@aphexcms/cms-core 2.0.9 → 2.0.10

package/dist/routes/organizations-invitations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations-invitations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-invitations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,eAAO,MAAM,IAAI,EAAE,cAyGlB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAqEpB,CAAC"}
+{"version":3,"file":"organizations-invitations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-invitations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,eAAO,MAAM,IAAI,EAAE,cA+HlB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAuEpB,CAAC"}

package/dist/routes/organizations-invitations.js

@@ -1,6 +1,7 @@
 // Aphex CMS Organization Invitations API Handlers
 import { json } from '@sveltejs/kit';
 import { cmsLogger } from '../utils/logger.js';
+import { inviteMemberRequest, cancelInvitationRequest } from '../api/schemas/organizations.js';
 // POST /api/organizations/invitations - Create/send an invitation
 export const POST = async ({ request, locals }) => {
     try {
@@ -21,23 +22,39 @@ export const POST = async ({ request, locals }) => {
                 message: 'Only owners and admins can invite members'
             }, { status: 403 });
         }
-        const body = await request.json();
-        if (!body.email || !body.role) {
+        const rawBody = await request.json();
+        const parsed = inviteMemberRequest.safeParse(rawBody);
+        if (!parsed.success) {
             return json({
                 success: false,
-                error: 'Missing required fields',
-                message: 'email and role are required'
+                error: 'Invalid request body',
+                message: 'email and role (admin|editor|viewer) are required',
+                issues: parsed.error.issues
             }, { status: 400 });
         }
-        // Validate role
-        const validRoles = ['admin', 'editor', 'viewer'];
-        if (!validRoles.includes(body.role)) {
+        const body = parsed.data;
+        // Reject self-invitation
+        if (body.email.toLowerCase() === auth.user.email.toLowerCase()) {
             return json({
                 success: false,
-                error: 'Invalid role',
-                message: 'Role must be one of: admin, editor, viewer'
+                error: 'Invalid invitation',
+                message: 'You cannot invite yourself'
             }, { status: 400 });
         }
+        // Reject if the invitee is already a member of the organization
+        if (locals.aphexCMS.auth) {
+            const existingUser = await locals.aphexCMS.auth.getUserByEmail(body.email);
+            if (existingUser) {
+                const existingMembership = await databaseAdapter.findUserMembership(existingUser.id, auth.organizationId);
+                if (existingMembership) {
+                    return json({
+                        success: false,
+                        error: 'Already a member',
+                        message: 'This user is already a member of the organization'
+                    }, { status: 400 });
+                }
+            }
+        }
         // Check if there's already a pending invitation for this email
         const existingInvitations = await databaseAdapter.findOrganizationInvitations(auth.organizationId);
         const pendingInvitation = existingInvitations.find((inv) => inv.email.toLowerCase() === body.email.toLowerCase() && inv.acceptedAt === null);
@@ -94,14 +111,17 @@ export const DELETE = async ({ request, locals }) => {
                 message: 'Only owners and admins can cancel invitations'
             }, { status: 403 });
         }
-        const body = await request.json();
-        if (!body.invitationId) {
+        const rawBody = await request.json();
+        const parsed = cancelInvitationRequest.safeParse(rawBody);
+        if (!parsed.success) {
             return json({
                 success: false,
                 error: 'Missing required field',
-                message: 'invitationId is required'
+                message: 'invitationId is required',
+                issues: parsed.error.issues
             }, { status: 400 });
         }
+        const body = parsed.data;
         // Delete the invitation
         const deleted = await databaseAdapter.deleteInvitation(body.invitationId);
         if (!deleted) {

package/dist/routes/organizations-members.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations-members.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-members.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,eAAO,MAAM,GAAG,EAAE,cAkCjB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAmIpB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cA4HnB,CAAC"}
+{"version":3,"file":"organizations-members.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-members.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,eAAO,MAAM,GAAG,EAAE,cAkCjB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAqIpB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cAiHnB,CAAC"}

package/dist/routes/organizations-members.js

@@ -1,6 +1,7 @@
 // Aphex CMS Organization Members API Handlers
 import { json } from '@sveltejs/kit';
 import { cmsLogger } from '../utils/logger.js';
+import { removeMemberRequest, updateMemberRoleRequest } from '../api/schemas/organizations.js';
 // GET /api/organizations/members - List organization members
 export const GET = async ({ locals }) => {
     try {
@@ -49,14 +50,17 @@ export const DELETE = async ({ request, locals }) => {
                 message: 'Only owners and admins can remove members'
             }, { status: 403 });
         }
-        const body = await request.json();
-        if (!body.userId) {
+        const rawBody = await request.json();
+        const parsed = removeMemberRequest.safeParse(rawBody);
+        if (!parsed.success) {
             return json({
                 success: false,
                 error: 'Missing required field',
-                message: 'userId is required'
+                message: 'userId is required',
+                issues: parsed.error.issues
             }, { status: 400 });
         }
+        const body = parsed.data;
         // Prevent removing yourself
         if (body.userId === auth.user.id) {
             return json({
@@ -141,23 +145,17 @@ export const PATCH = async ({ request, locals }) => {
                 message: 'Only owners and admins can update member roles'
             }, { status: 403 });
         }
-        const body = await request.json();
-        if (!body.userId || !body.role) {
+        const rawBody = await request.json();
+        const parsed = updateMemberRoleRequest.safeParse(rawBody);
+        if (!parsed.success) {
             return json({
                 success: false,
-                error: 'Missing required fields',
-                message: 'userId and role are required'
-            }, { status: 400 });
-        }
-        // Validate role
-        const validRoles = ['owner', 'admin', 'editor', 'viewer'];
-        if (!validRoles.includes(body.role)) {
-            return json({
-                success: false,
-                error: 'Invalid role',
-                message: 'Role must be one of: owner, admin, editor, viewer'
+                error: 'Invalid request body',
+                message: 'userId and role (owner|admin|editor|viewer) are required',
+                issues: parsed.error.issues
             }, { status: 400 });
         }
+        const body = parsed.data;
         // Prevent changing your own role
         if (body.userId === auth.user.id) {
             return json({

package/dist/routes/organizations-switch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations-switch.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-switch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,eAAO,MAAM,IAAI,EAAE,cAoElB,CAAC"}
+{"version":3,"file":"organizations-switch.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-switch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,eAAO,MAAM,IAAI,EAAE,cAsElB,CAAC"}

package/dist/routes/organizations-switch.js

@@ -1,6 +1,7 @@
 // Aphex CMS Organization Switch API Handler
 import { json } from '@sveltejs/kit';
 import { cmsLogger } from '../utils/logger.js';
+import { switchOrganizationRequest } from '../api/schemas/organizations.js';
 // POST /api/organizations/switch - Switch active organization
 export const POST = async ({ request, locals }) => {
     try {
@@ -13,14 +14,17 @@ export const POST = async ({ request, locals }) => {
                 message: 'Session authentication required'
             }, { status: 401 });
         }
-        const body = await request.json();
-        if (!body.organizationId) {
+        const rawBody = await request.json();
+        const parsed = switchOrganizationRequest.safeParse(rawBody);
+        if (!parsed.success) {
             return json({
                 success: false,
                 error: 'Missing required field',
-                message: 'organizationId is required'
+                message: 'organizationId is required',
+                issues: parsed.error.issues
             }, { status: 400 });
         }
+        const body = parsed.data;
         // Verify user is a member of the target organization
         const membership = await databaseAdapter.findUserMembership(auth.user.id, body.organizationId);
         if (!membership) {

package/dist/routes/organizations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,eAAO,MAAM,GAAG,EAAE,cA6CjB,CAAC;AAGF,eAAO,MAAM,IAAI,EAAE,cA6FlB,CAAC"}
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,eAAO,MAAM,GAAG,EAAE,cA6CjB,CAAC;AAGF,eAAO,MAAM,IAAI,EAAE,cA8FlB,CAAC"}

package/dist/routes/organizations.js

@@ -1,6 +1,7 @@
 // Aphex CMS Organization API Handlers
 import { json } from '@sveltejs/kit';
 import { cmsLogger } from '../utils/logger.js';
+import { createOrganizationRequest } from '../api/schemas/organizations.js';
 // GET /api/organizations - List user's organizations
 export const GET = async ({ locals }) => {
     try {
@@ -59,15 +60,17 @@ export const POST = async ({ request, locals }) => {
                 message: 'Only super admins can create organizations'
             }, { status: 403 });
         }
-        const body = await request.json();
-        // Validate required fields
-        if (!body.name || !body.slug) {
+        const rawBody = await request.json();
+        const parsed = createOrganizationRequest.safeParse(rawBody);
+        if (!parsed.success) {
             return json({
                 success: false,
-                error: 'Missing required fields',
-                message: 'Organization name and slug are required'
+                error: 'Invalid request body',
+                message: 'Organization name and slug are required',
+                issues: parsed.error.issues
             }, { status: 400 });
         }
+        const body = parsed.data;
         // Check if slug is already taken
         const existingOrg = await databaseAdapter.findOrganizationBySlug(body.slug);
         if (existingOrg) {

package/dist/routes/user-preferences.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-preferences.d.ts","sourceRoot":"","sources":["../../src/lib/routes/user-preferences.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,eAAO,MAAM,GAAG,EAAE,cAiCjB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cAkEnB,CAAC"}
+{"version":3,"file":"user-preferences.d.ts","sourceRoot":"","sources":["../../src/lib/routes/user-preferences.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,eAAO,MAAM,GAAG,EAAE,cAiCjB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cAoDnB,CAAC"}

package/dist/routes/user-preferences.js

@@ -1,6 +1,7 @@
 // Aphex CMS User Preferences API Handler
 import { json } from '@sveltejs/kit';
 import { cmsLogger } from '../utils/logger.js';
+import { updateUserPreferencesRequest } from '../api/schemas/user.js';
 // GET /api/user/preferences - Get user preferences
 export const GET = async ({ locals }) => {
     try {
@@ -40,24 +41,17 @@ export const PATCH = async ({ request, locals }) => {
                 message: 'Session authentication required'
             }, { status: 401 });
         }
-        const body = (await request.json());
-        // Validate the preferences object
-        if (typeof body !== 'object' || body === null) {
+        const rawBody = await request.json();
+        const parsed = updateUserPreferencesRequest.safeParse(rawBody);
+        if (!parsed.success) {
             return json({
                 success: false,
                 error: 'Invalid request body',
-                message: 'Expected an object with preference values'
-            }, { status: 400 });
-        }
-        // Validate individual preference types
-        if (body.includeChildOrganizations !== undefined &&
-            typeof body.includeChildOrganizations !== 'boolean') {
-            return json({
-                success: false,
-                error: 'Invalid preference value',
-                message: 'includeChildOrganizations must be a boolean'
+                message: 'Invalid preference values',
+                issues: parsed.error.issues
             }, { status: 400 });
         }
+        const body = parsed.data;
         // Update preferences
         await databaseAdapter.updateUserPreferences(auth.user.id, body);
         // Get updated profile

package/package.json

@@ -1,139 +1,139 @@
 {
-	"name": "@aphexcms/cms-core",
-	"version": "2.0.9",
-	"description": "Aphex CMS Core - A Sanity-style CMS with ports and adapters architecture",
-	"publishConfig": {
-		"access": "public",
-		"provenance": true
-	},
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/IcelandicIcecream/aphex.git",
-		"directory": "packages/cms-core"
-	},
-	"type": "module",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"svelte": "./dist/index.js",
-	"bin": {
-		"aphex": "./dist/cli/index.js"
-	},
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"svelte": "./dist/index.js",
-			"default": "./dist/index.js"
-		},
-		"./server": {
-			"types": "./dist/server/index.d.ts",
-			"default": "./dist/server/index.js"
-		},
-		"./client": {
-			"types": "./dist/client/index.d.ts",
-			"default": "./dist/client/index.js"
-		},
-		"./schema": {
-			"types": "./dist/schema/index.d.ts",
-			"default": "./dist/schema/index.js"
-		},
-		"./routes/*": {
-			"types": "./dist/routes/*.d.ts",
-			"default": "./dist/routes/*.js"
-		},
-		"./*": {
-			"types": "./dist/*.d.ts",
-			"default": "./dist/*.js"
-		}
-	},
-	"files": [
-		"dist",
-		"dist/cli"
-	],
-	"scripts": {
-		"build": "svelte-package && tsc && node ../../scripts/fix-imports.js ./dist",
-		"check": "svelte-check --tsconfig ./tsconfig.json",
-		"format": "prettier --write .",
-		"lint": "prettier --check . && eslint .",
-		"package": "pnpm build && pnpm pack",
-		"dev:local": "node ../../scripts/swap-package-paths.js ./package.json src lib",
-		"prepack": "node ../../scripts/swap-package-paths.js ./package.json dist lib",
-		"postpack": "node ../../scripts/swap-package-paths.js ./package.json src lib"
-	},
-	"keywords": [
-		"cms",
-		"svelte",
-		"sveltekit",
-		"content-management",
-		"sanity-style",
-		"typescript",
-		"aphex"
-	],
-	"author": "Benjamin Sinidol",
-	"license": "MIT",
-	"peerDependencies": {
-		"@aphexcms/ui": "workspace:*",
-		"@envelop/graphql-jit": "^11.0.0",
-		"@graphql-yoga/render-graphiql": "^5.16.2",
-		"@lucide/svelte": "^0.554.0",
-		"@sveltejs/kit": "^2.49.0",
-		"bits-ui": "^2.14.4",
-		"clsx": "^2.1.1",
-		"graphql": "^16.12.0",
-		"graphql-yoga": "^5.16.2",
-		"mode-watcher": "^1.1.0",
-		"svelte": "^5.44.0",
-		"tailwind-merge": "^3.4.0",
-		"tailwind-variants": "^3.2.2"
-	},
-	"peerDependenciesMeta": {
-		"graphql": {
-			"optional": true
-		},
-		"graphql-yoga": {
-			"optional": true
-		},
-		"@envelop/graphql-jit": {
-			"optional": true
-		},
-		"@graphql-yoga/render-graphiql": {
-			"optional": true
-		}
-	},
-	"dependencies": {
-		"@clack/prompts": "^0.11.0",
-		"@dnd-kit/helpers": "^0.3.0",
-		"@dnd-kit/svelte": "^0.3.0",
-		"cac": "^6.7.14",
-		"dayjs": "^1.11.19",
-		"esbuild": "^0.27.0",
-		"picocolors": "^1.1.1",
-		"s3mini": "^0.7.0",
-		"sharp": "^0.34.5",
-		"svelte-sonner": "^1.0.7",
-		"tsx": "^4.20.6"
-	},
-	"devDependencies": {
-		"@eslint/compat": "^2.0.0",
-		"@eslint/js": "^9.39.1",
-		"@internationalized/date": "^3.10.0",
-		"@sveltejs/adapter-auto": "^7.0.0",
-		"@sveltejs/kit": "^2.49.0",
-		"@sveltejs/package": "^2.5.6",
-		"@sveltejs/vite-plugin-svelte": "^6.2.1",
-		"@tailwindcss/vite": "^4.1.17",
-		"@types/node": "^22.0.0",
-		"eslint": "^9.39.1",
-		"eslint-config-prettier": "^10.1.8",
-		"eslint-plugin-svelte": "^3.13.0",
-		"globals": "^16.5.0",
-		"prettier": "^3.6.2",
-		"prettier-plugin-svelte": "^3.4.0",
-		"prettier-plugin-tailwindcss": "^0.7.1",
-		"svelte": "^5.44.0",
-		"svelte-check": "^4.3.4",
-		"tailwindcss": "^4.1.17",
-		"typescript": "^5.9.3",
-		"typescript-eslint": "^8.48.0",
-		"vite": "^7.2.4"
-	}
-}
+  "name": "@aphexcms/cms-core",
+  "version": "2.0.10",
+  "description": "Aphex CMS Core - A Sanity-style CMS with ports and adapters architecture",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/IcelandicIcecream/aphex.git",
+    "directory": "packages/cms-core"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "svelte": "./dist/index.js",
+  "bin": {
+    "aphex": "./dist/cli/index.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "svelte": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server/index.d.ts",
+      "default": "./dist/server/index.js"
+    },
+    "./client": {
+      "types": "./dist/client/index.d.ts",
+      "default": "./dist/client/index.js"
+    },
+    "./schema": {
+      "types": "./dist/schema/index.d.ts",
+      "default": "./dist/schema/index.js"
+    },
+    "./routes/*": {
+      "types": "./dist/routes/*.d.ts",
+      "default": "./dist/routes/*.js"
+    },
+    "./*": {
+      "types": "./dist/*.d.ts",
+      "default": "./dist/*.js"
+    }
+  },
+  "files": [
+    "dist",
+    "dist/cli"
+  ],
+  "keywords": [
+    "cms",
+    "svelte",
+    "sveltekit",
+    "content-management",
+    "sanity-style",
+    "typescript",
+    "aphex"
+  ],
+  "author": "Benjamin Sinidol",
+  "license": "MIT",
+  "peerDependencies": {
+    "@envelop/graphql-jit": "^11.0.0",
+    "@graphql-yoga/render-graphiql": "^5.16.2",
+    "@lucide/svelte": "^0.554.0",
+    "@sveltejs/kit": "^2.49.0",
+    "bits-ui": "^2.14.4",
+    "clsx": "^2.1.1",
+    "graphql": "^16.12.0",
+    "graphql-yoga": "^5.16.2",
+    "mode-watcher": "^1.1.0",
+    "svelte": "^5.44.0",
+    "tailwind-merge": "^3.4.0",
+    "tailwind-variants": "^3.2.2",
+    "@aphexcms/ui": "0.3.2"
+  },
+  "peerDependenciesMeta": {
+    "graphql": {
+      "optional": true
+    },
+    "graphql-yoga": {
+      "optional": true
+    },
+    "@envelop/graphql-jit": {
+      "optional": true
+    },
+    "@graphql-yoga/render-graphiql": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "@clack/prompts": "^0.11.0",
+    "@dnd-kit/helpers": "^0.3.0",
+    "@dnd-kit/svelte": "^0.3.0",
+    "cac": "^6.7.14",
+    "dayjs": "^1.11.19",
+    "esbuild": "^0.27.0",
+    "picocolors": "^1.1.1",
+    "s3mini": "^0.7.0",
+    "sharp": "^0.34.5",
+    "svelte-sonner": "^1.0.7",
+    "tsx": "^4.20.6",
+    "zod": "^4.1.11"
+  },
+  "devDependencies": {
+    "@eslint/compat": "^2.0.0",
+    "@eslint/js": "^9.39.1",
+    "@internationalized/date": "^3.10.0",
+    "@sveltejs/adapter-auto": "^7.0.0",
+    "@sveltejs/kit": "^2.49.0",
+    "@sveltejs/package": "^2.5.6",
+    "@sveltejs/vite-plugin-svelte": "^6.2.1",
+    "@tailwindcss/vite": "^4.1.17",
+    "@types/node": "^22.0.0",
+    "eslint": "^9.39.1",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-svelte": "^3.13.0",
+    "globals": "^16.5.0",
+    "prettier": "^3.6.2",
+    "prettier-plugin-svelte": "^3.4.0",
+    "prettier-plugin-tailwindcss": "^0.7.1",
+    "svelte": "^5.44.0",
+    "svelte-check": "^4.3.4",
+    "tailwindcss": "^4.1.17",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.48.0",
+    "vite": "^7.2.4"
+  },
+  "scripts": {
+    "build": "svelte-package && tsc && node ../../scripts/fix-imports.js ./dist",
+    "dev": "tsc --watch --preserveWatchOutput",
+    "check": "svelte-check --tsconfig ./tsconfig.json",
+    "format": "prettier --write .",
+    "lint": "prettier --check . && eslint .",
+    "package": "pnpm build && pnpm pack",
+    "dev:local": "node ../../scripts/swap-package-paths.js ./package.json src lib"
+  }
+}