@nextsparkjs/core 0.1.0-beta.75 → 0.1.0-beta.77

package/templates/app/api/v1/billing/check-action/route.ts

@@ -9,26 +9,22 @@
  * FIX1: This endpoint was missing, causing useMembership.canDo() to fail
  */
 
-import { NextRequest, NextResponse } from 'next/server'
-import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
+import { NextRequest } from 'next/server'
+import { authenticateRequest, createAuthError } from '@nextsparkjs/core/lib/api/auth/dual-auth'
 import { MembershipService } from '@nextsparkjs/core/lib/services'
 import { z } from 'zod'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 const checkActionSchema = z.object({
   action: z.string().min(1, 'Action is required'),
   teamId: z.string().uuid().optional()
 })
 
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   // 1. Dual authentication (API Key OR Session)
   const authResult = await authenticateRequest(request)
 
   if (!authResult.success || !authResult.user) {
-    return NextResponse.json(
-      { success: false, error: 'Unauthorized' },
-      { status: 401 }
-    )
+    return createAuthError('Unauthorized', 401)
   }
 
   // 2. Parse and validate request body
@@ -36,7 +32,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
   try {
     body = await request.json()
   } catch {
-    return NextResponse.json(
+    return Response.json(
       { success: false, error: 'Invalid JSON body' },
       { status: 400 }
     )
@@ -44,7 +40,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
 
   const parseResult = checkActionSchema.safeParse(body)
   if (!parseResult.success) {
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: 'Validation failed',
@@ -63,7 +59,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     authResult.user.defaultTeamId
 
   if (!teamId) {
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: 'No team context available. Please provide teamId in body or x-team-id header.'
@@ -78,8 +74,8 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
   const membership = await MembershipService.get(authResult.user.id, teamId)
   const result = membership.canPerformAction(action)
 
-  return NextResponse.json({
+  return Response.json({
     success: true,
     data: result
   })
-}, 'read');
+}

package/templates/app/api/v1/billing/checkout/route.ts

@@ -9,27 +9,23 @@
  * P2: Stripe Integration
  */
 
-import { NextRequest, NextResponse } from 'next/server'
-import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
+import { NextRequest } from 'next/server'
+import { authenticateRequest, createAuthError } from '@nextsparkjs/core/lib/api/auth/dual-auth'
 import { createCheckoutSession } from '@nextsparkjs/core/lib/billing/gateways/stripe'
 import { SubscriptionService, MembershipService } from '@nextsparkjs/core/lib/services'
 import { z } from 'zod'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 const checkoutSchema = z.object({
   planSlug: z.string().min(1, 'Plan slug is required'),
   billingPeriod: z.enum(['monthly', 'yearly']).default('monthly')
 })
 
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   // 1. Dual authentication
   const authResult = await authenticateRequest(request)
 
   if (!authResult.success || !authResult.user) {
-    return NextResponse.json(
-      { success: false, error: 'Unauthorized' },
-      { status: 401 }
-    )
+    return createAuthError('Unauthorized', 401)
   }
 
   // 2. Parse and validate request body
@@ -37,7 +33,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
   try {
     body = await request.json()
   } catch {
-    return NextResponse.json(
+    return Response.json(
       { success: false, error: 'Invalid JSON body' },
       { status: 400 }
     )
@@ -45,7 +41,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
 
   const parseResult = checkoutSchema.safeParse(body)
   if (!parseResult.success) {
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: 'Validation failed',
@@ -63,7 +59,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     authResult.user.defaultTeamId
 
   if (!teamId) {
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: 'No team context available. Please provide x-team-id header.'
@@ -77,7 +73,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
   const actionResult = membership.canPerformAction('billing.checkout')
 
   if (!actionResult.allowed) {
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: actionResult.message,
@@ -108,7 +104,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
       customerId: subscription?.externalCustomerId || undefined
     })
 
-    return NextResponse.json({
+    return Response.json({
       success: true,
       data: {
         url: session.url,
@@ -117,7 +113,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     })
   } catch (error) {
     console.error('[checkout] Error creating checkout session:', error)
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: error instanceof Error ? error.message : 'Failed to create checkout session'
@@ -125,4 +121,4 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
       { status: 500 }
     )
   }
-}, 'write');
+}

package/templates/app/api/v1/billing/plans/route.ts

@@ -10,9 +10,8 @@ import { validateAndAuthenticateRequest, createApiResponse, createApiError } fro
 import { PlanService } from '@nextsparkjs/core/lib/services'
 import { createPlanSchema } from '@nextsparkjs/core/lib/billing/schema'
 import { mutateWithRLS } from '@nextsparkjs/core/lib/db'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Plans list is partially public (public plans visible to all, hidden plans only to superadmin)
   let includeHidden = false
 
@@ -32,9 +31,9 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
     console.error('[Billing API] Error fetching plans:', error)
     return createApiError('Failed to fetch plans', 500)
   }
-}, 'read');
+}
 
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   // Authenticate request
   const { auth, rateLimitResponse } = await validateAndAuthenticateRequest(request)
   if (rateLimitResponse) return rateLimitResponse
@@ -83,4 +82,4 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     console.error('[Billing API] Error creating plan:', error)
     return createApiError('Failed to create plan', 500)
   }
-}, 'strict');
+}

package/templates/app/api/v1/billing/portal/route.ts

@@ -7,21 +7,17 @@
  * P6: Customer Portal
  */
 
-import { NextRequest, NextResponse } from 'next/server'
-import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
+import { NextRequest } from 'next/server'
+import { authenticateRequest, createAuthError } from '@nextsparkjs/core/lib/api/auth/dual-auth'
 import { createPortalSession } from '@nextsparkjs/core/lib/billing/gateways/stripe'
 import { SubscriptionService, MembershipService } from '@nextsparkjs/core/lib/services'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   // 1. Dual authentication
   const authResult = await authenticateRequest(request)
 
   if (!authResult.success || !authResult.user) {
-    return NextResponse.json(
-      { success: false, error: 'Unauthorized' },
-      { status: 401 }
-    )
+    return createAuthError('Unauthorized', 401)
   }
 
   // 2. Get team context
@@ -30,7 +26,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     authResult.user.defaultTeamId
 
   if (!teamId) {
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: 'No team context available. Please provide x-team-id header.'
@@ -44,7 +40,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
   const actionResult = membership.canPerformAction('billing.portal')
 
   if (!actionResult.allowed) {
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: actionResult.message,
@@ -60,7 +56,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     const subscription = await SubscriptionService.getActive(teamId)
 
     if (!subscription?.externalCustomerId) {
-      return NextResponse.json(
+      return Response.json(
         {
           success: false,
           error: 'No billing account found. Please upgrade to a paid plan first.'
@@ -77,13 +73,13 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
       returnUrl
     })
 
-    return NextResponse.json({
+    return Response.json({
       success: true,
       data: { url: session.url }
     })
   } catch (error) {
     console.error('[portal] Error creating portal session:', error)
-    return NextResponse.json(
+    return Response.json(
       {
         success: false,
         error: error instanceof Error ? error.message : 'Failed to create portal session'
@@ -91,4 +87,4 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
       { status: 500 }
     )
   }
-}, 'write');
+}

package/templates/app/api/v1/blocks/[slug]/route.ts

@@ -1,11 +1,10 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { BLOCK_REGISTRY } from '@nextsparkjs/registries/block-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (
+export async function GET(
   request: NextRequest,
   { params }: { params: Promise<{ slug: string }> }
-): Promise<NextResponse> => {
+): Promise<NextResponse> {
   try {
     const { slug } = await params
     const block = BLOCK_REGISTRY[slug]
@@ -27,4 +26,4 @@ export const GET = withRateLimitTier(async (
     console.error('Error fetching block:', err)
     return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
   }
-}, 'read');
+}

package/templates/app/api/v1/blocks/route.ts

@@ -1,8 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { BLOCK_REGISTRY, BLOCK_CATEGORIES } from '@nextsparkjs/registries/block-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   try {
     const { searchParams } = new URL(request.url)
     const category = searchParams.get('category')
@@ -43,4 +42,4 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
     console.error('Error listing blocks:', err)
     return NextResponse.json({ success: false, error: 'Internal server error' }, { status: 500 })
   }
-}, 'read');
+}

package/templates/app/api/v1/blocks/validate/route.ts

@@ -1,14 +1,13 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { BLOCK_REGISTRY } from '@nextsparkjs/registries/block-registry'
 import { z } from 'zod'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 const requestSchema = z.object({
   blockSlug: z.string(),
   props: z.record(z.string(), z.unknown())
 })
 
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   try {
     const body = await request.json()
     const { blockSlug, props } = requestSchema.parse(body)
@@ -25,8 +24,7 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
 
     try {
       // Dynamic import is allowed here (server-side validation, not registry loading)
-      // webpackIgnore tells webpack to skip static analysis for this intentional dynamic import
-      const schemaModule = await import(/* webpackIgnore: true */ block.schemaPath)
+      const schemaModule = await import(block.schemaPath)
       const schema = schemaModule.schema
 
       schema.parse(props)
@@ -44,4 +42,4 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     console.error('Error validating block:', err)
     return NextResponse.json({ error: 'Internal server error' }, { status: 500 })
   }
-}, 'write');
+}

package/templates/app/api/v1/devtools/blocks/route.ts

@@ -16,9 +16,8 @@ import {
 } from '@nextsparkjs/core/lib/api/auth/devtools-auth'
 import { BLOCK_REGISTRY } from '@nextsparkjs/registries/block-registry'
 import { TAGS_REGISTRY, COVERAGE_SUMMARY } from '@nextsparkjs/registries/testing-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Authenticate request
   const authResult = await authenticateRequest(request)
 
@@ -70,7 +69,7 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       },
     },
   })
-}, 'read');
+}
 
 export async function OPTIONS() {
   return new NextResponse(null, {

package/templates/app/api/v1/devtools/docs/route.ts

@@ -15,7 +15,6 @@ import { NextRequest, NextResponse } from 'next/server'
 import { readFile } from 'fs/promises'
 import { join, dirname } from 'path'
 import { existsSync } from 'fs'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 /**
  * Valid path patterns for documentation files
@@ -81,7 +80,7 @@ function getBasePaths(): string[] {
   return paths
 }
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   const searchParams = request.nextUrl.searchParams
   const docPath = searchParams.get('path')
 
@@ -148,4 +147,4 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       { status: 500 }
     )
   }
-}, 'read');
+}

package/templates/app/api/v1/devtools/features/route.ts

@@ -18,9 +18,8 @@ import {
   FEATURE_REGISTRY,
   COVERAGE_SUMMARY,
 } from '@nextsparkjs/registries/testing-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Authenticate request
   const authResult = await authenticateRequest(request)
 
@@ -49,7 +48,7 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       },
     },
   })
-}, 'read');
+}
 
 export async function OPTIONS() {
   return new NextResponse(null, {

package/templates/app/api/v1/devtools/flows/route.ts

@@ -18,9 +18,8 @@ import {
   FLOW_REGISTRY,
   COVERAGE_SUMMARY,
 } from '@nextsparkjs/registries/testing-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Authenticate request
   const authResult = await authenticateRequest(request)
 
@@ -49,7 +48,7 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       },
     },
   })
-}, 'read');
+}
 
 export async function OPTIONS() {
   return new NextResponse(null, {

package/templates/app/api/v1/devtools/scheduled-actions/route.ts

@@ -17,9 +17,8 @@ import {
 import { queryWithRLS } from '@nextsparkjs/core/lib/db'
 import type { ScheduledAction, ScheduledActionStatus } from '@nextsparkjs/core/lib/scheduled-actions/types'
 import { getAllRegisteredActions } from '@nextsparkjs/core/lib/scheduled-actions/registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Authenticate request
   const authResult = await authenticateRequest(request)
 
@@ -108,7 +107,7 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       },
     },
   })
-}, 'read');
+}
 
 export async function OPTIONS() {
   return new NextResponse(null, {

package/templates/app/api/v1/devtools/testing/route.ts

@@ -20,9 +20,8 @@ import {
   FEATURE_REGISTRY,
   FLOW_REGISTRY,
 } from '@nextsparkjs/registries/testing-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   // Authenticate request
   const authResult = await authenticateRequest(request)
 
@@ -70,7 +69,7 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       },
     },
   })
-}, 'read');
+}
 
 export async function OPTIONS() {
   return new NextResponse(null, {

package/templates/app/api/v1/media/upload/route.ts

@@ -2,9 +2,8 @@ import { NextRequest } from 'next/server'
 import { put } from '@vercel/blob'
 import { authenticateRequest, hasRequiredScope } from '@nextsparkjs/core/lib/api/auth/dual-auth'
 import { createApiResponse, createApiError } from '@nextsparkjs/core/lib/api/helpers'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   try {
     // 1. Dual Authentication (API Key OR Session)
     const authResult = await authenticateRequest(request)
@@ -112,10 +111,10 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
       { error: error instanceof Error ? error.message : String(error) }
     )
   }
-}, 'write');
+}
 
 // Optional: Add a GET endpoint to get upload info
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   try {
     // 1. Dual Authentication (API Key OR Session)
     const authResult = await authenticateRequest(request)
@@ -148,4 +147,4 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       { error: error instanceof Error ? error.message : String(error) }
     )
   }
-}, 'read');
+}

package/templates/app/api/v1/plugin/[...path]/route.ts

@@ -8,47 +8,46 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { PluginService, type RouteFileEndpoint, type PluginRegistryEntry } from '@nextsparkjs/core/lib/services'
 import { PLUGIN_REGISTRY } from '@nextsparkjs/registries/plugin-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async (
+export async function GET(
   request: NextRequest,
   { params }: { params: Promise<{ path: string[] }> }
-) => {
+) {
   const { path } = await params
   return handlePluginRequest(request, path, 'GET')
-}, 'read');
+}
 
-export const POST = withRateLimitTier(async (
+export async function POST(
   request: NextRequest,
   { params }: { params: Promise<{ path: string[] }> }
-) => {
+) {
   const { path } = await params
   return handlePluginRequest(request, path, 'POST')
-}, 'write');
+}
 
-export const PUT = withRateLimitTier(async (
+export async function PUT(
   request: NextRequest,
   { params }: { params: Promise<{ path: string[] }> }
-) => {
+) {
   const { path } = await params
   return handlePluginRequest(request, path, 'PUT')
-}, 'write');
+}
 
-export const DELETE = withRateLimitTier(async (
+export async function DELETE(
   request: NextRequest,
   { params }: { params: Promise<{ path: string[] }> }
-) => {
+) {
   const { path } = await params
   return handlePluginRequest(request, path, 'DELETE')
-}, 'write');
+}
 
-export const PATCH = withRateLimitTier(async (
+export async function PATCH(
   request: NextRequest,
   { params }: { params: Promise<{ path: string[] }> }
-) => {
+) {
   const { path } = await params
   return handlePluginRequest(request, path, 'PATCH')
-}, 'write');
+}
 
 /**
  * Handle plugin API requests with nested paths

package/templates/app/api/v1/plugin/route.ts

@@ -8,11 +8,10 @@
 import { NextResponse } from 'next/server'
 import { PluginService, type PluginRegistryEntry } from '@nextsparkjs/core/lib/services'
 import { PLUGIN_REGISTRY } from '@nextsparkjs/registries/plugin-registry'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
-export const GET = withRateLimitTier(async () => {
+export async function GET() {
   return listPluginsWithAPI()
-}, 'read');
+}
 
 /**
  * List all plugins with their API status

package/templates/app/api/v1/post-categories/[id]/route.ts

@@ -2,7 +2,6 @@ import { NextRequest, NextResponse } from 'next/server'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
 import { query as dbQuery } from '@nextsparkjs/core/lib/db'
 import { z } from 'zod'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 const updateCategorySchema = z.object({
   name: z.string().min(1).max(255).optional(),
@@ -17,10 +16,10 @@ const updateCategorySchema = z.object({
 })
 
 // GET /api/v1/post-categories/:id - Get category by ID
-export const GET = withRateLimitTier(async (
+export async function GET(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
-): Promise<NextResponse> => {
+): Promise<NextResponse> {
   try {
     const { id } = await params
 
@@ -44,13 +43,13 @@ export const GET = withRateLimitTier(async (
     console.error('Error in post-categories API:', err)
     return NextResponse.json({ success: false, error: 'Internal server error' }, { status: 500 })
   }
-}, 'read');
+}
 
 // PUT /api/v1/post-categories/:id - Update category
-export const PUT = withRateLimitTier(async (
+export async function PUT(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
-): Promise<NextResponse> => {
+): Promise<NextResponse> {
   try {
     // Dual authentication: API key or session
     const authResult = await authenticateRequest(request)
@@ -184,13 +183,13 @@ export const PUT = withRateLimitTier(async (
     const errorMessage = err instanceof Error ? err.message : 'Internal server error'
     return NextResponse.json({ success: false, error: errorMessage }, { status: 500 })
   }
-}, 'write');
+}
 
 // DELETE /api/v1/post-categories/:id - Delete category
-export const DELETE = withRateLimitTier(async (
+export async function DELETE(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
-): Promise<NextResponse> => {
+): Promise<NextResponse> {
   try {
     // Dual authentication: API key or session
     const authResult = await authenticateRequest(request)
@@ -253,4 +252,4 @@ export const DELETE = withRateLimitTier(async (
     console.error('Error in post-categories API DELETE:', err)
     return NextResponse.json({ success: false, error: 'Internal server error' }, { status: 500 })
   }
-}, 'write');
+}

package/templates/app/api/v1/post-categories/route.ts

@@ -2,7 +2,6 @@ import { NextRequest, NextResponse } from 'next/server'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
 import { query as dbQuery } from '@nextsparkjs/core/lib/db'
 import { z } from 'zod'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 const createCategorySchema = z.object({
   name: z.string().min(1).max(255),
@@ -27,7 +26,7 @@ function generateSlug(name: string): string {
 }
 
 // GET /api/v1/post-categories - List categories (filters taxonomies by type = 'post_category')
-export const GET = withRateLimitTier(async () => {
+export async function GET() {
   try {
     const result = await dbQuery(
       `SELECT id, name, slug, description, icon, color, "parentId", "order", "isDefault", "isActive",
@@ -45,10 +44,10 @@ export const GET = withRateLimitTier(async () => {
     console.error('Error fetching post categories:', error)
     return NextResponse.json({ success: false, error: 'Internal server error' }, { status: 500 })
   }
-}, 'read');
+}
 
 // POST /api/v1/post-categories - Create category
-export const POST = withRateLimitTier(async (request: NextRequest) => {
+export async function POST(request: NextRequest) {
   try {
     // Dual authentication: API key or session
     const authResult = await authenticateRequest(request)
@@ -117,4 +116,4 @@ export const POST = withRateLimitTier(async (request: NextRequest) => {
     console.error('Error creating post category:', error)
     return NextResponse.json({ success: false, error: 'Internal server error' }, { status: 500 })
   }
-}, 'write');
+}