@aphexcms/cms-core 4.0.0 → 5.0.0

package/dist/routes/assets-by-id.js

@@ -1,115 +0,0 @@
-import { json } from '@sveltejs/kit';
-import { cmsLogger } from '../utils/logger.js';
-import { updateAssetRequest } from '../api/schemas/assets.js';
-export const GET = async ({ params, locals }) => {
-    try {
-        const { assetService } = locals.aphexCMS;
-        const auth = locals.auth;
-        const { id } = params;
-        if (!auth || auth.type === 'partial_session') {
-            return json({ success: false, error: 'Unauthorized' }, { status: 401 });
-        }
-        if (!id) {
-            return json({ success: false, error: 'Asset ID is required' }, { status: 400 });
-        }
-        const asset = await assetService.findAssetById(auth.organizationId, id);
-        if (!asset) {
-            return json({ success: false, error: 'Asset not found' }, { status: 404 });
-        }
-        // Return asset data consistent with list endpoint
-        return json({
-            success: true,
-            data: asset
-        });
-    }
-    catch (error) {
-        cmsLogger.error('[Asset API] Error fetching asset:', error);
-        return json({ success: false, error: 'Failed to fetch asset' }, { status: 500 });
-    }
-};
-export const DELETE = async ({ params, locals }) => {
-    try {
-        const { id } = params;
-        const { assetService, databaseAdapter } = locals.aphexCMS;
-        const auth = locals.auth;
-        if (!auth || auth.type === 'partial_session') {
-            return json({ success: false, error: 'Unauthorized' }, { status: 401 });
-        }
-        if (!id) {
-            return json({ success: false, error: 'Asset ID is required' }, { status: 400 });
-        }
-        // Check for document references before deleting
-        if (databaseAdapter.findDocumentsReferencingAsset) {
-            const refs = await databaseAdapter.findDocumentsReferencingAsset(auth.organizationId, id);
-            if (refs.length > 0) {
-                return json({
-                    success: false,
-                    error: `Cannot delete asset — it is referenced by ${refs.length} document${refs.length > 1 ? 's' : ''}`
-                }, { status: 409 });
-            }
-        }
-        const result = await assetService.deleteAsset(auth.organizationId, id);
-        if (!result) {
-            return json({ success: false, error: 'Asset not found or could not be deleted' }, { status: 404 });
-        }
-        return json({ success: true });
-    }
-    catch (error) {
-        cmsLogger.error('Error deleting asset:', error);
-        return json({ success: false, error: 'Failed to delete asset' }, { status: 500 });
-    }
-};
-export const PATCH = async ({ params, locals, request }) => {
-    try {
-        const { assetService } = locals.aphexCMS;
-        const auth = locals.auth;
-        const { id } = params;
-        if (!auth || auth.type === 'partial_session') {
-            return json({ success: false, error: 'Unauthorized' }, { status: 401 });
-        }
-        if (!id) {
-            return json({ success: false, error: 'Asset ID is required' }, { status: 400 });
-        }
-        const rawBody = await request.json();
-        const parsed = updateAssetRequest.safeParse(rawBody);
-        if (!parsed.success) {
-            return json({
-                success: false,
-                error: 'Invalid request body',
-                issues: parsed.error.issues
-            }, { status: 400 });
-        }
-        const { title, description, alt, creditLine } = parsed.data;
-        let updatedAsset;
-        if (auth.type == 'session') {
-            updatedAsset = await assetService.updateAssetMetadata(auth.organizationId, id, {
-                title,
-                description,
-                alt,
-                creditLine,
-                updatedBy: auth.user.id
-            });
-        }
-        else {
-            updatedAsset = await assetService.updateAssetMetadata(auth.organizationId, id, {
-                title,
-                description,
-                alt,
-                creditLine,
-                updatedBy: auth.keyId
-            });
-        }
-        if (!updatedAsset) {
-            return json({ success: false, error: 'Asset not found' }, { status: 404 });
-        }
-        // Return updated asset data consistent with list endpoint
-        return json({
-            success: true,
-            data: updatedAsset
-        });
-    }
-    catch (error) {
-        cmsLogger.error('Error updating asset:', error);
-        return json({ success: false, error: 'Failed to update asset' }, { status: 500 });
-    }
-};

package/dist/routes/assets-references-counts.d.ts

@@ -1,7 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-/**
- * POST /api/assets/references/counts
- * Get reference counts for multiple asset IDs in batch
- */
-export declare const POST: RequestHandler;
-//# sourceMappingURL=assets-references-counts.d.ts.map

package/dist/routes/assets-references-counts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"assets-references-counts.d.ts","sourceRoot":"","sources":["../../src/lib/routes/assets-references-counts.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD;;;GAGG;AACH,eAAO,MAAM,IAAI,EAAE,cAwClB,CAAC"}

package/dist/routes/assets-references-counts.js

@@ -1,41 +0,0 @@
-import { json } from '@sveltejs/kit';
-import { cmsLogger } from '../utils/logger.js';
-import { assetReferenceCountsRequest } from '../api/schemas/assets.js';
-/**
- * POST /api/assets/references/counts
- * Get reference counts for multiple asset IDs in batch
- */
-export const POST = async ({ request, locals }) => {
-    try {
-        const { databaseAdapter } = locals.aphexCMS;
-        const auth = locals.auth;
-        if (!auth || auth.type === 'partial_session') {
-            return json({ success: false, error: 'Unauthorized' }, { status: 401 });
-        }
-        const rawBody = await request.json();
-        const parsed = assetReferenceCountsRequest.safeParse(rawBody);
-        if (!parsed.success) {
-            return json({
-                success: false,
-                error: 'Invalid request body',
-                issues: parsed.error.issues
-            }, { status: 400 });
-        }
-        const { ids } = parsed.data;
-        if (ids.length === 0) {
-            return json({ success: true, data: {} });
-        }
-        if (!databaseAdapter.countDocumentReferencesForAssets) {
-            const counts = {};
-            for (const id of ids)
-                counts[id] = 0;
-            return json({ success: true, data: counts });
-        }
-        const counts = await databaseAdapter.countDocumentReferencesForAssets(auth.organizationId, ids);
-        return json({ success: true, data: counts });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to count asset references:', error);
-        return json({ success: false, error: 'Failed to count asset references' }, { status: 500 });
-    }
-};

package/dist/routes/assets-references.d.ts

@@ -1,7 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-/**
- * GET /api/assets/:id/references
- * Find documents that reference a specific asset
- */
-export declare const GET: RequestHandler;
-//# sourceMappingURL=assets-references.d.ts.map

package/dist/routes/assets-references.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"assets-references.d.ts","sourceRoot":"","sources":["../../src/lib/routes/assets-references.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD;;;GAGG;AACH,eAAO,MAAM,GAAG,EAAE,cA+BjB,CAAC"}

package/dist/routes/assets-references.js

@@ -1,34 +0,0 @@
-import { json } from '@sveltejs/kit';
-import { cmsLogger } from '../utils/logger.js';
-/**
- * GET /api/assets/:id/references
- * Find documents that reference a specific asset
- */
-export const GET = async ({ params, locals }) => {
-    try {
-        const { databaseAdapter } = locals.aphexCMS;
-        const auth = locals.auth;
-        if (!auth || auth.type === 'partial_session') {
-            return json({ success: false, error: 'Unauthorized' }, { status: 401 });
-        }
-        const { id } = params;
-        if (!id) {
-            return json({ success: false, error: 'Asset ID is required' }, { status: 400 });
-        }
-        if (!databaseAdapter.findDocumentsReferencingAsset) {
-            return json({ success: true, data: { references: [], total: 0 } });
-        }
-        const references = await databaseAdapter.findDocumentsReferencingAsset(auth.organizationId, id);
-        return json({
-            success: true,
-            data: {
-                references,
-                total: references.length
-            }
-        });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to find asset references:', error);
-        return json({ success: false, error: 'Failed to find asset references' }, { status: 500 });
-    }
-};

package/dist/routes/assets.d.ts

@@ -1,4 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const POST: RequestHandler;
-export declare const GET: RequestHandler;
-//# sourceMappingURL=assets.d.ts.map

package/dist/routes/assets.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/lib/routes/assets.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,eAAO,MAAM,IAAI,EAAE,cAuFlB,CAAC;AAEF,eAAO,MAAM,GAAG,EAAE,cAmEjB,CAAC"}

package/dist/routes/document-versions.d.ts

@@ -1,5 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const GET: RequestHandler;
-export declare const getVersion: RequestHandler;
-export declare const restoreVersion: RequestHandler;
-//# sourceMappingURL=document-versions.d.ts.map

package/dist/routes/document-versions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"document-versions.d.ts","sourceRoot":"","sources":["../../src/lib/routes/document-versions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAMpD,eAAO,MAAM,GAAG,EAAE,cAqEjB,CAAC;AAGF,eAAO,MAAM,UAAU,EAAE,cAkCxB,CAAC;AAGF,eAAO,MAAM,cAAc,EAAE,cA0C5B,CAAC"}

package/dist/routes/document-versions.js

@@ -1,113 +0,0 @@
-// Aphex CMS Document Version API Handlers
-import { json } from '@sveltejs/kit';
-import { authToContext } from '../local-api/auth-helpers.js';
-import { cmsLogger } from '../utils/logger.js';
-import { listVersionsQuery } from '../api/schemas/documents.js';
-// GET /api/documents/[id]/versions - List version history
-export const GET = async ({ params, url, locals }) => {
-    try {
-        const { localAPI, databaseAdapter } = locals.aphexCMS;
-        const context = authToContext(locals.auth);
-        const { id } = params;
-        if (!id) {
-            return json({ success: false, error: 'Document ID is required' }, { status: 400 });
-        }
-        const parsedQuery = listVersionsQuery.safeParse(Object.fromEntries(url.searchParams.entries()));
-        if (!parsedQuery.success) {
-            return json({
-                success: false,
-                error: 'Invalid query parameters',
-                issues: parsedQuery.error.issues
-            }, { status: 400 });
-        }
-        const limit = parsedQuery.data.limit ?? 25;
-        const offset = parsedQuery.data.offset ?? 0;
-        const result = await localAPI.versionService.listVersions(databaseAdapter, context.organizationId, id, { limit, offset });
-        // Resolve user names for createdBy IDs
-        const userIds = [...new Set(result.versions.map((v) => v.createdBy).filter(Boolean))];
-        const userMap = new Map();
-        if (userIds.length > 0 && locals.aphexCMS.auth) {
-            await Promise.all(userIds.map(async (userId) => {
-                // API key actions are stored as "apikey:<id>" — resolve to a friendly label
-                if (userId.startsWith('apikey:')) {
-                    userMap.set(userId, 'API Key');
-                    return;
-                }
-                try {
-                    const user = await locals.aphexCMS.auth.getUserById(userId);
-                    if (user) {
-                        userMap.set(userId, user.name || user.email);
-                    }
-                }
-                catch {
-                    // User not found — skip
-                }
-            }));
-        }
-        const versionsWithUsers = result.versions.map((v) => ({
-            ...v,
-            createdByName: v.createdBy ? userMap.get(v.createdBy) || null : null
-        }));
-        return json({
-            success: true,
-            data: versionsWithUsers,
-            total: result.total
-        });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to list document versions:', error);
-        return json({ success: false, error: 'Failed to list versions' }, { status: 500 });
-    }
-};
-// GET /api/documents/[id]/versions/[version] - Get specific version
-export const getVersion = async ({ params, locals }) => {
-    try {
-        const { localAPI, databaseAdapter } = locals.aphexCMS;
-        const context = authToContext(locals.auth);
-        const { id, version } = params;
-        if (!id || !version) {
-            return json({ success: false, error: 'Document ID and version number are required' }, { status: 400 });
-        }
-        const versionNumber = parseInt(version);
-        if (isNaN(versionNumber)) {
-            return json({ success: false, error: 'Version must be a number' }, { status: 400 });
-        }
-        const result = await localAPI.versionService.getVersion(databaseAdapter, context.organizationId, id, versionNumber);
-        if (!result) {
-            return json({ success: false, error: 'Version not found' }, { status: 404 });
-        }
-        return json({ success: true, data: result });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to get document version:', error);
-        return json({ success: false, error: 'Failed to get version' }, { status: 500 });
-    }
-};
-// POST /api/documents/[id]/versions/[version]/restore - Restore version to draft
-export const restoreVersion = async ({ params, locals }) => {
-    try {
-        const { localAPI, databaseAdapter } = locals.aphexCMS;
-        const context = authToContext(locals.auth);
-        const { id, version } = params;
-        if (!id || !version) {
-            return json({ success: false, error: 'Document ID and version number are required' }, { status: 400 });
-        }
-        const versionNumber = parseInt(version);
-        if (isNaN(versionNumber)) {
-            return json({ success: false, error: 'Version must be a number' }, { status: 400 });
-        }
-        const document = await localAPI.versionService.restoreVersion(databaseAdapter, context.organizationId, id, versionNumber, context.user?.id);
-        if (!document) {
-            return json({ success: false, error: 'Version not found or restore failed' }, { status: 404 });
-        }
-        return json({
-            success: true,
-            data: document,
-            message: `Restored to version ${versionNumber}`
-        });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to restore document version:', error);
-        return json({ success: false, error: 'Failed to restore version' }, { status: 500 });
-    }
-};

package/dist/routes/documents-by-id.d.ts

@@ -1,5 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const GET: RequestHandler;
-export declare const PUT: RequestHandler;
-export declare const DELETE: RequestHandler;
-//# sourceMappingURL=documents-by-id.d.ts.map

package/dist/routes/documents-by-id.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"documents-by-id.d.ts","sourceRoot":"","sources":["../../src/lib/routes/documents-by-id.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAQpD,eAAO,MAAM,GAAG,EAAE,cAuEjB,CAAC;AAIF,eAAO,MAAM,GAAG,EAAE,cAiGjB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cA+DpB,CAAC"}

package/dist/routes/documents-by-id.js

@@ -1,187 +0,0 @@
-// Aphex CMS Document by ID API Handlers
-import { json } from '@sveltejs/kit';
-import { authToContext } from '../local-api/auth-helpers.js';
-import { PermissionError } from '../local-api/permissions.js';
-import { cmsLogger } from '../utils/logger.js';
-import { updateDocumentRequest } from '../api/schemas/documents.js';
-// GET /api/documents/[id] - Get document by ID
-// TODO ENABLE CHILDREN ORG ACCESS BY DEFAULT - BECAUSE IF A PARENT ORG IS TRYING TO ACCESS A CHILD ORG. It should already have access to said id.
-export const GET = async ({ params, url, locals }) => {
-    try {
-        const { localAPI } = locals.aphexCMS;
-        const context = authToContext(locals.auth);
-        const { id } = params;
-        if (!id) {
-            return json({ success: false, error: 'Document ID is required' }, { status: 400 });
-        }
-        // Parse query params
-        const depthParam = url.searchParams.get('depth');
-        const depth = depthParam ? Math.max(0, Math.min(parseInt(depthParam), 5)) : 0;
-        const perspective = url.searchParams.get('perspective') || 'draft';
-        // First, fetch document to get its type (uses hierarchy-aware lookup, no RLS transaction)
-        const result = await localAPI.findDocumentById(context, id);
-        if (!result) {
-            return json({ success: false, error: 'Document not found' }, { status: 404 });
-        }
-        // Get collection API (TypeScript-safe)
-        const collection = localAPI.collections[result.type];
-        if (!collection) {
-            return json({
-                success: false,
-                error: 'Invalid document type',
-                message: `Collection '${result.type}' not found`
-            }, { status: 400 });
-        }
-        // Now use LocalAPI for permission-checked retrieval
-        const document = await collection.findByID(context, id, {
-            depth,
-            perspective
-        });
-        if (!document) {
-            return json({ success: false, error: 'Document not found' }, { status: 404 });
-        }
-        return json({
-            success: true,
-            data: document
-        });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to fetch document:', error);
-        if (error instanceof PermissionError) {
-            return json({
-                success: false,
-                error: 'Forbidden',
-                message: error.message
-            }, { status: 403 });
-        }
-        return json({
-            success: false,
-            error: 'Failed to fetch document',
-            message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
-    }
-};
-// PUT /api/documents/[id] - Update document
-// TODO ENABLE CHILDREN ORG ACCESS BY DEFAULT - BECAUSE IF A PARENT ORG IS TRYING TO ACCESS A CHILD ORG. It should already have access to said id.
-export const PUT = async ({ params, request, locals }) => {
-    try {
-        const { localAPI } = locals.aphexCMS;
-        const context = authToContext(locals.auth);
-        const { id } = params;
-        if (!id) {
-            return json({ success: false, error: 'Document ID is required' }, { status: 400 });
-        }
-        const rawBody = await request.json();
-        const parsed = updateDocumentRequest.safeParse(rawBody);
-        if (!parsed.success) {
-            return json({
-                success: false,
-                error: 'Invalid request body',
-                issues: parsed.error.issues
-            }, { status: 400 });
-        }
-        const documentData = parsed.data.draftData ?? parsed.data.data;
-        if (!documentData) {
-            return json({ success: false, error: 'Document data is required' }, { status: 400 });
-        }
-        const shouldPublish = parsed.data.publish ?? false;
-        // Fetch document to get its type (hierarchy-aware, no RLS transaction)
-        const found = await localAPI.findDocumentById(context, id);
-        if (!found) {
-            return json({ success: false, error: 'Document not found' }, { status: 404 });
-        }
-        // Get collection API (TypeScript-safe)
-        const collection = localAPI.collections[found.type];
-        if (!collection) {
-            return json({
-                success: false,
-                error: 'Invalid document type',
-                message: `Collection '${found.type}' not found`
-            }, { status: 400 });
-        }
-        // Update via LocalAPI (permission checks and validation happen inside)
-        const result = await collection.update(context, id, documentData, {
-            publish: shouldPublish
-        });
-        if (!result) {
-            return json({ success: false, error: 'Document not found' }, { status: 404 });
-        }
-        return json({
-            success: true,
-            data: result.document,
-            validation: result.validation
-        });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to update document:', error);
-        if (error instanceof PermissionError) {
-            return json({
-                success: false,
-                error: 'Forbidden',
-                message: error.message
-            }, { status: 403 });
-        }
-        // Validation errors from publish attempts
-        if (error instanceof Error && error.message.includes('validation errors')) {
-            return json({
-                success: false,
-                error: 'Validation failed',
-                message: error.message
-            }, { status: 400 });
-        }
-        return json({
-            success: false,
-            error: 'Failed to update document',
-            message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
-    }
-};
-// DELETE /api/documents/[id] - Delete document
-export const DELETE = async ({ params, locals }) => {
-    try {
-        const { localAPI } = locals.aphexCMS;
-        const context = authToContext(locals.auth);
-        const { id } = params;
-        if (!id) {
-            return json({ success: false, error: 'Document ID is required' }, { status: 400 });
-        }
-        // Fetch document to get its type (hierarchy-aware, no RLS transaction)
-        const result = await localAPI.findDocumentById(context, id);
-        if (!result) {
-            return json({ success: false, error: 'Document not found' }, { status: 404 });
-        }
-        // Get collection API (TypeScript-safe)
-        const collection = localAPI.collections[result.type];
-        if (!collection) {
-            return json({
-                success: false,
-                error: 'Invalid document type',
-                message: `Collection '${result.type}' not found`
-            }, { status: 400 });
-        }
-        // Delete via LocalAPI (permission checks happen inside)
-        const success = await collection.delete(context, id);
-        if (!success) {
-            return json({ success: false, error: 'Document not found' }, { status: 404 });
-        }
-        return json({
-            success: true,
-            message: 'Document deleted successfully'
-        });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to delete document:', error);
-        if (error instanceof PermissionError) {
-            return json({
-                success: false,
-                error: 'Forbidden',
-                message: error.message
-            }, { status: 403 });
-        }
-        return json({
-            success: false,
-            error: 'Failed to delete document',
-            message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
-    }
-};

package/dist/routes/documents-publish.d.ts

@@ -1,4 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const POST: RequestHandler;
-export declare const DELETE: RequestHandler;
-//# sourceMappingURL=documents-publish.d.ts.map

package/dist/routes/documents-publish.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"documents-publish.d.ts","sourceRoot":"","sources":["../../src/lib/routes/documents-publish.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAMpD,eAAO,MAAM,IAAI,EAAE,cAiGlB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAqFpB,CAAC"}

package/dist/routes/documents-query.d.ts

@@ -1,26 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-/**
- * POST /api/documents/query - Advanced document querying with complex filters
- *
- * Accepts LocalAPI FindOptions in request body for full filtering power
- *
- * @example
- * POST /api/documents/query
- * {
- *   "type": "page",
- *   "where": {
- *     "status": { "equals": "published" },
- *     "hero.heading": { "contains": "Welcome" },
- *     "publishedAt": { "gte": "2024-01-01" }
- *   },
- *   "limit": 20,
- *   "page": 1,
- *   "sort": ["-publishedAt", "title"],
- *   "depth": 1,
- *   "perspective": "published",
- *   "filterOrganizationIds": ["org_child1", "org_child2"],
- *   "includeChildOrganizations": false
- * }
- */
-export declare const POST: RequestHandler;
-//# sourceMappingURL=documents-query.d.ts.map

package/dist/routes/documents-query.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"documents-query.d.ts","sourceRoot":"","sources":["../../src/lib/routes/documents-query.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAWpD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,IAAI,EAAE,cAyFlB,CAAC"}