@nextsparkjs/core 0.1.0-beta.191 → 0.1.0-beta.193

package/dist/i18n.js

@@ -2,62 +2,21 @@ import { getRequestConfig } from "next-intl/server";
 import { I18N_CONFIG } from "./lib/config/index.js";
 import { loadMergedTranslations } from "./lib/translations/registry.js";
 import { getUserLocale } from "./lib/locale.js";
+import { APP_CONFIG_MERGED } from "./lib/config/config-client.js";
+import { getConfiguredClientNamespaces, NAMESPACE_GROUPS } from "./lib/i18n/client-messages.js";
+import { ENTITY_REGISTRY } from "@nextsparkjs/registries/entity-registry";
 const DEBUG_I18N = process.env.NEXTSPARK_DEBUG_I18N === "true";
-const NAMESPACE_GROUPS = {
-  // Páginas públicas iniciales: incluye auth para login/signup
-  PUBLIC_INITIAL: ["common", "public", "auth"],
-  // Dashboard: incluye public para navegación pero no auth (ya autenticado)
-  DASHBOARD_AUTHENTICATED: ["common", "dashboard", "settings", "public", "teams"],
-  // Solo autenticación: para páginas específicas de auth
-  AUTH_ONLY: ["common", "auth", "validation"],
-  // Fallback completo para casos edge
-  ALL: ["common", "dashboard", "settings", "auth", "public", "validation", "teams"]
-};
 function getPageNamespaces(pathname) {
-  if (DEBUG_I18N) {
-    console.log(`[i18n] Analyzing pathname: "${pathname}"`);
-  }
-  if (pathname.startsWith("/dashboard")) {
-    if (DEBUG_I18N) {
-      console.log(`[i18n] Dashboard detected \u2192 Loading authenticated user namespaces`);
-    }
-    return NAMESPACE_GROUPS.DASHBOARD_AUTHENTICATED;
-  }
-  const isAuthPage = pathname.startsWith("/auth") || pathname === "/login" || pathname === "/signup" || pathname === "/forgot-password" || pathname === "/reset-password" || pathname === "/verify-email" || pathname.includes("login") || pathname.includes("signup") || pathname.includes("auth");
-  if (isAuthPage) {
-    if (DEBUG_I18N) {
-      console.log(`[i18n] Auth page detected \u2192 Loading auth-only namespaces`);
-    }
-    return NAMESPACE_GROUPS.AUTH_ONLY;
-  }
-  if (pathname === "/" || pathname.startsWith("/pricing") || pathname.startsWith("/docs") || pathname.startsWith("/support") || pathname.startsWith("/features")) {
-    if (DEBUG_I18N) {
-      console.log(`[i18n] Public page detected \u2192 Loading public + auth namespaces`);
-    }
-    return NAMESPACE_GROUPS.PUBLIC_INITIAL;
-  }
-  if (!pathname || pathname === "") {
-    if (DEBUG_I18N) {
-      console.log(`[i18n] Empty pathname \u2192 Using context-aware fallback`);
-    }
-    if (typeof window !== "undefined") {
-      const currentPath = window.location.pathname;
-      if (DEBUG_I18N) {
-        console.log(`[i18n] Client-side pathname detected: "${currentPath}"`);
-      }
-      if (currentPath.startsWith("/dashboard")) {
-        return NAMESPACE_GROUPS.DASHBOARD_AUTHENTICATED;
-      }
-      if (currentPath.includes("login") || currentPath.includes("signup") || currentPath.includes("auth")) {
-        return NAMESPACE_GROUPS.AUTH_ONLY;
-      }
-      if (currentPath === "/" || currentPath.startsWith("/pricing") || currentPath.startsWith("/features")) {
-        return NAMESPACE_GROUPS.PUBLIC_INITIAL;
-      }
-    }
-    return NAMESPACE_GROUPS.PUBLIC_INITIAL;
-  }
-  return NAMESPACE_GROUPS.PUBLIC_INITIAL;
+  const group = pathname.startsWith("/dashboard") ? "dashboard" : pathname.startsWith("/superadmin") ? "superadmin" : pathname.startsWith("/devtools") ? "devtools" : pathname.startsWith("/auth") || /\/(login|signup|forgot-password|reset-password|verify-email)$/.test(pathname) ? "auth" : "public";
+  if (DEBUG_I18N) console.log(`[i18n] ${pathname || "/"} \u2192 ${group}`);
+  const configuredNamespaces = getConfiguredClientNamespaces({
+    entityRegistry: ENTITY_REGISTRY,
+    appConfig: APP_CONFIG_MERGED
+  });
+  return [.../* @__PURE__ */ new Set([
+    ...NAMESPACE_GROUPS[group],
+    ...group === "dashboard" || group === "superadmin" ? configuredNamespaces[group] : []
+  ])];
 }
 async function getServerLocale() {
   try {

package/dist/lib/api/auth/devtools-auth.d.ts

@@ -2,7 +2,7 @@
  * DevTools API Authentication
  *
  * Permission helpers for devtools-only API endpoints.
- * Only superadmin and developer user roles can access these APIs.
+ * Only the developer role can access these APIs, the same rule as the /devtools pages and /api/devtools/*.
  */
 import { NextResponse } from 'next/server';
 import type { DualAuthResult } from './dual-auth';
@@ -10,7 +10,7 @@ import type { DualAuthResult } from './dual-auth';
  * Check if the authenticated user can access DevTools APIs
  *
  * @param authResult - Result from authenticateRequest()
- * @returns true if user has superadmin or developer role
+ * @returns true if the user has the developer role
  */
 export declare function canAccessDevtoolsApi(authResult: DualAuthResult): boolean;
 /**

package/dist/lib/api/auth/devtools-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devtools-auth.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/auth/devtools-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AASjD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAQxE;AAED;;GAEG;AACH,wBAAgB,kCAAkC,IAAI,YAAY,CAejE;AAED;;GAEG;AACH,wBAAgB,kCAAkC,IAAI,YAAY,CAcjE"}
+{"version":3,"file":"devtools-auth.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/auth/devtools-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAKjD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAQxE;AAED;;GAEG;AACH,wBAAgB,kCAAkC,IAAI,YAAY,CAejE;AAED;;GAEG;AACH,wBAAgB,kCAAkC,IAAI,YAAY,CAcjE"}

package/dist/lib/api/auth/devtools-auth.js

@@ -1,5 +1,5 @@
 import { NextResponse } from "next/server";
-const DEVTOOLS_ALLOWED_ROLES = ["superadmin", "developer"];
+const DEVTOOLS_ALLOWED_ROLES = ["developer"];
 function canAccessDevtoolsApi(authResult) {
   if (!authResult.success || !authResult.user) {
     return false;
@@ -13,11 +13,11 @@ function createDevtoolsAccessDeniedResponse() {
     {
       success: false,
       error: {
-        message: "Access denied: DevTools APIs require superadmin or developer role",
+        message: "Access denied: DevTools APIs require the developer role",
         code: "DEVTOOLS_ACCESS_DENIED",
         details: {
           requiredRoles: DEVTOOLS_ALLOWED_ROLES,
-          hint: 'User role "member" cannot access DevTools APIs regardless of team role'
+          hint: "Only the developer role can access DevTools APIs, regardless of team role"
         }
       }
     },

package/dist/lib/api/entities.js

@@ -1,4 +1,4 @@
-import { clientMetaSystemAdapter } from "@nextsparkjs/registries/entity-registry.client";
+import { getClientEntityApiPath, getClientEntityConfigs } from "../entities/client-entity-meta.js";
 import { withBasePath, withBasePathIfInApp } from "../base-path.js";
 function getApiBaseUrl() {
   if (typeof window !== "undefined") {
@@ -35,12 +35,12 @@ class EntityApiClient {
    */
   async getEndpointPath(entityType) {
     try {
-      const apiPath = clientMetaSystemAdapter.getApiPath(entityType);
+      const apiPath = getClientEntityApiPath(entityType);
       if (apiPath) {
         return apiPath;
       }
       try {
-        const entities = clientMetaSystemAdapter.getAllEntityConfigs();
+        const entities = getClientEntityConfigs();
         const entity = entities.find((config) => config.name === entityType);
         if (entity == null ? void 0 : entity.apiPath) {
           return entity.apiPath;
@@ -325,7 +325,7 @@ class EntityApiClient {
   async getBulkOperations(entityType) {
     var _a;
     try {
-      const entities = clientMetaSystemAdapter.getAllEntityConfigs();
+      const entities = getClientEntityConfigs();
       const entityConfig = entities.find((config) => config.name === entityType);
       if (!((_a = entityConfig == null ? void 0 : entityConfig.features) == null ? void 0 : _a.enabled)) {
         return [];
@@ -448,7 +448,7 @@ const duplicateEntityData = async (entityType, id) => {
   return entityApi.duplicate(entityType, id);
 };
 const getEntityChildren = async (parentEntityType, parentId, childEntityName, params = {}) => {
-  const apiPath = clientMetaSystemAdapter.getApiPath(parentEntityType);
+  const apiPath = getClientEntityApiPath(parentEntityType);
   const endpointPath = apiPath || (parentEntityType.endsWith("s") ? parentEntityType : `${parentEntityType}s`);
   const baseUrl = withBasePath("/api/v1");
   const url = new URL(`${baseUrl}/${endpointPath}/${parentId}/child/${childEntityName}`, getApiBaseUrl());

package/dist/lib/api/entity/audit-log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/entity/audit-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,cAAc,GAAG,IAAI,CAAA;CAC5B;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,cAAc,GAAG,IAAI,EAC3B,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAuCf"}
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/entity/audit-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,cAAc,GAAG,IAAI,CAAA;CAC5B;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,cAAc,GAAG,IAAI,EAC3B,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAqDf"}

package/dist/lib/api/entity/audit-log.js

@@ -4,9 +4,11 @@ async function logGenericHandlerUsage(auth, request, statusCode, responseTime) {
   const userId = (_a = auth == null ? void 0 : auth.user) == null ? void 0 : _a.id;
   if (!userId) return;
   const apiKeyId = (auth == null ? void 0 : auth.type) === "api-key" ? auth.keyId ?? null : null;
+  let endpoint = "unknown";
+  let method = "unknown";
   try {
-    const endpoint = request.nextUrl.pathname;
-    const method = request.method;
+    endpoint = request.nextUrl.pathname;
+    method = request.method;
     const ipAddress = request.headers.get("x-forwarded-for") || request.headers.get("x-real-ip") || "unknown";
     const userAgent = request.headers.get("user-agent");
     await mutateWithRLS(
@@ -27,7 +29,14 @@ async function logGenericHandlerUsage(auth, request, statusCode, responseTime) {
       userId
     );
   } catch (error) {
-    console.error("[generic-handler:audit] failed to write api_audit_log entry:", error);
+    console.error("[generic-handler:audit] api_audit_log write failed", {
+      event: "generic_handler_audit_write_failed",
+      endpoint,
+      method,
+      statusCode,
+      errorCode: typeof error === "object" && error !== null && "code" in error ? String(error.code) : void 0,
+      errorMessage: error instanceof Error ? error.message : String(error)
+    });
   }
 }
 export {

package/dist/lib/api/entity/generic-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generic-handler.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/entity/generic-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AA4wBvD;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAEnF;AAsmBD;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAErF;AAyaD;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAEpJ;AA8ND;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAEtJ;AA+YD;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAEtJ;AAwKD;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAEtF"}
+{"version":3,"file":"generic-handler.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/entity/generic-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AA6wBvD;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAEnF;AA8lBD;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAErF;AAoaD;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAEpJ;AAoND;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAEtJ;AA+YD;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAEtJ;AAwKD;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAEtF"}

package/dist/lib/api/entity/generic-handler.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { authenticateRequest, createAuthFailureResponse, canBypassTeamContext } from "../auth/dual-auth.js";
 import { resolveEntityFromUrl, validateEntityOperation } from "./resolver.js";
 import { generateEntitySchemas } from "../../entities/schema-generator.js";
+import { entityResponseSystemColumns, taxonomyResponseFields } from "../../entities/portable/response-shape.js";
 import { queryWithRLS, mutateWithRLS, queryOneWithRLS } from "../../db.js";
 import {
   createApiResponse,
@@ -110,8 +111,8 @@ async function includeTaxonomiesInData(entityConfig, items, userId) {
   return items.map((item) => {
     const itemTaxonomies = taxonomyMap[item.id] || {};
     const taxonomyFields = {};
-    for (const tc of entityConfig.taxonomies.types) {
-      taxonomyFields[tc.field] = itemTaxonomies[tc.field] || [];
+    for (const field of taxonomyResponseFields(entityConfig)) {
+      taxonomyFields[field] = itemTaxonomies[field] || [];
     }
     return {
       ...item,
@@ -406,7 +407,7 @@ async function handleGenericList(request) {
   return runWithAuditLog(request, (audit) => handleGenericListImpl(request, audit));
 }
 async function handleGenericListImpl(request, audit) {
-  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m;
+  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k;
   try {
     const resolution = await resolveEntityFromUrl(request.nextUrl.pathname);
     if (!resolution.isValidEntity || !resolution.entityConfig) {
@@ -530,13 +531,7 @@ async function handleGenericListImpl(request, audit) {
         return `t.${columnName}`;
       }).join(", ");
     } else {
-      const systemFields = ["id", "userId", "teamId", "createdAt", "updatedAt"];
-      if ((_c = entityConfig.builder) == null ? void 0 : _c.enabled) {
-        systemFields.push("blocks");
-      }
-      if ((_d = entityConfig.table) == null ? void 0 : _d.softDelete) {
-        systemFields.push("deletedAt", "deletedBy");
-      }
+      const systemFields = entityResponseSystemColumns(entityConfig, { includeSoftDelete: true });
       const configFields = entityConfig.fields.map((field) => {
         const columnName = /[A-Z]/.test(field.name) ? `"${field.name}"` : field.name;
         return `t.${columnName}`;
@@ -556,8 +551,8 @@ async function handleGenericListImpl(request, audit) {
     const fromDate = url.searchParams.get("from");
     const toDate = url.searchParams.get("to");
     const dateFieldName = url.searchParams.get("dateField");
-    const isPublicEntity = ((_e = entityConfig.access) == null ? void 0 : _e.public) === true;
-    const requestingPublishedOnly = (_f = customFilters["status"]) == null ? void 0 : _f.includes("published");
+    const isPublicEntity = ((_c = entityConfig.access) == null ? void 0 : _c.public) === true;
+    const requestingPublishedOnly = (_d = customFilters["status"]) == null ? void 0 : _d.includes("published");
     const skipUserFilter = isPublicEntity && requestingPublishedOnly;
     if (skipUserFilter && process.env.NODE_ENV === "development") {
       console.log(`[GenericHandler] Public access mode: skipping userId filter for ${entityConfig.slug} (status=published)`);
@@ -590,7 +585,7 @@ async function handleGenericListImpl(request, audit) {
       if (forcePublishedOnly) {
         query += ` AND t."status" = 'published'`;
       }
-      if (userId && !((_g = entityConfig.access) == null ? void 0 : _g.shared) && !skipUserFilter && !isBypass) {
+      if (userId && !((_e = entityConfig.access) == null ? void 0 : _e.shared) && !skipUserFilter && !isBypass) {
         query += ` AND t."userId" = $${paramIndex++}`;
         queryParams.push(userId);
       }
@@ -598,7 +593,7 @@ async function handleGenericListImpl(request, audit) {
         query += ` AND t."${ownershipFilter.field}" = $${paramIndex++}`;
         queryParams.push(ownershipFilter.value);
       }
-      if (((_h = entityConfig.table) == null ? void 0 : _h.softDelete) && !isBypass) {
+      if (((_f = entityConfig.table) == null ? void 0 : _f.softDelete) && !isBypass) {
         query += ` AND t."deletedAt" IS NULL`;
       }
     } else if (fieldsParam && distinctParam) {
@@ -614,7 +609,7 @@ async function handleGenericListImpl(request, audit) {
         query += ` AND t."parentId" = $${paramIndex++}`;
         queryParams.push(parentId);
       }
-      if (userId && !((_i = entityConfig.access) == null ? void 0 : _i.shared) && !skipUserFilter && !isBypass) {
+      if (userId && !((_g = entityConfig.access) == null ? void 0 : _g.shared) && !skipUserFilter && !isBypass) {
         query += ` AND t."userId" = $${paramIndex++}`;
         queryParams.push(userId);
       }
@@ -622,7 +617,7 @@ async function handleGenericListImpl(request, audit) {
         query += ` AND t."${ownershipFilter.field}" = $${paramIndex++}`;
         queryParams.push(ownershipFilter.value);
       }
-      if (((_j = entityConfig.table) == null ? void 0 : _j.softDelete) && !isBypass) {
+      if (((_h = entityConfig.table) == null ? void 0 : _h.softDelete) && !isBypass) {
         query += ` AND t."deletedAt" IS NULL`;
       }
       if (forcePublishedOnly) {
@@ -638,7 +633,7 @@ async function handleGenericListImpl(request, audit) {
         whereConditions.push(`t."teamId" = $${paramIndex++}`);
         queryParams.push(teamId);
       }
-      if (userId && !((_k = entityConfig.access) == null ? void 0 : _k.shared) && !skipUserFilter && !isBypass) {
+      if (userId && !((_i = entityConfig.access) == null ? void 0 : _i.shared) && !skipUserFilter && !isBypass) {
         whereConditions.push(`t."userId" = $${paramIndex++}`);
         queryParams.push(userId);
       }
@@ -646,7 +641,7 @@ async function handleGenericListImpl(request, audit) {
         whereConditions.push(`t."${ownershipFilter.field}" = $${paramIndex++}`);
         queryParams.push(ownershipFilter.value);
       }
-      if (((_l = entityConfig.table) == null ? void 0 : _l.softDelete) && !isBypass) {
+      if (((_j = entityConfig.table) == null ? void 0 : _j.softDelete) && !isBypass) {
         whereConditions.push(`t."deletedAt" IS NULL`);
       }
       if (forcePublishedOnly) {
@@ -770,7 +765,7 @@ async function handleGenericListImpl(request, audit) {
       );
     }
     let dataWithTaxonomies = dataWithChild;
-    if ((_m = entityConfig.taxonomies) == null ? void 0 : _m.enabled) {
+    if ((_k = entityConfig.taxonomies) == null ? void 0 : _k.enabled) {
       dataWithTaxonomies = await includeTaxonomiesInData(
         entityConfig,
         dataWithChild,
@@ -791,7 +786,7 @@ async function handleGenericCreate(request) {
   return runWithAuditLog(request, (audit) => handleGenericCreateImpl(request, audit));
 }
 async function handleGenericCreateImpl(request, audit) {
-  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
+  var _a, _b, _c, _d, _e, _f, _g, _h, _i;
   try {
     const resolution = await resolveEntityFromUrl(request.nextUrl.pathname);
     if (!resolution.isValidEntity || !resolution.entityConfig) {
@@ -1000,10 +995,7 @@ async function handleGenericCreateImpl(request, audit) {
       }).catch(() => {
       });
     }
-    const systemFields = ["id", "userId", "teamId", "createdAt", "updatedAt"];
-    if ((_h = entityConfig.builder) == null ? void 0 : _h.enabled) {
-      systemFields.push("blocks");
-    }
+    const systemFields = entityResponseSystemColumns(entityConfig, { includeSoftDelete: false });
     const configFields = entityConfig.fields.map((field) => {
       const columnName = /[A-Z]/.test(field.name) ? `"${field.name}"` : field.name;
       return `t.${columnName}`;
@@ -1020,7 +1012,7 @@ async function handleGenericCreateImpl(request, audit) {
     `;
     const createdItems = await queryWithRLS(selectQuery, [createdEntityId], authResult.user.id);
     const createdItem = createdItems[0];
-    if ((_i = entityConfig.taxonomies) == null ? void 0 : _i.enabled) {
+    if ((_h = entityConfig.taxonomies) == null ? void 0 : _h.enabled) {
       await processTaxonomyRelations(entityConfig, createdEntityId, body, authResult.user.id, false);
     }
     const metadataWasProvided = metas && typeof metas === "object" && Object.keys(metas).length > 0;
@@ -1033,7 +1025,7 @@ async function handleGenericCreateImpl(request, audit) {
       );
     }
     let responseItem = createdItem;
-    if ((_j = entityConfig.taxonomies) == null ? void 0 : _j.enabled) {
+    if ((_i = entityConfig.taxonomies) == null ? void 0 : _i.enabled) {
       const itemsWithTaxonomies = await includeTaxonomiesInData(
         entityConfig,
         [createdItem],
@@ -1068,7 +1060,7 @@ async function handleGenericRead(request, { params }) {
   return runWithAuditLog(request, (audit) => handleGenericReadImpl(request, audit, { params }));
 }
 async function handleGenericReadImpl(request, audit, { params }) {
-  var _a, _b, _c, _d, _e, _f, _g;
+  var _a, _b, _c, _d, _e;
   try {
     const { id } = await params;
     const resolution = await resolveEntityFromUrl(request.nextUrl.pathname);
@@ -1110,13 +1102,7 @@ async function handleGenericReadImpl(request, audit, { params }) {
     }
     const entityConfig = resolution.entityConfig;
     const tableName = getTableName(entityConfig);
-    const systemFields = ["id", "userId", "teamId", "createdAt", "updatedAt"];
-    if ((_b = entityConfig.builder) == null ? void 0 : _b.enabled) {
-      systemFields.push("blocks");
-    }
-    if ((_c = entityConfig.table) == null ? void 0 : _c.softDelete) {
-      systemFields.push("deletedAt", "deletedBy");
-    }
+    const systemFields = entityResponseSystemColumns(entityConfig, { includeSoftDelete: true });
     const configFields = entityConfig.fields.map((field) => {
       const columnName = /[A-Z]/.test(field.name) ? `"${field.name}"` : field.name;
       return `t.${columnName}`;
@@ -1126,7 +1112,7 @@ async function handleGenericReadImpl(request, audit, { params }) {
       return `t.${columnName}`;
     });
     const fields = [...systemFieldsFormatted, ...configFields].join(", ");
-    const forcePublishedOnly = ((_d = entityConfig.access) == null ? void 0 : _d.public) === true && userId === null && entityConfig.fields.some((f) => f.name === "status");
+    const forcePublishedOnly = ((_b = entityConfig.access) == null ? void 0 : _b.public) === true && userId === null && entityConfig.fields.some((f) => f.name === "status");
     let query;
     let queryParams;
     let paramIndex = 1;
@@ -1140,7 +1126,7 @@ async function handleGenericReadImpl(request, audit, { params }) {
       query += ` AND t."teamId" = $${paramIndex++}`;
       queryParams.push(teamId);
     }
-    if (userId && !((_e = entityConfig.access) == null ? void 0 : _e.shared) && !isBypass) {
+    if (userId && !((_c = entityConfig.access) == null ? void 0 : _c.shared) && !isBypass) {
       query += ` AND t."userId" = $${paramIndex++}`;
       queryParams.push(userId);
     }
@@ -1160,7 +1146,7 @@ async function handleGenericReadImpl(request, audit, { params }) {
         queryParams.push(readOwnershipFilter.value);
       }
     }
-    if (((_f = entityConfig.table) == null ? void 0 : _f.softDelete) && !isBypass) {
+    if (((_d = entityConfig.table) == null ? void 0 : _d.softDelete) && !isBypass) {
       query += ` AND t."deletedAt" IS NULL`;
     }
     if (forcePublishedOnly) {
@@ -1196,7 +1182,7 @@ async function handleGenericReadImpl(request, audit, { params }) {
       itemWithChild = itemsWithChild[0] || itemWithMeta;
     }
     let itemWithTaxonomies = itemWithChild;
-    if ((_g = entityConfig.taxonomies) == null ? void 0 : _g.enabled) {
+    if ((_e = entityConfig.taxonomies) == null ? void 0 : _e.enabled) {
       const itemsWithTaxonomies = await includeTaxonomiesInData(
         entityConfig,
         [itemWithChild],

package/dist/lib/api/entity/resolver.d.ts

@@ -1,14 +1,12 @@
 /**
  * Entity Resolver
  *
- * Resolves entity configurations from URLs and determines if custom
- * overrides exist in (contents) folders.
+ * Resolves entity configurations from URLs.
  */
 import type { EntityConfig } from '../../entities/types';
 export interface EntityResolution {
     entityName: string;
     entityConfig: EntityConfig | null;
-    hasCustomOverride: boolean;
     isValidEntity: boolean;
 }
 /**

package/dist/lib/api/entity/resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/entity/resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAIxD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,YAAY,GAAG,IAAI,CAAA;IACjC,iBAAiB,EAAE,OAAO,CAAA;IAC1B,aAAa,EAAE,OAAO,CAAA;CACvB;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAkDtF;AA2CD;;GAEG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAQ5D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,YAAY,EAC1B,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAC1D,OAAO,CAkBT"}
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/entity/resolver.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAExD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,YAAY,GAAG,IAAI,CAAA;IACjC,aAAa,EAAE,OAAO,CAAA;CACvB;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2CtF;AAoBD;;GAEG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAQ5D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,YAAY,EAC1B,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAC1D,OAAO,CAkBT"}

package/dist/lib/api/entity/resolver.js

@@ -1,13 +1,10 @@
 import { entityRegistry, ensureInitialized } from "../../entities/registry.js";
-import { existsSync } from "fs";
-import { join } from "path";
 async function resolveEntityFromUrl(pathname) {
   const segments = pathname.split("/").filter(Boolean);
   if (segments.length < 3 || segments[0] !== "api" || segments[1] !== "v1") {
     return {
       entityName: "",
       entityConfig: null,
-      hasCustomOverride: false,
       isValidEntity: false
     };
   }
@@ -16,8 +13,6 @@ async function resolveEntityFromUrl(pathname) {
     return {
       entityName: entitySlug,
       entityConfig: null,
-      hasCustomOverride: true,
-      // Treat core as override
       isValidEntity: false
     };
   }
@@ -27,36 +22,16 @@ async function resolveEntityFromUrl(pathname) {
     return {
       entityName: entitySlug,
       entityConfig: null,
-      hasCustomOverride: false,
       isValidEntity: false
     };
   }
-  const hasCustomOverride = await checkCustomOverride(entitySlug);
   return {
     entityName: entityConfig.slug,
     // Use slug as entityName for new structure
     entityConfig,
-    hasCustomOverride,
     isValidEntity: true
   };
 }
-async function checkCustomOverride(entityName) {
-  try {
-    const customRoutePath = join(
-      process.cwd(),
-      "app",
-      "api",
-      "v1",
-      "(contents)",
-      entityName,
-      "route.ts"
-    );
-    return existsSync(customRoutePath);
-  } catch (error) {
-    console.warn(`Error checking custom override for ${entityName}:`, error);
-    return false;
-  }
-}
 function isCorePath(entityName) {
   const corePaths = [
     "users",

package/dist/lib/api/helpers.d.ts

@@ -1,5 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { ApiKeyAuth } from './auth';
+import { isValidUUID } from '../utils/uuid';
 import { type AuthenticateOptions } from './auth/scope-policy';
 interface SessionAuth {
     userId: string;
@@ -110,7 +111,7 @@ export declare function withApiLogging<T extends unknown[]>(handler: (request: N
 /**
  * Valida que un UUID tenga formato válido
  */
-export declare function isValidUUID(uuid: string): boolean;
+export { isValidUUID };
 /**
  * Sanitiza parámetros de búsqueda para prevenir inyección SQL
  */
@@ -221,5 +222,4 @@ export declare function processEntityMetadata(entityType: string, entityId: stri
     success: boolean;
     errors: string[];
 }>;
-export {};
 //# sourceMappingURL=helpers.d.ts.map

package/dist/lib/api/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/lib/api/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,UAAU,EAAkB,MAAM,QAAQ,CAAC;AAWpD,OAAO,EACL,KAAK,mBAAmB,EAKzB,MAAM,qBAAqB,CAAC;AAG7B,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,OAAO,mBAAmB,EAAE,QAAQ,EAAE,CAAC;IAC9C,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,KAAK,IAAI,GAAG,UAAU,GAAG,WAAW,CAAC;AAErC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC;IACT,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,iBAAiB,CAAC,EAAE,YAAY,CAAC;IACjC,wEAAwE;IACxE,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B,CAAC,CAwDD;AAgFD;;;;;;;;GAQG;AACH,wBAAsB,iCAAiC,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;IACrF,IAAI,EAAE,UAAU,CAAC;IACjB,iBAAiB,CAAC,EAAE,YAAY,CAAC;CAClC,CAAC,CASD;AA+BD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CAwB3D;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,YAAY,GAAG,IAAI,CAiB5F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAE,MAAY;;;;;;GASzG;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAY,EACpB,OAAO,CAAC,EAAE,OAAO,EACjB,IAAI,CAAC,EAAE,MAAM;;;;;;;;GAWd;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,WAAW,GAAG;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAQA;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM;;;;;;;EAUd;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,OAAO,GACpB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,OAAO,EAAE,EAChD,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,IAEtD,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CA6CvE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGjD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUzD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAezE;AAUD;;;GAGG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAgDzG;AAED;;GAEG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAG7F;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,EAChC,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,QAAQ,CAAC,CAyCnB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CA0BhE;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,CA0BlE;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAClE,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,CAAC,EAAE,EACb,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAAE,CAAC,CA6BtD;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAClE,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,CAAC,EAAE,EACb,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,OAAO,GACrB,OAAO,CAAC,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;CAAE,CAAC,EAAE,CAAC,CAgExD;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3E,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,EACT,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CA2BlD;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3E,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,EACT,eAAe,EAAE,OAAO,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAiBlD;AAoBD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA+DjD"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/lib/api/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,UAAU,EAAkB,MAAM,QAAQ,CAAC;AAWpD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EACL,KAAK,mBAAmB,EAKzB,MAAM,qBAAqB,CAAC;AAG7B,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,OAAO,mBAAmB,EAAE,QAAQ,EAAE,CAAC;IAC9C,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,KAAK,IAAI,GAAG,UAAU,GAAG,WAAW,CAAC;AAErC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC;IACT,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,iBAAiB,CAAC,EAAE,YAAY,CAAC;IACjC,wEAAwE;IACxE,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B,CAAC,CAwDD;AAgFD;;;;;;;;GAQG;AACH,wBAAsB,iCAAiC,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;IACrF,IAAI,EAAE,UAAU,CAAC;IACjB,iBAAiB,CAAC,EAAE,YAAY,CAAC;CAClC,CAAC,CASD;AA+BD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CAwB3D;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,YAAY,GAAG,IAAI,CAiB5F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAE,MAAY;;;;;;GASzG;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAY,EACpB,OAAO,CAAC,EAAE,OAAO,EACjB,IAAI,CAAC,EAAE,MAAM;;;;;;;;GAWd;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,WAAW,GAAG;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAQA;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM;;;;;;;EAUd;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,OAAO,GACpB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,OAAO,EAAE,EAChD,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,IAEtD,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CA6CvE;AAED;;GAEG;AACH,OAAO,EAAE,WAAW,EAAE,CAAC;AAEvB;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUzD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAezE;AAUD;;;GAGG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAgDzG;AAED;;GAEG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAG7F;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,EAChC,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,QAAQ,CAAC,CAyCnB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CA0BhE;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,CA0BlE;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAClE,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,CAAC,EAAE,EACb,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAAE,CAAC,CA6BtD;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAClE,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,CAAC,EAAE,EACb,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,OAAO,GACrB,OAAO,CAAC,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;CAAE,CAAC,EAAE,CAAC,CAgExD;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3E,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,EACT,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CA2BlD;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3E,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,EACT,eAAe,EAAE,OAAO,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAiBlD;AAoBD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA+DjD"}

package/dist/lib/api/helpers.js

@@ -8,6 +8,7 @@ import { MetaService } from "../services/meta.service.js";
 import { ScopeService } from "../services/scope.service.js";
 import { getChildEntities } from "../entities/queries.js";
 import { getCorsOrigins, normalizeOrigin, isOriginAllowed } from "../utils/cors.js";
+import { isValidUUID } from "../utils/uuid.js";
 import {
   describeRoute,
   normalizeRequiredScopes,
@@ -257,10 +258,6 @@ function withApiLogging(handler) {
     }
   };
 }
-function isValidUUID(uuid) {
-  const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-  return uuidRegex.test(uuid);
-}
 function sanitizeSearchQuery(query) {
   if (!query || typeof query !== "string") {
     return "";

package/dist/lib/api/keys.js

@@ -1,4 +1,4 @@
-import { API_CONFIG } from "../config/config-sync.js";
+import { API_CONFIG } from "../config/config-client.js";
 class ApiKeyManager {
   /**
    * Genera una nueva API key con formato seguro

package/dist/lib/api/rate-limit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/lib/api/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGxD,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,MAAa,EACpB,QAAQ,GAAE,MAAc,GACvB,eAAe,CAyCjB;AAED;;;GAGG;AACH,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,aAAqB,GAC1B,OAAO,CAAC,eAAe,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA6CpD;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,eAAe,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,YAAY,CAwB5G;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,OAAO,CAEzD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EAAE,GACf,YAAY,GAAG,IAAI,CAkCrB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EAAE,GACf,YAAY,CASd;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,OAAO,EAAE,EAC/C,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,IAEtD,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CAsCvE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB,GAAG,IAAI,CAaP;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAGlD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,KAAK,CAAC;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CASD;AAED;;GAEG;AACH,wBAAgB,sBAAsB;;;;;EAErC;AAoGD,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,OAAO,EAAE,EACnD,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,EACpE,IAAI,GAAE,aAAqB,IAEb,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CAkCvE"}
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/lib/api/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIxD,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,MAAa,EACpB,QAAQ,GAAE,MAAc,GACvB,eAAe,CAyCjB;AAED;;;GAGG;AACH,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,aAAqB,GAC1B,OAAO,CAAC,eAAe,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA6CpD;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,eAAe,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,YAAY,CAwB5G;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,OAAO,CAEzD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EAAE,GACf,YAAY,GAAG,IAAI,CAkCrB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EAAE,GACf,YAAY,CASd;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,OAAO,EAAE,EAC/C,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,IAEtD,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CAwCvE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB,GAAG,IAAI,CAaP;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAGlD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,KAAK,CAAC;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CASD;AAED;;GAEG;AACH,wBAAgB,sBAAsB;;;;;EAErC;AAoGD,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,OAAO,EAAE,EACnD,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,EACpE,IAAI,GAAE,aAAqB,IAEb,SAAS,WAAW,EAAE,GAAG,MAAM,CAAC,KAAG,OAAO,CAAC,YAAY,CAAC,CAkCvE"}

package/dist/lib/api/rate-limit.js

@@ -1,4 +1,5 @@
 import { NextResponse } from "next/server";
+import { unstable_rethrow } from "next/navigation";
 import { getRateLimitForScopes } from "./keys.js";
 import { rateLimitCache, getCacheKey } from "./cache.js";
 import {
@@ -171,6 +172,7 @@ function withRateLimit(handler) {
       const response = await handler(request, ...args);
       return addRateLimitHeaders(response, keyId, scopes);
     } catch (error) {
+      unstable_rethrow(error);
       console.error("Rate limiting error:", error);
       return handler(request, ...args);
     }