@aphexcms/cms-core 0.1.1 → 0.1.4

package/src/routes/organizations-members.ts

@@ -1,301 +0,0 @@
-// Aphex CMS Organization Members API Handlers
-import { json } from '@sveltejs/kit';
-import type { RequestHandler } from '@sveltejs/kit';
-
-// GET /api/organizations/members - List organization members
-export const GET: RequestHandler = async ({ locals }) => {
-	try {
-		const { databaseAdapter } = locals.aphexCMS;
-		const auth = locals.auth;
-
-		if (!auth || auth.type !== 'session') {
-			return json(
-				{
-					success: false,
-					error: 'Unauthorized',
-					message: 'Session authentication required'
-				},
-				{ status: 401 }
-			);
-		}
-
-		// Get members of the current active organization
-		const members = await databaseAdapter.findOrganizationMembers(auth.organizationId);
-
-		return json({
-			success: true,
-			data: members
-		});
-	} catch (error) {
-		console.error('Failed to fetch organization members:', error);
-		return json(
-			{
-				success: false,
-				error: 'Failed to fetch members',
-				message: error instanceof Error ? error.message : 'Unknown error'
-			},
-			{ status: 500 }
-		);
-	}
-};
-
-// DELETE /api/organizations/members - Remove a member
-export const DELETE: RequestHandler = async ({ request, locals }) => {
-	try {
-		const { databaseAdapter } = locals.aphexCMS;
-		const auth = locals.auth;
-
-		if (!auth || auth.type !== 'session') {
-			return json(
-				{
-					success: false,
-					error: 'Unauthorized',
-					message: 'Session authentication required'
-				},
-				{ status: 401 }
-			);
-		}
-
-		// Only owners and admins can remove members
-		if (auth.organizationRole !== 'owner' && auth.organizationRole !== 'admin') {
-			return json(
-				{
-					success: false,
-					error: 'Forbidden',
-					message: 'Only owners and admins can remove members'
-				},
-				{ status: 403 }
-			);
-		}
-
-		const body = await request.json();
-
-		if (!body.userId) {
-			return json(
-				{
-					success: false,
-					error: 'Missing required field',
-					message: 'userId is required'
-				},
-				{ status: 400 }
-			);
-		}
-
-		// Prevent removing yourself
-		if (body.userId === auth.user.id) {
-			return json(
-				{
-					success: false,
-					error: 'Invalid operation',
-					message: 'You cannot remove yourself from the organization'
-				},
-				{ status: 400 }
-			);
-		}
-
-		// Get the target member's role
-		const targetMember = await databaseAdapter.findUserMembership(body.userId, auth.organizationId);
-
-		if (!targetMember) {
-			return json(
-				{
-					success: false,
-					error: 'Member not found',
-					message: 'User is not a member of this organization'
-				},
-				{ status: 404 }
-			);
-		}
-
-		// Admins cannot remove owners
-		if (auth.organizationRole === 'admin' && targetMember.role === 'owner') {
-			return json(
-				{
-					success: false,
-					error: 'Forbidden',
-					message: 'Admins cannot remove owners'
-				},
-				{ status: 403 }
-			);
-		}
-
-		// Remove the member
-		const removed = await databaseAdapter.removeMember(auth.organizationId, body.userId);
-
-		if (!removed) {
-			return json(
-				{
-					success: false,
-					error: 'Failed to remove member'
-				},
-				{ status: 500 }
-			);
-		}
-
-		// Clear the user's session if their active org is the one they were removed from
-		const userSession = await databaseAdapter.findUserSession(body.userId);
-		if (userSession?.activeOrganizationId === auth.organizationId) {
-			console.log(
-				`[Organizations]: Clearing user session for ${body.userId} - removed from active org ${auth.organizationId}`
-			);
-
-			// Check if user has other organizations
-			const otherOrgs = await databaseAdapter.findUserOrganizations(body.userId);
-			if (otherOrgs.length > 0 && otherOrgs[0]) {
-				// Set their first remaining org as active
-				await databaseAdapter.updateUserSession(body.userId, otherOrgs[0].organization.id);
-				console.log(
-					`[Organizations]: Set org ${otherOrgs[0].organization.id} as new active org for ${body.userId}`
-				);
-			} else {
-				// No other orgs - delete the session so invitations can be processed on next login
-				await databaseAdapter.deleteUserSession(body.userId);
-				console.log(
-					`[Organizations]: Deleted user session for ${body.userId} - no remaining organizations`
-				);
-			}
-		}
-
-		return json({
-			success: true,
-			message: 'Member removed successfully'
-		});
-	} catch (error) {
-		console.error('Failed to remove member:', error);
-		return json(
-			{
-				success: false,
-				error: 'Failed to remove member',
-				message: error instanceof Error ? error.message : 'Unknown error'
-			},
-			{ status: 500 }
-		);
-	}
-};
-
-// PATCH /api/organizations/members - Update member role
-export const PATCH: RequestHandler = async ({ request, locals }) => {
-	try {
-		const { databaseAdapter } = locals.aphexCMS;
-		const auth = locals.auth;
-
-		if (!auth || auth.type !== 'session') {
-			return json(
-				{
-					success: false,
-					error: 'Unauthorized',
-					message: 'Session authentication required'
-				},
-				{ status: 401 }
-			);
-		}
-
-		// Only owners and admins can update roles
-		if (auth.organizationRole !== 'owner' && auth.organizationRole !== 'admin') {
-			return json(
-				{
-					success: false,
-					error: 'Forbidden',
-					message: 'Only owners and admins can update member roles'
-				},
-				{ status: 403 }
-			);
-		}
-
-		const body = await request.json();
-
-		if (!body.userId || !body.role) {
-			return json(
-				{
-					success: false,
-					error: 'Missing required fields',
-					message: 'userId and role are required'
-				},
-				{ status: 400 }
-			);
-		}
-
-		// Validate role
-		const validRoles = ['owner', 'admin', 'editor', 'viewer'];
-		if (!validRoles.includes(body.role)) {
-			return json(
-				{
-					success: false,
-					error: 'Invalid role',
-					message: 'Role must be one of: owner, admin, editor, viewer'
-				},
-				{ status: 400 }
-			);
-		}
-
-		// Prevent changing your own role
-		if (body.userId === auth.user.id) {
-			return json(
-				{
-					success: false,
-					error: 'Invalid operation',
-					message: 'You cannot change your own role'
-				},
-				{ status: 400 }
-			);
-		}
-
-		// Get the target member's current role
-		const targetMember = await databaseAdapter.findUserMembership(body.userId, auth.organizationId);
-
-		if (!targetMember) {
-			return json(
-				{
-					success: false,
-					error: 'Member not found',
-					message: 'User is not a member of this organization'
-				},
-				{ status: 404 }
-			);
-		}
-
-		// Admins cannot modify owners
-		if (auth.organizationRole === 'admin' && targetMember.role === 'owner') {
-			return json(
-				{
-					success: false,
-					error: 'Forbidden',
-					message: 'Admins cannot modify owner roles'
-				},
-				{ status: 403 }
-			);
-		}
-
-		// Update the role
-		const updatedMember = await databaseAdapter.updateMemberRole(
-			auth.organizationId,
-			body.userId,
-			body.role
-		);
-
-		if (!updatedMember) {
-			return json(
-				{
-					success: false,
-					error: 'Failed to update role'
-				},
-				{ status: 500 }
-			);
-		}
-
-		return json({
-			success: true,
-			data: updatedMember
-		});
-	} catch (error) {
-		console.error('Failed to update member role:', error);
-		return json(
-			{
-				success: false,
-				error: 'Failed to update role',
-				message: error instanceof Error ? error.message : 'Unknown error'
-			},
-			{ status: 500 }
-		);
-	}
-};

package/src/routes/organizations-switch.ts

@@ -1,74 +0,0 @@
-// Aphex CMS Organization Switch API Handler
-import { json } from '@sveltejs/kit';
-import type { RequestHandler } from '@sveltejs/kit';
-
-// POST /api/organizations/switch - Switch active organization
-export const POST: RequestHandler = async ({ request, locals }) => {
-	try {
-		const { databaseAdapter } = locals.aphexCMS;
-		const auth = locals.auth;
-
-		if (!auth || auth.type !== 'session') {
-			return json(
-				{
-					success: false,
-					error: 'Unauthorized',
-					message: 'Session authentication required'
-				},
-				{ status: 401 }
-			);
-		}
-
-		const body = await request.json();
-
-		if (!body.organizationId) {
-			return json(
-				{
-					success: false,
-					error: 'Missing required field',
-					message: 'organizationId is required'
-				},
-				{ status: 400 }
-			);
-		}
-
-		// Verify user is a member of the target organization
-		const membership = await databaseAdapter.findUserMembership(auth.user.id, body.organizationId);
-
-		if (!membership) {
-			return json(
-				{
-					success: false,
-					error: 'Access denied',
-					message: 'You are not a member of this organization'
-				},
-				{ status: 403 }
-			);
-		}
-
-		// Update user's active organization
-		await databaseAdapter.updateUserSession(auth.user.id, body.organizationId);
-
-		// Get the organization details
-		const organization = await databaseAdapter.findOrganizationById(body.organizationId);
-
-		return json({
-			success: true,
-			data: {
-				organizationId: body.organizationId,
-				organizationName: organization?.name,
-				role: membership.role
-			}
-		});
-	} catch (error) {
-		console.error('Failed to switch organization:', error);
-		return json(
-			{
-				success: false,
-				error: 'Failed to switch organization',
-				message: error instanceof Error ? error.message : 'Unknown error'
-			},
-			{ status: 500 }
-		);
-	}
-};

package/src/routes/organizations.ts

@@ -1,146 +0,0 @@
-// Aphex CMS Organization API Handlers
-import { json } from '@sveltejs/kit';
-import type { RequestHandler } from '@sveltejs/kit';
-
-// GET /api/organizations - List user's organizations
-export const GET: RequestHandler = async ({ locals }) => {
-	try {
-		const { databaseAdapter } = locals.aphexCMS;
-		const auth = locals.auth;
-
-		if (!auth || auth.type !== 'session') {
-			return json(
-				{
-					success: false,
-					error: 'Unauthorized',
-					message: 'Session authentication required'
-				},
-				{ status: 401 }
-			);
-		}
-
-		// Get all organizations the user belongs to
-		const memberships = await databaseAdapter.findUserOrganizations(auth.user.id);
-
-		// Map to a cleaner format with organization details and user's role
-		const organizations = memberships.map((membership) => ({
-			id: membership.organization.id,
-			name: membership.organization.name,
-			slug: membership.organization.slug,
-			metadata: membership.organization.metadata,
-			role: membership.member.role,
-			joinedAt: membership.member.createdAt,
-			isActive: membership.organization.id === auth.organizationId
-		}));
-
-		return json({
-			success: true,
-			data: organizations
-		});
-	} catch (error) {
-		console.error('Failed to fetch organizations:', error);
-		return json(
-			{
-				success: false,
-				error: 'Failed to fetch organizations',
-				message: error instanceof Error ? error.message : 'Unknown error'
-			},
-			{ status: 500 }
-		);
-	}
-};
-
-// POST /api/organizations - Create new organization
-export const POST: RequestHandler = async ({ request, locals }) => {
-	try {
-		const { databaseAdapter } = locals.aphexCMS;
-		const auth = locals.auth;
-
-		if (!auth || auth.type !== 'session') {
-			return json(
-				{
-					success: false,
-					error: 'Unauthorized',
-					message: 'Session authentication required'
-				},
-				{ status: 401 }
-			);
-		}
-
-		// Only SUPER_ADMIN can create organizations
-		if (auth.user.role !== 'super_admin') {
-			return json(
-				{
-					success: false,
-					error: 'Forbidden',
-					message: 'Only super admins can create organizations'
-				},
-				{ status: 403 }
-			);
-		}
-
-		const body = await request.json();
-
-		// Validate required fields
-		if (!body.name || !body.slug) {
-			return json(
-				{
-					success: false,
-					error: 'Missing required fields',
-					message: 'Organization name and slug are required'
-				},
-				{ status: 400 }
-			);
-		}
-
-		// Check if slug is already taken
-		const existingOrg = await databaseAdapter.findOrganizationBySlug(body.slug);
-		if (existingOrg) {
-			return json(
-				{
-					success: false,
-					error: 'Slug already exists',
-					message: `Organization with slug '${body.slug}' already exists`
-				},
-				{ status: 409 }
-			);
-		}
-
-		// Create the organization
-		const newOrganization = await databaseAdapter.createOrganization({
-			name: body.name,
-			slug: body.slug,
-			metadata: body.metadata || null,
-			parentOrganizationId: body.parentOrganizationId || null,
-			createdBy: auth.user.id
-		});
-
-		// Add the creator as owner
-		await databaseAdapter.addMember({
-			organizationId: newOrganization.id,
-			userId: auth.user.id,
-			role: 'owner'
-		});
-
-		// Set as active organization for this user
-		await databaseAdapter.updateUserSession(auth.user.id, newOrganization.id);
-
-		return json(
-			{
-				success: true,
-				data: newOrganization
-			},
-			{ status: 201 }
-		);
-	} catch (error) {
-		console.error('Failed to create organization:', error);
-		return json(
-			{
-				success: false,
-				error: 'Failed to create organization',
-				message: error instanceof Error ? error.message : 'Unknown error'
-			},
-			{ status: 500 }
-		);
-	}
-};

package/src/routes/schemas-by-type.ts

@@ -1,35 +0,0 @@
-// Aphex CMS Schema API Handlers - Get schema by type
-import type { RequestHandler } from '@sveltejs/kit';
-
-export const GET: RequestHandler = async ({ locals, params }) => {
-	const { type } = params;
-	const { cmsEngine } = locals.aphexCMS;
-
-	if (!type) {
-		return new Response(JSON.stringify({ error: 'Schema type is required' }), {
-			status: 400,
-			headers: { 'content-type': 'application/json' }
-		});
-	}
-
-	console.log('GETTING SCHEMA TYPE FROM: ', type);
-	const schema = cmsEngine.getSchemaTypeByName(type);
-	console.log('SCHEMA: ', schema);
-
-	if (!schema) {
-		return new Response(JSON.stringify({ error: `Schema type '${type}' not found` }), {
-			status: 404,
-			headers: { 'content-type': 'application/json' }
-		});
-	}
-
-	return new Response(
-		JSON.stringify({
-			success: true,
-			data: schema
-		}),
-		{
-			headers: { 'content-type': 'application/json' }
-		}
-	);
-};

package/src/routes/schemas.ts

@@ -1,19 +0,0 @@
-// Aphex CMS Schema API Handlers
-import type { RequestHandler } from '@sveltejs/kit';
-
-export const GET: RequestHandler = async ({ locals }) => {
-	const { cmsEngine } = locals.aphexCMS;
-
-	// Get schemas from config (not database) to preserve validation functions
-	const schemas = cmsEngine.config.schemaTypes;
-
-	return new Response(
-		JSON.stringify({
-			success: true,
-			data: schemas
-		}),
-		{
-			headers: { 'content-type': 'application/json' }
-		}
-	);
-};

package/src/schema-context.svelte.ts

@@ -1,24 +0,0 @@
-import { getContext, setContext } from 'svelte';
-import type { SchemaType } from './types/index.js';
-
-const SCHEMA_CONTEXT_KEY = Symbol('aphex-schemas');
-
-/**
- * Provides schemas to child components via Svelte context
- */
-export function setSchemaContext(schemas: SchemaType[]) {
-	setContext(SCHEMA_CONTEXT_KEY, schemas);
-}
-
-/**
- * Gets schemas from Svelte context
- */
-export function getSchemaContext(): SchemaType[] {
-	const schemas = getContext<SchemaType[]>(SCHEMA_CONTEXT_KEY);
-	if (!schemas) {
-		throw new Error(
-			'Schema context not found. Make sure to call setSchemaContext() in a parent component.'
-		);
-	}
-	return schemas;
-}

package/src/schema-utils/cleanup.ts

@@ -1,116 +0,0 @@
-import type { SchemaType, Field, ArrayField } from '../types/schemas.js';
-
-export interface OrphanedField {
-	path: string;
-	key: string;
-	value: any;
-	level: 'document' | 'nested';
-}
-
-export interface SchemaCleanupResult {
-	hasOrphanedFields: boolean;
-	orphanedFields: OrphanedField[];
-	cleanedData: Record<string, any>;
-}
-
-/**
- * Find orphaned fields in document data that no longer exist in the schema
- */
-export function findOrphanedFields(
-	documentData: Record<string, any>,
-	schema: SchemaType
-): SchemaCleanupResult {
-	const orphanedFields: OrphanedField[] = [];
-
-	function checkObject(
-		obj: Record<string, any>,
-		fields: Field[],
-		pathPrefix = ''
-	): Record<string, any> {
-		const cleaned: Record<string, any> = {};
-		const fieldMap = new Map(fields.map((field) => [field.name, field]));
-
-		for (const [key, value] of Object.entries(obj)) {
-			const currentPath = pathPrefix ? `${pathPrefix}.${key}` : key;
-			const field = fieldMap.get(key);
-
-			if (!field) {
-				// Orphaned field found
-				orphanedFields.push({
-					path: currentPath,
-					key,
-					value,
-					level: pathPrefix ? 'nested' : 'document'
-				});
-				continue; // Skip this field in cleaned data
-			}
-
-			// Recursively check nested objects and arrays
-			if (field.type === 'object' && field.fields && value && typeof value === 'object') {
-				cleaned[key] = checkObject(value, field.fields, currentPath);
-			} else if (field.type === 'array' && Array.isArray(value)) {
-				cleaned[key] = checkArray(value, field, currentPath);
-			} else {
-				cleaned[key] = value;
-			}
-		}
-
-		return cleaned;
-	}
-
-	function checkArray(array: any[], arrayField: Field, pathPrefix: string): any[] {
-		if (arrayField.type !== 'array' || !arrayField.of) {
-			return array;
-		}
-
-		return array.map((item, index) => {
-			const itemPath = `${pathPrefix}[${index}]`;
-
-			if (item && typeof item === 'object' && item._type) {
-				// Find the schema for this array item type
-				const itemTypeSchema = getSchemaForArrayItem(item._type, arrayField);
-				if (itemTypeSchema && itemTypeSchema.fields) {
-					return checkObject(item, itemTypeSchema.fields, itemPath);
-				}
-			}
-
-			return item;
-		});
-	}
-
-	const cleanedData = checkObject(documentData, schema.fields);
-
-	return {
-		hasOrphanedFields: orphanedFields.length > 0,
-		orphanedFields,
-		cleanedData
-	};
-}
-
-/**
- * Get the schema for an array item type (helper function)
- * This would need to be integrated with your schema registry
- */
-function getSchemaForArrayItem(typeName: string, arrayField: ArrayField): SchemaType | null {
-	// This is a placeholder - you'd need to integrate with your actual schema registry
-	// For now, we'll assume inline object schemas
-	if (arrayField.of) {
-		const typeRef = arrayField.of.find((ref) => ref.type === typeName);
-		if (typeRef && typeof typeRef !== 'string') {
-			// Handle inline schema definitions if needed
-			return null;
-		}
-	}
-	return null;
-}
-
-/**
- * Apply cleanup by removing orphaned fields from document data
- */
-export function applySchemaCleanup(
-	documentData: Record<string, any>,
-	schema: SchemaType
-): Record<string, any> {
-	const result = findOrphanedFields(documentData, schema);
-	return result.cleanedData;
-}