canopycms 0.0.0 → 0.0.1

package/src/api/__test__/mock-client.ts

@@ -1,404 +0,0 @@
-/**
- * Mock API client for testing hooks and components.
- *
- * AUTO-GENERATED by scripts/generate-client.ts
- * Do not edit this file manually - changes will be overwritten.
- */
-
-import { vi, type Mock } from 'vitest'
-import type { CanopyApiClient } from '../client'
-import type { ApiResponse } from '../types'
-import { createLogicalPath, createPhysicalPath } from '../../paths'
-import type { ContentId } from '../../paths'
-import type { BranchDeleteResponse, BranchListResponse, BranchResponse, CreateBranchBody, UpdateBranchAccessBody } from '../branch'
-import type { BranchMergeResponse } from '../branch-status'
-import type { RequestChangesBody } from '../branch-review'
-import type { AddCommentBody, AddCommentResponse, CommentsResponse, ResolveCommentResponse } from '../comments'
-import type { ContentReadResponse, ContentWriteResponse, ReferenceValidationResponse, RenameEntryBody, RenameEntryResponse, ValidateReferencesBody, WriteContentBody } from '../content'
-import type { ReferenceOptionsResponse } from '../reference-options'
-import type { ResolveReferencesBody, ResolveReferencesResponse } from '../resolve-references'
-import type { DeleteEntryResponse, EntriesResponse } from '../entries'
-import type { AssetDeleteResponse, AssetUploadResponse, AssetsListResponse, UploadAssetBody } from '../assets'
-import type { GetUserMetadataResponse, ListGroupsResponse, PermissionsResponse, SearchUsersResponse, UpdatePermissionsBody } from '../permissions'
-import type { ExternalGroupsResponse, InternalGroupsResponse, UpdateInternalGroupsBody, UpdateInternalGroupsResponse } from '../groups'
-import type { UserInfoResponse } from '../user'
-import type { AddEntryTypeApiResponse, CreateCollectionApiResponse, DeleteCollectionApiResponse, GetCollectionApiResponse, GetSchemaApiResponse, InvalidateSchemaCacheApiResponse, RemoveEntryTypeApiResponse, UpdateCollectionApiResponse, UpdateEntryTypeApiResponse, UpdateOrderApiResponse, UpdateOrderBody } from '../schema'
-import type { CreateCollectionInput, CreateEntryTypeInput, UpdateCollectionInput, UpdateEntryTypeInput } from '../../schema/schema-store-types'
-
-/**
- * Type utility to convert CanopyApiClient methods to Vitest mocks.
- */
-export type MockApiClient = {
-  [K in keyof CanopyApiClient]: CanopyApiClient[K] extends Record<string, any>
-    ? {
-        [M in keyof CanopyApiClient[K]]: CanopyApiClient[K][M] extends (...args: infer Args) => infer Return
-          ? Mock<Args, Return>
-          : never
-      }
-    : never
-}
-
-/**
- * Create a mock API client with all methods as vi.fn().
- */
-export function createMockApiClient(): MockApiClient {
-  return {
-  branches: {
-    list: vi.fn().mockResolvedValue(mockSuccess({"branches":[]})),
-    create: vi.fn().mockResolvedValue(mockSuccess({"branch":{"name":"test-branch","status":"editing","access":{},"createdBy":"user-1","createdAt":"2024-01-01","updatedAt":"2024-01-01"}})),
-    delete: vi.fn().mockResolvedValue(mockSuccess({"deleted":true})),
-    updateAccess: vi.fn().mockResolvedValue(mockSuccess({"branch":{"name":"test-branch","status":"editing","access":{},"createdBy":"user-1","createdAt":"2024-01-01","updatedAt":"2024-01-01"}})),
-  },
-
-  workflow: {
-    withdraw: vi.fn().mockResolvedValue(mockSuccess({"branch":{"name":"test-branch","status":"editing","access":{},"createdBy":"user-1","createdAt":"2024-01-01","updatedAt":"2024-01-01"}})),
-    requestChanges: vi.fn().mockResolvedValue(mockSuccess({"branch":{"name":"test-branch","status":"editing","access":{},"createdBy":"user-1","createdAt":"2024-01-01","updatedAt":"2024-01-01"}})),
-    approve: vi.fn().mockResolvedValue(mockSuccess({"branch":{"name":"test-branch","status":"approved","access":{},"createdBy":"user-1","createdAt":"2024-01-01","updatedAt":"2024-01-01"}})),
-    markMerged: vi.fn().mockResolvedValue(mockSuccess({"branch":{"name":"test-branch","status":"archived"}})),
-    getStatus: vi.fn().mockResolvedValue(mockSuccess({"branch":{"name":"test-branch","status":"editing","access":{},"createdBy":"user-1","createdAt":"2024-01-01","updatedAt":"2024-01-01"}})),
-    submit: vi.fn().mockResolvedValue(mockSuccess({"branch":{"name":"test-branch","status":"submitted","access":{},"createdBy":"user-1","createdAt":"2024-01-01","updatedAt":"2024-01-01"}})),
-  },
-
-  comments: {
-    list: vi.fn().mockResolvedValue(mockSuccess({"threads":[]})),
-    add: vi.fn().mockResolvedValue(mockSuccess({"threadId":"mock-thread-id","commentId":"mock-comment-id"})),
-    resolve: vi.fn().mockResolvedValue(mockSuccess({"resolved":true})),
-  },
-
-  content: {
-    read: vi.fn().mockResolvedValue(mockSuccess({"format":"json","data":{}})),
-    write: vi.fn().mockResolvedValue(mockSuccess({"format":"json","data":{}})),
-    validateReferences: vi.fn().mockResolvedValue(mockSuccess({"valid":true})),
-    renameEntry: vi.fn().mockResolvedValue(mockSuccess({"newPath":"content/posts/new-slug"})),
-    getReferenceOptions: vi.fn().mockResolvedValue(mockSuccess({"options":[]})),
-    resolveReferences: vi.fn().mockResolvedValue(mockSuccess({"resolved":{}})),
-  },
-
-  entries: {
-    list: vi.fn().mockResolvedValue(mockSuccess({"collections":[],"entries":[],"pagination":{"hasMore":false,"limit":50}})),
-    delete: vi.fn().mockResolvedValue(mockSuccess({"deleted":true})),
-  },
-
-  assets: {
-    list: vi.fn().mockResolvedValue(mockSuccess({"assets":[]})),
-    upload: vi.fn().mockResolvedValue(mockSuccess({"asset":{"key":"","url":""}})),
-    delete: vi.fn().mockResolvedValue(mockSuccess({"deleted":true})),
-  },
-
-  permissions: {
-    get: vi.fn().mockResolvedValue(mockSuccess({"permissions":[]})),
-    update: vi.fn().mockResolvedValue(mockSuccess({"permissions":[]})),
-    searchUsers: vi.fn().mockResolvedValue(mockSuccess({"users":[]})),
-    listGroups: vi.fn().mockResolvedValue(mockSuccess({"groups":[]})),
-    getUserMetadata: vi.fn().mockResolvedValue(mockSuccess({"user":null})),
-  },
-
-  groups: {
-    getInternal: vi.fn().mockResolvedValue(mockSuccess({"groups":[]})),
-    updateInternal: vi.fn().mockResolvedValue(mockSuccess({})),
-    searchExternal: vi.fn().mockResolvedValue(mockSuccess({"groups":[]})),
-  },
-
-  user: {
-    whoami: vi.fn().mockResolvedValue(mockSuccess({"userId":"mock-user","groups":[]})),
-  },
-
-  schema: {
-    get: vi.fn().mockResolvedValue(mockSuccess({"flatSchema":[],"entrySchemas":{}})),
-    getCollection: vi.fn().mockResolvedValue(mockSuccess({"collection":null})),
-    createCollection: vi.fn().mockResolvedValue(mockSuccess({"collectionPath":"","contentId":""})),
-    updateCollection: vi.fn().mockResolvedValue(mockSuccess({"success":true})),
-    deleteCollection: vi.fn().mockResolvedValue(mockSuccess({"success":true})),
-    addEntryType: vi.fn().mockResolvedValue(mockSuccess({"success":true})),
-    updateEntryType: vi.fn().mockResolvedValue(mockSuccess({"success":true})),
-    removeEntryType: vi.fn().mockResolvedValue(mockSuccess({"success":true})),
-    updateOrder: vi.fn().mockResolvedValue(mockSuccess({"success":true})),
-    invalidateSchemaCache: vi.fn().mockResolvedValue(mockSuccess({"success":true,"message":"Cache invalidated"})),
-  },
-  } as MockApiClient
-}
-
-// ========== Response Helpers ==========
-
-/**
- * Create a successful API response
- */
-export function mockSuccess<T>(data: T): ApiResponse<T> {
-  return { ok: true, status: 200, data }
-}
-
-/**
- * Create an error API response
- */
-export function mockError(status: number, error: string): ApiResponse<never> {
-  return { ok: false, status, error }
-}
-
-/**
- * Create a 404 not found response
- */
-export function mockNotFound(): ApiResponse<never> {
-  return mockError(404, 'Not found')
-}
-
-/**
- * Create a 403 forbidden response
- */
-export function mockForbidden(): ApiResponse<never> {
-  return mockError(403, 'Forbidden')
-}
-
-// ========== Auto-Generated Response Factories ==========
-// Generated by scripts/generate-client.ts - DO NOT EDIT MANUALLY
-
-/**
- * Create a BranchListResponse for testing
- */
-export function mockBranchListResponse(): BranchListResponse {
-  return mockSuccess({"branches":[]})
-}
-
-/**
- * Create a BranchResponse for testing
- */
-export function mockBranchResponse(): BranchResponse {
-  return mockSuccess({"branch":{"name":"test-branch","status":"editing","access":{},"createdBy":"user-1","createdAt":"2024-01-01","updatedAt":"2024-01-01"}})
-}
-
-/**
- * Create a BranchDeleteResponse for testing
- */
-export function mockBranchDeleteResponse(): BranchDeleteResponse {
-  return mockSuccess({"deleted":true})
-}
-
-/**
- * Create a BranchMergeResponse for testing
- */
-export function mockBranchMergeResponse(): BranchMergeResponse {
-  return mockSuccess({"branch":{"name":"test-branch","status":"archived"}})
-}
-
-/**
- * Create a CommentsResponse for testing
- */
-export function mockCommentsResponse(): CommentsResponse {
-  return mockSuccess({"threads":[]})
-}
-
-/**
- * Create a AddCommentResponse for testing
- */
-export function mockAddCommentResponse(): AddCommentResponse {
-  return mockSuccess({"threadId":"mock-thread-id","commentId":"mock-comment-id"})
-}
-
-/**
- * Create a ResolveCommentResponse for testing
- */
-export function mockResolveCommentResponse(): ResolveCommentResponse {
-  return mockSuccess({"resolved":true})
-}
-
-/**
- * Create a ContentReadResponse for testing
- */
-export function mockContentReadResponse(): ContentReadResponse {
-  return mockSuccess({"format":"json","data":{}})
-}
-
-/**
- * Create a ContentWriteResponse for testing
- */
-export function mockContentWriteResponse(): ContentWriteResponse {
-  return mockSuccess({"format":"json","data":{}})
-}
-
-/**
- * Create a ReferenceValidationResponse for testing
- */
-export function mockReferenceValidationResponse(): ReferenceValidationResponse {
-  return mockSuccess({"valid":true})
-}
-
-/**
- * Create a RenameEntryResponse for testing
- */
-export function mockRenameEntryResponse(): RenameEntryResponse {
-  return mockSuccess({"newPath":"content/posts/new-slug"})
-}
-
-/**
- * Create a ReferenceOptionsResponse for testing
- */
-export function mockReferenceOptionsResponse(): ReferenceOptionsResponse {
-  return mockSuccess({"options":[]})
-}
-
-/**
- * Create a ResolveReferencesResponse for testing
- */
-export function mockResolveReferencesResponse(): ResolveReferencesResponse {
-  return mockSuccess({"resolved":{}})
-}
-
-/**
- * Create a EntriesResponse for testing
- */
-export function mockEntriesResponse(): EntriesResponse {
-  return mockSuccess({"collections":[],"entries":[],"pagination":{"hasMore":false,"limit":50}})
-}
-
-/**
- * Create a DeleteEntryResponse for testing
- */
-export function mockDeleteEntryResponse(): DeleteEntryResponse {
-  return mockSuccess({"deleted":true})
-}
-
-/**
- * Create a AssetsListResponse for testing
- */
-export function mockAssetsListResponse(): AssetsListResponse {
-  return mockSuccess({"assets":[]})
-}
-
-/**
- * Create a AssetUploadResponse for testing
- */
-export function mockAssetUploadResponse(): AssetUploadResponse {
-  return mockSuccess({"asset":{"key":"","url":""}})
-}
-
-/**
- * Create a AssetDeleteResponse for testing
- */
-export function mockAssetDeleteResponse(): AssetDeleteResponse {
-  return mockSuccess({"deleted":true})
-}
-
-/**
- * Create a PermissionsResponse for testing
- */
-export function mockPermissionsResponse(): PermissionsResponse {
-  return mockSuccess({"permissions":[]})
-}
-
-/**
- * Create a SearchUsersResponse for testing
- */
-export function mockSearchUsersResponse(): SearchUsersResponse {
-  return mockSuccess({"users":[]})
-}
-
-/**
- * Create a ListGroupsResponse for testing
- */
-export function mockListGroupsResponse(): ListGroupsResponse {
-  return mockSuccess({"groups":[]})
-}
-
-/**
- * Create a GetUserMetadataResponse for testing
- */
-export function mockGetUserMetadataResponse(): GetUserMetadataResponse {
-  return mockSuccess({"user":null})
-}
-
-/**
- * Create a InternalGroupsResponse for testing
- */
-export function mockInternalGroupsResponse(): InternalGroupsResponse {
-  return mockSuccess({"groups":[]})
-}
-
-/**
- * Create a UpdateInternalGroupsResponse for testing
- */
-export function mockUpdateInternalGroupsResponse(): UpdateInternalGroupsResponse {
-  return mockSuccess({})
-}
-
-/**
- * Create a ExternalGroupsResponse for testing
- */
-export function mockExternalGroupsResponse(): ExternalGroupsResponse {
-  return mockSuccess({"groups":[]})
-}
-
-/**
- * Create a UserInfoResponse for testing
- */
-export function mockUserInfoResponse(): UserInfoResponse {
-  return mockSuccess({"userId":"mock-user","groups":[]})
-}
-
-/**
- * Create a GetSchemaApiResponse for testing
- */
-export function mockGetSchemaApiResponse(): GetSchemaApiResponse {
-  return mockSuccess({"flatSchema":[],"entrySchemas":{}})
-}
-
-/**
- * Create a GetCollectionApiResponse for testing
- */
-export function mockGetCollectionApiResponse(): GetCollectionApiResponse {
-  return mockSuccess({"collection":null})
-}
-
-/**
- * Create a CreateCollectionApiResponse for testing
- */
-export function mockCreateCollectionApiResponse(): CreateCollectionApiResponse {
-  return mockSuccess({"collectionPath":createLogicalPath(""),"contentId":"" as ContentId})
-}
-
-/**
- * Create a UpdateCollectionApiResponse for testing
- */
-export function mockUpdateCollectionApiResponse(): UpdateCollectionApiResponse {
-  return mockSuccess({"success":true})
-}
-
-/**
- * Create a DeleteCollectionApiResponse for testing
- */
-export function mockDeleteCollectionApiResponse(): DeleteCollectionApiResponse {
-  return mockSuccess({"success":true})
-}
-
-/**
- * Create a AddEntryTypeApiResponse for testing
- */
-export function mockAddEntryTypeApiResponse(): AddEntryTypeApiResponse {
-  return mockSuccess({"success":true})
-}
-
-/**
- * Create a UpdateEntryTypeApiResponse for testing
- */
-export function mockUpdateEntryTypeApiResponse(): UpdateEntryTypeApiResponse {
-  return mockSuccess({"success":true})
-}
-
-/**
- * Create a RemoveEntryTypeApiResponse for testing
- */
-export function mockRemoveEntryTypeApiResponse(): RemoveEntryTypeApiResponse {
-  return mockSuccess({"success":true})
-}
-
-/**
- * Create a UpdateOrderApiResponse for testing
- */
-export function mockUpdateOrderApiResponse(): UpdateOrderApiResponse {
-  return mockSuccess({"success":true})
-}
-
-/**
- * Create a InvalidateSchemaCacheApiResponse for testing
- */
-export function mockInvalidateSchemaCacheApiResponse(): InvalidateSchemaCacheApiResponse {
-  return mockSuccess({"success":true,"message":"Cache invalidated"})
-}

package/src/api/assets.test.ts

@@ -1,140 +0,0 @@
-import { describe, expect, it, vi } from 'vitest'
-
-import { ASSET_ROUTES } from './assets'
-import type { ApiContext } from './types'
-import { RESERVED_GROUPS } from '../authorization'
-
-// Extract handlers for testing
-const listAssets = ASSET_ROUTES.list.handler
-const uploadAsset = ASSET_ROUTES.upload.handler
-const deleteAsset = ASSET_ROUTES.delete.handler
-
-const makeCtx = (): ApiContext => ({
-  services: {
-    config: { schema: [] } as any,
-    entrySchemaRegistry: {},
-    branchSchemaCache: {
-      getSchema: vi.fn().mockResolvedValue({ schema: { collections: [] }, flatSchema: [] }),
-      invalidate: vi.fn().mockResolvedValue(undefined),
-      clearAll: vi.fn().mockResolvedValue(undefined),
-    } as any,
-    checkBranchAccess: () => ({ allowed: true, reason: 'no_acl' }),
-    checkPathAccess: undefined as any,
-    checkContentAccess: async () => ({
-      allowed: true,
-      branch: { allowed: true, reason: 'no_acl' },
-      path: { allowed: true, reason: 'no_acl' },
-    }),
-    createGitManagerFor: undefined as any,
-    bootstrapAdminIds: new Set<string>(),
-    registry: undefined as any,
-    commitFiles: vi.fn(),
-    submitBranch: vi.fn(),
-    commitToSettingsBranch: vi.fn().mockResolvedValue({ committed: true, pushed: true }),
-    getSettingsBranchRoot: vi.fn().mockResolvedValue('/mock/settings'),
-  },
-  getBranchContext: async () => null,
-  assetStore: {
-    list: async () => [{ key: 'a.png', url: 'http://cdn/a.png' }],
-    upload: async (key) => ({ key }),
-    delete: async () => {},
-  },
-})
-
-describe('asset api', () => {
-  it('returns 501 when asset store missing', async () => {
-    const res = await listAssets(
-      { ...makeCtx(), assetStore: undefined },
-      { user: { type: 'authenticated', userId: 'u', groups: [] } },
-    )
-    expect(res.status).toBe(501)
-  })
-
-  it('lists assets for any user', async () => {
-    const res = await listAssets(makeCtx(), {
-      user: { type: 'authenticated', userId: 'u', groups: [] },
-    })
-    expect(res.ok).toBe(true)
-    expect(res.data?.assets[0].key).toBe('a.png')
-  })
-
-  describe('uploadAsset', () => {
-    it('returns 403 for non-privileged users', async () => {
-      const res = await uploadAsset(
-        makeCtx(),
-        { user: { type: 'authenticated', userId: 'u', groups: [] } },
-        { key: 'a.png', data: Buffer.from('x') },
-      )
-      expect(res.ok).toBe(false)
-      expect(res.status).toBe(403)
-      expect(res.error).toBe('Privileged access required')
-    })
-
-    it('allows Reviewers to upload', async () => {
-      const res = await uploadAsset(
-        makeCtx(),
-        {
-          user: {
-            type: 'authenticated',
-            userId: 'u',
-            groups: [RESERVED_GROUPS.REVIEWERS],
-          },
-        },
-        { key: 'a.png', data: Buffer.from('x') },
-      )
-      expect(res.ok).toBe(true)
-    })
-
-    it('allows Admins to upload', async () => {
-      const res = await uploadAsset(
-        makeCtx(),
-        {
-          user: {
-            type: 'authenticated',
-            userId: 'u',
-            groups: [RESERVED_GROUPS.ADMINS],
-          },
-        },
-        { key: 'a.png', data: Buffer.from('x') },
-      )
-      expect(res.ok).toBe(true)
-    })
-  })
-
-  describe('deleteAsset', () => {
-    it('returns 403 for non-admin users', async () => {
-      const res = await deleteAsset(makeCtx(), {
-        user: { type: 'authenticated', userId: 'u', groups: [] },
-        query: { key: 'a.png' },
-      })
-      expect(res.ok).toBe(false)
-      expect(res.status).toBe(403)
-      expect(res.error).toBe('Admin access required')
-    })
-
-    it('returns 403 for Reviewers', async () => {
-      const res = await deleteAsset(makeCtx(), {
-        user: {
-          type: 'authenticated',
-          userId: 'u',
-          groups: [RESERVED_GROUPS.REVIEWERS],
-        },
-        query: { key: 'a.png' },
-      })
-      expect(res.ok).toBe(false)
-      expect(res.status).toBe(403)
-    })
-
-    it('allows Admins to delete', async () => {
-      const res = await deleteAsset(makeCtx(), {
-        user: {
-          type: 'authenticated',
-          userId: 'u',
-          groups: [RESERVED_GROUPS.ADMINS],
-        },
-        query: { key: 'a.png' },
-      })
-      expect(res.ok).toBe(true)
-    })
-  })
-})

package/src/api/assets.ts

@@ -1,154 +0,0 @@
-import { z } from 'zod'
-
-import type { ApiContext, ApiRequest, ApiResponse } from './types'
-import { defineEndpoint } from './route-builder'
-
-/** Response type for listing assets */
-export type AssetsListResponse = ApiResponse<{
-  assets: { key: string; url?: string }[]
-}>
-
-/** Response type for uploading an asset */
-export type AssetUploadResponse = ApiResponse<{
-  asset: { key: string; url?: string }
-}>
-
-/** Response type for deleting an asset */
-export type AssetDeleteResponse = ApiResponse<{ deleted: boolean }>
-
-// ============================================================================
-// Zod Schemas for Validation
-// ============================================================================
-
-const uploadAssetBodySchema = z.object({
-  key: z.string().min(1),
-  contentType: z.string().optional(),
-  data: z.instanceof(Buffer).or(z.instanceof(Uint8Array)),
-})
-
-export interface ListAssetsParams {
-  prefix?: string
-}
-
-export interface UploadAssetBody {
-  key: string
-  contentType?: string
-  data: Buffer | Uint8Array
-}
-
-export interface DeleteAssetBody {
-  key: string
-}
-
-/**
- * List assets - any authenticated user can list assets.
- */
-const listAssetsQuerySchema = z.object({
-  prefix: z.string().optional(),
-})
-
-const listAssetsHandler = async (ctx: ApiContext, req: ApiRequest): Promise<AssetsListResponse> => {
-  if (!ctx.assetStore) return { ok: false, status: 501, error: 'Asset store not configured' }
-  const query = listAssetsQuerySchema.safeParse(req.query ?? {})
-  if (!query.success) {
-    return { ok: false, status: 400, error: query.error.message }
-  }
-  const assets = await ctx.assetStore.list(query.data.prefix ?? '')
-  return { ok: true, status: 200, data: { assets } }
-}
-
-/**
- * Upload asset - requires privileged access (Admin or Reviewer).
- */
-const uploadAssetHandler = async (
-  _gc: Record<string, never>,
-  ctx: ApiContext,
-  req: ApiRequest,
-  body: z.infer<typeof uploadAssetBodySchema>,
-): Promise<AssetUploadResponse> => {
-  if (!ctx.assetStore) return { ok: false, status: 501, error: 'Asset store not configured' }
-
-  const asset = await ctx.assetStore.upload(body.key, body.data, body.contentType)
-  return { ok: true, status: 200, data: { asset } }
-}
-
-/**
- * Delete asset - requires Admin access.
- */
-const deleteAssetHandler = async (
-  _gc: Record<string, never>,
-  ctx: ApiContext,
-  req: ApiRequest,
-): Promise<AssetDeleteResponse> => {
-  if (!ctx.assetStore) return { ok: false, status: 501, error: 'Asset store not configured' }
-
-  const deleteQuery = z.object({ key: z.string().min(1) }).safeParse(req.query ?? {})
-  if (!deleteQuery.success) {
-    return { ok: false, status: 400, error: 'key query parameter required' }
-  }
-
-  await ctx.assetStore.delete(deleteQuery.data.key)
-  return { ok: true, status: 200, data: { deleted: true } }
-}
-
-// ============================================================================
-// Route Definitions with defineEndpoint
-// ============================================================================
-
-/**
- * List all assets
- * GET /assets
- */
-const listAssets = defineEndpoint({
-  namespace: 'assets',
-  name: 'list',
-  method: 'GET',
-  path: '/assets',
-  responseType: 'AssetsListResponse',
-  response: {} as AssetsListResponse,
-  defaultMockData: { assets: [] },
-  handler: listAssetsHandler,
-})
-
-/**
- * Upload an asset
- * POST /assets
- */
-const uploadAsset = defineEndpoint({
-  namespace: 'assets',
-  name: 'upload',
-  method: 'POST',
-  path: '/assets',
-  body: uploadAssetBodySchema,
-  bodyType: 'UploadAssetBody',
-  responseType: 'AssetUploadResponse',
-  response: {} as AssetUploadResponse,
-  defaultMockData: { asset: { key: '', url: '' } },
-  guards: ['privileged'] as const,
-  handler: uploadAssetHandler,
-})
-
-/**
- * Delete an asset
- * DELETE /assets?key=...
- */
-const deleteAsset = defineEndpoint({
-  namespace: 'assets',
-  name: 'delete',
-  method: 'DELETE',
-  path: '/assets',
-  responseType: 'AssetDeleteResponse',
-  response: {} as AssetDeleteResponse,
-  defaultMockData: { deleted: true },
-  guards: ['admin'] as const,
-  handler: deleteAssetHandler,
-})
-
-/**
- * Exported routes for router registration
- */
-export const ASSET_ROUTES = {
-  list: listAssets,
-  upload: uploadAsset,
-  delete: deleteAsset,
-} as const