@nextsparkjs/core 0.1.0-beta.74 → 0.1.0-beta.76

package/templates/app/api/v1/billing/plans/route.ts

@@ -10,9 +10,8 @@ import { validateAndAuthenticateRequest, createApiResponse, createApiError } fro
 import { PlanService } from '@nextsparkjs/core/lib/services'
 import { createPlanSchema } from '@nextsparkjs/core/lib/billing/schema'
 import { mutateWithRLS } from '@nextsparkjs/core/lib/db'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Plans list is partially public (public plans visible to all, hidden plans only to superadmin)
   let includeHidden = false
 
@@ -32,9 +31,9 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
     console.error('[Billing API] Error fetching plans:', error)
     return createApiError('Failed to fetch plans', 500)
   }
-}, 'read');
+}
 
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   // Authenticate request
   const { auth, rateLimitResponse } = await validateAndAuthenticateRequest(request)
   if (rateLimitResponse) return rateLimitResponse
@@ -83,4 +82,4 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     console.error('[Billing API] Error creating plan:', error)
     return createApiError('Failed to create plan', 500)
   }
-}, 'strict');
+}

package/templates/app/api/v1/billing/portal/route.ts

@@ -7,21 +7,17 @@
  * P6: Customer Portal
  */
 
-import { NextRequest, NextResponse } from 'next/server'
-import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
+import { NextRequest } from 'next/server'
+import { authenticateRequest, createAuthError } from '@nextsparkjs/core/lib/api/auth/dual-auth'
 import { createPortalSession } from '@nextsparkjs/core/lib/billing/gateways/stripe'
 import { SubscriptionService, MembershipService } from '@nextsparkjs/core/lib/services'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   // 1. Dual authentication
   const authResult = await authenticateRequest(request)
 
   if (!authResult.success || !authResult.user) {
-    return NextResponse.json(
-      { success: false, error: 'Unauthorized' },
-      { status: 401 }
-    )
+    return createAuthError('Unauthorized', 401)
   }
 
   // 2. Get team context
@@ -30,7 +26,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     authResult.user.defaultTeamId
 
   if (!teamId) {
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: 'No team context available. Please provide x-team-id header.'
@@ -44,7 +40,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
   const actionResult = membership.canPerformAction('billing.portal')
 
   if (!actionResult.allowed) {
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: actionResult.message,
@@ -60,7 +56,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     const subscription = await SubscriptionService.getActive(teamId)
 
     if (!subscription?.externalCustomerId) {
-      return NextResponse.json(
+      return Response.json(
         {
           success: false,
           error: 'No billing account found. Please upgrade to a paid plan first.'
@@ -77,13 +73,13 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
       returnUrl
     })
 
-    return NextResponse.json({
+    return Response.json({
       success: true,
       data: { url: session.url }
     })
   } catch (error) {
     console.error('[portal] Error creating portal session:', error)
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: error instanceof Error ? error.message : 'Failed to create portal session'
@@ -91,4 +87,4 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
       { status: 500 }
     )
   }
-}, 'write');
+}

package/templates/app/api/v1/blocks/[slug]/route.ts

@@ -1,11 +1,10 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { BLOCK_REGISTRY } from '@nextsparkjs/registries/block-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (
+export async function GET(
   request: NextRequest,
   { params }: { params: Promise<{ slug: string }> }
-): Promise<NextResponse> => {
+): Promise<NextResponse> {
   try {
     const { slug } = await params
     const block = BLOCK_REGISTRY[slug]
@@ -27,4 +26,4 @@ export const GET = withRateLimitTier(async (
     console.error('Error fetching block:', err)
     return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
   }
-}, 'read');
+}

package/templates/app/api/v1/blocks/route.ts

@@ -1,8 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { BLOCK_REGISTRY, BLOCK_CATEGORIES } from '@nextsparkjs/registries/block-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   try {
     const { searchParams } = new URL(request.url)
     const category = searchParams.get('category')
@@ -43,4 +42,4 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
     console.error('Error listing blocks:', err)
     return NextResponse.json({ success: false, error: 'Internal server error' }, { status: 500 })
   }
-}, 'read');
+}

package/templates/app/api/v1/blocks/validate/route.ts

@@ -1,14 +1,13 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { BLOCK_REGISTRY } from '@nextsparkjs/registries/block-registry'
 import { z } from 'zod'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 const requestSchema = z.object({
   blockSlug: z.string(),
   props: z.record(z.string(), z.unknown())
 })
 
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   try {
     const body = await request.json()
     const { blockSlug, props } = requestSchema.parse(body)
@@ -25,8 +24,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
 
     try {
       // Dynamic import is allowed here (server-side validation, not registry loading)
-      // webpackIgnore tells webpack to skip static analysis for this intentional dynamic import
-      const schemaModule = await import(/* webpackIgnore: true */ block.schemaPath)
+      const schemaModule = await import(block.schemaPath)
       const schema = schemaModule.schema
 
       schema.parse(props)
@@ -44,4 +42,4 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     console.error('Error validating block:', err)
     return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
   }
-}, 'write');
+}

package/templates/app/api/v1/devtools/blocks/route.ts

@@ -16,9 +16,8 @@ import {
 } from '@nextsparkjs/core/lib/api/auth/devtools-auth'
 import { BLOCK_REGISTRY } from '@nextsparkjs/registries/block-registry'
 import { TAGS_REGISTRY, COVERAGE_SUMMARY } from '@nextsparkjs/registries/testing-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Authenticate request
   const authResult = await authenticateRequest(request)
 
@@ -70,7 +69,7 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       },
     },
   })
-}, 'read');
+}
 
 export async function OPTIONS() {
   return new NextResponse(null, {

package/templates/app/api/v1/devtools/docs/route.ts

@@ -15,7 +15,6 @@ import { NextRequest, NextResponse } from 'next/server'
 import { readFile } from 'fs/promises'
 import { join, dirname } from 'path'
 import { existsSync } from 'fs'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 /**
  * Valid path patterns for documentation files
@@ -81,7 +80,7 @@ function getBasePaths(): string[] {
   return paths
 }
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   const searchParams = request.nextUrl.searchParams
   const docPath = searchParams.get('path')
 
@@ -148,4 +147,4 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       { status: 500 }
     )
   }
-}, 'read');
+}

package/templates/app/api/v1/devtools/features/route.ts

@@ -18,9 +18,8 @@ import {
   FEATURE_REGISTRY,
   COVERAGE_SUMMARY,
 } from '@nextsparkjs/registries/testing-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Authenticate request
   const authResult = await authenticateRequest(request)
 
@@ -49,7 +48,7 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       },
     },
   })
-}, 'read');
+}
 
 export async function OPTIONS() {
   return new NextResponse(null, {

package/templates/app/api/v1/devtools/flows/route.ts

@@ -18,9 +18,8 @@ import {
   FLOW_REGISTRY,
   COVERAGE_SUMMARY,
 } from '@nextsparkjs/registries/testing-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Authenticate request
   const authResult = await authenticateRequest(request)
 
@@ -49,7 +48,7 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       },
     },
   })
-}, 'read');
+}
 
 export async function OPTIONS() {
   return new NextResponse(null, {

package/templates/app/api/v1/devtools/scheduled-actions/route.ts

@@ -17,9 +17,8 @@ import {
 import { queryWithRLS } from '@nextsparkjs/core/lib/db'
 import type { ScheduledAction, ScheduledActionStatus } from '@nextsparkjs/core/lib/scheduled-actions/types'
 import { getAllRegisteredActions } from '@nextsparkjs/core/lib/scheduled-actions/registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Authenticate request
   const authResult = await authenticateRequest(request)
 
@@ -108,7 +107,7 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       },
     },
   })
-}, 'read');
+}
 
 export async function OPTIONS() {
   return new NextResponse(null, {

package/templates/app/api/v1/devtools/testing/route.ts

@@ -20,9 +20,8 @@ import {
   FEATURE_REGISTRY,
   FLOW_REGISTRY,
 } from '@nextsparkjs/registries/testing-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Authenticate request
   const authResult = await authenticateRequest(request)
 
@@ -70,7 +69,7 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       },
     },
   })
-}, 'read');
+}
 
 export async function OPTIONS() {
   return new NextResponse(null, {

package/templates/app/api/v1/media/upload/route.ts

@@ -2,9 +2,8 @@ import { NextRequest } from 'next/server'
 import { put } from '@vercel/blob'
 import { authenticateRequest, hasRequiredScope } from '@nextsparkjs/core/lib/api/auth/dual-auth'
 import { createApiResponse, createApiError } from '@nextsparkjs/core/lib/api/helpers'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   try {
     // 1. Dual Authentication (API Key OR Session)
     const authResult = await authenticateRequest(request)
@@ -112,10 +111,10 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
       { error: error instanceof Error ? error.message : String(error) }
     )
   }
-}, 'write');
+}
 
 // Optional: Add a GET endpoint to get upload info
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   try {
     // 1. Dual Authentication (API Key OR Session)
     const authResult = await authenticateRequest(request)
@@ -148,4 +147,4 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       { error: error instanceof Error ? error.message : String(error) }
     )
   }
-}, 'read');
+}

package/templates/app/api/v1/plugin/[...path]/route.ts

@@ -8,47 +8,46 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { PluginService, type RouteFileEndpoint, type PluginRegistryEntry } from '@nextsparkjs/core/lib/services'
 import { PLUGIN_REGISTRY } from '@nextsparkjs/registries/plugin-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (
+export async function GET(
   request: NextRequest,
   { params }: { params: Promise<{ path: string[] }> }
-) => {
+) {
   const { path } = await params
   return handlePluginRequest(request, path, 'GET')
-}, 'read');
+}
 
-export const POST = withRateLimitTier(async (
+export async function POST(
   request: NextRequest,
   { params }: { params: Promise<{ path: string[] }> }
-) => {
+) {
   const { path } = await params
   return handlePluginRequest(request, path, 'POST')
-}, 'write');
+}
 
-export const PUT = withRateLimitTier(async (
+export async function PUT(
   request: NextRequest,
   { params }: { params: Promise<{ path: string[] }> }
-) => {
+) {
   const { path } = await params
   return handlePluginRequest(request, path, 'PUT')
-}, 'write');
+}
 
-export const DELETE = withRateLimitTier(async (
+export async function DELETE(
   request: NextRequest,
   { params }: { params: Promise<{ path: string[] }> }
-) => {
+) {
   const { path } = await params
   return handlePluginRequest(request, path, 'DELETE')
-}, 'write');
+}
 
-export const PATCH = withRateLimitTier(async (
+export async function PATCH(
   request: NextRequest,
   { params }: { params: Promise<{ path: string[] }> }
-) => {
+) {
   const { path } = await params
   return handlePluginRequest(request, path, 'PATCH')
-}, 'write');
+}
 
 /**
  * Handle plugin API requests with nested paths

package/templates/app/api/v1/plugin/route.ts

@@ -8,11 +8,10 @@
 import { NextResponse } from 'next/server'
 import { PluginService, type PluginRegistryEntry } from '@nextsparkjs/core/lib/services'
 import { PLUGIN_REGISTRY } from '@nextsparkjs/registries/plugin-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async () => {
+export async function GET() {
   return listPluginsWithAPI()
-}, 'read');
+}
 
 /**
  * List all plugins with their API status

package/templates/app/api/v1/post-categories/[id]/route.ts

@@ -2,7 +2,6 @@ import { NextRequest, NextResponse } from 'next/server'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
 import { query as dbQuery } from '@nextsparkjs/core/lib/db'
 import { z } from 'zod'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 const updateCategorySchema = z.object({
   name: z.string().min(1).max(255).optional(),
@@ -17,10 +16,10 @@ const updateCategorySchema = z.object({
 })
 
 // GET /api/v1/post-categories/:id - Get category by ID
-export const GET = withRateLimitTier(async (
+export async function GET(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
-): Promise<NextResponse> => {
+): Promise<NextResponse> {
   try {
     const { id } = await params
 
@@ -44,13 +43,13 @@ export const GET = withRateLimitTier(async (
     console.error('Error in post-categories API:', err)
     return NextResponse.json({ success: false, error: 'Internal server error' }, { status: 500 })
   }
-}, 'read');
+}
 
 // PUT /api/v1/post-categories/:id - Update category
-export const PUT = withRateLimitTier(async (
+export async function PUT(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
-): Promise<NextResponse> => {
+): Promise<NextResponse> {
   try {
     // Dual authentication: API key or session
     const authResult = await authenticateRequest(request)
@@ -184,13 +183,13 @@ export const PUT = withRateLimitTier(async (
     const errorMessage = err instanceof Error ? err.message : 'Internal server error'
     return NextResponse.json({ success: false, error: errorMessage }, { status: 500 })
   }
-}, 'write');
+}
 
 // DELETE /api/v1/post-categories/:id - Delete category
-export const DELETE = withRateLimitTier(async (
+export async function DELETE(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
-): Promise<NextResponse> => {
+): Promise<NextResponse> {
   try {
     // Dual authentication: API key or session
     const authResult = await authenticateRequest(request)
@@ -253,4 +252,4 @@ export const DELETE = withRateLimitTier(async (
     console.error('Error in post-categories API DELETE:', err)
     return NextResponse.json({ success: false, error: 'Internal server error' }, { status: 500 })
   }
-}, 'write');
+}

package/templates/app/api/v1/post-categories/route.ts

@@ -2,7 +2,6 @@ import { NextRequest, NextResponse } from 'next/server'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
 import { query as dbQuery } from '@nextsparkjs/core/lib/db'
 import { z } from 'zod'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 const createCategorySchema = z.object({
   name: z.string().min(1).max(255),
@@ -27,7 +26,7 @@ function generateSlug(name: string): string {
 }
 
 // GET /api/v1/post-categories - List categories (filters taxonomies by type = 'post_category')
-export const GET = withRateLimitTier(async () => {
+export async function GET() {
   try {
     const result = await dbQuery(
       `SELECT id, name, slug, description, icon, color, "parentId", "order", "isDefault", "isActive",
@@ -45,10 +44,10 @@ export const GET = withRateLimitTier(async () => {
     console.error('Error fetching post categories:', error)
     return NextResponse.json({ success: false, error: 'Internal server error' }, { status: 500 })
   }
-}, 'read');
+}
 
 // POST /api/v1/post-categories - Create category
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   try {
     // Dual authentication: API key or session
     const authResult = await authenticateRequest(request)
@@ -117,4 +116,4 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     console.error('Error creating post category:', error)
     return NextResponse.json({ success: false, error: 'Internal server error' }, { status: 500 })
   }
-}, 'write');
+}

package/templates/app/api/v1/team-invitations/[token]/accept/route.ts

@@ -8,7 +8,7 @@ import {
   addCorsHeaders,
 } from '@nextsparkjs/core/lib/api/helpers'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
-import { checkRateLimit, withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
+import { checkRateLimit } from '@nextsparkjs/core/lib/api/rate-limit'
 import { RATE_LIMITS } from '@nextsparkjs/core/lib/api/keys'
 import type { TeamInvitation, TeamMember } from '@nextsparkjs/core/lib/teams/types'
 
@@ -18,7 +18,7 @@ export async function OPTIONS() {
 }
 
 // POST /api/v1/team-invitations/:token/accept - Accept invitation and become member
-export const POST = withRateLimitTier(withApiLogging(
+export const POST = withApiLogging(
   async (req: NextRequest, { params }: { params: Promise<{ token: string }> }): Promise<NextResponse> => {
     try {
       // Authenticate using dual auth
@@ -176,4 +176,4 @@ export const POST = withRateLimitTier(withApiLogging(
       return addCorsHeaders(response)
     }
   }
-), 'write');
+)

package/templates/app/api/v1/team-invitations/[token]/decline/route.ts

@@ -8,7 +8,7 @@ import {
   addCorsHeaders,
 } from '@nextsparkjs/core/lib/api/helpers'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
-import { checkRateLimit, withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
+import { checkRateLimit } from '@nextsparkjs/core/lib/api/rate-limit'
 import { RATE_LIMITS } from '@nextsparkjs/core/lib/api/keys'
 import type { TeamInvitation } from '@nextsparkjs/core/lib/teams/types'
 
@@ -18,7 +18,7 @@ export async function OPTIONS() {
 }
 
 // POST /api/v1/team-invitations/:token/decline - Decline invitation
-export const POST = withRateLimitTier(withApiLogging(
+export const POST = withApiLogging(
   async (req: NextRequest, { params }: { params: Promise<{ token: string }> }): Promise<NextResponse> => {
     try {
       // Authenticate using dual auth
@@ -117,4 +117,4 @@ export const POST = withRateLimitTier(withApiLogging(
       return addCorsHeaders(response)
     }
   }
-), 'write');
+)

package/templates/app/api/v1/team-invitations/[token]/route.ts

@@ -8,7 +8,6 @@ import {
   addCorsHeaders,
 } from '@nextsparkjs/core/lib/api/helpers'
 import type { TeamInvitation } from '@nextsparkjs/core/lib/teams/types'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 // Handle CORS preflight
 export async function OPTIONS() {
@@ -16,7 +15,7 @@ export async function OPTIONS() {
 }
 
 // GET /api/v1/team-invitations/:token - Get invitation details (public endpoint for preview)
-export const GET = withRateLimitTier(withApiLogging(
+export const GET = withApiLogging(
   async (req: NextRequest, { params }: { params: Promise<{ token: string }> }): Promise<NextResponse> => {
     try {
       const { token } = await params
@@ -87,4 +86,4 @@ export const GET = withRateLimitTier(withApiLogging(
       return addCorsHeaders(response)
     }
   }
-), 'read');
+)

package/templates/app/api/v1/team-invitations/route.ts

@@ -11,7 +11,6 @@ import {
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
 import { invitationListQuerySchema } from '@nextsparkjs/core/lib/teams/schema'
 import type { TeamInvitation } from '@nextsparkjs/core/lib/teams/types'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 // Handle CORS preflight
 export async function OPTIONS() {
@@ -19,7 +18,7 @@ export async function OPTIONS() {
 }
 
 // GET /api/v1/team-invitations - List pending invitations for current user
-export const GET = withRateLimitTier(withApiLogging(async (req: NextRequest): Promise<NextResponse> => {
+export const GET = withApiLogging(async (req: NextRequest): Promise<NextResponse> => {
   try {
     // Authenticate using dual auth
     const authResult = await authenticateRequest(req)
@@ -112,4 +111,4 @@ export const GET = withRateLimitTier(withApiLogging(async (req: NextRequest): Pr
     const response = createApiError('Internal server error', 500)
     return addCorsHeaders(response)
   }
-}), 'read');
+})

package/templates/app/api/v1/teams/[teamId]/invitations/route.ts

@@ -9,7 +9,6 @@ import {
   addCorsHeaders,
 } from '@nextsparkjs/core/lib/api/helpers'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 import { TeamMemberService, MembershipService } from '@nextsparkjs/core/lib/services'
 import type { TeamInvitation } from '@nextsparkjs/core/lib/teams/types'
 
@@ -19,7 +18,7 @@ export async function OPTIONS() {
 }
 
 // GET /api/v1/teams/:teamId/invitations - List pending invitations for a team
-export const GET = withRateLimitTier(withApiLogging(
+export const GET = withApiLogging(
   async (req: NextRequest, { params }: { params: Promise<{ teamId: string }> }): Promise<NextResponse> => {
     try {
       // Authenticate using dual auth
@@ -99,10 +98,10 @@ export const GET = withRateLimitTier(withApiLogging(
       return addCorsHeaders(response)
     }
   }
-), 'read')
+)
 
 // DELETE /api/v1/teams/:teamId/invitations/:invitationId - Cancel/revoke an invitation
-export const DELETE = withRateLimitTier(withApiLogging(
+export const DELETE = withApiLogging(
   async (req: NextRequest, { params }: { params: Promise<{ teamId: string }> }): Promise<NextResponse> => {
     try {
       // Authenticate using dual auth
@@ -169,4 +168,4 @@ export const DELETE = withRateLimitTier(withApiLogging(
       return addCorsHeaders(response)
     }
   }
-), 'write')
+)

package/templates/app/api/v1/teams/[teamId]/invoices/[invoiceNumber]/route.ts

@@ -8,7 +8,6 @@ import {
   addCorsHeaders,
 } from '@nextsparkjs/core/lib/api/helpers'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 import { MembershipService } from '@nextsparkjs/core/lib/services'
 import type { InvoiceResponse } from '@nextsparkjs/core/lib/validation/invoices'
 
@@ -18,7 +17,7 @@ export async function OPTIONS() {
 }
 
 // GET /api/v1/teams/:teamId/invoices/:invoiceNumber - Get single invoice (owner only)
-export const GET = withRateLimitTier(withApiLogging(
+export const GET = withApiLogging(
   async (
     req: NextRequest,
     { params }: { params: Promise<{ teamId: string; invoiceNumber: string }> }
@@ -103,4 +102,4 @@ export const GET = withRateLimitTier(withApiLogging(
       return addCorsHeaders(response)
     }
   }
-), 'read')
+)