
-      "integrity": "sha512-KBDEIpLrvpv16pp3K0Fw+UCoZfopFjjgeB+0tA/aaThfEE74kKDLrgg603YvOWJyg3+WYtyq3xYsQWsIyZlPqQ==",
+      "version": "8.5.23",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.23.tgz",
+      "integrity": "sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==",
       "funding": [
         {
           "type": "opencollective",
@@ -5015,9 +5660,9 @@
       }
     },
     "node_modules/sax": {
-      "version": "1.6.0",
-      "resolved": "https://registry.npmjs.org/sax/-/sax-1.6.0.tgz",
-      "integrity": "sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==",
+      "version": "1.6.1",
+      "resolved": "https://registry.npmjs.org/sax/-/sax-1.6.1.tgz",
+      "integrity": "sha512-42tBVwLWnaQvW5zc4HbZrTuWccECCZfBi92FDuwtqxasH+JbPB3/FOKb1m222K42R4WxuxzzMsTswfzgtSu64Q==",
       "license": "BlueOak-1.0.0",
       "engines": {
         "node": ">=11.0.0"
@@ -5036,14 +5681,15 @@
       }
     },
     "node_modules/sharp": {
-      "version": "0.35.2",
-      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.35.2.tgz",
-      "integrity": "sha512-FVtFjtBCMiJS6yb5CX7Sop45WFMpeGw6oRKuJnXYgf/f1ms/D7LE/ZUSNxnW7rZ/dbslQWYkoqFHGPaDBtaK4w==",
+      "version": "0.35.3",
+      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.35.3.tgz",
+      "integrity": "sha512-ej0zVHuZGHCiABXcNxeYhpRnPNPAcvbG8RMdBAhDAxLKkCRVSpK3Iyu7qbqw3JMzoj0REeM6f3tJLtVwl0023Q==",
       "license": "Apache-2.0",
+      "optional": true,
       "dependencies": {
         "@img/colour": "^1.1.0",
         "detect-libc": "^2.1.2",
-        "semver": "^7.8.4"
+        "semver": "^7.8.5"
       },
       "engines": {
         "node": ">=20.9.0"
@@ -5052,31 +5698,36 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-darwin-arm64": "0.35.2",
-        "@img/sharp-darwin-x64": "0.35.2",
-        "@img/sharp-freebsd-wasm32": "0.35.2",
-        "@img/sharp-libvips-darwin-arm64": "1.3.1",
-        "@img/sharp-libvips-darwin-x64": "1.3.1",
-        "@img/sharp-libvips-linux-arm": "1.3.1",
-        "@img/sharp-libvips-linux-arm64": "1.3.1",
-        "@img/sharp-libvips-linux-ppc64": "1.3.1",
-        "@img/sharp-libvips-linux-riscv64": "1.3.1",
-        "@img/sharp-libvips-linux-s390x": "1.3.1",
-        "@img/sharp-libvips-linux-x64": "1.3.1",
-        "@img/sharp-libvips-linuxmusl-arm64": "1.3.1",
-        "@img/sharp-libvips-linuxmusl-x64": "1.3.1",
-        "@img/sharp-linux-arm": "0.35.2",
-        "@img/sharp-linux-arm64": "0.35.2",
-        "@img/sharp-linux-ppc64": "0.35.2",
-        "@img/sharp-linux-riscv64": "0.35.2",
-        "@img/sharp-linux-s390x": "0.35.2",
-        "@img/sharp-linux-x64": "0.35.2",
-        "@img/sharp-linuxmusl-arm64": "0.35.2",
-        "@img/sharp-linuxmusl-x64": "0.35.2",
-        "@img/sharp-webcontainers-wasm32": "0.35.2",
-        "@img/sharp-win32-arm64": "0.35.2",
-        "@img/sharp-win32-ia32": "0.35.2",
-        "@img/sharp-win32-x64": "0.35.2"
+        "@img/sharp-darwin-arm64": "0.35.3",
+        "@img/sharp-darwin-x64": "0.35.3",
+        "@img/sharp-freebsd-wasm32": "0.35.3",
+        "@img/sharp-libvips-darwin-arm64": "1.3.2",
+        "@img/sharp-libvips-darwin-x64": "1.3.2",
+        "@img/sharp-libvips-linux-arm": "1.3.2",
+        "@img/sharp-libvips-linux-arm64": "1.3.2",
+        "@img/sharp-libvips-linux-ppc64": "1.3.2",
+        "@img/sharp-libvips-linux-riscv64": "1.3.2",
+        "@img/sharp-libvips-linux-s390x": "1.3.2",
+        "@img/sharp-libvips-linux-x64": "1.3.2",
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.2",
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.2",
+        "@img/sharp-linux-arm": "0.35.3",
+        "@img/sharp-linux-arm64": "0.35.3",
+        "@img/sharp-linux-ppc64": "0.35.3",
+        "@img/sharp-linux-riscv64": "0.35.3",
+        "@img/sharp-linux-s390x": "0.35.3",
+        "@img/sharp-linux-x64": "0.35.3",
+        "@img/sharp-linuxmusl-arm64": "0.35.3",
+        "@img/sharp-linuxmusl-x64": "0.35.3",
+        "@img/sharp-webcontainers-wasm32": "0.35.3",
+        "@img/sharp-win32-arm64": "0.35.3",
+        "@img/sharp-win32-ia32": "0.35.3",
+        "@img/sharp-win32-x64": "0.35.3"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        }
       }
     },
     "node_modules/shiki": {
@@ -5105,9 +5756,9 @@
       "license": "MIT"
     },
     "node_modules/smol-toml": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.7.0.tgz",
-      "integrity": "sha512-aqVvWoyO21L23mb+drl4RmMXbf6N7FdHjAhTRA9ZBL7apWBgfWC16KjrASI+1p9GAroljyMHj6fK67i0UiTNvQ==",
+      "version": "1.7.1",
+      "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.7.1.tgz",
+      "integrity": "sha512-PPlsspAZ4jbMBu5DMFhfUGDQLu/vrL4SyBROVS37x8ynnVmFIs1VPBz1Co8Xks3TvpIaZXmU85y4DrQ+UyVFoQ==",
       "license": "BSD-3-Clause",
       "engines": {
         "node": ">= 18"
@@ -5887,6 +6538,12 @@
         "vscode-uri": "^3.1.0"
       }
     },
+    "node_modules/vscode-css-languageservice/node_modules/vscode-languageserver-types": {
+      "version": "3.17.5",
+      "resolved": "https://registry.npmjs.org/vscode-languageserver-types/-/vscode-languageserver-types-3.17.5.tgz",
+      "integrity": "sha512-Ld1VelNuX9pdF39h2Hgaeb5hEZM2Z3jUrrMgWQAu82jMtZp7p3vJT3BzToKtZI7NgQssZje5o0zryOrhQvzQAg==",
+      "license": "MIT"
+    },
     "node_modules/vscode-html-languageservice": {
       "version": "5.6.2",
       "resolved": "https://registry.npmjs.org/vscode-html-languageservice/-/vscode-html-languageservice-5.6.2.tgz",
@@ -5916,9 +6573,9 @@
       }
     },
     "node_modules/vscode-jsonrpc": {
-      "version": "8.2.0",
-      "resolved": "https://registry.npmjs.org/vscode-jsonrpc/-/vscode-jsonrpc-8.2.0.tgz",
-      "integrity": "sha512-C+r0eKJUIfiDIfwJhria30+TYWPtuHJXHtI7J0YlOmKAo7ogxP20T0zxB7HZQIFhIyvoBPwWskjxrvAtfjyZfA==",
+      "version": "9.0.1",
+      "resolved": "https://registry.npmjs.org/vscode-jsonrpc/-/vscode-jsonrpc-9.0.1.tgz",
+      "integrity": "sha512-rfuA6T75H6m5EkbhtEPzre9pT0HPcDI2MMy4+nPFIBks5J8JBAUHD4tRYSgaBOijIEC7SRkC1kKyXTLqbmh9jw==",
       "license": "MIT",
       "engines": {
         "node": ">=14.0.0"
@@ -5937,13 +6594,13 @@
       }
     },
     "node_modules/vscode-languageserver-protocol": {
-      "version": "3.17.5",
-      "resolved": "https://registry.npmjs.org/vscode-languageserver-protocol/-/vscode-languageserver-protocol-3.17.5.tgz",
-      "integrity": "sha512-mb1bvRJN8SVznADSGWM9u/b07H7Ecg0I3OgXDuLdn307rl/J3A9YD6/eYOssqhecL27hK1IPZAsaqh00i/Jljg==",
+      "version": "3.18.2",
+      "resolved": "https://registry.npmjs.org/vscode-languageserver-protocol/-/vscode-languageserver-protocol-3.18.2.tgz",
+      "integrity": "sha512-XRyDbT0Pp3sSNti3JmxVEUMySWCSi1hhM+/KUlCy1hV1zmrqpM1OwO12EAki8blhmLuIMpaJrYbo0OzGVfK2Qg==",
       "license": "MIT",
       "dependencies": {
-        "vscode-jsonrpc": "8.2.0",
-        "vscode-languageserver-types": "3.17.5"
+        "vscode-jsonrpc": "9.0.1",
+        "vscode-languageserver-types": "3.18.0"
       }
     },
     "node_modules/vscode-languageserver-textdocument": {
@@ -5953,6 +6610,31 @@
       "license": "MIT"
     },
     "node_modules/vscode-languageserver-types": {
+      "version": "3.18.0",
+      "resolved": "https://registry.npmjs.org/vscode-languageserver-types/-/vscode-languageserver-types-3.18.0.tgz",
+      "integrity": "sha512-8TsGPNMIMiiBdkORgRSvLjuiEIiAFtO+KssmYWxQ+uSVvlf7RjK8YKCOjPzZ+YA04jXEV7+7LvkSmHkhpNS99g==",
+      "license": "MIT"
+    },
+    "node_modules/vscode-languageserver/node_modules/vscode-jsonrpc": {
+      "version": "8.2.0",
+      "resolved": "https://registry.npmjs.org/vscode-jsonrpc/-/vscode-jsonrpc-8.2.0.tgz",
+      "integrity": "sha512-C+r0eKJUIfiDIfwJhria30+TYWPtuHJXHtI7J0YlOmKAo7ogxP20T0zxB7HZQIFhIyvoBPwWskjxrvAtfjyZfA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
+    "node_modules/vscode-languageserver/node_modules/vscode-languageserver-protocol": {
+      "version": "3.17.5",
+      "resolved": "https://registry.npmjs.org/vscode-languageserver-protocol/-/vscode-languageserver-protocol-3.17.5.tgz",
+      "integrity": "sha512-mb1bvRJN8SVznADSGWM9u/b07H7Ecg0I3OgXDuLdn307rl/J3A9YD6/eYOssqhecL27hK1IPZAsaqh00i/Jljg==",
+      "license": "MIT",
+      "dependencies": {
+        "vscode-jsonrpc": "8.2.0",
+        "vscode-languageserver-types": "3.17.5"
+      }
+    },
+    "node_modules/vscode-languageserver/node_modules/vscode-languageserver-types": {
       "version": "3.17.5",
       "resolved": "https://registry.npmjs.org/vscode-languageserver-types/-/vscode-languageserver-types-3.17.5.tgz",
       "integrity": "sha512-Ld1VelNuX9pdF39h2Hgaeb5hEZM2Z3jUrrMgWQAu82jMtZp7p3vJT3BzToKtZI7NgQssZje5o0zryOrhQvzQAg==",
@@ -6089,9 +6771,9 @@
       }
     },
     "node_modules/yaml": {
-      "version": "2.8.3",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
-      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
+      "version": "2.9.0",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
+      "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
       "license": "ISC",
       "bin": {
         "yaml": "bin.mjs"
@@ -6132,6 +6814,21 @@
       "integrity": "sha512-3Zjgh+8b5fhRJBQZoy+zbVKpAQGLyka0MPgW3zruTF4dFFJ8Fqcfu9YsAvi/rvdcaTeWG3MkbZv4WKxAn/84Lg==",
       "license": "MIT"
     },
+    "node_modules/yaml-language-server/node_modules/yaml": {
+      "version": "2.8.3",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
+      "license": "ISC",
+      "bin": {
+        "yaml": "bin.mjs"
+      },
+      "engines": {
+        "node": ">= 14.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/eemeli"
+      }
+    },
     "node_modules/yargs": {
       "version": "17.7.3",
       "resolved": "https://registry.npmjs.org/yargs/-/yargs-17.7.3.tgz",
diff --git a/package.json b/package.json
index 4ac758df..31880e70 100644
--- a/package.json
+++ b/package.json
@@ -5,6 +5,8 @@
   "scripts": {
     "cf-typegen": "wrangler types",
     "cf-deploy": "wrangler deploy",
+    "db:migrate:local": "wrangler d1 migrations apply DB_EXTENSIONS --local",
+    "db:migrate:remote": "wrangler d1 migrations apply DB_EXTENSIONS --remote",
     "dev": "astro dev",
     "build": "astro build",
     "preview": "astro preview",
diff --git a/src/components/DetailsCard.astro b/src/components/DetailsCard.astro
index 67546d05..4807b7b4 100644
--- a/src/components/DetailsCard.astro
+++ b/src/components/DetailsCard.astro
@@ -40,8 +40,8 @@ const details: DetailsItem[] = [
     name: 'Developer',
     icon: User,
     color: 'amber',
-    text: ext.author.id,
-    link: ext.website,
+    text: ext.developer.id,
+    link: `/developer/${ext.developer.id}`,
   },
   {
     name: 'FOSSBilling Version',
@@ -94,7 +94,9 @@ const details: DetailsItem[] = [
                   href={detail.link}
                   target="_blank"
                   rel="noopener noreferrer"
-                  class="btn-sm-outline"
+                  class="btn"
+                  data-size="sm"
+                  data-variant="outline"
                 >
                   {detail.text}
                 </a>
diff --git a/src/components/ExtensionHeader.astro b/src/components/ExtensionHeader.astro
index 5b7d0aec..98f8091c 100644
--- a/src/components/ExtensionHeader.astro
+++ b/src/components/ExtensionHeader.astro
@@ -12,7 +12,13 @@ const latest = getLatestRelease(ext);
 ---
 
 <div class="flex items-start space-x-4">
-  <a href="/" class="btn-sm-ghost" aria-label="Back to Extensions">
+  <a
+    href="/"
+    class="btn"
+    data-size="sm"
+    data-variant="ghost"
+    aria-label="Back to Extensions"
+  >
     <ArrowLeft class="w-4 h-4" />
   </a>
   <img
diff --git a/src/components/ExtensionSubmissionForm.astro b/src/components/ExtensionSubmissionForm.astro
new file mode 100644
index 00000000..5f7d8dd4
--- /dev/null
+++ b/src/components/ExtensionSubmissionForm.astro
@@ -0,0 +1,249 @@
+---
+import { EXTENSION_TYPES, SOURCE_TYPES } from '@/types';
+import type { Developer, Extension } from '@/types';
+
+interface Props {
+  developer: Developer;
+  extension?: Extension;
+  error?: string | null;
+}
+
+const { developer, extension, error } = Astro.props;
+const isEdit = Boolean(extension);
+---
+
+<form method="POST" class="space-y-8">
+  {
+    error && (
+      <div class="rounded-md border border-destructive/50 bg-destructive/10 px-4 py-3 text-sm text-destructive">
+        {error}
+      </div>
+    )
+  }
+
+  <fieldset class="fieldset space-y-4">
+    <legend class="font-semibold mb-2">Publisher</legend>
+    <p class="text-sm text-muted-foreground">
+      Publishing as <strong>{developer.name}</strong> ({developer.id}).
+      <a href="/account/developer">Edit developer profile</a>
+    </p>
+  </fieldset>
+
+  <fieldset class="fieldset space-y-4">
+    <legend class="font-semibold mb-2">Extension</legend>
+    <div class="field">
+      <label for="extension_id">Extension ID</label>
+      <input
+        class="input"
+        type="text"
+        id="extension_id"
+        name="extension_id"
+        required
+        pattern="[a-z0-9]+(-[a-z0-9]+)*"
+        value={extension?.id}
+        readonly={isEdit}
+      />
+      {
+        isEdit && (
+          <p class="text-sm text-muted-foreground">
+            The ID can't be changed after submission.
+          </p>
+        )
+      }
+    </div>
+    <div class="field">
+      <label for="type">Type</label>
+      <select class="select" id="type" name="type" required>
+        {
+          EXTENSION_TYPES.map((t) => (
+            <option value={t} selected={extension?.type === t}>
+              {t}
+            </option>
+          ))
+        }
+      </select>
+    </div>
+    <div class="field">
+      <label for="name">Name</label>
+      <input
+        class="input"
+        type="text"
+        id="name"
+        name="name"
+        required
+        value={extension?.name}
+      />
+    </div>
+    <div class="field">
+      <label for="description">Short description</label>
+      <input
+        class="input"
+        type="text"
+        id="description"
+        name="description"
+        required
+        value={extension?.description}
+      />
+    </div>
+    <div class="field">
+      <label for="website">Website</label>
+      <input
+        class="input"
+        type="url"
+        id="website"
+        name="website"
+        required
+        value={extension?.website}
+      />
+    </div>
+    <div class="field">
+      <label for="icon_url">Icon URL (optional)</label>
+      <input
+        class="input"
+        type="url"
+        id="icon_url"
+        name="icon_url"
+        value={extension?.icon_url}
+      />
+    </div>
+    <div class="field">
+      <label for="readme">Readme (Markdown)</label>
+      <textarea
+        class="textarea"
+        id="readme"
+        name="readme"
+        required
+        rows="8"
+        set:text={extension?.readme}
+      />
+    </div>
+  </fieldset>
+
+  <fieldset class="fieldset space-y-4">
+    <legend class="font-semibold mb-2">License</legend>
+    <div class="field">
+      <label for="license_name">License name</label>
+      <input
+        class="input"
+        type="text"
+        id="license_name"
+        name="license_name"
+        required
+        value={extension?.license.name}
+      />
+    </div>
+    <div class="field">
+      <label for="license_url">License URL (optional)</label>
+      <input
+        class="input"
+        type="url"
+        id="license_url"
+        name="license_url"
+        value={extension?.license.URL}
+      />
+    </div>
+  </fieldset>
+
+  <fieldset class="fieldset space-y-4">
+    <legend class="font-semibold mb-2">Source</legend>
+    <div class="field">
+      <label for="source_type">Repository host</label>
+      <select class="select" id="source_type" name="source_type">
+        {
+          SOURCE_TYPES.map((t) => (
+            <option value={t} selected={extension?.source.type === t}>
+              {t}
+            </option>
+          ))
+        }
+      </select>
+    </div>
+    <div class="field">
+      <label for="source_repo">Repository</label>
+      <input
+        class="input"
+        type="text"
+        id="source_repo"
+        name="source_repo"
+        required
+        value={extension?.source.repo}
+        placeholder="owner/repo, or a full URL for 'custom'"
+      />
+    </div>
+  </fieldset>
+
+  {
+    isEdit && extension && extension.releases.length > 0 && (
+      <fieldset class="fieldset space-y-2">
+        <legend class="font-semibold mb-2">Existing releases</legend>
+        <ul class="text-sm text-muted-foreground space-y-1">
+          {extension.releases.map((r) => (
+            <li>
+              v{r.tag} &middot; {r.date} &middot; FOSSBilling{' '}
+              {r.min_fossbilling_version}+
+            </li>
+          ))}
+        </ul>
+      </fieldset>
+    )
+  }
+
+  <fieldset class="fieldset space-y-4">
+    <legend class="font-semibold mb-2">
+      {isEdit ? 'Add a new release (optional)' : 'Initial release'}
+    </legend>
+    <div class="field">
+      <label for="version_tag">Version tag</label>
+      <input
+        class="input"
+        type="text"
+        id="version_tag"
+        name="version_tag"
+        required={!isEdit}
+        placeholder="1.0.0"
+      />
+    </div>
+    <div class="field">
+      <label for="release_date">Release date</label>
+      <input
+        class="input"
+        type="date"
+        id="release_date"
+        name="release_date"
+        required={!isEdit}
+      />
+    </div>
+    <div class="field">
+      <label for="download_url">Download URL</label>
+      <input
+        class="input"
+        type="url"
+        id="download_url"
+        name="download_url"
+        required={!isEdit}
+      />
+    </div>
+    <div class="field">
+      <label for="changelog_url">Changelog URL (optional)</label>
+      <input class="input" type="url" id="changelog_url" name="changelog_url" />
+    </div>
+    <div class="field">
+      <label for="min_fossbilling_version">Minimum FOSSBilling version</label>
+      <input
+        class="input"
+        type="text"
+        id="min_fossbilling_version"
+        name="min_fossbilling_version"
+        required={!isEdit}
+        placeholder="1.0.0"
+      />
+    </div>
+  </fieldset>
+
+  <div class="flex justify-end gap-3">
+    <a href="/account" class="btn" data-variant="ghost"> Cancel </a>
+    <button type="submit" class="btn">
+      {isEdit ? 'Submit edit for review' : 'Submit for review'}
+    </button>
+  </div>
+</form>
diff --git a/src/env.d.ts b/src/env.d.ts
new file mode 100644
index 00000000..72c033f9
--- /dev/null
+++ b/src/env.d.ts
@@ -0,0 +1,16 @@
+export {};
+
+// Extends the `Cloudflare.Env` interface generated in worker-configuration.d.ts
+// with secrets that aren't Wrangler bindings (set via `wrangler secret put`,
+// or `.dev.vars` locally) so `cloudflare:workers`' `env` stays fully typed.
+declare global {
+  namespace Cloudflare {
+    interface Env {
+      AUTH_CLIENT_ID: string;
+      AUTH_CLIENT_SECRET: string;
+      SESSION_SECRET: string;
+      ASSERTION_SIGNING_SECRET: string;
+      EXTENSIONS_API_BASE_URL: string;
+    }
+  }
+}
diff --git a/src/layouts/Base.astro b/src/layouts/Base.astro
index 2414d7e6..3662c6ac 100644
--- a/src/layouts/Base.astro
+++ b/src/layouts/Base.astro
@@ -3,13 +3,16 @@ import '@/styles/global.css';
 import LogoLight from '@/assets/logo-light.svg';
 import LogoDark from '@/assets/logo-dark.svg';
 import Container from '@/components/Container.astro';
-import { Sun, Moon } from '@lucide/astro';
+import { Sun, Moon, LogIn, LogOut, CircleUser } from '@lucide/astro';
+import { env } from 'cloudflare:workers';
+import { getSessionUser } from '@/lib/session';
 
 interface Props {
   title: string;
 }
 
 const { title } = Astro.props;
+const user = await getSessionUser(Astro.cookies, env.SESSION_SECRET);
 ---
 
 <!doctype html>
@@ -73,22 +76,85 @@ const { title } = Astro.props;
           >
           <span class="ml-2 badge-secondary">beta</span>
         </div>
-        <button
-          type="button"
-          aria-label="Toggle Dark Mode"
-          data-tooltip="Toggle Dark Mode"
-          data-side="bottom"
-          data-align="end"
-          onclick="document.dispatchEvent(new CustomEvent('basecoat:theme'))"
-          class="btn-icon-outline size-8"
-        >
-          <Sun class="w-5 h-5 hidden dark:block" aria-hidden="true" />
-          <Moon class="w-5 h-5 block dark:hidden" aria-hidden="true" />
-        </button>
+        <div class="flex items-center gap-3">
+          {
+            user ? (
+              <>
+                <a
+                  href="/account"
+                  aria-label={`Account — ${user.name}`}
+                  data-tooltip={`Account — ${user.name}`}
+                  data-side="bottom"
+                  data-align="end"
+                  class="btn"
+                  data-size="icon-sm"
+                  data-variant="outline"
+                >
+                  <CircleUser class="w-5 h-5" aria-hidden="true" />
+                </a>
+                <form method="POST" action="/auth/logout">
+                  <button
+                    type="submit"
+                    aria-label="Sign Out"
+                    data-tooltip="Sign Out"
+                    data-side="bottom"
+                    data-align="end"
+                    class="btn"
+                    data-size="icon-sm"
+                    data-variant="outline"
+                  >
+                    <LogOut class="w-5 h-5" aria-hidden="true" />
+                  </button>
+                </form>
+              </>
+            ) : (
+              <a
+                href="/auth/login"
+                aria-label="Developer sign-in"
+                data-tooltip="Developer sign-in"
+                data-side="bottom"
+                data-align="end"
+                class="btn"
+                data-size="icon-sm"
+                data-variant="outline"
+              >
+                <LogIn class="w-5 h-5" aria-hidden="true" />
+              </a>
+            )
+          }
+          <button
+            type="button"
+            aria-label="Toggle Dark Mode"
+            data-tooltip="Toggle Dark Mode"
+            data-side="bottom"
+            data-align="end"
+            onclick="document.dispatchEvent(new CustomEvent('basecoat:theme'))"
+            class="btn"
+            data-size="icon-sm"
+            data-variant="outline"
+          >
+            <Sun class="w-5 h-5 hidden dark:block" aria-hidden="true" />
+            <Moon class="w-5 h-5 block dark:hidden" aria-hidden="true" />
+          </button>
+        </div>
       </Container>
     </header>
     <main>
       <Container class="py-6 sm:py-10">
+        {
+          Astro.url.searchParams.get('auth_error') && (
+            <div class="mb-6 rounded-md border border-destructive/50 bg-destructive/10 px-4 py-3 text-sm text-destructive">
+              Sign-in failed. Please try again.
+            </div>
+          )
+        }
+        {
+          Astro.url.searchParams.get('account_deleted') && (
+            <div class="mb-6 rounded-md border border-border bg-muted px-4 py-3 text-sm">
+              Your account has been deleted.
+            </div>
+          )
+        }
         <slot />
       </Container>
     </main>
diff --git a/src/lib/apiClient.ts b/src/lib/apiClient.ts
new file mode 100644
index 00000000..be59eb37
--- /dev/null
+++ b/src/lib/apiClient.ts
@@ -0,0 +1,153 @@
+// Server-side-only client for the api repo's v2 submissions endpoints
+// (src/services/extensions/v2/). Never import this from client-side code —
+// minting a bearer assertion requires ASSERTION_SIGNING_SECRET.
+import { mintBearerAssertion } from './assertion';
+import type {
+  DeveloperClaim,
+  DeveloperHistoryEntry,
+  DeveloperProfile,
+  DeveloperProfileInput,
+  DeveloperTransfer,
+  PendingDeveloperClaim,
+  Submission,
+  SubmissionPayload,
+  SubmissionStatus,
+} from '@/types';
+
+export class ApiRequestError extends Error {
+  code: string;
+  status: number;
+
+  constructor(status: number, code: string, message: string) {
+    super(message);
+    this.code = code;
+    this.status = status;
+  }
+}
+
+export function createApiClient(env: Cloudflare.Env, sub: string) {
+  async function call<T>(path: string, init?: RequestInit): Promise<T> {
+    const token = await mintBearerAssertion(sub, env.ASSERTION_SIGNING_SECRET);
+    const response = await fetch(
+      `${env.EXTENSIONS_API_BASE_URL}/extensions/v2${path}`,
+      {
+        ...init,
+        headers: {
+          ...init?.headers,
+          Authorization: `Bearer ${token}`,
+          'Content-Type': 'application/json',
+        },
+      },
+    );
+
+    let body: { result: T } | { error: { code: string; message: string } };
+    try {
+      body = await response.json();
+    } catch {
+      throw new ApiRequestError(
+        response.status,
+        'invalid_response',
+        'The extensions API returned an unexpected response.',
+      );
+    }
+
+    if (!response.ok) {
+      const { error } = body as { error: { code: string; message: string } };
+      throw new ApiRequestError(response.status, error.code, error.message);
+    }
+
+    return (body as { result: T }).result;
+  }
+
+  return {
+    submitExtension: (payload: SubmissionPayload) =>
+      call<{ id: string; status: 'pending' }>('/submissions', {
+        method: 'POST',
+        body: JSON.stringify(payload),
+      }),
+
+    listMySubmissions: () => call<Submission[]>('/submissions/mine'),
+
+    listQueue: (status: SubmissionStatus = 'pending') =>
+      call<Submission[]>(`/submissions/queue?status=${status}`),
+
+    approveSubmission: (id: string, reviewNote?: string) =>
+      call<{ id: string; status: 'approved' }>(`/submissions/${id}/approve`, {
+        method: 'POST',
+        body: JSON.stringify(reviewNote ? { review_note: reviewNote } : {}),
+      }),
+
+    rejectSubmission: (id: string, reviewNote: string) =>
+      call<{ id: string; status: 'rejected' }>(`/submissions/${id}/reject`, {
+        method: 'POST',
+        body: JSON.stringify({ review_note: reviewNote }),
+      }),
+
+    // Direct write, not moderated — takes effect immediately. `approved` in
+    // the response is a moderator-set trust badge, not a publish gate.
+    upsertDeveloperProfile: (developer: DeveloperProfileInput) =>
+      call<DeveloperProfile>('/developers/me', {
+        method: 'PUT',
+        body: JSON.stringify(developer),
+      }),
+
+    // 409s (developer_has_extensions / developer_has_pending_submissions) if
+    // the profile can't be deleted yet — callers should surface the message.
+    deleteDeveloperProfile: () =>
+      call<{ id: string; deleted: true }>('/developers/me', {
+        method: 'DELETE',
+      }),
+
+    listUnapprovedDevelopers: () =>
+      call<DeveloperProfile[]>('/developers/unapproved'),
+
+    listAllDevelopers: () => call<DeveloperProfile[]>('/developers'),
+
+    approveDeveloper: (id: string) =>
+      call<{ id: string; approved: true }>(`/developers/${id}/approve`, {
+        method: 'POST',
+      }),
+
+    listDeveloperHistory: (id: string) =>
+      call<DeveloperHistoryEntry[]>(`/developers/${id}/history`),
+
+    // One-time link — the token is only ever returned by this call. Never
+    // persisted or put in a URL by the caller.
+    initiateTransfer: (id: string) =>
+      call<DeveloperTransfer>(`/developers/${id}/transfer`, {
+        method: 'POST',
+      }),
+
+    revokeTransfer: (id: string) =>
+      call<{ id: string; revoked: true }>(`/developers/${id}/transfer/revoke`, {
+        method: 'POST',
+      }),
+
+    acceptTransfer: (token: string) =>
+      call<DeveloperProfile>(`/developers/transfers/${token}/accept`, {
+        method: 'POST',
+      }),
+
+    claimDeveloper: (id: string, note?: string) =>
+      call<DeveloperClaim>(`/developers/${id}/claim`, {
+        method: 'POST',
+        body: JSON.stringify(note ? { note } : {}),
+      }),
+
+    listMyClaims: () => call<DeveloperClaim[]>('/developers/claims/mine'),
+
+    listPendingClaims: () =>
+      call<PendingDeveloperClaim[]>('/developers/claims'),
+
+    approveClaim: (id: string) =>
+      call<DeveloperProfile>(`/developers/claims/${id}/approve`, {
+        method: 'POST',
+      }),
+
+    rejectClaim: (id: string, reviewNote: string) =>
+      call<DeveloperClaim>(`/developers/claims/${id}/reject`, {
+        method: 'POST',
+        body: JSON.stringify({ review_note: reviewNote }),
+      }),
+  };
+}
diff --git a/src/lib/assertion.ts b/src/lib/assertion.ts
new file mode 100644
index 00000000..684133ff
--- /dev/null
+++ b/src/lib/assertion.ts
@@ -0,0 +1,39 @@
+import { base64urlEncode } from './base64url';
+
+// Mints a short-lived compact HS256 assertion (header.payload.signature) that
+// the api repo's bearerAssertionVerifier verifies — see that repo's
+// src/lib/auth/bearer-assertion.ts. Not a general-purpose JWT: the header is
+// fixed and never parsed by the verifier, only included in the signed input.
+const ASSERTION_TTL_SECONDS = 60;
+
+const HEADER = base64urlEncode(
+  new TextEncoder().encode(JSON.stringify({ alg: 'HS256', typ: 'JWT' })),
+);
+
+export async function mintBearerAssertion(
+  sub: string,
+  secret: string,
+): Promise<string> {
+  const now = Math.floor(Date.now() / 1000);
+  const payload = base64urlEncode(
+    new TextEncoder().encode(
+      JSON.stringify({ sub, iat: now, exp: now + ASSERTION_TTL_SECONDS }),
+    ),
+  );
+
+  const key = await crypto.subtle.importKey(
+    'raw',
+    new TextEncoder().encode(secret),
+    { name: 'HMAC', hash: 'SHA-256' },
+    false,
+    ['sign'],
+  );
+  const signingInput = `${HEADER}.${payload}`;
+  const signature = await crypto.subtle.sign(
+    'HMAC',
+    key,
+    new TextEncoder().encode(signingInput),
+  );
+
+  return `${signingInput}.${base64urlEncode(new Uint8Array(signature))}`;
+}
diff --git a/src/lib/auth-guard.ts b/src/lib/auth-guard.ts
new file mode 100644
index 00000000..00929ee3
--- /dev/null
+++ b/src/lib/auth-guard.ts
@@ -0,0 +1,56 @@
+import type { AstroCookies } from 'astro';
+import { getSessionUser, SESSION_COOKIE, type SessionUser } from './session';
+import { isModerator, userExists } from './users';
+
+// Structural subset shared by AstroGlobal (in .astro pages) and the
+// destructured APIContext (in .ts API routes), so guards work in both.
+interface AuthContext {
+  cookies: AstroCookies;
+  redirect: (path: string) => Response;
+  url: URL;
+}
+
+// Guard for /account pages. Callers must check `instanceof Response` and
+// return it immediately if so:
+//
+//   const guard = await requireUser(Astro, env);
+//   if (guard instanceof Response) return guard;
+//   const user = guard;
+export async function requireUser(
+  context: AuthContext,
+  env: Cloudflare.Env,
+): Promise<SessionUser | Response> {
+  const redirectToLogin = () => {
+    const redirectTo = encodeURIComponent(
+      context.url.pathname + context.url.search,
+    );
+    return context.redirect(`/auth/login?redirect=${redirectTo}`);
+  };
+
+  const user = await getSessionUser(context.cookies, env.SESSION_SECRET);
+  if (!user) return redirectToLogin();
+
+  // A signed cookie can outlive the account it names by up to
+  // SESSION_MAX_AGE — e.g. another device's session after /account/delete,
+  // or a failed post-login upsert — so verify the row still exists rather
+  // than trusting the cookie alone.
+  if (!(await userExists(env.DB_EXTENSIONS, user.sub))) {
+    context.cookies.delete(SESSION_COOKIE, { path: '/' });
+    return redirectToLogin();
+  }
+
+  return user;
+}
+
+export async function requireModerator(
+  context: AuthContext,
+  env: Cloudflare.Env,
+): Promise<SessionUser | Response> {
+  const guard = await requireUser(context, env);
+  if (guard instanceof Response) return guard;
+
+  const moderator = await isModerator(env.DB_EXTENSIONS, guard.sub);
+  if (!moderator) return context.redirect('/404');
+
+  return guard;
+}
diff --git a/src/lib/base64url.ts b/src/lib/base64url.ts
new file mode 100644
index 00000000..1cf5ffe2
--- /dev/null
+++ b/src/lib/base64url.ts
@@ -0,0 +1,22 @@
+export function base64urlEncode(bytes: Uint8Array): string {
+  let binary = '';
+  for (const byte of bytes) {
+    binary += String.fromCharCode(byte);
+  }
+  return btoa(binary)
+    .replace(/\+/g, '-')
+    .replace(/\//g, '_')
+    .replace(/=+$/, '');
+}
+
+export function base64urlDecode(value: string): Uint8Array<ArrayBuffer> {
+  const padded = value.replace(/-/g, '+').replace(/_/g, '/');
+  const binary = atob(
+    padded.padEnd(padded.length + ((4 - (padded.length % 4)) % 4), '='),
+  );
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return bytes;
+}
diff --git a/src/lib/database.ts b/src/lib/database.ts
index e34d946c..8b1f8016 100644
--- a/src/lib/database.ts
+++ b/src/lib/database.ts
@@ -2,37 +2,90 @@
 // If the D1 schema changes, update fossbilling/api AND this file.
 import {
   type Extension,
-  type Author,
+  type Developer,
+  type DeveloperProfile,
+  type PublicDeveloperProfile,
   type Release,
   type Repository,
 } from '@/types';
 
 // Omits readme (large field) — used for index page listings.
+// extensions.author_id is v1's own column, kept as-is by the api repo's
+// authors->developers rename (only the table it references was renamed) —
+// aliased to developer_id here so nothing downstream depends on that name.
 const SELECT_EXTENSIONS_LIST = `
-  SELECT e.id, e.type, e.author_id,
-         a.type AS author_type, a.name AS author_name, a.url AS author_url,
+  SELECT e.id, e.type, e.author_id AS developer_id,
+         d.type AS developer_type, d.name AS developer_name, d.url AS developer_url,
          e.name, e.description, e.website, e.license,
          e.icon_url, e.source, e.version, e.download_url, e.releases
   FROM extensions e
-  LEFT JOIN authors a ON e.author_id = a.id
+  LEFT JOIN developers d ON e.author_id = d.id
+`;
+
+const SELECT_EXTENSIONS_BY_OWNER = `
+  ${SELECT_EXTENSIONS_LIST}
+  WHERE d.owner_user_id = ?
   ORDER BY e.name
 `;
 
+const SELECT_EXTENSIONS_BY_DEVELOPER = `
+  ${SELECT_EXTENSIONS_LIST}
+  WHERE LOWER(d.id) = LOWER(?)
+  ORDER BY e.name
+`;
+
+// contact_email is deliberately never selected here — this repo has no
+// public-facing query that should return it. Only getDeveloperByOwner
+// (below) selects it, for prefilling the owner's own self-management form.
+// unclaimed is derived, never the raw owner_user_id — exposing the actual
+// owner's sub would leak another user's identifier publicly.
+const SELECT_DEVELOPER_PUBLIC = `
+  SELECT id, type, name, url, bio, avatar_url, approved_at,
+         (owner_user_id IS NULL) AS unclaimed
+  FROM developers
+`;
+
+type DeveloperProfileRow = {
+  id: string;
+  type: string;
+  name: string;
+  url: string | null;
+  bio?: string | null;
+  avatar_url: string | null;
+  contact_email?: string | null;
+  approved_at: string | null;
+  unclaimed?: number;
+};
+
+function parseDeveloperProfileRow(row: DeveloperProfileRow): DeveloperProfile {
+  return {
+    type: row.type as 'organization' | 'user',
+    name: row.name,
+    id: row.id.toLowerCase() as Lowercase<string>,
+    URL: row.url ?? undefined,
+    bio: row.bio ?? undefined,
+    avatar_url: row.avatar_url ?? undefined,
+    contact_email: row.contact_email ?? undefined,
+    approved: row.approved_at !== null,
+    unclaimed: row.unclaimed === 1,
+  } as DeveloperProfile;
+}
+
 // Includes readme — used for detail pages.
 const SELECT_EXTENSION_DETAIL = `
-  SELECT e.id, e.type, e.author_id,
-         a.type AS author_type, a.name AS author_name, a.url AS author_url,
+  SELECT e.id, e.type, e.author_id AS developer_id,
+         d.type AS developer_type, d.name AS developer_name, d.url AS developer_url,
          e.name, e.description, e.releases, e.website, e.license,
          e.icon_url, e.readme, e.source, e.version, e.download_url
   FROM extensions e
-  LEFT JOIN authors a ON e.author_id = a.id
+  LEFT JOIN developers d ON e.author_id = d.id
 `;
 
 export async function getAllExtensions(db: D1Database): Promise<Extension[]> {
   let result;
   try {
     result = await db
-      .prepare(SELECT_EXTENSIONS_LIST)
+      .prepare(`${SELECT_EXTENSIONS_LIST} ORDER BY e.name`)
       .all<Record<string, unknown>>();
   } catch {
     return [];
@@ -57,6 +110,81 @@ export async function getExtensionById(
   return row ? parseExtensionRow(row) : null;
 }
 
+// Extensions published under a developer the given user owns
+// (developers.owner_user_id, added by the api repo's v2 migration — see
+// that repo's src/services/extensions/v2/db/migrations/0001_add_v2_tables.sql).
+export async function getExtensionsByOwner(
+  db: D1Database,
+  userId: string,
+): Promise<Extension[]> {
+  let result;
+  try {
+    result = await db
+      .prepare(SELECT_EXTENSIONS_BY_OWNER)
+      .bind(userId)
+      .all<Record<string, unknown>>();
+  } catch {
+    return [];
+  }
+  if (!result.success) return [];
+  return result.results.map(parseExtensionRow);
+}
+
+// Includes contact_email — this is the owner viewing/editing their own
+// profile, not a public read.
+export async function getDeveloperByOwner(
+  db: D1Database,
+  userId: string,
+): Promise<DeveloperProfile | null> {
+  let row;
+  try {
+    row = await db
+      .prepare(
+        'SELECT id, type, name, url, bio, avatar_url, contact_email, approved_at FROM developers WHERE owner_user_id = ?',
+      )
+      .bind(userId)
+      .first<DeveloperProfileRow>();
+  } catch {
+    return null;
+  }
+  return row ? parseDeveloperProfileRow(row) : null;
+}
+
+// Public read for the /developer/[id] page — never selects contact_email.
+export async function getDeveloperById(
+  db: D1Database,
+  id: string,
+): Promise<PublicDeveloperProfile | null> {
+  let row;
+  try {
+    row = await db
+      .prepare(`${SELECT_DEVELOPER_PUBLIC} WHERE LOWER(id) = LOWER(?)`)
+      .bind(id)
+      .first<DeveloperProfileRow>();
+  } catch {
+    return null;
+  }
+  return row ? parseDeveloperProfileRow(row) : null;
+}
+
+// Public listing for the /developer/[id] page.
+export async function getExtensionsByDeveloperId(
+  db: D1Database,
+  developerId: string,
+): Promise<Extension[]> {
+  let result;
+  try {
+    result = await db
+      .prepare(SELECT_EXTENSIONS_BY_DEVELOPER)
+      .bind(developerId)
+      .all<Record<string, unknown>>();
+  } catch {
+    return [];
+  }
+  if (!result.success) return [];
+  return result.results.map(parseExtensionRow);
+}
+
 function parseJSON<T>(value: unknown, fallback: T): T {
   if (typeof value === 'string') {
     try {
@@ -74,13 +202,14 @@ function parseExtensionRow(row: Record<string, unknown>): Extension {
     type: row.type as Extension['type'],
     name: row.name as string,
     description: row.description as string,
-    author: {
-      type: (row.author_type as 'organization' | 'user') ?? 'user',
-      name: (row.author_name as string) ?? '',
-      id: ((row.author_id as string | undefined)?.toLowerCase() ??
+    developer: {
+      type: (row.developer_type as 'organization' | 'user') ?? 'user',
+      name: (row.developer_name as string) ?? '',
+      id: ((row.developer_id as string | undefined)?.toLowerCase() ??
         '') as Lowercase<string>,
-      URL: typeof row.author_url === 'string' ? row.author_url : undefined,
-    } as Author,
+      URL:
+        typeof row.developer_url === 'string' ? row.developer_url : undefined,
+    } as Developer,
     releases: parseJSON<Release[]>(row.releases, []),
     website: row.website as string,
     license: parseJSON(row.license, { name: '' }),
diff --git a/src/lib/db/migrations/0001_create_users.sql b/src/lib/db/migrations/0001_create_users.sql
new file mode 100644
index 00000000..57044531
--- /dev/null
+++ b/src/lib/db/migrations/0001_create_users.sql
@@ -0,0 +1,11 @@
+-- Keyed by the central auth service's `sub`. Ownership, roles, and other
+-- authorization concepts belong in this app's own tables, not here.
+CREATE TABLE IF NOT EXISTS users (
+  id             TEXT PRIMARY KEY NOT NULL,
+  name           TEXT,
+  email          TEXT,
+  email_verified INTEGER NOT NULL DEFAULT 0,
+  picture        TEXT,
+  created_at     TEXT NOT NULL,
+  updated_at     TEXT NOT NULL
+);
diff --git a/src/lib/db/migrations/0002_add_is_moderator.sql b/src/lib/db/migrations/0002_add_is_moderator.sql
new file mode 100644
index 00000000..8ad6a247
--- /dev/null
+++ b/src/lib/db/migrations/0002_add_is_moderator.sql
@@ -0,0 +1,5 @@
+-- Adds is_moderator to the users table created by 0001_create_users.sql.
+-- Read by the api repo's UsersDatabase.isModerator() — see that repo's
+-- src/services/extensions/v2/users-database.ts.
+
+ALTER TABLE users ADD COLUMN is_moderator INTEGER NOT NULL DEFAULT 0;
diff --git a/src/lib/db/migrations/0003_add_profile_fields.sql b/src/lib/db/migrations/0003_add_profile_fields.sql
new file mode 100644
index 00000000..b90ebc52
--- /dev/null
+++ b/src/lib/db/migrations/0003_add_profile_fields.sql
@@ -0,0 +1,7 @@
+-- Adds a personal display_name/bio profile to the users table, separate
+-- from the name/email/picture synced from the auth provider (see upsertUser
+-- in src/lib/users.ts) and from any developer/publisher identity (the
+-- `developers` table, owned by the api repo).
+
+ALTER TABLE users ADD COLUMN display_name TEXT;
+ALTER TABLE users ADD COLUMN bio TEXT;
diff --git a/src/lib/developer-form.ts b/src/lib/developer-form.ts
new file mode 100644
index 00000000..eadf78a3
--- /dev/null
+++ b/src/lib/developer-form.ts
@@ -0,0 +1,37 @@
+import type { Developer, DeveloperProfileInput } from '@/types';
+import { DEVELOPER_TYPES } from '@/types';
+import { formString } from './form';
+
+function isDeveloperType(value: string): value is Developer['type'] {
+  return (DEVELOPER_TYPES as readonly string[]).includes(value);
+}
+
+// Thrown for form-level validation failures that should be shown to the
+// user, distinct from ApiRequestError (the api rejecting an otherwise
+// well-formed payload) — see the try/catch in account/developer/index.astro.
+export class DeveloperValidationError extends Error {}
+
+// Builds a DeveloperProfileInput from the developer-profile form, for
+// PUT /developers/me. The id is immutable once a developer profile exists —
+// see the readonly id field in /account/developer.
+export function buildDeveloperProfile(
+  form: FormData,
+  existingDeveloper: Developer | null,
+): DeveloperProfileInput {
+  const str = (name: string) => formString(form, name);
+  const typeInput = str('type');
+  const id = existingDeveloper?.id ?? str('id').toLowerCase();
+  if (!id) {
+    throw new DeveloperValidationError('Publisher ID is required.');
+  }
+
+  return {
+    id: id as Lowercase<string>,
+    type: isDeveloperType(typeInput) ? typeInput : 'user',
+    name: str('name'),
+    URL: str('url') || undefined,
+    bio: str('bio') || undefined,
+    avatar_url: str('avatar_url') || undefined,
+    contact_email: str('contact_email') || undefined,
+  } as DeveloperProfileInput;
+}
diff --git a/src/lib/form.ts b/src/lib/form.ts
new file mode 100644
index 00000000..b7e4a475
--- /dev/null
+++ b/src/lib/form.ts
@@ -0,0 +1,9 @@
+// FormData.get() is typed as returning `string | null`, but a multipart
+// request can put a File under any field name, and File has no .trim() —
+// an unchecked cast crashes the request instead of treating it as invalid
+// input. Callers that just want "whatever string was submitted, or empty"
+// should always go through this rather than casting form.get() directly.
+export function formString(form: FormData, name: string): string {
+  const value = form.get(name);
+  return typeof value === 'string' ? value.trim() : '';
+}
diff --git a/src/lib/oauth.ts b/src/lib/oauth.ts
new file mode 100644
index 00000000..a4dba215
--- /dev/null
+++ b/src/lib/oauth.ts
@@ -0,0 +1,105 @@
+// Client for FOSSBilling's central auth service (auth.fossbilling.net).
+// Identity only — see that repo's README for the identity/authorization boundary.
+// Roles, permissions, and extension ownership are modeled in this app's own
+// database (see users.ts), never requested from or trusted to the auth service.
+
+const ISSUER = 'https://auth.fossbilling.net';
+const AUTHORIZE_ENDPOINT = `${ISSUER}/oauth2/authorize`;
+const TOKEN_ENDPOINT = `${ISSUER}/oauth2/token`;
+const USERINFO_ENDPOINT = `${ISSUER}/oauth2/userinfo`;
+
+const SCOPE = 'openid profile email';
+
+// Short-lived cookies that carry the PKCE verifier and CSRF state across the
+// redirect to the auth service and back. Cleared as soon as the callback
+// consumes them.
+export const OAUTH_VERIFIER_COOKIE = 'fb_oauth_verifier';
+export const OAUTH_STATE_COOKIE = 'fb_oauth_state';
+export const OAUTH_REDIRECT_COOKIE = 'fb_oauth_redirect';
+export const OAUTH_COOKIE_MAX_AGE = 60 * 10; // 10 minutes
+
+// Only a same-origin relative path is a valid post-login redirect target —
+// rejects absolute/protocol-relative URLs (open-redirect) and backslashes
+// (browsers treat `\` as `/` in some contexts, defeating the leading-slash
+// check). Also rejects tab/CR/LF: URL parsers strip these per the WHATWG URL
+// spec, so e.g. "/\t/evil.com" passes a naive same-origin check here but is
+// parsed as "//evil.com" — protocol-relative — by the time a browser follows
+// the resulting redirect.
+export function isSafeRedirectPath(value: string): boolean {
+  return (
+    value.startsWith('/') &&
+    !value.startsWith('//') &&
+    !value.includes('\\') &&
+    !/[\t\r\n]/.test(value)
+  );
+}
+
+export function buildAuthorizeUrl(opts: {
+  clientId: string;
+  redirectUri: string;
+  state: string;
+  codeChallenge: string;
+}): string {
+  const url = new URL(AUTHORIZE_ENDPOINT);
+  url.searchParams.set('response_type', 'code');
+  url.searchParams.set('client_id', opts.clientId);
+  url.searchParams.set('redirect_uri', opts.redirectUri);
+  url.searchParams.set('scope', SCOPE);
+  url.searchParams.set('code_challenge', opts.codeChallenge);
+  url.searchParams.set('code_challenge_method', 'S256');
+  url.searchParams.set('state', opts.state);
+  return url.toString();
+}
+
+type TokenResponse = {
+  access_token: string;
+};
+
+export async function exchangeCodeForToken(opts: {
+  code: string;
+  redirectUri: string;
+  codeVerifier: string;
+  clientId: string;
+  clientSecret: string;
+}): Promise<TokenResponse> {
+  const body = new URLSearchParams({
+    grant_type: 'authorization_code',
+    code: opts.code,
+    redirect_uri: opts.redirectUri,
+    client_id: opts.clientId,
+    client_secret: opts.clientSecret,
+    code_verifier: opts.codeVerifier,
+  });
+
+  const response = await fetch(TOKEN_ENDPOINT, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+    body,
+  });
+
+  if (!response.ok) {
+    throw new Error(`Token exchange failed with status ${response.status}`);
+  }
+
+  return response.json();
+}
+
+export type UserInfo = {
+  sub: string;
+  name?: string;
+  email?: string;
+  email_verified?: boolean;
+  picture?: string;
+};
+
+export async function fetchUserInfo(accessToken: string): Promise<UserInfo> {
+  const response = await fetch(USERINFO_ENDPOINT, {
+    headers: { Authorization: `Bearer ${accessToken}` },
+  });
+
+  if (!response.ok) {
+    throw new Error(`Userinfo request failed with status ${response.status}`);
+  }
+
+  return response.json();
+}
diff --git a/src/lib/pkce.ts b/src/lib/pkce.ts
new file mode 100644
index 00000000..80cda2d4
--- /dev/null
+++ b/src/lib/pkce.ts
@@ -0,0 +1,17 @@
+import { base64urlEncode } from './base64url';
+
+export function generateCodeVerifier(): string {
+  return base64urlEncode(crypto.getRandomValues(new Uint8Array(32)));
+}
+
+export async function generateCodeChallenge(verifier: string): Promise<string> {
+  const digest = await crypto.subtle.digest(
+    'SHA-256',
+    new TextEncoder().encode(verifier),
+  );
+  return base64urlEncode(new Uint8Array(digest));
+}
+
+export function generateState(): string {
+  return base64urlEncode(crypto.getRandomValues(new Uint8Array(16)));
+}
diff --git a/src/lib/safe-url.ts b/src/lib/safe-url.ts
new file mode 100644
index 00000000..3297122f
--- /dev/null
+++ b/src/lib/safe-url.ts
@@ -0,0 +1,14 @@
+// Developer-supplied URLs (Developer.URL, DeveloperHistoryEntry.URL) are
+// rendered as <a href>. A javascript:/data: URI there would execute in the
+// viewer's session when clicked — including a moderator's, on the history
+// and moderation pages. Only http(s) URLs are safe to render as a link;
+// anything else should be shown as plain text instead.
+export function isSafeHttpUrl(url: string | undefined): boolean {
+  if (!url) return false;
+  try {
+    const { protocol } = new URL(url);
+    return protocol === 'http:' || protocol === 'https:';
+  } catch {
+    return false;
+  }
+}
diff --git a/src/lib/session.ts b/src/lib/session.ts
new file mode 100644
index 00000000..07b40e46
--- /dev/null
+++ b/src/lib/session.ts
@@ -0,0 +1,98 @@
+import type { AstroCookies } from 'astro';
+import { base64urlEncode, base64urlDecode } from './base64url';
+
+// A self-contained, HMAC-signed session cookie. Deliberately does not persist
+// or depend on the auth service's own tokens past the initial code exchange —
+// once we have the user's identity we mint our own session, independent of
+// the auth service's access/refresh token lifetimes.
+
+export const SESSION_COOKIE = 'fb_session';
+export const SESSION_MAX_AGE = 60 * 60 * 24 * 30; // 30 days
+
+export type SessionUser = {
+  sub: string;
+  name: string;
+  email: string;
+  picture?: string;
+};
+
+type SessionPayload = SessionUser & { exp: number };
+
+async function importSigningKey(secret: string): Promise<CryptoKey> {
+  return crypto.subtle.importKey(
+    'raw',
+    new TextEncoder().encode(secret),
+    { name: 'HMAC', hash: 'SHA-256' },
+    false,
+    ['sign', 'verify'],
+  );
+}
+
+export async function createSessionCookieValue(
+  user: SessionUser,
+  secret: string,
+): Promise<string> {
+  const payload: SessionPayload = {
+    ...user,
+    exp: Math.floor(Date.now() / 1000) + SESSION_MAX_AGE,
+  };
+  const payloadB64 = base64urlEncode(
+    new TextEncoder().encode(JSON.stringify(payload)),
+  );
+  const key = await importSigningKey(secret);
+  const signature = await crypto.subtle.sign(
+    'HMAC',
+    key,
+    new TextEncoder().encode(payloadB64),
+  );
+  return `${payloadB64}.${base64urlEncode(new Uint8Array(signature))}`;
+}
+
+async function verifySessionCookieValue(
+  value: string,
+  secret: string,
+): Promise<SessionUser | null> {
+  const [payloadB64, signatureB64] = value.split('.');
+  if (!payloadB64 || !signatureB64) return null;
+
+  const key = await importSigningKey(secret);
+  let valid: boolean;
+  try {
+    valid = await crypto.subtle.verify(
+      'HMAC',
+      key,
+      base64urlDecode(signatureB64),
+      new TextEncoder().encode(payloadB64),
+    );
+  } catch {
+    return null;
+  }
+  if (!valid) return null;
+
+  let payload: SessionPayload;
+  try {
+    payload = JSON.parse(new TextDecoder().decode(base64urlDecode(payloadB64)));
+  } catch {
+    return null;
+  }
+
+  if (payload.exp < Math.floor(Date.now() / 1000)) {
+    return null;
+  }
+
+  return {
+    sub: payload.sub,
+    name: payload.name,
+    email: payload.email,
+    picture: payload.picture,
+  };
+}
+
+export async function getSessionUser(
+  cookies: AstroCookies,
+  secret: string,
+): Promise<SessionUser | null> {
+  const value = cookies.get(SESSION_COOKIE)?.value;
+  if (!value) return null;
+  return verifySessionCookieValue(value, secret);
+}
diff --git a/src/lib/submission-form.ts b/src/lib/submission-form.ts
new file mode 100644
index 00000000..309a9b97
--- /dev/null
+++ b/src/lib/submission-form.ts
@@ -0,0 +1,102 @@
+import { EXTENSION_TYPES, SOURCE_TYPES } from '@/types';
+import type {
+  Developer,
+  Extension,
+  Release,
+  Repository,
+  SubmissionPayload,
+} from '@/types';
+import { formString } from './form';
+
+// Thrown for form-level validation failures that should be shown to the
+// user, distinct from ApiRequestError (the api rejecting an otherwise
+// well-formed payload) — see the try/catch in new.astro/edit.astro.
+export class SubmissionValidationError extends Error {}
+
+function isExtensionType(value: string): value is Extension['type'] {
+  return (EXTENSION_TYPES as readonly string[]).includes(value);
+}
+
+function isSourceType(value: string): value is Repository['type'] {
+  return (SOURCE_TYPES as readonly string[]).includes(value);
+}
+
+// Builds a SubmissionPayload from the ExtensionSubmissionForm component's
+// fields. A new release is only appended when version_tag is filled — for
+// edits that's optional (see the form's required={!isEdit}), and the api
+// replaces the whole releases array on approval, so existing releases are
+// always carried through unchanged.
+export function buildSubmissionPayload(
+  form: FormData,
+  developer: Developer,
+  existingExtension?: Extension,
+): SubmissionPayload {
+  const str = (name: string) => formString(form, name);
+
+  const releases = existingExtension ? [...existingExtension.releases] : [];
+  let version = existingExtension?.version ?? '';
+  let downloadUrl = existingExtension?.download_url ?? '';
+
+  const newReleaseTag = str('version_tag');
+  if (!existingExtension && !newReleaseTag) {
+    throw new SubmissionValidationError(
+      'An initial release (version, release date, and download URL) is required.',
+    );
+  }
+  if (newReleaseTag) {
+    const releaseDate = str('release_date');
+    const releaseDownloadUrl = str('download_url');
+    const minVersion = str('min_fossbilling_version');
+    if (!releaseDate || !releaseDownloadUrl || !minVersion) {
+      throw new SubmissionValidationError(
+        'To add a new release, fill in the release date, download URL, and minimum FOSSBilling version.',
+      );
+    }
+
+    const release: Release = {
+      tag: newReleaseTag,
+      date: releaseDate,
+      download_url: releaseDownloadUrl,
+      changelog_url: str('changelog_url') || undefined,
+      min_fossbilling_version: minVersion,
+    };
+    releases.push(release);
+    version = release.tag;
+    downloadUrl = release.download_url;
+  }
+
+  const typeInput = str('type');
+  const sourceTypeInput = str('source_type');
+  if (!isExtensionType(typeInput) || !isSourceType(sourceTypeInput)) {
+    throw new SubmissionValidationError(
+      'Choose a valid extension type and repository host.',
+    );
+  }
+
+  return {
+    developer,
+    extension: {
+      // In edit mode, always use the id of the already-verified extension —
+      // never the form's own extension_id — so the payload can't be aimed at
+      // a different extension than the one the caller was confirmed to own.
+      id: existingExtension?.id ?? str('extension_id').toLowerCase(),
+      type: typeInput,
+      name: str('name'),
+      description: str('description'),
+      releases,
+      website: str('website'),
+      license: {
+        name: str('license_name'),
+        URL: str('license_url') || undefined,
+      },
+      icon_url: str('icon_url') || undefined,
+      readme: str('readme'),
+      source: {
+        type: sourceTypeInput,
+        repo: str('source_repo'),
+      },
+      version,
+      download_url: downloadUrl,
+    },
+  };
+}
diff --git a/src/lib/users.ts b/src/lib/users.ts
new file mode 100644
index 00000000..301bfaf5
--- /dev/null
+++ b/src/lib/users.ts
@@ -0,0 +1,104 @@
+import type { UserInfo } from './oauth';
+
+export async function upsertUser(
+  db: D1Database,
+  info: UserInfo,
+): Promise<void> {
+  const now = new Date().toISOString();
+  await db
+    .prepare(
+      `INSERT INTO users (id, name, email, email_verified, picture, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT(id) DO UPDATE SET
+         name = excluded.name,
+         email = excluded.email,
+         email_verified = excluded.email_verified,
+         picture = excluded.picture,
+         updated_at = excluded.updated_at`,
+    )
+    .bind(
+      info.sub,
+      info.name ?? null,
+      info.email ?? null,
+      info.email_verified ? 1 : 0,
+      info.picture ?? null,
+      now,
+      now,
+    )
+    .run();
+}
+
+export async function userExists(
+  db: D1Database,
+  userId: string,
+): Promise<boolean> {
+  const row = await db
+    .prepare('SELECT 1 FROM users WHERE id = ?')
+    .bind(userId)
+    .first();
+  return row !== null;
+}
+
+export async function isModerator(
+  db: D1Database,
+  userId: string,
+): Promise<boolean> {
+  const row = await db
+    .prepare('SELECT is_moderator FROM users WHERE id = ?')
+    .bind(userId)
+    .first<{ is_moderator: number }>();
+  return row?.is_moderator === 1;
+}
+
+export async function deleteUser(
+  db: D1Database,
+  userId: string,
+): Promise<void> {
+  await db.prepare('DELETE FROM users WHERE id = ?').bind(userId).run();
+}
+
+export type UserProfile = {
+  display_name: string | null;
+  bio: string | null;
+};
+
+// display_name/bio are a personal profile, separate from the name/email/
+// picture synced from the auth provider on every login (upsertUser above
+// never touches them) and separate from any developer/publisher identity.
+export async function getUserProfile(
+  db: D1Database,
+  userId: string,
+): Promise<UserProfile> {
+  const row = await db
+    .prepare('SELECT display_name, bio FROM users WHERE id = ?')
+    .bind(userId)
+    .first<UserProfile>();
+  return row ?? { display_name: null, bio: null };
+}
+
+// Callback.ts deliberately doesn't fail sign-in if upsertUser fails (a
+// transient write error shouldn't block signing in), which can leave a
+// signed-in user with no `users` row. Without the row, an UPDATE here
+// would silently affect zero rows — this would report success while saving
+// nothing. Ensure the row exists first so the UPDATE always lands.
+export async function updateUserProfile(
+  db: D1Database,
+  userId: string,
+  profile: UserProfile,
+): Promise<void> {
+  const now = new Date().toISOString();
+  await db
+    .prepare(
+      `INSERT INTO users (id, created_at, updated_at) VALUES (?, ?, ?)
+       ON CONFLICT(id) DO NOTHING`,
+    )
+    .bind(userId, now, now)
+    .run();
+
+  await db
+    .prepare(
+      'UPDATE users SET display_name = ?, bio = ?, updated_at = ? WHERE id = ?',
+    )
+    .bind(profile.display_name, profile.bio, now, userId)
+    .run();
+}
diff --git a/src/pages/account/delete.astro b/src/pages/account/delete.astro
new file mode 100644
index 00000000..df7aed63
--- /dev/null
+++ b/src/pages/account/delete.astro
@@ -0,0 +1,96 @@
+---
+import Base from '../../layouts/Base.astro';
+import { env } from 'cloudflare:workers';
+import { requireUser } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+import { getDeveloperByOwner, getExtensionsByOwner } from '@/lib/database';
+import { deleteUser } from '@/lib/users';
+import { SESSION_COOKIE } from '@/lib/session';
+
+const guard = await requireUser(Astro, env);
+if (guard instanceof Response) return guard;
+const user = guard;
+
+const developer = await getDeveloperByOwner(env.DB_EXTENSIONS, user.sub);
+const extensions = developer
+  ? await getExtensionsByOwner(env.DB_EXTENSIONS, user.sub)
+  : [];
+
+let error: string | null = null;
+
+// extensions.length > 0 falls through here as a no-op — the message below
+// already explains why, so no separate error banner is needed.
+if (Astro.request.method === 'POST' && extensions.length === 0) {
+  if (developer) {
+    const api = createApiClient(env, user.sub);
+    try {
+      await api.deleteDeveloperProfile();
+    } catch (e) {
+      error =
+        e instanceof ApiRequestError
+          ? e.message
+          : 'Unable to delete your developer profile. Please try again.';
+    }
+  }
+
+  if (!error) {
+    await deleteUser(env.DB_EXTENSIONS, user.sub);
+    Astro.cookies.delete(SESSION_COOKIE, { path: '/' });
+    return Astro.redirect('/?account_deleted=1');
+  }
+}
+---
+
+<Base title="Delete account — FOSSBilling Extensions">
+  <div class="max-w-2xl mx-auto space-y-6">
+    <h1 class="text-2xl font-semibold tracking-tight text-destructive">
+      Delete account
+    </h1>
+
+    {
+      error && (
+        <div class="rounded-md border border-destructive/50 bg-destructive/10 px-4 py-3 text-sm text-destructive">
+          {error}
+        </div>
+      )
+    }
+
+    {
+      extensions.length > 0 ? (
+        <p class="text-sm text-muted-foreground">
+          You have {extensions.length} published extension
+          {extensions.length === 1 ? '' : 's'} under your developer profile.
+          Transfer ownership or remove them from{' '}
+          <a href="/account/developer">your developer profile</a> before
+          deleting your account.
+        </p>
+      ) : (
+        <div class="card space-y-4">
+          <p class="text-sm text-muted-foreground">
+            This permanently deletes your account
+            {developer && ' and your developer profile'}. This can't be undone.
+          </p>
+          <ul class="text-sm text-muted-foreground list-disc pl-5 space-y-1">
+            <li>Your personal profile (display name, bio) is removed.</li>
+            {developer && (
+              <li>
+                Your developer profile ({developer.name}) and its public page
+                are removed; the ID may be used by someone else afterward.
+              </li>
+            )}
+          </ul>
+          <div class="flex justify-end gap-3">
+            <a href="/account" class="btn" data-variant="ghost">
+              Cancel
+            </a>
+            <form method="POST">
+              <button type="submit" class="btn" data-variant="destructive">
+                Permanently delete my account
+              </button>
+            </form>
+          </div>
+        </div>
+      )
+    }
+  </div>
+</Base>
diff --git a/src/pages/account/developer/index.astro b/src/pages/account/developer/index.astro
new file mode 100644
index 00000000..0217c8f8
--- /dev/null
+++ b/src/pages/account/developer/index.astro
@@ -0,0 +1,389 @@
+---
+import Base from '../../../layouts/Base.astro';
+import { env } from 'cloudflare:workers';
+import { requireUser } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+import { getDeveloperByOwner, getExtensionsByOwner } from '@/lib/database';
+import {
+  buildDeveloperProfile,
+  DeveloperValidationError,
+} from '@/lib/developer-form';
+import { DEVELOPER_TYPES } from '@/types';
+import type {
+  DeveloperClaim,
+  DeveloperProfileInput,
+  DeveloperTransfer,
+} from '@/types';
+
+const guard = await requireUser(Astro, env);
+if (guard instanceof Response) return guard;
+const user = guard;
+
+let developer = await getDeveloperByOwner(env.DB_EXTENSIONS, user.sub);
+const isEdit = Boolean(developer);
+
+// Gates both the delete-profile action below and full account deletion
+// (/account/delete) — a developer profile with published extensions can't
+// be removed without orphaning them first.
+const extensions = isEdit
+  ? await getExtensionsByOwner(env.DB_EXTENSIONS, user.sub)
+  : [];
+
+const api = createApiClient(env, user.sub);
+
+let error: string | null = Astro.url.searchParams.get('error');
+let transferResult: DeveloperTransfer | null = null;
+// Falls back to the just-submitted values on a failed save, so a rejected
+// submission (e.g. duplicate id) doesn't blank the form and force retyping.
+let submitted: DeveloperProfileInput | null = null;
+
+if (Astro.request.method === 'POST') {
+  const form = await Astro.request.formData();
+
+  // transfer-initiate can't redirect like every other action in this app
+  // does — the token must never appear in a URL, so it's rendered inline
+  // instead. transfer-revoke has no such constraint and lives in its own
+  // route (transfer/revoke.ts), matching the rest of the app.
+  if (form.get('intent') === 'transfer-initiate' && developer) {
+    try {
+      transferResult = await api.initiateTransfer(developer.id);
+    } catch (e) {
+      error =
+        e instanceof ApiRequestError
+          ? e.message
+          : 'Unable to create a transfer link. Please try again.';
+    }
+  } else if (form.get('intent') === 'delete' && developer) {
+    // extensions.length > 0 falls through here as a no-op — the danger-zone
+    // card below already explains why, so no separate error is needed.
+    if (extensions.length === 0) {
+      try {
+        await api.deleteDeveloperProfile();
+        return Astro.redirect('/account?profile_deleted=1');
+      } catch (e) {
+        error =
+          e instanceof ApiRequestError
+            ? e.message
+            : 'Unable to delete your developer profile. Please try again.';
+      }
+    }
+  } else {
+    try {
+      const payload = buildDeveloperProfile(form, developer);
+      submitted = payload;
+      developer = await api.upsertDeveloperProfile(payload);
+      return Astro.redirect('/account?profile_saved=1');
+    } catch (e) {
+      error =
+        e instanceof ApiRequestError || e instanceof DeveloperValidationError
+          ? e.message
+          : 'Something went wrong saving your developer profile. Please try again.';
+    }
+  }
+}
+
+// Form field values only — isEdit/preview/transfer sections below still key
+// off the real (saved) `developer`, not a failed, unsaved submission.
+const fields = submitted ?? developer;
+
+let myClaims: DeveloperClaim[] = [];
+if (!isEdit) {
+  try {
+    myClaims = await api.listMyClaims();
+  } catch {
+    // non-fatal — just don't show claim status
+  }
+}
+---
+
+<Base title="Developer profile — FOSSBilling Extensions">
+  <div class="max-w-2xl mx-auto space-y-6">
+    <h1 class="text-2xl font-semibold tracking-tight">Developer profile</h1>
+    <p class="text-muted-foreground text-sm">
+      This is the publisher identity shown on your extensions in the directory,
+      and on your public developer page. Changes take effect immediately — you
+      can submit extensions under this profile right away. A moderator will
+      review it separately and mark it approved, shown as a badge below.
+    </p>
+
+    {
+      !isEdit && myClaims.length > 0 && (
+        <div class="card space-y-2">
+          <h2 class="font-semibold">Your profile claims</h2>
+          <ul class="space-y-2">
+            {myClaims.map((c) => (
+              <li class="text-sm flex items-center justify-between gap-3">
+                <code>{c.developer_id}</code>
+                {c.status === 'pending' && (
+                  <span class="badge-secondary">Pending review</span>
+                )}
+                {c.status === 'approved' && <span class="badge">Approved</span>}
+                {c.status === 'rejected' && (
+                  <span class="badge-secondary">
+                    Rejected{c.review_note ? `: ${c.review_note}` : ''}
+                  </span>
+                )}
+              </li>
+            ))}
+          </ul>
+        </div>
+      )
+    }
+
+    {
+      isEdit && (
+        <div class="card flex items-center gap-4">
+          {developer!.avatar_url && (
+            <img
+              src={developer!.avatar_url}
+              alt=""
+              class="w-14 h-14 rounded-full object-cover"
+            />
+          )}
+          <div class="flex-1">
+            <p class="font-medium flex items-center gap-2">
+              {developer!.name}
+              {developer!.approved ? (
+                <span class="badge">Approved</span>
+              ) : (
+                <span class="badge-secondary">Not yet reviewed</span>
+              )}
+            </p>
+            {developer!.bio && (
+              <p class="text-sm text-muted-foreground mt-1">{developer!.bio}</p>
+            )}
+          </div>
+          <a
+            href={`/developer/${developer!.id}`}
+            class="btn"
+            data-size="sm"
+            data-variant="outline"
+          >
+            View public profile
+          </a>
+        </div>
+      )
+    }
+
+    {
+      error && (
+        <div class="rounded-md border border-destructive/50 bg-destructive/10 px-4 py-3 text-sm text-destructive">
+          {error}
+        </div>
+      )
+    }
+
+    <form method="POST" class="space-y-8">
+      <fieldset class="fieldset space-y-4">
+        <legend class="font-semibold mb-2">Publisher identity</legend>
+        <div class="field">
+          <label for="id">Publisher ID</label>
+          <input
+            class="input"
+            type="text"
+            id="id"
+            name="id"
+            required
+            pattern="[a-z0-9]+(-[a-z0-9]+)*"
+            placeholder="my-org"
+            value={fields?.id}
+            readonly={isEdit}
+          />
+          {
+            isEdit && (
+              <p class="text-sm text-muted-foreground">
+                The ID can't be changed after it's created.
+              </p>
+            )
+          }
+        </div>
+        <div class="field">
+          <label for="name">Publisher name</label>
+          <input
+            class="input"
+            type="text"
+            id="name"
+            name="name"
+            required
+            value={fields?.name}
+          />
+        </div>
+        <div class="field">
+          <label for="type">Publisher type</label>
+          <select class="select" id="type" name="type">
+            {
+              DEVELOPER_TYPES.map((t) => (
+                <option value={t} selected={fields?.type === t}>
+                  {t}
+                </option>
+              ))
+            }
+          </select>
+        </div>
+        <div class="field">
+          <label for="url">Publisher URL (optional)</label>
+          <input
+            class="input"
+            type="url"
+            id="url"
+            name="url"
+            value={fields?.URL}
+          />
+        </div>
+      </fieldset>
+
+      <fieldset class="fieldset space-y-4">
+        <legend class="font-semibold mb-2">Public profile</legend>
+        <p class="text-sm text-muted-foreground -mt-2">
+          Shown on your public developer page at
+          {developer ? ` /developer/${developer.id}` : ' /developer/<your-id>'}.
+        </p>
+        <div class="field">
+          <label for="avatar_url">Avatar/logo URL (optional)</label>
+          <input
+            class="input"
+            type="url"
+            id="avatar_url"
+            name="avatar_url"
+            value={fields?.avatar_url}
+          />
+        </div>
+        <div class="field">
+          <label for="bio">Bio (optional)</label>
+          <textarea
+            class="textarea"
+            id="bio"
+            name="bio"
+            rows="4"
+            maxlength="500"
+            set:text={fields?.bio ?? ''}
+          />
+          <p class="text-sm text-muted-foreground">Up to 500 characters.</p>
+        </div>
+      </fieldset>
+
+      <fieldset class="fieldset space-y-4">
+        <legend class="font-semibold mb-2">Private contact</legend>
+        <div class="field">
+          <label for="contact_email">Contact email (optional)</label>
+          <input
+            class="input"
+            type="email"
+            id="contact_email"
+            name="contact_email"
+            value={fields?.contact_email}
+          />
+          <p class="text-sm text-muted-foreground">
+            Never shown publicly — only visible to FOSSBilling moderators, in
+            case they need to reach you about this profile or its extensions.
+          </p>
+        </div>
+      </fieldset>
+
+      <div class="flex justify-end gap-3">
+        <a href="/account" class="btn" data-variant="ghost">Cancel</a>
+        <button type="submit" class="btn">
+          {isEdit ? 'Save changes' : 'Create developer profile'}
+        </button>
+      </div>
+    </form>
+
+    {
+      isEdit && (
+        <div class="card space-y-3">
+          <h2 class="font-semibold">Transfer ownership</h2>
+          <p class="text-sm text-muted-foreground">
+            Generate a one-time link to hand this profile to a different
+            account. It works once and expires after 24 hours — generating a new
+            link invalidates any earlier one for this profile.
+          </p>
+
+          {Astro.url.searchParams.get('transfer_revoked') && (
+            <p class="text-sm text-muted-foreground">
+              Pending transfer link revoked.
+            </p>
+          )}
+          {Astro.url.searchParams.get('transfer_accepted') && (
+            <p class="text-sm text-muted-foreground">
+              You've accepted a transfer — this profile is now yours.
+            </p>
+          )}
+
+          {transferResult && (
+            <div class="rounded-md border px-4 py-3 text-sm space-y-2">
+              <p class="font-medium">
+                Share this link with the new owner — it won't be shown again:
+              </p>
+              <code class="block break-all bg-muted p-2 rounded">
+                {`${Astro.url.origin}/account/developer/transfer/${transferResult.token}`}
+              </code>
+              <p class="text-muted-foreground">
+                Expires {new Date(transferResult.expires_at).toLocaleString()}.
+              </p>
+            </div>
+          )}
+
+          <div class="flex gap-3">
+            <form method="POST">
+              <input type="hidden" name="intent" value="transfer-initiate" />
+              <button
+                type="submit"
+                class="btn"
+                data-size="sm"
+                data-variant="outline"
+              >
+                Generate transfer link
+              </button>
+            </form>
+            <form method="POST" action="/account/developer/transfer/revoke">
+              <button
+                type="submit"
+                class="btn"
+                data-size="sm"
+                data-variant="ghost"
+              >
+                Revoke pending link
+              </button>
+            </form>
+          </div>
+        </div>
+      )
+    }
+
+    {
+      isEdit && (
+        <div class="card space-y-3">
+          <h2 class="font-semibold text-destructive">
+            Delete developer profile
+          </h2>
+          {extensions.length > 0 ? (
+            <p class="text-sm text-muted-foreground">
+              You have {extensions.length} published extension
+              {extensions.length === 1 ? '' : 's'} under this profile. Transfer
+              ownership or remove them before deleting it.
+            </p>
+          ) : (
+            <>
+              <p class="text-sm text-muted-foreground">
+                Permanently deletes your publisher identity (name, bio, contact
+                info) and its public page. This can't be undone, and the ID may
+                be used by someone else afterward.
+              </p>
+              <form method="POST">
+                <input type="hidden" name="intent" value="delete" />
+                <button
+                  type="submit"
+                  class="btn"
+                  data-size="sm"
+                  data-variant="outline"
+                >
+                  Delete developer profile
+                </button>
+              </form>
+            </>
+          )}
+        </div>
+      )
+    }
+  </div>
+</Base>
diff --git a/src/pages/account/developer/transfer/[token].astro b/src/pages/account/developer/transfer/[token].astro
new file mode 100644
index 00000000..fc37dc70
--- /dev/null
+++ b/src/pages/account/developer/transfer/[token].astro
@@ -0,0 +1,56 @@
+---
+import Base from '../../../../layouts/Base.astro';
+import { env } from 'cloudflare:workers';
+import { requireUser } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+
+const guard = await requireUser(Astro, env);
+if (guard instanceof Response) return guard;
+const user = guard;
+
+const { token } = Astro.params;
+if (!token) {
+  return Astro.redirect('/404');
+}
+
+let error: string | null = null;
+
+if (Astro.request.method === 'POST') {
+  const api = createApiClient(env, user.sub);
+  try {
+    await api.acceptTransfer(token);
+    return Astro.redirect('/account/developer?transfer_accepted=1');
+  } catch (e) {
+    error =
+      e instanceof ApiRequestError
+        ? e.message
+        : 'Unable to accept this transfer. Please try again.';
+  }
+}
+---
+
+<Base title="Accept developer profile transfer — FOSSBilling Extensions">
+  <div class="max-w-lg mx-auto space-y-6">
+    <h1 class="text-2xl font-semibold tracking-tight">
+      Accept profile transfer
+    </h1>
+    <p class="text-muted-foreground text-sm">
+      Someone has sent you a link to take ownership of a developer profile.
+      Accepting replaces any developer profile you currently own with this one,
+      and clears its approved badge until a moderator reviews it again.
+    </p>
+
+    {
+      error && (
+        <div class="rounded-md border border-destructive/50 bg-destructive/10 px-4 py-3 text-sm text-destructive">
+          {error}
+        </div>
+      )
+    }
+
+    <form method="POST" class="flex gap-3">
+      <button type="submit" class="btn">Accept transfer</button>
+      <a href="/account" class="btn" data-variant="ghost">Cancel</a>
+    </form>
+  </div>
+</Base>
diff --git a/src/pages/account/developer/transfer/revoke.ts b/src/pages/account/developer/transfer/revoke.ts
new file mode 100644
index 00000000..9f100645
--- /dev/null
+++ b/src/pages/account/developer/transfer/revoke.ts
@@ -0,0 +1,29 @@
+import type { APIRoute } from 'astro';
+import { env } from 'cloudflare:workers';
+import { requireUser } from '@/lib/auth-guard';
+import { getDeveloperByOwner } from '@/lib/database';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+
+export const POST: APIRoute = async (context) => {
+  const guard = await requireUser(context, env);
+  if (guard instanceof Response) return guard;
+  const user = guard;
+
+  const developer = await getDeveloperByOwner(env.DB_EXTENSIONS, user.sub);
+  if (!developer) return context.redirect('/account/developer');
+
+  const api = createApiClient(env, user.sub);
+  try {
+    await api.revokeTransfer(developer.id);
+  } catch (e) {
+    const message =
+      e instanceof ApiRequestError
+        ? e.message
+        : 'Unable to revoke the pending transfer.';
+    return context.redirect(
+      `/account/developer?error=${encodeURIComponent(message)}`,
+    );
+  }
+
+  return context.redirect('/account/developer?transfer_revoked=1');
+};
diff --git a/src/pages/account/extensions/[id]/edit.astro b/src/pages/account/extensions/[id]/edit.astro
new file mode 100644
index 00000000..617648b1
--- /dev/null
+++ b/src/pages/account/extensions/[id]/edit.astro
@@ -0,0 +1,89 @@
+---
+import Base from '../../../../layouts/Base.astro';
+import ExtensionSubmissionForm from '@/components/ExtensionSubmissionForm.astro';
+import { env } from 'cloudflare:workers';
+import { requireUser } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+import { getDeveloperByOwner, getExtensionById } from '@/lib/database';
+import {
+  buildSubmissionPayload,
+  SubmissionValidationError,
+} from '@/lib/submission-form';
+import { formString } from '@/lib/form';
+import type { Extension } from '@/types';
+
+const guard = await requireUser(Astro, env);
+if (guard instanceof Response) return guard;
+const user = guard;
+
+const { id } = Astro.params;
+if (!id) {
+  return Astro.redirect('/404');
+}
+
+const extension = await getExtensionById(env.DB_EXTENSIONS, id);
+if (!extension) {
+  return Astro.redirect('/404');
+}
+
+const developer = await getDeveloperByOwner(env.DB_EXTENSIONS, user.sub);
+if (!developer || developer.id !== extension.developer.id) {
+  return Astro.redirect('/404');
+}
+
+let error: string | null = null;
+// Falls back to the just-submitted values on a rejected edit, so the form
+// doesn't reset to the currently-published extension and discard the edit.
+let submitted: Extension | null = null;
+
+if (Astro.request.method === 'POST') {
+  const form = await Astro.request.formData();
+  submitted = {
+    ...extension,
+    type: formString(form, 'type') as Extension['type'],
+    name: formString(form, 'name'),
+    description: formString(form, 'description'),
+    website: formString(form, 'website'),
+    icon_url: formString(form, 'icon_url') || undefined,
+    readme: formString(form, 'readme'),
+    license: {
+      name: formString(form, 'license_name'),
+      URL: formString(form, 'license_url') || undefined,
+    },
+    source: {
+      type: formString(form, 'source_type') as Extension['source']['type'],
+      repo: formString(form, 'source_repo'),
+    },
+  };
+
+  const api = createApiClient(env, user.sub);
+  try {
+    const payload = buildSubmissionPayload(form, developer, extension);
+    await api.submitExtension(payload);
+    return Astro.redirect('/account?submitted=1');
+  } catch (e) {
+    error =
+      e instanceof ApiRequestError || e instanceof SubmissionValidationError
+        ? e.message
+        : 'Something went wrong submitting your edit. Please try again.';
+  }
+}
+
+const fields = submitted ?? extension;
+---
+
+<Base title={`Edit ${extension.name} — FOSSBilling Extensions`}>
+  <div class="max-w-2xl mx-auto space-y-6">
+    <h1 class="text-2xl font-semibold tracking-tight">
+      Edit {extension.name}
+    </h1>
+    <p class="text-muted-foreground text-sm">
+      Edits are reviewed by a moderator before replacing the published listing.
+    </p>
+    <ExtensionSubmissionForm
+      developer={developer}
+      extension={fields}
+      error={error}
+    />
+  </div>
+</Base>
diff --git a/src/pages/account/extensions/new.astro b/src/pages/account/extensions/new.astro
new file mode 100644
index 00000000..912bd5a4
--- /dev/null
+++ b/src/pages/account/extensions/new.astro
@@ -0,0 +1,49 @@
+---
+import Base from '../../../layouts/Base.astro';
+import ExtensionSubmissionForm from '@/components/ExtensionSubmissionForm.astro';
+import { env } from 'cloudflare:workers';
+import { requireUser } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+import { getDeveloperByOwner } from '@/lib/database';
+import {
+  buildSubmissionPayload,
+  SubmissionValidationError,
+} from '@/lib/submission-form';
+
+const guard = await requireUser(Astro, env);
+if (guard instanceof Response) return guard;
+const user = guard;
+
+const developer = await getDeveloperByOwner(env.DB_EXTENSIONS, user.sub);
+if (!developer) {
+  return Astro.redirect('/account/developer?required_for=extension');
+}
+
+let error: string | null = null;
+
+if (Astro.request.method === 'POST') {
+  const form = await Astro.request.formData();
+  const api = createApiClient(env, user.sub);
+  try {
+    const payload = buildSubmissionPayload(form, developer);
+    await api.submitExtension(payload);
+    return Astro.redirect('/account?submitted=1');
+  } catch (e) {
+    error =
+      e instanceof ApiRequestError || e instanceof SubmissionValidationError
+        ? e.message
+        : 'Something went wrong submitting your extension. Please try again.';
+  }
+}
+---
+
+<Base title="Submit an extension — FOSSBilling Extensions">
+  <div class="max-w-2xl mx-auto space-y-6">
+    <h1 class="text-2xl font-semibold tracking-tight">Submit an extension</h1>
+    <p class="text-muted-foreground text-sm">
+      Submissions are reviewed by a moderator before appearing in the public
+      directory.
+    </p>
+    <ExtensionSubmissionForm developer={developer} error={error} />
+  </div>
+</Base>
diff --git a/src/pages/account/index.astro b/src/pages/account/index.astro
new file mode 100644
index 00000000..dab8e98f
--- /dev/null
+++ b/src/pages/account/index.astro
@@ -0,0 +1,214 @@
+---
+import Base from '../../layouts/Base.astro';
+import { env } from 'cloudflare:workers';
+import { requireUser } from '@/lib/auth-guard';
+import { createApiClient } from '@/lib/apiClient';
+import { getDeveloperByOwner, getExtensionsByOwner } from '@/lib/database';
+import { isModerator } from '@/lib/users';
+import { getLatestRelease } from '@/types';
+import type { Submission } from '@/types';
+
+const guard = await requireUser(Astro, env);
+if (guard instanceof Response) return guard;
+const user = guard;
+
+const [ownedExtensions, moderator, developer] = await Promise.all([
+  getExtensionsByOwner(env.DB_EXTENSIONS, user.sub),
+  isModerator(env.DB_EXTENSIONS, user.sub),
+  getDeveloperByOwner(env.DB_EXTENSIONS, user.sub),
+]);
+
+const banner: Record<string, string> = {
+  submitted: 'Submitted for review.',
+  profile_saved: 'Developer profile saved.',
+  profile_updated: 'Profile updated.',
+  profile_deleted: 'Developer profile deleted.',
+};
+const bannerKey = [
+  'submitted',
+  'profile_saved',
+  'profile_updated',
+  'profile_deleted',
+].find((key) => Astro.url.searchParams.has(key));
+
+const api = createApiClient(env, user.sub);
+let submissions: Submission[] = [];
+let submissionsError = false;
+try {
+  submissions = await api.listMySubmissions();
+} catch {
+  submissionsError = true;
+}
+
+const statusBadgeClass: Record<Submission['status'], string> = {
+  pending: 'badge-secondary',
+  approved: 'badge',
+  rejected: 'badge-outline text-destructive',
+};
+---
+
+<Base title="Your account — FOSSBilling Extensions">
+  <div class="max-w-3xl mx-auto space-y-8">
+    <header class="flex items-center justify-between gap-4">
+      <div class="flex items-center gap-4">
+        {
+          user.picture && (
+            <img src={user.picture} alt="" class="w-12 h-12 rounded-full" />
+          )
+        }
+        <div>
+          <h1 class="text-2xl font-semibold tracking-tight">{user.name}</h1>
+          <p class="text-muted-foreground text-sm">{user.email}</p>
+        </div>
+      </div>
+      <div class="flex items-center gap-2">
+        <a href="/account/profile" class="btn" data-variant="outline">
+          Your profile
+        </a>
+        {
+          moderator && (
+            <a href="/account/moderate" class="btn" data-variant="outline">
+              Moderation queue
+            </a>
+          )
+        }
+      </div>
+    </header>
+
+    {
+      bannerKey && (
+        <div class="rounded-md border border-border bg-muted px-4 py-3 text-sm">
+          {banner[bannerKey]}
+        </div>
+      )
+    }
+
+    <section class="card">
+      <header class="flex items-center justify-between">
+        <h2 class="font-semibold">Developer profile</h2>
+        <a
+          href="/account/developer"
+          class="btn"
+          data-size="sm"
+          data-variant="outline"
+        >
+          {developer ? 'Edit' : 'Create'}
+        </a>
+      </header>
+      <section>
+        {
+          developer ? (
+            <p class="text-sm flex items-center gap-2">
+              Publishing as <strong>{developer.name}</strong> ({developer.id})
+              {developer.approved ? (
+                <span class="badge">Approved</span>
+              ) : (
+                <span class="badge-secondary">Not yet reviewed</span>
+              )}
+            </p>
+          ) : (
+            <p class="text-muted-foreground text-sm">
+              You don't have a developer profile yet — create one before
+              submitting an extension.
+            </p>
+          )
+        }
+      </section>
+    </section>
+
+    <section class="card">
+      <header class="flex items-center justify-between">
+        <h2 class="font-semibold">Your extensions</h2>
+        <a href="/account/extensions/new" class="btn" data-size="sm">
+          Submit new extension
+        </a>
+      </header>
+      <section>
+        {
+          ownedExtensions.length === 0 ? (
+            <p class="text-muted-foreground text-sm">
+              You don't have any published extensions yet.
+            </p>
+          ) : (
+            <ul class="divide-y divide-border">
+              {ownedExtensions.map((ext) => {
+                const latest = getLatestRelease(ext);
+                return (
+                  <li class="py-3 flex items-center justify-between gap-3">
+                    <div>
+                      <p class="font-medium">{ext.name}</p>
+                      <p class="text-sm text-muted-foreground">
+                        v{latest?.tag ?? 'unknown'}
+                      </p>
+                    </div>
+                    <div class="flex gap-2">
+                      <a
+                        href={`/extension/${ext.id}`}
+                        class="btn"
+                        data-size="sm"
+                        data-variant="ghost"
+                      >
+                        View
+                      </a>
+                      <a
+                        href={`/account/extensions/${ext.id}/edit`}
+                        class="btn"
+                        data-size="sm"
+                        data-variant="outline"
+                      >
+                        Edit
+                      </a>
+                    </div>
+                  </li>
+                );
+              })}
+            </ul>
+          )
+        }
+      </section>
+    </section>
+
+    <section class="card">
+      <header>
+        <h2 class="font-semibold">Your submissions</h2>
+      </header>
+      <section>
+        {
+          submissionsError ? (
+            <p class="text-sm text-destructive">
+              Unable to load your submissions right now.
+            </p>
+          ) : submissions.length === 0 ? (
+            <p class="text-muted-foreground text-sm">No submissions yet.</p>
+          ) : (
+            <ul class="divide-y divide-border">
+              {submissions.map((s) => (
+                <li class="py-3 flex items-center justify-between gap-3">
+                  <div>
+                    <p class="font-medium">{s.payload.extension.name}</p>
+                    <p class="text-sm text-muted-foreground">
+                      {s.extension_id ? 'Edit' : 'New extension'} &middot;
+                      submitted {new Date(s.created_at).toLocaleDateString()}
+                    </p>
+                    {s.status === 'rejected' && s.review_note && (
+                      <p class="text-sm text-destructive mt-1">
+                        {s.review_note}
+                      </p>
+                    )}
+                  </div>
+                  <span class={statusBadgeClass[s.status]}>{s.status}</span>
+                </li>
+              ))}
+            </ul>
+          )
+        }
+      </section>
+    </section>
+
+    <div class="text-center">
+      <a href="/account/delete" class="text-sm text-destructive">
+        Delete account
+      </a>
+    </div>
+  </div>
+</Base>
diff --git a/src/pages/account/moderate/[id]/approve.ts b/src/pages/account/moderate/[id]/approve.ts
new file mode 100644
index 00000000..15b2aa27
--- /dev/null
+++ b/src/pages/account/moderate/[id]/approve.ts
@@ -0,0 +1,28 @@
+import type { APIRoute } from 'astro';
+import { env } from 'cloudflare:workers';
+import { requireModerator } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+
+export const POST: APIRoute = async (context) => {
+  const guard = await requireModerator(context, env);
+  if (guard instanceof Response) return guard;
+  const user = guard;
+
+  const { id } = context.params;
+  if (!id) return context.redirect('/account/moderate');
+
+  const api = createApiClient(env, user.sub);
+  try {
+    await api.approveSubmission(id);
+  } catch (e) {
+    const message =
+      e instanceof ApiRequestError
+        ? e.message
+        : 'Unable to approve submission.';
+    return context.redirect(
+      `/account/moderate?error=${encodeURIComponent(message)}`,
+    );
+  }
+
+  return context.redirect('/account/moderate');
+};
diff --git a/src/pages/account/moderate/[id]/reject.ts b/src/pages/account/moderate/[id]/reject.ts
new file mode 100644
index 00000000..f62b096f
--- /dev/null
+++ b/src/pages/account/moderate/[id]/reject.ts
@@ -0,0 +1,42 @@
+import type { APIRoute } from 'astro';
+import { env } from 'cloudflare:workers';
+import { requireModerator } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+import { formString } from '@/lib/form';
+
+export const POST: APIRoute = async (context) => {
+  const guard = await requireModerator(context, env);
+  if (guard instanceof Response) return guard;
+  const user = guard;
+
+  const { id } = context.params;
+  if (!id) return context.redirect('/account/moderate');
+
+  let form: FormData;
+  try {
+    form = await context.request.formData();
+  } catch {
+    return context.redirect(
+      `/account/moderate?error=${encodeURIComponent('Malformed request.')}`,
+    );
+  }
+  const reviewNote = formString(form, 'review_note');
+  if (!reviewNote) {
+    return context.redirect(
+      `/account/moderate?error=${encodeURIComponent('A reason is required to reject a submission.')}`,
+    );
+  }
+
+  const api = createApiClient(env, user.sub);
+  try {
+    await api.rejectSubmission(id, reviewNote);
+  } catch (e) {
+    const message =
+      e instanceof ApiRequestError ? e.message : 'Unable to reject submission.';
+    return context.redirect(
+      `/account/moderate?error=${encodeURIComponent(message)}`,
+    );
+  }
+
+  return context.redirect('/account/moderate');
+};
diff --git a/src/pages/account/moderate/developers/[id]/approve.ts b/src/pages/account/moderate/developers/[id]/approve.ts
new file mode 100644
index 00000000..21a19983
--- /dev/null
+++ b/src/pages/account/moderate/developers/[id]/approve.ts
@@ -0,0 +1,26 @@
+import type { APIRoute } from 'astro';
+import { env } from 'cloudflare:workers';
+import { requireModerator } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+
+export const POST: APIRoute = async (context) => {
+  const guard = await requireModerator(context, env);
+  if (guard instanceof Response) return guard;
+  const user = guard;
+
+  const { id } = context.params;
+  if (!id) return context.redirect('/account/moderate/developers');
+
+  const api = createApiClient(env, user.sub);
+  try {
+    await api.approveDeveloper(id);
+  } catch (e) {
+    const message =
+      e instanceof ApiRequestError ? e.message : 'Unable to approve profile.';
+    return context.redirect(
+      `/account/moderate/developers?error=${encodeURIComponent(message)}`,
+    );
+  }
+
+  return context.redirect('/account/moderate/developers');
+};
diff --git a/src/pages/account/moderate/developers/[id]/history.astro b/src/pages/account/moderate/developers/[id]/history.astro
new file mode 100644
index 00000000..18dadf35
--- /dev/null
+++ b/src/pages/account/moderate/developers/[id]/history.astro
@@ -0,0 +1,95 @@
+---
+import Base from '../../../../../layouts/Base.astro';
+import { env } from 'cloudflare:workers';
+import { requireModerator } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+import { isSafeHttpUrl } from '@/lib/safe-url';
+import type { DeveloperHistoryEntry } from '@/types';
+
+const guard = await requireModerator(Astro, env);
+if (guard instanceof Response) return guard;
+const user = guard;
+
+const { id } = Astro.params;
+if (!id) {
+  return Astro.redirect('/404');
+}
+
+const api = createApiClient(env, user.sub);
+let entries: DeveloperHistoryEntry[] = [];
+let loadError: string | null = null;
+try {
+  entries = await api.listDeveloperHistory(id);
+} catch (e) {
+  loadError =
+    e instanceof ApiRequestError
+      ? e.message
+      : 'Unable to load history for this developer profile.';
+}
+---
+
+<Base title={`Profile history: ${id} — FOSSBilling Extensions`}>
+  <div class="max-w-2xl mx-auto space-y-6">
+    <div class="flex items-center justify-between gap-4">
+      <h1 class="text-2xl font-semibold tracking-tight">
+        History for <code>{id}</code>
+      </h1>
+      <a href="/account/moderate/developers" class="btn" data-variant="outline">
+        Back to profiles
+      </a>
+    </div>
+
+    {
+      loadError && (
+        <div class="rounded-md border border-destructive/50 bg-destructive/10 px-4 py-3 text-sm text-destructive">
+          {loadError}
+        </div>
+      )
+    }
+
+    {
+      !loadError && entries.length === 0 && (
+        <p class="text-muted-foreground text-sm">
+          No recorded writes for this profile yet.
+        </p>
+      )
+    }
+
+    {
+      !loadError && entries.length > 0 && (
+        <ol class="space-y-4">
+          {entries.map((entry, i) => (
+            <li class="card">
+              <div class="flex items-center justify-between gap-4">
+                <p class="font-medium">
+                  {entry.name}
+                  {i === 0 && <span class="badge-secondary ml-2">Current</span>}
+                </p>
+                <time class="text-sm text-muted-foreground">
+                  {new Date(entry.changed_at).toLocaleString()}
+                </time>
+              </div>
+              <p class="text-sm text-muted-foreground mt-1">
+                {entry.type}
+                {entry.URL && (
+                  <>
+                    {' '}
+                    &middot;{' '}
+                    {isSafeHttpUrl(entry.URL) ? (
+                      <a href={entry.URL}>{entry.URL}</a>
+                    ) : (
+                      entry.URL
+                    )}
+                  </>
+                )}
+              </p>
+              <p class="text-sm text-muted-foreground mt-1">
+                Changed by <code>{entry.changed_by}</code>
+              </p>
+            </li>
+          ))}
+        </ol>
+      )
+    }
+  </div>
+</Base>
diff --git a/src/pages/account/moderate/developers/claims/[id]/approve.ts b/src/pages/account/moderate/developers/claims/[id]/approve.ts
new file mode 100644
index 00000000..9cbb27e0
--- /dev/null
+++ b/src/pages/account/moderate/developers/claims/[id]/approve.ts
@@ -0,0 +1,26 @@
+import type { APIRoute } from 'astro';
+import { env } from 'cloudflare:workers';
+import { requireModerator } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+
+export const POST: APIRoute = async (context) => {
+  const guard = await requireModerator(context, env);
+  if (guard instanceof Response) return guard;
+  const user = guard;
+
+  const { id } = context.params;
+  if (!id) return context.redirect('/account/moderate/developers/claims');
+
+  const api = createApiClient(env, user.sub);
+  try {
+    await api.approveClaim(id);
+  } catch (e) {
+    const message =
+      e instanceof ApiRequestError ? e.message : 'Unable to approve claim.';
+    return context.redirect(
+      `/account/moderate/developers/claims?error=${encodeURIComponent(message)}`,
+    );
+  }
+
+  return context.redirect('/account/moderate/developers/claims');
+};
diff --git a/src/pages/account/moderate/developers/claims/[id]/reject.ts b/src/pages/account/moderate/developers/claims/[id]/reject.ts
new file mode 100644
index 00000000..14409638
--- /dev/null
+++ b/src/pages/account/moderate/developers/claims/[id]/reject.ts
@@ -0,0 +1,42 @@
+import type { APIRoute } from 'astro';
+import { env } from 'cloudflare:workers';
+import { requireModerator } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+import { formString } from '@/lib/form';
+
+export const POST: APIRoute = async (context) => {
+  const guard = await requireModerator(context, env);
+  if (guard instanceof Response) return guard;
+  const user = guard;
+
+  const { id } = context.params;
+  if (!id) return context.redirect('/account/moderate/developers/claims');
+
+  let form: FormData;
+  try {
+    form = await context.request.formData();
+  } catch {
+    return context.redirect(
+      `/account/moderate/developers/claims?error=${encodeURIComponent('Malformed request.')}`,
+    );
+  }
+  const reviewNote = formString(form, 'review_note');
+  if (!reviewNote) {
+    return context.redirect(
+      `/account/moderate/developers/claims?error=${encodeURIComponent('A reason is required to reject a claim.')}`,
+    );
+  }
+
+  const api = createApiClient(env, user.sub);
+  try {
+    await api.rejectClaim(id, reviewNote);
+  } catch (e) {
+    const message =
+      e instanceof ApiRequestError ? e.message : 'Unable to reject claim.';
+    return context.redirect(
+      `/account/moderate/developers/claims?error=${encodeURIComponent(message)}`,
+    );
+  }
+
+  return context.redirect('/account/moderate/developers/claims');
+};
diff --git a/src/pages/account/moderate/developers/claims/index.astro b/src/pages/account/moderate/developers/claims/index.astro
new file mode 100644
index 00000000..dcb78e6b
--- /dev/null
+++ b/src/pages/account/moderate/developers/claims/index.astro
@@ -0,0 +1,108 @@
+---
+import Base from '../../../../../layouts/Base.astro';
+import { env } from 'cloudflare:workers';
+import { requireModerator } from '@/lib/auth-guard';
+import { createApiClient } from '@/lib/apiClient';
+import type { PendingDeveloperClaim } from '@/types';
+
+const guard = await requireModerator(Astro, env);
+if (guard instanceof Response) return guard;
+const user = guard;
+
+const api = createApiClient(env, user.sub);
+let claims: PendingDeveloperClaim[] = [];
+let loadError = false;
+try {
+  claims = await api.listPendingClaims();
+} catch {
+  loadError = true;
+}
+---
+
+<Base title="Developer profile claims — FOSSBilling Extensions">
+  <div class="max-w-3xl mx-auto space-y-6">
+    <div class="flex items-center justify-between gap-4">
+      <h1 class="text-2xl font-semibold tracking-tight">
+        Profile claims awaiting review
+      </h1>
+      <a href="/account/moderate/developers" class="btn" data-variant="outline">
+        Developer profiles
+      </a>
+    </div>
+
+    {
+      Astro.url.searchParams.get('error') && (
+        <div class="rounded-md border border-destructive/50 bg-destructive/10 px-4 py-3 text-sm text-destructive">
+          {Astro.url.searchParams.get('error')}
+        </div>
+      )
+    }
+
+    <p class="text-sm text-muted-foreground">
+      These profiles have no linked account. Approving gives the claimant
+      ownership immediately — there's no automated verification, so use the note
+      below (and the profile's public page) to judge legitimacy.
+    </p>
+
+    {
+      loadError ? (
+        <p class="text-sm text-destructive">
+          Unable to load pending claims right now.
+        </p>
+      ) : claims.length === 0 ? (
+        <p class="text-muted-foreground text-sm">
+          No profile claims awaiting review.
+        </p>
+      ) : (
+        <ul class="space-y-4">
+          {claims.map((c) => (
+            <li class="card space-y-3">
+              <header>
+                <h2 class="font-semibold">
+                  {c.developer_name} ({c.developer_id})
+                </h2>
+                <p class="text-sm text-muted-foreground">
+                  {c.developer_type} &middot; claimed by{' '}
+                  <code>{c.claimant_id}</code> on{' '}
+                  {new Date(c.created_at).toLocaleDateString()}
+                </p>
+                {c.note && <p class="text-sm mt-1">&ldquo;{c.note}&rdquo;</p>}
+              </header>
+              <div class="flex items-center gap-3 flex-wrap">
+                <form
+                  method="POST"
+                  action={`/account/moderate/developers/claims/${c.id}/approve`}
+                >
+                  <button type="submit" class="btn" data-size="sm">
+                    Approve
+                  </button>
+                </form>
+                <form
+                  method="POST"
+                  action={`/account/moderate/developers/claims/${c.id}/reject`}
+                  class="flex items-center gap-2"
+                >
+                  <input
+                    class="input"
+                    type="text"
+                    name="review_note"
+                    placeholder="Reason for rejecting (required)"
+                    required
+                  />
+                  <button
+                    type="submit"
+                    class="btn"
+                    data-size="sm"
+                    data-variant="destructive"
+                  >
+                    Reject
+                  </button>
+                </form>
+              </div>
+            </li>
+          ))}
+        </ul>
+      )
+    }
+  </div>
+</Base>
diff --git a/src/pages/account/moderate/developers/index.astro b/src/pages/account/moderate/developers/index.astro
new file mode 100644
index 00000000..20728d29
--- /dev/null
+++ b/src/pages/account/moderate/developers/index.astro
@@ -0,0 +1,145 @@
+---
+import Base from '../../../../layouts/Base.astro';
+import { env } from 'cloudflare:workers';
+import { requireModerator } from '@/lib/auth-guard';
+import { createApiClient } from '@/lib/apiClient';
+import { isSafeHttpUrl } from '@/lib/safe-url';
+import type { DeveloperProfile } from '@/types';
+
+const guard = await requireModerator(Astro, env);
+if (guard instanceof Response) return guard;
+const user = guard;
+
+const view =
+  Astro.url.searchParams.get('view') === 'all' ? 'all' : 'unapproved';
+
+const api = createApiClient(env, user.sub);
+let developers: DeveloperProfile[] = [];
+let loadError = false;
+try {
+  developers =
+    view === 'all'
+      ? await api.listAllDevelopers()
+      : await api.listUnapprovedDevelopers();
+} catch {
+  loadError = true;
+}
+---
+
+<Base title="Developer profiles — FOSSBilling Extensions">
+  <div class="max-w-3xl mx-auto space-y-6">
+    <div class="flex items-center justify-between gap-4">
+      <h1 class="text-2xl font-semibold tracking-tight">Developer profiles</h1>
+      <div class="flex items-center gap-2">
+        <a
+          href="/account/moderate/developers/claims"
+          class="btn"
+          data-size="sm"
+          data-variant="outline"
+        >
+          Claims queue
+        </a>
+        <a
+          href="/account/moderate"
+          class="btn"
+          data-size="sm"
+          data-variant="outline"
+        >
+          Extension queue
+        </a>
+      </div>
+    </div>
+
+    <nav class="flex gap-2">
+      {
+        (['unapproved', 'all'] as const).map((v) => (
+          <a
+            href={`/account/moderate/developers?view=${v}`}
+            class="btn"
+            data-size="sm"
+            data-variant={v === view ? 'primary' : 'outline'}
+          >
+            {v === 'unapproved' ? 'Awaiting review' : 'All profiles'}
+          </a>
+        ))
+      }
+    </nav>
+
+    {
+      Astro.url.searchParams.get('error') && (
+        <div class="rounded-md border border-destructive/50 bg-destructive/10 px-4 py-3 text-sm text-destructive">
+          {Astro.url.searchParams.get('error')}
+        </div>
+      )
+    }
+
+    <p class="text-sm text-muted-foreground">
+      These profiles are already live — approval is a trust badge, not a publish
+      gate. An edit to an approved profile clears its badge again until it's
+      reviewed here.
+    </p>
+
+    {
+      loadError ? (
+        <p class="text-sm text-destructive">
+          Unable to load developer profiles right now.
+        </p>
+      ) : developers.length === 0 ? (
+        <p class="text-muted-foreground text-sm">
+          {view === 'unapproved'
+            ? 'No developer profiles awaiting review.'
+            : 'No developer profiles yet.'}
+        </p>
+      ) : (
+        <ul class="space-y-4">
+          {developers.map((d) => (
+            <li class="card">
+              <header class="flex items-start justify-between gap-4">
+                <div>
+                  <h2 class="font-semibold flex items-center gap-2">
+                    {d.name} ({d.id})
+                    {d.approved && <span class="badge">Approved</span>}
+                  </h2>
+                  <p class="text-sm text-muted-foreground">
+                    {d.type}
+                    {d.URL && (
+                      <>
+                        {' '}
+                        &middot;{' '}
+                        {isSafeHttpUrl(d.URL) ? (
+                          <a href={d.URL}>{d.URL}</a>
+                        ) : (
+                          d.URL
+                        )}
+                      </>
+                    )}
+                  </p>
+                </div>
+                <div class="flex items-center gap-2">
+                  <a
+                    href={`/account/moderate/developers/${d.id}/history`}
+                    class="btn"
+                    data-size="sm"
+                    data-variant="outline"
+                  >
+                    History
+                  </a>
+                  {!d.approved && (
+                    <form
+                      method="POST"
+                      action={`/account/moderate/developers/${d.id}/approve`}
+                    >
+                      <button type="submit" class="btn" data-size="sm">
+                        Approve
+                      </button>
+                    </form>
+                  )}
+                </div>
+              </header>
+            </li>
+          ))}
+        </ul>
+      )
+    }
+  </div>
+</Base>
diff --git a/src/pages/account/moderate/index.astro b/src/pages/account/moderate/index.astro
new file mode 100644
index 00000000..fae7ea61
--- /dev/null
+++ b/src/pages/account/moderate/index.astro
@@ -0,0 +1,137 @@
+---
+import Base from '../../../layouts/Base.astro';
+import { env } from 'cloudflare:workers';
+import { requireModerator } from '@/lib/auth-guard';
+import { createApiClient } from '@/lib/apiClient';
+import type { Submission, SubmissionStatus } from '@/types';
+
+const guard = await requireModerator(Astro, env);
+if (guard instanceof Response) return guard;
+const user = guard;
+
+const statusParam = Astro.url.searchParams.get('status');
+const status: SubmissionStatus =
+  statusParam === 'approved' || statusParam === 'rejected'
+    ? statusParam
+    : 'pending';
+
+const api = createApiClient(env, user.sub);
+let submissions: Submission[] = [];
+let loadError = false;
+try {
+  submissions = await api.listQueue(status);
+} catch {
+  loadError = true;
+}
+---
+
+<Base title="Moderation queue — FOSSBilling Extensions">
+  <div class="max-w-3xl mx-auto space-y-6">
+    <div class="flex items-center justify-between gap-4">
+      <h1 class="text-2xl font-semibold tracking-tight">Moderation queue</h1>
+      <a href="/account/moderate/developers" class="btn" data-variant="outline">
+        Developer profiles
+      </a>
+    </div>
+
+    {
+      Astro.url.searchParams.get('error') && (
+        <div class="rounded-md border border-destructive/50 bg-destructive/10 px-4 py-3 text-sm text-destructive">
+          {Astro.url.searchParams.get('error')}
+        </div>
+      )
+    }
+
+    <nav class="flex gap-2">
+      {
+        (['pending', 'approved', 'rejected'] as const).map((s) => (
+          <a
+            href={`/account/moderate?status=${s}`}
+            class="btn"
+            data-size="sm"
+            data-variant={s === status ? 'primary' : 'outline'}
+          >
+            {s}
+          </a>
+        ))
+      }
+    </nav>
+
+    {
+      loadError ? (
+        <p class="text-sm text-destructive">
+          Unable to load the moderation queue right now.
+        </p>
+      ) : submissions.length === 0 ? (
+        <p class="text-muted-foreground text-sm">No {status} submissions.</p>
+      ) : (
+        <ul class="space-y-4">
+          {submissions.map((s) => (
+            <li class="card">
+              <header class="flex items-start justify-between gap-4">
+                <div>
+                  <h2 class="font-semibold">{s.payload.extension.name}</h2>
+                  <p class="text-sm text-muted-foreground">
+                    {s.extension_id ? 'Edit' : 'New extension'} by{' '}
+                    {s.payload.developer.name} ({s.developer_id}) &middot;
+                    submitted {new Date(s.created_at).toLocaleString()}
+                  </p>
+                </div>
+                <span class="badge-secondary">{s.payload.extension.type}</span>
+              </header>
+              <section>
+                <p class="text-sm">{s.payload.extension.description}</p>
+                <details class="mt-2">
+                  <summary class="text-sm text-muted-foreground cursor-pointer">
+                    Full payload
+                  </summary>
+                  <pre class="text-xs mt-2 overflow-x-auto bg-muted rounded-md p-3">
+                    {JSON.stringify(s.payload, null, 2)}
+                  </pre>
+                </details>
+                {s.status === 'pending' && (
+                  <div class="flex items-center gap-3 mt-4">
+                    <form
+                      method="POST"
+                      action={`/account/moderate/${s.id}/approve`}
+                    >
+                      <button type="submit" class="btn" data-size="sm">
+                        Approve
+                      </button>
+                    </form>
+                    <form
+                      method="POST"
+                      action={`/account/moderate/${s.id}/reject`}
+                      class="flex items-center gap-2 flex-1"
+                    >
+                      <input
+                        class="input"
+                        type="text"
+                        name="review_note"
+                        placeholder="Reason for rejection (required)"
+                        required
+                      />
+                      <button
+                        type="submit"
+                        class="btn"
+                        data-size="sm"
+                        data-variant="destructive"
+                      >
+                        Reject
+                      </button>
+                    </form>
+                  </div>
+                )}
+                {s.status !== 'pending' && s.review_note && (
+                  <p class="text-sm text-muted-foreground mt-2">
+                    Note: {s.review_note}
+                  </p>
+                )}
+              </section>
+            </li>
+          ))}
+        </ul>
+      )
+    }
+  </div>
+</Base>
diff --git a/src/pages/account/profile/index.astro b/src/pages/account/profile/index.astro
new file mode 100644
index 00000000..6fb5db7c
--- /dev/null
+++ b/src/pages/account/profile/index.astro
@@ -0,0 +1,68 @@
+---
+import Base from '../../../layouts/Base.astro';
+import { env } from 'cloudflare:workers';
+import { requireUser } from '@/lib/auth-guard';
+import { getUserProfile, updateUserProfile } from '@/lib/users';
+import { formString } from '@/lib/form';
+
+const guard = await requireUser(Astro, env);
+if (guard instanceof Response) return guard;
+const user = guard;
+
+if (Astro.request.method === 'POST') {
+  const form = await Astro.request.formData();
+  const displayName = formString(form, 'display_name');
+  const bio = formString(form, 'bio');
+
+  await updateUserProfile(env.DB_EXTENSIONS, user.sub, {
+    display_name: displayName || null,
+    bio: bio || null,
+  });
+  return Astro.redirect('/account?profile_updated=1');
+}
+
+const profile = await getUserProfile(env.DB_EXTENSIONS, user.sub);
+---
+
+<Base title="Your profile — FOSSBilling Extensions">
+  <div class="max-w-2xl mx-auto space-y-6">
+    <h1 class="text-2xl font-semibold tracking-tight">Your profile</h1>
+    <p class="text-muted-foreground text-sm">
+      Your personal profile, separate from any developer/publisher identity. Not
+      shown publicly yet — it's here for things like comments and ratings down
+      the line.
+    </p>
+
+    <form method="POST" class="space-y-6">
+      <div class="field">
+        <label for="display_name">Display name</label>
+        <input
+          class="input"
+          type="text"
+          id="display_name"
+          name="display_name"
+          placeholder={user.name}
+          value={profile.display_name ?? ''}
+        />
+        <p class="text-sm text-muted-foreground">
+          Defaults to "{user.name}" from your sign-in provider if left blank.
+        </p>
+      </div>
+      <div class="field">
+        <label for="bio">Bio</label>
+        <textarea
+          class="textarea"
+          id="bio"
+          name="bio"
+          rows="4"
+          set:text={profile.bio ?? ''}
+        />
+      </div>
+
+      <div class="flex justify-end gap-3">
+        <a href="/account" class="btn" data-variant="ghost">Cancel</a>
+        <button type="submit" class="btn">Save</button>
+      </div>
+    </form>
+  </div>
+</Base>
diff --git a/src/pages/auth/callback.ts b/src/pages/auth/callback.ts
new file mode 100644
index 00000000..2abf848a
--- /dev/null
+++ b/src/pages/auth/callback.ts
@@ -0,0 +1,87 @@
+import type { APIRoute } from 'astro';
+import { env } from 'cloudflare:workers';
+import {
+  exchangeCodeForToken,
+  fetchUserInfo,
+  isSafeRedirectPath,
+  OAUTH_VERIFIER_COOKIE,
+  OAUTH_STATE_COOKIE,
+  OAUTH_REDIRECT_COOKIE,
+} from '@/lib/oauth';
+import {
+  createSessionCookieValue,
+  SESSION_COOKIE,
+  SESSION_MAX_AGE,
+} from '@/lib/session';
+import { upsertUser } from '@/lib/users';
+
+export const GET: APIRoute = async ({ cookies, redirect, url }) => {
+  const verifier = cookies.get(OAUTH_VERIFIER_COOKIE)?.value;
+  const expectedState = cookies.get(OAUTH_STATE_COOKIE)?.value;
+  const redirectTo = cookies.get(OAUTH_REDIRECT_COOKIE)?.value;
+  cookies.delete(OAUTH_VERIFIER_COOKIE, { path: '/' });
+  cookies.delete(OAUTH_STATE_COOKIE, { path: '/' });
+  cookies.delete(OAUTH_REDIRECT_COOKIE, { path: '/' });
+
+  if (url.searchParams.get('error')) {
+    return redirect('/?auth_error=1');
+  }
+
+  const code = url.searchParams.get('code');
+  const state = url.searchParams.get('state');
+
+  if (
+    !code ||
+    !state ||
+    !verifier ||
+    !expectedState ||
+    state !== expectedState
+  ) {
+    return redirect('/?auth_error=1');
+  }
+
+  const redirectUri = `${url.origin}/auth/callback`;
+
+  let userInfo;
+  try {
+    const token = await exchangeCodeForToken({
+      code,
+      redirectUri,
+      codeVerifier: verifier,
+      clientId: env.AUTH_CLIENT_ID,
+      clientSecret: env.AUTH_CLIENT_SECRET,
+    });
+    userInfo = await fetchUserInfo(token.access_token);
+  } catch {
+    return redirect('/?auth_error=1');
+  }
+
+  // A write failure here shouldn't block signing in — the session below
+  // doesn't depend on it, only future ownership features will.
+  try {
+    await upsertUser(env.DB_EXTENSIONS, userInfo);
+  } catch {}
+
+  const secure = url.protocol === 'https:';
+  const sessionValue = await createSessionCookieValue(
+    {
+      sub: userInfo.sub,
+      name: userInfo.name ?? '',
+      email: userInfo.email ?? '',
+      picture: userInfo.picture,
+    },
+    env.SESSION_SECRET,
+  );
+
+  cookies.set(SESSION_COOKIE, sessionValue, {
+    httpOnly: true,
+    secure,
+    sameSite: 'lax',
+    path: '/',
+    maxAge: SESSION_MAX_AGE,
+  });
+
+  return redirect(
+    redirectTo && isSafeRedirectPath(redirectTo) ? redirectTo : '/',
+  );
+};
diff --git a/src/pages/auth/login.ts b/src/pages/auth/login.ts
new file mode 100644
index 00000000..db3c25f1
--- /dev/null
+++ b/src/pages/auth/login.ts
@@ -0,0 +1,62 @@
+import type { APIRoute } from 'astro';
+import { env } from 'cloudflare:workers';
+import {
+  generateCodeVerifier,
+  generateCodeChallenge,
+  generateState,
+} from '@/lib/pkce';
+import {
+  buildAuthorizeUrl,
+  isSafeRedirectPath,
+  OAUTH_VERIFIER_COOKIE,
+  OAUTH_STATE_COOKIE,
+  OAUTH_REDIRECT_COOKIE,
+  OAUTH_COOKIE_MAX_AGE,
+} from '@/lib/oauth';
+
+export const GET: APIRoute = async ({ cookies, redirect, url }) => {
+  const verifier = generateCodeVerifier();
+  const challenge = await generateCodeChallenge(verifier);
+  const state = generateState();
+  const secure = url.protocol === 'https:';
+
+  cookies.set(OAUTH_VERIFIER_COOKIE, verifier, {
+    httpOnly: true,
+    secure,
+    sameSite: 'lax',
+    path: '/',
+    maxAge: OAUTH_COOKIE_MAX_AGE,
+  });
+  cookies.set(OAUTH_STATE_COOKIE, state, {
+    httpOnly: true,
+    secure,
+    sameSite: 'lax',
+    path: '/',
+    maxAge: OAUTH_COOKIE_MAX_AGE,
+  });
+
+  const redirectTo = url.searchParams.get('redirect');
+  if (redirectTo && isSafeRedirectPath(redirectTo)) {
+    cookies.set(OAUTH_REDIRECT_COOKIE, redirectTo, {
+      httpOnly: true,
+      secure,
+      sameSite: 'lax',
+      path: '/',
+      maxAge: OAUTH_COOKIE_MAX_AGE,
+    });
+  } else {
+    // Otherwise a stale cookie from an earlier, abandoned login attempt
+    // would linger and redirect this attempt somewhere it didn't ask for.
+    cookies.delete(OAUTH_REDIRECT_COOKIE, { path: '/' });
+  }
+
+  const redirectUri = `${url.origin}/auth/callback`;
+  const authorizeUrl = buildAuthorizeUrl({
+    clientId: env.AUTH_CLIENT_ID,
+    redirectUri,
+    state,
+    codeChallenge: challenge,
+  });
+
+  return redirect(authorizeUrl);
+};
diff --git a/src/pages/auth/logout.ts b/src/pages/auth/logout.ts
new file mode 100644
index 00000000..5d3d8dcf
--- /dev/null
+++ b/src/pages/auth/logout.ts
@@ -0,0 +1,18 @@
+import type { APIRoute } from 'astro';
+import { SESSION_COOKIE } from '@/lib/session';
+
+// A cross-site page could auto-submit this form to force a visitor's
+// session to be cleared. SameSite=Lax on the session cookie already stops a
+// cross-site POST from carrying it, but the response's Set-Cookie deletion
+// would still apply regardless — so check Origin ourselves rather than rely
+// on that. Same-origin POSTs always send Origin, so a missing one is
+// rejected along with a mismatched one.
+export const POST: APIRoute = async ({ cookies, redirect, request, url }) => {
+  const origin = request.headers.get('Origin');
+  if (origin !== url.origin) {
+    return redirect('/');
+  }
+
+  cookies.delete(SESSION_COOKIE, { path: '/' });
+  return redirect('/');
+};
diff --git a/src/pages/developer/[id].astro b/src/pages/developer/[id].astro
new file mode 100644
index 00000000..b6bafaeb
--- /dev/null
+++ b/src/pages/developer/[id].astro
@@ -0,0 +1,171 @@
+---
+import Base from '../../layouts/Base.astro';
+import ExtensionCard from '@/components/ExtensionCard.astro';
+import { getDeveloperById, getExtensionsByDeveloperId } from '@/lib/database';
+import { getSessionUser } from '@/lib/session';
+import { requireUser } from '@/lib/auth-guard';
+import { createApiClient, ApiRequestError } from '@/lib/apiClient';
+import { formString } from '@/lib/form';
+import { isSafeHttpUrl } from '@/lib/safe-url';
+import { env } from 'cloudflare:workers';
+
+const { id } = Astro.params;
+
+if (!id) {
+  return Astro.redirect('/404');
+}
+
+const developer = await getDeveloperById(env.DB_EXTENSIONS, id);
+
+if (!developer) {
+  return Astro.redirect('/404');
+}
+
+const currentUser = await getSessionUser(Astro.cookies, env.SESSION_SECRET);
+
+let claimError: string | null = null;
+let claimSubmitted = false;
+
+if (Astro.request.method === 'POST' && developer.unclaimed) {
+  const guard = await requireUser(Astro, env);
+  if (guard instanceof Response) return guard;
+  const user = guard;
+
+  const form = await Astro.request.formData();
+  const note = formString(form, 'note');
+
+  const api = createApiClient(env, user.sub);
+  try {
+    await api.claimDeveloper(developer.id, note || undefined);
+    claimSubmitted = true;
+  } catch (e) {
+    claimError =
+      e instanceof ApiRequestError
+        ? e.message
+        : 'Unable to submit your claim. Please try again.';
+  }
+}
+
+const extensions = await getExtensionsByDeveloperId(
+  env.DB_EXTENSIONS,
+  developer.id,
+);
+---
+
+<Base title={`${developer.name} — FOSSBilling Extensions`}>
+  <div class="flex items-start gap-4 mb-8">
+    {
+      developer.avatar_url && (
+        <img
+          src={developer.avatar_url}
+          alt=""
+          class="w-16 h-16 rounded-full object-cover"
+        />
+      )
+    }
+    <div class="flex-1">
+      <div class="flex items-center gap-2 flex-wrap">
+        <h1 class="text-2xl font-semibold tracking-tight">{developer.name}</h1>
+        <span class="badge-secondary">{developer.type}</span>
+        {developer.approved && <span class="badge">Approved</span>}
+        {developer.unclaimed && <span class="badge-secondary">Unclaimed</span>}
+      </div>
+      {
+        developer.bio && (
+          <p class="text-muted-foreground mt-2 max-w-2xl">{developer.bio}</p>
+        )
+      }
+      {
+        developer.URL && isSafeHttpUrl(developer.URL) ? (
+          <a
+            href={developer.URL}
+            target="_blank"
+            rel="noopener noreferrer"
+            class="btn mt-2"
+            data-size="sm"
+            data-variant="outline"
+          >
+            {developer.URL}
+          </a>
+        ) : (
+          developer.URL && (
+            <p class="text-sm text-muted-foreground mt-2">{developer.URL}</p>
+          )
+        )
+      }
+    </div>
+  </div>
+
+  {
+    developer.unclaimed && (
+      <div class="card space-y-3 mb-8">
+        <h2 class="font-semibold">
+          This profile hasn't been linked to an account
+        </h2>
+        {claimSubmitted ? (
+          <p class="text-sm text-muted-foreground">
+            Your claim has been submitted for moderator review. You can check
+            its status on your{' '}
+            <a href="/account/developer">developer profile page</a>.
+          </p>
+        ) : (
+          <>
+            <p class="text-sm text-muted-foreground">
+              If this is you, you can request to claim it. A moderator reviews
+              every claim before ownership changes.
+            </p>
+            {claimError && (
+              <div class="rounded-md border border-destructive/50 bg-destructive/10 px-4 py-3 text-sm text-destructive">
+                {claimError}
+              </div>
+            )}
+            {currentUser ? (
+              <form method="POST" class="space-y-3">
+                <div class="field">
+                  <label for="note">
+                    Note for the moderator reviewing this (optional)
+                  </label>
+                  <input
+                    class="input"
+                    type="text"
+                    id="note"
+                    name="note"
+                    maxlength="500"
+                    placeholder="e.g. I'm the maintainer, see github.com/..."
+                  />
+                </div>
+                <button type="submit" class="btn" data-size="sm">
+                  Claim this profile
+                </button>
+              </form>
+            ) : (
+              <a
+                href={`/auth/login?redirect=${encodeURIComponent(Astro.url.pathname)}`}
+                class="btn"
+                data-size="sm"
+                data-variant="outline"
+              >
+                Sign in to claim this profile
+              </a>
+            )}
+          </>
+        )}
+      </div>
+    )
+  }
+
+  <h2 class="font-semibold mb-4">
+    Extensions by {developer.name} ({extensions.length})
+  </h2>
+  {
+    extensions.length === 0 ? (
+      <p class="text-muted-foreground text-sm">No published extensions yet.</p>
+    ) : (
+      <div class="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-3 xl:grid-cols-4 gap-6">
+        {extensions.map((ext) => (
+          <ExtensionCard ext={ext} />
+        ))}
+      </div>
+    )
+  }
+</Base>
diff --git a/src/pages/index.astro b/src/pages/index.astro
index c75f60b6..dc1b1986 100644
--- a/src/pages/index.astro
+++ b/src/pages/index.astro
@@ -19,7 +19,9 @@ const extensions = await getAllExtensions(env.DB_EXTENSIONS);
       href="https://docs.fossbilling.org/extensions-and-development/extensions/"
       target="_blank"
       rel="noopener noreferrer"
-      class="btn-sm-ghost"
+      class="btn"
+      data-size="sm"
+      data-variant="ghost"
     >
       see here
     </a>
diff --git a/src/types/index.ts b/src/types/index.ts
index 666886b8..dae91ac6 100644
--- a/src/types/index.ts
+++ b/src/types/index.ts
@@ -1,18 +1,25 @@
 import { gt, lt } from 'semver';
 
+export const EXTENSION_TYPES = [
+  'mod',
+  'theme',
+  'payment-gateway',
+  'server-manager',
+  'domain-registrar',
+  'hook',
+  'translation',
+] as const;
+
+export const SOURCE_TYPES = ['github', 'gitlab', 'custom'] as const;
+
+export const DEVELOPER_TYPES = ['user', 'organization'] as const;
+
 export type Extension = {
   id: string;
-  type:
-    | 'mod'
-    | 'theme'
-    | 'payment-gateway'
-    | 'server-manager'
-    | 'domain-registrar'
-    | 'hook'
-    | 'translation';
+  type: (typeof EXTENSION_TYPES)[number];
   name: string;
   description: string;
-  author: Author;
+  developer: Developer;
   releases: Release[];
   website: string;
   license: {
@@ -27,11 +34,11 @@ export type Extension = {
 };
 
 export type Repository = {
-  type: 'github' | 'gitlab' | 'custom';
+  type: (typeof SOURCE_TYPES)[number];
   repo: string;
 };
 
-export type Author = Organization | User;
+export type Developer = Organization | User;
 
 export type Organization = {
   type: 'organization';
@@ -84,6 +91,108 @@ export function sortReleasesDescending(releases: Release[]): Release[] {
   });
 }
 
+// Shape sent to/from the api repo's v2 submissions endpoints
+// (src/services/extensions/v2/interfaces.ts there). ExtensionPayload omits
+// the joined `developer` field of Extension — the developer is submitted
+// separately.
+export type ExtensionPayload = Omit<Extension, 'developer'>;
+
+export type SubmissionPayload = {
+  developer: Developer;
+  extension: ExtensionPayload;
+};
+
+// The `developers` row plus a moderator-set trust flag — see the api repo's
+// src/services/extensions/v2/interfaces.ts (DeveloperProfileSchema).
+// Developer profiles are written directly (PUT /extensions/v2/developers/me),
+// not through the submission/moderation queue; `approved` is purely a badge,
+// not a gate. bio/avatar_url are shown on the public /developer/[id] page;
+// contact_email is never read by any public-facing query — it's for
+// moderator/maintainer contact only, same trust level as a user's own email.
+export type DeveloperProfile = Developer & {
+  approved: boolean;
+  bio?: string;
+  avatar_url?: string;
+  contact_email?: string;
+  // Local-only: derived from `owner_user_id IS NULL` by getDeveloperById's
+  // own query, not part of the api repo's DeveloperProfile response. Never
+  // set on profiles read via the api client (upsertDeveloperProfile,
+  // listUnapprovedDevelopers, listAllDevelopers) — only on the public
+  // /developer/[id] read.
+  unclaimed?: boolean;
+};
+
+// Body for PUT /extensions/v2/developers/me — everything but the server-set
+// `approved` flag.
+export type DeveloperProfileInput = Omit<
+  DeveloperProfile,
+  'approved' | 'unclaimed'
+>;
+
+// What getDeveloperById (the public /developer/[id] read) returns —
+// contact_email is owner/moderator-only, so it's excluded at the type level
+// rather than relying solely on the query not selecting it.
+export type PublicDeveloperProfile = Omit<DeveloperProfile, 'contact_email'>;
+
+// A snapshot of a developers row as it existed right after one
+// PUT /developers/me write — see the api repo's DeveloperHistoryEntrySchema.
+// Newest first from GET /extensions/v2/developers/{id}/history
+// (moderator-only).
+export type DeveloperHistoryEntry = {
+  developer_id: string;
+  type: (typeof DEVELOPER_TYPES)[number];
+  name: string;
+  URL?: string;
+  changed_by: string;
+  changed_at: string;
+};
+
+// A request to own an unowned ("legacy") developer profile — see the api
+// repo's DeveloperClaimSchema. Created via POST /developers/{id}/claim,
+// resolved by a moderator via approve/reject.
+export type DeveloperClaim = {
+  id: string;
+  developer_id: string;
+  claimant_id: string;
+  status: 'pending' | 'approved' | 'rejected';
+  note?: string;
+  review_note?: string;
+  reviewer_id?: string;
+  created_at: string;
+  reviewed_at?: string;
+};
+
+// DeveloperClaim plus the claimed profile's own name/type, for the moderator
+// queue (GET /developers/claims) so it doesn't need a separate lookup per
+// row.
+export type PendingDeveloperClaim = DeveloperClaim & {
+  developer_name: string;
+  developer_type: (typeof DEVELOPER_TYPES)[number];
+};
+
+// Result of POST /developers/{id}/transfer — the raw token is only ever
+// returned here, once. Never persisted or put in a URL; shown once to the
+// initiating owner to share out-of-band.
+export type DeveloperTransfer = {
+  token: string;
+  expires_at: string;
+};
+
+export type SubmissionStatus = 'pending' | 'approved' | 'rejected';
+
+export type Submission = {
+  id: string;
+  extension_id: string | null;
+  developer_id: string;
+  submitted_by: string;
+  status: SubmissionStatus;
+  payload: SubmissionPayload;
+  reviewer_id: string | null;
+  review_note: string | null;
+  created_at: string;
+  reviewed_at: string | null;
+};
+
 export function repositoryURL(repository: Repository): string {
   switch (repository.type) {
     case 'github':
diff --git a/wrangler.jsonc b/wrangler.jsonc
index af30429b..24d8c34c 100644
--- a/wrangler.jsonc
+++ b/wrangler.jsonc
@@ -16,6 +16,9 @@
 	"workers_dev": false,
 	"preview_urls": true,
 	"keep_vars": true,
+	"vars": {
+		"EXTENSIONS_API_BASE_URL": "https://api.fossbilling.net"
+	},
 	"routes": [
 		{
 			"pattern": "extensions.fossbilling.org",
@@ -30,7 +33,8 @@
 	"d1_databases": [
 		{
 			"binding": "DB_EXTENSIONS",
-			"database_id": "b99e8d34-4856-4f92-837d-5413869d3d83"
+			"database_id": "b99e8d34-4856-4f92-837d-5413869d3d83",
+			"migrations_dir": "./src/lib/db/migrations"
 		}
 	]
 }
\ No newline at end of file