emdash 0.40.1 → 0.42.0

package/dist/astro/routes/api/menus/_name_.mjs

@@ -1,25 +1,26 @@
 import "../../../../config-CvmjJcVw.mjs";
 import "../../../../after-PcEvMY_6.mjs";
 import "../../../../base64-DvnNgP7e.mjs";
-import "../../../../object-cache-CqWNY5uP.mjs";
-import "../../../../types-BkUg2yHx.mjs";
-import { n as handleMenuDelete, r as handleMenuGet, u as handleMenuUpdate } from "../../../../menus-ITeAbcIF.mjs";
-import { t as menuTag } from "../../../../chrome-tags-DApCQSIk.mjs";
-import "../../../../errors-DgE1zJGG.mjs";
-import "../../../../settings-DYidIB26.mjs";
-import "../../../../site-settings-DOgRUoFX.mjs";
-import "../../../../errors-BF0_LFhW.mjs";
-import { a as unwrapResult, r as handleError } from "../../../../error-CfvOHP0M.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-DY6OD1j_.mjs";
-import { b as localeFilterQuery } from "../../../../redirects-Cv9apQKj.mjs";
-import "../../../../entry-lock-BJYdBfXb.mjs";
-import "../../../../media-Pu1L6xir.mjs";
-import "../../../../comments-fHZ8ON9O.mjs";
-import "../../../../relations-CK9CYUyr.mjs";
-import { d as updateMenuBody } from "../../../../menus-BM7BPLOb.mjs";
-import "../../../../status-DZKIG4a9.mjs";
+import "../../../../object-cache-Bo6DGaC9.mjs";
+import "../../../../url-Dn3IStq8.mjs";
+import "../../../../types-j6MBDjlZ.mjs";
+import { n as handleMenuDelete, r as handleMenuGet, u as handleMenuUpdate } from "../../../../menus-trvc6_fW.mjs";
+import { t as menuTag } from "../../../../chrome-tags-CKELm-bo.mjs";
+import "../../../../errors-CjXd1LgH.mjs";
+import "../../../../errors-CNvATh_7.mjs";
+import "../../../../settings-B0zQj_Tj.mjs";
+import "../../../../site-settings-AYFvhwQn.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../error-CEdm_AWU.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-Gt2l4Sld.mjs";
+import { b as localeFilterQuery } from "../../../../redirects-D4EWeXAo.mjs";
+import "../../../../entry-lock-PP1JCXBB.mjs";
+import "../../../../media-D1z_jisb.mjs";
+import "../../../../comments-BRtp992B.mjs";
+import "../../../../byline-fields-DHJs0Mja.mjs";
+import { d as updateMenuBody } from "../../../../menus-BQKqf0Up.mjs";
+import "../../../../status-D39Fpy8R.mjs";
 import "../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../authorize-seCifOMJ.mjs";
+import { i as requirePerm } from "../../../../authorize-soZXK7U0.mjs";
 
 //#region src/astro/routes/api/menus/[name].ts
 const prerender = false;

package/dist/astro/routes/api/menus/_name_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_name_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/menus/[name].ts"],"sourcesContent":["/**\n * Single menu endpoint\n *\n * GET    /_emdash/api/menus/:name[?locale=xx]\n * PUT    /_emdash/api/menus/:name[?locale=xx]\n * DELETE /_emdash/api/menus/:name[?locale=xx]\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMenuDelete, handleMenuGet, handleMenuUpdate } from \"#api/handlers/menus.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { localeFilterQuery, updateMenuBody } from \"#api/schemas.js\";\nimport { menuTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst denied = requirePerm(user, \"menus:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleMenuGet(emdash.db, name, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch menu\", \"MENU_GET_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst body = await parseBody(request, updateMenuBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleMenuUpdate(emdash.db, name, { ...body, locale: query.locale });\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update menu\", \"MENU_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleMenuDelete(emdash.db, name, { locale: query.locale });\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete menu\", \"MENU_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAiBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,cAAc,OAAO,IAAI,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC,CAClD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,iBAAiB;;;AAIrE,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC1E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM;GAAE,GAAG;GAAM,QAAQ,MAAM;GAAQ,CAAC;AACzF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;AACrE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB;;;AAIzE,MAAa,SAAmB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC7E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AAChF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;AACrE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}
+{"version":3,"file":"_name_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/menus/[name].ts"],"sourcesContent":["/**\n * Single menu endpoint\n *\n * GET    /_emdash/api/menus/:name[?locale=xx]\n * PUT    /_emdash/api/menus/:name[?locale=xx]\n * DELETE /_emdash/api/menus/:name[?locale=xx]\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMenuDelete, handleMenuGet, handleMenuUpdate } from \"#api/handlers/menus.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { localeFilterQuery, updateMenuBody } from \"#api/schemas.js\";\nimport { menuTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst denied = requirePerm(user, \"menus:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleMenuGet(emdash.db, name, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch menu\", \"MENU_GET_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst body = await parseBody(request, updateMenuBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleMenuUpdate(emdash.db, name, { ...body, locale: query.locale });\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update menu\", \"MENU_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name!;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleMenuDelete(emdash.db, name, { locale: query.locale });\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete menu\", \"MENU_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,cAAc,OAAO,IAAI,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC,CAClD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,iBAAiB;;;AAIrE,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC1E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM;GAAE,GAAG;GAAM,QAAQ,MAAM;GAAQ,CAAC;AACzF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;AACrE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB;;;AAIzE,MAAa,SAAmB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC7E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO;CAEpB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AAChF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;AACrE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}

package/dist/astro/routes/api/menus/index.mjs

@@ -1,25 +1,26 @@
 import "../../../../config-CvmjJcVw.mjs";
 import "../../../../after-PcEvMY_6.mjs";
 import "../../../../base64-DvnNgP7e.mjs";
-import "../../../../object-cache-CqWNY5uP.mjs";
-import "../../../../types-BkUg2yHx.mjs";
-import { c as handleMenuList, t as handleMenuCreate } from "../../../../menus-ITeAbcIF.mjs";
-import { t as menuTag } from "../../../../chrome-tags-DApCQSIk.mjs";
-import "../../../../errors-DgE1zJGG.mjs";
-import "../../../../settings-DYidIB26.mjs";
-import "../../../../site-settings-DOgRUoFX.mjs";
-import "../../../../errors-BF0_LFhW.mjs";
-import { a as unwrapResult, r as handleError } from "../../../../error-CfvOHP0M.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-DY6OD1j_.mjs";
-import { b as localeFilterQuery } from "../../../../redirects-Cv9apQKj.mjs";
-import "../../../../entry-lock-BJYdBfXb.mjs";
-import "../../../../media-Pu1L6xir.mjs";
-import "../../../../comments-fHZ8ON9O.mjs";
-import "../../../../relations-CK9CYUyr.mjs";
-import { t as createMenuBody } from "../../../../menus-BM7BPLOb.mjs";
-import "../../../../status-DZKIG4a9.mjs";
+import "../../../../object-cache-Bo6DGaC9.mjs";
+import "../../../../url-Dn3IStq8.mjs";
+import "../../../../types-j6MBDjlZ.mjs";
+import { c as handleMenuList, t as handleMenuCreate } from "../../../../menus-trvc6_fW.mjs";
+import { t as menuTag } from "../../../../chrome-tags-CKELm-bo.mjs";
+import "../../../../errors-CjXd1LgH.mjs";
+import "../../../../errors-CNvATh_7.mjs";
+import "../../../../settings-B0zQj_Tj.mjs";
+import "../../../../site-settings-AYFvhwQn.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../error-CEdm_AWU.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-Gt2l4Sld.mjs";
+import { b as localeFilterQuery } from "../../../../redirects-D4EWeXAo.mjs";
+import "../../../../entry-lock-PP1JCXBB.mjs";
+import "../../../../media-D1z_jisb.mjs";
+import "../../../../comments-BRtp992B.mjs";
+import "../../../../byline-fields-DHJs0Mja.mjs";
+import { t as createMenuBody } from "../../../../menus-BQKqf0Up.mjs";
+import "../../../../status-D39Fpy8R.mjs";
 import "../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../authorize-seCifOMJ.mjs";
+import { i as requirePerm } from "../../../../authorize-soZXK7U0.mjs";
 
 //#region src/astro/routes/api/menus/index.ts
 const prerender = false;

package/dist/astro/routes/api/menus/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/menus/index.ts"],"sourcesContent":["/**\n * Menus list and create endpoints\n *\n * GET  /_emdash/api/menus[?locale=xx] - List menus (optionally filtered by locale)\n * POST /_emdash/api/menus              - Create menu (body may include locale & translationOf)\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMenuCreate, handleMenuList } from \"#api/handlers/menus.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createMenuBody, localeFilterQuery } from \"#api/schemas.js\";\nimport { menuTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"menus:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleMenuList(emdash.db, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch menus\", \"MENU_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createMenuBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleMenuCreate(emdash.db, body);\n\t\tif (!result.success) return unwrapResult(result, 201);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [menuTag(result.data.name)] });\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create menu\", \"MENU_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,SAAS,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,eAAe,OAAO,IAAI,EAAE,QAAQ,MAAM,QAAQ,CAAC,CAC7C;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,kBAAkB;;;AAIvE,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,YAAY;CACnE,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,KAAK;AACtD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,QAAQ,IAAI;AACrD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,QAAQ,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC;AACjF,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/menus/index.ts"],"sourcesContent":["/**\n * Menus list and create endpoints\n *\n * GET  /_emdash/api/menus[?locale=xx] - List menus (optionally filtered by locale)\n * POST /_emdash/api/menus              - Create menu (body may include locale & translationOf)\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMenuCreate, handleMenuList } from \"#api/handlers/menus.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createMenuBody, localeFilterQuery } from \"#api/schemas.js\";\nimport { menuTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"menus:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleMenuList(emdash.db, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch menus\", \"MENU_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"menus:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createMenuBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleMenuCreate(emdash.db, body);\n\t\tif (!result.success) return unwrapResult(result, 201);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [menuTag(result.data.name)] });\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create menu\", \"MENU_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,SAAS,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,eAAe,OAAO,IAAI,EAAE,QAAQ,MAAM,QAAQ,CAAC,CAC7C;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,kBAAkB;;;AAIvE,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,YAAY;CACnE,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,KAAK;AACtD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,QAAQ,IAAI;AACrD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,QAAQ,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC;AACjF,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}

package/dist/astro/routes/api/oauth/authorize.mjs

@@ -1,9 +1,9 @@
-import { r as getPublicOrigin } from "../../../../public-url-Bn7U0D7-.mjs";
-import { t as escapeHtml } from "../../../../escape-CuaZhZvL.mjs";
-import { s as isValidScope } from "../../../../api-tokens-CE1ECIg0.mjs";
-import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "../../../../oauth-clients-Djq9r_KP.mjs";
-import "../../../../oauth-user-lookup-vue9a64A.mjs";
-import { n as handleAuthorizationApproval, t as buildDeniedRedirect } from "../../../../oauth-authorization-DlMIL5_h.mjs";
+import { r as getPublicOrigin } from "../../../../public-url-B5a0QAh6.mjs";
+import { t as escapeHtml } from "../../../../escape-nJW7dR0s.mjs";
+import { s as isValidScope } from "../../../../api-tokens-BLz2MtQs.mjs";
+import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "../../../../oauth-clients-C-8WDTqj.mjs";
+import "../../../../oauth-user-lookup-DrrqvTZC.mjs";
+import { n as handleAuthorizationApproval, t as buildDeniedRedirect } from "../../../../oauth-authorization-BcRdGojQ.mjs";
 
 //#region src/astro/routes/api/oauth/authorize.ts
 const prerender = false;

package/dist/astro/routes/api/oauth/device/authorize.d.mts

@@ -2,7 +2,8 @@ import { APIRoute } from "astro";
 
 //#region src/astro/routes/api/oauth/device/authorize.d.ts
 declare const prerender = false;
+declare const GET: APIRoute;
 declare const POST: APIRoute;
 //#endregion
-export { POST, prerender };
+export { GET, POST, prerender };
 //# sourceMappingURL=authorize.d.mts.map

package/dist/astro/routes/api/oauth/device/authorize.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/oauth/device/authorize.ts"],"mappings":";;;cAgBa,SAAA;AAAA,cAOA,IAAA,EAAM,QAAA"}
+{"version":3,"file":"authorize.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/oauth/device/authorize.ts"],"mappings":";;;cAkBa,SAAA;AAAA,cAWA,GAAA,EAAK,QAAA;AAAA,cAuBL,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/oauth/device/authorize.mjs

@@ -1,20 +1,34 @@
 import "../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../types-BkUg2yHx.mjs";
-import "../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../errors-BF0_LFhW.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-DY6OD1j_.mjs";
-import "../../../../../api-tokens-CE1ECIg0.mjs";
-import "../../../../../oauth-user-lookup-vue9a64A.mjs";
-import { t as handleDeviceAuthorize } from "../../../../../device-flow-CRd6DXmW.mjs";
+import "../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../errors-CNvATh_7.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-CEdm_AWU.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-Gt2l4Sld.mjs";
+import "../../../../../api-tokens-BLz2MtQs.mjs";
+import "../../../../../oauth-user-lookup-DrrqvTZC.mjs";
+import { n as handleDeviceCodeLookup, t as handleDeviceAuthorize } from "../../../../../device-flow-CzKi6tID.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/oauth/device/authorize.ts
 const prerender = false;
+const lookupSchema = z.object({ user_code: z.string().min(1) });
 const authorizeSchema = z.object({
 	user_code: z.string().min(1),
 	action: z.enum(["approve", "deny"]).optional()
 });
+const GET = async ({ url, locals }) => {
+	const { emdash } = locals;
+	const { user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!user) return apiError("NOT_AUTHENTICATED", "Authentication required", 401);
+	try {
+		const query = parseQuery(url, lookupSchema);
+		if (isParseError(query)) return query;
+		return unwrapResult(await handleDeviceCodeLookup(emdash.db, user.role, query));
+	} catch (error) {
+		return handleError(error, "Failed to look up device code", "DEVICE_CODE_LOOKUP_ERROR");
+	}
+};
 const POST = async ({ request, locals }) => {
 	const { emdash } = locals;
 	const { user } = locals;
@@ -30,5 +44,5 @@ const POST = async ({ request, locals }) => {
 };
 
 //#endregion
-export { POST, prerender };
+export { GET, POST, prerender };
 //# sourceMappingURL=authorize.mjs.map

package/dist/astro/routes/api/oauth/device/authorize.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/oauth/device/authorize.ts"],"sourcesContent":["/**\n * POST /_emdash/api/oauth/device/authorize\n *\n * User submits the user code after logging in via the browser.\n * This endpoint requires authentication (the user must be logged in).\n */\n\n/// <reference types=\"emdash/locals\" />\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleDeviceAuthorize } from \"#api/handlers/device-flow.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\n\nexport const prerender = false;\n\nconst authorizeSchema = z.object({\n\tuser_code: z.string().min(1),\n\taction: z.enum([\"approve\", \"deny\"]).optional(),\n});\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\tconst { user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user) {\n\t\treturn apiError(\"NOT_AUTHENTICATED\", \"Authentication required\", 401);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, authorizeSchema);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleDeviceAuthorize(emdash.db, user.id, user.role, body);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to authorize device\", \"AUTHORIZE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAM,kBAAkB,EAAE,OAAO;CAChC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC5B,QAAQ,EAAE,KAAK,CAAC,WAAW,OAAO,CAAC,CAAC,UAAU;CAC9C,CAAC;AAEF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;CACnB,MAAM,EAAE,SAAS;AAEjB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,KACJ,QAAO,SAAS,qBAAqB,2BAA2B,IAAI;AAGrE,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,sBAAsB,OAAO,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,CACpD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,8BAA8B,kBAAkB"}
+{"version":3,"file":"authorize.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/oauth/device/authorize.ts"],"sourcesContent":["/**\n * GET  /_emdash/api/oauth/device/authorize?user_code=XXXX-XXXX\n * POST /_emdash/api/oauth/device/authorize\n *\n * GET returns the scopes a pending user code requested, for display before\n * approval. POST approves or denies the code after the user logs in via the\n * browser. Both require authentication (the user must be logged in).\n */\n\n/// <reference types=\"emdash/locals\" />\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleDeviceAuthorize, handleDeviceCodeLookup } from \"#api/handlers/device-flow.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\n\nexport const prerender = false;\n\nconst lookupSchema = z.object({\n\tuser_code: z.string().min(1),\n});\n\nconst authorizeSchema = z.object({\n\tuser_code: z.string().min(1),\n\taction: z.enum([\"approve\", \"deny\"]).optional(),\n});\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash } = locals;\n\tconst { user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user) {\n\t\treturn apiError(\"NOT_AUTHENTICATED\", \"Authentication required\", 401);\n\t}\n\n\ttry {\n\t\tconst query = parseQuery(url, lookupSchema);\n\t\tif (isParseError(query)) return query;\n\n\t\tconst result = await handleDeviceCodeLookup(emdash.db, user.role, query);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to look up device code\", \"DEVICE_CODE_LOOKUP_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\tconst { user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user) {\n\t\treturn apiError(\"NOT_AUTHENTICATED\", \"Authentication required\", 401);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, authorizeSchema);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleDeviceAuthorize(emdash.db, user.id, user.role, body);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to authorize device\", \"AUTHORIZE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;AAkBA,MAAa,YAAY;AAEzB,MAAM,eAAe,EAAE,OAAO,EAC7B,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,EAC5B,CAAC;AAEF,MAAM,kBAAkB,EAAE,OAAO;CAChC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC5B,QAAQ,EAAE,KAAK,CAAC,WAAW,OAAO,CAAC,CAAC,UAAU;CAC9C,CAAC;AAEF,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,WAAW;CACnB,MAAM,EAAE,SAAS;AAEjB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,KACJ,QAAO,SAAS,qBAAqB,2BAA2B,IAAI;AAGrE,KAAI;EACH,MAAM,QAAQ,WAAW,KAAK,aAAa;AAC3C,MAAI,aAAa,MAAM,CAAE,QAAO;AAGhC,SAAO,aADQ,MAAM,uBAAuB,OAAO,IAAI,KAAK,MAAM,MAAM,CAC7C;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,iCAAiC,2BAA2B;;;AAIxF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;CACnB,MAAM,EAAE,SAAS;AAEjB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,KACJ,QAAO,SAAS,qBAAqB,2BAA2B,IAAI;AAGrE,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,sBAAsB,OAAO,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,CACpD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,8BAA8B,kBAAkB"}

package/dist/astro/routes/api/oauth/device/code.mjs

@@ -1,15 +1,15 @@
 import "../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../types-BkUg2yHx.mjs";
-import "../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../errors-BF0_LFhW.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-DY6OD1j_.mjs";
-import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-tKiVtyTD.mjs";
-import { r as getPublicOrigin } from "../../../../../public-url-Bn7U0D7-.mjs";
-import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-BZ6nybgc.mjs";
-import "../../../../../api-tokens-CE1ECIg0.mjs";
-import "../../../../../oauth-user-lookup-vue9a64A.mjs";
-import { n as handleDeviceCodeRequest } from "../../../../../device-flow-CRd6DXmW.mjs";
+import "../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../errors-CNvATh_7.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-CEdm_AWU.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-Gt2l4Sld.mjs";
+import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-BqfQFs6a.mjs";
+import { r as getPublicOrigin } from "../../../../../public-url-B5a0QAh6.mjs";
+import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-BXx3Ecp9.mjs";
+import "../../../../../api-tokens-BLz2MtQs.mjs";
+import "../../../../../oauth-user-lookup-DrrqvTZC.mjs";
+import { r as handleDeviceCodeRequest } from "../../../../../device-flow-CzKi6tID.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/oauth/device/code.ts

package/dist/astro/routes/api/oauth/device/token.mjs

@@ -1,14 +1,14 @@
 import "../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../types-BkUg2yHx.mjs";
-import "../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../errors-BF0_LFhW.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-DY6OD1j_.mjs";
-import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-tKiVtyTD.mjs";
-import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-BZ6nybgc.mjs";
-import "../../../../../api-tokens-CE1ECIg0.mjs";
-import "../../../../../oauth-user-lookup-vue9a64A.mjs";
-import { r as handleDeviceTokenExchange } from "../../../../../device-flow-CRd6DXmW.mjs";
+import "../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../errors-CNvATh_7.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-CEdm_AWU.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-Gt2l4Sld.mjs";
+import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-BqfQFs6a.mjs";
+import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-BXx3Ecp9.mjs";
+import "../../../../../api-tokens-BLz2MtQs.mjs";
+import "../../../../../oauth-user-lookup-DrrqvTZC.mjs";
+import { i as handleDeviceTokenExchange } from "../../../../../device-flow-CzKi6tID.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/oauth/device/token.ts

package/dist/astro/routes/api/oauth/register.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"register.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/oauth/register.ts"],"mappings":";;;cAaa,SAAA;AAAA,cAwEA,OAAA,EAAS,QAAA;AAAA,cAIT,IAAA,EAAM,QAAA"}
+{"version":3,"file":"register.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/oauth/register.ts"],"mappings":";;;cAiBa,SAAA;AAAA,cA4EA,OAAA,EAAS,QAAA;AAAA,cAIT,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/oauth/register.mjs

@@ -1,9 +1,11 @@
 import "../../../../base64-DvnNgP7e.mjs";
-import "../../../../types-BkUg2yHx.mjs";
-import "../../../../errors-DgE1zJGG.mjs";
-import "../../../../errors-BF0_LFhW.mjs";
-import { r as handleError, t as apiError } from "../../../../error-CfvOHP0M.mjs";
-import { t as handleOAuthClientCreate } from "../../../../oauth-clients-Djq9r_KP.mjs";
+import "../../../../types-j6MBDjlZ.mjs";
+import "../../../../errors-CjXd1LgH.mjs";
+import "../../../../errors-CNvATh_7.mjs";
+import { r as handleError, t as apiError } from "../../../../error-CEdm_AWU.mjs";
+import { t as getTrustedProxyHeaders } from "../../../../trusted-proxy-BqfQFs6a.mjs";
+import { n as getClientIp, t as checkRateLimit } from "../../../../rate-limit-BXx3Ecp9.mjs";
+import { t as handleOAuthClientCreate } from "../../../../oauth-clients-C-8WDTqj.mjs";
 
 //#region src/astro/routes/api/oauth/register.ts
 const prerender = false;
@@ -24,9 +26,9 @@ const SUPPORTED_GRANT_TYPES = new Set([
 	"urn:ietf:params:oauth:grant-type:device_code"
 ]);
 const SUPPORTED_RESPONSE_TYPES = new Set(["code"]);
-function registrationError(description, status = 400) {
+function registrationError(description, status = 400, error = "invalid_client_metadata") {
 	return Response.json({
-		error: "invalid_client_metadata",
+		error,
 		error_description: description
 	}, {
 		status,
@@ -83,6 +85,12 @@ const POST = async ({ request, locals }) => {
 		if (responseTypes instanceof Response) return responseTypes;
 		const scopes = parseScope(body.scope);
 		if (scopes instanceof Response) return scopes;
+		const ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));
+		if (!(await checkRateLimit(emdash.db, ip, "oauth/register", 10, 60)).allowed) {
+			const response = registrationError("Too many registration requests. Please try again later.", 429, "temporarily_unavailable");
+			response.headers.set("Retry-After", "60");
+			return response;
+		}
 		const clientId = crypto.randomUUID();
 		const clientName = typeof body.client_name === "string" && body.client_name ? body.client_name : `dynamic-${clientId.slice(0, 8)}`;
 		const result = await handleOAuthClientCreate(emdash.db, {

package/dist/astro/routes/api/oauth/register.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"register.mjs","names":[],"sources":["../../../../../src/astro/routes/api/oauth/register.ts"],"sourcesContent":["/**\n * POST /_emdash/api/oauth/register\n *\n * RFC 7591 Dynamic Client Registration. Public, unauthenticated.\n * MCP clients (e.g. Claude Code) call this to register themselves\n * before starting the OAuth authorization flow.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, handleError } from \"#api/error.js\";\nimport { handleOAuthClientCreate } from \"#api/handlers/oauth-clients.js\";\n\nexport const prerender = false;\n\nconst OAUTH_REGISTRATION_HEADERS: HeadersInit = {\n\t\"Cache-Control\": \"no-store\",\n\tPragma: \"no-cache\",\n\t// RFC 7591 dynamic client registration is called cross-origin by MCP clients,\n\t// CLIs, and native apps. The endpoint is anonymous and carries no ambient\n\t// credentials, so CORS `*` is safe.\n\t\"Access-Control-Allow-Origin\": \"*\",\n};\n\nconst OAUTH_PREFLIGHT_HEADERS: HeadersInit = {\n\t\"Access-Control-Allow-Origin\": \"*\",\n\t\"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n\t\"Access-Control-Allow-Headers\": \"Content-Type\",\n\t\"Access-Control-Max-Age\": \"86400\",\n};\n\nconst SUPPORTED_GRANT_TYPES = new Set([\n\t\"authorization_code\",\n\t\"refresh_token\",\n\t\"urn:ietf:params:oauth:grant-type:device_code\",\n]);\nconst SUPPORTED_RESPONSE_TYPES = new Set([\"code\"]);\n\nfunction registrationError(description: string, status = 400): Response {\n\treturn Response.json(\n\t\t{\n\t\t\terror: \"invalid_client_metadata\",\n\t\t\terror_description: description,\n\t\t},\n\t\t{ status, headers: OAUTH_REGISTRATION_HEADERS },\n\t);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n\treturn Array.isArray(value) && value.every((item) => typeof item === \"string\");\n}\n\nfunction parseScope(value: unknown): string[] | Response | undefined {\n\tif (value === undefined) return undefined;\n\tif (typeof value === \"string\") {\n\t\tconst scopes = value.split(\" \").filter(Boolean);\n\t\treturn scopes.length > 0 ? scopes : undefined;\n\t}\n\tif (isStringArray(value)) {\n\t\tconst scopes = value.filter(Boolean);\n\t\treturn scopes.length > 0 ? scopes : undefined;\n\t}\n\treturn registrationError(\"scope must be a string or array of strings\");\n}\n\nfunction parseSupportedStringArray(\n\tvalue: unknown,\n\tfield: string,\n\tsupported: ReadonlySet<string>,\n): string[] | Response | undefined {\n\tif (value === undefined) return undefined;\n\tif (!isStringArray(value)) {\n\t\treturn registrationError(`${field} must be an array of strings`);\n\t}\n\tconst invalidValue = value.find((item) => !supported.has(item));\n\tif (invalidValue) {\n\t\treturn registrationError(`${field} contains unsupported value: ${invalidValue}`);\n\t}\n\treturn value;\n}\n\nexport const OPTIONS: APIRoute = () => {\n\treturn new Response(null, { status: 204, headers: OAUTH_PREFLIGHT_HEADERS });\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tlet body: unknown;\n\t\ttry {\n\t\t\tbody = await request.json();\n\t\t} catch {\n\t\t\treturn registrationError(\"Request body must be valid JSON\");\n\t\t}\n\n\t\tif (!isRecord(body)) {\n\t\t\treturn registrationError(\"Request body must be a JSON object\");\n\t\t}\n\n\t\t// redirect_uris is the only required field per RFC 7591 §2\n\t\tif (!isStringArray(body.redirect_uris) || body.redirect_uris.length === 0) {\n\t\t\treturn registrationError(\"redirect_uris must be a non-empty array of strings\");\n\t\t}\n\n\t\tif (\n\t\t\tbody.token_endpoint_auth_method !== undefined &&\n\t\t\tbody.token_endpoint_auth_method !== \"none\"\n\t\t) {\n\t\t\treturn registrationError(\"Only token_endpoint_auth_method=none is supported\");\n\t\t}\n\n\t\tconst grantTypes = parseSupportedStringArray(\n\t\t\tbody.grant_types,\n\t\t\t\"grant_types\",\n\t\t\tSUPPORTED_GRANT_TYPES,\n\t\t);\n\t\tif (grantTypes instanceof Response) {\n\t\t\treturn grantTypes;\n\t\t}\n\n\t\tconst responseTypes = parseSupportedStringArray(\n\t\t\tbody.response_types,\n\t\t\t\"response_types\",\n\t\t\tSUPPORTED_RESPONSE_TYPES,\n\t\t);\n\t\tif (responseTypes instanceof Response) {\n\t\t\treturn responseTypes;\n\t\t}\n\n\t\tconst scopes = parseScope(body.scope);\n\t\tif (scopes instanceof Response) {\n\t\t\treturn scopes;\n\t\t}\n\n\t\tconst clientId = crypto.randomUUID();\n\t\tconst clientName =\n\t\t\ttypeof body.client_name === \"string\" && body.client_name\n\t\t\t\t? body.client_name\n\t\t\t\t: `dynamic-${clientId.slice(0, 8)}`;\n\n\t\tconst result = await handleOAuthClientCreate(emdash.db, {\n\t\t\tid: clientId,\n\t\t\tname: clientName,\n\t\t\tredirectUris: body.redirect_uris,\n\t\t\tscopes,\n\t\t});\n\n\t\tif (!result.success) {\n\t\t\treturn registrationError(result.error.message);\n\t\t}\n\n\t\t// RFC 7591 §3.2.1 response\n\t\treturn Response.json(\n\t\t\t{\n\t\t\t\tclient_id: result.data.id,\n\t\t\t\tclient_id_issued_at: Math.floor(new Date(result.data.createdAt).getTime() / 1000),\n\t\t\t\tredirect_uris: result.data.redirectUris,\n\t\t\t\tclient_name: result.data.name,\n\t\t\t\tgrant_types: grantTypes ?? [\"authorization_code\", \"refresh_token\"],\n\t\t\t\tresponse_types: responseTypes ?? [\"code\"],\n\t\t\t\ttoken_endpoint_auth_method: \"none\",\n\t\t\t\tscope: result.data.scopes ? result.data.scopes.join(\" \") : undefined,\n\t\t\t},\n\t\t\t{ status: 201, headers: OAUTH_REGISTRATION_HEADERS },\n\t\t);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to register OAuth client\", \"CLIENT_REGISTER_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;AAaA,MAAa,YAAY;AAEzB,MAAM,6BAA0C;CAC/C,iBAAiB;CACjB,QAAQ;CAIR,+BAA+B;CAC/B;AAED,MAAM,0BAAuC;CAC5C,+BAA+B;CAC/B,gCAAgC;CAChC,gCAAgC;CAChC,0BAA0B;CAC1B;AAED,MAAM,wBAAwB,IAAI,IAAI;CACrC;CACA;CACA;CACA,CAAC;AACF,MAAM,2BAA2B,IAAI,IAAI,CAAC,OAAO,CAAC;AAElD,SAAS,kBAAkB,aAAqB,SAAS,KAAe;AACvE,QAAO,SAAS,KACf;EACC,OAAO;EACP,mBAAmB;EACnB,EACD;EAAE;EAAQ,SAAS;EAA4B,CAC/C;;AAGF,SAAS,SAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG5E,SAAS,cAAc,OAAmC;AACzD,QAAO,MAAM,QAAQ,MAAM,IAAI,MAAM,OAAO,SAAS,OAAO,SAAS,SAAS;;AAG/E,SAAS,WAAW,OAAiD;AACpE,KAAI,UAAU,OAAW,QAAO;AAChC,KAAI,OAAO,UAAU,UAAU;EAC9B,MAAM,SAAS,MAAM,MAAM,IAAI,CAAC,OAAO,QAAQ;AAC/C,SAAO,OAAO,SAAS,IAAI,SAAS;;AAErC,KAAI,cAAc,MAAM,EAAE;EACzB,MAAM,SAAS,MAAM,OAAO,QAAQ;AACpC,SAAO,OAAO,SAAS,IAAI,SAAS;;AAErC,QAAO,kBAAkB,6CAA6C;;AAGvE,SAAS,0BACR,OACA,OACA,WACkC;AAClC,KAAI,UAAU,OAAW,QAAO;AAChC,KAAI,CAAC,cAAc,MAAM,CACxB,QAAO,kBAAkB,GAAG,MAAM,8BAA8B;CAEjE,MAAM,eAAe,MAAM,MAAM,SAAS,CAAC,UAAU,IAAI,KAAK,CAAC;AAC/D,KAAI,aACH,QAAO,kBAAkB,GAAG,MAAM,+BAA+B,eAAe;AAEjF,QAAO;;AAGR,MAAa,gBAA0B;AACtC,QAAO,IAAI,SAAS,MAAM;EAAE,QAAQ;EAAK,SAAS;EAAyB,CAAC;;AAG7E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,IAAI;AACJ,MAAI;AACH,UAAO,MAAM,QAAQ,MAAM;UACpB;AACP,UAAO,kBAAkB,kCAAkC;;AAG5D,MAAI,CAAC,SAAS,KAAK,CAClB,QAAO,kBAAkB,qCAAqC;AAI/D,MAAI,CAAC,cAAc,KAAK,cAAc,IAAI,KAAK,cAAc,WAAW,EACvE,QAAO,kBAAkB,qDAAqD;AAG/E,MACC,KAAK,+BAA+B,UACpC,KAAK,+BAA+B,OAEpC,QAAO,kBAAkB,oDAAoD;EAG9E,MAAM,aAAa,0BAClB,KAAK,aACL,eACA,sBACA;AACD,MAAI,sBAAsB,SACzB,QAAO;EAGR,MAAM,gBAAgB,0BACrB,KAAK,gBACL,kBACA,yBACA;AACD,MAAI,yBAAyB,SAC5B,QAAO;EAGR,MAAM,SAAS,WAAW,KAAK,MAAM;AACrC,MAAI,kBAAkB,SACrB,QAAO;EAGR,MAAM,WAAW,OAAO,YAAY;EACpC,MAAM,aACL,OAAO,KAAK,gBAAgB,YAAY,KAAK,cAC1C,KAAK,cACL,WAAW,SAAS,MAAM,GAAG,EAAE;EAEnC,MAAM,SAAS,MAAM,wBAAwB,OAAO,IAAI;GACvD,IAAI;GACJ,MAAM;GACN,cAAc,KAAK;GACnB;GACA,CAAC;AAEF,MAAI,CAAC,OAAO,QACX,QAAO,kBAAkB,OAAO,MAAM,QAAQ;AAI/C,SAAO,SAAS,KACf;GACC,WAAW,OAAO,KAAK;GACvB,qBAAqB,KAAK,MAAM,IAAI,KAAK,OAAO,KAAK,UAAU,CAAC,SAAS,GAAG,IAAK;GACjF,eAAe,OAAO,KAAK;GAC3B,aAAa,OAAO,KAAK;GACzB,aAAa,cAAc,CAAC,sBAAsB,gBAAgB;GAClE,gBAAgB,iBAAiB,CAAC,OAAO;GACzC,4BAA4B;GAC5B,OAAO,OAAO,KAAK,SAAS,OAAO,KAAK,OAAO,KAAK,IAAI,GAAG;GAC3D,EACD;GAAE,QAAQ;GAAK,SAAS;GAA4B,CACpD;UACO,OAAO;AACf,SAAO,YAAY,OAAO,mCAAmC,wBAAwB"}
+{"version":3,"file":"register.mjs","names":[],"sources":["../../../../../src/astro/routes/api/oauth/register.ts"],"sourcesContent":["/**\n * POST /_emdash/api/oauth/register\n *\n * RFC 7591 Dynamic Client Registration. Public, unauthenticated.\n * MCP clients (e.g. Claude Code) call this to register themselves\n * before starting the OAuth authorization flow.\n *\n * Rate limited: 10 registrations per minute per IP.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, handleError } from \"#api/error.js\";\nimport { handleOAuthClientCreate } from \"#api/handlers/oauth-clients.js\";\nimport { checkRateLimit, getClientIp } from \"#auth/rate-limit.js\";\nimport { getTrustedProxyHeaders } from \"#auth/trusted-proxy.js\";\n\nexport const prerender = false;\n\nconst OAUTH_REGISTRATION_HEADERS: HeadersInit = {\n\t\"Cache-Control\": \"no-store\",\n\tPragma: \"no-cache\",\n\t// RFC 7591 dynamic client registration is called cross-origin by MCP clients,\n\t// CLIs, and native apps. The endpoint is anonymous and carries no ambient\n\t// credentials, so CORS `*` is safe.\n\t\"Access-Control-Allow-Origin\": \"*\",\n};\n\nconst OAUTH_PREFLIGHT_HEADERS: HeadersInit = {\n\t\"Access-Control-Allow-Origin\": \"*\",\n\t\"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n\t\"Access-Control-Allow-Headers\": \"Content-Type\",\n\t\"Access-Control-Max-Age\": \"86400\",\n};\n\nconst SUPPORTED_GRANT_TYPES = new Set([\n\t\"authorization_code\",\n\t\"refresh_token\",\n\t\"urn:ietf:params:oauth:grant-type:device_code\",\n]);\nconst SUPPORTED_RESPONSE_TYPES = new Set([\"code\"]);\n\nfunction registrationError(\n\tdescription: string,\n\tstatus = 400,\n\terror = \"invalid_client_metadata\",\n): Response {\n\treturn Response.json(\n\t\t{\n\t\t\terror,\n\t\t\terror_description: description,\n\t\t},\n\t\t{ status, headers: OAUTH_REGISTRATION_HEADERS },\n\t);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n\treturn Array.isArray(value) && value.every((item) => typeof item === \"string\");\n}\n\nfunction parseScope(value: unknown): string[] | Response | undefined {\n\tif (value === undefined) return undefined;\n\tif (typeof value === \"string\") {\n\t\tconst scopes = value.split(\" \").filter(Boolean);\n\t\treturn scopes.length > 0 ? scopes : undefined;\n\t}\n\tif (isStringArray(value)) {\n\t\tconst scopes = value.filter(Boolean);\n\t\treturn scopes.length > 0 ? scopes : undefined;\n\t}\n\treturn registrationError(\"scope must be a string or array of strings\");\n}\n\nfunction parseSupportedStringArray(\n\tvalue: unknown,\n\tfield: string,\n\tsupported: ReadonlySet<string>,\n): string[] | Response | undefined {\n\tif (value === undefined) return undefined;\n\tif (!isStringArray(value)) {\n\t\treturn registrationError(`${field} must be an array of strings`);\n\t}\n\tconst invalidValue = value.find((item) => !supported.has(item));\n\tif (invalidValue) {\n\t\treturn registrationError(`${field} contains unsupported value: ${invalidValue}`);\n\t}\n\treturn value;\n}\n\nexport const OPTIONS: APIRoute = () => {\n\treturn new Response(null, { status: 204, headers: OAUTH_PREFLIGHT_HEADERS });\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tlet body: unknown;\n\t\ttry {\n\t\t\tbody = await request.json();\n\t\t} catch {\n\t\t\treturn registrationError(\"Request body must be valid JSON\");\n\t\t}\n\n\t\tif (!isRecord(body)) {\n\t\t\treturn registrationError(\"Request body must be a JSON object\");\n\t\t}\n\n\t\t// redirect_uris is the only required field per RFC 7591 §2\n\t\tif (!isStringArray(body.redirect_uris) || body.redirect_uris.length === 0) {\n\t\t\treturn registrationError(\"redirect_uris must be a non-empty array of strings\");\n\t\t}\n\n\t\tif (\n\t\t\tbody.token_endpoint_auth_method !== undefined &&\n\t\t\tbody.token_endpoint_auth_method !== \"none\"\n\t\t) {\n\t\t\treturn registrationError(\"Only token_endpoint_auth_method=none is supported\");\n\t\t}\n\n\t\tconst grantTypes = parseSupportedStringArray(\n\t\t\tbody.grant_types,\n\t\t\t\"grant_types\",\n\t\t\tSUPPORTED_GRANT_TYPES,\n\t\t);\n\t\tif (grantTypes instanceof Response) {\n\t\t\treturn grantTypes;\n\t\t}\n\n\t\tconst responseTypes = parseSupportedStringArray(\n\t\t\tbody.response_types,\n\t\t\t\"response_types\",\n\t\t\tSUPPORTED_RESPONSE_TYPES,\n\t\t);\n\t\tif (responseTypes instanceof Response) {\n\t\t\treturn responseTypes;\n\t\t}\n\n\t\tconst scopes = parseScope(body.scope);\n\t\tif (scopes instanceof Response) {\n\t\t\treturn scopes;\n\t\t}\n\n\t\tconst ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));\n\t\tconst rateLimit = await checkRateLimit(emdash.db, ip, \"oauth/register\", 10, 60);\n\t\tif (!rateLimit.allowed) {\n\t\t\tconst response = registrationError(\n\t\t\t\t\"Too many registration requests. Please try again later.\",\n\t\t\t\t429,\n\t\t\t\t\"temporarily_unavailable\",\n\t\t\t);\n\t\t\tresponse.headers.set(\"Retry-After\", \"60\");\n\t\t\treturn response;\n\t\t}\n\n\t\tconst clientId = crypto.randomUUID();\n\t\tconst clientName =\n\t\t\ttypeof body.client_name === \"string\" && body.client_name\n\t\t\t\t? body.client_name\n\t\t\t\t: `dynamic-${clientId.slice(0, 8)}`;\n\n\t\tconst result = await handleOAuthClientCreate(emdash.db, {\n\t\t\tid: clientId,\n\t\t\tname: clientName,\n\t\t\tredirectUris: body.redirect_uris,\n\t\t\tscopes,\n\t\t});\n\n\t\tif (!result.success) {\n\t\t\treturn registrationError(result.error.message);\n\t\t}\n\n\t\t// RFC 7591 §3.2.1 response\n\t\treturn Response.json(\n\t\t\t{\n\t\t\t\tclient_id: result.data.id,\n\t\t\t\tclient_id_issued_at: Math.floor(new Date(result.data.createdAt).getTime() / 1000),\n\t\t\t\tredirect_uris: result.data.redirectUris,\n\t\t\t\tclient_name: result.data.name,\n\t\t\t\tgrant_types: grantTypes ?? [\"authorization_code\", \"refresh_token\"],\n\t\t\t\tresponse_types: responseTypes ?? [\"code\"],\n\t\t\t\ttoken_endpoint_auth_method: \"none\",\n\t\t\t\tscope: result.data.scopes ? result.data.scopes.join(\" \") : undefined,\n\t\t\t},\n\t\t\t{ status: 201, headers: OAUTH_REGISTRATION_HEADERS },\n\t\t);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to register OAuth client\", \"CLIENT_REGISTER_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;AAiBA,MAAa,YAAY;AAEzB,MAAM,6BAA0C;CAC/C,iBAAiB;CACjB,QAAQ;CAIR,+BAA+B;CAC/B;AAED,MAAM,0BAAuC;CAC5C,+BAA+B;CAC/B,gCAAgC;CAChC,gCAAgC;CAChC,0BAA0B;CAC1B;AAED,MAAM,wBAAwB,IAAI,IAAI;CACrC;CACA;CACA;CACA,CAAC;AACF,MAAM,2BAA2B,IAAI,IAAI,CAAC,OAAO,CAAC;AAElD,SAAS,kBACR,aACA,SAAS,KACT,QAAQ,2BACG;AACX,QAAO,SAAS,KACf;EACC;EACA,mBAAmB;EACnB,EACD;EAAE;EAAQ,SAAS;EAA4B,CAC/C;;AAGF,SAAS,SAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG5E,SAAS,cAAc,OAAmC;AACzD,QAAO,MAAM,QAAQ,MAAM,IAAI,MAAM,OAAO,SAAS,OAAO,SAAS,SAAS;;AAG/E,SAAS,WAAW,OAAiD;AACpE,KAAI,UAAU,OAAW,QAAO;AAChC,KAAI,OAAO,UAAU,UAAU;EAC9B,MAAM,SAAS,MAAM,MAAM,IAAI,CAAC,OAAO,QAAQ;AAC/C,SAAO,OAAO,SAAS,IAAI,SAAS;;AAErC,KAAI,cAAc,MAAM,EAAE;EACzB,MAAM,SAAS,MAAM,OAAO,QAAQ;AACpC,SAAO,OAAO,SAAS,IAAI,SAAS;;AAErC,QAAO,kBAAkB,6CAA6C;;AAGvE,SAAS,0BACR,OACA,OACA,WACkC;AAClC,KAAI,UAAU,OAAW,QAAO;AAChC,KAAI,CAAC,cAAc,MAAM,CACxB,QAAO,kBAAkB,GAAG,MAAM,8BAA8B;CAEjE,MAAM,eAAe,MAAM,MAAM,SAAS,CAAC,UAAU,IAAI,KAAK,CAAC;AAC/D,KAAI,aACH,QAAO,kBAAkB,GAAG,MAAM,+BAA+B,eAAe;AAEjF,QAAO;;AAGR,MAAa,gBAA0B;AACtC,QAAO,IAAI,SAAS,MAAM;EAAE,QAAQ;EAAK,SAAS;EAAyB,CAAC;;AAG7E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,IAAI;AACJ,MAAI;AACH,UAAO,MAAM,QAAQ,MAAM;UACpB;AACP,UAAO,kBAAkB,kCAAkC;;AAG5D,MAAI,CAAC,SAAS,KAAK,CAClB,QAAO,kBAAkB,qCAAqC;AAI/D,MAAI,CAAC,cAAc,KAAK,cAAc,IAAI,KAAK,cAAc,WAAW,EACvE,QAAO,kBAAkB,qDAAqD;AAG/E,MACC,KAAK,+BAA+B,UACpC,KAAK,+BAA+B,OAEpC,QAAO,kBAAkB,oDAAoD;EAG9E,MAAM,aAAa,0BAClB,KAAK,aACL,eACA,sBACA;AACD,MAAI,sBAAsB,SACzB,QAAO;EAGR,MAAM,gBAAgB,0BACrB,KAAK,gBACL,kBACA,yBACA;AACD,MAAI,yBAAyB,SAC5B,QAAO;EAGR,MAAM,SAAS,WAAW,KAAK,MAAM;AACrC,MAAI,kBAAkB,SACrB,QAAO;EAGR,MAAM,KAAK,YAAY,SAAS,uBAAuB,OAAO,OAAO,CAAC;AAEtE,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,IAAI,kBAAkB,IAAI,GAAG,EAChE,SAAS;GACvB,MAAM,WAAW,kBAChB,2DACA,KACA,0BACA;AACD,YAAS,QAAQ,IAAI,eAAe,KAAK;AACzC,UAAO;;EAGR,MAAM,WAAW,OAAO,YAAY;EACpC,MAAM,aACL,OAAO,KAAK,gBAAgB,YAAY,KAAK,cAC1C,KAAK,cACL,WAAW,SAAS,MAAM,GAAG,EAAE;EAEnC,MAAM,SAAS,MAAM,wBAAwB,OAAO,IAAI;GACvD,IAAI;GACJ,MAAM;GACN,cAAc,KAAK;GACnB;GACA,CAAC;AAEF,MAAI,CAAC,OAAO,QACX,QAAO,kBAAkB,OAAO,MAAM,QAAQ;AAI/C,SAAO,SAAS,KACf;GACC,WAAW,OAAO,KAAK;GACvB,qBAAqB,KAAK,MAAM,IAAI,KAAK,OAAO,KAAK,UAAU,CAAC,SAAS,GAAG,IAAK;GACjF,eAAe,OAAO,KAAK;GAC3B,aAAa,OAAO,KAAK;GACzB,aAAa,cAAc,CAAC,sBAAsB,gBAAgB;GAClE,gBAAgB,iBAAiB,CAAC,OAAO;GACzC,4BAA4B;GAC5B,OAAO,OAAO,KAAK,SAAS,OAAO,KAAK,OAAO,KAAK,IAAI,GAAG;GAC3D,EACD;GAAE,QAAQ;GAAK,SAAS;GAA4B,CACpD;UACO,OAAO;AACf,SAAO,YAAY,OAAO,mCAAmC,wBAAwB"}

package/dist/astro/routes/api/oauth/token/refresh.mjs

@@ -1,12 +1,12 @@
 import "../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../types-BkUg2yHx.mjs";
-import "../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../errors-BF0_LFhW.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-DY6OD1j_.mjs";
-import "../../../../../api-tokens-CE1ECIg0.mjs";
-import "../../../../../oauth-user-lookup-vue9a64A.mjs";
-import { i as handleTokenRefresh } from "../../../../../device-flow-CRd6DXmW.mjs";
+import "../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../errors-CNvATh_7.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-CEdm_AWU.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-Gt2l4Sld.mjs";
+import "../../../../../api-tokens-BLz2MtQs.mjs";
+import "../../../../../oauth-user-lookup-DrrqvTZC.mjs";
+import { a as handleTokenRefresh } from "../../../../../device-flow-CzKi6tID.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/oauth/token/refresh.ts

package/dist/astro/routes/api/oauth/token/revoke.mjs

@@ -1,12 +1,12 @@
 import "../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../types-BkUg2yHx.mjs";
-import "../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../errors-BF0_LFhW.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-DY6OD1j_.mjs";
-import "../../../../../api-tokens-CE1ECIg0.mjs";
-import "../../../../../oauth-user-lookup-vue9a64A.mjs";
-import { a as handleTokenRevoke } from "../../../../../device-flow-CRd6DXmW.mjs";
+import "../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../errors-CNvATh_7.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-CEdm_AWU.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-Gt2l4Sld.mjs";
+import "../../../../../api-tokens-BLz2MtQs.mjs";
+import "../../../../../oauth-user-lookup-DrrqvTZC.mjs";
+import { o as handleTokenRevoke } from "../../../../../device-flow-CzKi6tID.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/oauth/token/revoke.ts

package/dist/astro/routes/api/oauth/token.mjs

@@ -1,12 +1,12 @@
 import "../../../../base64-DvnNgP7e.mjs";
-import "../../../../types-BkUg2yHx.mjs";
-import "../../../../errors-DgE1zJGG.mjs";
-import "../../../../errors-BF0_LFhW.mjs";
-import { r as handleError, t as apiError } from "../../../../error-CfvOHP0M.mjs";
-import "../../../../api-tokens-CE1ECIg0.mjs";
-import "../../../../oauth-user-lookup-vue9a64A.mjs";
-import { r as handleAuthorizationCodeExchange } from "../../../../oauth-authorization-DlMIL5_h.mjs";
-import { i as handleTokenRefresh, r as handleDeviceTokenExchange } from "../../../../device-flow-CRd6DXmW.mjs";
+import "../../../../types-j6MBDjlZ.mjs";
+import "../../../../errors-CjXd1LgH.mjs";
+import "../../../../errors-CNvATh_7.mjs";
+import { r as handleError, t as apiError } from "../../../../error-CEdm_AWU.mjs";
+import "../../../../api-tokens-BLz2MtQs.mjs";
+import "../../../../oauth-user-lookup-DrrqvTZC.mjs";
+import { r as handleAuthorizationCodeExchange } from "../../../../oauth-authorization-BcRdGojQ.mjs";
+import { a as handleTokenRefresh, i as handleDeviceTokenExchange } from "../../../../device-flow-CzKi6tID.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/oauth/token.ts

package/dist/astro/routes/api/openapi.json.mjs

@@ -1,26 +1,27 @@
 import "../../../dialect-helpers-7_IqPdh9.mjs";
 import "../../../config-CvmjJcVw.mjs";
 import "../../../base64-DvnNgP7e.mjs";
-import "../../../types-BkUg2yHx.mjs";
-import "../../../errors-DgE1zJGG.mjs";
-import "../../../canonical-YhEQezjg.mjs";
-import "../../../digest-BarSh-pN.mjs";
-import "../../../settings-DYidIB26.mjs";
-import "../../../site-settings-DOgRUoFX.mjs";
-import "../../../errors-BF0_LFhW.mjs";
-import { r as handleError } from "../../../error-CfvOHP0M.mjs";
-import { T as successEnvelope, _ as deleteResponseSchema, a as notFoundPruneBody, d as redirectsListQuery, f as updateRedirectBody, i as notFoundListResponseSchema, l as redirectListResponseSchema, m as apiErrorSchema, r as notFoundListQuery, s as notFoundSummaryResponseSchema, t as createRedirectBody, u as redirectSchema, x as mediaDeleteResponseSchema } from "../../../redirects-Cv9apQKj.mjs";
-import { $ as activateBlockTypeVersionBody, A as createSectionBody, At as contentItemSchema, B as taxonomyDefTranslationsSchema, C as searchQuery, Ct as updateCollectionBody, D as searchSuggestQuery, Dt as contentCompareResponseSchema, Et as contentAuthorsResponseSchema, Ft as contentResponseSchema, G as termListResponseSchema, Gt as contentTrashQuery, H as taxonomyResponseSchema, Ht as contentTermsResponseSchema, It as contentRestoreResponseSchema, Jt as trashedContentListResponseSchema, K as termReorderResponseSchema, Kt as contentUpdateBody, L as createTermBody, Lt as contentRevisionConditionBody, M as sectionSchema, Mt as contentListResponseSchema, N as sectionsListQuery, O as settingsUpdateBody, Ot as contentCreateBody, P as updateSectionBody, Pt as contentPublishBody, Q as updateTermBody, R as reorderTermsBody, Rt as contentScheduleBody, S as searchEnableBody, St as updateBlockTypeBody, T as searchResponseSchema, U as termGetResponseSchema, V as taxonomyListResponseSchema, Vt as contentTermsBody, W as termListQuery, Wt as contentTranslationsResponseSchema, Z as updateTaxonomyDefBody, _ as userDetailSchema, a as entryLockStatusSchema, at as collectionGetQuery, b as userUpdateBody, c as createWidgetBody, ct as collectionResponseSchema, d as widgetAreaSchema, dt as createBlockTypeBody, f as widgetAreaWithWidgetsAndCountSchema, ft as createCollectionBody, g as allowedDomainUpdateBody, gt as fieldResponseSchema, h as allowedDomainCreateBody, ht as fieldReorderBody, i as entryLockReleaseResponseSchema, j as sectionListResponseSchema, jt as contentListQuery, k as siteSettingsSchema, l as reorderWidgetsBody, m as widgetSchema, mt as fieldListResponseSchema, nt as blockTypeResponseSchema, o as entryMutationConflictSchema, ot as collectionListResponseSchema, p as widgetAreaWithWidgetsSchema, pt as createFieldBody, q as termResponseSchema, s as createWidgetAreaBody, st as collectionReorderBody, t as entryLockAcquireBody, tt as blockTypeListResponseSchema, u as updateWidgetBody, ut as collectionWithFieldsResponseSchema, v as userListResponseSchema, vt as orphanRegisterBody, w as searchRebuildBody, wt as updateFieldBody, x as usersListQuery, y as userSchema, yt as orphanedTableListResponseSchema } from "../../../entry-lock-BJYdBfXb.mjs";
-import { $ as mediaUsageProgressSchema, B as mediaUsageCollectionDeletionListQuery, C as mediaReplaceBody, D as mediaStreamUploadResponseSchema, E as mediaResponseSchema, F as mediaUsageActivationAdvanceResponseSchema, I as mediaUsageActivationConflictSchema, J as mediaUsageDetailsQuery, M as mediaUploadUrlBody, N as mediaUploadUrlResponseSchema, O as mediaUpdateBody, P as mediaUsageActivationAdvanceBody, Q as mediaUsageProgressAdvanceResponseSchema, R as mediaUsageActivationStatusSchema, S as mediaReadResponseSchema, T as mediaReplaceResponseSchema, U as mediaUsageCollectionDeletionRetryBody, V as mediaUsageCollectionDeletionListResponseSchema, W as mediaUsageCollectionDeletionRetryResponseSchema, Y as mediaUsageDetailsResponseSchema, a as mediaConfirmResponseSchema, c as mediaFolderBody, ct as mediaUsageWorkListQuery, d as mediaFolderListResponseSchema, dt as mediaUsageWorkRetryConflictSchema, et as mediaUsageRepairBody, f as mediaFolderResponseSchema, ft as mediaUsageWorkRetryResponseSchema, g as mediaListQuery, i as mediaConfirmBody, j as mediaUploadResponseSchema, l as mediaFolderIdSchema, lt as mediaUsageWorkListResponseSchema, m as mediaGetQuery, n as DEFAULT_MAX_UPLOAD_SIZE, nt as mediaUsageRepairResponseSchema, o as mediaDirectUploadBody, s as mediaExistingResponseSchema, u as mediaFolderListQuery, ut as mediaUsageWorkRetryBody, v as mediaListReadResponseSchema, y as mediaListResponseSchema } from "../../../media-Pu1L6xir.mjs";
-import { a as commentListQuery, c as createCommentBody, i as commentCountsResponseSchema, n as commentBulkBody, o as commentSchema, r as commentBulkResponseSchema, s as commentStatusBody, t as adminCommentListResponseSchema, u as publicCommentListResponseSchema } from "../../../comments-fHZ8ON9O.mjs";
-import { a as menuListItemSchema, c as menuWithItemsSchema, d as updateMenuBody, f as updateMenuItemBody, l as reorderMenuItemsBody, n as createMenuItemBody, r as menuItemSchema, t as createMenuBody } from "../../../menus-BM7BPLOb.mjs";
-import "../../../status-DZKIG4a9.mjs";
-import "../../../kinds-CRu_T5T5.mjs";
-import "../../../transformations-9gfpwY65.mjs";
-import "../../../version-BRZXVifl.mjs";
-import "../../../approvals-CqMfNxak.mjs";
-import "../../../plan-xjcWrAah.mjs";
-import { _ as transferOperationListResponseSchema, a as transferCapabilitiesSchema, c as transferFileUploadResponseSchema, d as transferImportCreateResponseSchema, f as transferImportExecuteBody, g as transferMissingFilesResponseSchema, h as transferImportStatusResponseSchema, i as transferApprovalResponseSchema, l as transferImportAnalyzeBody, m as transferImportReceiptResponseSchema, n as transferApprovalListQuery, o as transferExportCreateBody, p as transferImportPlanResponseSchema, r as transferApprovalListResponseSchema, s as transferExportCreateResponseSchema, t as transferAdvanceResponseSchema, u as transferImportAnalyzeResponseSchema, v as transferOperationResponseSchema, y as transferPaginationQuery } from "../../../transfer-DIGvR9Af.mjs";
+import "../../../url-Dn3IStq8.mjs";
+import "../../../types-j6MBDjlZ.mjs";
+import "../../../errors-CjXd1LgH.mjs";
+import "../../../canonical-CAecl1UQ.mjs";
+import "../../../digest-DiYAoZpf.mjs";
+import "../../../errors-CNvATh_7.mjs";
+import "../../../settings-B0zQj_Tj.mjs";
+import "../../../site-settings-AYFvhwQn.mjs";
+import { r as handleError } from "../../../error-CEdm_AWU.mjs";
+import { T as successEnvelope, _ as deleteResponseSchema, a as notFoundPruneBody, d as redirectsListQuery, f as updateRedirectBody, i as notFoundListResponseSchema, l as redirectListResponseSchema, m as apiErrorSchema, r as notFoundListQuery, s as notFoundSummaryResponseSchema, t as createRedirectBody, u as redirectSchema, x as mediaDeleteResponseSchema } from "../../../redirects-D4EWeXAo.mjs";
+import { $ as activateBlockTypeVersionBody, A as createSectionBody, At as contentItemSchema, B as taxonomyDefTranslationsSchema, C as searchQuery, Ct as updateCollectionBody, D as searchSuggestQuery, Dt as contentCompareResponseSchema, Et as contentAuthorsResponseSchema, Ft as contentResponseSchema, G as termListResponseSchema, Gt as contentTrashQuery, H as taxonomyResponseSchema, Ht as contentTermsResponseSchema, It as contentRestoreResponseSchema, K as termReorderResponseSchema, Kt as contentUpdateBody, L as createTermBody, Lt as contentRevisionConditionBody, M as sectionSchema, Mt as contentListResponseSchema, N as sectionsListQuery, O as settingsUpdateBody, Ot as contentCreateBody, P as updateSectionBody, Pt as contentPublishBody, Q as updateTermBody, R as reorderTermsBody, Rt as contentScheduleBody, S as searchEnableBody, St as updateBlockTypeBody, T as searchResponseSchema, U as termGetResponseSchema, V as taxonomyListResponseSchema, Vt as contentTermsBody, W as termListQuery, Wt as contentTranslationsResponseSchema, Yt as trashedContentListResponseSchema, Z as updateTaxonomyDefBody, _ as userDetailSchema, a as entryLockStatusSchema, at as collectionGetQuery, b as userUpdateBody, c as createWidgetBody, ct as collectionResponseSchema, d as widgetAreaSchema, dt as createBlockTypeBody, f as widgetAreaWithWidgetsAndCountSchema, ft as createCollectionBody, g as allowedDomainUpdateBody, gt as fieldResponseSchema, h as allowedDomainCreateBody, ht as fieldReorderBody, i as entryLockReleaseResponseSchema, j as sectionListResponseSchema, jt as contentListQuery, k as siteSettingsSchema, l as reorderWidgetsBody, m as widgetSchema, mt as fieldListResponseSchema, nt as blockTypeResponseSchema, o as entryMutationConflictSchema, ot as collectionListResponseSchema, p as widgetAreaWithWidgetsSchema, pt as createFieldBody, q as termResponseSchema, s as createWidgetAreaBody, st as collectionReorderBody, t as entryLockAcquireBody, tt as blockTypeListResponseSchema, u as updateWidgetBody, ut as collectionWithFieldsResponseSchema, v as userListResponseSchema, vt as orphanRegisterBody, w as searchRebuildBody, wt as updateFieldBody, x as usersListQuery, y as userSchema, yt as orphanedTableListResponseSchema } from "../../../entry-lock-PP1JCXBB.mjs";
+import { $ as mediaUsageProgressSchema, B as mediaUsageCollectionDeletionListQuery, C as mediaReplaceBody, D as mediaStreamUploadResponseSchema, E as mediaResponseSchema, F as mediaUsageActivationAdvanceResponseSchema, I as mediaUsageActivationConflictSchema, J as mediaUsageDetailsQuery, M as mediaUploadUrlBody, N as mediaUploadUrlResponseSchema, O as mediaUpdateBody, P as mediaUsageActivationAdvanceBody, Q as mediaUsageProgressAdvanceResponseSchema, R as mediaUsageActivationStatusSchema, S as mediaReadResponseSchema, T as mediaReplaceResponseSchema, U as mediaUsageCollectionDeletionRetryBody, V as mediaUsageCollectionDeletionListResponseSchema, W as mediaUsageCollectionDeletionRetryResponseSchema, Y as mediaUsageDetailsResponseSchema, a as mediaConfirmResponseSchema, c as mediaFolderBody, ct as mediaUsageWorkListQuery, d as mediaFolderListResponseSchema, dt as mediaUsageWorkRetryConflictSchema, et as mediaUsageRepairBody, f as mediaFolderResponseSchema, ft as mediaUsageWorkRetryResponseSchema, g as mediaListQuery, i as mediaConfirmBody, j as mediaUploadResponseSchema, l as mediaFolderIdSchema, lt as mediaUsageWorkListResponseSchema, m as mediaGetQuery, n as DEFAULT_MAX_UPLOAD_SIZE, nt as mediaUsageRepairResponseSchema, o as mediaDirectUploadBody, s as mediaExistingResponseSchema, u as mediaFolderListQuery, ut as mediaUsageWorkRetryBody, v as mediaListReadResponseSchema, y as mediaListResponseSchema } from "../../../media-D1z_jisb.mjs";
+import { a as commentListQuery, c as createCommentBody, i as commentCountsResponseSchema, n as commentBulkBody, o as commentSchema, r as commentBulkResponseSchema, s as commentStatusBody, t as adminCommentListResponseSchema, u as publicCommentListResponseSchema } from "../../../comments-BRtp992B.mjs";
+import { a as menuListItemSchema, c as menuWithItemsSchema, d as updateMenuBody, f as updateMenuItemBody, l as reorderMenuItemsBody, n as createMenuItemBody, r as menuItemSchema, t as createMenuBody } from "../../../menus-BQKqf0Up.mjs";
+import "../../../status-D39Fpy8R.mjs";
+import "../../../kinds-CXY-fwQ6.mjs";
+import "../../../transformations-DdnpSdeC.mjs";
+import "../../../version-DbT04wbH.mjs";
+import "../../../approvals-l9sGqPmL.mjs";
+import "../../../plan-BxCS1tl5.mjs";
+import { _ as transferOperationListResponseSchema, a as transferCapabilitiesSchema, c as transferFileUploadResponseSchema, d as transferImportCreateResponseSchema, f as transferImportExecuteBody, g as transferMissingFilesResponseSchema, h as transferImportStatusResponseSchema, i as transferApprovalResponseSchema, l as transferImportAnalyzeBody, m as transferImportReceiptResponseSchema, n as transferApprovalListQuery, o as transferExportCreateBody, p as transferImportPlanResponseSchema, r as transferApprovalListResponseSchema, s as transferExportCreateResponseSchema, t as transferAdvanceResponseSchema, u as transferImportAnalyzeResponseSchema, v as transferOperationResponseSchema, y as transferPaginationQuery } from "../../../transfer-BtzoaXLk.mjs";
 import { z } from "zod";
 import { globalRegistry } from "zod/v4/core";
 import { globalRegistry as globalRegistry$1, object, registry, toJSONSchema } from "zod/v4";