@karibsen/eponyme 0.1.0

package/dist/runtime/pages/EponymeDetailPage.vue

@@ -0,0 +1,83 @@
+<script setup>
+import { createError, useRoute, useSeoMeta } from "#app";
+import { computed } from "vue";
+import EponymeCollectionPage from "../components/editor/EponymeCollectionPage.vue";
+import EponymeForm from "../components/editor/EponymeForm.vue";
+import EponymeFormPage from "../components/editor/EponymeFormPage.vue";
+import EponymeFolderNav from "../components/editor/EponymeFolderNav.vue";
+import EponymeFolderPage from "../components/editor/EponymeFolderPage.vue";
+import EponymePageNavigation from "../components/editor/EponymePageNavigation.vue";
+import EponymeSidebar from "../components/editor/EponymeSidebar.vue";
+import { useEponymeConfig } from "../composables/useEponymeConfig";
+import { getEponymeCollections, getEponymeForms, getEponymeSchemas } from "../utils/get-eponyme-schemas";
+const route = useRoute();
+const config = useEponymeConfig();
+const eponymeName = computed(() => Array.isArray(route.params.eponyme) ? route.params.eponyme.join("/") : String(route.params.eponyme));
+const schemas = getEponymeSchemas(config);
+const collections = getEponymeCollections(config);
+const forms = getEponymeForms(config);
+const collection = computed(() => collections[eponymeName.value]);
+const form = computed(() => forms[eponymeName.value]);
+const collectionEntry = computed(() => Object.entries(collections).find(([name]) => {
+  const prefix = `${name}/`;
+  return eponymeName.value.startsWith(prefix) && !eponymeName.value.slice(prefix.length).includes("/");
+}));
+const schema = computed(() => schemas[eponymeName.value] ?? collectionEntry.value?.[1].fields ?? {});
+const entries = Object.keys(schemas);
+const indexPath = computed(() => route.path.slice(0, -(eponymeName.value.length + 1)) || "/");
+const isFolder = computed(() => !schemas[eponymeName.value] && !collection.value && !form.value && !collectionEntry.value && [...Object.keys(schemas), ...Object.keys(collections), ...Object.keys(forms)].some((name) => name.startsWith(`${eponymeName.value}/`)));
+function label(name) {
+  return name.replace(/[-_]/g, " ").replace(/\b\w/g, (char) => char.toUpperCase());
+}
+useSeoMeta({
+  title: () => `${label(eponymeName.value.split("/").at(-1) ?? eponymeName.value)} \xB7 Eponyme`
+});
+if (!schemas[eponymeName.value] && !collection.value && !form.value && !collectionEntry.value && !isFolder.value) throw createError({ statusCode: 404, statusMessage: "Eponyme entry not found." });
+</script>
+
+<template>
+  <main class="eponyme-root ep:flex ep:min-h-screen ep:flex-col ep:bg-theme-ep ep:font-sans ep:text-text-ep ep:md:flex-row">
+    <EponymeSidebar :base-path="indexPath" />
+    <div class="ep:w-full">
+      <EponymeFolderPage
+        v-if="isFolder"
+        :base-path="indexPath"
+        :folder="eponymeName"
+      />
+      <EponymeCollectionPage
+        v-else-if="collection"
+        :base-path="indexPath"
+        :name="eponymeName"
+        :definition="collection"
+      />
+      <EponymeFormPage
+        v-else-if="form"
+        :name="eponymeName"
+        :definition="form"
+      />
+      <template v-else>
+        <EponymeFolderNav
+          :base-path="indexPath"
+          :eponyme="eponymeName"
+          class="ep:sticky ep:top-0 ep:z-50"
+        />
+        <EponymeForm
+          :key="eponymeName"
+          :name="eponymeName"
+          :schema="schema"
+          :readonly-fields="collectionEntry ? [collectionEntry[1].slugField] : []"
+        />
+        <EponymePageNavigation
+          v-if="!collectionEntry"
+          :base-path="indexPath"
+          :current="eponymeName"
+          :entries="entries"
+        />
+      </template>
+    </div>
+  </main>
+</template>
+
+<style scoped>
+:global(body){margin:0}
+</style>

package/dist/runtime/pages/EponymeDetailPage.vue.d.ts

@@ -0,0 +1,3 @@
+declare const __VLS_export: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/pages/EponymeIndexPage.d.vue.ts

@@ -0,0 +1,3 @@
+declare const __VLS_export: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/pages/EponymeIndexPage.vue

@@ -0,0 +1,51 @@
+<script setup>
+import { useRoute, useSeoMeta } from "#app";
+import EponymeNavigationLink from "../components/editor/EponymeNavigationLink.vue";
+import EponymeSidebar from "../components/editor/EponymeSidebar.vue";
+import { useEponymeConfig } from "../composables/useEponymeConfig";
+import { getEponymeCollections, getEponymeForms, getEponymeSchemas } from "../utils/get-eponyme-schemas";
+const config = useEponymeConfig();
+const route = useRoute();
+const eponymes = getEponymeSchemas(config);
+const collections = getEponymeCollections(config);
+const forms = getEponymeForms(config);
+const entries = { ...eponymes, ...collections, ...forms };
+useSeoMeta({ title: "Eponyme" });
+function label(name) {
+  return name.replace(/[-_]/g, " ").replace(/\b\w/g, (char) => char.toUpperCase());
+}
+</script>
+
+<template>
+  <main class="eponyme-root ep:flex ep:min-h-screen ep:flex-col ep:bg-theme-ep ep:font-sans ep:text-text-ep ep:md:flex-row">
+    <EponymeSidebar :base-path="route.path" />
+    <section class="ep:mx-auto ep:w-full ep:max-w-3xl ep:px-6 ep:py-8 ep:md:px-10 ep:md:py-12">
+      <p class="ep:m-0 ep:text-[11px] ep:font-semibold ep:tracking-widest ep:text-muted-ep ep:uppercase">
+        Eponyme
+      </p>
+      <h1 class="ep:mt-2 ep:text-3xl ep:font-semibold ep:tracking-tight ep:text-white">
+        Content entries
+      </h1>
+      <p class="ep:mt-2 ep:text-sm ep:text-muted-ep">
+        Choose the content area you want to update.
+      </p>
+      <nav
+        class="ep:mt-8 ep:grid ep:gap-3 ep:sm:grid-cols-2"
+        aria-label="Content entries"
+      >
+        <EponymeNavigationLink
+          v-for="(_, name) in entries"
+          :key="name"
+          :to="`${route.path.replace(/\/$/, '')}/${name}`"
+          :label="label(name.split('/').at(-1) ?? name)"
+          :description="collections[name] ? 'Collection' : forms[name] ? 'Form' : void 0"
+          variant="card"
+        />
+      </nav>
+    </section>
+  </main>
+</template>
+
+<style scoped>
+:global(body){margin:0}
+</style>

package/dist/runtime/pages/EponymeIndexPage.vue.d.ts

@@ -0,0 +1,3 @@
+declare const __VLS_export: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/pages/EponymeLoginPage.d.vue.ts

@@ -0,0 +1,3 @@
+declare const __VLS_export: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/pages/EponymeLoginPage.vue

@@ -0,0 +1,102 @@
+<script setup>
+import { navigateTo, useRoute, useRuntimeConfig, useSeoMeta } from "#app";
+import { computed, ref } from "vue";
+import { useEponymeAuth } from "../composables/useEponymeAuth";
+import EPButton from "../components/ui/EPButton.vue";
+import EPFormField from "../components/ui/EPFormField.vue";
+import EPInputText from "../components/ui/EPInputText.vue";
+const route = useRoute();
+const auth = useEponymeAuth();
+const username = ref("");
+const password = ref("");
+const error = ref("");
+const dashboardPath = computed(() => useRuntimeConfig().public.eponyme?.dashboardPath ?? "/__eponyme");
+useSeoMeta({ title: "Sign in \xB7 Eponyme" });
+const existingUser = await auth.refresh();
+if (existingUser)
+  await navigateAfterLogin(existingUser.mustChangePassword);
+async function submit() {
+  error.value = "";
+  try {
+    const user = await auth.login(username.value, password.value);
+    await navigateAfterLogin(user.mustChangePassword);
+  } catch (caught) {
+    const fetchError = caught;
+    error.value = fetchError.statusMessage ?? "Invalid username or password.";
+  }
+}
+async function navigateAfterLogin(mustChangePassword) {
+  if (mustChangePassword)
+    return navigateTo(`${dashboardPath.value}/change-password`);
+  const redirect = Array.isArray(route.query.redirect) ? route.query.redirect[0] : route.query.redirect;
+  const destination = typeof redirect === "string" && redirect.startsWith(`${dashboardPath.value}/`) ? redirect : dashboardPath.value;
+  return navigateTo(destination);
+}
+</script>
+
+<template>
+  <main class="eponyme-root ep:flex ep:min-h-screen ep:items-center ep:justify-center ep:bg-theme-ep ep:px-6 ep:py-12 ep:font-sans ep:text-text-ep">
+    <section class="ep:w-full ep:max-w-sm">
+      <p class="ep:m-0 ep:text-[11px] ep:font-semibold ep:tracking-widest ep:text-muted-ep ep:uppercase">
+        Eponyme
+      </p>
+      <h1 class="ep:mt-2 ep:mb-2 ep:text-3xl ep:font-semibold ep:tracking-tight ep:text-white">
+        Sign in
+      </h1>
+      <p class="ep:mt-0 ep:mb-8 ep:text-sm ep:leading-relaxed ep:text-muted-ep">
+        Use your Eponyme username and password to open the content dashboard.
+      </p>
+      <form
+        class="ep:grid ep:gap-5"
+        @submit.prevent="submit"
+      >
+        <EPFormField
+          id="eponyme-login-username"
+          label="Username"
+          required
+        >
+          <EPInputText
+            id="eponyme-login-username"
+            v-model="username"
+            autocomplete="username"
+            autofocus
+            required
+          />
+        </EPFormField>
+        <EPFormField
+          id="eponyme-login-password"
+          label="Password"
+          required
+        >
+          <EPInputText
+            id="eponyme-login-password"
+            v-model="password"
+            type="password"
+            autocomplete="current-password"
+            required
+          />
+        </EPFormField>
+        <p
+          v-if="error"
+          class="ep:m-0 ep:text-sm ep:text-danger-ep"
+          role="alert"
+        >
+          {{ error }}
+        </p>
+        <EPButton
+          type="submit"
+          variant="primary"
+          :loading="auth.pending.value"
+          :disabled="!username || !password"
+          class="ep:w-full"
+        >
+          Sign in
+        </EPButton>
+      </form>
+    </section>
+  </main>
+</template>
+
+<style scoped>
+:global(body){margin:0}
+</style>

package/dist/runtime/pages/EponymeLoginPage.vue.d.ts

@@ -0,0 +1,3 @@
+declare const __VLS_export: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/pages/EponymeUsersPage.d.vue.ts

@@ -0,0 +1,3 @@
+declare const __VLS_export: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/pages/EponymeUsersPage.vue

@@ -0,0 +1,261 @@
+<script setup>
+import { useRequestFetch, useRoute, useSeoMeta } from "#app";
+import { computed, ref } from "vue";
+import EponymeCopy from "../components/editor/EponymeCopy.vue";
+import EponymeSidebar from "../components/editor/EponymeSidebar.vue";
+import EPButton from "../components/ui/EPButton.vue";
+import EPDialog from "../components/ui/EPDialog.vue";
+import EPFormField from "../components/ui/EPFormField.vue";
+import EPInputText from "../components/ui/EPInputText.vue";
+import EPSelect from "../components/ui/EPSelect.vue";
+import EPSwitch from "../components/ui/EPSwitch.vue";
+import EPTooltip from "../components/ui/EPTooltip.vue";
+import EPAvatar from "../components/ui/EPAvatar.vue";
+useSeoMeta({ title: "Users \xB7 Eponyme" });
+const route = useRoute();
+const requestFetch = useRequestFetch();
+const users = ref([]);
+const pending = ref(true);
+const error = ref("");
+const createOpen = ref(false);
+const username = ref("");
+const role = ref("editor");
+const temporaryCredentials = ref();
+const basePath = computed(() => route.path.replace(/\/users\/?$/, ""));
+const roleOptions = [
+  { label: "Viewer", value: "viewer" },
+  { label: "Editor", value: "editor" },
+  { label: "Owner", value: "owner" }
+];
+await loadUsers();
+async function loadUsers() {
+  pending.value = true;
+  try {
+    const response = await requestFetch("/api/eponyme-users", { cache: "no-store" });
+    users.value = response.users;
+  } finally {
+    pending.value = false;
+  }
+}
+async function createUser() {
+  error.value = "";
+  try {
+    const result = await requestFetch("/api/eponyme-users", {
+      method: "POST",
+      body: { username: username.value, role: role.value }
+    });
+    users.value.push(result.user);
+    temporaryCredentials.value = result;
+    createOpen.value = false;
+    username.value = "";
+    role.value = "editor";
+  } catch (caught) {
+    error.value = caught.statusMessage ?? "Unable to create user.";
+  }
+}
+async function updateUser(user, changes) {
+  error.value = "";
+  try {
+    const response = await requestFetch(`/api/eponyme-users/${user.id}`, {
+      method: "PATCH",
+      body: changes
+    });
+    replaceUser(response.user);
+  } catch (caught) {
+    error.value = caught.statusMessage ?? "Unable to update user.";
+    await loadUsers();
+  }
+}
+async function resetPassword(user) {
+  if (!confirm(`Reset the password for ${user.username}?`)) return;
+  error.value = "";
+  try {
+    const result = await requestFetch(`/api/eponyme-users/${user.id}/reset-password`, {
+      method: "POST"
+    });
+    replaceUser(result.user);
+    temporaryCredentials.value = result;
+  } catch (caught) {
+    error.value = caught.statusMessage ?? "Unable to reset password.";
+  }
+}
+function replaceUser(user) {
+  users.value = users.value.map((item) => item.id === user.id ? user : item);
+}
+</script>
+
+<template>
+  <main class="eponyme-root ep:flex ep:min-h-screen ep:flex-col ep:bg-theme-ep ep:font-sans ep:text-text-ep ep:md:flex-row">
+    <EponymeSidebar :base-path="basePath" />
+    <section class="ep:mx-auto ep:w-full ep:max-w-4xl ep:px-6 ep:py-8 ep:md:px-10 ep:md:py-12">
+      <header class="ep:flex ep:flex-wrap ep:items-end ep:justify-between ep:gap-4">
+        <div>
+          <p class="ep:m-0 ep:text-[11px] ep:font-semibold ep:tracking-widest ep:text-muted-ep ep:uppercase">
+            Access
+          </p>
+          <h1 class="ep:mt-2 ep:mb-0 ep:text-3xl ep:font-semibold ep:tracking-tight ep:text-white">
+            Users
+          </h1>
+          <p class="ep:mt-2 ep:mb-0 ep:text-sm ep:text-muted-ep">
+            Manage dashboard access and content permissions.
+          </p>
+        </div>
+        <EPButton
+          variant="primary"
+          @click="createOpen = true"
+        >
+          Add user
+        </EPButton>
+      </header>
+
+      <p
+        v-if="error"
+        class="ep:mt-6 ep:rounded-xl ep:bg-danger-ep/10 ep:p-4 ep:text-sm ep:text-danger-ep"
+        role="alert"
+      >
+        {{ error }}
+      </p>
+      <p
+        v-if="pending"
+        class="ep:mt-8 ep:text-sm ep:text-muted-ep"
+      >
+        Loading users…
+      </p>
+      <div
+        v-else
+        class="ep:mt-8 ep:grid ep:gap-3"
+      >
+        <article
+          v-for="user in users"
+          :key="user.id"
+          class="ep:grid ep:gap-4 ep:rounded-xl ep:bg-selected-ep/50 ep:p-4 ep:sm:grid-cols-[minmax(0,1fr)_10rem_auto_auto] ep:sm:items-center"
+        >
+          <div class="ep:flex ep:min-w-0 ep:items-center ep:gap-3">
+            <EPAvatar :fallback="user.username" />
+            <div class="ep:min-w-0">
+              <p class="ep:m-0 ep:truncate ep:text-sm ep:font-semibold ep:text-white">
+                {{ user.username }}
+              </p>
+              <p
+                v-if="user.mustChangePassword"
+                class="ep:m-0 ep:mt-1 ep:text-xs ep:text-muted-ep"
+              >
+                Password change required
+              </p>
+            </div>
+          </div>
+          <EPSelect
+            size="sm"
+            :model-value="user.role"
+            :options="roleOptions"
+            aria-label="Role"
+            @update:model-value="updateUser(user, { role: $event })"
+          />
+          <EPButton
+            size="sm"
+            @click="resetPassword(user)"
+          >
+            Reset password
+          </EPButton>
+          <EPTooltip :content="user.active ? 'Active' : 'Disabled'">
+            <EPSwitch
+              :model-value="user.active"
+              :aria-label="user.active ? `Deactivate ${user.username}` : `Activate ${user.username}`"
+              @update:model-value="updateUser(user, { active: $event })"
+            />
+          </EPTooltip>
+        </article>
+      </div>
+    </section>
+
+    <EPDialog
+      :open="createOpen"
+      title="Add user"
+      description="A temporary password will be generated and shown once."
+      @update:open="createOpen = $event"
+    >
+      <form
+        class="ep:grid ep:gap-4"
+        @submit.prevent="createUser"
+      >
+        <EPFormField
+          id="eponyme-user-username"
+          label="Username"
+          description="3 to 50 letters, numbers, dots, underscores or hyphens."
+          required
+        >
+          <EPInputText
+            id="eponyme-user-username"
+            v-model="username"
+            autocomplete="off"
+            required
+          />
+        </EPFormField>
+        <EPFormField
+          id="eponyme-user-role"
+          label="Role"
+          required
+        >
+          <EPSelect
+            id="eponyme-user-role"
+            v-model="role"
+            :options="roleOptions"
+          />
+        </EPFormField>
+        <div class="ep:flex ep:justify-end ep:gap-2">
+          <EPButton @click="createOpen = false">
+            Cancel
+          </EPButton>
+          <EPButton
+            type="submit"
+            variant="primary"
+            :disabled="!username"
+          >
+            Create user
+          </EPButton>
+        </div>
+      </form>
+    </EPDialog>
+
+    <EPDialog
+      :open="Boolean(temporaryCredentials)"
+      title="Temporary credentials"
+      description="Copy this password now. It cannot be displayed again."
+      @update:open="!$event && (temporaryCredentials = void 0)"
+    >
+      <div v-if="temporaryCredentials">
+        <dl class="ep:grid ep:gap-3">
+          <div>
+            <dt class="ep:text-xs ep:text-muted-ep">
+              Username
+            </dt>
+            <dd class="ep:mt-1 ep:mb-0">
+              <EponymeCopy
+                :value="temporaryCredentials.user.username"
+                label="Copy"
+              />
+            </dd>
+          </div>
+          <div>
+            <dt class="ep:text-xs ep:text-muted-ep">
+              Temporary password
+            </dt>
+            <dd class="ep:mt-1 ep:mb-0">
+              <EponymeCopy
+                :value="temporaryCredentials.temporaryPassword"
+                label="Copy"
+              />
+            </dd>
+          </div>
+        </dl>
+        <p class="ep:mt-4 ep:mb-0 ep:text-xs ep:leading-relaxed ep:text-muted-ep">
+          The user must replace it immediately after signing in.
+        </p>
+      </div>
+    </EPDialog>
+  </main>
+</template>
+
+<style scoped>
+:global(body){margin:0}
+</style>

package/dist/runtime/pages/EponymeUsersPage.vue.d.ts

@@ -0,0 +1,3 @@
+declare const __VLS_export: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/server/api/eponyme/[name].get.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<import("../../services/eponyme-store.js").EponymeResult | {
+    data: Record<string, unknown>;
+}>>;
+export default _default;

package/dist/runtime/server/api/eponyme/[name].get.js

@@ -0,0 +1,20 @@
+import { createError, defineEventHandler, getQuery, getRequestURL, setResponseHeader } from "h3";
+import { useEponymeService } from "../../services/eponyme-service.js";
+import { requireEponymeUser } from "../../utils/auth.js";
+function readVersion(raw) {
+  if (raw === "draft") return "draft";
+  const id = Number(raw);
+  return Number.isSafeInteger(id) && id > 0 ? id : "published";
+}
+export default defineEventHandler(async (event) => {
+  const name = decodeURIComponent(getRequestURL(event).pathname.replace(/^\/api\/eponyme\//, ""));
+  const requestedVersion = getQuery(event).version;
+  const version = readVersion(requestedVersion);
+  if (version !== "published") {
+    await requireEponymeUser(event);
+    setResponseHeader(event, "Cache-Control", "no-store");
+  }
+  const result = name ? await useEponymeService().getResult(name, version) : void 0;
+  if (!result) throw createError({ statusCode: 404, statusMessage: "Eponyme entry not found." });
+  return requestedVersion ? result : { data: result.data };
+});

package/dist/runtime/server/api/eponyme/[name].patch.d.ts

@@ -0,0 +1,11 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<(import("../../services/eponyme-store.js").EponymeResult & {
+    errors?: never;
+    conflict?: never;
+}) | {
+    errors: import("../../../utils/validate-eponyme-data.js").ValidationErrors;
+    data?: undefined;
+} | {
+    data: Record<string, unknown>;
+    errors?: undefined;
+}>>;
+export default _default;

package/dist/runtime/server/api/eponyme/[name].patch.js

@@ -0,0 +1,20 @@
+import { createError, defineEventHandler, getQuery, getRequestURL, readBody, setResponseStatus } from "h3";
+import { useEponymeService } from "../../services/eponyme-service.js";
+import { assertEponymeMutationOrigin, requireEponymeUser } from "../../utils/auth.js";
+export default defineEventHandler(async (event) => {
+  assertEponymeMutationOrigin(event);
+  const user = await requireEponymeUser(event, { roles: ["editor", "owner"] });
+  const name = decodeURIComponent(getRequestURL(event).pathname.replace(/^\/api\/eponyme\//, ""));
+  if (!name) throw createError({ statusCode: 404, statusMessage: "Eponyme entry not found." });
+  const requestedAction = getQuery(event).action;
+  const action = requestedAction === "draft" ? "draft" : "publish";
+  const result = await useEponymeService().patch(name, await readBody(event), action, user.id);
+  if (!result) throw createError({ statusCode: 404, statusMessage: "Eponyme entry not found." });
+  if ("conflict" in result && result.conflict)
+    throw createError({ statusCode: 409, message: "This entry was changed by someone else. Reload the page to get the latest version." });
+  if (result.errors) {
+    setResponseStatus(event, 422);
+    return { errors: result.errors };
+  }
+  return requestedAction ? result : { data: result.data };
+});

package/dist/runtime/server/api/eponyme-auth/change-password.post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
+    user: import("../../../types/index.js").EponymeAuthUser;
+}>>;
+export default _default;

package/dist/runtime/server/api/eponyme-auth/change-password.post.js

@@ -0,0 +1,21 @@
+import { createError, defineEventHandler, readBody } from "h3";
+import { useEponymeAuthService } from "../../services/eponyme-auth-service.js";
+import {
+  assertEponymeMutationOrigin,
+  requireEponymeUser,
+  setEponymeSessionCookie
+} from "../../utils/auth.js";
+export default defineEventHandler(async (event) => {
+  assertEponymeMutationOrigin(event);
+  const user = await requireEponymeUser(event, { allowPasswordChangeRequired: true });
+  const body = await readBody(event);
+  const result = await useEponymeAuthService().changePassword(
+    user.id,
+    body?.currentPassword,
+    body?.newPassword
+  );
+  if (!result.session)
+    throw createError({ statusCode: 422, statusMessage: result.error ?? "Unable to change password." });
+  setEponymeSessionCookie(event, result.session.token, result.session.expiresAt);
+  return { user: result.session.user };
+});

package/dist/runtime/server/api/eponyme-auth/login.post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
+    user: import("../../../types/index.js").EponymeAuthUser;
+}>>;
+export default _default;

package/dist/runtime/server/api/eponyme-auth/login.post.js

@@ -0,0 +1,12 @@
+import { createError, defineEventHandler, readBody } from "h3";
+import { useEponymeAuthService } from "../../services/eponyme-auth-service.js";
+import { assertEponymeMutationOrigin, setEponymeSessionCookie } from "../../utils/auth.js";
+export default defineEventHandler(async (event) => {
+  assertEponymeMutationOrigin(event);
+  const body = await readBody(event);
+  const result = await useEponymeAuthService().login(body?.username, body?.password);
+  if (!result.ok)
+    throw createError({ statusCode: 401, statusMessage: "Invalid username or password." });
+  setEponymeSessionCookie(event, result.session.token, result.session.expiresAt);
+  return { user: result.session.user };
+});

package/dist/runtime/server/api/eponyme-auth/logout.post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
+    loggedOut: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/api/eponyme-auth/logout.post.js

@@ -0,0 +1,13 @@
+import { defineEventHandler, getCookie } from "h3";
+import { useEponymeAuthService } from "../../services/eponyme-auth-service.js";
+import {
+  assertEponymeMutationOrigin,
+  clearEponymeSessionCookie,
+  EPONYME_SESSION_COOKIE
+} from "../../utils/auth.js";
+export default defineEventHandler(async (event) => {
+  assertEponymeMutationOrigin(event);
+  await useEponymeAuthService().logout(getCookie(event, EPONYME_SESSION_COOKIE));
+  clearEponymeSessionCookie(event);
+  return { loggedOut: true };
+});