@aphexcms/cms-core 2.0.9 → 2.0.11

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Benjamin Sinidol
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/api/api-keys.d.ts

@@ -1,18 +1,19 @@
 import type { ApiResponse } from './types.js';
+import type { ApiKeyPermission, CreateApiKeyRequest } from './schemas/api-keys.js';
+import type { Capability } from '../types/capabilities.js';
 export interface ApiKey {
     id: string;
     name: string | null;
     key?: string;
-    permissions: ('read' | 'write')[];
+    /** Legacy coarse scopes; preserved for UI compatibility. */
+    permissions: ApiKeyPermission[];
+    /** Fine-grained capability allowlist (if this key was issued with one). */
+    capabilities?: Capability[];
     createdAt: Date | null;
     lastRequest: Date | null;
     expiresAt: Date | null;
 }
-export interface CreateApiKeyData {
-    name: string;
-    permissions: ('read' | 'write')[];
-    expiresInDays?: number;
-}
+export type CreateApiKeyData = CreateApiKeyRequest;
 export interface CreateApiKeyResponse {
     apiKey: ApiKey & {
         key: string;
@@ -22,7 +23,7 @@ export declare class ApiKeysApi {
     /**
      * Create a new API key
      */
-    static create(data: CreateApiKeyData): Promise<ApiResponse<CreateApiKeyResponse>>;
+    static create(data: CreateApiKeyRequest): Promise<ApiResponse<CreateApiKeyResponse>>;
     /**
      * Delete an API key
      */

package/dist/api/api-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../src/lib/api/api-keys.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,MAAM;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IAClC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACjC;AAED,qBAAa,UAAU;IACtB;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAIvF;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAG3E;AAED,eAAO,MAAM,OAAO;;;CAGnB,CAAC"}
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../src/lib/api/api-keys.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,WAAW,MAAM;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,2EAA2E;IAC3E,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC;IAC5B,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACvB;AAID,MAAM,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAEnD,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACjC;AAED,qBAAa,UAAU;IACtB;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAI1F;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAG3E;AAED,eAAO,MAAM,OAAO;;;CAGnB,CAAC"}

package/dist/api/assets.d.ts

@@ -1,29 +1,14 @@
-import type { Asset } from '../types/asset.js';
 import type { ApiResponse } from './types.js';
-export interface AssetFilters {
-    assetType?: 'image' | 'file';
-    mimeType?: string;
-    search?: string;
-    limit?: number;
-    offset?: number;
-}
-export interface AssetReference {
-    documentId: string;
-    type: string;
-    title: string;
-    status: string | null;
-}
-export interface UpdateAssetData {
-    title?: string;
-    description?: string;
-    alt?: string;
-    creditLine?: string;
-}
+import type { Asset } from '../types/asset.js';
+import type { AssetReference, ListAssetsQuery, UpdateAssetRequest } from './schemas/assets.js';
+export type AssetFilters = ListAssetsQuery;
+export type UpdateAssetData = UpdateAssetRequest;
+export type { AssetReference };
 export declare class AssetsApi {
     /**
      * List assets with optional filters
      */
-    static list(filters?: AssetFilters): Promise<ApiResponse<Asset[]>>;
+    static list(filters?: ListAssetsQuery): Promise<ApiResponse<Asset[]>>;
     /**
      * Get asset by ID
      */
@@ -36,7 +21,7 @@ export declare class AssetsApi {
     /**
      * Update asset metadata
      */
-    static update(id: string, data: UpdateAssetData): Promise<ApiResponse<Asset>>;
+    static update(id: string, data: UpdateAssetRequest): Promise<ApiResponse<Asset>>;
     /**
      * Delete an asset
      */

package/dist/api/assets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/lib/api/assets.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,YAAY;IAC5B,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,SAAS;IACrB;;OAEG;WACU,IAAI,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;IAaxE;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAI7D;;;OAGG;WACU,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAIpE;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAInF;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI3E;;OAEG;WACU,UAAU,CACtB,GAAG,EAAE,MAAM,EAAE,GACX,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAI5D;;OAEG;WACU,aAAa,CACzB,EAAE,EAAE,MAAM,GACR,OAAO,CAAC,WAAW,CAAC;QAAE,UAAU,EAAE,cAAc,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAMxE;;OAEG;WACU,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAG5F;AAGD,eAAO,MAAM,MAAM;;;;;;;;;CASlB,CAAC"}
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/lib/api/assets.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAI5F,MAAM,MAAM,YAAY,GAAG,eAAe,CAAC;AAC3C,MAAM,MAAM,eAAe,GAAG,kBAAkB,CAAC;AACjD,YAAY,EAAE,cAAc,EAAE,CAAC;AAE/B,qBAAa,SAAS;IACrB;;OAEG;WACU,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;IAI3E;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAI7D;;;OAGG;WACU,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAIpE;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAItF;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI3E;;OAEG;WACU,UAAU,CACtB,GAAG,EAAE,MAAM,EAAE,GACX,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAI5D;;OAEG;WACU,aAAa,CACzB,EAAE,EAAE,MAAM,GACR,OAAO,CAAC,WAAW,CAAC;QAAE,UAAU,EAAE,cAAc,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAMxE;;OAEG;WACU,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAG5F;AAGD,eAAO,MAAM,MAAM;;;;;;;;;CASlB,CAAC"}

package/dist/api/assets.js

@@ -5,16 +5,7 @@ export class AssetsApi {
      * List assets with optional filters
      */
     static async list(filters) {
-        const params = new URLSearchParams();
-        if (filters) {
-            Object.entries(filters).forEach(([key, value]) => {
-                if (value !== undefined) {
-                    params.append(key, String(value));
-                }
-            });
-        }
-        const query = params.toString();
-        return apiClient.get(`/assets${query ? `?${query}` : ''}`);
+        return apiClient.get('/assets', filters);
     }
     /**
      * Get asset by ID

package/dist/api/documents.d.ts

@@ -1,30 +1,34 @@
-import type { Document, DocumentListParams, CreateDocumentData, UpdateDocumentData, ApiResponse } from './types.js';
+import type { ApiResponse } from './types.js';
+import type { DocumentDTO, ListDocumentsQuery, CreateDocumentRequest, UpdateDocumentRequest, DocumentVersion, ListVersionsQuery } from './schemas/documents.js';
+export type DocumentListParams = ListDocumentsQuery;
 export declare class DocumentsApi {
     /**
      * List documents with optional filtering
      * NOTE: Requires 'type' parameter - use getByType() for convenience
      */
-    static list(params?: DocumentListParams): Promise<ApiResponse<Document[]>>;
+    static list(params?: ListDocumentsQuery): Promise<ApiResponse<DocumentDTO[]>>;
     /**
      * Get document by ID
      */
-    static getById(id: string): Promise<ApiResponse<Document>>;
+    static getById(id: string): Promise<ApiResponse<DocumentDTO>>;
     /**
      * Create new document
      */
-    static create(data: CreateDocumentData): Promise<ApiResponse<Document>>;
+    static create(data: CreateDocumentRequest): Promise<ApiResponse<DocumentDTO>>;
     /**
      * Update document draft by ID (auto-save)
+     * Request/response shapes come from the zod schema in ./schemas/documents.ts —
+     * single source of truth shared with the server handler.
      */
-    static updateById(id: string, data: UpdateDocumentData): Promise<ApiResponse<Document>>;
+    static updateById(id: string, data: UpdateDocumentRequest): Promise<ApiResponse<DocumentDTO>>;
     /**
      * Publish document (copy draft -> published)
      */
-    static publish(id: string): Promise<ApiResponse<Document>>;
+    static publish(id: string): Promise<ApiResponse<DocumentDTO>>;
     /**
      * Unpublish document (revert to draft only)
      */
-    static unpublish(id: string): Promise<ApiResponse<Document>>;
+    static unpublish(id: string): Promise<ApiResponse<DocumentDTO>>;
     /**
      * Delete document by ID
      */
@@ -32,30 +36,27 @@ export declare class DocumentsApi {
     /**
      * Get documents by type (convenience method)
      */
-    static getByType(docType: string, params?: Omit<DocumentListParams, 'docType'>): Promise<ApiResponse<Document[]>>;
+    static getByType(docType: string, params?: Omit<ListDocumentsQuery, 'docType'>): Promise<ApiResponse<DocumentDTO[]>>;
     /**
      * Get published documents only (convenience method)
      */
-    static getPublished(params?: Omit<DocumentListParams, 'status'>): Promise<ApiResponse<Document[]>>;
+    static getPublished(params?: Omit<ListDocumentsQuery, 'status'>): Promise<ApiResponse<DocumentDTO[]>>;
     /**
      * Get draft documents only (convenience method)
      */
-    static getDrafts(params?: Omit<DocumentListParams, 'status'>): Promise<ApiResponse<Document[]>>;
+    static getDrafts(params?: Omit<ListDocumentsQuery, 'status'>): Promise<ApiResponse<DocumentDTO[]>>;
     /**
      * List document version history
      */
-    static listVersions(id: string, params?: {
-        limit?: number;
-        offset?: number;
-    }): Promise<ApiResponse<any[]>>;
+    static listVersions(id: string, params?: ListVersionsQuery): Promise<ApiResponse<DocumentVersion[]>>;
     /**
      * Get a specific version
      */
-    static getVersion(id: string, versionNumber: number): Promise<ApiResponse<any>>;
+    static getVersion(id: string, versionNumber: number): Promise<ApiResponse<DocumentVersion>>;
     /**
      * Restore a version to draft
      */
-    static restoreVersion(id: string, versionNumber: number): Promise<ApiResponse<Document>>;
+    static restoreVersion(id: string, versionNumber: number): Promise<ApiResponse<DocumentDTO>>;
 }
 export declare const documents: {
     list: typeof DocumentsApi.list;

package/dist/api/documents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../src/lib/api/documents.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACX,QAAQ,EACR,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,MAAM,SAAS,CAAC;AAEjB,qBAAa,YAAY;IACxB;;;OAGG;WACU,IAAI,CAAC,MAAM,GAAE,kBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IAYpF;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAIhE;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAI7E;;OAEG;WACU,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAI7F;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAIhE;;OAEG;WACU,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAIlE;;OAEG;WACU,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAI/D;;OAEG;WACU,SAAS,CACrB,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAM,GAC9C,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IAInC;;OAEG;WACU,YAAY,CACxB,MAAM,GAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAM,GAC7C,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IAInC;;OAEG;WACU,SAAS,CACrB,MAAM,GAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAM,GAC7C,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IAInC;;OAEG;WACU,YAAY,CACxB,EAAE,EAAE,MAAM,EACV,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1C,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IAI9B;;OAEG;WACU,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAIrF;;OAEG;WACU,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;CAG9F;AAGD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;CAcrB,CAAC"}
+{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../src/lib/api/documents.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EACX,WAAW,EACX,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,MAAM,qBAAqB,CAAC;AAI7B,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAEpD,qBAAa,YAAY;IACxB;;;OAGG;WACU,IAAI,CAAC,MAAM,GAAE,kBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAUvF;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAInE;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAInF;;;;OAIG;WACU,UAAU,CACtB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GACzB,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAIpC;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAInE;;OAEG;WACU,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAIrE;;OAEG;WACU,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAI/D;;OAEG;WACU,SAAS,CACrB,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAM,GAC9C,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAItC;;OAEG;WACU,YAAY,CACxB,MAAM,GAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAM,GAC7C,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAItC;;OAEG;WACU,SAAS,CACrB,MAAM,GAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAM,GAC7C,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAItC;;OAEG;WACU,YAAY,CACxB,EAAE,EAAE,MAAM,EACV,MAAM,CAAC,EAAE,iBAAiB,GACxB,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC,CAAC;IAI1C;;OAEG;WACU,UAAU,CACtB,EAAE,EAAE,MAAM,EACV,aAAa,EAAE,MAAM,GACnB,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IAIxC;;OAEG;WACU,cAAc,CAC1B,EAAE,EAAE,MAAM,EACV,aAAa,EAAE,MAAM,GACnB,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;CAGpC;AAGD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;CAcrB,CAAC"}

package/dist/api/documents.js

@@ -6,12 +6,10 @@ export class DocumentsApi {
      * NOTE: Requires 'type' parameter - use getByType() for convenience
      */
     static async list(params = {}) {
-        // Support both 'type' and legacy 'docType' parameter
         const queryParams = {
             ...params,
             type: params.type || params.docType
         };
-        // Remove docType to avoid confusion
         delete queryParams.docType;
         return apiClient.get('/documents', queryParams);
     }
@@ -29,6 +27,8 @@ export class DocumentsApi {
     }
     /**
      * Update document draft by ID (auto-save)
+     * Request/response shapes come from the zod schema in ./schemas/documents.ts —
+     * single source of truth shared with the server handler.
      */
     static async updateById(id, data) {
         return apiClient.put(`/documents/${id}`, data);

package/dist/api/index.d.ts

@@ -2,6 +2,7 @@ export { type ApiClient, ApiError, apiClient } from './client.js';
 export { type ApiResponse } from './types.js';
 export { documents } from './documents.js';
 export { organizations } from './organizations.js';
+export { roles } from './roles.js';
 export { assets } from './assets.js';
 export { user } from './user.js';
 export { apiKeys } from './api-keys.js';

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/api/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,iBAAiB,CAAC;AACrC,mBAAmB,QAAQ,CAAC;AAC5B,mBAAmB,YAAY,CAAC;AAChC,mBAAmB,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/api/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,iBAAiB,CAAC;AACrC,mBAAmB,QAAQ,CAAC;AAC5B,mBAAmB,YAAY,CAAC;AAChC,mBAAmB,eAAe,CAAC"}

package/dist/api/index.js

@@ -2,6 +2,7 @@
 export { ApiError, apiClient } from './client.js';
 export { documents } from './documents.js';
 export { organizations } from './organizations.js';
+export { roles } from './roles.js';
 export { assets } from './assets.js';
 export { user } from './user.js';
 export { apiKeys } from './api-keys.js';

package/dist/api/organizations.d.ts

@@ -1,38 +1,18 @@
 import type { Organization, OrganizationMember, OrganizationRole } from '../types/organization.js';
 import type { ApiResponse } from './types.js';
-export interface CreateOrganizationData {
-    name: string;
-    slug: string;
-    metadata?: any;
-    parentOrganizationId?: string;
-}
+import type { CreateOrganizationRequest, UpdateOrganizationRequest, SwitchOrganizationRequest, InviteMemberRequest, UpdateMemberRoleRequest, RemoveMemberRequest, CancelInvitationRequest } from './schemas/organizations.js';
+export type CreateOrganizationData = CreateOrganizationRequest;
+export type UpdateOrganizationData = UpdateOrganizationRequest;
+export type SwitchOrganizationData = SwitchOrganizationRequest;
+export type InviteMemberData = InviteMemberRequest;
+export type UpdateMemberRoleData = UpdateMemberRoleRequest;
+export type RemoveMemberData = RemoveMemberRequest;
+export type CancelInvitationData = CancelInvitationRequest;
 export interface OrganizationListItem extends Organization {
     role: OrganizationRole;
     joinedAt: Date;
     isActive: boolean;
 }
-export interface SwitchOrganizationData {
-    organizationId: string;
-}
-export interface InviteMemberData {
-    email: string;
-    role: OrganizationRole;
-}
-export interface UpdateMemberRoleData {
-    userId: string;
-    role: OrganizationRole;
-}
-export interface RemoveMemberData {
-    userId: string;
-}
-export interface CancelInvitationData {
-    invitationId: string;
-}
-export interface UpdateOrganizationData {
-    name?: string;
-    slug?: string;
-    metadata?: any;
-}
 export declare class OrganizationsApi {
     /**
      * List user's organizations
@@ -41,11 +21,11 @@ export declare class OrganizationsApi {
     /**
      * Create new organization (super_admin only)
      */
-    static create(data: CreateOrganizationData): Promise<ApiResponse<Organization>>;
+    static create(data: CreateOrganizationRequest): Promise<ApiResponse<Organization>>;
     /**
      * Switch to a different organization
      */
-    static switch(data: SwitchOrganizationData): Promise<ApiResponse<{
+    static switch(data: SwitchOrganizationRequest): Promise<ApiResponse<{
         success: boolean;
     }>>;
     /**
@@ -63,25 +43,25 @@ export declare class OrganizationsApi {
     /**
      * Invite a member to the organization
      */
-    static inviteMember(data: InviteMemberData): Promise<ApiResponse<OrganizationMember>>;
+    static inviteMember(data: InviteMemberRequest): Promise<ApiResponse<OrganizationMember>>;
     /**
      * Remove a member from the organization
      */
-    static removeMember(data: RemoveMemberData): Promise<ApiResponse<{
+    static removeMember(data: RemoveMemberRequest): Promise<ApiResponse<{
         success: boolean;
     }>>;
     /**
      * Update a member's role
      */
-    static updateMemberRole(data: UpdateMemberRoleData): Promise<ApiResponse<OrganizationMember>>;
+    static updateMemberRole(data: UpdateMemberRoleRequest): Promise<ApiResponse<OrganizationMember>>;
     /**
      * Update organization settings
      */
-    static update(id: string, data: UpdateOrganizationData): Promise<ApiResponse<Organization>>;
+    static update(id: string, data: UpdateOrganizationRequest): Promise<ApiResponse<Organization>>;
     /**
      * Cancel a pending invitation
      */
-    static cancelInvitation(data: CancelInvitationData): Promise<ApiResponse<{
+    static cancelInvitation(data: CancelInvitationRequest): Promise<ApiResponse<{
         success: boolean;
     }>>;
     /**

package/dist/api/organizations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/lib/api/organizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAqB,SAAQ,YAAY;IACzD,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACtC,cAAc,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,gBAAgB,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACpC,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,GAAG,CAAC;CACf;AAED,qBAAa,gBAAgB;IAC5B;;OAEG;WACU,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAIjE;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIrF;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI7F;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIpE;;OAEG;WACU,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAY5D;;OAEG;WACU,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAIrE;;OAEG;WACU,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAI3F;;OAEG;WACU,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI7F;;OAEG;WACU,gBAAgB,CAC5B,IAAI,EAAE,oBAAoB,GACxB,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAI3C;;OAEG;WACU,MAAM,CAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,sBAAsB,GAC1B,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIrC;;OAEG;WACU,gBAAgB,CAC5B,IAAI,EAAE,oBAAoB,GACxB,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI7C;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAG3E;AAGD,eAAO,MAAM,aAAa;;;;;;;;;;;;;CAazB,CAAC"}
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/lib/api/organizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EACX,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,MAAM,yBAAyB,CAAC;AAIjC,MAAM,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAC/D,MAAM,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAC/D,MAAM,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAC/D,MAAM,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AACnD,MAAM,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAC3D,MAAM,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AACnD,MAAM,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE3D,MAAM,WAAW,oBAAqB,SAAQ,YAAY;IACzD,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED,qBAAa,gBAAgB;IAC5B;;OAEG;WACU,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAIjE;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIxF;;OAEG;WACU,MAAM,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAIhG;;OAEG;WACU,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIpE;;OAEG;WACU,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAY5D;;OAEG;WACU,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAIrE;;OAEG;WACU,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAI9F;;OAEG;WACU,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAIhG;;OAEG;WACU,gBAAgB,CAC5B,IAAI,EAAE,uBAAuB,GAC3B,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAI3C;;OAEG;WACU,MAAM,CAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,yBAAyB,GAC7B,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAIrC;;OAEG;WACU,gBAAgB,CAC5B,IAAI,EAAE,uBAAuB,GAC3B,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI7C;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAG3E;AAGD,eAAO,MAAM,aAAa;;;;;;;;;;;;;CAazB,CAAC"}

package/dist/api/roles.d.ts

@@ -0,0 +1,22 @@
+import type { ApiResponse } from './types.js';
+import type { Role } from '../types/capabilities.js';
+import type { CreateRoleRequest, UpdateRoleRequest } from './schemas/roles.js';
+export declare class RolesApi {
+    /** List all roles (built-in + custom) for the active organization. */
+    static list(): Promise<ApiResponse<Role[]>>;
+    /** Create a custom role. Built-in names are rejected server-side. */
+    static create(data: CreateRoleRequest): Promise<ApiResponse<Role>>;
+    /** Edit description or capabilities. Works on built-ins too. */
+    static update(name: string, data: UpdateRoleRequest): Promise<ApiResponse<Role>>;
+    /** Delete a custom role. Built-ins and in-use roles are blocked server-side. */
+    static remove(name: string): Promise<ApiResponse<{
+        success: boolean;
+    }>>;
+}
+export declare const roles: {
+    list: typeof RolesApi.list;
+    create: typeof RolesApi.create;
+    update: typeof RolesApi.update;
+    remove: typeof RolesApi.remove;
+};
+//# sourceMappingURL=roles.d.ts.map

package/dist/api/roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../src/lib/api/roles.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE5E,qBAAa,QAAQ;IACpB,sEAAsE;WACzD,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAIjD,qEAAqE;WACxD,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAIxE,gEAAgE;WACnD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAItF,gFAAgF;WACnE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAG7E;AAED,eAAO,MAAM,KAAK;;;;;CAKjB,CAAC"}

package/dist/api/roles.js

@@ -0,0 +1,26 @@
+// Roles API client — per-organization role CRUD.
+import { apiClient } from './client.js';
+export class RolesApi {
+    /** List all roles (built-in + custom) for the active organization. */
+    static async list() {
+        return apiClient.get('/roles');
+    }
+    /** Create a custom role. Built-in names are rejected server-side. */
+    static async create(data) {
+        return apiClient.post('/roles', data);
+    }
+    /** Edit description or capabilities. Works on built-ins too. */
+    static async update(name, data) {
+        return apiClient.patch(`/roles/${encodeURIComponent(name)}`, data);
+    }
+    /** Delete a custom role. Built-ins and in-use roles are blocked server-side. */
+    static async remove(name) {
+        return apiClient.delete(`/roles/${encodeURIComponent(name)}`);
+    }
+}
+export const roles = {
+    list: RolesApi.list.bind(RolesApi),
+    create: RolesApi.create.bind(RolesApi),
+    update: RolesApi.update.bind(RolesApi),
+    remove: RolesApi.remove.bind(RolesApi)
+};

package/dist/api/schemas/api-keys.d.ts

@@ -0,0 +1,62 @@
+import { z } from 'zod';
+import { type Capability } from '../../types/capabilities.js';
+export declare const apiKeyPermissionSchema: z.ZodEnum<{
+    read: "read";
+    write: "write";
+}>;
+export declare const apiKeyCapabilitySchema: z.ZodEnum<{
+    "document.read": "document.read";
+    "document.create": "document.create";
+    "document.update": "document.update";
+    "document.delete": "document.delete";
+    "document.publish": "document.publish";
+    "document.unpublish": "document.unpublish";
+    "asset.read": "asset.read";
+    "asset.upload": "asset.upload";
+    "asset.delete": "asset.delete";
+    "member.invite": "member.invite";
+    "member.remove": "member.remove";
+    "member.changeRole": "member.changeRole";
+    "apiKey.manage": "apiKey.manage";
+    "role.manage": "role.manage";
+    "org.settings": "org.settings";
+}>;
+export declare const createApiKeyRequest: z.ZodPipe<z.ZodObject<{
+    name: z.ZodString;
+    permissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        read: "read";
+        write: "write";
+    }>>>;
+    capabilities: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "document.read": "document.read";
+        "document.create": "document.create";
+        "document.update": "document.update";
+        "document.delete": "document.delete";
+        "document.publish": "document.publish";
+        "document.unpublish": "document.unpublish";
+        "asset.read": "asset.read";
+        "asset.upload": "asset.upload";
+        "asset.delete": "asset.delete";
+        "member.invite": "member.invite";
+        "member.remove": "member.remove";
+        "member.changeRole": "member.changeRole";
+        "apiKey.manage": "apiKey.manage";
+        "role.manage": "role.manage";
+        "org.settings": "org.settings";
+    }>>>;
+    expiresInDays: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>, z.ZodTransform<{
+    permissions: ("read" | "write")[] | undefined;
+    capabilities: Capability[] | undefined;
+    name: string;
+    expiresInDays?: number | undefined;
+}, {
+    name: string;
+    permissions?: ("read" | "write")[] | undefined;
+    capabilities?: ("document.read" | "document.create" | "document.update" | "document.delete" | "document.publish" | "document.unpublish" | "asset.read" | "asset.upload" | "asset.delete" | "member.invite" | "member.remove" | "member.changeRole" | "apiKey.manage" | "role.manage" | "org.settings")[] | undefined;
+    expiresInDays?: number | undefined;
+}>>;
+export type ApiKeyPermission = z.infer<typeof apiKeyPermissionSchema>;
+export type ApiKeyCapability = z.infer<typeof apiKeyCapabilitySchema>;
+export type CreateApiKeyRequest = z.infer<typeof createApiKeyRequest>;
+//# sourceMappingURL=api-keys.d.ts.map

package/dist/api/schemas/api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../../src/lib/api/schemas/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAA2C,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAIpG,eAAO,MAAM,sBAAsB;;;EAA4B,CAAC;AAEhE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;EAElC,CAAC;AASF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoB5B,CAAC;AAIL,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/api/schemas/api-keys.js

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+import { ALL_CAPABILITIES, normalizeCapabilities } from '../../types/capabilities.js';
+// ---------- Shared ----------
+export const apiKeyPermissionSchema = z.enum(['read', 'write']);
+export const apiKeyCapabilitySchema = z.enum(ALL_CAPABILITIES);
+// ---------- POST /settings/api-keys ----------
+// Two provisioning modes:
+//   1. Coarse `permissions`: 'read' alone, or 'write' (always implies read).
+//   2. Fine-grained `capabilities`: explicit allowlist; writes auto-include
+//      the matching read cap during normalization.
+// Exactly one of the two should be supplied (neither is invalid).
+export const createApiKeyRequest = z
+    .object({
+    name: z.string().min(1),
+    permissions: z.array(apiKeyPermissionSchema).optional(),
+    capabilities: z.array(apiKeyCapabilitySchema).optional(),
+    expiresInDays: z.number().int().positive().optional()
+})
+    .refine((v) => (v.permissions && v.permissions.length > 0) || (v.capabilities && v.capabilities.length > 0), { message: 'Provide at least one of `permissions` or `capabilities`.' })
+    .transform((v) => ({
+    ...v,
+    permissions: v.permissions
+        ? v.permissions.includes('write')
+            ? ['read', 'write']
+            : ['read']
+        : undefined,
+    capabilities: v.capabilities ? normalizeCapabilities(v.capabilities) : undefined
+}));