rivet_cms 0.1.2.pre → 0.3.1

data/config/routes.rb

@@ -1,58 +1,81 @@
 RivetCms::Engine.routes.draw do
-  RivetCms::Routes.add_routes do
-    get '/', to: "dashboard#index"
-
-    # Content Type Management
-    resources :content_types, path: 'content-types' do
-      resources :fields, except: [:show] do
-        collection do
-          post :update_positions
-        end
-        member do
-          patch :update_width
-        end
-      end
-      resources :contents
+  root to: "dashboard#show"
+
+  # Built-in authentication; these controllers 404 when the host wires its own
+  get "login" => "sessions#new", as: :login
+  post "login" => "sessions#create"
+  delete "logout" => "sessions#destroy", as: :logout
+  get "setup" => "setup#new", as: :setup
+  post "setup" => "setup#create"
+  get "join/:token" => "invitations#show", as: :invitation
+  patch "join/:token" => "invitations#update"
+
+  resources :users, only: [ :index, :create, :update ] do
+    member do
+      patch :deactivate
+      patch :reactivate
+      post :reset_link
     end
+  end
 
-    # Component Management
-    resources :components do
-      resources :fields, except: [:show] do
-        collection do
-          post :update_positions
-        end
+  resources :content_types, except: [ :edit ] do
+    collection do
+      get :trash
+    end
+    member do
+      patch :restore
+      delete :purge
+    end
+    resources :fields, only: [ :create, :update, :destroy ] do
+      member do
+        patch :toggle_width
+        patch :unpair
+        patch :pair
+      end
+      collection do
+        post :update_layout
       end
     end
+  end
 
-    # API Documentation
-    namespace :api do
-      resource :docs, only: [:show]
+  resources :components, except: [ :edit ] do
+    collection do
+      post :create_category
     end
+    resources :fields, only: [ :create, :update, :destroy ] do
+      member do
+        patch :toggle_width
+        patch :unpair
+        patch :pair
+      end
+      collection do
+        post :update_layout
+      end
+    end
+  end
 
-    # Helper method to check if content type exists and matches the collection/single type
-    content_type_exists = ->(slug, is_collection) {
-      RivetCMS::ContentType.exists?(slug: slug, is_single: !is_collection)
-    }
-
-    # API routes with versioning
-    namespace :api do
-      namespace :v1 do
-        # Dynamic routes for content types
-        get ':slug', to: 'content#index', constraints: ->(req) { content_type_exists.call(req.params[:slug], true) }
-        post ':slug', to: 'content#create', constraints: ->(req) { content_type_exists.call(req.params[:slug], true) }
-        get ':slug/:id', to: 'content#show', constraints: ->(req) { content_type_exists.call(req.params[:slug], true) }
-        put ':slug/:id', to: 'content#update', constraints: ->(req) { content_type_exists.call(req.params[:slug], true) }
-        patch ':slug/:id', to: 'content#update', constraints: ->(req) { content_type_exists.call(req.params[:slug], true) }
-        delete ':slug/:id', to: 'content#destroy', constraints: ->(req) { content_type_exists.call(req.params[:slug], true) }
-
-        # Routes for single type content
-        get ':slug', to: 'single#show', constraints: ->(req) { content_type_exists.call(req.params[:slug], false) }
-        put ':slug', to: 'single#update', constraints: ->(req) { content_type_exists.call(req.params[:slug], false) }
-        patch ':slug', to: 'single#update', constraints: ->(req) { content_type_exists.call(req.params[:slug], false) }
-        post ':slug', to: 'single#update', constraints: ->(req) { content_type_exists.call(req.params[:slug], false) }
+  get "content", to: "content_manager#index", as: :content
+  get "trash", to: "trash#show", as: :trash
+
+  resources :media_assets, only: [ :index, :create, :update, :destroy ]
+  resources :api_tokens, only: [ :index, :create, :destroy ]
+
+  get "api-docs", to: "api_docs#show", as: :api_docs
+  get "api-docs/openapi", to: "api_docs#spec", as: :api_openapi
+
+  resources :content_types, only: [] do
+    resources :documents, except: [ :show ] do
+      collection do
+        get :trash
+      end
+      member do
+        post :publish
+        patch :restore
+        delete :purge
       end
     end
   end
 
-  RivetCms::Routes.draw_routes
+  get "api/:content_type_slug", to: "content#index", as: :content_index
+  get "api/:content_type_slug/:slug", to: "content#show", as: :content_show
 end

data/db/migrate/20251119193607_create_rivet_cms_organizations.rb

@@ -0,0 +1,17 @@
+class CreateRivetCmsOrganizations < ActiveRecord::Migration[7.0]
+  def change
+    create_table :rivet_cms_organizations do |t|
+      t.string :name, null: false
+      t.string :domain, null: false
+      t.string :subdomain
+      t.boolean :default, default: false, null: false
+      t.string :timezone, default: "UTC"
+
+      t.timestamps
+
+      t.index :domain, unique: true
+      # Index on subdomain for lookups (uniqueness handled at model level)
+      t.index :subdomain
+    end
+  end
+end

data/db/migrate/20251120050818_create_rivet_cms_content_types.rb

@@ -0,0 +1,14 @@
+class CreateRivetCmsContentTypes < ActiveRecord::Migration[7.0]
+  def change
+    create_table :rivet_cms_content_types do |t|
+      t.string :name, null: false, index: true
+      t.string :slug, null: false
+      t.text :description
+      t.boolean :single, default: false
+      t.references :organization, foreign_key: { to_table: :rivet_cms_organizations }, null: false
+      t.timestamps
+
+      t.index [ :organization_id, :slug ], unique: true
+    end
+  end
+end

data/db/migrate/20251121020625_create_rivet_cms_components.rb

@@ -0,0 +1,17 @@
+class CreateRivetCmsComponents < ActiveRecord::Migration[7.0]
+  def change
+    create_table :rivet_cms_components do |t|
+      t.string :name, null: false, index: true
+      t.string :slug, null: false
+      t.text :description
+      # The FK is added in the categories migration, which runs later; adding
+      # it here would reference a table that does not exist yet (fine on
+      # SQLite, fatal on Postgres).
+      t.references :category
+      t.references :organization, foreign_key: { to_table: :rivet_cms_organizations }, null: false
+      t.timestamps
+
+      t.index [ :organization_id, :slug ], unique: true
+    end
+  end
+end

data/db/migrate/20251121040115_create_rivet_cms_categories.rb

@@ -0,0 +1,17 @@
+class CreateRivetCmsCategories < ActiveRecord::Migration[7.0]
+  def change
+    create_table :rivet_cms_categories do |t|
+      t.string :name, null: false, index: true
+      t.string :slug, null: false
+      t.integer :position, null: false, default: 0
+      t.boolean :system, default: false, null: false
+      t.references :organization, foreign_key: { to_table: :rivet_cms_organizations }, null: false
+
+      t.timestamps
+      t.index [ :organization_id, :slug ], unique: true
+    end
+
+    # Deferred from the components migration, which runs before this table exists
+    add_foreign_key :rivet_cms_components, :rivet_cms_categories, column: :category_id
+  end
+end

data/db/migrate/20260119185946_create_content_system_tables.rb

@@ -0,0 +1,97 @@
+class CreateContentSystemTables < ActiveRecord::Migration[7.0]
+  def change
+    create_table :rivet_cms_fields do |t|
+      t.references :organization, null: false, foreign_key: { to_table: :rivet_cms_organizations }
+      t.references :content_type, foreign_key: { to_table: :rivet_cms_content_types }
+      t.references :component, foreign_key: { to_table: :rivet_cms_components }
+      t.string :key, null: false
+      t.string :label, null: false
+      t.integer :field_type, null: false, default: 0
+      t.text :description
+      t.boolean :required, default: false, null: false
+      t.integer :min_items
+      t.integer :max_items
+      # No DB default: MySQL rejects defaults on JSON columns. The Field model
+      # defaults it to {} instead.
+      t.json :config
+      t.integer :position, default: 0, null: false
+      t.integer :row, default: 0, null: false
+      t.string :width, default: "full", null: false
+      t.datetime :deleted_at
+      t.timestamps
+
+      t.index [ :content_type_id, :key ]
+      t.index [ :component_id, :key ]
+      t.index :deleted_at
+      t.index :position
+    end
+
+    create_table :rivet_cms_documents do |t|
+      t.references :organization, null: false, foreign_key: { to_table: :rivet_cms_organizations }
+      t.references :content_type, null: false, foreign_key: { to_table: :rivet_cms_content_types }
+      t.string :slug, null: false
+      t.string :singleton_key
+      t.bigint :published_revision_id
+      t.bigint :draft_revision_id
+      t.timestamps
+
+      t.index [ :content_type_id, :slug ], unique: true
+      t.index [ :content_type_id, :singleton_key ], unique: true
+      t.index :published_revision_id
+      t.index :draft_revision_id
+    end
+
+    create_table :rivet_cms_document_revisions do |t|
+      t.references :document, null: false, foreign_key: { to_table: :rivet_cms_documents }
+      t.string :locale, null: false, default: "en"
+      t.integer :schema_version, null: false, default: 1
+      t.references :author, polymorphic: true
+      t.string :author_name
+      t.integer :state, null: false, default: 0
+      t.datetime :published_at
+      t.timestamps
+
+      t.index [ :document_id, :state ]
+      t.index [ :document_id, :locale ]
+    end
+
+    add_foreign_key :rivet_cms_documents, :rivet_cms_document_revisions, column: :published_revision_id
+    add_foreign_key :rivet_cms_documents, :rivet_cms_document_revisions, column: :draft_revision_id
+
+    create_table :rivet_cms_content_values do |t|
+      t.references :owner, polymorphic: true, null: false, index: false
+      t.references :field, null: false, foreign_key: { to_table: :rivet_cms_fields }
+      t.string :string_value
+      t.text :text_value
+      t.integer :integer_value
+      t.boolean :boolean_value
+      t.decimal :decimal_value, precision: 19, scale: 6
+      t.datetime :datetime_value
+      t.date :date_value
+      t.json :json_value
+      t.timestamps
+
+      t.index [ :owner_type, :owner_id, :field_id ], unique: true, name: "idx_content_values_owner_field"
+    end
+
+    create_table :rivet_cms_relations do |t|
+      t.references :owner, polymorphic: true, null: false, index: false
+      t.references :field, null: false, foreign_key: { to_table: :rivet_cms_fields }
+      t.references :target_document, null: false, foreign_key: { to_table: :rivet_cms_documents }
+      t.integer :position, null: false, default: 0
+      t.timestamps
+
+      t.index [ :owner_type, :owner_id, :field_id, :position ], name: "idx_relations_owner_field_pos"
+    end
+
+    create_table :rivet_cms_component_instances do |t|
+      t.references :owner, polymorphic: true, null: false, index: false
+      t.references :field, null: false, foreign_key: { to_table: :rivet_cms_fields }
+      t.references :component, null: false, foreign_key: { to_table: :rivet_cms_components }
+      t.integer :position, null: false, default: 0
+      t.timestamps
+
+      t.index [ :owner_type, :owner_id, :field_id, :position ], name: "idx_cmpi_owner_field_pos"
+    end
+  end
+end

data/db/migrate/20260722000001_create_rivet_cms_media_assets.rb

@@ -0,0 +1,15 @@
+class CreateRivetCmsMediaAssets < ActiveRecord::Migration[7.0]
+  def change
+    create_table :rivet_cms_media_assets do |t|
+      t.references :organization, null: false, foreign_key: { to_table: :rivet_cms_organizations }
+      t.string :filename
+      t.string :content_type
+      t.bigint :byte_size
+      t.integer :kind, null: false, default: 0
+      t.timestamps
+    end
+
+    add_reference :rivet_cms_content_values, :media_asset,
+                  foreign_key: { to_table: :rivet_cms_media_assets }
+  end
+end

data/db/migrate/20260722000002_create_rivet_cms_api_tokens.rb

@@ -0,0 +1,16 @@
+class CreateRivetCmsApiTokens < ActiveRecord::Migration[7.0]
+  def change
+    create_table :rivet_cms_api_tokens do |t|
+      t.references :organization, null: false, foreign_key: { to_table: :rivet_cms_organizations }
+      t.string :name, null: false
+      t.string :token_digest, null: false
+      t.string :token_last4, null: false
+      t.integer :scope, null: false, default: 0
+      t.datetime :last_used_at
+      t.datetime :expires_at
+      t.timestamps
+
+      t.index :token_digest, unique: true
+    end
+  end
+end

data/db/migrate/20260806000001_add_title_and_alt_to_rivet_cms_media_assets.rb

@@ -0,0 +1,7 @@
+class AddTitleAndAltToRivetCmsMediaAssets < ActiveRecord::Migration[7.0]
+  def change
+    add_column :rivet_cms_media_assets, :title, :string
+    add_column :rivet_cms_media_assets, :alt, :string
+    add_column :rivet_cms_media_assets, :description, :text
+  end
+end

data/db/migrate/20260806000002_add_deleted_at_to_rivet_cms_content_types.rb

@@ -0,0 +1,6 @@
+class AddDeletedAtToRivetCmsContentTypes < ActiveRecord::Migration[7.2]
+  def change
+    add_column :rivet_cms_content_types, :deleted_at, :datetime
+    add_index :rivet_cms_content_types, :deleted_at
+  end
+end

data/db/migrate/20260807000001_add_deleted_at_to_rivet_cms_documents.rb

@@ -0,0 +1,6 @@
+class AddDeletedAtToRivetCmsDocuments < ActiveRecord::Migration[7.2]
+  def change
+    add_column :rivet_cms_documents, :deleted_at, :datetime
+    add_index :rivet_cms_documents, :deleted_at
+  end
+end

data/db/migrate/20260808000001_create_rivet_cms_users.rb

@@ -0,0 +1,15 @@
+class CreateRivetCmsUsers < ActiveRecord::Migration[7.2]
+  def change
+    create_table :rivet_cms_users do |t|
+      t.references :organization, null: false, foreign_key: { to_table: :rivet_cms_organizations }
+      t.string :name, null: false
+      t.string :email, null: false
+      # Null until the invite link is used; a pending user cannot sign in
+      t.string :password_digest
+      t.boolean :active, null: false, default: true
+      t.timestamps
+    end
+
+    add_index :rivet_cms_users, [ :organization_id, :email ], unique: true
+  end
+end

data/db/seeds/README.md

@@ -0,0 +1,70 @@
+# Content-type templates
+
+Reusable schema you can load into an organization as a starting point — content
+types, fields, components, and categories, ready to fill with content. They are
+**schema only** (no sample entries), and applied **idempotently**: loading a
+template again upserts fields rather than duplicating them, so it is safe to
+re-run in production.
+
+## Available templates
+
+| Template        | Adds                                                                     |
+|-----------------|--------------------------------------------------------------------------|
+| `blog`          | Blog Post, Author, Category content types + an SEO component             |
+| `pages`         | Page content type + Hero, Call to Action, and SEO components             |
+| `site_settings` | Site Settings (single type) + a Social Link component                    |
+| `faq`           | FAQ content type                                                         |
+| `team`          | Team Member content type                                                 |
+| `events`        | Event content type (uses the date/time field types)                     |
+| `testimonials`  | Testimonial content type                                                 |
+
+## Usage
+
+From the host app:
+
+```bash
+# Everything, into the default organization
+bin/rails rivet_cms:seed
+
+# Specific templates
+bin/rails rivet_cms:seed TEMPLATES=blog,pages
+
+# A specific organization (by domain)
+bin/rails rivet_cms:seed ORG=example.com
+
+# List what's available
+bin/rails rivet_cms:templates
+```
+
+Or from Ruby (e.g. in the host's `db/seeds.rb`):
+
+```ruby
+require "rivet_cms/seeds"
+
+org = RivetCms::Organization.find_by!(domain: "example.com")
+RivetCms::Seeds.load!(organization: org, only: %w[blog pages])
+```
+
+## Adding your own
+
+Drop a file in `db/seeds/templates/`. Half-width fields declared next to each
+other are paired onto the same form row.
+
+```ruby
+RivetCms::Seeds.template "products" do
+  category "Commerce", system: true
+
+  component "Price", category: "Commerce", slug: "price" do
+    integer :amount_cents, width: :half
+    string  :currency,     width: :half
+  end
+
+  content_type "Product", slug: "products", description: "Things you sell" do
+    string    :name, required: true
+    rich_text :description
+    image     :photo
+    component :price, use: "Price", max_items: 1
+    reference :related, to: "products"   # omit max_items for a many-relation
+  end
+end
+```

data/db/seeds/templates/blog.rb

@@ -0,0 +1,39 @@
+# Blog — the classic starting point. Posts are backed by the authors and
+# categories they relate to, plus a reusable SEO component.
+RivetCms::Seeds.template "blog" do
+  category "Content", system: true
+
+  component "SEO", category: "Content", slug: "seo", description: "Search-engine and social sharing metadata" do
+    string  :meta_title,       width: :half
+    string  :meta_description, width: :half
+    image   :og_image,         label: "Social share image"
+    boolean :no_index,         label: "Hide from search engines"
+  end
+
+  content_type "Author", slug: "authors", description: "People who write your content" do
+    string    :name,    required: true, width: :half
+    string    :email,   width: :half, config: { "pattern" => "^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$" }
+    image     :avatar
+    rich_text :bio
+    string    :x_handle, label: "X (Twitter)", width: :half
+    string    :website,  width: :half
+  end
+
+  content_type "Category", slug: "categories", description: "Topics used to group posts" do
+    string :name,  required: true, width: :half
+    string :color, label: "Color (hex)", width: :half
+    text   :description
+  end
+
+  content_type "Blog Post", slug: "posts", description: "Articles and news for your blog" do
+    string    :title, required: true
+    text      :excerpt, description: "Short summary shown in listings and link previews"
+    image     :cover_image
+    rich_text :body, required: true
+    reference :author,     to: "authors",    max_items: 1
+    reference :categories, to: "categories"
+    datetime  :published_at, width: :half
+    boolean   :featured,     label: "Feature this post", width: :half
+    component :seo, use: "SEO", max_items: 1
+  end
+end

data/db/seeds/templates/events.rb

@@ -0,0 +1,12 @@
+# Events — scheduled happenings. Showcases the date/datetime field types.
+RivetCms::Seeds.template "events" do
+  content_type "Event", slug: "events", description: "Scheduled events, conferences, and webinars" do
+    string    :title, required: true
+    rich_text :description
+    datetime  :starts_at, required: true, width: :half
+    datetime  :ends_at, width: :half
+    string    :location, description: "Venue or a link for online events"
+    string    :registration_url, label: "Registration URL"
+    image     :cover_image
+  end
+end

data/db/seeds/templates/faq.rb

@@ -0,0 +1,9 @@
+# FAQ — frequently asked questions, groupable and orderable.
+RivetCms::Seeds.template "faq" do
+  content_type "FAQ", slug: "faqs", description: "Frequently asked questions" do
+    string    :question, required: true
+    rich_text :answer, required: true
+    string    :topic, description: "Optional grouping, e.g. Billing or Shipping", width: :half
+    integer   :position, label: "Sort order", width: :half
+  end
+end

data/db/seeds/templates/pages.rb

@@ -0,0 +1,35 @@
+# Pages — flexible marketing pages assembled from reusable section components.
+RivetCms::Seeds.template "pages" do
+  category "Layout", system: true
+  category "Content", system: true
+
+  component "Hero", category: "Layout", slug: "hero", description: "Full-width banner with a headline and call to action" do
+    string :heading, required: true
+    text   :subheading
+    image  :background_image
+    string :cta_label, label: "Button label", width: :half
+    string :cta_url,   label: "Button URL",   width: :half
+  end
+
+  component "Call to Action", category: "Layout", slug: "call-to-action", description: "Prompt block with a button" do
+    string :heading
+    text   :body
+    string :button_label, width: :half
+    string :button_url,   width: :half
+  end
+
+  component "SEO", category: "Content", slug: "seo", description: "Search-engine and social sharing metadata" do
+    string  :meta_title,       width: :half
+    string  :meta_description, width: :half
+    image   :og_image,         label: "Social share image"
+    boolean :no_index,         label: "Hide from search engines"
+  end
+
+  content_type "Page", slug: "pages", description: "Standalone pages such as About, Pricing, or Contact" do
+    string    :title, required: true
+    component :hero, use: "Hero", max_items: 1
+    rich_text :body
+    component :call_to_action, use: "Call to Action", max_items: 1
+    component :seo, use: "SEO", max_items: 1
+  end
+end

data/db/seeds/templates/site_settings.rb

@@ -0,0 +1,22 @@
+# Site settings — a single global record for site-wide values, plus a repeatable
+# social-link component. Demonstrates a single-type content type.
+RivetCms::Seeds.template "site_settings" do
+  category "Global", system: true
+
+  component "Social Link", category: "Global", slug: "social-link", description: "One social network profile" do
+    string :platform, width: :half
+    string :url,      width: :half
+  end
+
+  content_type "Site Settings", slug: "site-settings", single: true, description: "Global values shared across the whole site" do
+    string    :site_name, required: true
+    string    :tagline
+    image     :logo,    width: :half
+    image     :favicon, width: :half
+    text      :description
+    component :social_links, use: "Social Link"
+    string    :contact_email, width: :half, config: { "pattern" => "^[^@\\s]+@[^@\\s]+\\.[^@\\s]+$" }
+    string    :contact_phone, width: :half
+    text      :footer_text
+  end
+end

data/db/seeds/templates/team.rb

@@ -0,0 +1,11 @@
+# Team — staff or contributor profiles for an About/Team page.
+RivetCms::Seeds.template "team" do
+  content_type "Team Member", slug: "team", description: "Staff and contributor profiles" do
+    string :name, required: true, width: :half
+    string :role, label: "Job title", width: :half
+    image  :photo
+    text   :bio
+    string :email,    width: :half
+    string :linkedin, label: "LinkedIn URL", width: :half
+  end
+end

data/db/seeds/templates/testimonials.rb

@@ -0,0 +1,11 @@
+# Testimonials — customer quotes and social proof.
+RivetCms::Seeds.template "testimonials" do
+  content_type "Testimonial", slug: "testimonials", description: "Customer quotes and reviews" do
+    text    :quote, required: true
+    string  :author_name, required: true, width: :half
+    string  :author_role, label: "Role", width: :half
+    string  :company, width: :half
+    image   :avatar, width: :half
+    decimal :rating, description: "1 to 5 stars", config: { "min" => 1, "max" => 5, "step" => 0.5 }
+  end
+end

data/lib/generators/rivet_cms/install/install_generator.rb

@@ -0,0 +1,13 @@
+module RivetCms
+  module Generators
+    class InstallGenerator < Rails::Generators::Base
+      source_root File.expand_path("templates", __dir__)
+
+      desc "Creates the RivetCms initializer with the auth delegation template"
+
+      def copy_initializer
+        copy_file "initializer.rb", "config/initializers/rivet_cms.rb"
+      end
+    end
+  end
+end