@beechcms/api 0.5.0 → 0.6.0-preview.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (225) hide show
  1. package/assets/dashboard/BeechLogo.svg +18 -18
  2. package/assets/dashboard/BeechLogoLIght.svg +48 -48
  3. package/assets/dashboard/Searching.svg +1 -0
  4. package/assets/dashboard/assets/chart-BrJFdsGZ.js +39 -0
  5. package/assets/dashboard/assets/index-CIaoMxuB.css +1 -0
  6. package/assets/dashboard/assets/index-wTKgygsg.js +636 -0
  7. package/assets/dashboard/assets/pie-chart-recharts-BEaE1FOE.js +1 -0
  8. package/assets/dashboard/assets/timeseries-chart-recharts-DmWM6imF.js +1 -0
  9. package/assets/dashboard/beechLogoDark.svg +48 -48
  10. package/assets/dashboard/index.html +18 -18
  11. package/assets/dashboard/noResult.svg +43 -0
  12. package/assets/dashboard/sol.svg +3 -3
  13. package/assets/dashboard/undraw_enter_nwx3.svg +36 -36
  14. package/assets/dashboard/working.svg +1 -0
  15. package/migrations/0000_v040_base.sql +265 -238
  16. package/migrations/0029_automations.sql +14 -14
  17. package/migrations/0030_test_seeds.sql +125 -125
  18. package/package.json +13 -9
  19. package/src/auth/{in-memory-hash-provider.ts → __fixtures__/in-memory-hash-provider.ts} +17 -13
  20. package/src/auth/{static-token-service.ts → __fixtures__/static-token-service.ts} +22 -18
  21. package/src/auth/bcrypt-hash-provider.ts +24 -20
  22. package/src/auth/constants.ts +14 -10
  23. package/src/auth/generate-refresh-token.test.ts +23 -19
  24. package/src/auth/hash-provider.test.ts +55 -46
  25. package/src/auth/jose-token-service.ts +62 -55
  26. package/src/auth/jwt-claims-passthrough.test.ts +87 -0
  27. package/src/auth/login.test.ts +100 -92
  28. package/src/auth/login.ts +78 -74
  29. package/src/auth/refresh.ts +11 -5
  30. package/src/auth/token-service.test.ts +90 -82
  31. package/src/factory.ts +370 -347
  32. package/src/features/automations/__tests__/action-executors.test.ts +255 -268
  33. package/src/features/automations/__tests__/automation-runner.test.ts +196 -192
  34. package/src/features/automations/__tests__/automation-runner.utils.test.ts +60 -56
  35. package/src/features/automations/__tests__/automations.handler.test.ts +264 -260
  36. package/src/features/automations/__tests__/automations.repository.test.ts +163 -159
  37. package/src/features/automations/__tests__/automations.schema.test.ts +224 -134
  38. package/src/features/automations/__tests__/context-resolver.test.ts +126 -122
  39. package/src/features/automations/__tests__/cron-runner.test.ts +267 -263
  40. package/src/features/automations/__tests__/cron-runner.utils.test.ts +144 -140
  41. package/src/features/automations/__tests__/set-variable.executor.test.ts +383 -306
  42. package/src/features/automations/__tests__/template-grammar.test.ts +308 -304
  43. package/src/features/automations/__tests__/webhook.executor.test.ts +142 -0
  44. package/src/features/automations/__tests__/when-evaluator.test.ts +274 -270
  45. package/src/features/automations/__tests__/when-pushdown.test.ts +281 -277
  46. package/src/features/automations/action-executors/create-entry.executor.ts +27 -23
  47. package/src/features/automations/action-executors/edit-field.executor.ts +26 -22
  48. package/src/features/automations/action-executors/index.ts +37 -33
  49. package/src/features/automations/action-executors/send-mail.executor.ts +53 -42
  50. package/src/features/automations/action-executors/set-variable.executor.ts +159 -146
  51. package/src/features/automations/action-executors/webhook.executor.ts +67 -25
  52. package/src/features/automations/automation-runner.ts +85 -81
  53. package/src/features/automations/automation-runner.utils.ts +47 -43
  54. package/src/features/automations/automations.handler.ts +197 -193
  55. package/src/features/automations/automations.schema.ts +177 -160
  56. package/src/features/automations/context-resolver.ts +152 -148
  57. package/src/features/automations/cron-runner.ts +140 -136
  58. package/src/features/automations/cron-runner.utils.ts +44 -40
  59. package/src/features/automations/filter-translation.ts +46 -42
  60. package/src/features/automations/index.ts +16 -12
  61. package/src/features/automations/template-grammar.ts +245 -241
  62. package/src/features/automations/var-access-resolver.ts +140 -136
  63. package/src/features/automations/when-evaluator.ts +87 -83
  64. package/src/features/automations/when-pushdown.ts +57 -53
  65. package/src/features/backrefs/__tests__/backrefs.handler.test.ts +359 -0
  66. package/src/features/backrefs/backrefs.handler.ts +168 -0
  67. package/src/features/backrefs/d1-backref.repository.ts +84 -0
  68. package/src/features/backrefs/index.ts +5 -0
  69. package/src/features/content/constants.ts +16 -10
  70. package/src/features/content/handlers/bulk.handler.ts +185 -0
  71. package/src/features/content/handlers/create.ts +129 -165
  72. package/src/features/content/handlers/delete.ts +62 -87
  73. package/src/features/content/handlers/facets.ts +49 -45
  74. package/src/features/content/handlers/get.ts +120 -116
  75. package/src/features/content/handlers/helpers.test.ts +180 -0
  76. package/src/features/content/handlers/helpers.ts +93 -0
  77. package/src/features/content/handlers/list.ts +174 -88
  78. package/src/features/content/handlers/update.ts +174 -219
  79. package/src/features/content/index.ts +26 -20
  80. package/src/features/dashboard-layout/__tests__/dashboard-layout.handler.test.ts +388 -0
  81. package/src/features/dashboard-layout/dashboard-layout.handler.ts +206 -0
  82. package/src/features/dashboard-layout/index.ts +5 -0
  83. package/src/features/draft/draft.handler.ts +195 -170
  84. package/src/features/draft/draft.middleware.ts +66 -62
  85. package/src/features/draft/index.ts +5 -1
  86. package/src/features/email/email.provider.ts +42 -38
  87. package/src/features/email/email.service.ts +98 -93
  88. package/src/features/email/email.types.ts +119 -108
  89. package/src/features/email/index.ts +33 -29
  90. package/src/features/email/providers/resend.ts +67 -63
  91. package/src/features/email/providers/smtp.ts +55 -0
  92. package/src/features/email/templates/automation-mail.ts +19 -15
  93. package/src/features/email/templates/password-changed.ts +63 -59
  94. package/src/features/email/templates/password-reset.ts +68 -64
  95. package/src/features/email/templates/shell.ts +96 -92
  96. package/src/features/notifications/index.ts +5 -1
  97. package/src/features/notifications/notifications.handler.ts +105 -101
  98. package/src/features/password-reset/index.ts +19 -15
  99. package/src/features/password-reset/request.ts +92 -82
  100. package/src/features/password-reset/reset.ts +102 -92
  101. package/src/features/rotate-field/index.ts +5 -1
  102. package/src/features/rotate-field/rotate-field.handler.ts +132 -128
  103. package/src/features/rotate-field/rotate-field.schema.ts +17 -13
  104. package/src/features/schema/schema.handler.ts +131 -16
  105. package/src/features/seeds/index.ts +5 -0
  106. package/src/features/seeds/seeds.handler.test.ts +1199 -0
  107. package/src/features/seeds/seeds.handler.ts +558 -0
  108. package/src/features/settings/__tests__/settings.handler.test.ts +555 -0
  109. package/src/features/settings/settings.handler.ts +392 -302
  110. package/src/features/setup/index.ts +288 -91
  111. package/src/features/stats/index.ts +5 -1
  112. package/src/features/stats/stats.handler.ts +420 -430
  113. package/src/features/webhooks/index.ts +63 -0
  114. package/src/index.ts +65 -56
  115. package/src/media-utils.ts +82 -78
  116. package/src/middleware/auth-providers.middleware.test.ts +85 -0
  117. package/src/middleware/auth-providers.middleware.ts +45 -32
  118. package/src/middleware/observability.middleware.test.ts +93 -0
  119. package/src/middleware/observability.middleware.ts +70 -52
  120. package/src/middleware/rate-limit.middleware.ts +45 -41
  121. package/src/middleware/repository.middleware.ts +117 -91
  122. package/src/middleware/seed-registry.middleware.test.ts +97 -0
  123. package/src/middleware/seed-registry.middleware.ts +21 -0
  124. package/src/middleware/storage.middleware.ts +25 -21
  125. package/src/middleware.ts +45 -47
  126. package/src/public/access-policy.ts +27 -23
  127. package/src/public/api-key-middleware.ts +57 -53
  128. package/src/public/cache-utils.ts +38 -34
  129. package/src/public/entry-projection.ts +46 -42
  130. package/src/public/idempotency.ts +23 -19
  131. package/src/public/index.ts +16 -12
  132. package/src/public/problem-details.ts +124 -53
  133. package/src/public/public-add.ts +114 -110
  134. package/src/public/public-edit.ts +163 -159
  135. package/src/public/public-errors.ts +19 -15
  136. package/src/public/public-read.ts +63 -59
  137. package/src/public/public-routes.ts +88 -84
  138. package/src/public/query-builder.test.ts +224 -220
  139. package/src/public/query-builder.ts +156 -152
  140. package/src/public/rate-limit-middleware.ts +34 -30
  141. package/src/public/read-list.ts +54 -50
  142. package/src/public/read-single.ts +48 -44
  143. package/src/public/response-builder.ts +30 -26
  144. package/src/public/sanitize.ts +69 -65
  145. package/src/public/slug-utils.ts +18 -14
  146. package/src/rate-limit/cloudflare-rate-limiter.test.ts +30 -26
  147. package/src/rate-limit/cloudflare-rate-limiter.ts +15 -11
  148. package/src/rate-limit/in-memory-rate-limiter.test.ts +37 -33
  149. package/src/rate-limit/in-memory-rate-limiter.ts +17 -13
  150. package/src/rate-limit/no-op-rate-limiter.test.ts +22 -18
  151. package/src/rate-limit/no-op-rate-limiter.ts +11 -7
  152. package/src/search-utils.test.ts +211 -207
  153. package/src/search-utils.ts +213 -209
  154. package/src/search.ts +65 -61
  155. package/src/shared/apply-policies.test.ts +81 -77
  156. package/src/shared/apply-policies.ts +67 -63
  157. package/src/shared/automations.repository.d1.ts +150 -146
  158. package/src/shared/background-notification-service.test.ts +62 -58
  159. package/src/shared/background-notification-service.ts +52 -48
  160. package/src/shared/base.repository.d1.ts +32 -28
  161. package/src/shared/content-utils.test.ts +165 -161
  162. package/src/shared/content-utils.ts +86 -82
  163. package/src/shared/content.repository.d1.test.ts +507 -312
  164. package/src/shared/content.repository.d1.ts +851 -382
  165. package/src/shared/d1-activity-log.repository.test.ts +140 -136
  166. package/src/shared/d1-activity-log.repository.ts +105 -101
  167. package/src/shared/d1-activity-logger.test.ts +86 -82
  168. package/src/shared/d1-activity-logger.ts +67 -63
  169. package/src/shared/d1-analytics.repository.test.ts +78 -74
  170. package/src/shared/d1-analytics.repository.ts +85 -81
  171. package/src/shared/d1-content-scan.repository.test.ts +80 -76
  172. package/src/shared/d1-content-scan.repository.ts +37 -29
  173. package/src/shared/d1-notification.repository.test.ts +128 -124
  174. package/src/shared/d1-notification.repository.ts +118 -114
  175. package/src/shared/d1-password-reset-token.repository.test.ts +81 -77
  176. package/src/shared/d1-password-reset-token.repository.ts +56 -52
  177. package/src/shared/d1-search.repository.test.ts +87 -83
  178. package/src/shared/d1-search.repository.ts +88 -84
  179. package/src/shared/d1-session.repository.test.ts +125 -121
  180. package/src/shared/d1-session.repository.ts +102 -98
  181. package/src/shared/d1-setup-checklist.repository.ts +36 -0
  182. package/src/shared/d1-user.repository.test.ts +151 -147
  183. package/src/shared/d1-user.repository.ts +119 -109
  184. package/src/shared/d1-widget.repository.test.ts +267 -217
  185. package/src/shared/d1-widget.repository.ts +385 -337
  186. package/src/shared/dashboard-layout.repository.d1.test.ts +135 -0
  187. package/src/shared/dashboard-layout.repository.d1.ts +58 -0
  188. package/src/shared/demo-data-sql.ts +216 -0
  189. package/src/shared/demo-data.repository.d1.ts +20 -0
  190. package/src/shared/execution-context-scheduler.ts +13 -9
  191. package/src/shared/fixed-clock.ts +25 -21
  192. package/src/shared/fts-sync.ts +8 -4
  193. package/src/shared/idempotency.repository.d1.test.ts +83 -79
  194. package/src/shared/idempotency.repository.d1.ts +60 -56
  195. package/src/shared/in-memory-activity-logger.ts +19 -15
  196. package/src/shared/in-memory-notification-service.ts +19 -15
  197. package/src/shared/in-memory-seed.repository.ts +58 -0
  198. package/src/shared/media.repository.d1.test.ts +107 -103
  199. package/src/shared/media.repository.d1.ts +68 -64
  200. package/src/shared/qstash-notification-service.test.ts +67 -0
  201. package/src/shared/qstash-notification-service.ts +55 -0
  202. package/src/shared/query-utils.ts +141 -137
  203. package/src/shared/request-utils.ts +26 -22
  204. package/src/shared/schema-mutator.d1.test.ts +142 -0
  205. package/src/shared/schema-mutator.d1.ts +64 -0
  206. package/src/shared/seed-layout.repository.d1.test.ts +114 -0
  207. package/src/shared/seed-layout.repository.d1.ts +62 -0
  208. package/src/shared/seed-registry-cache.test.ts +68 -0
  209. package/src/shared/seed-registry-cache.ts +49 -0
  210. package/src/shared/seed.repository.d1.test.ts +143 -0
  211. package/src/shared/seed.repository.d1.ts +98 -0
  212. package/src/shared/sequential-id-generator.ts +33 -22
  213. package/src/shared/site-settings.repository.d1.ts +53 -0
  214. package/src/shared/storage/factory.ts +41 -40
  215. package/src/shared/storage/s3-bucket.ts +195 -163
  216. package/src/shared/storage-utils.ts +40 -36
  217. package/src/shared/system-stats.repository.d1.test.ts +58 -54
  218. package/src/shared/system-stats.repository.d1.ts +48 -44
  219. package/src/types.ts +90 -67
  220. package/src/upload.ts +198 -187
  221. package/src/widget.test.ts +85 -0
  222. package/src/widget.ts +251 -208
  223. package/assets/dashboard/assets/index-B1mUfgiK.css +0 -1
  224. package/assets/dashboard/assets/index-CHxxc_id.js +0 -629
  225. package/src/shared/storage/r2-binding-bucket.ts +0 -81
@@ -1,193 +1,197 @@
1
- /// <reference types="@cloudflare/workers-types" />
2
- import { Hono } from 'hono'
3
- import type { Env, Variables } from '../../types'
4
- import { publicProblem } from '../../public/problem-details'
5
- import {
6
- createAutomationSchema,
7
- updateAutomationSchema,
8
- toggleAutomationSchema,
9
- } from './automations.schema'
10
-
11
- const automationsApp = new Hono<{ Bindings: Env; Variables: Variables }>()
12
-
13
- /**
14
- * GET /automations?seed=<slug>
15
- * Returns every automation declared for the given seed, newest first.
16
- */
17
- automationsApp.get('/', async (context) => {
18
- const seedSlug = context.req.query('seed')
19
- if (!seedSlug) {
20
- return publicProblem(context, {
21
- type: 'missing-seed',
22
- status: 400,
23
- title: 'Bad Request',
24
- detail: 'Query param `seed` is required',
25
- })
26
- }
27
- const repository = context.get('automationRepository')
28
- const automations = await repository.list(seedSlug)
29
- return context.json(automations)
30
- })
31
-
32
- /**
33
- * POST /automations
34
- * Creates a new automation. Body validated by `createAutomationSchema`.
35
- */
36
- automationsApp.post('/', async (context) => {
37
- let body: unknown
38
- try {
39
- body = await context.req.json()
40
- } catch {
41
- return publicProblem(context, {
42
- type: 'invalid-json',
43
- status: 400,
44
- title: 'Bad Request',
45
- detail: 'Request body is not valid JSON',
46
- })
47
- }
48
-
49
- const parsed = createAutomationSchema.safeParse(body)
50
- if (!parsed.success) {
51
- return publicProblem(context, {
52
- type: 'automation-validation-failed',
53
- status: 400,
54
- title: 'Bad Request',
55
- detail: parsed.error.message,
56
- })
57
- }
58
-
59
- const repository = context.get('automationRepository')
60
- const id = await repository.create({
61
- seed_slug: parsed.data.seed_slug,
62
- name: parsed.data.name,
63
- triggers: parsed.data.triggers,
64
- trigger_conditions: parsed.data.trigger_conditions ?? null,
65
- actions: parsed.data.actions,
66
- })
67
- return context.json({ id }, 201)
68
- })
69
-
70
- /**
71
- * GET /automations/:id
72
- */
73
- automationsApp.get('/:id', async (context) => {
74
- const id = context.req.param('id')
75
- const automation = await context.get('automationRepository').findById(id)
76
- if (!automation) {
77
- return publicProblem(context, {
78
- type: 'automation-not-found',
79
- status: 404,
80
- title: 'Not Found',
81
- detail: `Automation ${id} does not exist`,
82
- })
83
- }
84
- return context.json(automation)
85
- })
86
-
87
- /**
88
- * PUT /automations/:id
89
- * Full update — partial bodies allowed; cron expression validation
90
- * is enforced by the triggers array schema.
91
- */
92
- automationsApp.put('/:id', async (context) => {
93
- const id = context.req.param('id')
94
- const repository = context.get('automationRepository')
95
- const existing = await repository.findById(id)
96
- if (!existing) {
97
- return publicProblem(context, {
98
- type: 'automation-not-found',
99
- status: 404,
100
- title: 'Not Found',
101
- detail: `Automation ${id} does not exist`,
102
- })
103
- }
104
-
105
- let body: unknown
106
- try {
107
- body = await context.req.json()
108
- } catch {
109
- return publicProblem(context, {
110
- type: 'invalid-json',
111
- status: 400,
112
- title: 'Bad Request',
113
- detail: 'Request body is not valid JSON',
114
- })
115
- }
116
-
117
- const parsed = updateAutomationSchema.safeParse(body)
118
- if (!parsed.success) {
119
- return publicProblem(context, {
120
- type: 'automation-validation-failed',
121
- status: 400,
122
- title: 'Bad Request',
123
- detail: parsed.error.message,
124
- })
125
- }
126
-
127
- await repository.update(id, parsed.data)
128
- return context.body(null, 204)
129
- })
130
-
131
- /**
132
- * PATCH /automations/:id/toggle
133
- * Atomic single-field flip — does not require sending the full body.
134
- */
135
- automationsApp.patch('/:id/toggle', async (context) => {
136
- const id = context.req.param('id')
137
- const repository = context.get('automationRepository')
138
- const existing = await repository.findById(id)
139
- if (!existing) {
140
- return publicProblem(context, {
141
- type: 'automation-not-found',
142
- status: 404,
143
- title: 'Not Found',
144
- detail: `Automation ${id} does not exist`,
145
- })
146
- }
147
-
148
- let body: unknown
149
- try {
150
- body = await context.req.json()
151
- } catch {
152
- return publicProblem(context, {
153
- type: 'invalid-json',
154
- status: 400,
155
- title: 'Bad Request',
156
- detail: 'Request body is not valid JSON',
157
- })
158
- }
159
-
160
- const parsed = toggleAutomationSchema.safeParse(body)
161
- if (!parsed.success) {
162
- return publicProblem(context, {
163
- type: 'automation-validation-failed',
164
- status: 400,
165
- title: 'Bad Request',
166
- detail: parsed.error.message,
167
- })
168
- }
169
-
170
- await repository.toggle(id, parsed.data.enabled)
171
- return context.body(null, 204)
172
- })
173
-
174
- /**
175
- * DELETE /automations/:id
176
- */
177
- automationsApp.delete('/:id', async (context) => {
178
- const id = context.req.param('id')
179
- const repository = context.get('automationRepository')
180
- const existing = await repository.findById(id)
181
- if (!existing) {
182
- return publicProblem(context, {
183
- type: 'automation-not-found',
184
- status: 404,
185
- title: 'Not Found',
186
- detail: `Automation ${id} does not exist`,
187
- })
188
- }
189
- await repository.delete(id)
190
- return context.body(null, 204)
191
- })
192
-
193
- export { automationsApp }
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ /// <reference types="@cloudflare/workers-types" />
6
+ import { Hono } from 'hono'
7
+ import type { Env, Variables } from '../../types'
8
+ import { publicProblem } from '../../public/problem-details'
9
+ import {
10
+ createAutomationSchema,
11
+ updateAutomationSchema,
12
+ toggleAutomationSchema,
13
+ } from './automations.schema'
14
+
15
+ const automationsApp = new Hono<{ Bindings: Env; Variables: Variables }>()
16
+
17
+ /**
18
+ * GET /automations?seed=<slug>
19
+ * Returns every automation declared for the given seed, newest first.
20
+ */
21
+ automationsApp.get('/', async (context) => {
22
+ const seedSlug = context.req.query('seed')
23
+ if (!seedSlug) {
24
+ return publicProblem(context, {
25
+ type: 'missing-seed',
26
+ status: 400,
27
+ title: 'Bad Request',
28
+ detail: 'Query param `seed` is required',
29
+ })
30
+ }
31
+ const repository = context.get('automationRepository')
32
+ const automations = await repository.list(seedSlug)
33
+ return context.json(automations)
34
+ })
35
+
36
+ /**
37
+ * POST /automations
38
+ * Creates a new automation. Body validated by `createAutomationSchema`.
39
+ */
40
+ automationsApp.post('/', async (context) => {
41
+ let body: unknown
42
+ try {
43
+ body = await context.req.json()
44
+ } catch {
45
+ return publicProblem(context, {
46
+ type: 'invalid-json',
47
+ status: 400,
48
+ title: 'Bad Request',
49
+ detail: 'Request body is not valid JSON',
50
+ })
51
+ }
52
+
53
+ const parsed = createAutomationSchema.safeParse(body)
54
+ if (!parsed.success) {
55
+ return publicProblem(context, {
56
+ type: 'automation-validation-failed',
57
+ status: 400,
58
+ title: 'Bad Request',
59
+ detail: parsed.error.message,
60
+ })
61
+ }
62
+
63
+ const repository = context.get('automationRepository')
64
+ const id = await repository.create({
65
+ seed_slug: parsed.data.seed_slug,
66
+ name: parsed.data.name,
67
+ triggers: parsed.data.triggers,
68
+ trigger_conditions: parsed.data.trigger_conditions ?? null,
69
+ actions: parsed.data.actions,
70
+ })
71
+ return context.json({ id }, 201)
72
+ })
73
+
74
+ /**
75
+ * GET /automations/:id
76
+ */
77
+ automationsApp.get('/:id', async (context) => {
78
+ const id = context.req.param('id')
79
+ const automation = await context.get('automationRepository').findById(id)
80
+ if (!automation) {
81
+ return publicProblem(context, {
82
+ type: 'automation-not-found',
83
+ status: 404,
84
+ title: 'Not Found',
85
+ detail: `Automation ${id} does not exist`,
86
+ })
87
+ }
88
+ return context.json(automation)
89
+ })
90
+
91
+ /**
92
+ * PUT /automations/:id
93
+ * Full update — partial bodies allowed; cron expression validation
94
+ * is enforced by the triggers array schema.
95
+ */
96
+ automationsApp.put('/:id', async (context) => {
97
+ const id = context.req.param('id')
98
+ const repository = context.get('automationRepository')
99
+ const existing = await repository.findById(id)
100
+ if (!existing) {
101
+ return publicProblem(context, {
102
+ type: 'automation-not-found',
103
+ status: 404,
104
+ title: 'Not Found',
105
+ detail: `Automation ${id} does not exist`,
106
+ })
107
+ }
108
+
109
+ let body: unknown
110
+ try {
111
+ body = await context.req.json()
112
+ } catch {
113
+ return publicProblem(context, {
114
+ type: 'invalid-json',
115
+ status: 400,
116
+ title: 'Bad Request',
117
+ detail: 'Request body is not valid JSON',
118
+ })
119
+ }
120
+
121
+ const parsed = updateAutomationSchema.safeParse(body)
122
+ if (!parsed.success) {
123
+ return publicProblem(context, {
124
+ type: 'automation-validation-failed',
125
+ status: 400,
126
+ title: 'Bad Request',
127
+ detail: parsed.error.message,
128
+ })
129
+ }
130
+
131
+ await repository.update(id, parsed.data)
132
+ return context.body(null, 204)
133
+ })
134
+
135
+ /**
136
+ * PATCH /automations/:id/toggle
137
+ * Atomic single-field flip — does not require sending the full body.
138
+ */
139
+ automationsApp.patch('/:id/toggle', async (context) => {
140
+ const id = context.req.param('id')
141
+ const repository = context.get('automationRepository')
142
+ const existing = await repository.findById(id)
143
+ if (!existing) {
144
+ return publicProblem(context, {
145
+ type: 'automation-not-found',
146
+ status: 404,
147
+ title: 'Not Found',
148
+ detail: `Automation ${id} does not exist`,
149
+ })
150
+ }
151
+
152
+ let body: unknown
153
+ try {
154
+ body = await context.req.json()
155
+ } catch {
156
+ return publicProblem(context, {
157
+ type: 'invalid-json',
158
+ status: 400,
159
+ title: 'Bad Request',
160
+ detail: 'Request body is not valid JSON',
161
+ })
162
+ }
163
+
164
+ const parsed = toggleAutomationSchema.safeParse(body)
165
+ if (!parsed.success) {
166
+ return publicProblem(context, {
167
+ type: 'automation-validation-failed',
168
+ status: 400,
169
+ title: 'Bad Request',
170
+ detail: parsed.error.message,
171
+ })
172
+ }
173
+
174
+ await repository.toggle(id, parsed.data.enabled)
175
+ return context.body(null, 204)
176
+ })
177
+
178
+ /**
179
+ * DELETE /automations/:id
180
+ */
181
+ automationsApp.delete('/:id', async (context) => {
182
+ const id = context.req.param('id')
183
+ const repository = context.get('automationRepository')
184
+ const existing = await repository.findById(id)
185
+ if (!existing) {
186
+ return publicProblem(context, {
187
+ type: 'automation-not-found',
188
+ status: 404,
189
+ title: 'Not Found',
190
+ detail: `Automation ${id} does not exist`,
191
+ })
192
+ }
193
+ await repository.delete(id)
194
+ return context.body(null, 204)
195
+ })
196
+
197
+ export { automationsApp }