@nextsparkjs/core 0.1.0-beta.194 → 0.1.0-beta.196

package/dist/routes/api/v1/billing/checkout/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/checkout/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAYvD,eAAO,MAAM,IAAI,iDAmIN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/checkout/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAMvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAOvE,eAAO,MAAM,IAAI,iDAmIN,CAAC;AAEZ,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/billing/checkout/route.js

@@ -4,6 +4,7 @@ import { getBillingGateway } from "@nextsparkjs/core/lib/billing/gateways/factor
 import { SubscriptionService, MembershipService } from "@nextsparkjs/core/lib/services";
 import * as z from "zod";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 const checkoutSchema = z.object({
   planSlug: z.string().min(1, "Plan slug is required"),
   billingPeriod: z.enum(["monthly", "yearly"]).default("monthly")
@@ -112,3 +113,4 @@ export const POST = withRateLimitTier(async (request) => {
     );
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/billing/plans/route.d.ts

@@ -5,6 +5,8 @@
  * POST /api/v1/billing/plans - Create a plan (superadmin only)
  */
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest) => Promise<import("next/server").NextResponse>;
 export declare const POST: (request: NextRequest) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/billing/plans/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/plans/route.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAOzC,eAAO,MAAM,GAAG,uEAcN,CAAC;AAEX,eAAO,MAAM,IAAI,uEAmDL,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/plans/route.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAEvE,eAAO,MAAM,GAAG,uEAcN,CAAC;AAEX,eAAO,MAAM,IAAI,uEAmDL,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/billing/plans/route.js

@@ -3,6 +3,7 @@ import { PlanService } from "@nextsparkjs/core/lib/services";
 import { createPlanSchema } from "@nextsparkjs/core/lib/billing/schema";
 import { mutateWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   const { auth } = await validateAndAuthenticateRequest(request, { allowAnyScope: true });
   const includeHidden = !!auth && (auth.scopes.includes("*") || auth.scopes.includes("superadmin:all"));
@@ -59,3 +60,4 @@ export const POST = withRateLimitTier(async (request) => {
     return createApiError("Failed to create plan", 500);
   }
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/billing/portal/route.d.ts

@@ -7,5 +7,7 @@
  * P6: Customer Portal
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/billing/portal/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/portal/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAMvD,eAAO,MAAM,IAAI,iDA6EN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/portal/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAEvE,eAAO,MAAM,IAAI,iDA6EN,CAAC;AAEZ,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/billing/portal/route.js

@@ -3,6 +3,7 @@ import { authenticateRequest, createAuthFailureResponse } from "@nextsparkjs/cor
 import { getBillingGateway } from "@nextsparkjs/core/lib/billing/gateways/factory";
 import { SubscriptionService, MembershipService } from "@nextsparkjs/core/lib/services";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const POST = withRateLimitTier(async (request) => {
   const authResult = await authenticateRequest(request, { requiredScope: "billing:write" });
   if (!authResult.success || !authResult.user) {
@@ -64,3 +65,4 @@ export const POST = withRateLimitTier(async (request) => {
     );
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/blocks/[slug]/route.d.ts

@@ -1,7 +1,9 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest, args_0: {
     params: Promise<{
         slug: string;
     }>;
 }) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/blocks/[slug]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/blocks/[slug]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAIvD,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;2BAuBvC,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/blocks/[slug]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAEvE,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;2BAuBvC,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/blocks/[slug]/route.js

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server";
 import { BLOCK_REGISTRY } from "@nextsparkjs/registries/block-registry";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request, { params }) => {
   var _a;
   try {
@@ -23,3 +24,4 @@ export const GET = withRateLimitTier(async (request, { params }) => {
     return NextResponse.json({ error: "Internal server error" }, { status: 500 });
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/blocks/route.d.ts

@@ -1,3 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/blocks/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/v1/blocks/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAIvD,eAAO,MAAM,GAAG,iDAyCN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/v1/blocks/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAEvE,eAAO,MAAM,GAAG,iDAyCN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/blocks/route.js

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server";
 import { BLOCK_REGISTRY, BLOCK_CATEGORIES } from "@nextsparkjs/registries/block-registry";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   try {
     const { searchParams } = new URL(request.url);
@@ -42,3 +43,4 @@ export const GET = withRateLimitTier(async (request) => {
     return NextResponse.json({ success: false, error: "Internal server error" }, { status: 500 });
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/blocks/validate/route.d.ts

@@ -1,3 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/blocks/validate/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/blocks/validate/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAWvD,eAAO,MAAM,IAAI,iDAiCN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/blocks/validate/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAOvE,eAAO,MAAM,IAAI,iDAiCN,CAAC;AAEZ,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/blocks/validate/route.js

@@ -3,6 +3,7 @@ import { BLOCK_REGISTRY } from "@nextsparkjs/registries/block-registry";
 import { BLOCK_SCHEMAS } from "@nextsparkjs/registries/block-schemas";
 import * as z from "zod";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 const requestSchema = z.object({
   blockSlug: z.string(),
   props: z.record(z.string(), z.unknown())
@@ -36,3 +37,4 @@ export const POST = withRateLimitTier(async (request) => {
     return NextResponse.json({ error: "Internal server error" }, { status: 500 });
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/devtools/blocks/route.d.ts

@@ -7,6 +7,7 @@
  * Requires the developer role.
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
-export declare function OPTIONS(): Promise<NextResponse<unknown>>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/devtools/blocks/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/blocks/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAWvD,eAAO,MAAM,GAAG,iDAqDN,CAAC;AAEX,wBAAsB,OAAO,mCAQ5B"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/blocks/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAUvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAEvE,eAAO,MAAM,GAAG,iDAqDN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/devtools/blocks/route.js

@@ -8,6 +8,7 @@ import {
 import { BLOCK_REGISTRY } from "@nextsparkjs/registries/block-registry";
 import { TAGS_REGISTRY, COVERAGE_SUMMARY } from "@nextsparkjs/registries/testing-registry";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   const authResult = await authenticateRequest(request, { requiredScope: "admin:devtools" });
   if (!authResult.success) {
@@ -49,12 +50,4 @@ export const GET = withRateLimitTier(async (request) => {
     }
   });
 }, "read");
-export async function OPTIONS() {
-  return new NextResponse(null, {
-    status: 204,
-    headers: {
-      "Access-Control-Allow-Methods": "GET, OPTIONS",
-      "Access-Control-Allow-Headers": "Content-Type, Authorization, x-api-key"
-    }
-  });
-}
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/devtools/docs/route.d.ts

@@ -10,5 +10,7 @@
  * Requires the developer role, like the other devtools APIs.
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/devtools/docs/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/docs/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AA2EvD,eAAO,MAAM,GAAG,iDA6EN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/docs/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAuEvE,eAAO,MAAM,GAAG,iDA6EN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/devtools/docs/route.js

@@ -3,6 +3,7 @@ import { readFile } from "fs/promises";
 import { join, dirname } from "path";
 import { existsSync } from "fs";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { authenticateRequest, createAuthFailureResponse } from "@nextsparkjs/core/lib/api/auth/dual-auth";
 import {
   canAccessDevtoolsApi,
@@ -106,3 +107,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/devtools/features/route.d.ts

@@ -7,6 +7,7 @@
  * Requires the developer role.
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
-export declare function OPTIONS(): Promise<NextResponse<unknown>>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/devtools/features/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/features/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAavD,eAAO,MAAM,GAAG,iDA8BN,CAAC;AAEX,wBAAsB,OAAO,mCAQ5B"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/features/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAYvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAEvE,eAAO,MAAM,GAAG,iDA8BN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/devtools/features/route.js

@@ -10,6 +10,7 @@ import {
   COVERAGE_SUMMARY
 } from "@nextsparkjs/registries/testing-registry";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   const authResult = await authenticateRequest(request, { requiredScope: "admin:devtools" });
   if (!authResult.success) {
@@ -34,12 +35,4 @@ export const GET = withRateLimitTier(async (request) => {
     }
   });
 }, "read");
-export async function OPTIONS() {
-  return new NextResponse(null, {
-    status: 204,
-    headers: {
-      "Access-Control-Allow-Methods": "GET, OPTIONS",
-      "Access-Control-Allow-Headers": "Content-Type, Authorization, x-api-key"
-    }
-  });
-}
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/devtools/flows/route.d.ts

@@ -7,6 +7,7 @@
  * Requires the developer role.
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
-export declare function OPTIONS(): Promise<NextResponse<unknown>>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/devtools/flows/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/flows/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAavD,eAAO,MAAM,GAAG,iDA8BN,CAAC;AAEX,wBAAsB,OAAO,mCAQ5B"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/flows/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAYvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAEvE,eAAO,MAAM,GAAG,iDA8BN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/devtools/flows/route.js

@@ -10,6 +10,7 @@ import {
   COVERAGE_SUMMARY
 } from "@nextsparkjs/registries/testing-registry";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   const authResult = await authenticateRequest(request, { requiredScope: "admin:devtools" });
   if (!authResult.success) {
@@ -34,12 +35,4 @@ export const GET = withRateLimitTier(async (request) => {
     }
   });
 }, "read");
-export async function OPTIONS() {
-  return new NextResponse(null, {
-    status: 204,
-    headers: {
-      "Access-Control-Allow-Methods": "GET, OPTIONS",
-      "Access-Control-Allow-Headers": "Content-Type, Authorization, x-api-key"
-    }
-  });
-}
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/devtools/scheduled-actions/route.d.ts

@@ -7,6 +7,7 @@
  * Requires the developer role.
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
 /**
  * POST /api/v1/devtools/scheduled-actions
@@ -20,5 +21,5 @@ export declare const GET: (request: NextRequest) => Promise<NextResponse>;
  * }
  */
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
-export declare function OPTIONS(): Promise<NextResponse<unknown>>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/devtools/scheduled-actions/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/scheduled-actions/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAavD,eAAO,MAAM,GAAG,iDAsGN,CAAC;AAEX;;;;;;;;;;GAUG;AACH,eAAO,MAAM,IAAI,iDAgGN,CAAC;AAEZ,wBAAsB,OAAO,mCAQ5B"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/scheduled-actions/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAWvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAGvE,eAAO,MAAM,GAAG,iDAsGN,CAAC;AAEX;;;;;;;;;;GAUG;AACH,eAAO,MAAM,IAAI,iDAgGN,CAAC;AAEZ,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/devtools/scheduled-actions/route.js

@@ -8,6 +8,7 @@ import {
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { getAllRegisteredActions } from "@nextsparkjs/core/lib/scheduled-actions/registry";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { scheduleAction } from "@nextsparkjs/core/lib/scheduled-actions/scheduler";
 export const GET = withRateLimitTier(async (request) => {
   var _a, _b;
@@ -169,12 +170,4 @@ export const POST = withRateLimitTier(async (request) => {
     }
   });
 }, "write");
-export async function OPTIONS() {
-  return new NextResponse(null, {
-    status: 204,
-    headers: {
-      "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
-      "Access-Control-Allow-Headers": "Content-Type, Authorization, x-api-key"
-    }
-  });
-}
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/devtools/scheduled-actions/run/route.d.ts

@@ -7,6 +7,7 @@
  * Requires the developer role.
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
-export declare function OPTIONS(): Promise<NextResponse<unknown>>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/devtools/scheduled-actions/run/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/routes/api/v1/devtools/scheduled-actions/run/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAYvD,eAAO,MAAM,IAAI,iDA+EN,CAAC;AAEZ,wBAAsB,OAAO,mCAQ5B"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/routes/api/v1/devtools/scheduled-actions/run/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAUvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAGvE,eAAO,MAAM,IAAI,iDA+EN,CAAC;AAEZ,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/devtools/scheduled-actions/run/route.js

@@ -7,6 +7,7 @@ import {
 } from "@nextsparkjs/core/lib/api/auth/devtools-auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { executeAction } from "@nextsparkjs/core/lib/scheduled-actions/processor";
 export const POST = withRateLimitTier(async (request) => {
   const authResult = await authenticateRequest(request, { requiredScope: "admin:devtools" });
@@ -71,12 +72,4 @@ export const POST = withRateLimitTier(async (request) => {
     }, { status: 500 });
   }
 }, "write");
-export async function OPTIONS() {
-  return new NextResponse(null, {
-    status: 204,
-    headers: {
-      "Access-Control-Allow-Methods": "POST, OPTIONS",
-      "Access-Control-Allow-Headers": "Content-Type, Authorization, x-api-key"
-    }
-  });
-}
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/devtools/testing/route.d.ts

@@ -7,6 +7,7 @@
  * Requires the developer role.
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
-export declare function OPTIONS(): Promise<NextResponse<unknown>>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/devtools/testing/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/testing/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAevD,eAAO,MAAM,GAAG,iDAiDN,CAAC;AAEX,wBAAsB,OAAO,mCAQ5B"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/devtools/testing/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAcvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAEvE,eAAO,MAAM,GAAG,iDAiDN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/devtools/testing/route.js

@@ -12,6 +12,7 @@ import {
   FLOW_REGISTRY
 } from "@nextsparkjs/registries/testing-registry";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   const authResult = await authenticateRequest(request, { requiredScope: "admin:devtools" });
   if (!authResult.success) {
@@ -53,12 +54,4 @@ export const GET = withRateLimitTier(async (request) => {
     }
   });
 }, "read");
-export async function OPTIONS() {
-  return new NextResponse(null, {
-    status: 204,
-    headers: {
-      "Access-Control-Allow-Methods": "GET, OPTIONS",
-      "Access-Control-Allow-Headers": "Content-Type, Authorization, x-api-key"
-    }
-  });
-}
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/media/[id]/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/v1/media/:id
  *
@@ -44,4 +45,5 @@ export declare const DELETE: (request: NextRequest, args_0: {
         id: string;
     }>;
 }) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/media/[id]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/[id]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AASzC;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAmCrC,CAAA;AAEV;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,KAAK;YAEM,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAgDpC,CAAA;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAmCpC,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/[id]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAIvE;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAmCrC,CAAA;AAEV;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,KAAK;YAEM,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAgDpC,CAAA;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAmCpC,CAAA;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/media/[id]/route.js

@@ -3,6 +3,7 @@ import { createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/hel
 import { API_ERROR_CODES } from "@nextsparkjs/core/lib/api/api-error";
 import { checkPermission } from "@nextsparkjs/core/lib/permissions/check";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { MediaService } from "@nextsparkjs/core/lib/services/media.service";
 import { updateMediaSchema } from "@nextsparkjs/core/lib/media/schemas";
 export const GET = withRateLimitTier(async (request, { params }) => {
@@ -84,3 +85,4 @@ export const DELETE = withRateLimitTier(async (request, { params }) => {
     return createApiError("Failed to delete media", 500);
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/media/[id]/tags/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/v1/media/{id}/tags
  *
@@ -42,4 +43,5 @@ export declare const DELETE: (request: NextRequest, args_0: {
         id: string;
     }>;
 }) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/media/[id]/tags/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/routes/api/v1/media/[id]/tags/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAiBzC;;;;GAIG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAiCrC,CAAA;AAEV;;;;;GAKG;AACH,eAAO,MAAM,IAAI;YAEO,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDA0CpC,CAAA;AAEX;;;;;GAKG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDA0CpC,CAAA;AAEX;;;;;GAKG;AACH,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAwCpC,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/routes/api/v1/media/[id]/tags/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAYvE;;;;GAIG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAiCrC,CAAA;AAEV;;;;;GAKG;AACH,eAAO,MAAM,IAAI;YAEO,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDA0CpC,CAAA;AAEX;;;;;GAKG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDA0CpC,CAAA;AAEX;;;;;GAKG;AACH,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;iDAwCpC,CAAA;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/media/[id]/tags/route.js

@@ -3,6 +3,7 @@ import { createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/hel
 import { API_ERROR_CODES } from "@nextsparkjs/core/lib/api/api-error";
 import { checkPermission } from "@nextsparkjs/core/lib/permissions/check";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { MediaService } from "@nextsparkjs/core/lib/services/media.service";
 import * as z from "zod";
 const addTagSchema = z.object({
@@ -124,3 +125,4 @@ export const DELETE = withRateLimitTier(async (request, { params }) => {
     return createApiError("Failed to remove tag", 500);
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/media/check-duplicates/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * POST /api/v1/media/check-duplicates
  *
@@ -9,4 +10,5 @@ import { NextRequest } from 'next/server';
  * Returns: { duplicates: [{ filename, fileSize, existing: Media[] }] }
  */
 export declare const POST: (request: NextRequest) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/media/check-duplicates/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/check-duplicates/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAQzC;;;;;;;;GAQG;AACH,eAAO,MAAM,IAAI,uEAgDP,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/check-duplicates/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAGvE;;;;;;;;GAQG;AACH,eAAO,MAAM,IAAI,uEAgDP,CAAA;AAEV,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/media/check-duplicates/route.js

@@ -3,6 +3,7 @@ import { createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/hel
 import { API_ERROR_CODES } from "@nextsparkjs/core/lib/api/api-error";
 import { checkPermission } from "@nextsparkjs/core/lib/permissions/check";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { MediaService } from "@nextsparkjs/core/lib/services/media.service";
 export const POST = withRateLimitTier(async (request) => {
   try {
@@ -43,3 +44,4 @@ export const POST = withRateLimitTier(async (request) => {
     return createApiError("Failed to check duplicates", 500);
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/media/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/v1/media
  *
@@ -17,4 +18,5 @@ import { NextRequest } from 'next/server';
  * RLS: Returns only media from teams the user is a member of
  */
 export declare const GET: (request: NextRequest) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/media/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/v1/media/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AASzC;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,GAAG,uEAqCN,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/v1/media/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAIvE;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,GAAG,uEAqCN,CAAA;AAEV,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/media/route.js

@@ -3,6 +3,7 @@ import { createApiResponse, createApiError } from "@nextsparkjs/core/lib/api/hel
 import { API_ERROR_CODES } from "@nextsparkjs/core/lib/api/api-error";
 import { checkPermission } from "@nextsparkjs/core/lib/permissions/check";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { MediaService } from "@nextsparkjs/core/lib/services/media.service";
 import { mediaListQuerySchema } from "@nextsparkjs/core/lib/media/schemas";
 export const GET = withRateLimitTier(async (request) => {
@@ -31,3 +32,4 @@ export const GET = withRateLimitTier(async (request) => {
     return createApiError("Failed to list media", 500);
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/media/upload/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * POST /api/v1/media/upload
  *
@@ -6,7 +7,8 @@ import { NextRequest } from 'next/server';
  * Enhanced version that creates database records for uploaded files.
  *
  * Features:
- * - Uploads files to Vercel Blob (production) or local storage (development)
+ * - Uploads files to Vercel Blob; development without a token falls back to local storage,
+ *   production without one answers 503 STORAGE_NOT_CONFIGURED
  * - Creates media records in database for tracking
  * - Extracts image dimensions automatically
  * - Returns both legacy URLs array and new media records array
@@ -21,4 +23,5 @@ export declare const POST: (request: NextRequest) => Promise<import("next/server
  * Get upload endpoint information.
  */
 export declare const GET: (request: NextRequest) => Promise<import("next/server").NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/media/upload/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/upload/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAwCzC;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,IAAI,uEA0KN,CAAC;AAEZ;;;;GAIG;AACH,eAAO,MAAM,GAAG,uEA0CN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/media/upload/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAOzC,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AA8CvE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,IAAI,uEA6KN,CAAC;AAEZ;;;;GAIG;AACH,eAAO,MAAM,GAAG,uEA0CN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}