create-aphex 0.1.3 → 0.2.0

package/templates/base/src/lib/server/email/components/EmailVerification.svelte

@@ -1,26 +0,0 @@
-<script lang="ts">
-	import { Heading, Text, Button, Section } from 'better-svelte-email';
-	import EmailLayout from './EmailLayout.svelte';
-
-	let { userName, verifyUrl }: { userName: string; verifyUrl: string } = $props();
-</script>
-
-<EmailLayout preview="Verify your email address">
-	<Heading as="h1" class="text-[24px] font-bold text-[#1f2937]">Email Verification</Heading>
-
-	<Text class="text-[16px] text-[#374151]">Hi {userName},</Text>
-
-	<Text class="text-[16px] text-[#374151]">
-		Welcome to Aphex CMS! Please verify your email address by clicking the button below:
-	</Text>
-
-	<Section class="my-[32px] text-center">
-		<Button href={verifyUrl} pX={20} pY={12} class="rounded-[4px] bg-[#1f2937] text-white">
-			Verify Email
-		</Button>
-	</Section>
-
-	<Text class="text-[14px] text-[#6b7280]">
-		If you didn't create this account, you can safely ignore this email.
-	</Text>
-</EmailLayout>

package/templates/base/src/lib/server/email/components/Invitation.svelte

@@ -1,30 +0,0 @@
-<script lang="ts">
-	import { Heading, Text, Button, Section } from 'better-svelte-email';
-	import EmailLayout from './EmailLayout.svelte';
-
-	let { orgName, role, inviteUrl }: { orgName: string; role: string; inviteUrl: string } = $props();
-	const article = role === 'admin' ? 'an' : 'a';
-</script>
-
-<EmailLayout preview="You've been invited to join {orgName}">
-	<Heading as="h1" class="text-[24px] font-bold text-[#1f2937]">Organization Invitation</Heading>
-
-	<Text class="text-[16px] text-[#374151]">
-		You've been invited to join <strong>{orgName}</strong> as {article}
-		<strong>{role}</strong>.
-	</Text>
-
-	<Text class="text-[16px] text-[#374151]">Click the button below to accept the invitation:</Text>
-
-	<Section class="my-[32px] text-center">
-		<Button href={inviteUrl} pX={20} pY={12} class="rounded-[4px] bg-[#1f2937] text-white">
-			Accept Invitation
-		</Button>
-	</Section>
-
-	<Text class="text-[14px] text-[#6b7280]">This invitation will expire in 7 days.</Text>
-
-	<Text class="text-[14px] text-[#6b7280]">
-		If you didn't expect this invitation, you can safely ignore this email.
-	</Text>
-</EmailLayout>

package/templates/base/src/lib/server/email/components/PasswordReset.svelte

@@ -1,28 +0,0 @@
-<script lang="ts">
-	import { Heading, Text, Button, Section } from 'better-svelte-email';
-	import EmailLayout from './EmailLayout.svelte';
-
-	let { userName, resetUrl }: { userName: string; resetUrl: string } = $props();
-</script>
-
-<EmailLayout preview="Reset your password">
-	<Heading as="h1" class="text-[24px] font-bold text-[#1f2937]">Password Reset</Heading>
-
-	<Text class="text-[16px] text-[#374151]">Hi {userName},</Text>
-
-	<Text class="text-[16px] text-[#374151]">
-		You requested to reset your password. Click the button below to reset it:
-	</Text>
-
-	<Section class="my-[32px] text-center">
-		<Button href={resetUrl} pX={20} pY={12} class="rounded-[4px] bg-[#1f2937] text-white">
-			Reset Password
-		</Button>
-	</Section>
-
-	<Text class="text-[14px] text-[#6b7280]">
-		If you didn't request this, you can safely ignore this email.
-	</Text>
-
-	<Text class="text-[14px] text-[#6b7280]">This link will expire in 1 hour.</Text>
-</EmailLayout>

package/templates/base/src/lib/server/email/index.ts

@@ -1,28 +0,0 @@
-import { createMailpitAdapter } from '@aphexcms/nodemailer-adapter';
-import { createResendAdapter } from '@aphexcms/resend-adapter';
-import { env } from '$env/dynamic/private';
-import { dev } from '$app/environment';
-import { cmsLogger } from '@aphexcms/cms-core';
-import { passwordReset } from './templates/password-reset';
-import { emailVerification } from './templates/email-verification';
-import { invitation } from './templates/invitation';
-
-export const email = dev
-	? createMailpitAdapter()
-	: createResendAdapter({ apiKey: env.RESEND_API_KEY ?? '' });
-
-if (dev) {
-	cmsLogger.info('[Email]', 'Using Mailpit adapter (dev mode)');
-	cmsLogger.info('[Email]', 'View emails at http://localhost:8025');
-} else {
-	cmsLogger.info('[Email]', 'Using Resend adapter (production)');
-}
-
-export const emailConfig = {
-	from: 'Ben @ Aphex CMS <ben@newsletter.getaphex.com>',
-	passwordReset,
-	emailVerification,
-	invitation
-};
-
-export type AuthEmailConfig = typeof emailConfig;

package/templates/base/src/lib/server/email/invitation-hook.ts

@@ -1,56 +0,0 @@
-import type { Hono } from 'hono';
-import type { AphexEnv } from '@aphexcms/cms-core/server';
-import { email, emailConfig } from './index';
-
-/**
- * Wrap the built-in `/api/organizations/invitations` POST so a successful
- * invite also dispatches the email. Email send is fire-and-forget — never
- * blocks the response, never fails the invite.
- */
-export function registerInvitationEmailHook(app: Hono<AphexEnv>) {
-	app.use('/organizations/invitations', async (c, next) => {
-		if (c.req.method !== 'POST') return next();
-
-		const reqClone = c.req.raw.clone();
-		await next();
-		if (c.res.status !== 201) return;
-
-		try {
-			const body = await reqClone.json();
-			const result = await c.res.clone().json();
-			const invitation = result.data;
-			if (!invitation?.token) return;
-
-			const auth = c.var.auth;
-			const { databaseAdapter } = c.var.aphexCMS;
-			const org =
-				auth && auth.type !== 'partial_session'
-					? await databaseAdapter.findOrganizationById(auth.organizationId)
-					: null;
-			const orgName = org?.name || 'an organization';
-			const inviteUrl = `${new URL(c.req.url).origin}/invite/${invitation.token}`;
-
-			void (async () => {
-				try {
-					const { html, text } = await emailConfig.invitation.render(
-						orgName,
-						body.role,
-						inviteUrl
-					);
-					await email.send({
-						from: emailConfig.from,
-						to: body.email.toLowerCase(),
-						subject: emailConfig.invitation.getSubject(orgName),
-						html,
-						text
-					});
-					console.log(`[Invitations]: Invitation email sent to ${body.email}`);
-				} catch (err) {
-					console.error(`[Invitations]: Failed to send invitation email to ${body.email}:`, err);
-				}
-			})();
-		} catch (err) {
-			console.error('[Invitations]: Failed to send invitation email:', err);
-		}
-	});
-}

package/templates/base/src/lib/server/email/renderer.ts

@@ -1,13 +0,0 @@
-import Renderer, { toPlainText } from 'better-svelte-email/render';
-import type { Component } from 'svelte';
-
-const { render } = new Renderer();
-
-export async function renderEmail<Props extends Record<string, unknown>>(
-	component: Component<Props>,
-	props: Props
-): Promise<{ html: string; text: string }> {
-	const html = await render(component, { props });
-	const text = toPlainText(html);
-	return { html, text };
-}

package/templates/base/src/lib/server/email/templates/email-verification.ts

@@ -1,8 +0,0 @@
-import { renderEmail } from '../renderer';
-import EmailVerification from '../components/EmailVerification.svelte';
-
-export const emailVerification = {
-	subject: 'Verify your email address',
-	render: (userName: string, verifyUrl: string) =>
-		renderEmail(EmailVerification, { userName, verifyUrl })
-};

package/templates/base/src/lib/server/email/templates/invitation.ts

@@ -1,8 +0,0 @@
-import { renderEmail } from '../renderer';
-import Invitation from '../components/Invitation.svelte';
-
-export const invitation = {
-	getSubject: (orgName: string) => `You've been invited to join ${orgName}`,
-	render: (orgName: string, role: string, inviteUrl: string) =>
-		renderEmail(Invitation, { orgName, role, inviteUrl })
-};

package/templates/base/src/lib/server/email/templates/password-reset.ts

@@ -1,7 +0,0 @@
-import { renderEmail } from '../renderer';
-import PasswordReset from '../components/PasswordReset.svelte';
-
-export const passwordReset = {
-	subject: 'Reset your password',
-	render: (userName: string, resetUrl: string) => renderEmail(PasswordReset, { userName, resetUrl })
-};

package/templates/base/src/lib/server/services/organization.ts

@@ -1,68 +0,0 @@
-// Organization service - app-specific cross-domain queries
-// Handles joins between auth (user) and CMS (organizations) tables
-import { drizzleDb } from '../db';
-import { user } from '../db/auth-schema';
-import { organizationMembers, organizations, invitations } from '../db/cms-schema';
-import { eq } from 'drizzle-orm';
-import type { Organization, OrganizationMemberWithUser } from '@aphexcms/cms-core';
-
-export interface OrganizationMemberWithUserAndInvite extends OrganizationMemberWithUser {
-	invitedEmail?: string | null;
-}
-
-export interface OrganizationWithMembers {
-	organization: Organization;
-	members: OrganizationMemberWithUserAndInvite[];
-}
-
-export const organizationService = {
-	/**
-	 * Get organization with enriched member data (includes user details)
-	 * This performs a join between CMS organizationMembers and auth user tables
-	 */
-	async getOrganizationWithMembers(
-		organizationId: string
-	): Promise<OrganizationWithMembers | null> {
-		// Fetch organization
-		const org = await drizzleDb.query.organizations.findFirst({
-			where: eq(organizations.id, organizationId)
-		});
-
-		if (!org) {
-			return null;
-		}
-
-		// Fetch members with user details and invitation data using joins
-		const members = await drizzleDb
-			.select({
-				member: organizationMembers,
-				user: {
-					id: user.id,
-					email: user.email,
-					name: user.name,
-					image: user.image
-				},
-				invitation: {
-					email: invitations.email
-				}
-			})
-			.from(organizationMembers)
-			.innerJoin(user, eq(organizationMembers.userId, user.id))
-			.leftJoin(invitations, eq(organizationMembers.invitationId, invitations.id))
-			.where(eq(organizationMembers.organizationId, organizationId));
-
-		return {
-			organization: org,
-			members: members.map((m) => ({
-				member: m.member,
-				user: {
-					id: m.user.id,
-					email: m.user.email,
-					name: m.user.name,
-					image: m.user.image
-				},
-				invitedEmail: m.invitation?.email || null
-			}))
-		};
-	}
-};

package/templates/base/src/lib/server/storage/index.ts

@@ -1,28 +0,0 @@
-// apps/studio/src/lib/server/storage/index.ts
-import { s3Storage } from '@aphexcms/storage-s3';
-import { createStorageAdapter } from '@aphexcms/cms-core/server';
-import { env } from '$env/dynamic/private';
-import type { StorageAdapter } from '@aphexcms/cms-core/server';
-
-let storageAdapter: StorageAdapter;
-
-// Check for R2/S3 environment variables
-if (env.R2_BUCKET && env.R2_ENDPOINT && env.R2_ACCESS_KEY_ID && env.R2_SECRET_ACCESS_KEY) {
-	// If all R2/S3 variables are present, create an S3 storage adapter.
-	storageAdapter = s3Storage({
-		bucket: env.R2_BUCKET,
-		endpoint: env.R2_ENDPOINT,
-		accessKeyId: env.R2_ACCESS_KEY_ID,
-		secretAccessKey: env.R2_SECRET_ACCESS_KEY,
-		publicUrl: env.R2_PUBLIC_URL || ''
-	}).adapter;
-} else {
-	// Otherwise, default to local filesystem storage
-	storageAdapter = createStorageAdapter('local', {
-		basePath: './static/uploads',
-		baseUrl: '/uploads'
-	});
-}
-
-// Export the single, shared storage adapter instance
-export { storageAdapter };

package/templates/base/src/lib/stores/activeTab.svelte.ts

@@ -1,14 +0,0 @@
-function createActiveTab() {
-	let activeTab = $state<'structure' | 'vision' | 'media'>('structure');
-
-	return {
-		get value() {
-			return activeTab;
-		},
-		set value(val: 'structure' | 'vision' | 'media') {
-			activeTab = val;
-		}
-	};
-}
-
-export const activeTabState = createActiveTab();

package/templates/base/src/lib/utils/imageBuilder.ts

@@ -1,3 +0,0 @@
-import { imageUrlBuilder } from '@aphexcms/cms-core';
-
-export const urlFor = imageUrlBuilder();

package/templates/base/src/lib/utils/slug.ts

@@ -1,33 +0,0 @@
-/**
- * Generate a URL-friendly slug from a string
- * @param text - The text to convert to a slug
- * @returns A URL-safe slug string
- */
-export function generateSlug(text: string): string {
-	if (!text) return '';
-
-	return (
-		text
-			.toString()
-			.toLowerCase()
-			.trim()
-			// Replace spaces and multiple special characters with single hyphens
-			.replace(/[^a-z0-9]+/g, '-')
-			// Remove leading and trailing hyphens
-			.replace(/^-+|-+$/g, '')
-	);
-}
-
-/**
- * Validate if a string is a valid slug
- * @param slug - The slug to validate
- * @returns Boolean indicating if the slug is valid
- */
-export function isValidSlug(slug: string): boolean {
-	if (!slug) return false;
-
-	// Valid slug: lowercase letters, numbers, and hyphens only
-	// Cannot start or end with hyphen
-	const slugPattern = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-	return slugPattern.test(slug);
-}

package/templates/base/src/routes/(protected)/admin/+layout.server.ts

@@ -1,86 +0,0 @@
-import type { LayoutServerLoad } from './$types';
-import type { SidebarData, SidebarOrganization } from '@aphexcms/cms-core';
-import { redirect } from '@sveltejs/kit';
-import cmsConfig from '../../../../aphex.config';
-
-export const load: LayoutServerLoad = async ({ locals, url }) => {
-	try {
-		// User is guaranteed to exist here because /admin is protected by auth hook
-		const auth = locals.auth;
-
-		if (!auth || auth.type !== 'session') {
-			console.error('[Layout Load] No session found');
-			throw new Error('No session found');
-		}
-
-		// Fetch user's organizations directly from database (only once per page load)
-		const db = locals.aphexCMS.databaseAdapter;
-		const userOrgMemberships = await db.findUserOrganizations(auth.user.id);
-
-		// If user has no orgs and isn't a super_admin, redirect to invitations page
-		if (userOrgMemberships.length === 0 && auth.user.role !== 'super_admin') {
-			throw redirect(302, '/invitations');
-		}
-
-		// Load instance settings to determine org creation permissions
-		const instanceSettings = await db.getInstanceSettings();
-
-		// Map to sidebar format
-		const organizations: SidebarOrganization[] = userOrgMemberships.map((membership) => ({
-			id: membership.organization.id,
-			name: membership.organization.name,
-			slug: membership.organization.slug,
-			role: membership.member.role,
-			isActive: membership.organization.id === auth.organizationId,
-			metadata: membership.organization.metadata
-		}));
-
-		const activeOrganization = organizations.find((org) => org.isActive);
-
-		// Determine if user can create organizations from admin panel
-		// Super admins can always create (from god-mode), but from admin panel
-		// it depends on the instance setting
-		const canCreateOrganization =
-			auth.user.role === 'super_admin' || (instanceSettings.allowUserOrgCreation ?? false);
-
-		// Prepare sidebar data
-		const sidebarData: SidebarData = {
-			user: {
-				id: auth.user.id,
-				email: auth.user.email,
-				name: auth.user.name,
-				image: auth.user.image,
-				role: auth.user.role
-			},
-			branding: {
-				title: cmsConfig.customization?.branding?.title || 'Aphex CMS'
-			},
-			// Default nav items (can be customized per app)
-			navItems: [
-				{ href: '/admin', label: 'Studio' }
-				// Apps can add more: Settings, Media, etc.
-			],
-			organizations,
-			activeOrganization,
-			canCreateOrganization
-		};
-
-		console.log(
-			`[RBAC] user=${auth.user.id} org=${auth.organizationId} role="${auth.organizationRole}" caps=[${(auth.capabilities ?? []).join(',')}]`
-		);
-
-		return {
-			sidebarData,
-			// Expose resolved capabilities + active role to the admin shell so
-			// client code (UI gating, debug panels) can consult the same set the
-			// server enforces against.
-			rbac: {
-				role: auth.organizationRole,
-				capabilities: auth.capabilities ?? []
-			}
-		};
-	} catch (error) {
-		console.error('[Layout Load] Error:', error);
-		throw error;
-	}
-};

package/templates/base/src/routes/(protected)/admin/+layout.svelte

@@ -1,78 +0,0 @@
-<script lang="ts">
-	import {
-		Sidebar,
-		ConfirmDialogHost,
-		PermissionsDebug,
-		setPermissionsContext
-	} from '@aphexcms/cms-core/client';
-	import { authClient } from '$lib/auth-client';
-	import { goto } from '$app/navigation';
-	import { resolve } from '$app/paths';
-	import { page } from '$app/state';
-	import { activeTabState } from '$lib/stores/activeTab.svelte';
-	import { SvelteURLSearchParams } from 'svelte/reactivity';
-	import type { LayoutData } from './$types';
-
-	let { data, children }: { data: LayoutData; children: any } = $props();
-
-	// Publish capability context for every descendant route (AdminApp, settings
-	// pages, etc). Sourced from the layout's rbac payload so capability edits
-	// mid-session propagate on next page load. The role name is exposed too
-	// for role-list checks (field-level access).
-	setPermissionsContext(
-		() => page.data.rbac?.capabilities ?? [],
-		() => page.data.rbac?.role ?? null
-	);
-
-	// Get graphqlSettings from page data (child route)
-	const enableGraphiQL = $derived(page.data.graphqlSettings?.enableGraphiQL ?? false);
-
-	// Restore tab from URL param on load
-	const validViews = ['structure', 'vision', 'media'] as const;
-	type ViewType = (typeof validViews)[number];
-
-	$effect(() => {
-		const viewParam = page.url.searchParams.get('view');
-		if (viewParam && validViews.includes(viewParam as ViewType)) {
-			activeTabState.value = viewParam as ViewType;
-		} else {
-			activeTabState.value = 'structure';
-		}
-	});
-
-	// Handle tab change — update both state and URL
-	function handleTabChange(value: string) {
-		activeTabState.value = value as ViewType;
-
-		const params = new SvelteURLSearchParams(page.url.searchParams);
-		if (value === 'structure') {
-			params.delete('view');
-		} else {
-			params.set('view', value);
-		}
-		const query = params.toString();
-		goto(`/admin${query ? `?${query}` : ''}`, { replaceState: true, keepFocus: true });
-	}
-
-	async function handleSignOut() {
-		await authClient.signOut();
-		goto(resolve('/login'));
-	}
-</script>
-
-{#if data?.sidebarData}
-	<Sidebar
-		data={data.sidebarData}
-		onSignOut={handleSignOut}
-		{enableGraphiQL}
-		activeTab={activeTabState}
-		onTabChange={handleTabChange}
-	>
-		{@render children()}
-	</Sidebar>
-{:else}
-	<div>Loading...</div>
-{/if}
-
-<ConfirmDialogHost />
-<!-- <PermissionsDebug /> -->

package/templates/base/src/routes/(protected)/admin/+page.server.ts

@@ -1,60 +0,0 @@
-import { isViewer } from '@aphexcms/cms-core/server';
-import { redirect } from '@sveltejs/kit';
-
-export async function load({ locals }) {
-	try {
-		const { cmsEngine, databaseAdapter } = locals.aphexCMS;
-		const auth = locals.auth;
-
-		if (!auth) {
-			redirect(307, '/login');
-		}
-
-		// Check for schema validation errors
-		const schemaError = (locals.aphexCMS as any).schemaError;
-		if (schemaError) {
-			return {
-				documentTypes: [],
-				schemaError: {
-					message: schemaError.message
-				},
-				graphqlSettings: null,
-				isReadOnly: false,
-				userPreferences: null
-			};
-		}
-
-		const documentTypes = await cmsEngine.listDocumentTypes();
-		// Fetch user profile preferences
-		const userProfile = await databaseAdapter.findUserProfileById(
-			auth.type == 'session' ? auth.user.id : ''
-		);
-		const userPreferences = userProfile?.preferences || {};
-
-		// Get GraphQL settings (built-in, enabled by default)
-		const graphqlSettings = locals.aphexCMS?.graphqlSettings ?? null;
-
-		// Compute read-only access based on organization role
-		const isReadOnly = auth?.type === 'session' ? isViewer(auth) : false;
-
-		return {
-			documentTypes,
-			schemaError: null,
-			graphqlSettings,
-			isReadOnly,
-			userPreferences
-		};
-	} catch (error) {
-		console.error('Failed to load schema types:', error);
-
-		return {
-			documentTypes: [],
-			schemaError: {
-				message: error instanceof Error ? error.message : 'Unknown schema error'
-			},
-			graphqlSettings: null,
-			isReadOnly: false,
-			userPreferences: null
-		};
-	}
-}

package/templates/base/src/routes/(protected)/admin/+page.svelte

@@ -1,34 +0,0 @@
-<script lang="ts">
-	import { AdminApp } from '@aphexcms/cms-core/client';
-	import { schemaTypes } from '$lib/schemaTypes/index';
-	import { activeTabState } from '$lib/stores/activeTab.svelte';
-	import { page } from '$app/state';
-
-	let { data } = $props();
-
-	// Capabilities + role come from the parent admin layout's rbac payload so
-	// AdminApp (and its descendants) can gate individual actions per-capability
-	// and apply field-level role-list access.
-	const capabilities = $derived(page.data.rbac?.capabilities ?? []);
-	const rbacRole = $derived(page.data.rbac?.role ?? null);
-
-	// Tab change is handled by the layout's onTabChange callback
-	// which syncs both activeTabState and URL params
-	function handleTabChange(value: string) {
-		if (activeTabState) activeTabState.value = value as 'structure' | 'vision' | 'media';
-	}
-</script>
-
-<AdminApp
-	schemas={schemaTypes}
-	documentTypes={data.documentTypes}
-	schemaError={data.schemaError}
-	graphqlSettings={data.graphqlSettings}
-	isReadOnly={data.isReadOnly}
-	{capabilities}
-	{rbacRole}
-	userPreferences={data.userPreferences}
-	activeTab={activeTabState}
-	{handleTabChange}
-	title="Aphex CMS"
-/>

package/templates/base/src/routes/(protected)/admin/organizations/+page.server.ts

@@ -1,39 +0,0 @@
-import type { PageServerLoad } from './$types';
-import { authService } from '$lib/server/auth/service';
-
-export const load: PageServerLoad = async ({ locals }) => {
-	const { databaseAdapter } = locals.aphexCMS;
-	const auth = locals.auth;
-
-	if (!auth || auth.type !== 'session') {
-		return { organizations: [] };
-	}
-
-	const memberships = await databaseAdapter.findUserOrganizations(auth.user.id);
-
-	const orgs = await Promise.all(
-		memberships.map(async (membership) => {
-			const members = await databaseAdapter.findOrganizationMembers(membership.organization.id);
-			const owner = members.find((m) => m.role === 'owner');
-
-			// Resolve owner email from auth system
-			let ownerEmail: string | undefined;
-			if (owner) {
-				const ownerUser = await authService.getUserById(owner.userId);
-				ownerEmail = ownerUser?.email;
-			}
-
-			return {
-				id: membership.organization.id,
-				name: membership.organization.name,
-				slug: membership.organization.slug,
-				role: membership.member.role,
-				isActive: membership.organization.id === auth.organizationId,
-				memberCount: members.length,
-				ownerEmail
-			};
-		})
-	);
-
-	return { organizations: orgs };
-};