@nextsparkjs/core 0.1.0-beta.194 → 0.1.0-beta.195

package/dist/routes/api/v1/devtools/scheduled-actions/route.js

@@ -8,6 +8,7 @@ import {
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { getAllRegisteredActions } from "@nextsparkjs/core/lib/scheduled-actions/registry";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { scheduleAction } from "@nextsparkjs/core/lib/scheduled-actions/scheduler";
 export const GET = withRateLimitTier(async (request) => {
   var _a, _b;
@@ -169,12 +170,4 @@ export const POST = withRateLimitTier(async (request) => {
     }
   });
 }, "write");
-export async function OPTIONS() {
-  return new NextResponse(null, {
-    status: 204,
-    headers: {
-      "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
-      "Access-Control-Allow-Headers": "Content-Type, Authorization, x-api-key"
-    }
-  });
-}
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/devtools/scheduled-actions/run/route.d.ts

@@ -7,6 +7,7 @@
  * Requires the developer role.
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
-export declare function OPTIONS(): Promise<NextResponse<unknown>>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/devtools/scheduled-actions/run/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/routes/api/v1/devtools/scheduled-actions/run/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAYvD,eAAO,MAAM,IAAI,iDA+EN,CAAC;AAEZ,wBAAsB,OAAO,mCAQ5B"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/routes/api/v1/devtools/scheduled-actions/run/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAUvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAGvE,eAAO,MAAM,IAAI,iDA+EN,CAAC;AAEZ,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/devtools/scheduled-actions/run/route.js

@@ -7,6 +7,7 @@ import {
 } from "@nextsparkjs/core/lib/api/auth/devtools-auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { executeAction } from "@nextsparkjs/core/lib/scheduled-actions/processor";
 export const POST = withRateLimitTier(async (request) => {
   const authResult = await authenticateRequest(request, { requiredScope: "admin:devtools" });
@@ -71,12 +72,4 @@ export const POST = withRateLimitTier(async (request) => {
     }, { status: 500 });
   }
 }, "write");
-export async function OPTIONS() {
-  return new NextResponse(null, {
-    status: 204,
-    headers: {
-      "Access-Control-Allow-Methods": "POST, OPTIONS",
-      "Access-Control-Allow-Headers": "Content-Type, Authorization, x-api-key"
-    }
-  });
-}
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/devtools/testing/route.d.ts

@@ -7,6 +7,7 @@
  * Requires the developer role.
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
-export declare function OPTIONS(): Promise<NextResponse<unknown>>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/devtools/testing/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/testing/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAevD,eAAO,MAAM,GAAG,iDAiDN,CAAC;AAEX,wBAAsB,OAAO,mCAQ5B"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/testing/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAcvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAEvE,eAAO,MAAM,GAAG,iDAiDN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/devtools/testing/route.js

@@ -12,6 +12,7 @@ import {
   FLOW_REGISTRY
 } from "@nextsparkjs/registries/testing-registry";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   const authResult = await authenticateRequest(request, { requiredScope: "admin:devtools" });
   if (!authResult.success) {
@@ -53,12 +54,4 @@ export const GET = withRateLimitTier(async (request) => {
     }
   });
 }, "read");
-export async function OPTIONS() {
-  return new NextResponse(null, {
-    status: 204,
-    headers: {
-      "Access-Control-Allow-Methods": "GET, OPTIONS",
-      "Access-Control-Allow-Headers": "Content-Type, Authorization, x-api-key"
-    }
-  });
-}
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/media/[id]/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/v1/media/:id
  *
@@ -44,4 +45,5 @@ export declare const DELETE: (request: NextRequest, args_0: {
         id: string;
     }>;
 }) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/media/[id]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/[id]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AASzC;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAmCrC,CAAA;AAEV;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,KAAK;YAEM,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAgDpC,CAAA;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAmCpC,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/[id]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAIvE;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAmCrC,CAAA;AAEV;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,KAAK;YAEM,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAgDpC,CAAA;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAmCpC,CAAA;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/media/[id]/route.js

@@ -3,6 +3,7 @@ import { createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/hel
 import { API_ERROR_CODES } from "@nextsparkjs/core/lib/api/api-error";
 import { checkPermission } from "@nextsparkjs/core/lib/permissions/check";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { MediaService } from "@nextsparkjs/core/lib/services/media.service";
 import { updateMediaSchema } from "@nextsparkjs/core/lib/media/schemas";
 export const GET = withRateLimitTier(async (request, { params }) => {
@@ -84,3 +85,4 @@ export const DELETE = withRateLimitTier(async (request, { params }) => {
     return createApiError("Failed to delete media", 500);
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/media/[id]/tags/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/v1/media/{id}/tags
  *
@@ -42,4 +43,5 @@ export declare const DELETE: (request: NextRequest, args_0: {
         id: string;
     }>;
 }) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/media/[id]/tags/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/routes/api/v1/media/[id]/tags/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAiBzC;;;;GAIG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAiCrC,CAAA;AAEV;;;;;GAKG;AACH,eAAO,MAAM,IAAI;YAEO,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDA0CpC,CAAA;AAEX;;;;;GAKG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDA0CpC,CAAA;AAEX;;;;;GAKG;AACH,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAwCpC,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/routes/api/v1/media/[id]/tags/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAYvE;;;;GAIG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAiCrC,CAAA;AAEV;;;;;GAKG;AACH,eAAO,MAAM,IAAI;YAEO,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDA0CpC,CAAA;AAEX;;;;;GAKG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDA0CpC,CAAA;AAEX;;;;;GAKG;AACH,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAwCpC,CAAA;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/media/[id]/tags/route.js

@@ -3,6 +3,7 @@ import { createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/hel
 import { API_ERROR_CODES } from "@nextsparkjs/core/lib/api/api-error";
 import { checkPermission } from "@nextsparkjs/core/lib/permissions/check";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { MediaService } from "@nextsparkjs/core/lib/services/media.service";
 import * as z from "zod";
 const addTagSchema = z.object({
@@ -124,3 +125,4 @@ export const DELETE = withRateLimitTier(async (request, { params }) => {
     return createApiError("Failed to remove tag", 500);
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/media/check-duplicates/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * POST /api/v1/media/check-duplicates
  *
@@ -9,4 +10,5 @@ import { NextRequest } from 'next/server';
  * Returns: { duplicates: [{ filename, fileSize, existing: Media[] }] }
  */
 export declare const POST: (request: NextRequest) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/media/check-duplicates/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/check-duplicates/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAQzC;;;;;;;;GAQG;AACH,eAAO,MAAM,IAAI,uEAgDP,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/check-duplicates/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAGvE;;;;;;;;GAQG;AACH,eAAO,MAAM,IAAI,uEAgDP,CAAA;AAEV,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/media/check-duplicates/route.js

@@ -3,6 +3,7 @@ import { createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/hel
 import { API_ERROR_CODES } from "@nextsparkjs/core/lib/api/api-error";
 import { checkPermission } from "@nextsparkjs/core/lib/permissions/check";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { MediaService } from "@nextsparkjs/core/lib/services/media.service";
 export const POST = withRateLimitTier(async (request) => {
   try {
@@ -43,3 +44,4 @@ export const POST = withRateLimitTier(async (request) => {
     return createApiError("Failed to check duplicates", 500);
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/media/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/v1/media
  *
@@ -17,4 +18,5 @@ import { NextRequest } from 'next/server';
  * RLS: Returns only media from teams the user is a member of
  */
 export declare const GET: (request: NextRequest) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/media/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/v1/media/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AASzC;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,GAAG,uEAqCN,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/v1/media/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAIvE;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,GAAG,uEAqCN,CAAA;AAEV,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/media/route.js

@@ -3,6 +3,7 @@ import { createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/hel
 import { API_ERROR_CODES } from "@nextsparkjs/core/lib/api/api-error";
 import { checkPermission } from "@nextsparkjs/core/lib/permissions/check";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { MediaService } from "@nextsparkjs/core/lib/services/media.service";
 import { mediaListQuerySchema } from "@nextsparkjs/core/lib/media/schemas";
 export const GET = withRateLimitTier(async (request) => {
@@ -31,3 +32,4 @@ export const GET = withRateLimitTier(async (request) => {
     return createApiError("Failed to list media", 500);
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/media/upload/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * POST /api/v1/media/upload
  *
@@ -21,4 +22,5 @@ export declare const POST: (request: NextRequest) => Promise<import("next/server
  * Get upload endpoint information.
  */
 export declare const GET: (request: NextRequest) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/media/upload/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/upload/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAwCzC;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,IAAI,uEA0KN,CAAC;AAEZ;;;;GAIG;AACH,eAAO,MAAM,GAAG,uEA0CN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/upload/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAOzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAkCvE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,IAAI,uEA0KN,CAAC;AAEZ;;;;GAIG;AACH,eAAO,MAAM,GAAG,uEA0CN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/media/upload/route.js

@@ -4,6 +4,7 @@ import { createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/hel
 import { API_ERROR_CODES } from "@nextsparkjs/core/lib/api/api-error";
 import { checkPermission } from "@nextsparkjs/core/lib/permissions/check";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { MEDIA_CONFIG } from "@nextsparkjs/core/lib/config/config-sync";
 import { MediaService } from "@nextsparkjs/core/lib/services/media.service";
 import { extractImageDimensions } from "@nextsparkjs/core/lib/media/utils";
@@ -194,3 +195,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/media-tags/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/v1/media-tags
  *
@@ -16,4 +17,5 @@ export declare const GET: (request: NextRequest) => Promise<import("next/server"
  * Authentication: Requires valid session or API key with media:write scope
  */
 export declare const POST: (request: NextRequest) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/media-tags/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/v1/media-tags/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAQzC;;;;;;GAMG;AACH,eAAO,MAAM,GAAG,uEAwBN,CAAA;AAEV;;;;;;;GAOG;AACH,eAAO,MAAM,IAAI,uEA+BN,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/v1/media-tags/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAGvE;;;;;;GAMG;AACH,eAAO,MAAM,GAAG,uEAwBN,CAAA;AAEV;;;;;;;GAOG;AACH,eAAO,MAAM,IAAI,uEA+BN,CAAA;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/media-tags/route.js

@@ -3,6 +3,7 @@ import { createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/hel
 import { API_ERROR_CODES } from "@nextsparkjs/core/lib/api/api-error";
 import { checkPermission } from "@nextsparkjs/core/lib/permissions/check";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { MediaService } from "@nextsparkjs/core/lib/services/media.service";
 export const GET = withRateLimitTier(async (request) => {
   try {
@@ -47,3 +48,4 @@ export const POST = withRateLimitTier(async (request) => {
     return createApiError("Failed to create media tag", 500);
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/post-categories/[id]/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest, args_0: {
     params: Promise<{
         id: string;
@@ -14,4 +15,5 @@ export declare const DELETE: (request: NextRequest, args_0: {
         id: string;
     }>;
 }) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/post-categories/[id]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/post-categories/[id]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAmBvD,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAyBrC,CAAC;AAGX,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAwIpC,CAAC;AAGZ,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAiEpC,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/post-categories/[id]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAevE,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAyBrC,CAAC;AAGX,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAwIpC,CAAC;AAGZ,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAiEpC,CAAC;AAEZ,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/post-categories/[id]/route.js

@@ -3,6 +3,7 @@ import { authenticateRequest, createAuthFailureResponse } from "@nextsparkjs/cor
 import { query as dbQuery } from "@nextsparkjs/core/lib/db";
 import * as z from "zod";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 const updateCategorySchema = z.object({
   name: z.string().min(1).max(255).optional(),
   slug: z.string().min(2).max(100).regex(/^[a-z0-9-]+$/, "Slug must be lowercase alphanumeric with dashes").optional(),
@@ -201,3 +202,4 @@ export const DELETE = withRateLimitTier(async (request, { params }) => {
     return NextResponse.json({ success: false, error: "Internal server error" }, { status: 500 });
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/post-categories/route.d.ts

@@ -1,4 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/post-categories/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/v1/post-categories/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AA6BvD,eAAO,MAAM,GAAG,iDAkBN,CAAC;AAGX,eAAO,MAAM,IAAI,iDAsEN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/v1/post-categories/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAyBvE,eAAO,MAAM,GAAG,iDAkBN,CAAC;AAGX,eAAO,MAAM,IAAI,iDAsEN,CAAC;AAEZ,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/post-categories/route.js

@@ -3,6 +3,7 @@ import { authenticateRequest, createAuthFailureResponse } from "@nextsparkjs/cor
 import { query as dbQuery } from "@nextsparkjs/core/lib/db";
 import * as z from "zod";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 const createCategorySchema = z.object({
   name: z.string().min(1).max(255),
   slug: z.string().min(2).max(100).regex(/^[a-z0-9-]+$/, "Slug must be lowercase alphanumeric with dashes").optional(),
@@ -92,3 +93,4 @@ export const POST = withRateLimitTier(async (request) => {
     return NextResponse.json({ success: false, error: "Internal server error" }, { status: 500 });
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/teams/[teamId]/members/route.js

@@ -17,7 +17,7 @@ import { MembershipService } from "@nextsparkjs/core/lib/services";
 import { canInviteToRole } from "@nextsparkjs/core/lib/teams/permissions";
 import { EmailFactory } from "@nextsparkjs/core/lib/email/factory";
 import { sendTeamInvitationEmail } from "@nextsparkjs/core/lib/email/send";
-import { I18N_CONFIG } from "@nextsparkjs/core/lib/config";
+import { I18N_CONFIG, APP_NAME } from "@nextsparkjs/core/lib/config";
 import { withBasePath } from "@nextsparkjs/core/lib/base-path";
 export async function OPTIONS(request) {
   return handleCorsPreflightRequest(request);
@@ -230,7 +230,7 @@ export const POST = withRateLimitTier(withApiLogging(
           role: validatedData.role,
           acceptUrl,
           expiresIn: "7 days",
-          appName: process.env.NEXT_PUBLIC_APP_NAME || "Your App"
+          appName: process.env.NEXT_PUBLIC_APP_NAME || APP_NAME
         }, I18N_CONFIG.defaultLocale);
         await emailProvider.send({
           to: validatedData.email,

package/dist/routes/api/v1/teams/[teamId]/subscription/route.d.ts

@@ -4,11 +4,13 @@
  * GET /api/v1/teams/[teamId]/subscription - Get team's active subscription
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 interface RouteParams {
     params: Promise<{
         teamId: string;
     }>;
 }
 export declare const GET: (request: NextRequest, props: RouteParams) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 export {};
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/teams/[teamId]/subscription/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/routes/api/v1/teams/[teamId]/subscription/route.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,UAAU,WAAW;IACnB,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACpC;AAED,eAAO,MAAM,GAAG,qEAmCN,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/routes/api/v1/teams/[teamId]/subscription/route.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAGvE,UAAU,WAAW;IACnB,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACpC;AAED,eAAO,MAAM,GAAG,qEAmCN,CAAA;AAEV,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/teams/[teamId]/subscription/route.js

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server";
 import { validateAndAuthenticateRequest, createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/helpers";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { SubscriptionService, MembershipService } from "@nextsparkjs/core/lib/services";
 export const GET = withRateLimitTier(async function GET2(request, props) {
   const { auth, rateLimitResponse, errorResponse } = await validateAndAuthenticateRequest(request, { requiredScope: "billing:read" });
@@ -28,3 +29,4 @@ export const GET = withRateLimitTier(async function GET2(request, props) {
     return createApiError("Failed to fetch subscription", 500);
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/teams/[teamId]/usage/[limitSlug]/route.d.ts

@@ -5,6 +5,7 @@
  * POST /api/v1/teams/[teamId]/usage/[limitSlug] - Track usage
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 interface RouteParams {
     params: Promise<{
         teamId: string;
@@ -13,5 +14,6 @@ interface RouteParams {
 }
 export declare const GET: (request: NextRequest, props: RouteParams) => Promise<NextResponse>;
 export declare const POST: (request: NextRequest, props: RouteParams) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 export {};
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/teams/[teamId]/usage/[limitSlug]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/routes/api/v1/teams/[teamId]/usage/[limitSlug]/route.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAMvD,UAAU,WAAW;IACnB,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACvD;AAED,eAAO,MAAM,GAAG,qEAgCN,CAAA;AAEV,eAAO,MAAM,IAAI,qEA4CN,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/routes/api/v1/teams/[teamId]/usage/[limitSlug]/route.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAIvE,UAAU,WAAW;IACnB,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACvD;AAED,eAAO,MAAM,GAAG,qEAgCN,CAAA;AAEV,eAAO,MAAM,IAAI,qEA4CN,CAAA;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/teams/[teamId]/usage/[limitSlug]/route.js

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server";
 import { validateAndAuthenticateRequest, createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/helpers";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { SubscriptionService, UsageService, MembershipService } from "@nextsparkjs/core/lib/services";
 import { trackUsageSchema } from "@nextsparkjs/core/lib/billing/schema";
 export const GET = withRateLimitTier(async function GET2(request, props) {
@@ -65,3 +66,4 @@ export const POST = withRateLimitTier(async function POST2(request, props) {
     return createApiError(errorMessage, 500);
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/users/[id]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/users/[id]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA2BxD,wBAAsB,OAAO,CAAC,OAAO,EAAE,WAAW,kCAEjD;AAGD,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAoDpC,CAAC;AAGZ,eAAO,MAAM,KAAK;YAEM,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAqInC,CAAC;AAGb,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAiEnC,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/users/[id]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA+BxD,wBAAsB,OAAO,CAAC,OAAO,EAAE,WAAW,kCAEjD;AAGD,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAoDpC,CAAC;AAGZ,eAAO,MAAM,KAAK;YAEM,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAqInC,CAAC;AAGb,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;2BAiEnC,CAAC"}

package/dist/routes/api/v1/users/[id]/route.js

@@ -21,6 +21,7 @@ const updateUserSchema = z.object({
   role: z.enum(["member", "superadmin"]).optional(),
   metas: z.record(z.string(), z.any()).optional()
 });
+const resolveUserId = ({ id }, callerId) => id === "me" ? callerId : id;
 export async function OPTIONS(request) {
   return handleCorsPreflightRequest(request);
 }
@@ -33,7 +34,7 @@ export const GET = withRateLimitTier(withApiLogging(async (req, { params }) => {
     if (authResult.rateLimitResponse) {
       return authResult.rateLimitResponse;
     }
-    const { id } = await params;
+    const id = resolveUserId(await params, authResult.user.id);
     if (!id || id.trim() === "") {
       const response2 = createApiError("User ID or email is required", 400, null, "MISSING_IDENTIFIER");
       return addCorsHeaders(response2, req);
@@ -70,7 +71,7 @@ export const PATCH = withRateLimitTier(withApiLogging(async (req, { params }) =>
     if (authResult.rateLimitResponse) {
       return authResult.rateLimitResponse;
     }
-    const { id } = await params;
+    const id = resolveUserId(await params, authResult.user.id);
     if (!id || id.trim() === "") {
       const response2 = createApiError("User ID or email is required", 400, null, "MISSING_IDENTIFIER");
       return addCorsHeaders(response2, req);

package/dist/routes/api/v1/users/docs.md

@@ -4,52 +4,67 @@ Manage user profiles and account settings.
 
 ## Overview
 
-The Users API allows you to view and update user profile information. Users can update their own profile, while admins can manage other users within their team.
+The Users API allows you to view and update user profile information. Users can read and update their own profile; a superadmin can manage any user.
 
 ## Authentication
 
 All endpoints require authentication via:
 - **Session cookie** (for browser-based requests)
-- **API Key** header (for server-to-server requests)
+- **API Key** (for server-to-server requests), sent as `x-api-key: <key>` or `Authorization: Bearer <key>`: it needs the `users:read` scope to read and `users:write` to update, and it answers as the key's owner
+
+A user can read and update only themselves; a superadmin can manage any user. Anything else answers `403`.
 
 ## Endpoints
 
 ### Get Current User
 `GET /api/v1/users/me`
 
-Returns the currently authenticated user's profile.
+Returns the signed-in user, with a session cookie or an API key. It is `GET /api/v1/users/:id` for the caller's own id, so it takes the same `metas` query parameters and answers with the same fields.
+
+```bash
+curl -H "Cookie: <session cookie>" https://yourdomain.com/api/v1/users/me
+curl -H "Authorization: Bearer <api key>" https://yourdomain.com/api/v1/users/me
+curl -H "x-api-key: <api key>" https://yourdomain.com/api/v1/users/me
+```
 
 **Example Response:**
 ```json
 {
-  "id": "user_123",
-  "name": "John Doe",
-  "email": "john@example.com",
-  "image": "/uploads/avatar.png",
-  "createdAt": "2024-01-15T10:30:00Z",
-  "teams": [
-    {
-      "id": "team_456",
-      "name": "Acme Corp",
-      "role": "admin"
-    }
-  ]
+  "success": true,
+  "data": {
+    "id": "user_123",
+    "email": "john@example.com",
+    "name": "John Doe",
+    "firstName": "John",
+    "lastName": "Doe",
+    "image": "/uploads/avatar.png",
+    "country": null,
+    "timezone": null,
+    "language": "en",
+    "role": "member",
+    "emailVerified": true,
+    "createdAt": "2024-01-15T10:30:00Z",
+    "updatedAt": "2024-01-15T10:30:00Z"
+  }
 }
 ```
 
 ### Update Current User
 `PATCH /api/v1/users/me`
 
-Update the current user's profile.
+Update the signed-in user. It is `PATCH /api/v1/users/:id` for the caller's own id, with the same rules: only `firstName`, `lastName`, `language` and `metas` are accepted, and `role` is a superadmin's to change (anyone else gets `403`).
 
 **Request Body:**
 ```json
 {
-  "name": "John Smith",
-  "image": "/uploads/new-avatar.png"
+  "firstName": "John",
+  "lastName": "Smith",
+  "metas": { "preferences": { "theme": "dark" } }
 }
 ```
 
+To store per-user settings (the mobile client's preferences), use the user's metadata: `GET`/`PUT /api/v1/users/:id/meta/:key`.
+
 ### List Team Members
 `GET /api/v1/users`
 
@@ -63,7 +78,7 @@ Returns all users in the current team.
 ### Get User by ID
 `GET /api/v1/users/[id]`
 
-Returns a specific user's profile (within the same team).
+Returns a specific user's profile. Only that user or a superadmin can read it; `403` otherwise.
 
 **Path Parameters:**
 - `id` (string, required): User ID

package/dist/routes/api/v1/users/me/route.d.ts

@@ -0,0 +1,6 @@
+import type { NextRequest } from 'next/server';
+import { OPTIONS } from '@nextsparkjs/core/routes/api/v1/users/[id]/route';
+export { OPTIONS };
+export declare const GET: (req: NextRequest) => Promise<import("next/server").NextResponse<unknown>>;
+export declare const PATCH: (req: NextRequest) => Promise<import("next/server").NextResponse<unknown>>;
+//# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/users/me/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/users/me/route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAsC,MAAM,kDAAkD,CAAA;AAO9G,OAAO,EAAE,OAAO,EAAE,CAAA;AAClB,eAAO,MAAM,GAAG,GAAI,KAAK,WAAW,yDAAqB,CAAA;AACzD,eAAO,MAAM,KAAK,GAAI,KAAK,WAAW,yDAAuB,CAAA"}

package/dist/routes/api/v1/users/me/route.js

@@ -0,0 +1,5 @@
+import { OPTIONS, GET as getUser, PATCH as patchUser } from "@nextsparkjs/core/routes/api/v1/users/[id]/route";
+const me = { params: Promise.resolve({ id: "me" }) };
+export { OPTIONS };
+export const GET = (req) => getUser(req, me);
+export const PATCH = (req) => patchUser(req, me);

package/dist/routes/api/v1/users/presets.ts

@@ -34,13 +34,13 @@ export default defineApiEndpoint({
     {
       id: 'update-profile',
       title: 'Update My Profile',
-      description: 'Update current user name',
+      description: 'Update the current user first name',
       method: 'PATCH',
       pathParams: {
         id: 'me'
       },
       payload: {
-        name: 'Updated Name'
+        firstName: 'Updated'
       },
       tags: ['write', 'profile']
     },

package/dist/routes/dashboard/(main)/layout.cc.d.ts

@@ -0,0 +1,4 @@
+export default function MainDashboardLayout({ children }: {
+    children: React.ReactNode;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=layout.cc.d.ts.map