@aphexcms/cms-core 0.1.11 → 0.1.13

package/dist/routes/documents-query.js

@@ -0,0 +1,95 @@
+// Aphex CMS Document Query API - Complex filtering with POST
+import { json } from '@sveltejs/kit';
+import { authToContext } from '../local-api/auth-helpers.js';
+import { PermissionError } from '../local-api/permissions.js';
+// Default values
+const DEFAULT_PAGE_SIZE = 20;
+const DEFAULT_PAGE = 1;
+/**
+ * POST /api/documents/query - Advanced document querying with complex filters
+ *
+ * Accepts LocalAPI FindOptions in request body for full filtering power
+ *
+ * @example
+ * POST /api/documents/query
+ * {
+ *   "type": "page",
+ *   "where": {
+ *     "status": { "equals": "published" },
+ *     "hero.heading": { "contains": "Welcome" },
+ *     "publishedAt": { "gte": "2024-01-01" }
+ *   },
+ *   "limit": 20,
+ *   "page": 1,
+ *   "sort": ["-publishedAt", "title"],
+ *   "depth": 1,
+ *   "perspective": "published"
+ * }
+ */
+export const POST = async ({ request, locals }) => {
+    try {
+        const { localAPI } = locals.aphexCMS;
+        const context = authToContext(locals.auth);
+        const body = await request.json();
+        // Extract document type
+        const documentType = body.type;
+        if (!documentType) {
+            return json({
+                success: false,
+                error: 'Bad Request',
+                message: 'Document type is required in request body'
+            }, { status: 400 });
+        }
+        // Check if collection exists
+        if (!localAPI.hasCollection(documentType)) {
+            return json({
+                success: false,
+                error: 'Invalid document type',
+                message: `Collection '${documentType}' not found. Available: ${localAPI.getCollectionNames().join(', ')}`
+            }, { status: 400 });
+        }
+        // Parse pagination - support both page-based and offset-based
+        const page = body.page ? Math.max(1, parseInt(body.page)) : DEFAULT_PAGE;
+        const pageSize = body.pageSize || body.limit || DEFAULT_PAGE_SIZE;
+        const offset = body.offset !== undefined ? body.offset : (page - 1) * pageSize;
+        // Build FindOptions from request body
+        const findOptions = {
+            where: body.where,
+            limit: pageSize,
+            offset: offset,
+            sort: body.sort,
+            depth: body.depth !== undefined ? Math.max(0, Math.min(body.depth, 5)) : 0,
+            select: body.select,
+            perspective: body.perspective || 'draft'
+        };
+        // Query via LocalAPI
+        const result = await localAPI.collections[documentType].find(context, findOptions);
+        return json({
+            success: true,
+            data: result.docs,
+            pagination: {
+                total: result.totalDocs,
+                page: result.page,
+                pageSize: result.limit,
+                totalPages: result.totalPages,
+                hasNextPage: result.hasNextPage,
+                hasPrevPage: result.hasPrevPage
+            }
+        });
+    }
+    catch (error) {
+        console.error('Failed to query documents:', error);
+        if (error instanceof PermissionError) {
+            return json({
+                success: false,
+                error: 'Forbidden',
+                message: error.message
+            }, { status: 403 });
+        }
+        return json({
+            success: false,
+            error: 'Failed to query documents',
+            message: error instanceof Error ? error.message : 'Unknown error'
+        }, { status: 500 });
+    }
+};

package/dist/routes/documents.d.ts

@@ -0,0 +1,4 @@
+import type { RequestHandler } from '@sveltejs/kit';
+export declare const GET: RequestHandler;
+export declare const POST: RequestHandler;
+//# sourceMappingURL=documents.d.ts.map

package/dist/routes/documents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../src/lib/routes/documents.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AASpD,eAAO,MAAM,GAAG,EAAE,cAiGjB,CAAC;AAGF,eAAO,MAAM,IAAI,EAAE,cAsElB,CAAC"}

package/dist/routes/documents.js

@@ -0,0 +1,136 @@
+// Aphex CMS Document API Handlers
+import { json } from '@sveltejs/kit';
+import { authToContext } from '../local-api/auth-helpers.js';
+import { PermissionError } from '../local-api/permissions.js';
+// Default values for API
+const DEFAULT_PAGE_SIZE = 20;
+const DEFAULT_PAGE = 1;
+// GET /api/documents - Simple document listing with basic filters
+export const GET = async ({ url, locals }) => {
+    try {
+        const { localAPI } = locals.aphexCMS;
+        const context = authToContext(locals.auth);
+        // Parse query params
+        const docType = url.searchParams.get('type') || url.searchParams.get('docType');
+        const status = url.searchParams.get('status');
+        const pageParam = url.searchParams.get('page');
+        const pageSizeParam = url.searchParams.get('pageSize') || url.searchParams.get('limit');
+        const depthParam = url.searchParams.get('depth');
+        const sortParam = url.searchParams.get('sort');
+        const perspective = url.searchParams.get('perspective') || 'draft';
+        // Parse pagination
+        const page = pageParam ? Math.max(1, parseInt(pageParam)) : DEFAULT_PAGE;
+        const pageSize = pageSizeParam ? parseInt(pageSizeParam) : DEFAULT_PAGE_SIZE;
+        const offset = (page - 1) * pageSize;
+        // Parse depth (clamp between 0-5)
+        const depth = depthParam ? Math.max(0, Math.min(parseInt(depthParam), 5)) : 0;
+        if (!docType) {
+            return json({
+                success: false,
+                error: 'Bad Request',
+                message: 'Document type is required. Use ?type=page or ?docType=page'
+            }, { status: 400 });
+        }
+        // Get collection API (TypeScript-safe)
+        const collection = localAPI.collections[docType];
+        if (!collection) {
+            return json({
+                success: false,
+                error: 'Invalid document type',
+                message: `Collection '${docType}' not found. Available: ${localAPI.getCollectionNames().join(', ')}`
+            }, { status: 400 });
+        }
+        // Build where clause from query params
+        const where = {};
+        if (status) {
+            where.status = { equals: status };
+        }
+        // Query via LocalAPI
+        const result = await collection.find(context, {
+            where: Object.keys(where).length > 0 ? where : undefined,
+            limit: pageSize,
+            offset: offset,
+            depth: depth,
+            sort: sortParam || undefined,
+            perspective
+        });
+        return json({
+            success: true,
+            data: result.docs,
+            pagination: {
+                total: result.totalDocs,
+                page: result.page,
+                pageSize: result.limit,
+                totalPages: result.totalPages,
+                hasNextPage: result.hasNextPage,
+                hasPrevPage: result.hasPrevPage
+            }
+        });
+    }
+    catch (error) {
+        console.error('Failed to fetch documents:', error);
+        if (error instanceof PermissionError) {
+            return json({
+                success: false,
+                error: 'Forbidden',
+                message: error.message
+            }, { status: 403 });
+        }
+        return json({
+            success: false,
+            error: 'Failed to fetch documents',
+            message: error instanceof Error ? error.message : 'Unknown error'
+        }, { status: 500 });
+    }
+};
+// POST /api/documents - Create new document
+export const POST = async ({ request, locals }) => {
+    try {
+        const { localAPI } = locals.aphexCMS;
+        const context = authToContext(locals.auth);
+        const body = await request.json();
+        // Validate required fields (support both old and new format)
+        const documentType = body.type;
+        const documentData = body.draftData || body.data;
+        const shouldPublish = body.publish || false;
+        if (!documentType || !documentData) {
+            return json({
+                success: false,
+                error: 'Missing required fields',
+                message: 'Document type and data are required'
+            }, { status: 400 });
+        }
+        // Get collection API (TypeScript-safe)
+        const collection = localAPI.collections[documentType];
+        if (!collection) {
+            return json({
+                success: false,
+                error: 'Invalid document type',
+                message: `Collection '${documentType}' not found. Available: ${localAPI.getCollectionNames().join(', ')}`
+            }, { status: 400 });
+        }
+        // Create via LocalAPI (permission checks happen inside)
+        const newDocument = await collection.create(context, documentData, {
+            publish: shouldPublish
+        });
+        return json({
+            success: true,
+            data: newDocument
+        }, { status: 201 });
+    }
+    catch (error) {
+        console.error('Failed to create document:', error);
+        if (error instanceof PermissionError) {
+            return json({
+                success: false,
+                error: 'Forbidden',
+                message: error.message
+            }, { status: 403 });
+        }
+        return json({
+            success: false,
+            error: 'Failed to create document',
+            message: error instanceof Error ? error.message : 'Unknown error'
+        }, { status: 500 });
+    }
+};

package/dist/routes/index.d.ts

@@ -0,0 +1,8 @@
+export * as documents from './documents.js';
+export * as documentsById from './documents-by-id.js';
+export * as documentsQuery from './documents-query.js';
+export * as documentsPublish from './documents-publish.js';
+export * as assets from './assets.js';
+export * as schemas from './schemas.js';
+export * as schemasByType from './schemas-by-type.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/routes/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,aAAa,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,cAAc,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,gBAAgB,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAGnC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,aAAa,MAAM,mBAAmB,CAAC"}

package/dist/routes/index.js

@@ -0,0 +1,12 @@
+// Aphex CMS API Route Handlers
+// These will be imported and re-exported by your app's API routes
+// Document management routes
+export * as documents from './documents.js';
+export * as documentsById from './documents-by-id.js';
+export * as documentsQuery from './documents-query.js';
+export * as documentsPublish from './documents-publish.js';
+// Asset management routes
+export * as assets from './assets.js';
+// Schema information routes
+export * as schemas from './schemas.js';
+export * as schemasByType from './schemas-by-type.js';

package/dist/routes/organizations-by-id.d.ts

@@ -0,0 +1,5 @@
+import type { RequestHandler } from '@sveltejs/kit';
+export declare const GET: RequestHandler;
+export declare const PATCH: RequestHandler;
+export declare const DELETE: RequestHandler;
+//# sourceMappingURL=organizations-by-id.d.ts.map

package/dist/routes/organizations-by-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations-by-id.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-by-id.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,GAAG,EAAE,cAmEjB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cAgGnB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAmFpB,CAAC"}

package/dist/routes/organizations-by-id.js

@@ -0,0 +1,187 @@
+// Aphex CMS Organization by ID API Handlers
+import { json } from '@sveltejs/kit';
+// GET /api/organizations/[id] - Get organization by ID
+export const GET = async ({ params, locals }) => {
+    try {
+        const { databaseAdapter } = locals.aphexCMS;
+        const auth = locals.auth;
+        const { id } = params;
+        if (!auth || auth.type !== 'session') {
+            return json({
+                success: false,
+                error: 'Unauthorized',
+                message: 'Session authentication required'
+            }, { status: 401 });
+        }
+        if (!id) {
+            return json({
+                success: false,
+                error: 'Missing required field',
+                message: 'Organization ID is required'
+            }, { status: 400 });
+        }
+        // Check if user is a member of this organization
+        const membership = await databaseAdapter.findUserMembership(auth.user.id, id);
+        if (!membership) {
+            return json({
+                success: false,
+                error: 'Forbidden',
+                message: 'You are not a member of this organization'
+            }, { status: 403 });
+        }
+        const organization = await databaseAdapter.findOrganizationById(id);
+        if (!organization) {
+            return json({
+                success: false,
+                error: 'Organization not found'
+            }, { status: 404 });
+        }
+        return json({
+            success: true,
+            data: organization
+        });
+    }
+    catch (error) {
+        console.error('Failed to fetch organization:', error);
+        return json({
+            success: false,
+            error: 'Failed to fetch organization',
+            message: error instanceof Error ? error.message : 'Unknown error'
+        }, { status: 500 });
+    }
+};
+// PATCH /api/organizations/[id] - Update organization
+export const PATCH = async ({ params, request, locals }) => {
+    try {
+        const { databaseAdapter } = locals.aphexCMS;
+        const auth = locals.auth;
+        const { id } = params;
+        if (!auth || auth.type !== 'session') {
+            return json({
+                success: false,
+                error: 'Unauthorized',
+                message: 'Session authentication required'
+            }, { status: 401 });
+        }
+        if (!id) {
+            return json({
+                success: false,
+                error: 'Missing required field',
+                message: 'Organization ID is required'
+            }, { status: 400 });
+        }
+        // Check if user is owner or admin of this organization
+        const membership = await databaseAdapter.findUserMembership(auth.user.id, id);
+        if (!membership || (membership.role !== 'owner' && membership.role !== 'admin')) {
+            return json({
+                success: false,
+                error: 'Forbidden',
+                message: 'Only owners and admins can update organization settings'
+            }, { status: 403 });
+        }
+        const body = await request.json();
+        // Validate: if slug is being changed, check it's not already taken
+        if (body.slug) {
+            const existingOrg = await databaseAdapter.findOrganizationBySlug(body.slug);
+            if (existingOrg && existingOrg.id !== id) {
+                return json({
+                    success: false,
+                    error: 'Slug already exists',
+                    message: `Organization with slug '${body.slug}' already exists`
+                }, { status: 409 });
+            }
+        }
+        // Update organization
+        const updateData = {};
+        if (body.name !== undefined)
+            updateData.name = body.name;
+        if (body.slug !== undefined)
+            updateData.slug = body.slug;
+        if (body.metadata !== undefined)
+            updateData.metadata = body.metadata;
+        const updatedOrganization = await databaseAdapter.updateOrganization(id, updateData);
+        if (!updatedOrganization) {
+            return json({
+                success: false,
+                error: 'Organization not found'
+            }, { status: 404 });
+        }
+        return json({
+            success: true,
+            data: updatedOrganization
+        });
+    }
+    catch (error) {
+        console.error('Failed to update organization:', error);
+        return json({
+            success: false,
+            error: 'Failed to update organization',
+            message: error instanceof Error ? error.message : 'Unknown error'
+        }, { status: 500 });
+    }
+};
+// DELETE /api/organizations/[id] - Delete an organization
+export const DELETE = async ({ params, locals }) => {
+    try {
+        const { databaseAdapter } = locals.aphexCMS;
+        const auth = locals.auth;
+        const { id } = params;
+        if (!auth || auth.type !== 'session') {
+            return json({
+                success: false,
+                error: 'Unauthorized',
+                message: 'Session authentication required'
+            }, { status: 401 });
+        }
+        if (!id) {
+            return json({
+                success: false,
+                error: 'Missing required field',
+                message: 'Organization ID is required'
+            }, { status: 400 });
+        }
+        // Only owners can delete an organization
+        const membership = await databaseAdapter.findUserMembership(auth.user.id, id);
+        if (!membership || membership.role !== 'owner') {
+            return json({
+                success: false,
+                error: 'Forbidden',
+                message: 'Only owners can delete an organization'
+            }, { status: 403 });
+        }
+        // Get all members of the organization
+        const members = await databaseAdapter.findOrganizationMembers(id);
+        // Handle member lifecycle
+        for (const member of members) {
+            const userSession = await databaseAdapter.findUserSession(member.userId);
+            if (userSession?.activeOrganizationId === id) {
+                const otherOrgs = await databaseAdapter.findUserOrganizations(member.userId);
+                const remainingOrgs = otherOrgs.filter((org) => org.organization.id !== id);
+                if (remainingOrgs.length > 0 && remainingOrgs[0]) {
+                    await databaseAdapter.updateUserSession(member.userId, remainingOrgs[0].organization.id);
+                }
+                else {
+                    await databaseAdapter.deleteUserSession(member.userId);
+                }
+            }
+        }
+        // Delete all members from the organization
+        await databaseAdapter.removeAllMembers(id);
+        // Delete all invitations for the organization
+        await databaseAdapter.removeAllInvitations(id);
+        // Delete the organization
+        await databaseAdapter.deleteOrganization(id);
+        return json({
+            success: true,
+            message: 'Organization deleted successfully'
+        });
+    }
+    catch (error) {
+        console.error('Failed to delete organization:', error);
+        return json({
+            success: false,
+            error: 'Failed to delete organization',
+            message: error instanceof Error ? error.message : 'Unknown error'
+        }, { status: 500 });
+    }
+};

package/dist/routes/organizations-invitations.d.ts

@@ -0,0 +1,4 @@
+import type { RequestHandler } from '@sveltejs/kit';
+export declare const POST: RequestHandler;
+export declare const DELETE: RequestHandler;
+//# sourceMappingURL=organizations-invitations.d.ts.map

package/dist/routes/organizations-invitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations-invitations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-invitations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,IAAI,EAAE,cAyGlB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAqEpB,CAAC"}

package/dist/routes/organizations-invitations.js

@@ -0,0 +1,125 @@
+// Aphex CMS Organization Invitations API Handlers
+import { json } from '@sveltejs/kit';
+// POST /api/organizations/invitations - Create/send an invitation
+export const POST = async ({ request, locals }) => {
+    try {
+        const { databaseAdapter } = locals.aphexCMS;
+        const auth = locals.auth;
+        if (!auth || auth.type !== 'session') {
+            return json({
+                success: false,
+                error: 'Unauthorized',
+                message: 'Session authentication required'
+            }, { status: 401 });
+        }
+        // Only owners and admins can invite members
+        if (auth.organizationRole !== 'owner' && auth.organizationRole !== 'admin') {
+            return json({
+                success: false,
+                error: 'Forbidden',
+                message: 'Only owners and admins can invite members'
+            }, { status: 403 });
+        }
+        const body = await request.json();
+        if (!body.email || !body.role) {
+            return json({
+                success: false,
+                error: 'Missing required fields',
+                message: 'email and role are required'
+            }, { status: 400 });
+        }
+        // Validate role
+        const validRoles = ['admin', 'editor', 'viewer'];
+        if (!validRoles.includes(body.role)) {
+            return json({
+                success: false,
+                error: 'Invalid role',
+                message: 'Role must be one of: admin, editor, viewer'
+            }, { status: 400 });
+        }
+        // Check if there's already a pending invitation for this email
+        const existingInvitations = await databaseAdapter.findOrganizationInvitations(auth.organizationId);
+        const pendingInvitation = existingInvitations.find((inv) => inv.email.toLowerCase() === body.email.toLowerCase() && inv.acceptedAt === null);
+        if (pendingInvitation) {
+            return json({
+                success: false,
+                error: 'Already invited',
+                message: 'This email has already been invited to the organization'
+            }, { status: 400 });
+        }
+        // Generate a unique invitation token
+        const token = crypto.randomUUID();
+        // Create invitation - will auto-join when user signs up
+        const invitation = await databaseAdapter.createInvitation({
+            organizationId: auth.organizationId,
+            email: body.email.toLowerCase(),
+            role: body.role,
+            invitedBy: auth.user.id,
+            token,
+            expiresAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000) // 7 days
+        });
+        return json({
+            success: true,
+            data: invitation,
+            message: 'Invitation sent successfully. User will automatically join when they sign up.'
+        }, { status: 201 });
+    }
+    catch (error) {
+        console.error('Failed to create invitation:', error);
+        return json({
+            success: false,
+            error: 'Failed to create invitation',
+            message: error instanceof Error ? error.message : 'Unknown error'
+        }, { status: 500 });
+    }
+};
+// DELETE /api/organizations/invitations - Cancel an invitation
+export const DELETE = async ({ request, locals }) => {
+    try {
+        const { databaseAdapter } = locals.aphexCMS;
+        const auth = locals.auth;
+        if (!auth || auth.type !== 'session') {
+            return json({
+                success: false,
+                error: 'Unauthorized',
+                message: 'Session authentication required'
+            }, { status: 401 });
+        }
+        // Only owners and admins can cancel invitations
+        if (auth.organizationRole !== 'owner' && auth.organizationRole !== 'admin') {
+            return json({
+                success: false,
+                error: 'Forbidden',
+                message: 'Only owners and admins can cancel invitations'
+            }, { status: 403 });
+        }
+        const body = await request.json();
+        if (!body.invitationId) {
+            return json({
+                success: false,
+                error: 'Missing required field',
+                message: 'invitationId is required'
+            }, { status: 400 });
+        }
+        // Delete the invitation
+        const deleted = await databaseAdapter.deleteInvitation(body.invitationId);
+        if (!deleted) {
+            return json({
+                success: false,
+                error: 'Invitation not found'
+            }, { status: 404 });
+        }
+        return json({
+            success: true,
+            message: 'Invitation canceled successfully'
+        });
+    }
+    catch (error) {
+        console.error('Failed to cancel invitation:', error);
+        return json({
+            success: false,
+            error: 'Failed to cancel invitation',
+            message: error instanceof Error ? error.message : 'Unknown error'
+        }, { status: 500 });
+    }
+};

package/dist/routes/organizations-members.d.ts

@@ -0,0 +1,5 @@
+import type { RequestHandler } from '@sveltejs/kit';
+export declare const GET: RequestHandler;
+export declare const DELETE: RequestHandler;
+export declare const PATCH: RequestHandler;
+//# sourceMappingURL=organizations-members.d.ts.map

package/dist/routes/organizations-members.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations-members.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-members.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,GAAG,EAAE,cAkCjB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAmIpB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cA4HnB,CAAC"}