@aphexcms/cms-core 0.1.3 → 0.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (280) hide show
  1. package/dist/api/assets.d.ts +48 -0
  2. package/dist/api/assets.d.ts.map +1 -0
  3. package/dist/api/assets.js +52 -0
  4. package/dist/api/client.d.ts +37 -0
  5. package/dist/api/client.d.ts.map +1 -0
  6. package/dist/api/client.js +125 -0
  7. package/dist/api/documents.d.ts +56 -0
  8. package/dist/api/documents.d.ts.map +1 -0
  9. package/dist/api/documents.js +77 -0
  10. package/dist/api/index.d.ts +7 -0
  11. package/dist/api/index.d.ts.map +1 -0
  12. package/dist/api/index.js +5 -0
  13. package/dist/api/organizations.d.ts +101 -0
  14. package/dist/api/organizations.d.ts.map +1 -0
  15. package/dist/api/organizations.js +92 -0
  16. package/dist/api/types.d.ts +23 -0
  17. package/dist/api/types.d.ts.map +1 -0
  18. package/dist/api/types.js +1 -0
  19. package/dist/app.d.ts +19 -0
  20. package/dist/auth/MULTI_TENANCY_PLAN.md +1183 -0
  21. package/dist/auth/auth-errors.d.ts +7 -0
  22. package/dist/auth/auth-errors.d.ts.map +1 -0
  23. package/dist/auth/auth-errors.js +13 -0
  24. package/dist/auth/auth-hooks.d.ts +6 -0
  25. package/dist/auth/auth-hooks.d.ts.map +1 -0
  26. package/dist/auth/auth-hooks.js +108 -0
  27. package/dist/auth/provider.d.ts +17 -0
  28. package/dist/auth/provider.d.ts.map +1 -0
  29. package/dist/auth/provider.js +1 -0
  30. package/dist/client/index.d.ts +24 -0
  31. package/dist/client/index.d.ts.map +1 -0
  32. package/dist/client/index.js +31 -0
  33. package/dist/components/AdminApp.svelte +1077 -0
  34. package/dist/components/AdminApp.svelte.d.ts +24 -0
  35. package/dist/components/AdminApp.svelte.d.ts.map +1 -0
  36. package/dist/components/admin/AdminLayout.svelte +115 -0
  37. package/dist/components/admin/AdminLayout.svelte.d.ts +15 -0
  38. package/dist/components/admin/AdminLayout.svelte.d.ts.map +1 -0
  39. package/dist/components/admin/DocumentEditor.svelte +795 -0
  40. package/dist/components/admin/DocumentEditor.svelte.d.ts +18 -0
  41. package/dist/components/admin/DocumentEditor.svelte.d.ts.map +1 -0
  42. package/dist/components/admin/DocumentTypesList.svelte +97 -0
  43. package/dist/components/admin/DocumentTypesList.svelte.d.ts +14 -0
  44. package/dist/components/admin/DocumentTypesList.svelte.d.ts.map +1 -0
  45. package/dist/components/admin/ObjectModal.svelte +135 -0
  46. package/dist/components/admin/ObjectModal.svelte.d.ts +15 -0
  47. package/dist/components/admin/ObjectModal.svelte.d.ts.map +1 -0
  48. package/dist/components/admin/SchemaField.svelte +171 -0
  49. package/dist/components/admin/SchemaField.svelte.d.ts +19 -0
  50. package/dist/components/admin/SchemaField.svelte.d.ts.map +1 -0
  51. package/dist/components/admin/fields/ArrayField.svelte +266 -0
  52. package/dist/components/admin/fields/ArrayField.svelte.d.ts +12 -0
  53. package/dist/components/admin/fields/ArrayField.svelte.d.ts.map +1 -0
  54. package/dist/components/admin/fields/BooleanField.svelte +35 -0
  55. package/dist/components/admin/fields/BooleanField.svelte.d.ts +13 -0
  56. package/dist/components/admin/fields/BooleanField.svelte.d.ts.map +1 -0
  57. package/dist/components/admin/fields/ImageField.svelte +284 -0
  58. package/dist/components/admin/fields/ImageField.svelte.d.ts +15 -0
  59. package/dist/components/admin/fields/ImageField.svelte.d.ts.map +1 -0
  60. package/dist/components/admin/fields/NumberField.svelte +82 -0
  61. package/dist/components/admin/fields/NumberField.svelte.d.ts +14 -0
  62. package/dist/components/admin/fields/NumberField.svelte.d.ts.map +1 -0
  63. package/dist/components/admin/fields/ReferenceField.svelte +260 -0
  64. package/dist/components/admin/fields/ReferenceField.svelte.d.ts +12 -0
  65. package/dist/components/admin/fields/ReferenceField.svelte.d.ts.map +1 -0
  66. package/dist/components/admin/fields/SlugField.svelte +74 -0
  67. package/dist/components/admin/fields/SlugField.svelte.d.ts +15 -0
  68. package/dist/components/admin/fields/SlugField.svelte.d.ts.map +1 -0
  69. package/dist/components/admin/fields/StringField.svelte +40 -0
  70. package/dist/components/admin/fields/StringField.svelte.d.ts +14 -0
  71. package/dist/components/admin/fields/StringField.svelte.d.ts.map +1 -0
  72. package/dist/components/admin/fields/TextareaField.svelte +40 -0
  73. package/dist/components/admin/fields/TextareaField.svelte.d.ts +14 -0
  74. package/dist/components/admin/fields/TextareaField.svelte.d.ts.map +1 -0
  75. package/dist/components/fields/index.d.ts +9 -0
  76. package/dist/components/fields/index.d.ts.map +1 -0
  77. package/dist/components/fields/index.js +9 -0
  78. package/dist/components/index.d.ts +7 -0
  79. package/dist/components/index.d.ts.map +1 -0
  80. package/dist/components/index.js +12 -0
  81. package/dist/components/layout/OrganizationSwitcher.svelte +218 -0
  82. package/dist/components/layout/OrganizationSwitcher.svelte.d.ts +11 -0
  83. package/dist/components/layout/OrganizationSwitcher.svelte.d.ts.map +1 -0
  84. package/dist/components/layout/Sidebar.svelte +88 -0
  85. package/dist/components/layout/Sidebar.svelte.d.ts +14 -0
  86. package/dist/components/layout/Sidebar.svelte.d.ts.map +1 -0
  87. package/dist/components/layout/sidebar/AppSidebar.svelte +63 -0
  88. package/dist/components/layout/sidebar/AppSidebar.svelte.d.ts +11 -0
  89. package/dist/components/layout/sidebar/AppSidebar.svelte.d.ts.map +1 -0
  90. package/dist/components/layout/sidebar/NavMain.svelte +95 -0
  91. package/dist/components/layout/sidebar/NavMain.svelte.d.ts +19 -0
  92. package/dist/components/layout/sidebar/NavMain.svelte.d.ts.map +1 -0
  93. package/dist/components/layout/sidebar/NavSecondary.svelte +69 -0
  94. package/dist/components/layout/sidebar/NavSecondary.svelte.d.ts +9 -0
  95. package/dist/components/layout/sidebar/NavSecondary.svelte.d.ts.map +1 -0
  96. package/dist/components/layout/sidebar/NavUser.svelte +85 -0
  97. package/dist/components/layout/sidebar/NavUser.svelte.d.ts +9 -0
  98. package/dist/components/layout/sidebar/NavUser.svelte.d.ts.map +1 -0
  99. package/dist/config.d.ts +3 -0
  100. package/dist/config.d.ts.map +1 -0
  101. package/dist/config.js +15 -0
  102. package/dist/db/adapters/index.d.ts +1 -0
  103. package/dist/db/adapters/index.d.ts.map +1 -0
  104. package/dist/db/adapters/index.js +4 -0
  105. package/dist/db/index.d.ts +2 -0
  106. package/dist/db/index.d.ts.map +1 -0
  107. package/dist/db/index.js +4 -0
  108. package/dist/db/interfaces/asset.d.ts +51 -0
  109. package/dist/db/interfaces/asset.d.ts.map +1 -0
  110. package/dist/db/interfaces/asset.js +1 -0
  111. package/dist/db/interfaces/document.d.ts +36 -0
  112. package/dist/db/interfaces/document.d.ts.map +1 -0
  113. package/dist/db/interfaces/document.js +1 -0
  114. package/dist/db/interfaces/index.d.ts +73 -0
  115. package/dist/db/interfaces/index.d.ts.map +1 -0
  116. package/dist/db/interfaces/index.js +1 -0
  117. package/dist/db/interfaces/organization.d.ts +27 -0
  118. package/dist/db/interfaces/organization.d.ts.map +1 -0
  119. package/dist/db/interfaces/organization.js +1 -0
  120. package/dist/db/interfaces/schema.d.ts +21 -0
  121. package/dist/db/interfaces/schema.d.ts.map +1 -0
  122. package/dist/db/interfaces/schema.js +1 -0
  123. package/dist/db/interfaces/user.d.ts +15 -0
  124. package/dist/db/interfaces/user.d.ts.map +1 -0
  125. package/dist/db/interfaces/user.js +1 -0
  126. package/dist/db/utils/reference-resolver.d.ts +18 -0
  127. package/dist/db/utils/reference-resolver.d.ts.map +1 -0
  128. package/dist/db/utils/reference-resolver.js +80 -0
  129. package/dist/define.d.ts +3 -0
  130. package/dist/define.d.ts.map +1 -0
  131. package/dist/define.js +4 -0
  132. package/dist/email/index.d.ts +2 -0
  133. package/dist/email/index.d.ts.map +1 -0
  134. package/dist/email/index.js +4 -0
  135. package/dist/email/interfaces/email.d.ts +42 -0
  136. package/dist/email/interfaces/email.d.ts.map +1 -0
  137. package/dist/email/interfaces/email.js +1 -0
  138. package/dist/engine.d.ts +26 -0
  139. package/dist/engine.d.ts.map +1 -0
  140. package/dist/engine.js +66 -0
  141. package/dist/field-validation/rule.d.ts +51 -0
  142. package/dist/field-validation/rule.d.ts.map +1 -0
  143. package/dist/field-validation/rule.js +221 -0
  144. package/dist/field-validation/utils.d.ts +21 -0
  145. package/dist/field-validation/utils.d.ts.map +1 -0
  146. package/dist/field-validation/utils.js +66 -0
  147. package/dist/hooks.d.ts +23 -0
  148. package/dist/hooks.d.ts.map +1 -0
  149. package/dist/hooks.js +96 -0
  150. package/dist/index.d.ts +2 -0
  151. package/dist/index.d.ts.map +1 -0
  152. package/dist/index.js +4 -0
  153. package/dist/plugins/README.md +154 -0
  154. package/dist/routes/assets-by-id.d.ts +5 -0
  155. package/dist/routes/assets-by-id.d.ts.map +1 -0
  156. package/dist/routes/assets-by-id.js +138 -0
  157. package/dist/routes/assets-cdn.d.ts +3 -0
  158. package/dist/routes/assets-cdn.d.ts.map +1 -0
  159. package/dist/routes/assets-cdn.js +155 -0
  160. package/dist/routes/assets.d.ts +4 -0
  161. package/dist/routes/assets.d.ts.map +1 -0
  162. package/dist/routes/assets.js +94 -0
  163. package/dist/routes/documents-by-id.d.ts +5 -0
  164. package/dist/routes/documents-by-id.d.ts.map +1 -0
  165. package/dist/routes/documents-by-id.js +142 -0
  166. package/dist/routes/documents-publish.d.ts +4 -0
  167. package/dist/routes/documents-publish.d.ts.map +1 -0
  168. package/dist/routes/documents-publish.js +151 -0
  169. package/dist/routes/documents.d.ts +4 -0
  170. package/dist/routes/documents.d.ts.map +1 -0
  171. package/dist/routes/documents.js +131 -0
  172. package/dist/routes/index.d.ts +6 -0
  173. package/dist/routes/index.d.ts.map +1 -0
  174. package/dist/routes/index.js +10 -0
  175. package/dist/routes/organizations-by-id.d.ts +5 -0
  176. package/dist/routes/organizations-by-id.d.ts.map +1 -0
  177. package/dist/routes/organizations-by-id.js +187 -0
  178. package/dist/routes/organizations-invitations.d.ts +4 -0
  179. package/dist/routes/organizations-invitations.d.ts.map +1 -0
  180. package/dist/routes/organizations-invitations.js +125 -0
  181. package/dist/routes/organizations-members.d.ts +5 -0
  182. package/dist/routes/organizations-members.d.ts.map +1 -0
  183. package/dist/routes/organizations-members.js +206 -0
  184. package/dist/routes/organizations-switch.d.ts +3 -0
  185. package/dist/routes/organizations-switch.d.ts.map +1 -0
  186. package/dist/routes/organizations-switch.js +53 -0
  187. package/dist/routes/organizations.d.ts +4 -0
  188. package/dist/routes/organizations.d.ts.map +1 -0
  189. package/dist/routes/organizations.js +108 -0
  190. package/dist/routes/schemas-by-type.d.ts +3 -0
  191. package/dist/routes/schemas-by-type.d.ts.map +1 -0
  192. package/dist/routes/schemas-by-type.js +25 -0
  193. package/dist/routes/schemas.d.ts +3 -0
  194. package/dist/routes/schemas.d.ts.map +1 -0
  195. package/dist/routes/schemas.js +11 -0
  196. package/dist/routes-exports.d.ts +14 -0
  197. package/dist/routes-exports.d.ts.map +1 -0
  198. package/dist/routes-exports.js +19 -0
  199. package/dist/schema-context.svelte.d.ts +10 -0
  200. package/dist/schema-context.svelte.d.ts.map +1 -0
  201. package/dist/schema-context.svelte.js +18 -0
  202. package/dist/schema-utils/cleanup.d.ts +21 -0
  203. package/dist/schema-utils/cleanup.d.ts.map +1 -0
  204. package/dist/schema-utils/cleanup.js +80 -0
  205. package/dist/schema-utils/index.d.ts +4 -0
  206. package/dist/schema-utils/index.d.ts.map +1 -0
  207. package/dist/schema-utils/index.js +4 -0
  208. package/dist/schema-utils/utils.d.ts +30 -0
  209. package/dist/schema-utils/utils.d.ts.map +1 -0
  210. package/dist/schema-utils/utils.js +37 -0
  211. package/dist/schema-utils/validator.d.ts +6 -0
  212. package/dist/schema-utils/validator.d.ts.map +1 -0
  213. package/dist/schema-utils/validator.js +45 -0
  214. package/dist/server/index.d.ts +16 -0
  215. package/dist/server/index.d.ts.map +1 -0
  216. package/dist/server/index.js +28 -0
  217. package/dist/services/asset-service.d.ts +86 -0
  218. package/dist/services/asset-service.d.ts.map +1 -0
  219. package/dist/services/asset-service.js +187 -0
  220. package/dist/services/index.d.ts +3 -0
  221. package/dist/services/index.d.ts.map +1 -0
  222. package/dist/services/index.js +4 -0
  223. package/dist/storage/adapters/index.d.ts +2 -0
  224. package/dist/storage/adapters/index.d.ts.map +1 -0
  225. package/dist/storage/adapters/index.js +2 -0
  226. package/dist/storage/adapters/local-storage-adapter.d.ts +54 -0
  227. package/dist/storage/adapters/local-storage-adapter.d.ts.map +1 -0
  228. package/dist/storage/adapters/local-storage-adapter.js +187 -0
  229. package/dist/storage/index.d.ts +3 -0
  230. package/dist/storage/index.d.ts.map +1 -0
  231. package/dist/storage/index.js +6 -0
  232. package/dist/storage/interfaces/index.d.ts +2 -0
  233. package/dist/storage/interfaces/index.d.ts.map +1 -0
  234. package/dist/storage/interfaces/index.js +2 -0
  235. package/dist/storage/interfaces/storage.d.ts +91 -0
  236. package/dist/storage/interfaces/storage.d.ts.map +1 -0
  237. package/dist/storage/interfaces/storage.js +1 -0
  238. package/dist/storage/providers/storage.d.ts +43 -0
  239. package/dist/storage/providers/storage.d.ts.map +1 -0
  240. package/dist/storage/providers/storage.js +64 -0
  241. package/dist/types/asset.d.ts +73 -0
  242. package/dist/types/asset.d.ts.map +1 -0
  243. package/dist/types/asset.js +2 -0
  244. package/dist/types/auth.d.ts +50 -0
  245. package/dist/types/auth.d.ts.map +1 -0
  246. package/dist/types/auth.js +41 -0
  247. package/dist/types/config.d.ts +47 -0
  248. package/dist/types/config.d.ts.map +1 -0
  249. package/dist/types/config.js +1 -0
  250. package/dist/types/document.d.ts +34 -0
  251. package/dist/types/document.d.ts.map +1 -0
  252. package/dist/types/document.js +1 -0
  253. package/dist/types/index.d.ts +9 -0
  254. package/dist/types/index.d.ts.map +1 -0
  255. package/dist/types/index.js +8 -0
  256. package/dist/types/organization.d.ts +105 -0
  257. package/dist/types/organization.d.ts.map +1 -0
  258. package/dist/types/organization.js +3 -0
  259. package/dist/types/schemas.d.ts +114 -0
  260. package/dist/types/schemas.d.ts.map +1 -0
  261. package/dist/types/schemas.js +1 -0
  262. package/dist/types/sidebar.d.ts +33 -0
  263. package/dist/types/sidebar.d.ts.map +1 -0
  264. package/dist/types/sidebar.js +1 -0
  265. package/dist/types/user.d.ts +14 -0
  266. package/dist/types/user.d.ts.map +1 -0
  267. package/dist/types/user.js +1 -0
  268. package/dist/utils/content-hash.d.ts +22 -0
  269. package/dist/utils/content-hash.d.ts.map +1 -0
  270. package/dist/utils/content-hash.js +67 -0
  271. package/dist/utils/image-url.d.ts +88 -0
  272. package/dist/utils/image-url.d.ts.map +1 -0
  273. package/dist/utils/image-url.js +165 -0
  274. package/dist/utils/index.d.ts +6 -0
  275. package/dist/utils/index.d.ts.map +1 -0
  276. package/dist/utils/index.js +9 -0
  277. package/dist/utils/slug.d.ts +13 -0
  278. package/dist/utils/slug.d.ts.map +1 -0
  279. package/dist/utils/slug.js +30 -0
  280. package/package.json +11 -41
@@ -0,0 +1,125 @@
1
+ // Aphex CMS Organization Invitations API Handlers
2
+ import { json } from '@sveltejs/kit';
3
+ // POST /api/organizations/invitations - Create/send an invitation
4
+ export const POST = async ({ request, locals }) => {
5
+ try {
6
+ const { databaseAdapter } = locals.aphexCMS;
7
+ const auth = locals.auth;
8
+ if (!auth || auth.type !== 'session') {
9
+ return json({
10
+ success: false,
11
+ error: 'Unauthorized',
12
+ message: 'Session authentication required'
13
+ }, { status: 401 });
14
+ }
15
+ // Only owners and admins can invite members
16
+ if (auth.organizationRole !== 'owner' && auth.organizationRole !== 'admin') {
17
+ return json({
18
+ success: false,
19
+ error: 'Forbidden',
20
+ message: 'Only owners and admins can invite members'
21
+ }, { status: 403 });
22
+ }
23
+ const body = await request.json();
24
+ if (!body.email || !body.role) {
25
+ return json({
26
+ success: false,
27
+ error: 'Missing required fields',
28
+ message: 'email and role are required'
29
+ }, { status: 400 });
30
+ }
31
+ // Validate role
32
+ const validRoles = ['admin', 'editor', 'viewer'];
33
+ if (!validRoles.includes(body.role)) {
34
+ return json({
35
+ success: false,
36
+ error: 'Invalid role',
37
+ message: 'Role must be one of: admin, editor, viewer'
38
+ }, { status: 400 });
39
+ }
40
+ // Check if there's already a pending invitation for this email
41
+ const existingInvitations = await databaseAdapter.findOrganizationInvitations(auth.organizationId);
42
+ const pendingInvitation = existingInvitations.find((inv) => inv.email.toLowerCase() === body.email.toLowerCase() && inv.acceptedAt === null);
43
+ if (pendingInvitation) {
44
+ return json({
45
+ success: false,
46
+ error: 'Already invited',
47
+ message: 'This email has already been invited to the organization'
48
+ }, { status: 400 });
49
+ }
50
+ // Generate a unique invitation token
51
+ const token = crypto.randomUUID();
52
+ // Create invitation - will auto-join when user signs up
53
+ const invitation = await databaseAdapter.createInvitation({
54
+ organizationId: auth.organizationId,
55
+ email: body.email.toLowerCase(),
56
+ role: body.role,
57
+ invitedBy: auth.user.id,
58
+ token,
59
+ expiresAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000) // 7 days
60
+ });
61
+ return json({
62
+ success: true,
63
+ data: invitation,
64
+ message: 'Invitation sent successfully. User will automatically join when they sign up.'
65
+ }, { status: 201 });
66
+ }
67
+ catch (error) {
68
+ console.error('Failed to create invitation:', error);
69
+ return json({
70
+ success: false,
71
+ error: 'Failed to create invitation',
72
+ message: error instanceof Error ? error.message : 'Unknown error'
73
+ }, { status: 500 });
74
+ }
75
+ };
76
+ // DELETE /api/organizations/invitations - Cancel an invitation
77
+ export const DELETE = async ({ request, locals }) => {
78
+ try {
79
+ const { databaseAdapter } = locals.aphexCMS;
80
+ const auth = locals.auth;
81
+ if (!auth || auth.type !== 'session') {
82
+ return json({
83
+ success: false,
84
+ error: 'Unauthorized',
85
+ message: 'Session authentication required'
86
+ }, { status: 401 });
87
+ }
88
+ // Only owners and admins can cancel invitations
89
+ if (auth.organizationRole !== 'owner' && auth.organizationRole !== 'admin') {
90
+ return json({
91
+ success: false,
92
+ error: 'Forbidden',
93
+ message: 'Only owners and admins can cancel invitations'
94
+ }, { status: 403 });
95
+ }
96
+ const body = await request.json();
97
+ if (!body.invitationId) {
98
+ return json({
99
+ success: false,
100
+ error: 'Missing required field',
101
+ message: 'invitationId is required'
102
+ }, { status: 400 });
103
+ }
104
+ // Delete the invitation
105
+ const deleted = await databaseAdapter.deleteInvitation(body.invitationId);
106
+ if (!deleted) {
107
+ return json({
108
+ success: false,
109
+ error: 'Invitation not found'
110
+ }, { status: 404 });
111
+ }
112
+ return json({
113
+ success: true,
114
+ message: 'Invitation canceled successfully'
115
+ });
116
+ }
117
+ catch (error) {
118
+ console.error('Failed to cancel invitation:', error);
119
+ return json({
120
+ success: false,
121
+ error: 'Failed to cancel invitation',
122
+ message: error instanceof Error ? error.message : 'Unknown error'
123
+ }, { status: 500 });
124
+ }
125
+ };
@@ -0,0 +1,5 @@
1
+ import type { RequestHandler } from '@sveltejs/kit';
2
+ export declare const GET: RequestHandler;
3
+ export declare const DELETE: RequestHandler;
4
+ export declare const PATCH: RequestHandler;
5
+ //# sourceMappingURL=organizations-members.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"organizations-members.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-members.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,GAAG,EAAE,cAkCjB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAmIpB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cA4HnB,CAAC"}
@@ -0,0 +1,206 @@
1
+ // Aphex CMS Organization Members API Handlers
2
+ import { json } from '@sveltejs/kit';
3
+ // GET /api/organizations/members - List organization members
4
+ export const GET = async ({ locals }) => {
5
+ try {
6
+ const { databaseAdapter } = locals.aphexCMS;
7
+ const auth = locals.auth;
8
+ if (!auth || auth.type !== 'session') {
9
+ return json({
10
+ success: false,
11
+ error: 'Unauthorized',
12
+ message: 'Session authentication required'
13
+ }, { status: 401 });
14
+ }
15
+ // Get members of the current active organization
16
+ const members = await databaseAdapter.findOrganizationMembers(auth.organizationId);
17
+ return json({
18
+ success: true,
19
+ data: members
20
+ });
21
+ }
22
+ catch (error) {
23
+ console.error('Failed to fetch organization members:', error);
24
+ return json({
25
+ success: false,
26
+ error: 'Failed to fetch members',
27
+ message: error instanceof Error ? error.message : 'Unknown error'
28
+ }, { status: 500 });
29
+ }
30
+ };
31
+ // DELETE /api/organizations/members - Remove a member
32
+ export const DELETE = async ({ request, locals }) => {
33
+ try {
34
+ const { databaseAdapter } = locals.aphexCMS;
35
+ const auth = locals.auth;
36
+ if (!auth || auth.type !== 'session') {
37
+ return json({
38
+ success: false,
39
+ error: 'Unauthorized',
40
+ message: 'Session authentication required'
41
+ }, { status: 401 });
42
+ }
43
+ // Only owners and admins can remove members
44
+ if (auth.organizationRole !== 'owner' && auth.organizationRole !== 'admin') {
45
+ return json({
46
+ success: false,
47
+ error: 'Forbidden',
48
+ message: 'Only owners and admins can remove members'
49
+ }, { status: 403 });
50
+ }
51
+ const body = await request.json();
52
+ if (!body.userId) {
53
+ return json({
54
+ success: false,
55
+ error: 'Missing required field',
56
+ message: 'userId is required'
57
+ }, { status: 400 });
58
+ }
59
+ // Prevent removing yourself
60
+ if (body.userId === auth.user.id) {
61
+ return json({
62
+ success: false,
63
+ error: 'Invalid operation',
64
+ message: 'You cannot remove yourself from the organization'
65
+ }, { status: 400 });
66
+ }
67
+ // Get the target member's role
68
+ const targetMember = await databaseAdapter.findUserMembership(body.userId, auth.organizationId);
69
+ if (!targetMember) {
70
+ return json({
71
+ success: false,
72
+ error: 'Member not found',
73
+ message: 'User is not a member of this organization'
74
+ }, { status: 404 });
75
+ }
76
+ // Admins cannot remove owners
77
+ if (auth.organizationRole === 'admin' && targetMember.role === 'owner') {
78
+ return json({
79
+ success: false,
80
+ error: 'Forbidden',
81
+ message: 'Admins cannot remove owners'
82
+ }, { status: 403 });
83
+ }
84
+ // Remove the member
85
+ const removed = await databaseAdapter.removeMember(auth.organizationId, body.userId);
86
+ if (!removed) {
87
+ return json({
88
+ success: false,
89
+ error: 'Failed to remove member'
90
+ }, { status: 500 });
91
+ }
92
+ // Clear the user's session if their active org is the one they were removed from
93
+ const userSession = await databaseAdapter.findUserSession(body.userId);
94
+ if (userSession?.activeOrganizationId === auth.organizationId) {
95
+ console.log(`[Organizations]: Clearing user session for ${body.userId} - removed from active org ${auth.organizationId}`);
96
+ // Check if user has other organizations
97
+ const otherOrgs = await databaseAdapter.findUserOrganizations(body.userId);
98
+ if (otherOrgs.length > 0 && otherOrgs[0]) {
99
+ // Set their first remaining org as active
100
+ await databaseAdapter.updateUserSession(body.userId, otherOrgs[0].organization.id);
101
+ console.log(`[Organizations]: Set org ${otherOrgs[0].organization.id} as new active org for ${body.userId}`);
102
+ }
103
+ else {
104
+ // No other orgs - delete the session so invitations can be processed on next login
105
+ await databaseAdapter.deleteUserSession(body.userId);
106
+ console.log(`[Organizations]: Deleted user session for ${body.userId} - no remaining organizations`);
107
+ }
108
+ }
109
+ return json({
110
+ success: true,
111
+ message: 'Member removed successfully'
112
+ });
113
+ }
114
+ catch (error) {
115
+ console.error('Failed to remove member:', error);
116
+ return json({
117
+ success: false,
118
+ error: 'Failed to remove member',
119
+ message: error instanceof Error ? error.message : 'Unknown error'
120
+ }, { status: 500 });
121
+ }
122
+ };
123
+ // PATCH /api/organizations/members - Update member role
124
+ export const PATCH = async ({ request, locals }) => {
125
+ try {
126
+ const { databaseAdapter } = locals.aphexCMS;
127
+ const auth = locals.auth;
128
+ if (!auth || auth.type !== 'session') {
129
+ return json({
130
+ success: false,
131
+ error: 'Unauthorized',
132
+ message: 'Session authentication required'
133
+ }, { status: 401 });
134
+ }
135
+ // Only owners and admins can update roles
136
+ if (auth.organizationRole !== 'owner' && auth.organizationRole !== 'admin') {
137
+ return json({
138
+ success: false,
139
+ error: 'Forbidden',
140
+ message: 'Only owners and admins can update member roles'
141
+ }, { status: 403 });
142
+ }
143
+ const body = await request.json();
144
+ if (!body.userId || !body.role) {
145
+ return json({
146
+ success: false,
147
+ error: 'Missing required fields',
148
+ message: 'userId and role are required'
149
+ }, { status: 400 });
150
+ }
151
+ // Validate role
152
+ const validRoles = ['owner', 'admin', 'editor', 'viewer'];
153
+ if (!validRoles.includes(body.role)) {
154
+ return json({
155
+ success: false,
156
+ error: 'Invalid role',
157
+ message: 'Role must be one of: owner, admin, editor, viewer'
158
+ }, { status: 400 });
159
+ }
160
+ // Prevent changing your own role
161
+ if (body.userId === auth.user.id) {
162
+ return json({
163
+ success: false,
164
+ error: 'Invalid operation',
165
+ message: 'You cannot change your own role'
166
+ }, { status: 400 });
167
+ }
168
+ // Get the target member's current role
169
+ const targetMember = await databaseAdapter.findUserMembership(body.userId, auth.organizationId);
170
+ if (!targetMember) {
171
+ return json({
172
+ success: false,
173
+ error: 'Member not found',
174
+ message: 'User is not a member of this organization'
175
+ }, { status: 404 });
176
+ }
177
+ // Admins cannot modify owners
178
+ if (auth.organizationRole === 'admin' && targetMember.role === 'owner') {
179
+ return json({
180
+ success: false,
181
+ error: 'Forbidden',
182
+ message: 'Admins cannot modify owner roles'
183
+ }, { status: 403 });
184
+ }
185
+ // Update the role
186
+ const updatedMember = await databaseAdapter.updateMemberRole(auth.organizationId, body.userId, body.role);
187
+ if (!updatedMember) {
188
+ return json({
189
+ success: false,
190
+ error: 'Failed to update role'
191
+ }, { status: 500 });
192
+ }
193
+ return json({
194
+ success: true,
195
+ data: updatedMember
196
+ });
197
+ }
198
+ catch (error) {
199
+ console.error('Failed to update member role:', error);
200
+ return json({
201
+ success: false,
202
+ error: 'Failed to update role',
203
+ message: error instanceof Error ? error.message : 'Unknown error'
204
+ }, { status: 500 });
205
+ }
206
+ };
@@ -0,0 +1,3 @@
1
+ import type { RequestHandler } from '@sveltejs/kit';
2
+ export declare const POST: RequestHandler;
3
+ //# sourceMappingURL=organizations-switch.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"organizations-switch.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-switch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,IAAI,EAAE,cAoElB,CAAC"}
@@ -0,0 +1,53 @@
1
+ // Aphex CMS Organization Switch API Handler
2
+ import { json } from '@sveltejs/kit';
3
+ // POST /api/organizations/switch - Switch active organization
4
+ export const POST = async ({ request, locals }) => {
5
+ try {
6
+ const { databaseAdapter } = locals.aphexCMS;
7
+ const auth = locals.auth;
8
+ if (!auth || auth.type !== 'session') {
9
+ return json({
10
+ success: false,
11
+ error: 'Unauthorized',
12
+ message: 'Session authentication required'
13
+ }, { status: 401 });
14
+ }
15
+ const body = await request.json();
16
+ if (!body.organizationId) {
17
+ return json({
18
+ success: false,
19
+ error: 'Missing required field',
20
+ message: 'organizationId is required'
21
+ }, { status: 400 });
22
+ }
23
+ // Verify user is a member of the target organization
24
+ const membership = await databaseAdapter.findUserMembership(auth.user.id, body.organizationId);
25
+ if (!membership) {
26
+ return json({
27
+ success: false,
28
+ error: 'Access denied',
29
+ message: 'You are not a member of this organization'
30
+ }, { status: 403 });
31
+ }
32
+ // Update user's active organization
33
+ await databaseAdapter.updateUserSession(auth.user.id, body.organizationId);
34
+ // Get the organization details
35
+ const organization = await databaseAdapter.findOrganizationById(body.organizationId);
36
+ return json({
37
+ success: true,
38
+ data: {
39
+ organizationId: body.organizationId,
40
+ organizationName: organization?.name,
41
+ role: membership.role
42
+ }
43
+ });
44
+ }
45
+ catch (error) {
46
+ console.error('Failed to switch organization:', error);
47
+ return json({
48
+ success: false,
49
+ error: 'Failed to switch organization',
50
+ message: error instanceof Error ? error.message : 'Unknown error'
51
+ }, { status: 500 });
52
+ }
53
+ };
@@ -0,0 +1,4 @@
1
+ import type { RequestHandler } from '@sveltejs/kit';
2
+ export declare const GET: RequestHandler;
3
+ export declare const POST: RequestHandler;
4
+ //# sourceMappingURL=organizations.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,GAAG,EAAE,cA6CjB,CAAC;AAGF,eAAO,MAAM,IAAI,EAAE,cA4FlB,CAAC"}
@@ -0,0 +1,108 @@
1
+ // Aphex CMS Organization API Handlers
2
+ import { json } from '@sveltejs/kit';
3
+ // GET /api/organizations - List user's organizations
4
+ export const GET = async ({ locals }) => {
5
+ try {
6
+ const { databaseAdapter } = locals.aphexCMS;
7
+ const auth = locals.auth;
8
+ if (!auth || auth.type !== 'session') {
9
+ return json({
10
+ success: false,
11
+ error: 'Unauthorized',
12
+ message: 'Session authentication required'
13
+ }, { status: 401 });
14
+ }
15
+ // Get all organizations the user belongs to
16
+ const memberships = await databaseAdapter.findUserOrganizations(auth.user.id);
17
+ // Map to a cleaner format with organization details and user's role
18
+ const organizations = memberships.map((membership) => ({
19
+ id: membership.organization.id,
20
+ name: membership.organization.name,
21
+ slug: membership.organization.slug,
22
+ metadata: membership.organization.metadata,
23
+ role: membership.member.role,
24
+ joinedAt: membership.member.createdAt,
25
+ isActive: membership.organization.id === auth.organizationId
26
+ }));
27
+ return json({
28
+ success: true,
29
+ data: organizations
30
+ });
31
+ }
32
+ catch (error) {
33
+ console.error('Failed to fetch organizations:', error);
34
+ return json({
35
+ success: false,
36
+ error: 'Failed to fetch organizations',
37
+ message: error instanceof Error ? error.message : 'Unknown error'
38
+ }, { status: 500 });
39
+ }
40
+ };
41
+ // POST /api/organizations - Create new organization
42
+ export const POST = async ({ request, locals }) => {
43
+ try {
44
+ const { databaseAdapter } = locals.aphexCMS;
45
+ const auth = locals.auth;
46
+ if (!auth || auth.type !== 'session') {
47
+ return json({
48
+ success: false,
49
+ error: 'Unauthorized',
50
+ message: 'Session authentication required'
51
+ }, { status: 401 });
52
+ }
53
+ // Only SUPER_ADMIN can create organizations
54
+ if (auth.user.role !== 'super_admin') {
55
+ return json({
56
+ success: false,
57
+ error: 'Forbidden',
58
+ message: 'Only super admins can create organizations'
59
+ }, { status: 403 });
60
+ }
61
+ const body = await request.json();
62
+ // Validate required fields
63
+ if (!body.name || !body.slug) {
64
+ return json({
65
+ success: false,
66
+ error: 'Missing required fields',
67
+ message: 'Organization name and slug are required'
68
+ }, { status: 400 });
69
+ }
70
+ // Check if slug is already taken
71
+ const existingOrg = await databaseAdapter.findOrganizationBySlug(body.slug);
72
+ if (existingOrg) {
73
+ return json({
74
+ success: false,
75
+ error: 'Slug already exists',
76
+ message: `Organization with slug '${body.slug}' already exists`
77
+ }, { status: 409 });
78
+ }
79
+ // Create the organization
80
+ const newOrganization = await databaseAdapter.createOrganization({
81
+ name: body.name,
82
+ slug: body.slug,
83
+ metadata: body.metadata || null,
84
+ parentOrganizationId: body.parentOrganizationId || null,
85
+ createdBy: auth.user.id
86
+ });
87
+ // Add the creator as owner
88
+ await databaseAdapter.addMember({
89
+ organizationId: newOrganization.id,
90
+ userId: auth.user.id,
91
+ role: 'owner'
92
+ });
93
+ // Set as active organization for this user
94
+ await databaseAdapter.updateUserSession(auth.user.id, newOrganization.id);
95
+ return json({
96
+ success: true,
97
+ data: newOrganization
98
+ }, { status: 201 });
99
+ }
100
+ catch (error) {
101
+ console.error('Failed to create organization:', error);
102
+ return json({
103
+ success: false,
104
+ error: 'Failed to create organization',
105
+ message: error instanceof Error ? error.message : 'Unknown error'
106
+ }, { status: 500 });
107
+ }
108
+ };
@@ -0,0 +1,3 @@
1
+ import type { RequestHandler } from '@sveltejs/kit';
2
+ export declare const GET: RequestHandler;
3
+ //# sourceMappingURL=schemas-by-type.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schemas-by-type.d.ts","sourceRoot":"","sources":["../../src/lib/routes/schemas-by-type.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,eAAO,MAAM,GAAG,EAAE,cA+BjB,CAAC"}
@@ -0,0 +1,25 @@
1
+ export const GET = async ({ locals, params }) => {
2
+ const { type } = params;
3
+ const { cmsEngine } = locals.aphexCMS;
4
+ if (!type) {
5
+ return new Response(JSON.stringify({ error: 'Schema type is required' }), {
6
+ status: 400,
7
+ headers: { 'content-type': 'application/json' }
8
+ });
9
+ }
10
+ console.log('GETTING SCHEMA TYPE FROM: ', type);
11
+ const schema = cmsEngine.getSchemaTypeByName(type);
12
+ console.log('SCHEMA: ', schema);
13
+ if (!schema) {
14
+ return new Response(JSON.stringify({ error: `Schema type '${type}' not found` }), {
15
+ status: 404,
16
+ headers: { 'content-type': 'application/json' }
17
+ });
18
+ }
19
+ return new Response(JSON.stringify({
20
+ success: true,
21
+ data: schema
22
+ }), {
23
+ headers: { 'content-type': 'application/json' }
24
+ });
25
+ };
@@ -0,0 +1,3 @@
1
+ import type { RequestHandler } from '@sveltejs/kit';
2
+ export declare const GET: RequestHandler;
3
+ //# sourceMappingURL=schemas.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/lib/routes/schemas.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,eAAO,MAAM,GAAG,EAAE,cAejB,CAAC"}
@@ -0,0 +1,11 @@
1
+ export const GET = async ({ locals }) => {
2
+ const { cmsEngine } = locals.aphexCMS;
3
+ // Get schemas from config (not database) to preserve validation functions
4
+ const schemas = cmsEngine.config.schemaTypes;
5
+ return new Response(JSON.stringify({
6
+ success: true,
7
+ data: schemas
8
+ }), {
9
+ headers: { 'content-type': 'application/json' }
10
+ });
11
+ };
@@ -0,0 +1,14 @@
1
+ export { GET as getDocuments, POST as createDocument } from './routes/documents';
2
+ export { GET as getDocumentById, PUT as updateDocument, DELETE as deleteDocument } from './routes/documents-by-id';
3
+ export { POST as publishDocument, DELETE as unpublishDocument } from './routes/documents-publish';
4
+ export { GET as getAssets, POST as createAsset } from './routes/assets';
5
+ export { GET as getAssetById, PATCH as updateAsset, DELETE as deleteAsset } from './routes/assets-by-id';
6
+ export { GET as serveAssetCDN } from './routes/assets-cdn';
7
+ export { GET as getSchemas } from './routes/schemas';
8
+ export { GET as getSchemaByType } from './routes/schemas-by-type';
9
+ export { GET as getOrganizations, POST as createOrganization } from './routes/organizations';
10
+ export { GET as getOrganizationById, PATCH as updateOrganization, DELETE as deleteOrganization } from './routes/organizations-by-id';
11
+ export { POST as switchOrganization } from './routes/organizations-switch';
12
+ export { GET as getOrganizationMembers, DELETE as removeMember, PATCH as updateMemberRole } from './routes/organizations-members';
13
+ export { POST as inviteMember, DELETE as cancelInvitation } from './routes/organizations-invitations';
14
+ //# sourceMappingURL=routes-exports.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"routes-exports.d.ts","sourceRoot":"","sources":["../src/lib/routes-exports.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,IAAI,YAAY,EAAE,IAAI,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EACN,GAAG,IAAI,eAAe,EACtB,GAAG,IAAI,cAAc,EACrB,MAAM,IAAI,cAAc,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM,IAAI,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAGlG,OAAO,EAAE,GAAG,IAAI,SAAS,EAAE,IAAI,IAAI,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EACN,GAAG,IAAI,YAAY,EACnB,KAAK,IAAI,WAAW,EACpB,MAAM,IAAI,WAAW,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,GAAG,IAAI,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAG3D,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,GAAG,IAAI,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAGlE,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EACN,GAAG,IAAI,mBAAmB,EAC1B,KAAK,IAAI,kBAAkB,EAC3B,MAAM,IAAI,kBAAkB,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EACN,GAAG,IAAI,sBAAsB,EAC7B,MAAM,IAAI,YAAY,EACtB,KAAK,IAAI,gBAAgB,EACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACN,IAAI,IAAI,YAAY,EACpB,MAAM,IAAI,gBAAgB,EAC1B,MAAM,oCAAoC,CAAC"}
@@ -0,0 +1,19 @@
1
+ // Route handler exports for re-use in apps
2
+ // This file provides named exports to avoid ambiguity
3
+ // Document routes
4
+ export { GET as getDocuments, POST as createDocument } from './routes/documents';
5
+ export { GET as getDocumentById, PUT as updateDocument, DELETE as deleteDocument } from './routes/documents-by-id';
6
+ export { POST as publishDocument, DELETE as unpublishDocument } from './routes/documents-publish';
7
+ // Asset routes
8
+ export { GET as getAssets, POST as createAsset } from './routes/assets';
9
+ export { GET as getAssetById, PATCH as updateAsset, DELETE as deleteAsset } from './routes/assets-by-id';
10
+ export { GET as serveAssetCDN } from './routes/assets-cdn';
11
+ // Schema routes
12
+ export { GET as getSchemas } from './routes/schemas';
13
+ export { GET as getSchemaByType } from './routes/schemas-by-type';
14
+ // Organization routes
15
+ export { GET as getOrganizations, POST as createOrganization } from './routes/organizations';
16
+ export { GET as getOrganizationById, PATCH as updateOrganization, DELETE as deleteOrganization } from './routes/organizations-by-id';
17
+ export { POST as switchOrganization } from './routes/organizations-switch';
18
+ export { GET as getOrganizationMembers, DELETE as removeMember, PATCH as updateMemberRole } from './routes/organizations-members';
19
+ export { POST as inviteMember, DELETE as cancelInvitation } from './routes/organizations-invitations';
@@ -0,0 +1,10 @@
1
+ import type { SchemaType } from './types/index.js';
2
+ /**
3
+ * Provides schemas to child components via Svelte context
4
+ */
5
+ export declare function setSchemaContext(schemas: SchemaType[]): void;
6
+ /**
7
+ * Gets schemas from Svelte context
8
+ */
9
+ export declare function getSchemaContext(): SchemaType[];
10
+ //# sourceMappingURL=schema-context.svelte.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schema-context.svelte.d.ts","sourceRoot":"","sources":["../src/lib/schema-context.svelte.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAInD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,UAAU,EAAE,QAErD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,UAAU,EAAE,CAQ/C"}
@@ -0,0 +1,18 @@
1
+ import { getContext, setContext } from 'svelte';
2
+ const SCHEMA_CONTEXT_KEY = Symbol('aphex-schemas');
3
+ /**
4
+ * Provides schemas to child components via Svelte context
5
+ */
6
+ export function setSchemaContext(schemas) {
7
+ setContext(SCHEMA_CONTEXT_KEY, schemas);
8
+ }
9
+ /**
10
+ * Gets schemas from Svelte context
11
+ */
12
+ export function getSchemaContext() {
13
+ const schemas = getContext(SCHEMA_CONTEXT_KEY);
14
+ if (!schemas) {
15
+ throw new Error('Schema context not found. Make sure to call setSchemaContext() in a parent component.');
16
+ }
17
+ return schemas;
18
+ }