Emdash source with visual editor image upload fix

Fixes:
1. media.ts: wrap placeholder generation in try-catch
2. toolbar.ts: check r.ok, display error message in popover

packages/core/tests/unit/auth/magic-link.test.ts

@@ -0,0 +1,53 @@
+import type { AuthAdapter, EmailSendFn } from "@emdash-cms/auth";
+import type { EmailMessage } from "@emdash-cms/auth";
+import { Role, sendMagicLink } from "@emdash-cms/auth";
+import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
+import type { Kysely } from "kysely";
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+
+import type { Database } from "../../../src/database/types.js";
+import { setupTestDatabase, teardownTestDatabase } from "../../utils/test-db.js";
+
+describe("Magic Link", () => {
+	let db: Kysely<Database>;
+	let adapter: AuthAdapter;
+	let mockEmailSend: EmailSendFn & ReturnType<typeof vi.fn>;
+	let sentEmails: Array<EmailMessage>;
+
+	beforeEach(async () => {
+		db = await setupTestDatabase();
+		adapter = createKyselyAdapter(db);
+		sentEmails = [];
+		mockEmailSend = vi.fn(async (email: EmailMessage) => {
+			sentEmails.push(email);
+		});
+	});
+
+	afterEach(async () => {
+		await teardownTestDatabase(db);
+	});
+
+	it("sends verify links through the injected EmDash auth route", async () => {
+		await adapter.createUser({
+			email: "author@example.com",
+			name: "Author",
+			role: Role.AUTHOR,
+			emailVerified: true,
+		});
+
+		await sendMagicLink(
+			{
+				baseUrl: "https://example.com",
+				siteName: "Test Site",
+				email: mockEmailSend,
+			},
+			adapter,
+			"author@example.com",
+		);
+
+		expect(mockEmailSend).toHaveBeenCalledOnce();
+		expect(sentEmails[0]!.text).toContain(
+			"https://example.com/_emdash/api/auth/magic-link/verify?token=",
+		);
+	});
+});