wiki-viewer 1.14.1 → 2.0.0

package/.next/standalone/pnpm-workspace.yaml

@@ -1,8 +0,0 @@
-allowBuilds:
-  '@prisma/client': set this to true or false
-  better-sqlite3: true
-  esbuild: true
-  sharp: true
-
-overrides:
-  kysely: 0.28.5

package/.next/standalone/postcss.config.mjs

@@ -1,2 +0,0 @@
-const config = { plugins: { tailwindcss: {}, autoprefixer: {} } };
-export default config;

package/.next/standalone/src/app/api/agent/activity/route.ts

@@ -1,59 +0,0 @@
-import { NextResponse } from "next/server";
-import { checkAuth, enforceScope } from "@/lib/proof/auth";
-import { resolveWorkspaceForAgent } from "@/lib/workspace-context";
-import {
-	aggregateActivity,
-	ACTIVITY_DEFAULT_LIMIT,
-	ACTIVITY_MAX_LIMIT,
-} from "@/lib/proof/activity";
-import { matchGlob } from "@/lib/proof/glob";
-
-export const runtime = "nodejs";
-
-export async function GET(req: Request): Promise<NextResponse> {
-	const auth = await checkAuth(req);
-	if (!auth.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const wsx = await resolveWorkspaceForAgent(req);
-	if (!wsx.ok) {
-		return NextResponse.json({ error: wsx.code }, { status: wsx.status });
-	}
-	const { ws, rootDir } = wsx;
-
-	const scopeCheck = enforceScope(auth.agent, { op: "read", workspaceId: ws.id });
-	if (!scopeCheck.ok) {
-		return NextResponse.json({ error: scopeCheck.code, message: scopeCheck.message }, { status: 403 });
-	}
-
-	const url = new URL(req.url);
-	const rawLimit = url.searchParams.get("limit");
-	const fileFilter = url.searchParams.get("file") ?? undefined;
-
-	// Enforce scope on explicit file query parameter
-	if (fileFilter) {
-		const fileScope = enforceScope(auth.agent, { filePath: fileFilter, op: "read", workspaceId: ws.id });
-		if (!fileScope.ok) {
-			return NextResponse.json({ error: fileScope.code, message: fileScope.message }, { status: 403 });
-		}
-	}
-
-	let limit = ACTIVITY_DEFAULT_LIMIT;
-	if (rawLimit !== null) {
-		const parsed = parseInt(rawLimit, 10);
-		if (!isNaN(parsed) && parsed > 0) {
-			limit = Math.min(parsed, ACTIVITY_MAX_LIMIT);
-		}
-	}
-
-	const events = await aggregateActivity(rootDir, { limit, file: fileFilter });
-
-	// Post-aggregation filter: drop events whose path falls outside agent scope
-	const scopedPaths = auth.agent.scope.paths;
-	const filtered = events.filter((ev) =>
-		scopedPaths.some((pattern) => matchGlob(pattern, ev.path)),
-	);
-
-	return NextResponse.json({ events: filtered, count: filtered.length });
-}

package/.next/standalone/src/app/api/agent/admin/agents/[agentId]/revoke/route.ts

@@ -1,40 +0,0 @@
-/**
- * POST /api/agent/admin/agents/:agentId/revoke
- *
- * Revoke (remove) a registered agent. Requires authenticated user session.
- */
-import { NextResponse } from "next/server";
-import { requireUser } from "@/lib/auth/server";
-import { readRegistry, removeAgent } from "@/lib/proof/registry";
-
-export const runtime = "nodejs";
-
-export async function POST(
-	req: Request,
-	{ params }: { params: Promise<{ agentId: string }> },
-): Promise<NextResponse> {
-	const owner = await requireUser(req);
-	if (!owner.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const { agentId } = await params;
-
-	// Check ownership before removal. Legacy agents (no ownerUserId) are
-	// revocable by any authenticated user.
-	const registry = await readRegistry();
-	const agent = (registry?.agents ?? []).find((a) => a.id === agentId);
-	if (!agent) {
-		return NextResponse.json({ error: "NOT_FOUND", message: "Agent not found" }, { status: 404 });
-	}
-	if (agent.ownerUserId !== undefined && agent.ownerUserId !== owner.user.id) {
-		return NextResponse.json({ error: "FORBIDDEN", message: "You do not own this agent" }, { status: 403 });
-	}
-
-	const removed = await removeAgent(agentId);
-	if (!removed) {
-		return NextResponse.json({ error: "NOT_FOUND", message: "Agent not found" }, { status: 404 });
-	}
-
-	return NextResponse.json({ ok: true });
-}

package/.next/standalone/src/app/api/agent/admin/agents/route.ts

@@ -1,33 +0,0 @@
-/**
- * GET /api/agent/admin/agents
- *
- * List registered agents (no token hashes). Requires authenticated user session.
- */
-import { NextResponse } from "next/server";
-import { requireUser } from "@/lib/auth/server";
-import { readRegistry } from "@/lib/proof/registry";
-
-export const runtime = "nodejs";
-
-export async function GET(req: Request): Promise<NextResponse> {
-	const owner = await requireUser(req);
-	if (!owner.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const registry = await readRegistry();
-	// Show agents owned by this user. Legacy agents (no ownerUserId) are visible
-	// to all authenticated users for back-compat.
-	const agents = (registry?.agents ?? [])
-		.filter((a) => a.ownerUserId === undefined || a.ownerUserId === owner.user.id)
-		.map((a) => ({
-			id: a.id,
-			displayName: a.displayName,
-			scope: a.scope,
-			createdAt: a.createdAt,
-			lastSeen: a.lastSeen,
-			ownerUserId: a.ownerUserId,
-		}));
-
-	return NextResponse.json({ agents });
-}

package/.next/standalone/src/app/api/agent/admin/registrations/[regId]/approve/route.ts

@@ -1,83 +0,0 @@
-/**
- * POST /api/agent/admin/registrations/:regId/approve
- *
- * Approve a pending registration. Mints a token, stores agent, marks for pickup.
- * Requires authenticated user session.
- *
- * Body (optional): { scope?: AgentScope }  — override requested scope.
- */
-import { randomBytes } from "node:crypto";
-import { NextResponse } from "next/server";
-import { requireUser } from "@/lib/auth/server";
-import { getRegistration, approveRegistration } from "@/lib/proof/pending";
-import { addAgent, hashToken } from "@/lib/proof/registry";
-import type { AgentScope } from "@/lib/proof/registry";
-import { validateScope } from "@/app/api/agent/register/route";
-
-export const runtime = "nodejs";
-
-export async function POST(
-	req: Request,
-	{ params }: { params: Promise<{ regId: string }> },
-): Promise<NextResponse> {
-	const owner = await requireUser(req);
-	if (!owner.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const { regId } = await params;
-	const reg = getRegistration(regId);
-	if (!reg) {
-		return NextResponse.json({ error: "NOT_FOUND", message: "Registration not found" }, { status: 404 });
-	}
-	if (reg.status !== "pending") {
-		return NextResponse.json(
-			{ error: "CONFLICT", message: `Registration is already ${reg.status}` },
-			{ status: 409 },
-		);
-	}
-
-	// Optional scope override — validate if present
-	let scope: AgentScope = reg.requestedScope;
-	try {
-		const body = (await req.json()) as { scope?: unknown };
-		if (body.scope !== undefined && body.scope !== null) {
-			if (typeof body.scope !== "object" || Array.isArray(body.scope)) {
-				return NextResponse.json(
-					{ error: "INVALID_PAYLOAD", message: "scope must be an object" },
-					{ status: 400 },
-				);
-			}
-			const result = validateScope(body.scope as Record<string, unknown>);
-			if ("error" in result) {
-				return NextResponse.json(
-					{ error: "INVALID_PAYLOAD", message: result.error },
-					{ status: 400 },
-				);
-			}
-			scope = result;
-		}
-	} catch {
-		// No body or invalid JSON — use requestedScope
-	}
-
-	// Mint token
-	const tokenPlaintext = randomBytes(32).toString("hex");
-	const tokenHash = hashToken(tokenPlaintext);
-
-	// Store agent in registry, bound to the approving user.
-	await addAgent({
-		id: reg.agentId,
-		displayName: reg.displayName,
-		tokenHash,
-		scope,
-		createdAt: new Date().toISOString(),
-		lastSeen: new Date().toISOString(),
-		ownerUserId: owner.user.id,
-	});
-
-	// Mark as approved with one-shot pickup token
-	approveRegistration(regId, tokenPlaintext);
-
-	return NextResponse.json({ ok: true, agentId: reg.agentId });
-}

package/.next/standalone/src/app/api/agent/admin/registrations/[regId]/deny/route.ts

@@ -1,36 +0,0 @@
-/**
- * POST /api/agent/admin/registrations/:regId/deny
- *
- * Deny a pending registration. Requires authenticated user session.
- */
-import { NextResponse } from "next/server";
-import { requireUser } from "@/lib/auth/server";
-import { getRegistration, denyRegistration } from "@/lib/proof/pending";
-
-export const runtime = "nodejs";
-
-export async function POST(
-	req: Request,
-	{ params }: { params: Promise<{ regId: string }> },
-): Promise<NextResponse> {
-	const owner = await requireUser(req);
-	if (!owner.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const { regId } = await params;
-	const reg = getRegistration(regId);
-	if (!reg) {
-		return NextResponse.json({ error: "NOT_FOUND", message: "Registration not found" }, { status: 404 });
-	}
-	if (reg.status !== "pending") {
-		return NextResponse.json(
-			{ error: "CONFLICT", message: `Registration is already ${reg.status}` },
-			{ status: 409 },
-		);
-	}
-
-	denyRegistration(regId);
-
-	return NextResponse.json({ ok: true });
-}

package/.next/standalone/src/app/api/agent/admin/registrations/route.ts

@@ -1,27 +0,0 @@
-/**
- * GET /api/agent/admin/registrations
- *
- * List pending registrations. Requires authenticated user session.
- */
-import { NextResponse } from "next/server";
-import { requireUser } from "@/lib/auth/server";
-import { listPendingRegistrations } from "@/lib/proof/pending";
-
-export const runtime = "nodejs";
-
-export async function GET(req: Request): Promise<NextResponse> {
-	const owner = await requireUser(req);
-	if (!owner.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const pending = listPendingRegistrations().map((r) => ({
-		registrationId: r.registrationId,
-		agentId: r.agentId,
-		displayName: r.displayName,
-		requestedScope: r.requestedScope,
-		requestedAt: r.requestedAt,
-	}));
-
-	return NextResponse.json({ pending });
-}

package/.next/standalone/src/app/api/agent/events/[...path]/route.ts

@@ -1,148 +0,0 @@
-import { NextResponse } from "next/server";
-import { checkAuth, enforceScope, verifyBy } from "@/lib/proof/auth";
-import { readSidecar, writeSidecar, emptySidecar } from "@/lib/proof/sidecar";
-import { pollEvents } from "@/lib/proof/event-bus";
-import { withFileMutex } from "@/lib/proof/mutex";
-import { resolveWorkspaceForAgent } from "@/lib/workspace-context";
-import { safeWorkspacePath } from "@/lib/workspaces";
-
-export const runtime = "nodejs";
-
-const DEFAULT_LIMIT = 100;
-const MAX_LIMIT = 1000;
-
-function isMarkdown(p: string): boolean {
-	return p.endsWith(".md") || p.endsWith(".markdown");
-}
-
-function mdPath(segments: string[]): string {
-	return segments.join("/");
-}
-
-// GET /api/agent/events/<path> — poll events since `after`
-export async function GET(
-	req: Request,
-	{ params }: { params: Promise<{ path: string[] }> },
-): Promise<NextResponse> {
-	const auth = await checkAuth(req);
-	if (!auth.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const wsx = await resolveWorkspaceForAgent(req);
-	if (!wsx.ok) {
-		return NextResponse.json({ error: wsx.code }, { status: wsx.status });
-	}
-	const { ws, rootDir } = wsx;
-
-	const { path: segments } = await params;
-	const rel = mdPath(segments);
-
-	if (rel.startsWith(".proof")) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path must not be under .proof" }, { status: 400 });
-	}
-	if (!isMarkdown(rel)) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path must be .md or .markdown" }, { status: 400 });
-	}
-
-	const absPath = safeWorkspacePath(rootDir, rel);
-	if (!absPath) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path traversal rejected" }, { status: 400 });
-	}
-
-	const scopeCheck = enforceScope(auth.agent, { filePath: rel, op: "read", workspaceId: ws.id });
-	if (!scopeCheck.ok) {
-		return NextResponse.json({ error: scopeCheck.code, message: scopeCheck.message }, { status: 403 });
-	}
-
-	const { searchParams } = new URL(req.url);
-	const afterRaw = searchParams.get("after");
-	const limitRaw = searchParams.get("limit");
-
-	const after = afterRaw !== null ? parseInt(afterRaw, 10) : 0;
-	let limit = limitRaw !== null ? parseInt(limitRaw, 10) : DEFAULT_LIMIT;
-
-	if (Number.isNaN(after) || after < 0) {
-		return NextResponse.json({ error: "INVALID_PARAM", message: "after must be a non-negative integer" }, { status: 400 });
-	}
-	if (Number.isNaN(limit) || limit <= 0) {
-		limit = DEFAULT_LIMIT;
-	}
-	if (limit > MAX_LIMIT) {
-		limit = MAX_LIMIT;
-	}
-
-	const sidecar = (await readSidecar(rootDir, rel)) ?? emptySidecar(rel);
-	const events = pollEvents(sidecar, after, limit);
-	const lastEventId = sidecar.nextEventId - 1;
-
-	return NextResponse.json({ events, lastEventId });
-}
-
-// POST /api/agent/events/<path> — acknowledge events up to upToId
-export async function POST(
-	req: Request,
-	{ params }: { params: Promise<{ path: string[] }> },
-): Promise<NextResponse> {
-	const auth = await checkAuth(req);
-	if (!auth.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const wsx = await resolveWorkspaceForAgent(req, "write");
-	if (!wsx.ok) {
-		return NextResponse.json({ error: wsx.code }, { status: wsx.status });
-	}
-	const { ws, rootDir } = wsx;
-
-	const { path: segments } = await params;
-	const rel = mdPath(segments);
-
-	if (rel.startsWith(".proof")) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path must not be under .proof" }, { status: 400 });
-	}
-	if (!isMarkdown(rel)) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path must be .md or .markdown" }, { status: 400 });
-	}
-
-	const absPath = safeWorkspacePath(rootDir, rel);
-	if (!absPath) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path traversal rejected" }, { status: 400 });
-	}
-
-	const scopeCheck = enforceScope(auth.agent, { filePath: rel, op: "mutate", workspaceId: ws.id });
-	if (!scopeCheck.ok) {
-		return NextResponse.json({ error: scopeCheck.code, message: scopeCheck.message }, { status: 403 });
-	}
-
-	let body: { upToId?: unknown; by?: unknown };
-	try {
-		body = (await req.json()) as { upToId?: unknown; by?: unknown };
-	} catch {
-		return NextResponse.json({ error: "INVALID_PAYLOAD", message: "Invalid JSON" }, { status: 400 });
-	}
-
-	if (typeof body.upToId !== "number") {
-		return NextResponse.json({ error: "INVALID_PAYLOAD", message: "upToId (number) required" }, { status: 400 });
-	}
-	if (typeof body.by !== "string" || !body.by) {
-		return NextResponse.json({ error: "INVALID_PAYLOAD", message: "by (string) required" }, { status: 400 });
-	}
-
-	const byCheck = verifyBy(auth.agent, body.by as string);
-	if (!byCheck.ok) {
-		return NextResponse.json({ error: byCheck.code, message: byCheck.message }, { status: 403 });
-	}
-
-	const upToId = body.upToId as number;
-	const by = body.by as string;
-
-	// Namespace mutex key with rootDir to prevent cross-workspace lock contention.
-	await withFileMutex(`${rootDir}\0${rel}`, async () => {
-		const sidecar = (await readSidecar(rootDir, rel)) ?? emptySidecar(rel);
-		sidecar.lastAck[by] = upToId;
-		await writeSidecar(rootDir, rel, sidecar);
-	});
-
-	return NextResponse.json({ ok: true });
-}

package/.next/standalone/src/app/api/agent/files/[...path]/route.ts

@@ -1,219 +0,0 @@
-/**
- * Agent files route — GET snapshot, POST apply-ops.
- *
- * Sample curl (§10 step 1 — read snapshot):
- *   curl -H "Authorization: Bearer $AGENT_BEARER_TOKEN" \
- *        http://localhost:3000/api/agent/files/notes.md
- *
- * Sample curl (§10 step 2 — apply ops):
- *   curl -X POST \
- *        -H "Authorization: Bearer $AGENT_BEARER_TOKEN" \
- *        -H "Content-Type: application/json" \
- *        -H "Idempotency-Key: req-$(uuidgen)" \
- *        -d '{"baseRevision":0,"by":"ai:claude","ops":[{"type":"block.append","markdown":"Hello world."}]}' \
- *        http://localhost:3000/api/agent/files/notes.md
- */
-import { createHash } from "node:crypto";
-import { NextResponse } from "next/server";
-import { checkAuth, enforceScope, verifyBy } from "@/lib/proof/auth";
-import { applyOps, readSnapshot } from "@/lib/proof/ops-applier";
-import { idempotency } from "@/lib/proof/idempotency";
-import { resolveWorkspaceForAgent } from "@/lib/workspace-context";
-import { safeWorkspacePath } from "@/lib/workspaces";
-import type { Op } from "@/lib/proof/types";
-import { checkAndConsume } from "@/lib/proof/rate-limit";
-import { computeCollabState } from "@/lib/proof/collab-state";
-
-export const runtime = "nodejs";
-
-function isMarkdown(p: string): boolean {
-	return p.endsWith(".md") || p.endsWith(".markdown");
-}
-
-function mdPath(segments: string[]): string {
-	return segments.join("/");
-}
-
-export async function GET(
-	req: Request,
-	{ params }: { params: Promise<{ path: string[] }> },
-): Promise<NextResponse> {
-	const auth = await checkAuth(req);
-	if (!auth.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const { path: segments } = await params;
-	const rel = mdPath(segments);
-
-	if (rel.startsWith(".proof")) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path must not be under .proof" }, { status: 400 });
-	}
-	if (!isMarkdown(rel)) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path must be .md or .markdown" }, { status: 400 });
-	}
-
-	const wsx = await resolveWorkspaceForAgent(req);
-	if (!wsx.ok) return NextResponse.json({ error: wsx.code }, { status: wsx.status });
-	const { ws, rootDir } = wsx;
-
-	const absPath = safeWorkspacePath(rootDir, rel);
-	if (!absPath) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path traversal rejected" }, { status: 400 });
-	}
-
-	const scopeCheck = enforceScope(auth.agent, { filePath: rel, op: "read", workspaceId: ws.id });
-	if (!scopeCheck.ok) {
-		return NextResponse.json({ error: scopeCheck.code, message: scopeCheck.message }, { status: 403 });
-	}
-
-	const snapshot = await readSnapshot(rootDir, rel);
-	if (!snapshot) {
-		return NextResponse.json({ error: "NOT_FOUND", message: "File not found" }, { status: 404 });
-	}
-
-	const collab = await computeCollabState(rootDir, rel);
-	const collabHeaders: Record<string, string> = {
-		"X-Collab-State": collab.state,
-		"X-Collab-Revision": String(collab.revision),
-	};
-	if (collab.snapshotUrl) {
-		collabHeaders["X-Collab-Snapshot"] = collab.snapshotUrl;
-	}
-
-	return NextResponse.json(snapshot, { headers: collabHeaders });
-}
-
-export async function POST(
-	req: Request,
-	{ params }: { params: Promise<{ path: string[] }> },
-): Promise<NextResponse> {
-	const auth = await checkAuth(req);
-	if (!auth.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const idempotencyKey = req.headers.get("idempotency-key");
-	if (!idempotencyKey) {
-		return NextResponse.json(
-			{ error: "MISSING_IDEMPOTENCY_KEY", message: "Idempotency-Key header is required" },
-			{ status: 400 },
-		);
-	}
-
-	const { path: segments } = await params;
-	const rel = mdPath(segments);
-
-	if (rel.startsWith(".proof")) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path must not be under .proof" }, { status: 400 });
-	}
-	if (!isMarkdown(rel)) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path must be .md or .markdown" }, { status: 400 });
-	}
-
-	const wsx = await resolveWorkspaceForAgent(req, "write");
-	if (!wsx.ok) return NextResponse.json({ error: wsx.code }, { status: wsx.status });
-	const { ws, rootDir } = wsx;
-
-	const absPath = safeWorkspacePath(rootDir, rel);
-	if (!absPath) {
-		return NextResponse.json({ error: "INVALID_PATH", message: "Path traversal rejected" }, { status: 400 });
-	}
-
-	// Read body for idempotency hash
-	let rawBody: string;
-	try {
-		rawBody = await req.text();
-	} catch {
-		return NextResponse.json({ error: "INVALID_PAYLOAD", message: "Could not read request body" }, { status: 400 });
-	}
-
-	const payloadHash = createHash("sha256").update(rawBody, "utf8").digest("hex");
-
-	// Check idempotency cache
-	const cached = idempotency.get(`${rootDir}\u0000${idempotencyKey}`);
-	if (cached) {
-		if (cached.payloadHash !== payloadHash) {
-			return NextResponse.json(
-				{ error: "IDEMPOTENCY_KEY_REUSED", message: "Same key, different payload" },
-				{ status: 409 },
-			);
-		}
-		return new NextResponse(cached.body, {
-			status: cached.status,
-			headers: { "Content-Type": "application/json" },
-		});
-	}
-
-	let body: { baseRevision?: unknown; by?: unknown; ops?: unknown };
-	try {
-		body = JSON.parse(rawBody) as { baseRevision?: unknown; by?: unknown; ops?: unknown };
-	} catch {
-		return NextResponse.json({ error: "INVALID_PAYLOAD", message: "Invalid JSON" }, { status: 400 });
-	}
-
-	if (typeof body.baseRevision !== "number") {
-		return NextResponse.json({ error: "INVALID_PAYLOAD", message: "baseRevision (number) required" }, { status: 400 });
-	}
-	if (typeof body.by !== "string" || !body.by) {
-		return NextResponse.json({ error: "INVALID_PAYLOAD", message: "by (string) required" }, { status: 400 });
-	}
-	if (!Array.isArray(body.ops)) {
-		return NextResponse.json({ error: "INVALID_PAYLOAD", message: "ops (array) required" }, { status: 400 });
-	}
-
-	const scopeCheck = enforceScope(auth.agent, { filePath: rel, op: "mutate", workspaceId: ws.id });
-	if (!scopeCheck.ok) {
-		return NextResponse.json({ error: scopeCheck.code, message: scopeCheck.message }, { status: 403 });
-	}
-
-	const byCheck = verifyBy(auth.agent, body.by as string);
-	if (!byCheck.ok) {
-		return NextResponse.json({ error: byCheck.code, message: byCheck.message }, { status: 403 });
-	}
-
-	// Rate-limit mutations: count ops (all ops are mutations in this route)
-	const opCount = (body.ops as Op[]).length || 1;
-	const rl = checkAndConsume(body.by as string, opCount);
-	if (!rl.ok) {
-		const retryAfterSec = Math.ceil(rl.retryAfterMs / 1000);
-		return new NextResponse(
-			JSON.stringify({ error: "RATE_LIMITED", retryAfterMs: rl.retryAfterMs }),
-			{
-				status: 429,
-				headers: {
-					"Content-Type": "application/json",
-					"Retry-After": String(retryAfterSec),
-				},
-			},
-		);
-	}
-
-	const result = await applyOps({
-		rootDir,
-		mdPath: rel,
-		baseRevision: body.baseRevision as number,
-		by: body.by as string,
-		ops: body.ops as Op[],
-	});
-
-	let responseBody: string;
-	let status: number;
-
-	if (result.ok) {
-		status = 200;
-		responseBody = JSON.stringify(result.snapshot);
-	} else {
-		status = result.status;
-		const payload: Record<string, unknown> = { error: result.code, message: result.message };
-		if (result.snapshot) payload.snapshot = result.snapshot;
-		responseBody = JSON.stringify(payload);
-	}
-
-	idempotency.set(`${rootDir}\u0000${idempotencyKey}`, { payloadHash, status, body: responseBody });
-
-	return new NextResponse(responseBody, {
-		status,
-		headers: { "Content-Type": "application/json" },
-	});
-}