emdash 0.41.0 → 0.42.0

package/dist/astro/routes/api/mcp.mjs

@@ -1,58 +1,61 @@
 import "../../../dialect-helpers-7_IqPdh9.mjs";
 import { r as getI18nConfig } from "../../../config-CvmjJcVw.mjs";
-import "../../../after-PcEvMY_6.mjs";
+import { t as after } from "../../../after-PcEvMY_6.mjs";
 import "../../../options-DhrI7eMv.mjs";
 import { i as encodeBase64, t as decodeBase64 } from "../../../base64-DvnNgP7e.mjs";
 import "../../../secrets-CIi0nFiR.mjs";
-import "../../../object-cache-CqWNY5uP.mjs";
-import { i as InvalidCursorError, s as decodeCursor } from "../../../types-aOOxRSx6.mjs";
-import "../../../media-BUQePMxP.mjs";
-import "../../../audit-CrgmE9LE.mjs";
-import "../../../request-cache-iHRlHx1d.mjs";
-import "../../../byline-registry-B_EK_TQf.mjs";
-import "../../../field-defs-cache-CsZctvbu.mjs";
-import "../../../byline-BayaYGoj.mjs";
-import "../../../fts-manager-CCaZTp8y.mjs";
-import { n as siteSettingsTag, r as taxonomyTag, t as menuTag } from "../../../chrome-tags-D5caJwwp.mjs";
-import "../../../loader-CrRPfkHS.mjs";
-import "../../../collection-slugs-cache-CUuiduLq.mjs";
-import "../../../capture-triggers-DJEoOTOq.mjs";
-import "../../../activation-PtniBLt9.mjs";
-import "../../../collection-deletion-CLCdXsnV.mjs";
-import "../../../registry-CFcNCayZ.mjs";
-import "../../../hash-COVK27Pc.mjs";
-import "../../../zod-generator-DmTKI-Ig.mjs";
-import { r as isTransferError, t as TransferError } from "../../../errors-Bt3goF8I.mjs";
-import "../../../canonical-CcSuuTlH.mjs";
-import { f as toSha256Digest } from "../../../digest-DVZ--cE9.mjs";
-import "../../../collection-deletion-processor-hNw8x01F.mjs";
-import "../../../settings-DSfE7wOa.mjs";
-import "../../../site-settings-NGzdrt7O.mjs";
-import "../../../errors-BN1QAnEY.mjs";
-import "../../../settings-D5EHi0Tk.mjs";
-import { t as apiError } from "../../../error-BfsNNrIE.mjs";
-import "../../../redirects-BjTwDTsV.mjs";
-import { Ct as updateCollectionBody, I as createTaxonomyDefBody, St as updateBlockTypeBody, Z as updateTaxonomyDefBody, an as bylineCreateBody, dn as bylineUpdateBody, dt as createBlockTypeBody, ft as createCollectionBody, pn as contentBylineInputSchema, wt as updateFieldBody, zt as contentSeoInput } from "../../../entry-lock-BaRBHCsH.mjs";
-import { t as CONTENT_TYPE_RE } from "../../../media-OEIQ3bVc.mjs";
-import "../../../comments-M4EDYAHw.mjs";
-import "../../../byline-fields-B8HH-35f.mjs";
-import "../../../menus-p_M1V7J_.mjs";
-import "../../../status-lzyj4Uu7.mjs";
+import "../../../object-cache-Bo6DGaC9.mjs";
+import "../../../request-cache-C4CIo5ad.mjs";
+import "../../../url-Dn3IStq8.mjs";
+import { i as InvalidCursorError, s as decodeCursor } from "../../../types-j6MBDjlZ.mjs";
+import "../../../media-CputjGE1.mjs";
+import "../../../audit-BszbE_BP.mjs";
+import "../../../byline-registry-dvt4N3xV.mjs";
+import "../../../field-defs-cache-DEkFYCDE.mjs";
+import "../../../byline-02tu_Uc-.mjs";
+import "../../../entry-locks-DJAqVweV.mjs";
+import "../../../fts-manager-DU03MxWu.mjs";
+import { n as siteSettingsTag, r as taxonomyTag, t as menuTag } from "../../../chrome-tags-CKELm-bo.mjs";
+import "../../../loader-B_bcoE1h.mjs";
+import "../../../collection-slugs-cache-BNRAPNiu.mjs";
+import "../../../capture-triggers-CdZfvHtF.mjs";
+import "../../../activation-DDuqAat2.mjs";
+import "../../../collection-deletion-JecE26cS.mjs";
+import "../../../registry-CtHRqVe-.mjs";
+import "../../../hash-CY4QdeMJ.mjs";
+import "../../../zod-generator-DnfG5sGQ.mjs";
+import { r as isTransferError, t as TransferError } from "../../../errors-CjXd1LgH.mjs";
+import "../../../canonical-CAecl1UQ.mjs";
+import { f as toSha256Digest } from "../../../digest-DiYAoZpf.mjs";
+import "../../../errors-CNvATh_7.mjs";
+import "../../../collection-deletion-processor-DgCfF3a1.mjs";
+import "../../../settings-B0zQj_Tj.mjs";
+import "../../../site-settings-AYFvhwQn.mjs";
+import "../../../settings-BbVRRGDp.mjs";
+import { t as apiError } from "../../../error-CEdm_AWU.mjs";
+import "../../../redirects-D4EWeXAo.mjs";
+import { Ct as updateCollectionBody, I as createTaxonomyDefBody, St as updateBlockTypeBody, Z as updateTaxonomyDefBody, dt as createBlockTypeBody, fn as bylineUpdateBody, ft as createCollectionBody, mn as contentBylineInputSchema, on as bylineCreateBody, wt as updateFieldBody, zt as contentSeoInput } from "../../../entry-lock-PP1JCXBB.mjs";
+import { t as CONTENT_TYPE_RE } from "../../../media-D1z_jisb.mjs";
+import "../../../comments-BRtp992B.mjs";
+import "../../../byline-fields-DHJs0Mja.mjs";
+import "../../../menus-BQKqf0Up.mjs";
+import "../../../status-D39Fpy8R.mjs";
 import "../../../api/schemas/index.mjs";
-import { a as readSiteWriteFence, o as recordSiteWrite } from "../../../fence-Bb_IbCxI.mjs";
-import { a as hasScope$1 } from "../../../api-tokens-FaG1zPsj.mjs";
-import { n as convertDataForWrite, t as convertDataForRead } from "../../../portable-text-DXE8ymtD.mjs";
-import "../../../tar-DsTXX6ch.mjs";
-import { i as RECORD_KINDS } from "../../../kinds-CYmRESWj.mjs";
-import "../../../paths-d51RFm8M.mjs";
-import "../../../transformations-C7RQabKQ.mjs";
-import "../../../version-DgYjhTud.mjs";
-import "../../../receipt-B-aU4hpJ.mjs";
-import { S as TRANSFER_SCOPES, n as TransferApprovalRepository } from "../../../approvals-CAX9Yw33.mjs";
-import { a as siteImportDecisionsInputSchema, t as isPlanExecutable } from "../../../plan-DqeZKuaR.mjs";
-import { i as TransferOperationRepository } from "../../../stage-CUjhED3P.mjs";
-import { C as requestTransferApproval, E as analysisTargetContext, S as handleTransferCapabilities, T as loadImportPlan, _ as handleImportGet, c as handleExportGet, d as handleImportAdvance, f as handleImportAnalyze, h as handleImportExecute, i as handleExportAdvance, o as handleExportCreate, t as exportParamsDigest, w as openExportPackage, x as handleImportReceipt } from "../../../transfer-XSTh2BCr.mjs";
-import "../../../keys-Bck6LBfF.mjs";
+import { a as readSiteWriteFence, o as recordSiteWrite } from "../../../fence-BrnQffdY.mjs";
+import { a as hasScope$1 } from "../../../api-tokens-BLz2MtQs.mjs";
+import { n as convertDataForWrite, t as convertDataForRead } from "../../../portable-text-BnRuiR1-.mjs";
+import "../../../tar-lDI_fzLD.mjs";
+import { i as RECORD_KINDS } from "../../../kinds-CXY-fwQ6.mjs";
+import "../../../paths-DiENGBx5.mjs";
+import "../../../transformations-DdnpSdeC.mjs";
+import "../../../version-DbT04wbH.mjs";
+import "../../../receipt-q1VK9jhj.mjs";
+import { t as claimEntryLockForWrite } from "../../../entry-lock-B5eaZEZP.mjs";
+import { S as TRANSFER_SCOPES, n as TransferApprovalRepository } from "../../../approvals-l9sGqPmL.mjs";
+import { a as siteImportDecisionsInputSchema, t as isPlanExecutable } from "../../../plan-BxCS1tl5.mjs";
+import { i as TransferOperationRepository } from "../../../stage-Cf9PqdUB.mjs";
+import { C as requestTransferApproval, E as analysisTargetContext, S as handleTransferCapabilities, T as loadImportPlan, _ as handleImportGet, c as handleExportGet, d as handleImportAdvance, f as handleImportAnalyze, h as handleImportExecute, i as handleExportAdvance, o as handleExportCreate, t as exportParamsDigest, w as openExportPackage, x as handleImportReceipt } from "../../../transfer-DLu_6AXL.mjs";
+import "../../../keys-r08WvAng.mjs";
 import { z } from "zod";
 import { Permissions, Role, canActOnOwn, hasPermission } from "@emdash-cms/auth";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
@@ -410,6 +413,12 @@ const REV_PARAM_DESCRIPTION = "Revision token proving you have read the current
 * read the schema, so the message says where the token comes from.
 */
 const REV_MISSING_ERROR = "_rev is required: call content_get for this item and pass back the _rev it returns.";
+/**
+* Shared wording for the `overrideLock` parameter on write tools. Agents only
+* see the tool schema, and re-reading never clears ENTRY_LOCKED, so when to
+* override is stated here.
+*/
+const OVERRIDE_LOCK_PARAM_DESCRIPTION = "Write even though someone else has this item open in the admin. Without it, the call fails with ENTRY_LOCKED and the error names who is editing; calling content_get again does not clear it. Tell the user who holds the item, and set this only if they ask you to write anyway.";
 const SHA256_DIGEST_PATTERN = /^sha256:[0-9a-f]{64}$/;
 const transferOperationIdSchema = z.string().regex(/^[0-9A-Za-z_-]{1,64}$/, "Invalid operation id").describe("Transfer operation id");
 const transferApprovalIdSchema = z.string().min(1).max(64).describe("Approval id from an earlier TRANSFER_APPROVAL_REQUIRED error, once approved");
@@ -480,7 +489,7 @@ const schemaUpdateCollectionToolSchema = z.object({
 	description: updateCollectionBody.shape.description.describe("New collection description"),
 	icon: updateCollectionBody.shape.icon.describe("New admin UI icon name"),
 	supports: updateCollectionBody.shape.supports.describe("Complete feature list to enable; omit to preserve the current list"),
-	urlPattern: updateCollectionBody.shape.urlPattern.describe("New public URL pattern; pass null to clear it"),
+	urlPattern: updateCollectionBody.shape.urlPattern.describe("New public URL pattern such as /blog/{slug}, with at most one placeholder per path segment; pass null to clear it"),
 	routable: updateCollectionBody.shape.routable.describe("Whether entries require a slug before they can be published"),
 	hasSeo: updateCollectionBody.shape.hasSeo.describe("Whether the collection supports SEO metadata"),
 	group: updateCollectionBody.shape.group.describe("Admin sidebar folder shared with other collections of the same group; pass null to move the collection back inline"),
@@ -669,8 +678,8 @@ async function unwrapAndInvalidate(extra, result, tags, changedEarlier = false)
 }
 async function getCollectionFields(ec, collection) {
 	try {
-		const { SchemaRegistry } = await import("../../../schema-BAayK46S.mjs").then((n) => n.t);
-		const { expandCollectionBlockFields } = await import("../../../block-values-ACFqgB1D.mjs").then((n) => n.t);
+		const { SchemaRegistry } = await import("../../../schema-BZPj3kwZ.mjs").then((n) => n.t);
+		const { expandCollectionBlockFields } = await import("../../../block-values-BrTrtA-v.mjs").then((n) => n.t);
 		const col = await new SchemaRegistry(ec.db).getCollectionWithFields(collection);
 		return col ? (await expandCollectionBlockFields(ec.db, col)).fields : null;
 	} catch {
@@ -699,7 +708,7 @@ async function applyReadMarkdown(ec, collection, items) {
 	for (const item of items) if (item.data && typeof item.data === "object") item.data = convertDataForRead(item.data, fields, false);
 }
 async function invalidateBylines() {
-	const { invalidateBylineCache } = await import("../../../bylines-DkIxUxmr.mjs").then((n) => n.t);
+	const { invalidateBylineCache } = await import("../../../bylines-COTwmMBF.mjs").then((n) => n.t);
 	invalidateBylineCache();
 }
 /**
@@ -818,6 +827,16 @@ function extractContentId(data) {
 	const item = obj.item && typeof obj.item === "object" ? obj.item : obj;
 	return typeof item?.id === "string" ? item.id : void 0;
 }
+/**
+* Refuses a write while another user holds the entry's edit lock. Resolves to
+* `null` when the write may proceed, and extends the caller's own lease if they
+* hold it.
+*/
+async function refuseLockedEntry(extra, collection, entryId, overrideLock) {
+	const { emdash, userId } = getExtra(extra);
+	const refusal = await claimEntryLockForWrite(emdash.db, collection, entryId, userId, { override: overrideLock });
+	return refusal ? respondError(refusal.code, refusal.message, { ...refusal.details }) : null;
+}
 /** Extract the `_rev` token from a content handler response. */
 function extractContentRev(data) {
 	if (!data || typeof data !== "object") return void 0;
@@ -1033,7 +1052,8 @@ function createMcpServer(pluginTools = [], request) {
 			publishedAt: contentDateTimeInputSchema.nullish().describe("Override the publication timestamp (ISO 8601). Requires content:publish_any permission. Pass null to clear. Useful for content migrations."),
 			migrateBlocks: z.boolean().optional().describe("Allow existing blocks to migrate to their type's active version"),
 			replaceBlocks: z.boolean().optional().describe("Treat an entirely keyless blocks array as an explicit replacement"),
-			_rev: z.string({ error: REV_MISSING_ERROR }).describe(REV_PARAM_DESCRIPTION)
+			_rev: z.string({ error: REV_MISSING_ERROR }).describe(REV_PARAM_DESCRIPTION),
+			overrideLock: z.boolean().optional().describe(OVERRIDE_LOCK_PARAM_DESCRIPTION)
 		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
@@ -1055,8 +1075,10 @@ function createMcpServer(pluginTools = [], request) {
 			}, "content:publish_any")) throw new EmDashAuthError("Setting publishedAt requires content:publish_any permission", "INSUFFICIENT_PERMISSIONS");
 		}
 		const resolvedId = extractContentId(existing.data) ?? args.id;
+		if (args.status !== void 0) requireOwnership(extra, ownerId, "content:publish_own", "content:publish_any");
+		const locked = await refuseLockedEntry(extra, args.collection, resolvedId, args.overrideLock);
+		if (locked) return locked;
 		if (args.status === "published") {
-			requireOwnership(extra, ownerId, "content:publish_own", "content:publish_any");
 			let rev = args._rev;
 			let liveChanged = false;
 			if (args.data || args.slug || args.seo !== void 0 || args.bylines !== void 0 || args.taxonomies !== void 0 || args.publishedAt !== void 0) {
@@ -1087,7 +1109,6 @@ function createMcpServer(pluginTools = [], request) {
 			}), [args.collection, resolvedId], liveChanged);
 		}
 		if (args.status === "draft") {
-			requireOwnership(extra, ownerId, "content:publish_own", "content:publish_any");
 			let rev = args._rev;
 			let liveChanged = false;
 			if (args.data || args.slug || args.seo !== void 0 || args.bylines !== void 0 || args.taxonomies !== void 0 || args.publishedAt !== void 0) {
@@ -1138,7 +1159,8 @@ function createMcpServer(pluginTools = [], request) {
 		description: "Soft-delete a content item by moving it to the trash. The item can be restored later with content_restore, or permanently deleted with content_permanent_delete.",
 		inputSchema: z.object({
 			collection: z.string().describe("Collection slug"),
-			id: z.string().describe("Content item ID or slug")
+			id: z.string().describe("Content item ID or slug"),
+			overrideLock: z.boolean().optional().describe(OVERRIDE_LOCK_PARAM_DESCRIPTION)
 		}),
 		annotations: { destructiveHint: true }
 	}, async (args, extra) => {
@@ -1149,6 +1171,8 @@ function createMcpServer(pluginTools = [], request) {
 		if (!existing.success) return unwrap(existing);
 		requireOwnership(extra, extractContentAuthorId(existing.data), "content:delete_own", "content:delete_any");
 		const resolvedId = extractContentId(existing.data) ?? args.id;
+		const locked = await refuseLockedEntry(extra, args.collection, resolvedId, args.overrideLock);
+		if (locked) return locked;
 		return unwrapAndInvalidate(extra, await ec.handleContentDelete(args.collection, resolvedId), [args.collection, resolvedId]);
 	});
 	server.registerTool("content_restore", {
@@ -1188,7 +1212,8 @@ function createMcpServer(pluginTools = [], request) {
 			collection: z.string().describe("Collection slug"),
 			id: z.string().describe("Content item ID or slug"),
 			_rev: z.string({ error: REV_MISSING_ERROR }).describe(REV_PARAM_DESCRIPTION),
-			publishedAt: contentDateTimeInputSchema.optional().describe("Override publication timestamp (ISO 8601). Requires content:publish_any permission. Useful when importing content with original publish dates.")
+			publishedAt: contentDateTimeInputSchema.optional().describe("Override publication timestamp (ISO 8601). Requires content:publish_any permission. Useful when importing content with original publish dates."),
+			overrideLock: z.boolean().optional().describe(OVERRIDE_LOCK_PARAM_DESCRIPTION)
 		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
@@ -1204,6 +1229,8 @@ function createMcpServer(pluginTools = [], request) {
 			}, "content:publish_any")) throw new EmDashAuthError("Setting publishedAt requires content:publish_any permission", "INSUFFICIENT_PERMISSIONS");
 		}
 		const resolvedId = extractContentId(existing.data) ?? args.id;
+		const locked = await refuseLockedEntry(extra, args.collection, resolvedId, args.overrideLock);
+		if (locked) return locked;
 		return unwrapAndInvalidate(extra, await emdash.handleContentPublish(args.collection, resolvedId, {
 			publishedAt: args.publishedAt,
 			_rev: args._rev,
@@ -1221,7 +1248,8 @@ function createMcpServer(pluginTools = [], request) {
 		inputSchema: z.object({
 			collection: z.string().describe("Collection slug"),
 			id: z.string().describe("Content item ID or slug"),
-			_rev: z.string({ error: REV_MISSING_ERROR }).describe(REV_PARAM_DESCRIPTION)
+			_rev: z.string({ error: REV_MISSING_ERROR }).describe(REV_PARAM_DESCRIPTION),
+			overrideLock: z.boolean().optional().describe(OVERRIDE_LOCK_PARAM_DESCRIPTION)
 		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
@@ -1231,6 +1259,8 @@ function createMcpServer(pluginTools = [], request) {
 		if (!existing.success) return unwrap(existing);
 		requireOwnership(extra, extractContentAuthorId(existing.data), "content:publish_own", "content:publish_any");
 		const resolvedId = extractContentId(existing.data) ?? args.id;
+		const locked = await refuseLockedEntry(extra, args.collection, resolvedId, args.overrideLock);
+		if (locked) return locked;
 		return unwrapAndInvalidate(extra, await ec.handleContentUnpublish(args.collection, resolvedId, {
 			_rev: args._rev,
 			actor: {
@@ -1248,7 +1278,8 @@ function createMcpServer(pluginTools = [], request) {
 			collection: z.string().describe("Collection slug"),
 			id: z.string().describe("Content item ID or slug"),
 			_rev: z.string({ error: REV_MISSING_ERROR }).describe(REV_PARAM_DESCRIPTION),
-			scheduledAt: contentDateTimeInputSchema.describe("ISO 8601 datetime for publication (e.g. '2025-06-01T09:00:00Z')")
+			scheduledAt: contentDateTimeInputSchema.describe("ISO 8601 datetime for publication (e.g. '2025-06-01T09:00:00Z')"),
+			overrideLock: z.boolean().optional().describe(OVERRIDE_LOCK_PARAM_DESCRIPTION)
 		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
@@ -1258,6 +1289,8 @@ function createMcpServer(pluginTools = [], request) {
 		if (!existing.success) return unwrap(existing);
 		requireOwnership(extra, extractContentAuthorId(existing.data), "content:publish_own", "content:publish_any");
 		const resolvedId = extractContentId(existing.data) ?? args.id;
+		const locked = await refuseLockedEntry(extra, args.collection, resolvedId, args.overrideLock);
+		if (locked) return locked;
 		return unwrapAndInvalidate(extra, await ec.handleContentSchedule(args.collection, resolvedId, args.scheduledAt, {
 			_rev: args._rev,
 			actor: {
@@ -1273,7 +1306,8 @@ function createMcpServer(pluginTools = [], request) {
 		description: "Cancel a previously scheduled publication. Scheduled drafts return to draft status; published items stay published. The scheduledAt timestamp is cleared. Idempotent — calling on an item that isn't scheduled is a no-op.",
 		inputSchema: z.object({
 			collection: z.string().describe("Collection slug"),
-			id: z.string().describe("Content item ID or slug")
+			id: z.string().describe("Content item ID or slug"),
+			overrideLock: z.boolean().optional().describe(OVERRIDE_LOCK_PARAM_DESCRIPTION)
 		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
@@ -1283,6 +1317,8 @@ function createMcpServer(pluginTools = [], request) {
 		if (!existing.success) return unwrap(existing);
 		requireOwnership(extra, extractContentAuthorId(existing.data), "content:publish_own", "content:publish_any");
 		const resolvedId = extractContentId(existing.data) ?? args.id;
+		const locked = await refuseLockedEntry(extra, args.collection, resolvedId, args.overrideLock);
+		if (locked) return locked;
 		return unwrapAndInvalidate(extra, await ec.handleContentUnschedule(args.collection, resolvedId), [args.collection, resolvedId]);
 	});
 	server.registerTool("content_compare", {
@@ -1304,7 +1340,8 @@ function createMcpServer(pluginTools = [], request) {
 		inputSchema: z.object({
 			collection: z.string().describe("Collection slug"),
 			id: z.string().describe("Content item ID or slug"),
-			_rev: z.string({ error: REV_MISSING_ERROR }).describe(REV_PARAM_DESCRIPTION)
+			_rev: z.string({ error: REV_MISSING_ERROR }).describe(REV_PARAM_DESCRIPTION),
+			overrideLock: z.boolean().optional().describe(OVERRIDE_LOCK_PARAM_DESCRIPTION)
 		}),
 		annotations: { destructiveHint: true }
 	}, async (args, extra) => {
@@ -1315,6 +1352,8 @@ function createMcpServer(pluginTools = [], request) {
 		if (!existing.success) return unwrap(existing);
 		requireOwnership(extra, extractContentAuthorId(existing.data), "content:edit_own", "content:edit_any");
 		const resolvedId = extractContentId(existing.data) ?? args.id;
+		const locked = await refuseLockedEntry(extra, args.collection, resolvedId, args.overrideLock);
+		if (locked) return locked;
 		return unwrapAndInvalidate(extra, await ec.handleContentDiscardDraft(args.collection, resolvedId, { _rev: args._rev }), [args.collection, resolvedId]);
 	});
 	server.registerTool("content_list_trashed", {
@@ -1391,7 +1430,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "content:read");
 		const ec = getEmDash(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-BayaYGoj.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-02tu_Uc-.mjs").then((n) => n.n);
 			return jsonResult(await new BylineRepository(ec.db).findMany({
 				search: args.search,
 				isGuest: args.isGuest,
@@ -1413,7 +1452,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "content:read");
 		const ec = getEmDash(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-BayaYGoj.mjs").then((n) => n.n);
+			const { BylineRepository } = await import("../../../byline-02tu_Uc-.mjs").then((n) => n.n);
 			const byline = await new BylineRepository(ec.db).findById(args.id);
 			if (!byline) return respondError("NOT_FOUND", `Byline '${args.id}' not found`);
 			return jsonResult(byline);
@@ -1431,9 +1470,13 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleBylineCreate } = await import("../../../bylines-DFAaFXWi.mjs").then((n) => n.t);
+			const { handleBylineCreate } = await import("../../../bylines-D_S8UKRX.mjs").then((n) => n.t);
 			const result = await handleBylineCreate(ec.db, args);
-			if (result.success) await invalidateBylines();
+			if (result.success) {
+				await invalidateBylines();
+				const byline = result.data;
+				after(() => ec.hooks.runBylineAfterSave(byline, true));
+			}
 			return unwrap(result);
 		} catch (error) {
 			return respondHandlerError(error, "BYLINE_CREATE_ERROR");
@@ -1451,10 +1494,14 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleBylineUpdate } = await import("../../../bylines-DFAaFXWi.mjs").then((n) => n.t);
+			const { handleBylineUpdate } = await import("../../../bylines-D_S8UKRX.mjs").then((n) => n.t);
 			const { id, ...input } = args;
 			const result = await handleBylineUpdate(ec.db, id, input);
-			if (result.success) await invalidateBylines();
+			if (result.success) {
+				await invalidateBylines();
+				const byline = result.data;
+				after(() => ec.hooks.runBylineAfterSave(byline, false));
+			}
 			return unwrap(result);
 		} catch (error) {
 			return respondHandlerError(error, "BYLINE_UPDATE_ERROR");
@@ -1470,9 +1517,12 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { BylineRepository } = await import("../../../byline-BayaYGoj.mjs").then((n) => n.n);
-			if (!await new BylineRepository(ec.db).delete(args.id)) return respondError("NOT_FOUND", `Byline '${args.id}' not found`);
+			const { BylineRepository } = await import("../../../byline-02tu_Uc-.mjs").then((n) => n.n);
+			const repo = new BylineRepository(ec.db);
+			const existing = ec.hooks.hasHooks("byline:afterDelete") ? await repo.findById(args.id) : null;
+			if (!await repo.delete(args.id)) return respondError("NOT_FOUND", `Byline '${args.id}' not found`);
 			await invalidateBylines();
+			if (existing) after(() => ec.hooks.runBylineAfterDelete(existing));
 			return jsonResult({ deleted: args.id });
 		} catch (error) {
 			return respondHandlerError(error, "BYLINE_DELETE_ERROR");
@@ -1487,7 +1537,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "content:read");
 		const ec = getEmDash(extra);
 		try {
-			const { handleBylineTranslations } = await import("../../../bylines-DFAaFXWi.mjs").then((n) => n.t);
+			const { handleBylineTranslations } = await import("../../../bylines-D_S8UKRX.mjs").then((n) => n.t);
 			return unwrap(await handleBylineTranslations(ec.db, args.id));
 		} catch (error) {
 			return respondHandlerError(error, "BYLINE_TRANSLATIONS_ERROR");
@@ -1503,7 +1553,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-BAayK46S.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-BZPj3kwZ.mjs").then((n) => n.t);
 			return jsonResult({ items: await new SchemaRegistry(ec.db).listCollections() });
 		} catch (error) {
 			return respondHandlerError(error, "SCHEMA_LIST_ERROR");
@@ -1519,7 +1569,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { SchemaRegistry, expandCollectionBlockFields } = await import("../../../schema-BAayK46S.mjs").then((n) => n.t);
+			const { SchemaRegistry, expandCollectionBlockFields } = await import("../../../schema-BZPj3kwZ.mjs").then((n) => n.t);
 			const collection = await new SchemaRegistry(ec.db).getCollectionWithFields(args.slug);
 			if (!collection) return respondError("NOT_FOUND", `Collection '${args.slug}' not found`);
 			return jsonResult(await expandCollectionBlockFields(ec.db, collection));
@@ -1536,7 +1586,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "schema:read");
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
-		const { handleBlockTypeList } = await import("../../../block-types-BQ90asVI.mjs").then((n) => n.t);
+		const { handleBlockTypeList } = await import("../../../block-types-DIG_KZwi.mjs").then((n) => n.t);
 		return unwrap(await handleBlockTypeList(ec.db));
 	});
 	server.registerTool("schema_get_block_type", {
@@ -1548,7 +1598,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "schema:read");
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
-		const { handleBlockTypeGet } = await import("../../../block-types-BQ90asVI.mjs").then((n) => n.t);
+		const { handleBlockTypeGet } = await import("../../../block-types-DIG_KZwi.mjs").then((n) => n.t);
 		return unwrap(await handleBlockTypeGet(ec.db, args.slug));
 	});
 	server.registerTool("schema_create_block_type", {
@@ -1559,7 +1609,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "schema:write");
 		requireRole(extra, Role.ADMIN);
 		const ec = getEmDash(extra);
-		const { handleBlockTypeCreate } = await import("../../../block-types-BQ90asVI.mjs").then((n) => n.t);
+		const { handleBlockTypeCreate } = await import("../../../block-types-DIG_KZwi.mjs").then((n) => n.t);
 		return unwrap(await handleBlockTypeCreate(ec.db, args));
 	});
 	server.registerTool("schema_update_block_type", {
@@ -1574,7 +1624,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getEmDash(extra);
 		const { slug, ...input } = args;
-		const { handleBlockTypeUpdate } = await import("../../../block-types-BQ90asVI.mjs").then((n) => n.t);
+		const { handleBlockTypeUpdate } = await import("../../../block-types-DIG_KZwi.mjs").then((n) => n.t);
 		return unwrap(await handleBlockTypeUpdate(ec.db, slug, input));
 	});
 	server.registerTool("schema_activate_block_type_version", {
@@ -1589,7 +1639,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "schema:write");
 		requireRole(extra, Role.ADMIN);
 		const ec = getEmDash(extra);
-		const { handleBlockTypeVersionActivate } = await import("../../../block-types-BQ90asVI.mjs").then((n) => n.t);
+		const { handleBlockTypeVersionActivate } = await import("../../../block-types-DIG_KZwi.mjs").then((n) => n.t);
 		return unwrap(await handleBlockTypeVersionActivate(ec.db, args.slug, args.version, args.expectedFingerprint));
 	});
 	server.registerTool("schema_create_collection", {
@@ -1600,7 +1650,7 @@ function createMcpServer(pluginTools = [], request) {
 			label: z.string().describe("Display name (plural, e.g. 'Blog Posts')"),
 			labelSingular: z.string().optional().describe("Singular display name (e.g. 'Blog Post')"),
 			description: z.string().optional().describe("Description of this collection"),
-			icon: z.string().optional().describe("Icon name for the admin UI"),
+			icon: createCollectionBody.shape.icon.describe("Icon name for the admin UI"),
 			supports: createCollectionBody.shape.supports.describe("Features to enable (default: ['drafts', 'revisions'])"),
 			routable: createCollectionBody.shape.routable.describe("Require a slug before publishing (default: true)"),
 			editLocking: createCollectionBody.shape.editLocking.describe("Take an edit lock when an entry is opened (default: true)"),
@@ -1611,7 +1661,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getEmDash(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-BAayK46S.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-BZPj3kwZ.mjs").then((n) => n.t);
 			const collection = await new SchemaRegistry(ec.db).createCollection({
 				slug: args.slug,
 				label: args.label,
@@ -1642,7 +1692,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getEmDash(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-BAayK46S.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-BZPj3kwZ.mjs").then((n) => n.t);
 			await new SchemaRegistry(ec.db).deleteCollection(args.slug, { force: args.force });
 			ec.invalidateUrlPatternCache();
 			return jsonResult({ deleted: args.slug });
@@ -1661,7 +1711,7 @@ function createMcpServer(pluginTools = [], request) {
 		const ec = getEmDash(extra);
 		const { slug, ...input } = args;
 		try {
-			const { handleSchemaCollectionUpdate } = await import("../../../schema-Gqcl-8G4.mjs").then((n) => n._);
+			const { handleSchemaCollectionUpdate } = await import("../../../schema-Berj5VQx.mjs").then((n) => n._);
 			const result = await handleSchemaCollectionUpdate(ec.db, slug, input);
 			if (result.success) ec.invalidateUrlPatternCache();
 			return unwrap(result);
@@ -1720,7 +1770,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getEmDash(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-BAayK46S.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-BZPj3kwZ.mjs").then((n) => n.t);
 			return jsonResult(await new SchemaRegistry(ec.db).createField(args.collection, {
 				slug: args.slug,
 				label: args.label,
@@ -1751,7 +1801,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getEmDash(extra);
 		try {
-			const { SchemaRegistry } = await import("../../../schema-BAayK46S.mjs").then((n) => n.t);
+			const { SchemaRegistry } = await import("../../../schema-BZPj3kwZ.mjs").then((n) => n.t);
 			await new SchemaRegistry(ec.db).deleteField(args.collection, args.fieldSlug);
 			return jsonResult({
 				deleted: args.fieldSlug,
@@ -1772,7 +1822,7 @@ function createMcpServer(pluginTools = [], request) {
 		const ec = getEmDash(extra);
 		const { collection, fieldSlug, ...input } = args;
 		try {
-			const { handleSchemaFieldUpdate } = await import("../../../schema-Gqcl-8G4.mjs").then((n) => n._);
+			const { handleSchemaFieldUpdate } = await import("../../../schema-Berj5VQx.mjs").then((n) => n._);
 			return unwrap(await handleSchemaFieldUpdate(ec.db, collection, fieldSlug, input));
 		} catch (error) {
 			return respondHandlerError(error, "SCHEMA_FIELD_UPDATE_ERROR");
@@ -1815,7 +1865,8 @@ function createMcpServer(pluginTools = [], request) {
 			filename: z.string().min(1).describe("Filename including extension (e.g. 'cover.png')"),
 			base64: z.string().describe("Base64-encoded file contents."),
 			contentType: z.string().regex(CONTENT_TYPE_RE, "Invalid content type").describe("MIME type (e.g. 'image/png')."),
-			alt: z.string().optional().describe("Alt text for accessibility")
+			alt: z.string().optional().describe("Alt text for accessibility"),
+			caption: z.string().optional().describe("Caption stored on the media record, such as the credit")
 		}),
 		annotations: { destructiveHint: false }
 	}, async (args, extra) => {
@@ -1829,6 +1880,7 @@ function createMcpServer(pluginTools = [], request) {
 				base64: args.base64,
 				contentType: args.contentType,
 				alt: args.alt,
+				caption: args.caption,
 				authorId: userId,
 				maxUploadSize: emdash.config.maxUploadSize
 			}));
@@ -1902,7 +1954,7 @@ function createMcpServer(pluginTools = [], request) {
 			};
 		} else input = { scope: "all" };
 		try {
-			const { handleMediaUsageRepair } = await import("../../../media-usage-D7Y64m6v.mjs").then((n) => n.o);
+			const { handleMediaUsageRepair } = await import("../../../media-usage-B8q0owWQ.mjs").then((n) => n.o);
 			return unwrap(await handleMediaUsageRepair(ec.db, input));
 		} catch (error) {
 			return respondHandlerError(error, "MEDIA_USAGE_REPAIR_ERROR");
@@ -1923,7 +1975,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "content:read");
 		const ec = getEmDash(extra);
 		try {
-			const { searchWithDb } = await import("../../../search-YJKPIEV6.mjs").then((n) => n.t);
+			const { searchWithDb } = await import("../../../search-thYf8j9F.mjs").then((n) => n.t);
 			return jsonResult(await searchWithDb(ec.db, args.query, {
 				collections: args.collections,
 				locale: args.locale,
@@ -1943,7 +1995,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "content:read");
 		const ec = getEmDash(extra);
 		try {
-			const { handleTaxonomyList } = await import("../../../taxonomies-Byyo7LOZ.mjs").then((n) => n.m);
+			const { handleTaxonomyList } = await import("../../../taxonomies-DQGomz9p.mjs").then((n) => n.m);
 			return unwrap(await handleTaxonomyList(ec.db, { locale: args.locale }));
 		} catch (error) {
 			return respondHandlerError(error, "TAXONOMY_LIST_ERROR");
@@ -1961,7 +2013,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "content:read");
 		const ec = getEmDash(extra);
 		try {
-			const { handleTaxonomyGet } = await import("../../../taxonomies-Byyo7LOZ.mjs").then((n) => n.m);
+			const { handleTaxonomyGet } = await import("../../../taxonomies-DQGomz9p.mjs").then((n) => n.m);
 			return unwrap(await handleTaxonomyGet(ec.db, args.name, { locale: args.locale }));
 		} catch (error) {
 			return respondHandlerError(error, "TAXONOMY_GET_ERROR");
@@ -1984,7 +2036,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleTaxonomyCreate } = await import("../../../taxonomies-Byyo7LOZ.mjs").then((n) => n.m);
+			const { handleTaxonomyCreate } = await import("../../../taxonomies-DQGomz9p.mjs").then((n) => n.m);
 			return unwrapAndInvalidate(extra, await handleTaxonomyCreate(ec.db, {
 				name: args.name,
 				label: args.label,
@@ -2014,7 +2066,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleTaxonomyUpdate } = await import("../../../taxonomies-Byyo7LOZ.mjs").then((n) => n.m);
+			const { handleTaxonomyUpdate } = await import("../../../taxonomies-DQGomz9p.mjs").then((n) => n.m);
 			return unwrapAndInvalidate(extra, await handleTaxonomyUpdate(ec.db, args.name, {
 				label: args.label,
 				labelSingular: args.labelSingular,
@@ -2036,7 +2088,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleTaxonomyDelete } = await import("../../../taxonomies-Byyo7LOZ.mjs").then((n) => n.m);
+			const { handleTaxonomyDelete } = await import("../../../taxonomies-DQGomz9p.mjs").then((n) => n.m);
 			return unwrapAndInvalidate(extra, await handleTaxonomyDelete(ec.db, args.name), [taxonomyTag(args.name)]);
 		} catch (error) {
 			return respondHandlerError(error, "TAXONOMY_DELETE_ERROR");
@@ -2056,13 +2108,13 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "content:read");
 		const ec = getEmDash(extra);
 		try {
-			const { handleTaxonomyList } = await import("../../../taxonomies-Byyo7LOZ.mjs").then((n) => n.m);
+			const { handleTaxonomyList } = await import("../../../taxonomies-DQGomz9p.mjs").then((n) => n.m);
 			const listResult = await handleTaxonomyList(ec.db, { locale: args.locale });
 			if (!listResult.success) return unwrap(listResult);
 			if (!listResult.data.taxonomies.find((t) => t.name === args.taxonomy)) return respondError("NOT_FOUND", `Taxonomy '${args.taxonomy}' not found`);
-			const { TaxonomyRepository } = await import("../../../taxonomy-CKDwM61Y.mjs").then((n) => n.n);
+			const { TaxonomyRepository } = await import("../../../taxonomy-BesdHIwi.mjs").then((n) => n.n);
 			const repo = new TaxonomyRepository(ec.db);
-			const limit = Math.min(args.limit ?? 50, 100);
+			const limit = Math.max(1, Math.min(args.limit ?? 50, 100));
 			let cursor;
 			if (args.cursor) try {
 				cursor = decodeTaxonomyCursor(args.cursor);
@@ -2121,7 +2173,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleTermCreate } = await import("../../../taxonomies-Byyo7LOZ.mjs").then((n) => n.m);
+			const { handleTermCreate } = await import("../../../taxonomies-DQGomz9p.mjs").then((n) => n.m);
 			return unwrapAndInvalidate(extra, await handleTermCreate(ec.db, args.taxonomy, {
 				slug: args.slug,
 				label: args.label,
@@ -2151,7 +2203,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleTermUpdate } = await import("../../../taxonomies-Byyo7LOZ.mjs").then((n) => n.m);
+			const { handleTermUpdate } = await import("../../../taxonomies-DQGomz9p.mjs").then((n) => n.m);
 			return unwrapAndInvalidate(extra, await handleTermUpdate(ec.db, args.taxonomy, args.termSlug, {
 				slug: args.slug,
 				label: args.label,
@@ -2176,7 +2228,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleTermDelete } = await import("../../../taxonomies-Byyo7LOZ.mjs").then((n) => n.m);
+			const { handleTermDelete } = await import("../../../taxonomies-DQGomz9p.mjs").then((n) => n.m);
 			return unwrapAndInvalidate(extra, await handleTermDelete(ec.db, args.taxonomy, args.termSlug, { locale: args.locale }), [taxonomyTag(args.taxonomy)]);
 		} catch (error) {
 			return respondHandlerError(error, "TAXONOMY_TERM_DELETE_ERROR");
@@ -2191,7 +2243,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "content:read");
 		const ec = getEmDash(extra);
 		try {
-			const { handleTermTranslations } = await import("../../../taxonomies-Byyo7LOZ.mjs").then((n) => n.m);
+			const { handleTermTranslations } = await import("../../../taxonomies-DQGomz9p.mjs").then((n) => n.m);
 			return unwrap(await handleTermTranslations(ec.db, args.id));
 		} catch (error) {
 			return respondHandlerError(error, "TERM_TRANSLATIONS_ERROR");
@@ -2206,7 +2258,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "content:read");
 		const ec = getEmDash(extra);
 		try {
-			const { handleMenuList } = await import("../../../menus-BtwjQt5s.mjs").then((n) => n.d);
+			const { handleMenuList } = await import("../../../menus-trvc6_fW.mjs").then((n) => n.d);
 			return unwrap(await handleMenuList(ec.db, { locale: args.locale }));
 		} catch (error) {
 			return respondHandlerError(error, "MENU_LIST_ERROR");
@@ -2224,7 +2276,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "content:read");
 		const ec = getEmDash(extra);
 		try {
-			const { handleMenuGet } = await import("../../../menus-BtwjQt5s.mjs").then((n) => n.d);
+			const { handleMenuGet } = await import("../../../menus-trvc6_fW.mjs").then((n) => n.d);
 			return unwrap(await handleMenuGet(ec.db, args.name, { locale: args.locale }));
 		} catch (error) {
 			return respondHandlerError(error, "MENU_GET_ERROR");
@@ -2239,7 +2291,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireScope(extra, "content:read");
 		const ec = getEmDash(extra);
 		try {
-			const { handleMenuTranslations } = await import("../../../menus-BtwjQt5s.mjs").then((n) => n.d);
+			const { handleMenuTranslations } = await import("../../../menus-trvc6_fW.mjs").then((n) => n.d);
 			return unwrap(await handleMenuTranslations(ec.db, args.id));
 		} catch (error) {
 			return respondHandlerError(error, "MENU_TRANSLATIONS_ERROR");
@@ -2259,7 +2311,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleMenuCreate } = await import("../../../menus-BtwjQt5s.mjs").then((n) => n.d);
+			const { handleMenuCreate } = await import("../../../menus-trvc6_fW.mjs").then((n) => n.d);
 			return unwrapAndInvalidate(extra, await handleMenuCreate(ec.db, {
 				name: args.name,
 				label: args.label,
@@ -2283,7 +2335,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleMenuUpdate } = await import("../../../menus-BtwjQt5s.mjs").then((n) => n.d);
+			const { handleMenuUpdate } = await import("../../../menus-trvc6_fW.mjs").then((n) => n.d);
 			return unwrapAndInvalidate(extra, await handleMenuUpdate(ec.db, args.name, {
 				label: args.label,
 				locale: args.locale
@@ -2305,7 +2357,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleMenuDelete } = await import("../../../menus-BtwjQt5s.mjs").then((n) => n.d);
+			const { handleMenuDelete } = await import("../../../menus-trvc6_fW.mjs").then((n) => n.d);
 			return unwrapAndInvalidate(extra, await handleMenuDelete(ec.db, args.name, { locale: args.locale }), [menuTag(args.name)]);
 		} catch (error) {
 			return respondHandlerError(error, "MENU_DELETE_ERROR");
@@ -2340,7 +2392,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleMenuSetItems } = await import("../../../menus-BtwjQt5s.mjs").then((n) => n.d);
+			const { handleMenuSetItems } = await import("../../../menus-trvc6_fW.mjs").then((n) => n.d);
 			return unwrapAndInvalidate(extra, await handleMenuSetItems(ec.db, args.name, args.items, { locale: args.locale }), [menuTag(args.name)]);
 		} catch (error) {
 			return respondHandlerError(error, "MENU_SET_ITEMS_ERROR");
@@ -2363,7 +2415,10 @@ function createMcpServer(pluginTools = [], request) {
 	server.registerTool("revision_restore", {
 		title: "Restore Revision",
 		description: "Restore a content item to a previous revision. Replaces the current draft with the specified revision's data. Not automatically published — use content_publish afterward if needed.",
-		inputSchema: z.object({ revisionId: z.string().describe("Revision ID to restore") })
+		inputSchema: z.object({
+			revisionId: z.string().describe("Revision ID to restore"),
+			overrideLock: z.boolean().optional().describe(OVERRIDE_LOCK_PARAM_DESCRIPTION)
+		})
 	}, async (args, extra) => {
 		requireScope(extra, "content:write");
 		requireRole(extra, Role.AUTHOR);
@@ -2375,6 +2430,8 @@ function createMcpServer(pluginTools = [], request) {
 		const existing = await emdash.handleContentGet(revItem.collection, revItem.entryId);
 		if (!existing.success) return unwrap(existing);
 		requireOwnership(extra, extractContentAuthorId(existing.data), "content:edit_own", "content:edit_any");
+		const locked = await refuseLockedEntry(extra, revItem.collection, revItem.entryId, args.overrideLock);
+		if (locked) return locked;
 		return unwrap(await emdash.handleRevisionRestore(args.revisionId, userId));
 	});
 	server.registerTool("settings_get", {
@@ -2387,7 +2444,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleSettingsGet } = await import("../../../settings-CNPUntkh.mjs").then((n) => n.r);
+			const { handleSettingsGet } = await import("../../../settings-BJjK_X7x.mjs").then((n) => n.r);
 			return unwrap(await handleSettingsGet(ec.db, ec.storage));
 		} catch (error) {
 			return respondHandlerError(error, "SETTINGS_READ_ERROR");
@@ -2413,7 +2470,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getEmDash(extra);
 		try {
-			const { handleSettingsUpdate } = await import("../../../settings-CNPUntkh.mjs").then((n) => n.r);
+			const { handleSettingsUpdate } = await import("../../../settings-BJjK_X7x.mjs").then((n) => n.r);
 			return unwrapAndInvalidate(extra, await handleSettingsUpdate(ec.db, ec.storage, args), [siteSettingsTag()]);
 		} catch (error) {
 			return respondHandlerError(error, "SETTINGS_UPDATE_ERROR");