@aphexcms/cms-core 4.0.0 → 5.0.0

package/dist/routes/documents-query.js

@@ -1,103 +0,0 @@
-// Aphex CMS Document Query API - Complex filtering with POST
-import { json } from '@sveltejs/kit';
-import { authToContext } from '../local-api/auth-helpers.js';
-import { PermissionError } from '../local-api/permissions.js';
-import { cmsLogger } from '../utils/logger.js';
-import { queryDocumentsRequest } from '../api/schemas/documents.js';
-// Default values
-const DEFAULT_PAGE_SIZE = 20;
-const DEFAULT_PAGE = 1;
-/**
- * POST /api/documents/query - Advanced document querying with complex filters
- *
- * Accepts LocalAPI FindOptions in request body for full filtering power
- *
- * @example
- * POST /api/documents/query
- * {
- *   "type": "page",
- *   "where": {
- *     "status": { "equals": "published" },
- *     "hero.heading": { "contains": "Welcome" },
- *     "publishedAt": { "gte": "2024-01-01" }
- *   },
- *   "limit": 20,
- *   "page": 1,
- *   "sort": ["-publishedAt", "title"],
- *   "depth": 1,
- *   "perspective": "published",
- *   "filterOrganizationIds": ["org_child1", "org_child2"],
- *   "includeChildOrganizations": false
- * }
- */
-export const POST = async ({ request, locals }) => {
-    try {
-        const { localAPI } = locals.aphexCMS;
-        const context = authToContext(locals.auth);
-        const rawBody = await request.json();
-        const parsed = queryDocumentsRequest.safeParse(rawBody);
-        if (!parsed.success) {
-            return json({
-                success: false,
-                error: 'Bad Request',
-                message: 'Document type is required in request body',
-                issues: parsed.error.issues
-            }, { status: 400 });
-        }
-        const body = parsed.data;
-        const documentType = body.type;
-        // Check if collection exists
-        if (!localAPI.hasCollection(documentType)) {
-            return json({
-                success: false,
-                error: 'Invalid document type',
-                message: `Collection '${documentType}' not found. Available: ${localAPI.getCollectionNames().join(', ')}`
-            }, { status: 400 });
-        }
-        // Parse pagination - support both page-based and offset-based
-        const page = body.page ?? DEFAULT_PAGE;
-        const pageSize = body.pageSize ?? body.limit ?? DEFAULT_PAGE_SIZE;
-        const offset = body.offset !== undefined ? body.offset : (page - 1) * pageSize;
-        // Build FindOptions from request body
-        const findOptions = {
-            where: body.where,
-            limit: pageSize,
-            offset,
-            sort: body.sort,
-            depth: body.depth ?? 0,
-            select: body.select,
-            perspective: body.perspective ?? 'draft',
-            includeChildOrganizations: body.includeChildOrganizations,
-            filterOrganizationIds: body.filterOrganizationIds
-        };
-        // Query via LocalAPI
-        const result = await localAPI.collections[documentType].find(context, findOptions);
-        return json({
-            success: true,
-            data: result.docs,
-            pagination: {
-                total: result.totalDocs,
-                page: result.page,
-                pageSize: result.limit,
-                totalPages: result.totalPages,
-                hasNextPage: result.hasNextPage,
-                hasPrevPage: result.hasPrevPage
-            }
-        });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to query documents:', error);
-        if (error instanceof PermissionError) {
-            return json({
-                success: false,
-                error: 'Forbidden',
-                message: error.message
-            }, { status: 403 });
-        }
-        return json({
-            success: false,
-            error: 'Failed to query documents',
-            message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
-    }
-};

package/dist/routes/documents.d.ts

@@ -1,4 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const GET: RequestHandler;
-export declare const POST: RequestHandler;
-//# sourceMappingURL=documents.d.ts.map

package/dist/routes/documents.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../src/lib/routes/documents.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAWpD,eAAO,MAAM,GAAG,EAAE,cA6GjB,CAAC;AAGF,eAAO,MAAM,IAAI,EAAE,cAkFlB,CAAC"}

package/dist/routes/index.d.ts

@@ -1,9 +0,0 @@
-export * as documents from './documents.js';
-export * as documentsById from './documents-by-id.js';
-export * as documentsQuery from './documents-query.js';
-export * as documentsPublish from './documents-publish.js';
-export * as assets from './assets.js';
-export * as schemas from './schemas.js';
-export * as schemasByType from './schemas-by-type.js';
-export * as userPreferences from './user-preferences.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/routes/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/routes/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,SAAS,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,aAAa,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,cAAc,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,gBAAgB,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAGnC,OAAO,KAAK,OAAO,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,aAAa,MAAM,mBAAmB,CAAC;AAGnD,OAAO,KAAK,eAAe,MAAM,oBAAoB,CAAC"}

package/dist/routes/index.js

@@ -1,14 +0,0 @@
-// Aphex CMS API Route Handlers
-// These will be imported and re-exported by your app's API routes
-// Document management routes
-export * as documents from './documents.js';
-export * as documentsById from './documents-by-id.js';
-export * as documentsQuery from './documents-query.js';
-export * as documentsPublish from './documents-publish.js';
-// Asset management routes
-export * as assets from './assets.js';
-// Schema information routes
-export * as schemas from './schemas.js';
-export * as schemasByType from './schemas-by-type.js';
-// User management routes
-export * as userPreferences from './user-preferences.js';

package/dist/routes/organizations-by-id.d.ts

@@ -1,5 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const GET: RequestHandler;
-export declare const PATCH: RequestHandler;
-export declare const DELETE: RequestHandler;
-//# sourceMappingURL=organizations-by-id.d.ts.map

package/dist/routes/organizations-by-id.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"organizations-by-id.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-by-id.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAMpD,eAAO,MAAM,GAAG,EAAE,cAmEjB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cA8GnB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAmFpB,CAAC"}

package/dist/routes/organizations-invitations.d.ts

@@ -1,4 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const POST: RequestHandler;
-export declare const DELETE: RequestHandler;
-//# sourceMappingURL=organizations-invitations.d.ts.map

package/dist/routes/organizations-invitations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"organizations-invitations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-invitations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAMpD,eAAO,MAAM,IAAI,EAAE,cA6IlB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAsEpB,CAAC"}

package/dist/routes/organizations-members.d.ts

@@ -1,5 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const GET: RequestHandler;
-export declare const DELETE: RequestHandler;
-export declare const PATCH: RequestHandler;
-//# sourceMappingURL=organizations-members.d.ts.map

package/dist/routes/organizations-members.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"organizations-members.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-members.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAMpD,eAAO,MAAM,GAAG,EAAE,cAkCjB,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,cAoIpB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cA6HnB,CAAC"}

package/dist/routes/organizations-switch.d.ts

@@ -1,3 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const POST: RequestHandler;
-//# sourceMappingURL=organizations-switch.d.ts.map

package/dist/routes/organizations-switch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"organizations-switch.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations-switch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,eAAO,MAAM,IAAI,EAAE,cAsElB,CAAC"}

package/dist/routes/organizations-switch.js

@@ -1,58 +0,0 @@
-// Aphex CMS Organization Switch API Handler
-import { json } from '@sveltejs/kit';
-import { cmsLogger } from '../utils/logger.js';
-import { switchOrganizationRequest } from '../api/schemas/organizations.js';
-// POST /api/organizations/switch - Switch active organization
-export const POST = async ({ request, locals }) => {
-    try {
-        const { databaseAdapter } = locals.aphexCMS;
-        const auth = locals.auth;
-        if (!auth || auth.type !== 'session') {
-            return json({
-                success: false,
-                error: 'Unauthorized',
-                message: 'Session authentication required'
-            }, { status: 401 });
-        }
-        const rawBody = await request.json();
-        const parsed = switchOrganizationRequest.safeParse(rawBody);
-        if (!parsed.success) {
-            return json({
-                success: false,
-                error: 'Missing required field',
-                message: 'organizationId is required',
-                issues: parsed.error.issues
-            }, { status: 400 });
-        }
-        const body = parsed.data;
-        // Verify user is a member of the target organization
-        const membership = await databaseAdapter.findUserMembership(auth.user.id, body.organizationId);
-        if (!membership) {
-            return json({
-                success: false,
-                error: 'Access denied',
-                message: 'You are not a member of this organization'
-            }, { status: 403 });
-        }
-        // Update user's active organization
-        await databaseAdapter.updateUserSession(auth.user.id, body.organizationId);
-        // Get the organization details
-        const organization = await databaseAdapter.findOrganizationById(body.organizationId);
-        return json({
-            success: true,
-            data: {
-                organizationId: body.organizationId,
-                organizationName: organization?.name,
-                role: membership.role
-            }
-        });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to switch organization:', error);
-        return json({
-            success: false,
-            error: 'Failed to switch organization',
-            message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
-    }
-};

package/dist/routes/organizations.d.ts

@@ -1,4 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const GET: RequestHandler;
-export declare const POST: RequestHandler;
-//# sourceMappingURL=organizations.d.ts.map

package/dist/routes/organizations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/lib/routes/organizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,eAAO,MAAM,GAAG,EAAE,cA6CjB,CAAC;AAGF,eAAO,MAAM,IAAI,EAAE,cAkGlB,CAAC"}

package/dist/routes/organizations.js

@@ -1,116 +0,0 @@
-// Aphex CMS Organization API Handlers
-import { json } from '@sveltejs/kit';
-import { cmsLogger } from '../utils/logger.js';
-import { createOrganizationRequest } from '../api/schemas/organizations.js';
-// GET /api/organizations - List user's organizations
-export const GET = async ({ locals }) => {
-    try {
-        const { databaseAdapter } = locals.aphexCMS;
-        const auth = locals.auth;
-        if (!auth || auth.type !== 'session') {
-            return json({
-                success: false,
-                error: 'Unauthorized',
-                message: 'Session authentication required'
-            }, { status: 401 });
-        }
-        // Get all organizations the user belongs to
-        const memberships = await databaseAdapter.findUserOrganizations(auth.user.id);
-        // Map to a cleaner format with organization details and user's role
-        const organizations = memberships.map((membership) => ({
-            id: membership.organization.id,
-            name: membership.organization.name,
-            slug: membership.organization.slug,
-            metadata: membership.organization.metadata,
-            role: membership.member.role,
-            joinedAt: membership.member.createdAt,
-            isActive: membership.organization.id === auth.organizationId
-        }));
-        return json({
-            success: true,
-            data: organizations
-        });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to fetch organizations:', error);
-        return json({
-            success: false,
-            error: 'Failed to fetch organizations',
-            message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
-    }
-};
-// POST /api/organizations - Create new organization
-export const POST = async ({ request, locals }) => {
-    try {
-        const { databaseAdapter } = locals.aphexCMS;
-        const auth = locals.auth;
-        if (!auth || auth.type !== 'session') {
-            return json({
-                success: false,
-                error: 'Unauthorized',
-                message: 'Session authentication required'
-            }, { status: 401 });
-        }
-        // Only SUPER_ADMIN can create organizations
-        if (auth.user.role !== 'super_admin') {
-            return json({
-                success: false,
-                error: 'Forbidden',
-                message: 'Only super admins can create organizations'
-            }, { status: 403 });
-        }
-        const rawBody = await request.json();
-        const parsed = createOrganizationRequest.safeParse(rawBody);
-        if (!parsed.success) {
-            return json({
-                success: false,
-                error: 'Invalid request body',
-                message: 'Organization name and slug are required',
-                issues: parsed.error.issues
-            }, { status: 400 });
-        }
-        const body = parsed.data;
-        // Check if slug is already taken
-        const existingOrg = await databaseAdapter.findOrganizationBySlug(body.slug);
-        if (existingOrg) {
-            return json({
-                success: false,
-                error: 'Slug already exists',
-                message: `Organization with slug '${body.slug}' already exists`
-            }, { status: 409 });
-        }
-        // Create the organization with current active org as parent
-        // Note: Only supports 1-level hierarchy for performance
-        const newOrganization = await databaseAdapter.createOrganization({
-            name: body.name,
-            slug: body.slug,
-            metadata: body.metadata || null,
-            parentOrganizationId: auth.organizationId, // Current active org becomes parent
-            createdBy: auth.user.id
-        });
-        // Seed the four built-in roles for this org before assigning membership.
-        // The member row references the role by name, so the rows must exist.
-        await databaseAdapter.seedBuiltinRoles(newOrganization.id);
-        // Add the creator as owner
-        await databaseAdapter.addMember({
-            organizationId: newOrganization.id,
-            userId: auth.user.id,
-            role: 'owner'
-        });
-        // Set as active organization for this user
-        await databaseAdapter.updateUserSession(auth.user.id, newOrganization.id);
-        return json({
-            success: true,
-            data: newOrganization
-        }, { status: 201 });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to create organization:', error);
-        return json({
-            success: false,
-            error: 'Failed to create organization',
-            message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
-    }
-};

package/dist/routes/roles-by-name.d.ts

@@ -1,4 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const PATCH: RequestHandler;
-export declare const DELETE: RequestHandler;
-//# sourceMappingURL=roles-by-name.d.ts.map

package/dist/routes/roles-by-name.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"roles-by-name.d.ts","sourceRoot":"","sources":["../../src/lib/routes/roles-by-name.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAgBpD,eAAO,MAAM,KAAK,EAAE,cA4DnB,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,cAoEpB,CAAC"}

package/dist/routes/roles-by-name.js

@@ -1,111 +0,0 @@
-// Aphex CMS Roles API Handlers (by-name)
-//
-// PATCH  /api/roles/[name] — edit description / capabilities
-// DELETE /api/roles/[name] — delete a custom role (built-ins cannot be deleted)
-import { json } from '@sveltejs/kit';
-import { cmsLogger } from '../utils/logger.js';
-import { hasCapability, BUILTIN_ROLE_NAMES } from '../types/capabilities.js';
-import { updateRoleRequest } from '../api/schemas/roles.js';
-function unauthorized() {
-    return json({ success: false, error: 'Unauthorized', message: 'Session authentication required' }, { status: 401 });
-}
-function forbidden(message) {
-    return json({ success: false, error: 'Forbidden', message }, { status: 403 });
-}
-export const PATCH = async ({ params, request, locals }) => {
-    try {
-        const { databaseAdapter, rolesService } = locals.aphexCMS;
-        const auth = locals.auth;
-        if (!auth || auth.type !== 'session')
-            return unauthorized();
-        if (!hasCapability(auth, 'role.manage')) {
-            return forbidden('You do not have permission to manage roles');
-        }
-        const name = params.name;
-        if (!name) {
-            return json({ success: false, error: 'Invalid request', message: 'Role name is required' }, { status: 400 });
-        }
-        const rawBody = await request.json();
-        const parsed = updateRoleRequest.safeParse(rawBody);
-        if (!parsed.success) {
-            return json({
-                success: false,
-                error: 'Invalid request body',
-                issues: parsed.error.issues
-            }, { status: 400 });
-        }
-        const body = parsed.data;
-        const updated = await databaseAdapter.updateRole(auth.organizationId, name, body);
-        if (!updated) {
-            return json({
-                success: false,
-                error: 'Not found',
-                message: `No role named "${name}" in this organization`
-            }, { status: 404 });
-        }
-        // Bust the capability cache so open sessions pick up the change on
-        // their next request instead of waiting for TTL.
-        await rolesService.invalidate(auth.organizationId, name);
-        return json({ success: true, data: updated });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to update role:', error);
-        return json({
-            success: false,
-            error: 'Failed to update role',
-            message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
-    }
-};
-export const DELETE = async ({ params, locals }) => {
-    try {
-        const { databaseAdapter, rolesService } = locals.aphexCMS;
-        const auth = locals.auth;
-        if (!auth || auth.type !== 'session')
-            return unauthorized();
-        if (!hasCapability(auth, 'role.manage')) {
-            return forbidden('You do not have permission to manage roles');
-        }
-        const name = params.name;
-        if (!name) {
-            return json({ success: false, error: 'Invalid request', message: 'Role name is required' }, { status: 400 });
-        }
-        // Built-ins are part of the org's guaranteed floor — deleting one
-        // would let a seed run re-create it with stale capabilities. Force the
-        // user to edit instead.
-        if (BUILTIN_ROLE_NAMES.includes(name)) {
-            return forbidden(`"${name}" is a built-in role and cannot be deleted.`);
-        }
-        // Block deletion while the role is assigned to any member or invitation.
-        // Avoids silently orphaning memberships to an unknown role name.
-        const members = await databaseAdapter.findOrganizationMembers(auth.organizationId);
-        const inUseByMember = members.some((m) => m.role === name);
-        const invitations = await databaseAdapter.findOrganizationInvitations(auth.organizationId);
-        const inUseByInvitation = invitations.some((i) => i.role === name && !i.acceptedAt);
-        if (inUseByMember || inUseByInvitation) {
-            return json({
-                success: false,
-                error: 'Role in use',
-                message: `Cannot delete "${name}": reassign affected members or invitations first.`
-            }, { status: 409 });
-        }
-        const deleted = await databaseAdapter.deleteRole(auth.organizationId, name);
-        if (!deleted) {
-            return json({
-                success: false,
-                error: 'Not found',
-                message: `No role named "${name}" in this organization`
-            }, { status: 404 });
-        }
-        await rolesService.invalidate(auth.organizationId, name);
-        return json({ success: true, message: 'Role deleted' });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to delete role:', error);
-        return json({
-            success: false,
-            error: 'Failed to delete role',
-            message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
-    }
-};

package/dist/routes/roles.d.ts

@@ -1,4 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const GET: RequestHandler;
-export declare const POST: RequestHandler;
-//# sourceMappingURL=roles.d.ts.map

package/dist/routes/roles.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../src/lib/routes/roles.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAgBpD,eAAO,MAAM,GAAG,EAAE,cAoBjB,CAAC;AAEF,eAAO,MAAM,IAAI,EAAE,cA0ElB,CAAC"}

package/dist/routes/roles.js

@@ -1,90 +0,0 @@
-// Aphex CMS Roles API Handlers
-//
-// GET  /api/roles          — list roles for the active org
-// POST /api/roles          — create a custom role (requires role.manage)
-import { json } from '@sveltejs/kit';
-import { cmsLogger } from '../utils/logger.js';
-import { hasCapability, BUILTIN_ROLE_NAMES } from '../types/capabilities.js';
-import { createRoleRequest } from '../api/schemas/roles.js';
-function unauthorized() {
-    return json({ success: false, error: 'Unauthorized', message: 'Session authentication required' }, { status: 401 });
-}
-function forbidden(message) {
-    return json({ success: false, error: 'Forbidden', message }, { status: 403 });
-}
-export const GET = async ({ locals }) => {
-    try {
-        const { rolesService } = locals.aphexCMS;
-        const auth = locals.auth;
-        if (!auth || auth.type !== 'session')
-            return unauthorized();
-        const roles = await rolesService.listRoles(auth.organizationId);
-        return json({ success: true, data: roles });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to list roles:', error);
-        return json({
-            success: false,
-            error: 'Failed to list roles',
-            message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
-    }
-};
-export const POST = async ({ request, locals }) => {
-    try {
-        const { databaseAdapter, rolesService } = locals.aphexCMS;
-        const auth = locals.auth;
-        if (!auth || auth.type !== 'session')
-            return unauthorized();
-        if (!hasCapability(auth, 'role.manage')) {
-            return forbidden('You do not have permission to manage roles');
-        }
-        const rawBody = await request.json();
-        const parsed = createRoleRequest.safeParse(rawBody);
-        if (!parsed.success) {
-            return json({
-                success: false,
-                error: 'Invalid request body',
-                message: 'name and capabilities are required',
-                issues: parsed.error.issues
-            }, { status: 400 });
-        }
-        const body = parsed.data;
-        // Reject collisions with reserved built-in names — built-ins are seeded
-        // on every org; a matching custom row would never be reachable.
-        if (BUILTIN_ROLE_NAMES.includes(body.name)) {
-            return json({
-                success: false,
-                error: 'Reserved name',
-                message: `"${body.name}" is a built-in role name. Edit the existing role instead.`
-            }, { status: 409 });
-        }
-        const existing = await databaseAdapter.findRoleByName(auth.organizationId, body.name);
-        if (existing) {
-            return json({
-                success: false,
-                error: 'Conflict',
-                message: `A role named "${body.name}" already exists in this organization.`
-            }, { status: 409 });
-        }
-        const role = await databaseAdapter.createRole({
-            organizationId: auth.organizationId,
-            name: body.name,
-            description: body.description ?? null,
-            capabilities: body.capabilities,
-            isBuiltIn: false
-        });
-        // New role can't be in use yet, but invalidate the prefix just in case
-        // a prior lookup populated the cache with an empty fallback entry.
-        await rolesService.invalidate(auth.organizationId, body.name);
-        return json({ success: true, data: role }, { status: 201 });
-    }
-    catch (error) {
-        cmsLogger.error('Failed to create role:', error);
-        return json({
-            success: false,
-            error: 'Failed to create role',
-            message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
-    }
-};

package/dist/routes/schemas-by-type.d.ts

@@ -1,3 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const GET: RequestHandler;
-//# sourceMappingURL=schemas-by-type.d.ts.map

package/dist/routes/schemas-by-type.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas-by-type.d.ts","sourceRoot":"","sources":["../../src/lib/routes/schemas-by-type.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,eAAO,MAAM,GAAG,EAAE,cA+BjB,CAAC"}

package/dist/routes/schemas-by-type.js

@@ -1,26 +0,0 @@
-import { cmsLogger } from '../utils/logger.js';
-export const GET = async ({ locals, params }) => {
-    const { type } = params;
-    const { cmsEngine } = locals.aphexCMS;
-    if (!type) {
-        return new Response(JSON.stringify({ error: 'Schema type is required' }), {
-            status: 400,
-            headers: { 'content-type': 'application/json' }
-        });
-    }
-    cmsLogger.debug('GETTING SCHEMA TYPE FROM: ', type);
-    const schema = cmsEngine.getSchemaTypeByName(type);
-    cmsLogger.debug('SCHEMA: ', schema);
-    if (!schema) {
-        return new Response(JSON.stringify({ error: `Schema type '${type}' not found` }), {
-            status: 404,
-            headers: { 'content-type': 'application/json' }
-        });
-    }
-    return new Response(JSON.stringify({
-        success: true,
-        data: schema
-    }), {
-        headers: { 'content-type': 'application/json' }
-    });
-};

package/dist/routes/schemas.d.ts

@@ -1,3 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const GET: RequestHandler;
-//# sourceMappingURL=schemas.d.ts.map

package/dist/routes/schemas.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/lib/routes/schemas.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,eAAO,MAAM,GAAG,EAAE,cAejB,CAAC"}

package/dist/routes/schemas.js

@@ -1,11 +0,0 @@
-export const GET = async ({ locals }) => {
-    const { cmsEngine } = locals.aphexCMS;
-    // Get schemas from config (not database) to preserve validation functions
-    const schemas = cmsEngine.config.schemaTypes;
-    return new Response(JSON.stringify({
-        success: true,
-        data: schemas
-    }), {
-        headers: { 'content-type': 'application/json' }
-    });
-};

package/dist/routes/user-preferences.d.ts

@@ -1,4 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit';
-export declare const GET: RequestHandler;
-export declare const PATCH: RequestHandler;
-//# sourceMappingURL=user-preferences.d.ts.map

package/dist/routes/user-preferences.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-preferences.d.ts","sourceRoot":"","sources":["../../src/lib/routes/user-preferences.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,eAAO,MAAM,GAAG,EAAE,cAiCjB,CAAC;AAGF,eAAO,MAAM,KAAK,EAAE,cAoDnB,CAAC"}