emdash 0.12.0 → 0.13.0

package/dist/astro/routes/api/menus/_name_/items.mjs

@@ -0,0 +1,31 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import { i as handleMenuItemCreate } from "../../../../../menus-DOzIecHi.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../../error-tSQWIl5U.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
+import { An as localeFilterQuery, et as createMenuItemBody } from "../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { n as requirePerm } from "../../../../../authorize-BlyCH-96.mjs";
+
+//#region src/astro/routes/api/menus/[name]/items.ts
+const prerender = false;
+const POST = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const name = params.name;
+	const denied = requirePerm(user, "menus:manage");
+	if (denied) return denied;
+	const localeQ = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(localeQ)) return localeQ;
+	try {
+		const body = await parseBody(request, createMenuItemBody);
+		if (isParseError(body)) return body;
+		return unwrapResult(await handleMenuItemCreate(emdash.db, name, body, { locale: localeQ.locale }), 201);
+	} catch (error) {
+		return handleError(error, "Failed to create menu item", "MENU_ITEM_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=items.mjs.map

package/dist/astro/routes/api/menus/_name_/items.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"items.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/menus/[name]/items.ts"],"sourcesContent":["/**\n * Menu items create endpoint\n *\n * POST /_emdash/api/menus/:name/items[?locale=xx] - Create a new menu item\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMenuItemCreate } from \"#api/handlers/menus.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createMenuItemBody, localeFilterQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\tconst localeQ = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(localeQ)) return localeQ;\n\n\ttry {\n\t\tconst body = await parseBody(request, createMenuItemBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleMenuItemCreate(emdash.db, name, body, { locale: localeQ.locale });\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create menu item\", \"MENU_ITEM_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,UAAU,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACnE,KAAI,aAAa,QAAQ,CAAE,QAAO;AAElC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,QAAQ,QAAQ,CAAC,EAChE,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,8BAA8B,yBAAyB"}

package/dist/astro/routes/api/menus/_name_/reorder.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/menus/[name]/reorder.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=reorder.d.mts.map

package/dist/astro/routes/api/menus/_name_/reorder.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reorder.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/menus/[name]/reorder.ts"],"mappings":";;;cAca,SAAA;AAAA,cAEA,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/menus/_name_/reorder.mjs

@@ -0,0 +1,31 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import { o as handleMenuItemReorder } from "../../../../../menus-DOzIecHi.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../../error-tSQWIl5U.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
+import { An as localeFilterQuery, st as reorderMenuItemsBody } from "../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { n as requirePerm } from "../../../../../authorize-BlyCH-96.mjs";
+
+//#region src/astro/routes/api/menus/[name]/reorder.ts
+const prerender = false;
+const POST = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const name = params.name;
+	const denied = requirePerm(user, "menus:manage");
+	if (denied) return denied;
+	const localeQ = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(localeQ)) return localeQ;
+	try {
+		const body = await parseBody(request, reorderMenuItemsBody);
+		if (isParseError(body)) return body;
+		return unwrapResult(await handleMenuItemReorder(emdash.db, name, body.items, { locale: localeQ.locale }));
+	} catch (error) {
+		return handleError(error, "Failed to reorder menu items", "MENU_REORDER_ERROR");
+	}
+};
+
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=reorder.mjs.map

package/dist/astro/routes/api/menus/_name_/reorder.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"reorder.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/menus/[name]/reorder.ts"],"sourcesContent":["/**\n * Menu items reorder endpoint\n *\n * POST /_emdash/api/menus/:name/reorder - Batch update positions\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMenuItemReorder } from \"#api/handlers/menus.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { localeFilterQuery, reorderMenuItemsBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\tconst localeQ = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(localeQ)) return localeQ;\n\n\ttry {\n\t\tconst body = await parseBody(request, reorderMenuItemsBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleMenuItemReorder(emdash.db, name, body.items, {\n\t\t\tlocale: localeQ.locale,\n\t\t});\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to reorder menu items\", \"MENU_REORDER_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,UAAU,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACnE,KAAI,aAAa,QAAQ,CAAE,QAAO;AAElC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,qBAAqB;AAC3D,MAAI,aAAa,KAAK,CAAE,QAAO;AAK/B,SAAO,aAHQ,MAAM,sBAAsB,OAAO,IAAI,MAAM,KAAK,OAAO,EACvE,QAAQ,QAAQ,QAChB,CAAC,CACyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,qBAAqB"}

package/dist/astro/routes/api/menus/_name_/translations.d.mts

@@ -0,0 +1,9 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/menus/[name]/translations.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=translations.d.mts.map

package/dist/astro/routes/api/menus/_name_/translations.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"translations.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/menus/[name]/translations.ts"],"mappings":";;;cAgBa,SAAA;AAAA,cASA,GAAA,EAAK,QAAA;AAAA,cAwBL,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/menus/_name_/translations.mjs

@@ -0,0 +1,62 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import { l as handleMenuTranslations, r as handleMenuGet, t as handleMenuCreate } from "../../../../../menus-DOzIecHi.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-tSQWIl5U.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
+import { An as localeFilterQuery } from "../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { n as requirePerm } from "../../../../../authorize-BlyCH-96.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/menus/[name]/translations.ts
+const prerender = false;
+const createTranslationBody = z.object({
+	locale: z.string().min(1),
+	label: z.string().min(1).optional()
+}).meta({ id: "CreateMenuTranslationBody" });
+const GET = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const name = params.name;
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "menus:read");
+	if (denied) return denied;
+	const localeQ = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(localeQ)) return localeQ;
+	try {
+		const anchor = await handleMenuGet(emdash.db, name, { locale: localeQ.locale });
+		if (!anchor.success) return unwrapResult(anchor);
+		return unwrapResult(await handleMenuTranslations(emdash.db, anchor.data.id));
+	} catch (error) {
+		return handleError(error, "Failed to fetch menu translations", "MENU_TRANSLATIONS_ERROR");
+	}
+};
+const POST = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const name = params.name;
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "menus:manage");
+	if (denied) return denied;
+	const localeQ = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(localeQ)) return localeQ;
+	try {
+		const body = await parseBody(request, createTranslationBody);
+		if (isParseError(body)) return body;
+		const source = await handleMenuGet(emdash.db, name, { locale: localeQ.locale });
+		if (!source.success) return unwrapResult(source);
+		return unwrapResult(await handleMenuCreate(emdash.db, {
+			name,
+			label: body.label ?? source.data.label,
+			locale: body.locale,
+			translationOf: source.data.id
+		}), 201);
+	} catch (error) {
+		return handleError(error, "Failed to create menu translation", "MENU_TRANSLATION_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=translations.mjs.map

package/dist/astro/routes/api/menus/_name_/translations.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"translations.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/menus/[name]/translations.ts"],"sourcesContent":["/**\n * Menu translation endpoints\n *\n * GET  /_emdash/api/menus/:name/translations       — list translations for a menu (uses any locale row)\n * POST /_emdash/api/menus/:name/translations       — create a new locale translation (body: { locale, label })\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleMenuCreate, handleMenuGet, handleMenuTranslations } from \"#api/handlers/menus.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { localeFilterQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nconst createTranslationBody = z\n\t.object({\n\t\tlocale: z.string().min(1),\n\t\tlabel: z.string().min(1).optional(),\n\t})\n\t.meta({ id: \"CreateMenuTranslationBody\" });\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"menus:read\");\n\tif (denied) return denied;\n\n\tconst localeQ = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(localeQ)) return localeQ;\n\n\ttry {\n\t\t// Look up any menu row matching the name so we can get its translation_group.\n\t\tconst anchor = await handleMenuGet(emdash.db, name, { locale: localeQ.locale });\n\t\tif (!anchor.success) return unwrapResult(anchor);\n\t\tconst result = await handleMenuTranslations(emdash.db, anchor.data.id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch menu translations\", \"MENU_TRANSLATIONS_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\tconst localeQ = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(localeQ)) return localeQ;\n\n\ttry {\n\t\tconst body = await parseBody(request, createTranslationBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Resolve the source menu (either by explicit locale in query, or the\n\t\t// first matching row). Its id becomes the `translationOf` for the new row.\n\t\tconst source = await handleMenuGet(emdash.db, name, { locale: localeQ.locale });\n\t\tif (!source.success) return unwrapResult(source);\n\n\t\tconst result = await handleMenuCreate(emdash.db, {\n\t\t\tname,\n\t\t\tlabel: body.label ?? source.data.label,\n\t\t\tlocale: body.locale,\n\t\t\ttranslationOf: source.data.id,\n\t\t});\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create menu translation\", \"MENU_TRANSLATION_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAM,wBAAwB,EAC5B,OAAO;CACP,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;CACzB,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACnC,CAAC,CACD,KAAK,EAAE,IAAI,6BAA6B,CAAC;AAE3C,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;CAEnB,MAAM,UAAU,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACnE,KAAI,aAAa,QAAQ,CAAE,QAAO;AAElC,KAAI;EAEH,MAAM,SAAS,MAAM,cAAc,OAAO,IAAI,MAAM,EAAE,QAAQ,QAAQ,QAAQ,CAAC;AAC/E,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAEhD,SAAO,aADQ,MAAM,uBAAuB,OAAO,IAAI,OAAO,KAAK,GAAG,CAC3C;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,qCAAqC,0BAA0B;;;AAI3F,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,UAAU,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACnE,KAAI,aAAa,QAAQ,CAAE,QAAO;AAElC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,sBAAsB;AAC5D,MAAI,aAAa,KAAK,CAAE,QAAO;EAI/B,MAAM,SAAS,MAAM,cAAc,OAAO,IAAI,MAAM,EAAE,QAAQ,QAAQ,QAAQ,CAAC;AAC/E,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAQhD,SAAO,aANQ,MAAM,iBAAiB,OAAO,IAAI;GAChD;GACA,OAAO,KAAK,SAAS,OAAO,KAAK;GACjC,QAAQ,KAAK;GACb,eAAe,OAAO,KAAK;GAC3B,CAAC,EAC0B,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,qCAAqC,gCAAgC"}

package/dist/astro/routes/api/menus/_name_.d.mts

@@ -0,0 +1,10 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/menus/[name].d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const PUT: APIRoute;
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, GET, PUT, prerender };
+//# sourceMappingURL=_name_.d.mts.map

package/dist/astro/routes/api/menus/_name_.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_name_.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/menus/[name].ts"],"mappings":";;;cAgBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cAkBL,GAAA,EAAK,QAAA;AAAA,cAqBL,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/menus/_name_.mjs

@@ -0,0 +1,60 @@
+import "../../../../base64-CqR-7kqF.mjs";
+import "../../../../types-CwXMEPRr.mjs";
+import { n as handleMenuDelete, r as handleMenuGet, u as handleMenuUpdate } from "../../../../menus-DOzIecHi.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../error-tSQWIl5U.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-BFTPon-J.mjs";
+import { An as localeFilterQuery, ct as updateMenuBody } from "../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../setup-BGAJ2uXs.mjs";
+import "../../../../api/schemas/index.mjs";
+import { n as requirePerm } from "../../../../authorize-BlyCH-96.mjs";
+
+//#region src/astro/routes/api/menus/[name].ts
+const prerender = false;
+const GET = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const name = params.name;
+	const denied = requirePerm(user, "menus:read");
+	if (denied) return denied;
+	const query = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(query)) return query;
+	try {
+		return unwrapResult(await handleMenuGet(emdash.db, name, { locale: query.locale }));
+	} catch (error) {
+		return handleError(error, "Failed to fetch menu", "MENU_GET_ERROR");
+	}
+};
+const PUT = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const name = params.name;
+	const denied = requirePerm(user, "menus:manage");
+	if (denied) return denied;
+	const query = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(query)) return query;
+	try {
+		const body = await parseBody(request, updateMenuBody);
+		if (isParseError(body)) return body;
+		return unwrapResult(await handleMenuUpdate(emdash.db, name, {
+			...body,
+			locale: query.locale
+		}));
+	} catch (error) {
+		return handleError(error, "Failed to update menu", "MENU_UPDATE_ERROR");
+	}
+};
+const DELETE = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const name = params.name;
+	const denied = requirePerm(user, "menus:manage");
+	if (denied) return denied;
+	const query = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(query)) return query;
+	try {
+		return unwrapResult(await handleMenuDelete(emdash.db, name, { locale: query.locale }));
+	} catch (error) {
+		return handleError(error, "Failed to delete menu", "MENU_DELETE_ERROR");
+	}
+};
+
+//#endregion
+export { DELETE, GET, PUT, prerender };
+//# sourceMappingURL=_name_.mjs.map

package/dist/astro/routes/api/menus/_name_.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"_name_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/menus/[name].ts"],"sourcesContent":["/**\n * Single menu endpoint\n *\n * GET    /_emdash/api/menus/:name[?locale=xx]\n * PUT    /_emdash/api/menus/:name[?locale=xx]\n * DELETE /_emdash/api/menus/:name[?locale=xx]\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMenuDelete, handleMenuGet, handleMenuUpdate } from \"#api/handlers/menus.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { localeFilterQuery, updateMenuBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst denied = requirePerm(user, \"menus:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleMenuGet(emdash.db, name, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch menu\", \"MENU_GET_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst body = await parseBody(request, updateMenuBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleMenuUpdate(emdash.db, name, { ...body, locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update menu\", \"MENU_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleMenuDelete(emdash.db, name, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete menu\", \"MENU_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,cAAc,OAAO,IAAI,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC,CAClD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,iBAAiB;;;AAIrE,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,iBAAiB,OAAO,IAAI,MAAM;GAAE,GAAG;GAAM,QAAQ,MAAM;GAAQ,CAAC,CAC9D;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB;;;AAIzE,MAAa,SAAmB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACtE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,iBAAiB,OAAO,IAAI,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC,CACrD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}

package/dist/astro/routes/api/menus/index.d.mts

@@ -0,0 +1,9 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/menus/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/menus/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/menus/index.ts"],"mappings":";;;cAea,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cAiBL,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/menus/index.mjs

@@ -0,0 +1,40 @@
+import "../../../../base64-CqR-7kqF.mjs";
+import "../../../../types-CwXMEPRr.mjs";
+import { c as handleMenuList, t as handleMenuCreate } from "../../../../menus-DOzIecHi.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../error-tSQWIl5U.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-BFTPon-J.mjs";
+import { $ as createMenuBody, An as localeFilterQuery } from "../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../setup-BGAJ2uXs.mjs";
+import "../../../../api/schemas/index.mjs";
+import { n as requirePerm } from "../../../../authorize-BlyCH-96.mjs";
+
+//#region src/astro/routes/api/menus/index.ts
+const prerender = false;
+const GET = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	const denied = requirePerm(user, "menus:read");
+	if (denied) return denied;
+	const query = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(query)) return query;
+	try {
+		return unwrapResult(await handleMenuList(emdash.db, { locale: query.locale }));
+	} catch (error) {
+		return handleError(error, "Failed to fetch menus", "MENU_LIST_ERROR");
+	}
+};
+const POST = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	const denied = requirePerm(user, "menus:manage");
+	if (denied) return denied;
+	try {
+		const body = await parseBody(request, createMenuBody);
+		if (isParseError(body)) return body;
+		return unwrapResult(await handleMenuCreate(emdash.db, body), 201);
+	} catch (error) {
+		return handleError(error, "Failed to create menu", "MENU_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/menus/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/menus/index.ts"],"sourcesContent":["/**\n * Menus list and create endpoints\n *\n * GET  /_emdash/api/menus[?locale=xx] - List menus (optionally filtered by locale)\n * POST /_emdash/api/menus              - Create menu (body may include locale & translationOf)\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMenuCreate, handleMenuList } from \"#api/handlers/menus.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createMenuBody, localeFilterQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"menus:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleMenuList(emdash.db, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch menus\", \"MENU_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createMenuBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleMenuCreate(emdash.db, body);\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create menu\", \"MENU_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAeA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,SAAS,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,eAAe,OAAO,IAAI,EAAE,QAAQ,MAAM,QAAQ,CAAC,CAC7C;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,kBAAkB;;;AAIvE,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,iBAAiB,OAAO,IAAI,KAAK,EAC1B,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}

package/dist/astro/routes/api/oauth/authorize.d.mts

@@ -0,0 +1,9 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/oauth/authorize.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=authorize.d.mts.map

package/dist/astro/routes/api/oauth/authorize.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/oauth/authorize.ts"],"mappings":";;;cA2Ba,SAAA;AAAA,cAwDA,GAAA,EAAK,QAAA;AAAA,cAsGL,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/oauth/authorize.mjs

@@ -0,0 +1,260 @@
+import { n as getPublicOrigin } from "../../../../public-url-CseXl9Fv.mjs";
+import { n as VALID_SCOPES } from "../../../../api-tokens-D3C9v02m.mjs";
+import { t as escapeHtml } from "../../../../escape-B8bdIryO.mjs";
+import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "../../../../oauth-clients-D_B0_-Bz.mjs";
+import "../../../../oauth-user-lookup-meyS2oB1.mjs";
+import { n as handleAuthorizationApproval, t as buildDeniedRedirect } from "../../../../oauth-authorization-62GmpGIH.mjs";
+
+//#region src/astro/routes/api/oauth/authorize.ts
+const prerender = false;
+const CSRF_COOKIE_NAME = "emdash_oauth_csrf";
+/** Generate a 32-byte random token as hex. */
+function generateCsrfToken() {
+	const bytes = new Uint8Array(32);
+	crypto.getRandomValues(bytes);
+	return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+/** Build the Set-Cookie header value for the CSRF token. */
+function csrfCookieHeader(token, request, siteUrl) {
+	return `${CSRF_COOKIE_NAME}=${token}; Path=/_emdash/oauth/authorize; HttpOnly; SameSite=Strict${(siteUrl ? siteUrl.startsWith("https:") : new URL(request.url).protocol === "https:") ? "; Secure" : ""}`;
+}
+/** Extract the CSRF token from the request's cookies. */
+function getCsrfCookie(request) {
+	const cookieHeader = request.headers.get("Cookie");
+	if (!cookieHeader) return null;
+	return cookieHeader.match(new RegExp(`(?:^|;\\s*)${CSRF_COOKIE_NAME}=([^;]+)`))?.[1] ?? null;
+}
+const SCOPE_LABELS = {
+	"content:read": "Read content (posts, pages, etc.)",
+	"content:write": "Create, edit, and delete content",
+	"media:read": "View media files",
+	"media:write": "Upload and manage media files",
+	"schema:read": "View collection schemas",
+	"schema:write": "Create and modify collection schemas",
+	admin: "Full administrative access"
+};
+const GET = async ({ url, request, locals }) => {
+	const { emdash, user } = locals;
+	const clientId = url.searchParams.get("client_id");
+	const redirectUri = url.searchParams.get("redirect_uri");
+	const responseType = url.searchParams.get("response_type");
+	const codeChallenge = url.searchParams.get("code_challenge");
+	const codeChallengeMethod = url.searchParams.get("code_challenge_method");
+	const scope = url.searchParams.get("scope");
+	const state = url.searchParams.get("state");
+	if (!clientId || !redirectUri || responseType !== "code" || !codeChallenge) return new Response(renderErrorPage("Invalid authorization request. Missing required parameters."), {
+		status: 400,
+		headers: { "Content-Type": "text/html; charset=utf-8" }
+	});
+	if (codeChallengeMethod && codeChallengeMethod !== "S256") return new Response(renderErrorPage("Only S256 code challenge method is supported."), {
+		status: 400,
+		headers: { "Content-Type": "text/html; charset=utf-8" }
+	});
+	if (emdash?.db) {
+		const client = await lookupOAuthClient(emdash.db, clientId);
+		if (!client) return new Response(renderErrorPage("Unknown client application."), {
+			status: 400,
+			headers: { "Content-Type": "text/html; charset=utf-8" }
+		});
+		if (validateClientRedirectUri(redirectUri, client.redirectUris)) return new Response(renderErrorPage("The redirect URI is not registered for this client."), {
+			status: 400,
+			headers: { "Content-Type": "text/html; charset=utf-8" }
+		});
+	}
+	if (!user) {
+		const loginUrl = new URL("/_emdash/admin/login", getPublicOrigin(url, emdash?.config));
+		loginUrl.searchParams.set("redirect", url.pathname + url.search);
+		return Response.redirect(loginUrl.toString(), 302);
+	}
+	const validSet = new Set(VALID_SCOPES);
+	const requestedScopes = (scope ?? "").split(" ").filter(Boolean).filter((s) => validSet.has(s));
+	if (requestedScopes.length === 0) return new Response(renderErrorPage("No valid scopes requested."), {
+		status: 400,
+		headers: { "Content-Type": "text/html; charset=utf-8" }
+	});
+	const csrfToken = generateCsrfToken();
+	const html = renderConsentPage({
+		clientId,
+		scopes: requestedScopes,
+		redirectUri,
+		responseType,
+		codeChallenge,
+		codeChallengeMethod: codeChallengeMethod ?? "S256",
+		state: state ?? "",
+		resource: url.searchParams.get("resource") ?? "",
+		userName: user.name ?? user.email,
+		csrfToken
+	});
+	return new Response(html, { headers: {
+		"Content-Type": "text/html; charset=utf-8",
+		"Set-Cookie": csrfCookieHeader(csrfToken, request, getPublicOrigin(url, emdash?.config))
+	} });
+};
+const POST = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return new Response(renderErrorPage("EmDash is not initialized."), {
+		status: 500,
+		headers: { "Content-Type": "text/html; charset=utf-8" }
+	});
+	if (!user) return new Response(renderErrorPage("Authentication required."), {
+		status: 401,
+		headers: { "Content-Type": "text/html; charset=utf-8" }
+	});
+	const formData = await request.formData();
+	const field = (name, fallback = "") => {
+		const v = formData.get(name);
+		return typeof v === "string" ? v : fallback;
+	};
+	const formCsrf = field("csrf_token");
+	const cookieCsrf = getCsrfCookie(request);
+	const csrfError = new Response(renderErrorPage("Invalid or missing CSRF token. Please try again."), {
+		status: 403,
+		headers: { "Content-Type": "text/html; charset=utf-8" }
+	});
+	if (!formCsrf || !cookieCsrf) return csrfError;
+	const csrfEncoder = new TextEncoder();
+	const [csrfHashA, csrfHashB] = await Promise.all([crypto.subtle.digest("SHA-256", csrfEncoder.encode(formCsrf)), crypto.subtle.digest("SHA-256", csrfEncoder.encode(cookieCsrf))]);
+	const a = new Uint8Array(csrfHashA);
+	const b = new Uint8Array(csrfHashB);
+	let diff = 0;
+	for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];
+	if (diff !== 0) return csrfError;
+	const action = field("action");
+	const redirectUri = field("redirect_uri");
+	const state = field("state") || void 0;
+	if (!redirectUri) return new Response(renderErrorPage("Missing redirect_uri."), {
+		status: 400,
+		headers: { "Content-Type": "text/html; charset=utf-8" }
+	});
+	const uriError = validateRedirectUri(redirectUri);
+	if (uriError) return new Response(renderErrorPage(escapeHtml(uriError)), {
+		status: 400,
+		headers: { "Content-Type": "text/html; charset=utf-8" }
+	});
+	if (action === "deny") {
+		const clientId = field("client_id");
+		if (!clientId) return new Response(renderErrorPage("Missing client_id."), {
+			status: 400,
+			headers: { "Content-Type": "text/html; charset=utf-8" }
+		});
+		const client = await lookupOAuthClient(emdash.db, clientId);
+		if (!client) return new Response(renderErrorPage("Unknown client application."), {
+			status: 400,
+			headers: { "Content-Type": "text/html; charset=utf-8" }
+		});
+		if (validateClientRedirectUri(redirectUri, client.redirectUris)) return new Response(renderErrorPage("The redirect URI is not registered for this client."), {
+			status: 400,
+			headers: { "Content-Type": "text/html; charset=utf-8" }
+		});
+		const denyUrl = buildDeniedRedirect(redirectUri, state);
+		return Response.redirect(denyUrl, 302);
+	}
+	const result = await handleAuthorizationApproval(emdash.db, user.id, user.role, {
+		response_type: field("response_type", "code"),
+		client_id: field("client_id"),
+		redirect_uri: redirectUri,
+		scope: field("scope"),
+		state,
+		code_challenge: field("code_challenge"),
+		code_challenge_method: field("code_challenge_method", "S256"),
+		resource: field("resource") || void 0
+	});
+	if (!result.success) {
+		const errMsg = result.error?.message ?? "Authorization failed";
+		try {
+			const errorUrl = new URL(redirectUri);
+			errorUrl.searchParams.set("error", "server_error");
+			errorUrl.searchParams.set("error_description", "Authorization failed");
+			if (state) errorUrl.searchParams.set("state", state);
+			return Response.redirect(errorUrl.toString(), 302);
+		} catch {
+			return new Response(renderErrorPage(escapeHtml(errMsg)), {
+				status: 400,
+				headers: { "Content-Type": "text/html; charset=utf-8" }
+			});
+		}
+	}
+	return Response.redirect(result.data.redirect_url, 302);
+};
+function renderConsentPage(params) {
+	const scopeList = params.scopes.map((s) => {
+		return `<li>${escapeHtml(SCOPE_LABELS[s] ?? s)}</li>`;
+	}).join("\n");
+	return `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Authorize Application — EmDash</title>
+<style>
+  * { margin: 0; padding: 0; box-sizing: border-box; }
+  body { font-family: system-ui, -apple-system, sans-serif; background: #0a0a0a; color: #e5e5e5; display: flex; justify-content: center; align-items: center; min-height: 100vh; padding: 1rem; }
+  .card { background: #171717; border: 1px solid #262626; border-radius: 12px; max-width: 420px; width: 100%; padding: 2rem; }
+  h1 { font-size: 1.25rem; font-weight: 600; margin-bottom: 0.5rem; }
+  .client-id { color: #a3a3a3; font-size: 0.875rem; word-break: break-all; margin-bottom: 1.5rem; }
+  .user { color: #a3a3a3; font-size: 0.875rem; margin-bottom: 1rem; }
+  h2 { font-size: 0.875rem; font-weight: 500; color: #a3a3a3; text-transform: uppercase; letter-spacing: 0.05em; margin-bottom: 0.75rem; }
+  ul { list-style: none; margin-bottom: 1.5rem; }
+  li { padding: 0.5rem 0; border-bottom: 1px solid #262626; font-size: 0.875rem; }
+  li:last-child { border-bottom: none; }
+  .actions { display: flex; gap: 0.75rem; }
+  button { flex: 1; padding: 0.625rem 1rem; border-radius: 8px; border: none; font-size: 0.875rem; font-weight: 500; cursor: pointer; }
+  .approve { background: #2563eb; color: white; }
+  .approve:hover { background: #1d4ed8; }
+  .deny { background: #262626; color: #e5e5e5; }
+  .deny:hover { background: #333; }
+</style>
+</head>
+<body>
+<div class="card">
+  <h1>Authorize Application</h1>
+  <p class="client-id">${escapeHtml(params.clientId)}</p>
+  <p class="user">Signed in as <strong>${escapeHtml(params.userName)}</strong></p>
+  <h2>Permissions requested</h2>
+  <ul>${scopeList}</ul>
+  <form method="POST">
+    <input type="hidden" name="csrf_token" value="${escapeHtml(params.csrfToken)}">
+    <input type="hidden" name="response_type" value="${escapeHtml(params.responseType)}">
+    <input type="hidden" name="client_id" value="${escapeHtml(params.clientId)}">
+    <input type="hidden" name="redirect_uri" value="${escapeHtml(params.redirectUri)}">
+    <input type="hidden" name="scope" value="${escapeHtml(params.scopes.join(" "))}">
+    <input type="hidden" name="state" value="${escapeHtml(params.state)}">
+    <input type="hidden" name="code_challenge" value="${escapeHtml(params.codeChallenge)}">
+    <input type="hidden" name="code_challenge_method" value="${escapeHtml(params.codeChallengeMethod)}">
+    <input type="hidden" name="resource" value="${escapeHtml(params.resource)}">
+    <div class="actions">
+      <button type="submit" name="action" value="deny" class="deny">Deny</button>
+      <button type="submit" name="action" value="approve" class="approve">Approve</button>
+    </div>
+  </form>
+</div>
+</body>
+</html>`;
+}
+function renderErrorPage(message) {
+	return `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Authorization Error — EmDash</title>
+<style>
+  * { margin: 0; padding: 0; box-sizing: border-box; }
+  body { font-family: system-ui, -apple-system, sans-serif; background: #0a0a0a; color: #e5e5e5; display: flex; justify-content: center; align-items: center; min-height: 100vh; padding: 1rem; }
+  .card { background: #171717; border: 1px solid #262626; border-radius: 12px; max-width: 420px; width: 100%; padding: 2rem; }
+  h1 { font-size: 1.25rem; font-weight: 600; margin-bottom: 1rem; color: #ef4444; }
+  p { font-size: 0.875rem; color: #a3a3a3; }
+</style>
+</head>
+<body>
+<div class="card">
+  <h1>Authorization Error</h1>
+  <p>${escapeHtml(message)}</p>
+</div>
+</body>
+</html>`;
+}
+
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=authorize.mjs.map