Emdash source with visual editor image upload fix

Fixes:
1. media.ts: wrap placeholder generation in try-catch
2. toolbar.ts: check r.ok, display error message in popover

packages/auth-atproto/src/routes/login.ts

@@ -0,0 +1,52 @@
+/**
+ * POST /_emdash/api/auth/atproto/login
+ *
+ * Initiates the AT Protocol OAuth flow by generating an authorization URL.
+ * The client should redirect the browser to the returned URL.
+ */
+
+import type { APIRoute } from "astro";
+
+export const prerender = false;
+
+import type { ActorIdentifier } from "@atcute/lexicons";
+import {
+	apiError,
+	apiSuccess,
+	getPublicOrigin,
+	handleError,
+	isParseError,
+	parseBody,
+} from "emdash/api/route-utils";
+import { atprotoLoginBody } from "emdash/api/schemas";
+
+export const POST: APIRoute = async ({ request, locals }) => {
+	const { emdash } = locals;
+
+	if (!emdash?.db) {
+		return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	}
+
+	try {
+		const body = await parseBody(request, atprotoLoginBody);
+		if (isParseError(body)) return body;
+
+		const url = new URL(request.url);
+		const baseUrl = getPublicOrigin(url, emdash?.config);
+
+		const { getAtprotoOAuthClient } = await import("@emdash-cms/auth-atproto/oauth-client");
+		const { getAtprotoStorage } = await import("../storage.js");
+		// eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- emdash locals satisfy EmdashLocals shape required by getAtprotoStorage
+		const storage = await getAtprotoStorage(emdash as Parameters<typeof getAtprotoStorage>[0]);
+		const client = await getAtprotoOAuthClient(baseUrl, storage);
+
+		const { url: authUrl } = await client.authorize({
+			// eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- body.handle is a validated string, ActorIdentifier is atcute's branded type
+			target: { type: "account", identifier: body.handle as ActorIdentifier },
+		});
+
+		return apiSuccess({ url: authUrl.toString() });
+	} catch (error) {
+		return handleError(error, "Failed to start AT Protocol login", "ATPROTO_LOGIN_ERROR");
+	}
+};