@aphexcms/cms-core 4.0.0 → 5.0.0

package/dist/{routes → lib/server/api/routes}/organizations-members.js

@@ -1,213 +1,181 @@
-// Aphex CMS Organization Members API Handlers
-import { json } from '@sveltejs/kit';
-import { cmsLogger } from '../utils/logger.js';
-import { removeMemberRequest, updateMemberRoleRequest } from '../api/schemas/organizations.js';
-import { hasCapability } from '../types/capabilities.js';
-// GET /api/organizations/members - List organization members
-export const GET = async ({ locals }) => {
+import { Hono } from 'hono';
+import { zValidator } from '@hono/zod-validator';
+import { cmsLogger } from '../../../utils/logger.js';
+import { removeMemberRequest, updateMemberRoleRequest } from '../../../api/schemas/organizations.js';
+import { hasCapability } from '../../../types/capabilities.js';
+export const organizationsMembersRouter = new Hono()
+    .get('/members', async (c) => {
     try {
-        const { databaseAdapter } = locals.aphexCMS;
-        const auth = locals.auth;
+        const { databaseAdapter } = c.var.aphexCMS;
+        const auth = c.var.auth;
         if (!auth || auth.type !== 'session') {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Unauthorized',
                 message: 'Session authentication required'
-            }, { status: 401 });
+            }, 401);
         }
-        // Get members of the current active organization
         const members = await databaseAdapter.findOrganizationMembers(auth.organizationId);
-        return json({
-            success: true,
-            data: members
-        });
+        return c.json({ success: true, data: members });
     }
     catch (error) {
         cmsLogger.error('Failed to fetch organization members:', error);
-        return json({
+        return c.json({
             success: false,
             error: 'Failed to fetch members',
             message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
+        }, 500);
     }
-};
-// DELETE /api/organizations/members - Remove a member
-export const DELETE = async ({ request, locals }) => {
+})
+    .delete('/members', zValidator('json', removeMemberRequest, (result, c) => {
+    if (!result.success) {
+        return c.json({
+            success: false,
+            error: 'Missing required field',
+            message: 'userId is required',
+            issues: result.error.issues
+        }, 400);
+    }
+}), async (c) => {
     try {
-        const { databaseAdapter } = locals.aphexCMS;
-        const auth = locals.auth;
+        const { databaseAdapter } = c.var.aphexCMS;
+        const auth = c.var.auth;
         if (!auth || auth.type !== 'session') {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Unauthorized',
                 message: 'Session authentication required'
-            }, { status: 401 });
+            }, 401);
         }
         if (!hasCapability(auth, 'member.remove')) {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Forbidden',
                 message: 'You do not have permission to remove members'
-            }, { status: 403 });
+            }, 403);
         }
-        const rawBody = await request.json();
-        const parsed = removeMemberRequest.safeParse(rawBody);
-        if (!parsed.success) {
-            return json({
-                success: false,
-                error: 'Missing required field',
-                message: 'userId is required',
-                issues: parsed.error.issues
-            }, { status: 400 });
-        }
-        const body = parsed.data;
-        // Prevent removing yourself
+        const body = c.req.valid('json');
         if (body.userId === auth.user.id) {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Invalid operation',
                 message: 'You cannot remove yourself from the organization'
-            }, { status: 400 });
+            }, 400);
         }
-        // Get the target member's role
         const targetMember = await databaseAdapter.findUserMembership(body.userId, auth.organizationId);
         if (!targetMember) {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Member not found',
                 message: 'User is not a member of this organization'
-            }, { status: 404 });
+            }, 404);
         }
-        // Admins cannot remove owners
         if (auth.organizationRole === 'admin' && targetMember.role === 'owner') {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Forbidden',
                 message: 'Admins cannot remove owners'
-            }, { status: 403 });
+            }, 403);
         }
-        // Remove the member
         const removed = await databaseAdapter.removeMember(auth.organizationId, body.userId);
         if (!removed) {
-            return json({
-                success: false,
-                error: 'Failed to remove member'
-            }, { status: 500 });
+            return c.json({ success: false, error: 'Failed to remove member' }, 500);
         }
-        // Clear the user's session if their active org is the one they were removed from
         const userSession = await databaseAdapter.findUserSession(body.userId);
         if (userSession?.activeOrganizationId === auth.organizationId) {
             cmsLogger.debug(`[Organizations]: Clearing user session for ${body.userId} - removed from active org ${auth.organizationId}`);
-            // Check if user has other organizations
             const otherOrgs = await databaseAdapter.findUserOrganizations(body.userId);
             if (otherOrgs.length > 0 && otherOrgs[0]) {
-                // Set their first remaining org as active
                 await databaseAdapter.updateUserSession(body.userId, otherOrgs[0].organization.id);
                 cmsLogger.debug(`[Organizations]: Set org ${otherOrgs[0].organization.id} as new active org for ${body.userId}`);
             }
             else {
-                // No other orgs - delete the session so invitations can be processed on next login
                 await databaseAdapter.deleteUserSession(body.userId);
                 cmsLogger.debug(`[Organizations]: Deleted user session for ${body.userId} - no remaining organizations`);
             }
         }
-        return json({
-            success: true,
-            message: 'Member removed successfully'
-        });
+        return c.json({ success: true, message: 'Member removed successfully' });
     }
     catch (error) {
         cmsLogger.error('Failed to remove member:', error);
-        return json({
+        return c.json({
             success: false,
             error: 'Failed to remove member',
             message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
+        }, 500);
     }
-};
-// PATCH /api/organizations/members - Update member role
-export const PATCH = async ({ request, locals }) => {
+})
+    .patch('/members', zValidator('json', updateMemberRoleRequest, (result, c) => {
+    if (!result.success) {
+        return c.json({
+            success: false,
+            error: 'Invalid request body',
+            message: 'userId and role are required',
+            issues: result.error.issues
+        }, 400);
+    }
+}), async (c) => {
     try {
-        const { databaseAdapter } = locals.aphexCMS;
-        const auth = locals.auth;
+        const { databaseAdapter } = c.var.aphexCMS;
+        const auth = c.var.auth;
         if (!auth || auth.type !== 'session') {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Unauthorized',
                 message: 'Session authentication required'
-            }, { status: 401 });
+            }, 401);
         }
         if (!hasCapability(auth, 'member.changeRole')) {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Forbidden',
                 message: 'You do not have permission to change member roles'
-            }, { status: 403 });
+            }, 403);
         }
-        const rawBody = await request.json();
-        const parsed = updateMemberRoleRequest.safeParse(rawBody);
-        if (!parsed.success) {
-            return json({
-                success: false,
-                error: 'Invalid request body',
-                message: 'userId and role are required',
-                issues: parsed.error.issues
-            }, { status: 400 });
-        }
-        const body = parsed.data;
-        // Verify the target role exists in this organization.
+        const body = c.req.valid('json');
         const roleRow = await databaseAdapter.findRoleByName(auth.organizationId, body.role);
         if (!roleRow) {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Unknown role',
                 message: `No role named "${body.role}" in this organization`
-            }, { status: 400 });
+            }, 400);
         }
-        // Prevent changing your own role
         if (body.userId === auth.user.id) {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Invalid operation',
                 message: 'You cannot change your own role'
-            }, { status: 400 });
+            }, 400);
         }
-        // Get the target member's current role
         const targetMember = await databaseAdapter.findUserMembership(body.userId, auth.organizationId);
         if (!targetMember) {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Member not found',
                 message: 'User is not a member of this organization'
-            }, { status: 404 });
+            }, 404);
         }
-        // Admins cannot modify owners
         if (auth.organizationRole === 'admin' && targetMember.role === 'owner') {
-            return json({
+            return c.json({
                 success: false,
                 error: 'Forbidden',
                 message: 'Admins cannot modify owner roles'
-            }, { status: 403 });
+            }, 403);
         }
-        // Update the role
         const updatedMember = await databaseAdapter.updateMemberRole(auth.organizationId, body.userId, body.role);
         if (!updatedMember) {
-            return json({
-                success: false,
-                error: 'Failed to update role'
-            }, { status: 500 });
+            return c.json({ success: false, error: 'Failed to update role' }, 500);
         }
-        return json({
-            success: true,
-            data: updatedMember
-        });
+        return c.json({ success: true, data: updatedMember });
     }
     catch (error) {
         cmsLogger.error('Failed to update member role:', error);
-        return json({
+        return c.json({
             success: false,
             error: 'Failed to update role',
             message: error instanceof Error ? error.message : 'Unknown error'
-        }, { status: 500 });
+        }, 500);
     }
-};
+});
+//# sourceMappingURL=organizations-members.js.map

package/dist/lib/server/api/routes/organizations-members.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations-members.js","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/organizations-members.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACN,mBAAmB,EACnB,uBAAuB,EACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAG5D,MAAM,CAAC,MAAM,0BAA0B,GAAmB,IAAI,IAAI,EAAY;KAC5E,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC5B,IAAI,CAAC;QACJ,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAExB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,iCAAiC;aAC1C,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,yBAAyB;YAChC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SACjE,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CAAC;KACD,MAAM,CACN,UAAU,EACV,UAAU,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,wBAAwB;YAC/B,OAAO,EAAE,oBAAoB;YAC7B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC3B,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;IACX,IAAI,CAAC;QACJ,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAExB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,iCAAiC;aAC1C,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,8CAA8C;aACvD,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAClC,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,mBAAmB;gBAC1B,OAAO,EAAE,kDAAkD;aAC3D,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,kBAAkB,CAC5D,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,cAAc,CACnB,CAAC;QAEF,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,2CAA2C;aACpD,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACxE,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,6BAA6B;aACtC,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,WAAW,EAAE,oBAAoB,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/D,SAAS,CAAC,KAAK,CACd,8CAA8C,IAAI,CAAC,MAAM,8BAA8B,IAAI,CAAC,cAAc,EAAE,CAC5G,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3E,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,MAAM,eAAe,CAAC,iBAAiB,CACtC,IAAI,CAAC,MAAM,EACX,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAC5B,CAAC;gBACF,SAAS,CAAC,KAAK,CACd,4BAA4B,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,0BAA0B,IAAI,CAAC,MAAM,EAAE,CAC/F,CAAC;YACH,CAAC;iBAAM,CAAC;gBACP,MAAM,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrD,SAAS,CAAC,KAAK,CACd,6CAA6C,IAAI,CAAC,MAAM,+BAA+B,CACvF,CAAC;YACH,CAAC;QACF,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,yBAAyB;YAChC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SACjE,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CACD;KACA,KAAK,CACL,UAAU,EACV,UAAU,CAAC,MAAM,EAAE,uBAAuB,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,8BAA8B;YACvC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC3B,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;IACX,IAAI,CAAC;QACJ,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAExB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,iCAAiC;aAC1C,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,mDAAmD;aAC5D,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,kBAAkB,IAAI,CAAC,IAAI,wBAAwB;aAC5D,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAClC,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,mBAAmB;gBAC1B,OAAO,EAAE,iCAAiC;aAC1C,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,kBAAkB,CAC5D,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,cAAc,CACnB,CAAC;QAEF,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,2CAA2C;aACpD,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACxE,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,kCAAkC;aAC3C,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,gBAAgB,CAC3D,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,IAAI,CACT,CAAC;QAEF,IAAI,CAAC,aAAa,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SACjE,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CACD,CAAC"}

package/dist/lib/server/api/routes/organizations-switch.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import type { AphexEnv } from '../index.js';
+export declare const organizationsSwitchRouter: Hono<AphexEnv>;
+//# sourceMappingURL=organizations-switch.d.ts.map

package/dist/lib/server/api/routes/organizations-switch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations-switch.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/organizations-switch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,eAAO,MAAM,yBAAyB,EAAE,IAAI,CAAC,QAAQ,CAwEpD,CAAC"}

package/dist/lib/server/api/routes/organizations-switch.js

@@ -0,0 +1,54 @@
+import { Hono } from 'hono';
+import { zValidator } from '@hono/zod-validator';
+import { cmsLogger } from '../../../utils/logger.js';
+import { switchOrganizationRequest } from '../../../api/schemas/organizations.js';
+export const organizationsSwitchRouter = new Hono().post('/switch', zValidator('json', switchOrganizationRequest, (result, c) => {
+    if (!result.success) {
+        return c.json({
+            success: false,
+            error: 'Missing required field',
+            message: 'organizationId is required',
+            issues: result.error.issues
+        }, 400);
+    }
+}), async (c) => {
+    try {
+        const { databaseAdapter } = c.var.aphexCMS;
+        const auth = c.var.auth;
+        if (!auth || auth.type !== 'session') {
+            return c.json({
+                success: false,
+                error: 'Unauthorized',
+                message: 'Session authentication required'
+            }, 401);
+        }
+        const body = c.req.valid('json');
+        const membership = await databaseAdapter.findUserMembership(auth.user.id, body.organizationId);
+        if (!membership) {
+            return c.json({
+                success: false,
+                error: 'Access denied',
+                message: 'You are not a member of this organization'
+            }, 403);
+        }
+        await databaseAdapter.updateUserSession(auth.user.id, body.organizationId);
+        const organization = await databaseAdapter.findOrganizationById(body.organizationId);
+        return c.json({
+            success: true,
+            data: {
+                organizationId: body.organizationId,
+                organizationName: organization?.name,
+                role: membership.role
+            }
+        });
+    }
+    catch (error) {
+        cmsLogger.error('Failed to switch organization:', error);
+        return c.json({
+            success: false,
+            error: 'Failed to switch organization',
+            message: error instanceof Error ? error.message : 'Unknown error'
+        }, 500);
+    }
+});
+//# sourceMappingURL=organizations-switch.js.map

package/dist/lib/server/api/routes/organizations-switch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations-switch.js","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/organizations-switch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAG/E,MAAM,CAAC,MAAM,yBAAyB,GAAmB,IAAI,IAAI,EAAY,CAAC,IAAI,CACjF,SAAS,EACT,UAAU,CAAC,MAAM,EAAE,yBAAyB,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,wBAAwB;YAC/B,OAAO,EAAE,4BAA4B;YACrC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC3B,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;IACX,IAAI,CAAC;QACJ,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAExB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,iCAAiC;aAC1C,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEjC,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,kBAAkB,CAC1D,IAAI,CAAC,IAAI,CAAC,EAAE,EACZ,IAAI,CAAC,cAAc,CACnB,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,2CAA2C;aACpD,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAErF,OAAO,CAAC,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACL,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,gBAAgB,EAAE,YAAY,EAAE,IAAI;gBACpC,IAAI,EAAE,UAAU,CAAC,IAAI;aACrB;SACD,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+BAA+B;YACtC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SACjE,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CACD,CAAC"}

package/dist/lib/server/api/routes/organizations.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import type { AphexEnv } from '../index.js';
+export declare const organizationsRouter: Hono<AphexEnv>;
+//# sourceMappingURL=organizations.d.ts.map

package/dist/lib/server/api/routes/organizations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,eAAO,MAAM,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CA8H7C,CAAC"}

package/dist/lib/server/api/routes/organizations.js

@@ -0,0 +1,99 @@
+import { Hono } from 'hono';
+import { zValidator } from '@hono/zod-validator';
+import { cmsLogger } from '../../../utils/logger.js';
+import { createOrganizationRequest } from '../../../api/schemas/organizations.js';
+export const organizationsRouter = new Hono()
+    .get('/', async (c) => {
+    try {
+        const { databaseAdapter } = c.var.aphexCMS;
+        const auth = c.var.auth;
+        if (!auth || auth.type !== 'session') {
+            return c.json({
+                success: false,
+                error: 'Unauthorized',
+                message: 'Session authentication required'
+            }, 401);
+        }
+        const memberships = await databaseAdapter.findUserOrganizations(auth.user.id);
+        const organizations = memberships.map((m) => ({
+            id: m.organization.id,
+            name: m.organization.name,
+            slug: m.organization.slug,
+            metadata: m.organization.metadata,
+            role: m.member.role,
+            joinedAt: m.member.createdAt,
+            isActive: m.organization.id === auth.organizationId
+        }));
+        return c.json({ success: true, data: organizations });
+    }
+    catch (error) {
+        cmsLogger.error('Failed to fetch organizations:', error);
+        return c.json({
+            success: false,
+            error: 'Failed to fetch organizations',
+            message: error instanceof Error ? error.message : 'Unknown error'
+        }, 500);
+    }
+})
+    .post('/', zValidator('json', createOrganizationRequest, (result, c) => {
+    if (!result.success) {
+        return c.json({
+            success: false,
+            error: 'Invalid request body',
+            message: 'Organization name and slug are required',
+            issues: result.error.issues
+        }, 400);
+    }
+}), async (c) => {
+    try {
+        const { databaseAdapter } = c.var.aphexCMS;
+        const auth = c.var.auth;
+        if (!auth || auth.type !== 'session') {
+            return c.json({
+                success: false,
+                error: 'Unauthorized',
+                message: 'Session authentication required'
+            }, 401);
+        }
+        if (auth.user.role !== 'super_admin') {
+            return c.json({
+                success: false,
+                error: 'Forbidden',
+                message: 'Only super admins can create organizations'
+            }, 403);
+        }
+        const body = c.req.valid('json');
+        const existingOrg = await databaseAdapter.findOrganizationBySlug(body.slug);
+        if (existingOrg) {
+            return c.json({
+                success: false,
+                error: 'Slug already exists',
+                message: `Organization with slug '${body.slug}' already exists`
+            }, 409);
+        }
+        const newOrganization = await databaseAdapter.createOrganization({
+            name: body.name,
+            slug: body.slug,
+            metadata: body.metadata || null,
+            parentOrganizationId: auth.organizationId,
+            createdBy: auth.user.id
+        });
+        await databaseAdapter.seedBuiltinRoles(newOrganization.id);
+        await databaseAdapter.addMember({
+            organizationId: newOrganization.id,
+            userId: auth.user.id,
+            role: 'owner'
+        });
+        await databaseAdapter.updateUserSession(auth.user.id, newOrganization.id);
+        return c.json({ success: true, data: newOrganization }, 201);
+    }
+    catch (error) {
+        cmsLogger.error('Failed to create organization:', error);
+        return c.json({
+            success: false,
+            error: 'Failed to create organization',
+            message: error instanceof Error ? error.message : 'Unknown error'
+        }, 500);
+    }
+});
+//# sourceMappingURL=organizations.js.map

package/dist/lib/server/api/routes/organizations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.js","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAG/E,MAAM,CAAC,MAAM,mBAAmB,GAAmB,IAAI,IAAI,EAAY;KACrE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACrB,IAAI,CAAC;QACJ,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAExB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,iCAAiC;aAC1C,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9E,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE;YACrB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI;YACzB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI;YACzB,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ;YACjC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;YACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS;YAC5B,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,IAAI,CAAC,cAAc;SACnD,CAAC,CAAC,CAAC;QAEJ,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+BAA+B;YACtC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SACjE,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CAAC;KACD,IAAI,CACJ,GAAG,EACH,UAAU,CAAC,MAAM,EAAE,yBAAyB,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,yCAAyC;YAClD,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC3B,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;IACX,IAAI,CAAC;QACJ,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAExB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,iCAAiC;aAC1C,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,4CAA4C;aACrD,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEjC,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAI,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,qBAAqB;gBAC5B,OAAO,EAAE,2BAA2B,IAAI,CAAC,IAAI,kBAAkB;aAC/D,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,eAAe,CAAC,kBAAkB,CAAC;YAChE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,oBAAoB,EAAE,IAAI,CAAC,cAAc;YACzC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;SACvB,CAAC,CAAC;QAEH,MAAM,eAAe,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,eAAe,CAAC,SAAS,CAAC;YAC/B,cAAc,EAAE,eAAe,CAAC,EAAE;YAClC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;YACpB,IAAI,EAAE,OAAO;SACb,CAAC,CAAC;QACH,MAAM,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;QAE1E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+BAA+B;YACtC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SACjE,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC,CACD,CAAC"}

package/dist/lib/server/api/routes/roles.d.ts

@@ -0,0 +1,12 @@
+import { Hono } from 'hono';
+import type { AphexEnv } from '../index.js';
+/**
+ * Roles router. Combines `/roles` (list, create) and `/roles/:name`
+ * (update, delete) so the wire URLs are
+ * `/api/roles` and `/api/roles/:name`.
+ *
+ * Note: built-in role names cannot be deleted; they're seeded on every
+ * org and a custom row with the same name would be unreachable.
+ */
+export declare const rolesRouter: Hono<AphexEnv>;
+//# sourceMappingURL=roles.d.ts.map

package/dist/lib/server/api/routes/roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW,EAAE,IAAI,CAAC,QAAQ,CAuSpC,CAAC"}