emdash 0.36.0 → 0.37.0

package/src/astro/routes/api/media/upload-url.ts

@@ -10,7 +10,6 @@
 import * as path from "node:path";
 
 import type { APIRoute } from "astro";
-import { MediaRepository } from "emdash";
 import { ulid } from "ulidx";
 
 import { requirePerm } from "#api/authorize.js";
@@ -18,6 +17,7 @@ import { apiError, apiSuccess, handleError } from "#api/error.js";
 import { GLOBAL_UPLOAD_ALLOWLIST, resolveFieldAllowlist } from "#api/handlers/media-allowlist.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { DEFAULT_MAX_UPLOAD_SIZE, mediaUploadUrlBody } from "#api/schemas.js";
+import { MediaRepository } from "#db/repositories/media.js";
 import { matchesMimeAllowlist, normalizeMime } from "#media/mime.js";
 
 export const prerender = false;
@@ -90,7 +90,7 @@ export const POST: APIRoute = async ({ request, locals }) => {
 		const repo = new MediaRepository(emdash.db);
 
 		// Check for existing content with same hash (deduplication)
-		if (body.contentHash && body.size > 0) {
+		if (body.deduplicate !== false && body.contentHash && body.size > 0) {
 			const existing = await repo.findByContentHash(body.contentHash);
 			if (existing && existing.mimeType === normalizedContentType && existing.size === body.size) {
 				const response: ExistingMediaResponse = {
@@ -102,10 +102,13 @@ export const POST: APIRoute = async ({ request, locals }) => {
 				return apiSuccess(response);
 			}
 		}
+		const filename = body.ensureUniqueFilename
+			? await repo.findAvailableFilename(body.filename)
+			: body.filename;
 
 		// Generate unique storage key
 		const id = ulid();
-		const ext = path.extname(body.filename) || "";
+		const ext = path.extname(filename) || "";
 		const storageKey = `${id}${ext}`;
 
 		let signedUrl: Awaited<ReturnType<typeof emdash.storage.getSignedUploadUrl>> | null;
@@ -122,11 +125,12 @@ export const POST: APIRoute = async ({ request, locals }) => {
 		}
 
 		const mediaItem = await repo.createPending({
-			filename: body.filename,
+			filename,
 			mimeType: normalizedContentType,
 			size: body.size,
 			storageKey,
 			authorId: user?.id,
+			folderId: body.folderId,
 		});
 
 		const response: UploadUrlResponse = {

package/src/astro/routes/api/media.ts

@@ -15,7 +15,14 @@ import { apiError, apiSuccess, handleError, unwrapResult } from "#api/error.js";
 import { GLOBAL_UPLOAD_ALLOWLIST, resolveFieldAllowlist } from "#api/handlers/media-allowlist.js";
 import { handleMediaUsageSummaries } from "#api/handlers/media-usage.js";
 import { isParseError, parseQuery } from "#api/parse.js";
-import { DEFAULT_MAX_UPLOAD_SIZE, formatFileSize, mediaListQuery } from "#api/schemas.js";
+import {
+	DEFAULT_MAX_UPLOAD_SIZE,
+	formatFileSize,
+	mediaFolderIdSchema,
+	mediaListQuery,
+	mediaUploadDeduplicateForm,
+	mediaUploadEnsureUniqueFilenameForm,
+} from "#api/schemas.js";
 import { MediaRepository } from "#db/repositories/media.js";
 import { enrichImageMetadata } from "#media/enrich.js";
 import { matchesMimeAllowlist, normalizeMime } from "#media/mime.js";
@@ -138,6 +145,40 @@ export const POST: APIRoute = async ({ request, locals }) => {
 			return apiError("NO_FILE", "No file provided", 400);
 		}
 
+		const deduplicateResult = mediaUploadDeduplicateForm.safeParse(
+			formData.get("deduplicate") ?? undefined,
+		);
+		if (!deduplicateResult.success) {
+			return apiError("VALIDATION_ERROR", "Invalid request data", 400, {
+				issues: deduplicateResult.error.issues.map((issue) => ({
+					path: "deduplicate",
+					message: issue.message,
+				})),
+			});
+		}
+		const ensureUniqueFilenameResult = mediaUploadEnsureUniqueFilenameForm.safeParse(
+			formData.get("ensureUniqueFilename") ?? undefined,
+		);
+		if (!ensureUniqueFilenameResult.success) {
+			return apiError("VALIDATION_ERROR", "Invalid request data", 400);
+		}
+		const folderEntry = formData.get("folderId");
+		let folderId: string | null | undefined;
+		if (folderEntry !== null) {
+			if (typeof folderEntry !== "string") {
+				return apiError("VALIDATION_ERROR", "Invalid request data", 400);
+			}
+			if (folderEntry === "unfiled") {
+				folderId = null;
+			} else {
+				const folderResult = mediaFolderIdSchema.safeParse(folderEntry);
+				if (!folderResult.success) {
+					return apiError("VALIDATION_ERROR", "Invalid request data", 400);
+				}
+				folderId = folderResult.data;
+			}
+		}
+
 		// Validate file type — widen the allowlist when a field-specific list is configured
 		const fieldIdEntry = formData.get("fieldId");
 		const fieldId =
@@ -165,16 +206,20 @@ export const POST: APIRoute = async ({ request, locals }) => {
 
 		// Check for existing media with same content hash (deduplication)
 		const repo = new MediaRepository(emdash.db);
-		const existing = await repo.findByContentHash(contentHash);
-		if (existing) {
-			// Same content already exists - return existing item
-			const itemWithUrl = addUrlToMedia(existing);
-			return apiSuccess({ item: itemWithUrl, deduplicated: true });
+		if (deduplicateResult.data) {
+			const existing = await repo.findByContentHash(contentHash);
+			if (existing) {
+				const itemWithUrl = addUrlToMedia(existing);
+				return apiSuccess({ item: itemWithUrl, deduplicated: true });
+			}
 		}
+		const filename = ensureUniqueFilenameResult.data
+			? await repo.findAvailableFilename(file.name)
+			: file.name;
 
 		// Generate unique storage key
 		const id = ulid();
-		const ext = path.extname(file.name) || "";
+		const ext = path.extname(filename) || "";
 		const storageKey = `${id}${ext}`;
 
 		// Upload to storage using the configured adapter
@@ -206,7 +251,7 @@ export const POST: APIRoute = async ({ request, locals }) => {
 
 		// Create media record
 		const result = await emdash.handleMediaCreate({
-			filename: file.name,
+			filename,
 			mimeType: normalizeMime(file.type),
 			size: file.size,
 			// Client dimensions win over server header dimensions: the browser's
@@ -219,6 +264,7 @@ export const POST: APIRoute = async ({ request, locals }) => {
 			blurhash: enriched.blurhash,
 			dominantColor: enriched.dominantColor,
 			authorId: user?.id,
+			folderId,
 		});
 
 		if (!result.success) {

package/src/astro/routes/api/menus/[name]/items/[id].ts

@@ -12,10 +12,11 @@ import { apiError, handleError, unwrapResult } from "#api/error.js";
 import { handleMenuItemDelete, handleMenuItemUpdate } from "#api/handlers/menus.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery, updateMenuItemBody } from "#api/schemas.js";
+import { menuTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
-export const PUT: APIRoute = async ({ params, request, locals }) => {
+export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const name = params.name!;
 	const itemId = params.id;
@@ -37,13 +38,15 @@ export const PUT: APIRoute = async ({ params, request, locals }) => {
 		const result = await handleMenuItemUpdate(emdash.db, name, itemId, body, {
 			locale: localeQ.locale,
 		});
+		if (!result.success) return unwrapResult(result);
+		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update menu item", "MENU_ITEM_UPDATE_ERROR");
 	}
 };
 
-export const DELETE: APIRoute = async ({ params, request, locals }) => {
+export const DELETE: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const name = params.name!;
 	const itemId = params.id;
@@ -62,6 +65,8 @@ export const DELETE: APIRoute = async ({ params, request, locals }) => {
 		const result = await handleMenuItemDelete(emdash.db, name, itemId, {
 			locale: localeQ.locale,
 		});
+		if (!result.success) return unwrapResult(result);
+		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete menu item", "MENU_ITEM_DELETE_ERROR");

package/src/astro/routes/api/menus/[name]/items.ts

@@ -11,10 +11,11 @@ import { handleError, unwrapResult } from "#api/error.js";
 import { handleMenuItemCreate } from "#api/handlers/menus.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { createMenuItemBody, localeFilterQuery } from "#api/schemas.js";
+import { menuTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
-export const POST: APIRoute = async ({ params, request, locals }) => {
+export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const name = params.name!;
 
@@ -29,6 +30,8 @@ export const POST: APIRoute = async ({ params, request, locals }) => {
 		if (isParseError(body)) return body;
 
 		const result = await handleMenuItemCreate(emdash.db, name, body, { locale: localeQ.locale });
+		if (!result.success) return unwrapResult(result, 201);
+		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create menu item", "MENU_ITEM_CREATE_ERROR");

package/src/astro/routes/api/menus/[name]/reorder.ts

@@ -11,10 +11,11 @@ import { handleError, unwrapResult } from "#api/error.js";
 import { handleMenuItemReorder } from "#api/handlers/menus.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery, reorderMenuItemsBody } from "#api/schemas.js";
+import { menuTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
-export const POST: APIRoute = async ({ params, request, locals }) => {
+export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const name = params.name!;
 
@@ -31,6 +32,8 @@ export const POST: APIRoute = async ({ params, request, locals }) => {
 		const result = await handleMenuItemReorder(emdash.db, name, body.items, {
 			locale: localeQ.locale,
 		});
+		if (!result.success) return unwrapResult(result);
+		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to reorder menu items", "MENU_REORDER_ERROR");

package/src/astro/routes/api/menus/[name]/translations.ts

@@ -13,6 +13,7 @@ import { handleError, requireDb, unwrapResult } from "#api/error.js";
 import { handleMenuCreate, handleMenuGet, handleMenuTranslations } from "#api/handlers/menus.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery } from "#api/schemas.js";
+import { menuTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
@@ -47,7 +48,7 @@ export const GET: APIRoute = async ({ params, request, locals }) => {
 	}
 };
 
-export const POST: APIRoute = async ({ params, request, locals }) => {
+export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const name = params.name!;
 
@@ -75,6 +76,8 @@ export const POST: APIRoute = async ({ params, request, locals }) => {
 			locale: body.locale,
 			translationOf: source.data.id,
 		});
+		if (!result.success) return unwrapResult(result, 201);
+		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create menu translation", "MENU_TRANSLATION_CREATE_ERROR");

package/src/astro/routes/api/menus/[name].ts

@@ -13,6 +13,7 @@ import { handleError, unwrapResult } from "#api/error.js";
 import { handleMenuDelete, handleMenuGet, handleMenuUpdate } from "#api/handlers/menus.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery, updateMenuBody } from "#api/schemas.js";
+import { menuTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
@@ -34,7 +35,7 @@ export const GET: APIRoute = async ({ params, request, locals }) => {
 	}
 };
 
-export const PUT: APIRoute = async ({ params, request, locals }) => {
+export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const name = params.name!;
 
@@ -49,13 +50,15 @@ export const PUT: APIRoute = async ({ params, request, locals }) => {
 		if (isParseError(body)) return body;
 
 		const result = await handleMenuUpdate(emdash.db, name, { ...body, locale: query.locale });
+		if (!result.success) return unwrapResult(result);
+		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update menu", "MENU_UPDATE_ERROR");
 	}
 };
 
-export const DELETE: APIRoute = async ({ params, request, locals }) => {
+export const DELETE: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const name = params.name!;
 
@@ -67,6 +70,8 @@ export const DELETE: APIRoute = async ({ params, request, locals }) => {
 
 	try {
 		const result = await handleMenuDelete(emdash.db, name, { locale: query.locale });
+		if (!result.success) return unwrapResult(result);
+		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete menu", "MENU_DELETE_ERROR");

package/src/astro/routes/api/menus/index.ts

@@ -12,6 +12,7 @@ import { handleError, unwrapResult } from "#api/error.js";
 import { handleMenuCreate, handleMenuList } from "#api/handlers/menus.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { createMenuBody, localeFilterQuery } from "#api/schemas.js";
+import { menuTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
@@ -32,7 +33,7 @@ export const GET: APIRoute = async ({ request, locals }) => {
 	}
 };
 
-export const POST: APIRoute = async ({ request, locals }) => {
+export const POST: APIRoute = async ({ request, locals, cache }) => {
 	const { emdash, user } = locals;
 
 	const denied = requirePerm(user, "menus:manage");
@@ -43,6 +44,8 @@ export const POST: APIRoute = async ({ request, locals }) => {
 		if (isParseError(body)) return body;
 
 		const result = await handleMenuCreate(emdash.db, body);
+		if (!result.success) return unwrapResult(result, 201);
+		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(result.data.name)] });
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create menu", "MENU_CREATE_ERROR");

package/src/astro/routes/api/settings/email.ts

@@ -81,7 +81,7 @@ export const GET: APIRoute = async ({ locals }) => {
  * Validates the pipeline is configured and the provider works.
  */
 const testEmailBody = z.object({
-	to: z.string().email(),
+	to: z.email(),
 });
 
 export const POST: APIRoute = async ({ request, locals }) => {

package/src/astro/routes/api/settings.ts

@@ -12,6 +12,7 @@ import { apiError, handleError, unwrapResult } from "#api/error.js";
 import { handleSettingsGet, handleSettingsUpdate } from "#api/handlers/settings.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { settingsUpdateBody } from "#api/schemas.js";
+import { siteSettingsTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
@@ -45,7 +46,7 @@ export const GET: APIRoute = async ({ locals }) => {
  * Updates site settings. Accepts a partial settings object.
  * Merges with existing settings and returns the updated settings.
  */
-export const POST: APIRoute = async ({ request, locals }) => {
+export const POST: APIRoute = async ({ request, locals, cache }) => {
 	const { emdash, user } = locals;
 
 	if (!emdash?.db) {
@@ -60,6 +61,8 @@ export const POST: APIRoute = async ({ request, locals }) => {
 		if (isParseError(body)) return body;
 
 		const result = await handleSettingsUpdate(emdash.db, emdash.storage, body);
+		if (!result.success) return unwrapResult(result);
+		if (cache?.enabled) await cache.invalidate({ tags: [siteSettingsTag()] });
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update settings", "SETTINGS_UPDATE_ERROR");

package/src/astro/routes/api/taxonomies/[name]/reorder.ts

@@ -15,10 +15,11 @@ import { apiError, handleError, requireDb, unwrapResult } from "#api/error.js";
 import { handleTermReorder } from "#api/handlers/taxonomies.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { reorderTermsBody } from "#api/schemas.js";
+import { taxonomyTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
-export const POST: APIRoute = async ({ params, request, locals }) => {
+export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const { name } = params;
 	if (!name) return apiError("VALIDATION_ERROR", "Taxonomy name required", 400);
@@ -34,6 +35,8 @@ export const POST: APIRoute = async ({ params, request, locals }) => {
 		if (isParseError(body)) return body;
 
 		const result = await handleTermReorder(emdash.db, name, body);
+		if (!result.success) return unwrapResult(result);
+		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to reorder terms", "TERM_REORDER_ERROR");

package/src/astro/routes/api/taxonomies/[name]/terms/[slug]/translations.ts

@@ -18,6 +18,7 @@ import {
 } from "#api/handlers/taxonomies.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery } from "#api/schemas.js";
+import { taxonomyTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
@@ -53,7 +54,7 @@ export const GET: APIRoute = async ({ params, request, locals }) => {
 	}
 };
 
-export const POST: APIRoute = async ({ params, request, locals }) => {
+export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const { name, slug } = params;
 	if (!name || !slug) return apiError("VALIDATION_ERROR", "Taxonomy name and slug required", 400);
@@ -82,6 +83,8 @@ export const POST: APIRoute = async ({ params, request, locals }) => {
 			locale: body.locale,
 			translationOf: source.data.term.id,
 		});
+		if (!result.success) return unwrapResult(result, 201);
+		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create term translation", "TERM_TRANSLATION_CREATE_ERROR");

package/src/astro/routes/api/taxonomies/[name]/terms/[slug].ts

@@ -13,6 +13,7 @@ import { apiError, handleError, requireDb, unwrapResult } from "#api/error.js";
 import { handleTermDelete, handleTermGet, handleTermUpdate } from "#api/handlers/taxonomies.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery, updateTermBody } from "#api/schemas.js";
+import { taxonomyTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
@@ -44,7 +45,7 @@ export const GET: APIRoute = async ({ params, request, locals }) => {
 /**
  * Update a term
  */
-export const PUT: APIRoute = async ({ params, request, locals }) => {
+export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const { name, slug } = params;
 	if (!name || !slug) return apiError("VALIDATION_ERROR", "Taxonomy name and slug required", 400);
@@ -63,6 +64,8 @@ export const PUT: APIRoute = async ({ params, request, locals }) => {
 		if (isParseError(body)) return body;
 
 		const result = await handleTermUpdate(emdash.db, name, slug, body, { locale: query.locale });
+		if (!result.success) return unwrapResult(result);
+		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update term", "TERM_UPDATE_ERROR");
@@ -72,7 +75,7 @@ export const PUT: APIRoute = async ({ params, request, locals }) => {
 /**
  * Delete a term
  */
-export const DELETE: APIRoute = async ({ params, request, locals }) => {
+export const DELETE: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const { name, slug } = params;
 	if (!name || !slug) return apiError("VALIDATION_ERROR", "Taxonomy name and slug required", 400);
@@ -88,6 +91,8 @@ export const DELETE: APIRoute = async ({ params, request, locals }) => {
 
 	try {
 		const result = await handleTermDelete(emdash.db, name, slug, { locale: query.locale });
+		if (!result.success) return unwrapResult(result);
+		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete term", "TERM_DELETE_ERROR");

package/src/astro/routes/api/taxonomies/[name]/terms/index.ts

@@ -12,6 +12,7 @@ import { apiError, handleError, requireDb, unwrapResult } from "#api/error.js";
 import { handleTermCreate, handleTermList } from "#api/handlers/taxonomies.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { createTermBody, termListQuery } from "#api/schemas.js";
+import { taxonomyTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
@@ -47,7 +48,7 @@ export const GET: APIRoute = async ({ params, request, locals }) => {
 /**
  * Create a new term
  */
-export const POST: APIRoute = async ({ params, request, locals }) => {
+export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const { name } = params;
 	if (!name) return apiError("VALIDATION_ERROR", "Taxonomy name required", 400);
@@ -63,6 +64,8 @@ export const POST: APIRoute = async ({ params, request, locals }) => {
 		if (isParseError(body)) return body;
 
 		const result = await handleTermCreate(emdash.db, name, body);
+		if (!result.success) return unwrapResult(result, 201);
+		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create term", "TERM_CREATE_ERROR");

package/src/astro/routes/api/taxonomies/[name].ts

@@ -20,6 +20,7 @@ import {
 } from "#api/handlers/taxonomies.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery, updateTaxonomyDefBody } from "#api/schemas.js";
+import { taxonomyTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
@@ -51,7 +52,7 @@ export const GET: APIRoute = async ({ params, request, locals }) => {
 /**
  * Update a taxonomy definition
  */
-export const PUT: APIRoute = async ({ params, request, locals }) => {
+export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const { name } = params;
 	if (!name) return apiError("VALIDATION_ERROR", "Taxonomy name required", 400);
@@ -73,6 +74,8 @@ export const PUT: APIRoute = async ({ params, request, locals }) => {
 			...body,
 			locale: query.locale,
 		});
+		if (!result.success) return unwrapResult(result);
+		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update taxonomy", "TAXONOMY_UPDATE_ERROR");
@@ -82,7 +85,7 @@ export const PUT: APIRoute = async ({ params, request, locals }) => {
 /**
  * Delete a taxonomy, its terms, and their content assignments
  */
-export const DELETE: APIRoute = async ({ params, locals }) => {
+export const DELETE: APIRoute = async ({ params, locals, cache }) => {
 	const { emdash, user } = locals;
 	const { name } = params;
 	if (!name) return apiError("VALIDATION_ERROR", "Taxonomy name required", 400);
@@ -95,6 +98,8 @@ export const DELETE: APIRoute = async ({ params, locals }) => {
 
 	try {
 		const result = await handleTaxonomyDelete(emdash.db, name);
+		if (!result.success) return unwrapResult(result);
+		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete taxonomy", "TAXONOMY_DELETE_ERROR");

package/src/astro/routes/api/taxonomies/index.ts

@@ -12,6 +12,7 @@ import { handleError, requireDb, unwrapResult } from "#api/error.js";
 import { handleTaxonomyCreate, handleTaxonomyList } from "#api/handlers/taxonomies.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { createTaxonomyDefBody, localeFilterQuery } from "#api/schemas.js";
+import { taxonomyTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
@@ -41,7 +42,7 @@ export const GET: APIRoute = async ({ request, locals }) => {
 /**
  * Create a custom taxonomy definition
  */
-export const POST: APIRoute = async ({ request, locals }) => {
+export const POST: APIRoute = async ({ request, locals, cache }) => {
 	const { emdash, user } = locals;
 
 	const dbErr = requireDb(emdash?.db);
@@ -55,6 +56,8 @@ export const POST: APIRoute = async ({ request, locals }) => {
 		if (isParseError(body)) return body;
 
 		const result = await handleTaxonomyCreate(emdash.db, body);
+		if (!result.success) return unwrapResult(result, 201);
+		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(result.data.taxonomy.name)] });
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create taxonomy", "TAXONOMY_CREATE_ERROR");

package/src/astro/routes/api/widget-areas/[name]/reorder.ts

@@ -10,10 +10,11 @@ import { requirePerm } from "#api/authorize.js";
 import { apiError, apiSuccess, handleError } from "#api/error.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { reorderWidgetsBody } from "#api/schemas.js";
+import { widgetAreaTag } from "#cache/chrome-tags.js";
 
 export const prerender = false;
 
-export const POST: APIRoute = async ({ params, request, locals }) => {
+export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const db = emdash.db;
 	const { name } = params;
@@ -61,6 +62,7 @@ export const POST: APIRoute = async ({ params, request, locals }) => {
 			),
 		);
 
+		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });
 		return apiSuccess({ success: true });
 	} catch (error) {
 		return handleError(error, "Failed to reorder widgets", "WIDGET_REORDER_ERROR");

package/src/astro/routes/api/widget-areas/[name]/widgets/[id].ts

@@ -11,12 +11,13 @@ import { requirePerm } from "#api/authorize.js";
 import { apiError, apiSuccess, handleError } from "#api/error.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { updateWidgetBody } from "#api/schemas.js";
+import { widgetAreaTag } from "#cache/chrome-tags.js";
 import { rowToWidget } from "#widgets/index.js";
 import type { WidgetRow } from "#widgets/types.js";
 
 export const prerender = false;
 
-export const PUT: APIRoute = async ({ params, request, locals }) => {
+export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const db = emdash.db;
 	const { name, id } = params;
@@ -79,13 +80,14 @@ export const PUT: APIRoute = async ({ params, request, locals }) => {
 			.where("id", "=", id)
 			.executeTakeFirstOrThrow();
 
+		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });
 		return apiSuccess(rowToWidget(widget));
 	} catch (error) {
 		return handleError(error, "Failed to update widget", "WIDGET_UPDATE_ERROR");
 	}
 };
 
-export const DELETE: APIRoute = async ({ params, locals }) => {
+export const DELETE: APIRoute = async ({ params, locals, cache }) => {
 	const { emdash, user } = locals;
 	const db = emdash.db;
 	const { name, id } = params;
@@ -123,6 +125,7 @@ export const DELETE: APIRoute = async ({ params, locals }) => {
 
 		await db.deleteFrom("_emdash_widgets").where("id", "=", id).execute();
 
+		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });
 		return apiSuccess({ deleted: true });
 	} catch (error) {
 		return handleError(error, "Failed to delete widget", "WIDGET_DELETE_ERROR");

package/src/astro/routes/api/widget-areas/[name]/widgets.ts

@@ -11,12 +11,13 @@ import { requirePerm } from "#api/authorize.js";
 import { apiError, apiSuccess, handleError } from "#api/error.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { createWidgetBody } from "#api/schemas.js";
+import { widgetAreaTag } from "#cache/chrome-tags.js";
 import { rowToWidget } from "#widgets/index.js";
 import type { WidgetRow } from "#widgets/types.js";
 
 export const prerender = false;
 
-export const POST: APIRoute = async ({ params, request, locals }) => {
+export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const db = emdash.db;
 	const { name } = params;
@@ -76,6 +77,7 @@ export const POST: APIRoute = async ({ params, request, locals }) => {
 			.where("id", "=", id)
 			.executeTakeFirstOrThrow();
 
+		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });
 		return apiSuccess(rowToWidget(widget), 201);
 	} catch (error) {
 		return handleError(error, "Failed to create widget", "WIDGET_CREATE_ERROR");