@aphexcms/cms-core 0.2.3 → 1.0.0

package/dist/api/api-keys.d.ts

@@ -0,0 +1,37 @@
+import type { ApiResponse } from './types.js';
+export interface ApiKey {
+    id: string;
+    name: string | null;
+    key?: string;
+    permissions: ('read' | 'write')[];
+    createdAt: Date | null;
+    lastRequest: Date | null;
+    expiresAt: Date | null;
+}
+export interface CreateApiKeyData {
+    name: string;
+    permissions: ('read' | 'write')[];
+    expiresInDays?: number;
+}
+export interface CreateApiKeyResponse {
+    apiKey: ApiKey & {
+        key: string;
+    };
+}
+export declare class ApiKeysApi {
+    /**
+     * Create a new API key
+     */
+    static create(data: CreateApiKeyData): Promise<ApiResponse<CreateApiKeyResponse>>;
+    /**
+     * Delete an API key
+     */
+    static remove(id: string): Promise<ApiResponse<{
+        success: boolean;
+    }>>;
+}
+export declare const apiKeys: {
+    create: typeof ApiKeysApi.create;
+    remove: typeof ApiKeysApi.remove;
+};
+//# sourceMappingURL=api-keys.d.ts.map

package/dist/api/api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../src/lib/api/api-keys.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,MAAM;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IAClC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACjC;AAED,qBAAa,UAAU;IACtB;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAIvF;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAG3E;AAED,eAAO,MAAM,OAAO;;;CAGnB,CAAC"}

package/dist/api/api-keys.js

@@ -0,0 +1,20 @@
+// API Keys client - composable API key operations
+import { apiClient } from './client.js';
+export class ApiKeysApi {
+    /**
+     * Create a new API key
+     */
+    static async create(data) {
+        return apiClient.post('/settings/api-keys', data);
+    }
+    /**
+     * Delete an API key
+     */
+    static async remove(id) {
+        return apiClient.delete(`/settings/api-keys/${id}`);
+    }
+}
+export const apiKeys = {
+    create: ApiKeysApi.create.bind(ApiKeysApi),
+    remove: ApiKeysApi.remove.bind(ApiKeysApi)
+};

package/dist/api/assets.d.ts

@@ -7,6 +7,12 @@ export interface AssetFilters {
     limit?: number;
     offset?: number;
 }
+export interface AssetReference {
+    documentId: string;
+    type: string;
+    title: string;
+    status: string | null;
+}
 export interface UpdateAssetData {
     title?: string;
     description?: string;
@@ -37,6 +43,24 @@ export declare class AssetsApi {
     static delete(id: string): Promise<ApiResponse<{
         success: boolean;
     }>>;
+    /**
+     * Bulk delete assets
+     */
+    static deleteBulk(ids: string[]): Promise<ApiResponse<{
+        deleted: number;
+        failed: number;
+    }>>;
+    /**
+     * Get documents that reference a specific asset
+     */
+    static getReferences(id: string): Promise<ApiResponse<{
+        references: AssetReference[];
+        total: number;
+    }>>;
+    /**
+     * Get reference counts for multiple assets in batch
+     */
+    static getReferenceCounts(ids: string[]): Promise<ApiResponse<Record<string, number>>>;
 }
 export declare const assets: {
     list: typeof AssetsApi.list;
@@ -44,5 +68,8 @@ export declare const assets: {
     upload: typeof AssetsApi.upload;
     update: typeof AssetsApi.update;
     delete: typeof AssetsApi.delete;
+    deleteBulk: typeof AssetsApi.deleteBulk;
+    getReferences: typeof AssetsApi.getReferences;
+    getReferenceCounts: typeof AssetsApi.getReferenceCounts;
 };
 //# sourceMappingURL=assets.d.ts.map

package/dist/api/assets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/lib/api/assets.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,YAAY;IAC5B,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,SAAS;IACrB;;OAEG;WACU,IAAI,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;IAaxE;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAI7D;;;OAGG;WACU,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAIpE;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAInF;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAG3E;AAGD,eAAO,MAAM,MAAM;;;;;;CAMlB,CAAC"}
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/lib/api/assets.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,YAAY;IAC5B,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,SAAS;IACrB;;OAEG;WACU,IAAI,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;IAaxE;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAI7D;;;OAGG;WACU,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAIpE;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAInF;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI3E;;OAEG;WACU,UAAU,CACtB,GAAG,EAAE,MAAM,EAAE,GACX,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAI5D;;OAEG;WACU,aAAa,CACzB,EAAE,EAAE,MAAM,GACR,OAAO,CAAC,WAAW,CAAC;QAAE,UAAU,EAAE,cAAc,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAMxE;;OAEG;WACU,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAG5F;AAGD,eAAO,MAAM,MAAM;;;;;;;;;CASlB,CAAC"}

package/dist/api/assets.js

@@ -41,6 +41,24 @@ export class AssetsApi {
     static async delete(id) {
         return apiClient.delete(`/assets/${id}`);
     }
+    /**
+     * Bulk delete assets
+     */
+    static async deleteBulk(ids) {
+        return apiClient.delete('/assets/bulk', { ids });
+    }
+    /**
+     * Get documents that reference a specific asset
+     */
+    static async getReferences(id) {
+        return apiClient.get(`/assets/${id}/references`);
+    }
+    /**
+     * Get reference counts for multiple assets in batch
+     */
+    static async getReferenceCounts(ids) {
+        return apiClient.post('/assets/references/counts', { ids });
+    }
 }
 // Export convenience functions for direct use
 export const assets = {
@@ -48,5 +66,8 @@ export const assets = {
     getById: AssetsApi.getById.bind(AssetsApi),
     upload: AssetsApi.upload.bind(AssetsApi),
     update: AssetsApi.update.bind(AssetsApi),
-    delete: AssetsApi.delete.bind(AssetsApi)
+    delete: AssetsApi.delete.bind(AssetsApi),
+    deleteBulk: AssetsApi.deleteBulk.bind(AssetsApi),
+    getReferences: AssetsApi.getReferences.bind(AssetsApi),
+    getReferenceCounts: AssetsApi.getReferenceCounts.bind(AssetsApi)
 };

package/dist/api/index.d.ts

@@ -3,5 +3,13 @@ export { type ApiResponse } from './types.js';
 export { documents } from './documents.js';
 export { organizations } from './organizations.js';
 export { assets } from './assets.js';
+export { user } from './user.js';
+export { apiKeys } from './api-keys.js';
+export { invitations } from './invitations.js';
+export { instance } from './instance.js';
 export type * from '../types/index.js';
+export type * from './organizations.js';
+export type * from './user.js';
+export type * from './api-keys.js';
+export type * from './invitations.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/api/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,mBAAmB,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/api/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,iBAAiB,CAAC;AACrC,mBAAmB,QAAQ,CAAC;AAC5B,mBAAmB,YAAY,CAAC;AAChC,mBAAmB,eAAe,CAAC"}

package/dist/api/index.js

@@ -3,3 +3,7 @@ export { ApiError, apiClient } from './client.js';
 export { documents } from './documents.js';
 export { organizations } from './organizations.js';
 export { assets } from './assets.js';
+export { user } from './user.js';
+export { apiKeys } from './api-keys.js';
+export { invitations } from './invitations.js';
+export { instance } from './instance.js';

package/dist/api/instance.d.ts

@@ -0,0 +1,17 @@
+import type { InstanceSettings } from '../types/instance.js';
+import type { ApiResponse } from './types.js';
+export declare class InstanceApi {
+    /**
+     * Get instance settings
+     */
+    static getSettings(): Promise<ApiResponse<InstanceSettings>>;
+    /**
+     * Update instance settings (super_admin only)
+     */
+    static updateSettings(data: Partial<InstanceSettings>): Promise<ApiResponse<InstanceSettings>>;
+}
+export declare const instance: {
+    getSettings: typeof InstanceApi.getSettings;
+    updateSettings: typeof InstanceApi.updateSettings;
+};
+//# sourceMappingURL=instance.d.ts.map

package/dist/api/instance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance.d.ts","sourceRoot":"","sources":["../../src/lib/api/instance.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,qBAAa,WAAW;IACvB;;OAEG;WACU,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAIlE;;OAEG;WACU,cAAc,CAC1B,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAC7B,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;CAGzC;AAGD,eAAO,MAAM,QAAQ;;;CAGpB,CAAC"}

package/dist/api/instance.js

@@ -0,0 +1,21 @@
+// Instance Settings API client - composable instance operations
+import { apiClient } from './client.js';
+export class InstanceApi {
+    /**
+     * Get instance settings
+     */
+    static async getSettings() {
+        return apiClient.get('/instance-settings');
+    }
+    /**
+     * Update instance settings (super_admin only)
+     */
+    static async updateSettings(data) {
+        return apiClient.patch('/instance-settings', data);
+    }
+}
+// Export convenience functions for direct use
+export const instance = {
+    getSettings: InstanceApi.getSettings.bind(InstanceApi),
+    updateSettings: InstanceApi.updateSettings.bind(InstanceApi)
+};

package/dist/api/invitations.d.ts

@@ -0,0 +1,37 @@
+import type { OrganizationRole } from '../types/organization.js';
+import type { ApiResponse } from './types.js';
+export interface PendingInvitation {
+    id: string;
+    organizationId: string;
+    organizationName: string;
+    organizationSlug: string;
+    role: OrganizationRole;
+    email: string;
+    expiresAt: Date;
+    createdAt: Date;
+}
+export interface AcceptInvitationResponse {
+    organizationId: string;
+}
+export declare class InvitationsApi {
+    /**
+     * List all pending invitations for the authenticated user
+     */
+    static listPending(): Promise<ApiResponse<PendingInvitation[]>>;
+    /**
+     * Accept a pending invitation
+     */
+    static accept(id: string): Promise<ApiResponse<AcceptInvitationResponse>>;
+    /**
+     * Reject/decline a pending invitation
+     */
+    static reject(id: string): Promise<ApiResponse<{
+        success: boolean;
+    }>>;
+}
+export declare const invitations: {
+    listPending: typeof InvitationsApi.listPending;
+    accept: typeof InvitationsApi.accept;
+    reject: typeof InvitationsApi.reject;
+};
+//# sourceMappingURL=invitations.d.ts.map

package/dist/api/invitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../src/lib/api/invitations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACxC,cAAc,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,cAAc;IAC1B;;OAEG;WACU,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAIrE;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAI/E;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAG3E;AAED,eAAO,MAAM,WAAW;;;;CAIvB,CAAC"}

package/dist/api/invitations.js

@@ -0,0 +1,27 @@
+// Invitations API client - user-scoped invitation operations
+import { apiClient } from './client.js';
+export class InvitationsApi {
+    /**
+     * List all pending invitations for the authenticated user
+     */
+    static async listPending() {
+        return apiClient.get('/invitations');
+    }
+    /**
+     * Accept a pending invitation
+     */
+    static async accept(id) {
+        return apiClient.post(`/invitations/${id}/accept`);
+    }
+    /**
+     * Reject/decline a pending invitation
+     */
+    static async reject(id) {
+        return apiClient.post(`/invitations/${id}/reject`);
+    }
+}
+export const invitations = {
+    listPending: InvitationsApi.listPending.bind(InvitationsApi),
+    accept: InvitationsApi.accept.bind(InvitationsApi),
+    reject: InvitationsApi.reject.bind(InvitationsApi)
+};

package/dist/api/organizations.d.ts

@@ -84,6 +84,12 @@ export declare class OrganizationsApi {
     static cancelInvitation(data: CancelInvitationData): Promise<ApiResponse<{
         success: boolean;
     }>>;
+    /**
+     * Delete an organization (super_admin only)
+     */
+    static remove(id: string): Promise<ApiResponse<{
+        success: boolean;
+    }>>;
 }
 export declare const organizations: {
     list: typeof OrganizationsApi.list;
@@ -92,6 +98,7 @@ export declare const organizations: {
     getById: typeof OrganizationsApi.getById;
     getActive: typeof OrganizationsApi.getActive;
     update: typeof OrganizationsApi.update;
+    remove: typeof OrganizationsApi.remove;
     getMembers: typeof OrganizationsApi.getMembers;
     inviteMember: typeof OrganizationsApi.inviteMember;
     removeMember: typeof OrganizationsApi.removeMember;

package/dist/api/organizations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/lib/api/organizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAqB,SAAQ,YAAY;IACzD,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACtC,cAAc,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,gBAAgB,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACpC,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,GAAG,CAAC;CACf;AAED,qBAAa,gBAAgB;IAC5B;;OAEG;WACU,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAIjE;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIrF;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI7F;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIpE;;OAEG;WACU,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAY5D;;OAEG;WACU,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAIrE;;OAEG;WACU,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAI3F;;OAEG;WACU,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI7F;;OAEG;WACU,gBAAgB,CAC5B,IAAI,EAAE,oBAAoB,GACxB,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAI3C;;OAEG;WACU,MAAM,CAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,sBAAsB,GAC1B,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIrC;;OAEG;WACU,gBAAgB,CAC5B,IAAI,EAAE,oBAAoB,GACxB,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAG7C;AAGD,eAAO,MAAM,aAAa;;;;;;;;;;;;CAYzB,CAAC"}
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/lib/api/organizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAqB,SAAQ,YAAY;IACzD,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACtC,cAAc,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,gBAAgB,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACpC,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,GAAG,CAAC;CACf;AAED,qBAAa,gBAAgB;IAC5B;;OAEG;WACU,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAIjE;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIrF;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI7F;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIpE;;OAEG;WACU,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAY5D;;OAEG;WACU,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAIrE;;OAEG;WACU,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAI3F;;OAEG;WACU,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI7F;;OAEG;WACU,gBAAgB,CAC5B,IAAI,EAAE,oBAAoB,GACxB,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAI3C;;OAEG;WACU,MAAM,CAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,sBAAsB,GAC1B,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIrC;;OAEG;WACU,gBAAgB,CAC5B,IAAI,EAAE,oBAAoB,GACxB,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI7C;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAG3E;AAGD,eAAO,MAAM,aAAa;;;;;;;;;;;;;CAazB,CAAC"}

package/dist/api/organizations.js

@@ -75,6 +75,12 @@ export class OrganizationsApi {
     static async cancelInvitation(data) {
         return apiClient.delete('/organizations/invitations', data);
     }
+    /**
+     * Delete an organization (super_admin only)
+     */
+    static async remove(id) {
+        return apiClient.delete(`/organizations/${id}`);
+    }
 }
 // Export convenience functions for direct use
 export const organizations = {
@@ -84,6 +90,7 @@ export const organizations = {
     getById: OrganizationsApi.getById.bind(OrganizationsApi),
     getActive: OrganizationsApi.getActive.bind(OrganizationsApi),
     update: OrganizationsApi.update.bind(OrganizationsApi),
+    remove: OrganizationsApi.remove.bind(OrganizationsApi),
     getMembers: OrganizationsApi.getMembers.bind(OrganizationsApi),
     inviteMember: OrganizationsApi.inviteMember.bind(OrganizationsApi),
     removeMember: OrganizationsApi.removeMember.bind(OrganizationsApi),

package/dist/api/types.d.ts

@@ -29,7 +29,7 @@ export interface DocumentListParams {
     limit?: number;
     offset?: number;
     depth?: number;
-    sort?: string;
+    sort?: string | string[];
     perspective?: 'draft' | 'published';
     includeChildOrganizations?: boolean;
     filterOrganizationIds?: string[];

package/dist/api/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/api/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG5D,MAAM,WAAW,cAAc;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;CACrB;AAGD,MAAM,WAAW,WAAW,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,UAAU,CAAC,EAAE,cAAc,CAAC;IAE5B,IAAI,CAAC,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAC7B,CAAC;CACF;AAGD,MAAM,WAAW,kBAAkB;IAElC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;IAEpC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAGD,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AAGD,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AAGD,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/api/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG5D,MAAM,WAAW,cAAc;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;CACrB;AAGD,MAAM,WAAW,WAAW,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,UAAU,CAAC,EAAE,cAAc,CAAC;IAE5B,IAAI,CAAC,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAC7B,CAAC;CACF;AAGD,MAAM,WAAW,kBAAkB;IAElC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;IAEpC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAGD,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AAGD,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AAGD,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC"}

package/dist/api/user.d.ts

@@ -0,0 +1,23 @@
+import type { CMSUser } from '../types/user.js';
+import type { UserSessionPreferences } from '../types/organization.js';
+import type { ApiResponse } from './types.js';
+export interface UpdateProfileData {
+    name?: string;
+}
+export declare class UserApi {
+    /**
+     * Update user profile
+     */
+    static updateProfile(data: UpdateProfileData): Promise<ApiResponse<CMSUser>>;
+    /**
+     * Update CMS preferences (e.g. includeChildOrganizations)
+     */
+    static updatePreferences(prefs: Partial<UserSessionPreferences>): Promise<ApiResponse<{
+        success: boolean;
+    }>>;
+}
+export declare const user: {
+    updateProfile: typeof UserApi.updateProfile;
+    updatePreferences: typeof UserApi.updatePreferences;
+};
+//# sourceMappingURL=user.d.ts.map

package/dist/api/user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../src/lib/api/user.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,iBAAiB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qBAAa,OAAO;IACnB;;OAEG;WACU,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAIlF;;OAEG;WACU,iBAAiB,CAC7B,KAAK,EAAE,OAAO,CAAC,sBAAsB,CAAC,GACpC,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAG7C;AAED,eAAO,MAAM,IAAI;;;CAGhB,CAAC"}

package/dist/api/user.js

@@ -0,0 +1,20 @@
+// User API client - composable user operations
+import { apiClient } from './client.js';
+export class UserApi {
+    /**
+     * Update user profile
+     */
+    static async updateProfile(data) {
+        return apiClient.patch('/user', data);
+    }
+    /**
+     * Update CMS preferences (e.g. includeChildOrganizations)
+     */
+    static async updatePreferences(prefs) {
+        return apiClient.patch('/user/cms-preference', prefs);
+    }
+}
+export const user = {
+    updateProfile: UserApi.updateProfile.bind(UserApi),
+    updatePreferences: UserApi.updatePreferences.bind(UserApi)
+};

package/dist/auth/auth-errors.d.ts

@@ -1,4 +1,4 @@
-export type AuthErrorCode = 'no_session' | 'session_expired' | 'no_organization' | 'kicked_from_org' | 'unauthorized';
+export type AuthErrorCode = 'no_session' | 'session_expired' | 'no_organization' | 'pending_invitations' | 'kicked_from_org' | 'unauthorized';
 export declare class AuthError extends Error {
     code: AuthErrorCode;
     constructor(code: AuthErrorCode, message: string);

package/dist/auth/auth-errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-errors.d.ts","sourceRoot":"","sources":["../../src/lib/auth/auth-errors.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GACtB,YAAY,GACZ,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,cAAc,CAAC;AAElB,qBAAa,SAAU,SAAQ,KAAK;IACnC,IAAI,EAAE,aAAa,CAAC;gBAER,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM;CAKhD;AAGD,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAE/E"}
+{"version":3,"file":"auth-errors.d.ts","sourceRoot":"","sources":["../../src/lib/auth/auth-errors.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GACtB,YAAY,GACZ,iBAAiB,GACjB,iBAAiB,GACjB,qBAAqB,GACrB,iBAAiB,GACjB,cAAc,CAAC;AAElB,qBAAa,SAAU,SAAQ,KAAK;IACnC,IAAI,EAAE,aAAa,CAAC;gBAER,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM;CAKhD;AAGD,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAE/E"}

package/dist/auth/auth-hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-hooks.d.ts","sourceRoot":"","sources":["../../src/lib/auth/auth-hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAQ,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,wBAAsB,cAAc,CACnC,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,SAAS,EACjB,YAAY,EAAE,YAAY,EAC1B,EAAE,EAAE,eAAe,GACjB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAoI1B"}
+{"version":3,"file":"auth-hooks.d.ts","sourceRoot":"","sources":["../../src/lib/auth/auth-hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAQ,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,wBAAsB,cAAc,CACnC,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,SAAS,EACjB,YAAY,EAAE,YAAY,EAC1B,EAAE,EAAE,eAAe,GACjB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAoJ1B"}

package/dist/auth/auth-hooks.js

@@ -11,6 +11,10 @@ export async function handleAuthHook(event, config, authProvider, db) {
         catch (error) {
             // If it's an AuthError, redirect to login with error code
             if (error instanceof AuthError) {
+                // Redirect to invitations page if user has pending invitations
+                if (error.code === 'pending_invitations') {
+                    throw redirect(302, '/invitations');
+                }
                 const loginUrl = config.auth?.loginUrl || '/login';
                 throw redirect(302, `${loginUrl}?error=${error.code}`);
             }
@@ -68,7 +72,9 @@ export async function handleAuthHook(event, config, authProvider, db) {
             '/api/assets',
             '/api/schemas',
             '/api/organizations',
-            '/api/settings'
+            '/api/invitations',
+            '/api/settings',
+            '/api/instance-settings'
         ];
         if (graphqlEndpoint) {
             protectedApiRoutes.push(graphqlEndpoint);
@@ -82,26 +88,31 @@ export async function handleAuthHook(event, config, authProvider, db) {
         }
         // Check write permission for mutations
         if (auth && ['POST', 'PUT', 'PATCH', 'DELETE'].includes(event.request.method)) {
-            // Special handling for GraphQL
-            if (graphqlEndpoint && path.startsWith(graphqlEndpoint)) {
-                // We need to read the body to check if it's a mutation.
-                // It's important to clone the request so we don't consume the body stream.
-                const requestBody = await event.request.clone().text();
-                const isMutation = requestBody.trim().startsWith('mutation');
-                if (isMutation && auth.type === 'api_key' && !auth.permissions.includes('write')) {
-                    return new Response(JSON.stringify({ error: 'Forbidden: Write permission required for mutations' }), {
-                        status: 403,
-                        headers: { 'Content-Type': 'application/json' }
-                    });
+            // Whitelist read-only POST endpoints (query operations that use POST for complex payloads)
+            const readOnlyPostEndpoints = ['/api/documents/query'];
+            const isReadOnlyPost = readOnlyPostEndpoints.some((route) => path === route);
+            if (!isReadOnlyPost) {
+                // Special handling for GraphQL
+                if (graphqlEndpoint && path.startsWith(graphqlEndpoint)) {
+                    // We need to read the body to check if it's a mutation.
+                    // It's important to clone the request so we don't consume the body stream.
+                    const requestBody = await event.request.clone().text();
+                    const isMutation = requestBody.trim().startsWith('mutation');
+                    if (isMutation && auth.type === 'api_key' && !auth.permissions.includes('write')) {
+                        return new Response(JSON.stringify({ error: 'Forbidden: Write permission required for mutations' }), {
+                            status: 403,
+                            headers: { 'Content-Type': 'application/json' }
+                        });
+                    }
                 }
-            }
-            else {
-                // Existing logic for other API routes
-                if (auth.type === 'api_key' && !auth.permissions.includes('write')) {
-                    return new Response(JSON.stringify({ error: 'Forbidden: Write permission required' }), {
-                        status: 403,
-                        headers: { 'Content-Type': 'application/json' }
-                    });
+                else {
+                    // Existing logic for other API routes
+                    if (auth.type === 'api_key' && !auth.permissions.includes('write')) {
+                        return new Response(JSON.stringify({ error: 'Forbidden: Write permission required' }), {
+                            status: 403,
+                            headers: { 'Content-Type': 'application/json' }
+                        });
+                    }
                 }
             }
         }
@@ -113,9 +124,14 @@ export async function handleAuthHook(event, config, authProvider, db) {
     // 4. All other routes - try to populate auth if session exists (optional auth)
     // This allows public pages to detect if user is logged in (like WordPress admin bar)
     if (!event.locals.auth) {
-        const auth = await authProvider.getSession(event.request, db);
-        if (auth) {
-            event.locals.auth = auth;
+        try {
+            const auth = await authProvider.getSession(event.request, db);
+            if (auth) {
+                event.locals.auth = auth;
+            }
+        }
+        catch {
+            // Silently ignore — auth is optional on non-admin/non-api routes
         }
     }
     return null; // Tell the main hook to continue

package/dist/auth/provider.d.ts

@@ -1,7 +1,7 @@
-import type { SessionAuth, ApiKeyAuth } from '../types/index.js';
+import type { SessionAuth, PartialSessionAuth, ApiKeyAuth } from '../types/index.js';
 import type { DatabaseAdapter } from '../db/interfaces/index.js';
 export interface AuthProvider {
-    getSession(request: Request, db: DatabaseAdapter): Promise<SessionAuth | null>;
+    getSession(request: Request, db: DatabaseAdapter): Promise<SessionAuth | PartialSessionAuth | null>;
     requireSession(request: Request, db: DatabaseAdapter): Promise<SessionAuth>;
     validateApiKey(request: Request, db: DatabaseAdapter): Promise<ApiKeyAuth | null>;
     requireApiKey(request: Request, db: DatabaseAdapter, permission?: 'read' | 'write'): Promise<ApiKeyAuth>;

package/dist/auth/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/lib/auth/provider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,WAAW,YAAY;IAE5B,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC/E,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAG5E,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAClF,aAAa,CACZ,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,eAAe,EACnB,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAC3B,OAAO,CAAC,UAAU,CAAC,CAAC;IAGvB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC1F,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG5D,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/lib/auth/provider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,WAAW,YAAY;IAE5B,UAAU,CACT,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,eAAe,GACjB,OAAO,CAAC,WAAW,GAAG,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACpD,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAG5E,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAClF,aAAa,CACZ,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,eAAe,EACnB,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAC3B,OAAO,CAAC,UAAU,CAAC,CAAC;IAGvB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC1F,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG5D,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE"}

package/dist/cli/generate-types.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Type generator for Aphex CMS
+ * Generates TypeScript types from schema definitions with module augmentation
+ */
+import type { SchemaType } from '../lib/types/schemas.js';
+/**
+ * Generate complete TypeScript types file with module augmentation
+ */
+export declare function generateTypes(schemas: SchemaType[]): string;
+/**
+ * CLI helper to generate types from schema file
+ */
+export declare function generateTypesFromConfig(schemaPath: string, outputPath: string): Promise<void>;
+//# sourceMappingURL=generate-types.d.ts.map

package/dist/cli/generate-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-types.d.ts","sourceRoot":"","sources":["../../src/cli/generate-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,UAAU,EAAS,MAAM,sBAAsB,CAAC;AA+K9D;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CA4C3D;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAC5C,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA2Ff"}

package/dist/cli/generate-types.js

@@ -114,10 +114,11 @@ function generateInterface(schema, schemaMap) {
         return `${comment}  ${field.name}${optional}: ${tsType};`;
     })
         .join('\n');
-    // Add id and _meta fields for document types
+    // Add id and _meta fields for document types, _type for object types
     const isDocument = schema.type === 'document';
-    const metadataFields = isDocument
-        ? `  /** Document ID */
+    let finalFields;
+    if (isDocument) {
+        finalFields = `  /** Document ID */
   id: string;
 ${fields}
   /** Document metadata */
@@ -131,9 +132,15 @@ ${fields}
     updatedBy?: string;
     publishedAt?: Date | null;
     publishedHash?: string | null;
-  };`
-        : fields;
-    return `export interface ${interfaceName} {\n${metadataFields}\n}`;
+  };`;
+    }
+    else {
+        // Object types include _type for array item discrimination
+        finalFields = `  /** Object type discriminator */
+  _type?: string;
+${fields}`;
+    }
+    return `export interface ${interfaceName} {\n${finalFields}\n}`;
 }
 /**
  * Generate the Collections interface augmentation
@@ -224,7 +231,7 @@ export async function generateTypesFromConfig(schemaPath, outputPath) {
                         name: 'remove-icons',
                         setup(build) {
                             // Intercept lucide icon imports and provide empty stub module
-                            build.onResolve({ filter: /^(lucide-svelte|@lucide\/svelte)/ }, (args) => {
+                            build.onResolve({ filter: /^@lucide\/svelte/ }, (args) => {
                                 return { path: args.path, namespace: 'lucide-stub' };
                             });
                             // Return empty stub for lucide modules
@@ -277,3 +284,4 @@ export async function generateTypesFromConfig(schemaPath, outputPath) {
         throw error;
     }
 }
+//# sourceMappingURL=generate-types.js.map