# `POST /category`

Protected. Requires a valid session cookie (`credentials: 'include'`).

Create category

Creates a category under an authorized parent.

## Body (JSON)

| Field | Required | Type | Description |
|-------|----------|------|-------------|
| `parentId` | yes | integer |  |
| `name` | yes | string |  |

```json
{
  "parentId": 1,
  "name": "New category"
}
```

## Signals

On success, emits SSE signal: `category` (see [`GET /events`](../events.md)).

## Response `201`

Created

```json
{
  "category": {
    "id": 1,
    "parentId": 1,
    "sort": 1,
    "name": "…"
  }
}
```

## Errors

| Status | Description |
|--------|-------------|
| 400 | Validation error — `{"error":"…"}` |
| 401 | Unauthorized — `{"error":"…"}` |
| 403 | Not authorized — `{"error":"…"}` |
| 404 | Parent not found — `{"error":"…"}` |

---

_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._