@aphexcms/cms-core 0.2.3 → 1.0.0

package/dist/routes/organizations-by-id.js

@@ -1,5 +1,6 @@
 // Aphex CMS Organization by ID API Handlers
 import { json } from '@sveltejs/kit';
+import { cmsLogger } from '../utils/logger.js';
 // GET /api/organizations/[id] - Get organization by ID
 export const GET = async ({ params, locals }) => {
     try {
@@ -42,7 +43,7 @@ export const GET = async ({ params, locals }) => {
         });
     }
     catch (error) {
-        console.error('Failed to fetch organization:', error);
+        cmsLogger.error('Failed to fetch organization:', error);
         return json({
             success: false,
             error: 'Failed to fetch organization',
@@ -112,7 +113,7 @@ export const PATCH = async ({ params, request, locals }) => {
         });
     }
     catch (error) {
-        console.error('Failed to update organization:', error);
+        cmsLogger.error('Failed to update organization:', error);
         return json({
             success: false,
             error: 'Failed to update organization',
@@ -177,7 +178,7 @@ export const DELETE = async ({ params, locals }) => {
         });
     }
     catch (error) {
-        console.error('Failed to delete organization:', error);
+        cmsLogger.error('Failed to delete organization:', error);
         return json({
             success: false,
             error: 'Failed to delete organization',

package/dist/routes/organizations-invitations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations-invitations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-invitations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,IAAI,EAAE,cAyGlB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAqEpB,CAAC"}
+{"version":3,"file":"organizations-invitations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-invitations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,eAAO,MAAM,IAAI,EAAE,cAyGlB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAqEpB,CAAC"}

package/dist/routes/organizations-invitations.js

@@ -1,5 +1,6 @@
 // Aphex CMS Organization Invitations API Handlers
 import { json } from '@sveltejs/kit';
+import { cmsLogger } from '../utils/logger.js';
 // POST /api/organizations/invitations - Create/send an invitation
 export const POST = async ({ request, locals }) => {
     try {
@@ -49,7 +50,7 @@ export const POST = async ({ request, locals }) => {
         }
         // Generate a unique invitation token
         const token = crypto.randomUUID();
-        // Create invitation - will auto-join when user signs up
+        // Create invitation - email sending is handled by the app layer
         const invitation = await databaseAdapter.createInvitation({
             organizationId: auth.organizationId,
             email: body.email.toLowerCase(),
@@ -61,11 +62,11 @@ export const POST = async ({ request, locals }) => {
         return json({
             success: true,
             data: invitation,
-            message: 'Invitation sent successfully. User will automatically join when they sign up.'
+            message: 'Invitation created successfully.'
         }, { status: 201 });
     }
     catch (error) {
-        console.error('Failed to create invitation:', error);
+        cmsLogger.error('Failed to create invitation:', error);
         return json({
             success: false,
             error: 'Failed to create invitation',
@@ -115,7 +116,7 @@ export const DELETE = async ({ request, locals }) => {
         });
     }
     catch (error) {
-        console.error('Failed to cancel invitation:', error);
+        cmsLogger.error('Failed to cancel invitation:', error);
         return json({
             success: false,
             error: 'Failed to cancel invitation',

package/dist/routes/organizations-members.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations-members.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-members.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,GAAG,EAAE,cAkCjB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAmIpB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cA4HnB,CAAC"}
+{"version":3,"file":"organizations-members.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-members.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,eAAO,MAAM,GAAG,EAAE,cAkCjB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAmIpB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cA4HnB,CAAC"}

package/dist/routes/organizations-members.js

@@ -1,5 +1,6 @@
 // Aphex CMS Organization Members API Handlers
 import { json } from '@sveltejs/kit';
+import { cmsLogger } from '../utils/logger.js';
 // GET /api/organizations/members - List organization members
 export const GET = async ({ locals }) => {
     try {
@@ -20,7 +21,7 @@ export const GET = async ({ locals }) => {
         });
     }
     catch (error) {
-        console.error('Failed to fetch organization members:', error);
+        cmsLogger.error('Failed to fetch organization members:', error);
         return json({
             success: false,
             error: 'Failed to fetch members',
@@ -92,18 +93,18 @@ export const DELETE = async ({ request, locals }) => {
         // Clear the user's session if their active org is the one they were removed from
         const userSession = await databaseAdapter.findUserSession(body.userId);
         if (userSession?.activeOrganizationId === auth.organizationId) {
-            console.log(`[Organizations]: Clearing user session for ${body.userId} - removed from active org ${auth.organizationId}`);
+            cmsLogger.debug(`[Organizations]: Clearing user session for ${body.userId} - removed from active org ${auth.organizationId}`);
             // Check if user has other organizations
             const otherOrgs = await databaseAdapter.findUserOrganizations(body.userId);
             if (otherOrgs.length > 0 && otherOrgs[0]) {
                 // Set their first remaining org as active
                 await databaseAdapter.updateUserSession(body.userId, otherOrgs[0].organization.id);
-                console.log(`[Organizations]: Set org ${otherOrgs[0].organization.id} as new active org for ${body.userId}`);
+                cmsLogger.debug(`[Organizations]: Set org ${otherOrgs[0].organization.id} as new active org for ${body.userId}`);
             }
             else {
                 // No other orgs - delete the session so invitations can be processed on next login
                 await databaseAdapter.deleteUserSession(body.userId);
-                console.log(`[Organizations]: Deleted user session for ${body.userId} - no remaining organizations`);
+                cmsLogger.debug(`[Organizations]: Deleted user session for ${body.userId} - no remaining organizations`);
             }
         }
         return json({
@@ -112,7 +113,7 @@ export const DELETE = async ({ request, locals }) => {
         });
     }
     catch (error) {
-        console.error('Failed to remove member:', error);
+        cmsLogger.error('Failed to remove member:', error);
         return json({
             success: false,
             error: 'Failed to remove member',
@@ -196,7 +197,7 @@ export const PATCH = async ({ request, locals }) => {
         });
     }
     catch (error) {
-        console.error('Failed to update member role:', error);
+        cmsLogger.error('Failed to update member role:', error);
         return json({
             success: false,
             error: 'Failed to update role',

package/dist/routes/organizations-switch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations-switch.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-switch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,IAAI,EAAE,cAoElB,CAAC"}
+{"version":3,"file":"organizations-switch.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-switch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,eAAO,MAAM,IAAI,EAAE,cAoElB,CAAC"}

package/dist/routes/organizations-switch.js

@@ -1,5 +1,6 @@
 // Aphex CMS Organization Switch API Handler
 import { json } from '@sveltejs/kit';
+import { cmsLogger } from '../utils/logger.js';
 // POST /api/organizations/switch - Switch active organization
 export const POST = async ({ request, locals }) => {
     try {
@@ -43,7 +44,7 @@ export const POST = async ({ request, locals }) => {
         });
     }
     catch (error) {
-        console.error('Failed to switch organization:', error);
+        cmsLogger.error('Failed to switch organization:', error);
         return json({
             success: false,
             error: 'Failed to switch organization',

package/dist/routes/organizations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,GAAG,EAAE,cA6CjB,CAAC;AAGF,eAAO,MAAM,IAAI,EAAE,cA6FlB,CAAC"}
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,eAAO,MAAM,GAAG,EAAE,cA6CjB,CAAC;AAGF,eAAO,MAAM,IAAI,EAAE,cA6FlB,CAAC"}

package/dist/routes/organizations.js

@@ -1,5 +1,6 @@
 // Aphex CMS Organization API Handlers
 import { json } from '@sveltejs/kit';
+import { cmsLogger } from '../utils/logger.js';
 // GET /api/organizations - List user's organizations
 export const GET = async ({ locals }) => {
     try {
@@ -30,7 +31,7 @@ export const GET = async ({ locals }) => {
         });
     }
     catch (error) {
-        console.error('Failed to fetch organizations:', error);
+        cmsLogger.error('Failed to fetch organizations:', error);
         return json({
             success: false,
             error: 'Failed to fetch organizations',
@@ -99,7 +100,7 @@ export const POST = async ({ request, locals }) => {
         }, { status: 201 });
     }
     catch (error) {
-        console.error('Failed to create organization:', error);
+        cmsLogger.error('Failed to create organization:', error);
         return json({
             success: false,
             error: 'Failed to create organization',

package/dist/routes/schemas-by-type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas-by-type.d.ts","sourceRoot":"","sources":["../../src/lib/routes/schemas-by-type.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,eAAO,MAAM,GAAG,EAAE,cA+BjB,CAAC"}
+{"version":3,"file":"schemas-by-type.d.ts","sourceRoot":"","sources":["../../src/lib/routes/schemas-by-type.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,GAAG,EAAE,cA+BjB,CAAC"}

package/dist/routes/schemas-by-type.js

@@ -1,3 +1,4 @@
+import { cmsLogger } from '../utils/logger.js';
 export const GET = async ({ locals, params }) => {
     const { type } = params;
     const { cmsEngine } = locals.aphexCMS;
@@ -7,9 +8,9 @@ export const GET = async ({ locals, params }) => {
             headers: { 'content-type': 'application/json' }
         });
     }
-    console.log('GETTING SCHEMA TYPE FROM: ', type);
+    cmsLogger.debug('GETTING SCHEMA TYPE FROM: ', type);
     const schema = cmsEngine.getSchemaTypeByName(type);
-    console.log('SCHEMA: ', schema);
+    cmsLogger.debug('SCHEMA: ', schema);
     if (!schema) {
         return new Response(JSON.stringify({ error: `Schema type '${type}' not found` }), {
             status: 404,

package/dist/routes/user-preferences.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-preferences.d.ts","sourceRoot":"","sources":["../../src/lib/routes/user-preferences.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,eAAO,MAAM,GAAG,EAAE,cAiCjB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cAkEnB,CAAC"}
+{"version":3,"file":"user-preferences.d.ts","sourceRoot":"","sources":["../../src/lib/routes/user-preferences.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,eAAO,MAAM,GAAG,EAAE,cAiCjB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cAkEnB,CAAC"}

package/dist/routes/user-preferences.js

@@ -1,5 +1,6 @@
 // Aphex CMS User Preferences API Handler
 import { json } from '@sveltejs/kit';
+import { cmsLogger } from '../utils/logger.js';
 // GET /api/user/preferences - Get user preferences
 export const GET = async ({ locals }) => {
     try {
@@ -19,7 +20,7 @@ export const GET = async ({ locals }) => {
         });
     }
     catch (error) {
-        console.error('Failed to get user preferences:', error);
+        cmsLogger.error('Failed to get user preferences:', error);
         return json({
             success: false,
             error: 'Failed to get user preferences',
@@ -67,7 +68,7 @@ export const PATCH = async ({ request, locals }) => {
         });
     }
     catch (error) {
-        console.error('Failed to update user preferences:', error);
+        cmsLogger.error('Failed to update user preferences:', error);
         return json({
             success: false,
             error: 'Failed to update user preferences',

package/dist/routes-exports.d.ts

@@ -4,6 +4,9 @@ export { POST as publishDocument, DELETE as unpublishDocument } from './routes/d
 export { GET as getAssets, POST as createAsset } from './routes/assets.js';
 export { GET as getAssetById, PATCH as updateAsset, DELETE as deleteAsset } from './routes/assets-by-id.js';
 export { GET as serveAssetCDN } from './routes/assets-cdn.js';
+export { DELETE as bulkDeleteAssets } from './routes/assets-bulk.js';
+export { GET as getAssetReferences } from './routes/assets-references.js';
+export { POST as getAssetReferenceCounts } from './routes/assets-references-counts.js';
 export { GET as getSchemas } from './routes/schemas.js';
 export { GET as getSchemaByType } from './routes/schemas-by-type.js';
 export { GET as getOrganizations, POST as createOrganization } from './routes/organizations.js';

package/dist/routes-exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes-exports.d.ts","sourceRoot":"","sources":["../src/lib/routes-exports.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,IAAI,YAAY,EAAE,IAAI,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EACN,GAAG,IAAI,eAAe,EACtB,GAAG,IAAI,cAAc,EACrB,MAAM,IAAI,cAAc,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM,IAAI,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAGlG,OAAO,EAAE,GAAG,IAAI,SAAS,EAAE,IAAI,IAAI,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EACN,GAAG,IAAI,YAAY,EACnB,KAAK,IAAI,WAAW,EACpB,MAAM,IAAI,WAAW,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,GAAG,IAAI,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAG3D,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,GAAG,IAAI,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAGlE,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EACN,GAAG,IAAI,mBAAmB,EAC1B,KAAK,IAAI,kBAAkB,EAC3B,MAAM,IAAI,kBAAkB,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EACN,GAAG,IAAI,sBAAsB,EAC7B,MAAM,IAAI,YAAY,EACtB,KAAK,IAAI,gBAAgB,EACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACN,IAAI,IAAI,YAAY,EACpB,MAAM,IAAI,gBAAgB,EAC1B,MAAM,oCAAoC,CAAC"}
+{"version":3,"file":"routes-exports.d.ts","sourceRoot":"","sources":["../src/lib/routes-exports.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,IAAI,YAAY,EAAE,IAAI,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EACN,GAAG,IAAI,eAAe,EACtB,GAAG,IAAI,cAAc,EACrB,MAAM,IAAI,cAAc,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM,IAAI,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAGlG,OAAO,EAAE,GAAG,IAAI,SAAS,EAAE,IAAI,IAAI,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EACN,GAAG,IAAI,YAAY,EACnB,KAAK,IAAI,WAAW,EACpB,MAAM,IAAI,WAAW,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,GAAG,IAAI,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,MAAM,IAAI,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,GAAG,IAAI,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,IAAI,IAAI,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAGpF,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,GAAG,IAAI,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAGlE,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EACN,GAAG,IAAI,mBAAmB,EAC1B,KAAK,IAAI,kBAAkB,EAC3B,MAAM,IAAI,kBAAkB,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EACN,GAAG,IAAI,sBAAsB,EAC7B,MAAM,IAAI,YAAY,EACtB,KAAK,IAAI,gBAAgB,EACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACN,IAAI,IAAI,YAAY,EACpB,MAAM,IAAI,gBAAgB,EAC1B,MAAM,oCAAoC,CAAC"}

package/dist/routes-exports.js

@@ -8,6 +8,9 @@ export { POST as publishDocument, DELETE as unpublishDocument } from './routes/d
 export { GET as getAssets, POST as createAsset } from './routes/assets.js';
 export { GET as getAssetById, PATCH as updateAsset, DELETE as deleteAsset } from './routes/assets-by-id.js';
 export { GET as serveAssetCDN } from './routes/assets-cdn.js';
+export { DELETE as bulkDeleteAssets } from './routes/assets-bulk.js';
+export { GET as getAssetReferences } from './routes/assets-references.js';
+export { POST as getAssetReferenceCounts } from './routes/assets-references-counts.js';
 // Schema routes
 export { GET as getSchemas } from './routes/schemas.js';
 export { GET as getSchemaByType } from './routes/schemas-by-type.js';

package/dist/schema/index.d.ts

@@ -0,0 +1,6 @@
+export * from '../types/index.js';
+export * from '../field-validation/rule.js';
+export * from '../field-validation/utils.js';
+export * from '../utils/initial-value-helpers.js';
+export * from '../schema-utils/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/schema/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/schema/index.ts"],"names":[],"mappings":"AAIA,cAAc,gBAAgB,CAAC;AAG/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAG1C,cAAc,gCAAgC,CAAC;AAG/C,cAAc,uBAAuB,CAAC"}

package/dist/schema/index.js

@@ -0,0 +1,11 @@
+// Aphex CMS Core - Schema-safe exports
+// These can be safely imported in schema files without pulling in Svelte components
+// Core types (shared between client and server)
+export * from '../types/index.js';
+// Field validation (for schema definitions)
+export * from '../field-validation/rule.js';
+export * from '../field-validation/utils.js';
+// Initial value helpers (for schema initialValue functions)
+export * from '../utils/initial-value-helpers.js';
+// Schema utilities
+export * from '../schema-utils/index.js';

package/dist/schema-utils/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/lib/schema-utils/validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAS,MAAM,kBAAkB,CAAC;AAkB1D;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAoMpE"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/lib/schema-utils/validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAS,MAAM,kBAAkB,CAAC;AAmB1D;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAoMpE"}

package/dist/schema-utils/validator.js

@@ -1,3 +1,4 @@
+import { cmsLogger } from '../utils/logger.js';
 // Reserved field names that conflict with system properties
 const RESERVED_FIELD_NAMES = [
     'id',
@@ -156,10 +157,10 @@ export function validateSchemaReferences(schemas) {
     }
     // Throw error if any validation issues found
     if (errors.length > 0) {
-        console.error('\nSchema Validation Errors:');
-        errors.forEach((error) => console.error(error));
+        cmsLogger.error('[Schema]', 'Validation errors:');
+        errors.forEach((error) => cmsLogger.error('[Schema]', error));
         // Just throw the errors directly
         throw new Error(errors.join('\n'));
     }
-    console.log('✅ Schema validation passed - all references are valid');
+    cmsLogger.info('[Schema]', 'Validation passed - all references are valid');
 }

package/dist/server/index.d.ts

@@ -3,6 +3,7 @@ export * from '../auth/provider.js';
 export * from '../email/index.js';
 export { AuthError, type AuthErrorCode } from '../auth/auth-errors.js';
 export { createCMSConfig } from '../config.js';
+export { CMSEngine } from '../engine.js';
 export { createCMSHook, type CMSInstances } from '../hooks.js';
 export * from '../db/interfaces/index.js';
 export * from '../storage/index.js';
@@ -13,5 +14,6 @@ export { AssetService } from '../services/asset-service.js';
 export * from '../routes-exports.js';
 export * from '../schema-utils/index.js';
 export { createHashForPublishing } from '../utils/content-hash.js';
+export { createGraphQLHandler, type GraphQLConfig, type GraphQLSettings, type GraphQLHandlerResult } from '../graphql/index.js';
 export { LocalAPI, createLocalAPI, getLocalAPI, CollectionAPI, PermissionChecker, PermissionError, type Collections, type LocalAPIContext, type CreateOptions, type UpdateOptions } from '../local-api/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/server/index.ts"],"names":[],"mappings":"AAIA,cAAc,gBAAgB,CAAC;AAE/B,cAAc,kBAAkB,CAAC;AAEjC,cAAc,gBAAgB,CAAC;AAG/B,OAAO,EAAE,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC;AAG5D,cAAc,wBAAwB,CAAC;AAGvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAG7C,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAIzD,cAAc,mBAAmB,CAAC;AAGlC,cAAc,uBAAuB,CAAC;AAGtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,OAAO,EACN,QAAQ,EACR,cAAc,EACd,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/server/index.ts"],"names":[],"mappings":"AAIA,cAAc,gBAAgB,CAAC;AAE/B,cAAc,kBAAkB,CAAC;AAEjC,cAAc,gBAAgB,CAAC;AAG/B,OAAO,EAAE,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC;AAG5D,cAAc,wBAAwB,CAAC;AAGvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAG7C,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAIzD,cAAc,mBAAmB,CAAC;AAGlC,cAAc,uBAAuB,CAAC;AAGtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,OAAO,EACN,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACN,QAAQ,EACR,cAAc,EACd,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,MAAM,oBAAoB,CAAC"}

package/dist/server/index.js

@@ -8,6 +8,8 @@ export * from '../email/index.js';
 export { AuthError } from '../auth/auth-errors.js';
 // Configuration system
 export { createCMSConfig } from '../config.js';
+// CMS Engine
+export { CMSEngine } from '../engine.js';
 // Hooks integration (SvelteKit server hooks)
 export { createCMSHook } from '../hooks.js';
 // Database interfaces (no longer export registry or adapters - use adapter packages)
@@ -26,5 +28,7 @@ export * from '../routes-exports.js';
 export * from '../schema-utils/index.js';
 // Content hash utilities (server-side)
 export { createHashForPublishing } from '../utils/content-hash.js';
+// GraphQL (built-in, enabled by default)
+export { createGraphQLHandler } from '../graphql/index.js';
 // Local API (unified operations layer)
 export { LocalAPI, createLocalAPI, getLocalAPI, CollectionAPI, PermissionChecker, PermissionError } from '../local-api/index.js';

package/dist/services/asset-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"asset-service.d.ts","sourceRoot":"","sources":["../../src/lib/services/asset-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE;QACV,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACnB,CAAC;CACF;AAED,MAAM,WAAW,YAAY;IAC5B,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,qBAAa,YAAY;IAEvB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,QAAQ;gBADR,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,eAAe;IAGlC;;OAEG;IACG,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC;IAoFhF;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAI9E;;;OAGG;IACG,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAmB5D;;OAEG;IACG,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAItF;;;;;OAKG;IACG,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA2BvE;;OAEG;IACG,mBAAmB,CACxB,cAAc,EAAE,MAAM,EACtB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE;QACT,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACnB,GACC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAIxB;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;QACpD,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;KAClB,CAAC;IAeF;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC;QAChC,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;KAClB,CAAC;CAWF"}
+{"version":3,"file":"asset-service.d.ts","sourceRoot":"","sources":["../../src/lib/services/asset-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAG5C,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE;QACV,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACnB,CAAC;CACF;AAED,MAAM,WAAW,YAAY;IAC5B,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,qBAAa,YAAY;IAEvB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,QAAQ;gBADR,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,eAAe;IAGlC;;OAEG;IACG,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC;IAoFhF;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAI9E;;;OAGG;IACG,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAmB5D;;OAEG;IACG,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAItF;;;;;OAKG;IACG,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA2BvE;;OAEG;IACG,mBAAmB,CACxB,cAAc,EAAE,MAAM,EACtB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE;QACT,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACnB,GACC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAIxB;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;QACpD,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;KAClB,CAAC;IAeF;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC;QAChC,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;KAClB,CAAC;CAWF"}

package/dist/services/asset-service.js

@@ -1,5 +1,6 @@
 // Asset service - orchestrates storage and database operations
 import sharp from 'sharp';
+import { cmsLogger } from '../utils/logger.js';
 /**
  * Asset service - coordinates storage and database operations
  * Maintains separation of concerns while providing unified asset management
@@ -44,7 +45,7 @@ export class AssetService {
                 metadata.dominantColor = stats.dominant;
             }
             catch (error) {
-                console.warn('Could not extract image metadata:', error);
+                cmsLogger.warn('Could not extract image metadata:', error);
             }
         }
         // 1. Store file using storage adapter
@@ -104,13 +105,13 @@ export class AssetService {
         // Check if the adapter has the global method
         if ('findAssetByIdGlobal' in this.database &&
             typeof this.database.findAssetByIdGlobal === 'function') {
-            console.log('[AssetService] Using findAssetByIdGlobal from adapter');
+            cmsLogger.debug('[AssetService] Using findAssetByIdGlobal from adapter');
             return await this.database.findAssetByIdGlobal(id);
         }
         // Fallback: not supported
-        console.warn('[AssetService] findAssetByIdGlobal not supported by this database adapter');
-        console.warn('[AssetService] Database adapter type:', this.database.constructor.name);
-        console.warn('[AssetService] Available methods:', Object.getOwnPropertyNames(Object.getPrototypeOf(this.database)));
+        cmsLogger.warn('[AssetService] findAssetByIdGlobal not supported by this database adapter');
+        cmsLogger.warn('[AssetService] Database adapter type:', this.database.constructor.name);
+        cmsLogger.warn('[AssetService] Available methods:', Object.getOwnPropertyNames(Object.getPrototypeOf(this.database)));
         return null;
     }
     /**
@@ -138,12 +139,12 @@ export class AssetService {
                 await this.storage.delete(asset.path);
             }
             catch (error) {
-                console.warn(`Failed to delete file from storage: ${asset.path}`, error);
+                cmsLogger.warn(`Failed to delete file from storage: ${asset.path}`, error);
             }
         }
         else {
             // Different adapter - log warning but continue with database cleanup
-            console.warn(`Asset ${id} was stored by '${asset.storageAdapter}' but current adapter is '${this.storage.name}'. ` +
+            cmsLogger.warn(`Asset ${id} was stored by '${asset.storageAdapter}' but current adapter is '${this.storage.name}'. ` +
                 `File at ${asset.path} may need manual cleanup.`);
         }
         // Always delete database record for clean state

package/dist/storage/adapters/local-storage-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-storage-adapter.d.ts","sourceRoot":"","sources":["../../../src/lib/storage/adapters/local-storage-adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACX,cAAc,EACd,aAAa,EACb,cAAc,EACd,WAAW,EACX,MAAM,uBAAuB,CAAC;AAa/B;;GAEG;AACH,qBAAa,mBAAoB,YAAW,cAAc;IACzD,QAAQ,CAAC,IAAI,WAAW;IACxB,OAAO,CAAC,MAAM,CAA0B;gBAE5B,MAAM,EAAE,aAAa;IAUjC;;OAEG;YACW,sBAAsB;IAcpC;;OAEG;IACH,OAAO,CAAC,aAAa;IAWrB;;OAEG;YACW,gBAAgB;IAU9B;;OAEG;IACG,KAAK,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC;IA2CvD;;;OAGG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK9C;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAU5C;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAS5C;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAM5B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAyB/E;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;CAYnC"}
+{"version":3,"file":"local-storage-adapter.d.ts","sourceRoot":"","sources":["../../../src/lib/storage/adapters/local-storage-adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACX,cAAc,EACd,aAAa,EACb,cAAc,EACd,WAAW,EACX,MAAM,uBAAuB,CAAC;AAc/B;;GAEG;AACH,qBAAa,mBAAoB,YAAW,cAAc;IACzD,QAAQ,CAAC,IAAI,WAAW;IACxB,OAAO,CAAC,MAAM,CAA0B;gBAE5B,MAAM,EAAE,aAAa;IAUjC;;OAEG;YACW,sBAAsB;IAcpC;;OAEG;IACH,OAAO,CAAC,aAAa;IAWrB;;OAEG;YACW,gBAAgB;IAU9B;;OAEG;IACG,KAAK,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC;IA2CvD;;;OAGG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK9C;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAU5C;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAS5C;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAM5B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAyB/E;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;CAYnC"}

package/dist/storage/adapters/local-storage-adapter.js

@@ -1,6 +1,7 @@
 // Pure local file system storage adapter - no database operations
 import { writeFile, mkdir, unlink, stat, readdir } from 'fs/promises';
 import { join, dirname } from 'path';
+import { cmsLogger } from '../../utils/logger.js';
 const DEFAULT_MAX_FILE_SIZE = 10 * 1024 * 1024; // 10MB
 const DEFAULT_ALLOWED_TYPES = [
     'image/jpeg',
@@ -84,7 +85,7 @@ export class LocalStorageAdapter {
         // Store internal path only - URL will be generated by API with asset ID
         // This forces all access through /assets/{id} for proper authorization
         const url = ''; // Will be populated as /assets/{assetId}/{filename} by the API
-        console.log('[LocalStorageAdapter] Storing file:', {
+        cmsLogger.debug('[LocalStorageAdapter] Storing file:', {
             filename,
             filePath,
             note: 'URL will be generated as /assets/{assetId}/{filename}',
@@ -117,7 +118,7 @@ export class LocalStorageAdapter {
             return true;
         }
         catch (error) {
-            console.warn('Could not delete file from disk:', error);
+            cmsLogger.warn('Could not delete file from disk:', error);
             return false;
         }
     }
@@ -164,7 +165,7 @@ export class LocalStorageAdapter {
             return { totalSize };
         }
         catch (error) {
-            console.error('Error getting storage info:', error);
+            cmsLogger.error('Error getting storage info:', error);
             return { totalSize: 0 };
         }
     }
@@ -180,7 +181,7 @@ export class LocalStorageAdapter {
             return true;
         }
         catch (error) {
-            console.error('Storage health check failed:', error);
+            cmsLogger.error('Storage health check failed:', error);
             return false;
         }
     }

package/dist/types/auth.d.ts

@@ -18,6 +18,18 @@ export interface SessionAuth {
         metadata?: any;
     }>;
 }
+/**
+ * Partial session — user is authenticated but has no active organization.
+ * Used for routes like /invitations where the user hasn't joined an org yet.
+ */
+export interface PartialSessionAuth {
+    type: 'partial_session';
+    user: CMSUser;
+    session: {
+        id: string;
+        expiresAt: Date;
+    };
+}
 export interface ApiKeyAuth {
     type: 'api_key';
     keyId: string;
@@ -27,7 +39,7 @@ export interface ApiKeyAuth {
     environment?: string;
     lastUsedAt?: Date;
 }
-export type Auth = SessionAuth | ApiKeyAuth;
+export type Auth = SessionAuth | PartialSessionAuth | ApiKeyAuth;
 /**
  * Check if a user has write permissions based on their organization role
  * Viewers have read-only access

package/dist/types/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/types/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,IAAI,CAAC;KAChB,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,aAAa,CAAC,EAAE,KAAK,CAAC;QACrB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,gBAAgB,CAAC;QACvB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,GAAG,CAAC;KACf,CAAC,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,MAAM,IAAI,GAAG,WAAW,GAAG,UAAU,CAAC;AAI5C;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAM5C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAKpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAKpD;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAK5C"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/types/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,IAAI,CAAC;KAChB,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,aAAa,CAAC,EAAE,KAAK,CAAC;QACrB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,gBAAgB,CAAC;QACvB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,GAAG,CAAC;KACf,CAAC,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,IAAI,CAAC;KAChB,CAAC;CACF;AAED,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,MAAM,IAAI,GAAG,WAAW,GAAG,kBAAkB,GAAG,UAAU,CAAC;AAIjE;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAM5C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAGpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAGpD;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAM5C"}

package/dist/types/auth.js

@@ -4,10 +4,11 @@
  * Viewers have read-only access
  */
 export function canWrite(auth) {
+    if (auth.type === 'partial_session')
+        return false;
     if (auth.type === 'api_key') {
         return auth.permissions.includes('write');
     }
-    // Viewers are read-only
     return auth.organizationRole !== 'viewer';
 }
 /**
@@ -15,9 +16,8 @@ export function canWrite(auth) {
  * Only owners and admins can manage members
  */
 export function canManageMembers(auth) {
-    if (auth.type === 'api_key') {
+    if (auth.type === 'api_key' || auth.type === 'partial_session')
         return false;
-    }
     return auth.organizationRole === 'owner' || auth.organizationRole === 'admin';
 }
 /**
@@ -25,15 +25,16 @@ export function canManageMembers(auth) {
  * Only owners and admins can manage API keys
  */
 export function canManageApiKeys(auth) {
-    if (auth.type === 'api_key') {
+    if (auth.type === 'api_key' || auth.type === 'partial_session')
         return false;
-    }
     return auth.organizationRole === 'owner' || auth.organizationRole === 'admin';
 }
 /**
  * Check if a user is a viewer (read-only access)
  */
 export function isViewer(auth) {
+    if (auth.type === 'partial_session')
+        return true;
     if (auth.type === 'api_key') {
         return !auth.permissions.includes('write');
     }

package/dist/types/config.d.ts

@@ -2,7 +2,9 @@ import type { AuthProvider } from '../auth/provider.js';
 import type { DatabaseAdapter } from '../db/index.js';
 import type { StorageAdapter } from '../storage/interfaces/index.js';
 import type { EmailAdapter } from '../email/index.js';
-import { SchemaType } from './schemas.js';
+import type { GraphQLConfig } from '../graphql/index.js';
+import type { SchemaType } from './schemas.js';
+export type { GraphQLConfig };
 export interface CMSPlugin {
     name: string;
     version: string;
@@ -47,6 +49,17 @@ export interface CMSConfig {
             fonts?: Record<string, string>;
         };
     };
+    /**
+     * GraphQL API configuration.
+     * - `true` or `undefined`: enabled with defaults (endpoint: /api/graphql, GraphiQL: on)
+     * - `false`: disabled entirely
+     * - `GraphQLConfig` object: enabled with custom options
+     */
+    graphql?: boolean | GraphQLConfig;
+    /**
+     * Log level for CMS output. Defaults to 'debug' in dev, 'warn' in production.
+     */
+    logLevel?: 'debug' | 'info' | 'warn' | 'error' | 'none';
     plugins?: CMSPluginConfig[];
     auth?: {
         provider: AuthProvider;

package/dist/types/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/types/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAA;KAAE,CAAC;IAC1E,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE;YACV,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,EAAE;YACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC/B,CAAC;KACF,CAAC;IACF,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE;QACN,QAAQ,EAAE,YAAY,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,QAAQ,CAAC,EAAE;QACV;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACF"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/types/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAA;KAAE,CAAC;IAC1E,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE;YACV,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,EAAE;YACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC/B,CAAC;KACF,CAAC;IACF;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAClC;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACxD,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE;QACN,QAAQ,EAAE,YAAY,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,QAAQ,CAAC,EAAE;QACV;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACF"}

package/dist/types/document.d.ts

@@ -1,4 +1,4 @@
-import { AuthUser } from '../types/user.js';
+import type { AuthUser } from '../types/user.js';
 /**
  * Document type - represents a CMS document
  */

package/dist/types/document.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../src/lib/types/document.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC;;GAEG;AACH,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,GAAG,CAAC;IACf,aAAa,EAAE,GAAG,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAAC;IACtC,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB"}
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../src/lib/types/document.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C;;GAEG;AACH,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,GAAG,CAAC;IACf,aAAa,EAAE,GAAG,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAAC;IACtC,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB"}

package/dist/types/index.d.ts

@@ -7,4 +7,5 @@ export * from './user.js';
 export * from './sidebar.js';
 export * from './organization.js';
 export * from './filters.js';
+export * from './instance.js';
 //# sourceMappingURL=index.d.ts.map