@beechcms/api 0.5.0 → 0.6.0-preview.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/assets/dashboard/BeechLogo.svg +18 -18
- package/assets/dashboard/BeechLogoLIght.svg +48 -48
- package/assets/dashboard/Searching.svg +1 -0
- package/assets/dashboard/assets/chart-BrJFdsGZ.js +39 -0
- package/assets/dashboard/assets/index-CIaoMxuB.css +1 -0
- package/assets/dashboard/assets/index-wTKgygsg.js +636 -0
- package/assets/dashboard/assets/pie-chart-recharts-BEaE1FOE.js +1 -0
- package/assets/dashboard/assets/timeseries-chart-recharts-DmWM6imF.js +1 -0
- package/assets/dashboard/beechLogoDark.svg +48 -48
- package/assets/dashboard/index.html +18 -18
- package/assets/dashboard/noResult.svg +43 -0
- package/assets/dashboard/sol.svg +3 -3
- package/assets/dashboard/undraw_enter_nwx3.svg +36 -36
- package/assets/dashboard/working.svg +1 -0
- package/migrations/0000_v040_base.sql +265 -238
- package/migrations/0029_automations.sql +14 -14
- package/migrations/0030_test_seeds.sql +125 -125
- package/package.json +13 -9
- package/src/auth/{in-memory-hash-provider.ts → __fixtures__/in-memory-hash-provider.ts} +17 -13
- package/src/auth/{static-token-service.ts → __fixtures__/static-token-service.ts} +22 -18
- package/src/auth/bcrypt-hash-provider.ts +24 -20
- package/src/auth/constants.ts +14 -10
- package/src/auth/generate-refresh-token.test.ts +23 -19
- package/src/auth/hash-provider.test.ts +55 -46
- package/src/auth/jose-token-service.ts +62 -55
- package/src/auth/jwt-claims-passthrough.test.ts +87 -0
- package/src/auth/login.test.ts +100 -92
- package/src/auth/login.ts +78 -74
- package/src/auth/refresh.ts +11 -5
- package/src/auth/token-service.test.ts +90 -82
- package/src/factory.ts +370 -347
- package/src/features/automations/__tests__/action-executors.test.ts +255 -268
- package/src/features/automations/__tests__/automation-runner.test.ts +196 -192
- package/src/features/automations/__tests__/automation-runner.utils.test.ts +60 -56
- package/src/features/automations/__tests__/automations.handler.test.ts +264 -260
- package/src/features/automations/__tests__/automations.repository.test.ts +163 -159
- package/src/features/automations/__tests__/automations.schema.test.ts +224 -134
- package/src/features/automations/__tests__/context-resolver.test.ts +126 -122
- package/src/features/automations/__tests__/cron-runner.test.ts +267 -263
- package/src/features/automations/__tests__/cron-runner.utils.test.ts +144 -140
- package/src/features/automations/__tests__/set-variable.executor.test.ts +383 -306
- package/src/features/automations/__tests__/template-grammar.test.ts +308 -304
- package/src/features/automations/__tests__/webhook.executor.test.ts +142 -0
- package/src/features/automations/__tests__/when-evaluator.test.ts +274 -270
- package/src/features/automations/__tests__/when-pushdown.test.ts +281 -277
- package/src/features/automations/action-executors/create-entry.executor.ts +27 -23
- package/src/features/automations/action-executors/edit-field.executor.ts +26 -22
- package/src/features/automations/action-executors/index.ts +37 -33
- package/src/features/automations/action-executors/send-mail.executor.ts +53 -42
- package/src/features/automations/action-executors/set-variable.executor.ts +159 -146
- package/src/features/automations/action-executors/webhook.executor.ts +67 -25
- package/src/features/automations/automation-runner.ts +85 -81
- package/src/features/automations/automation-runner.utils.ts +47 -43
- package/src/features/automations/automations.handler.ts +197 -193
- package/src/features/automations/automations.schema.ts +177 -160
- package/src/features/automations/context-resolver.ts +152 -148
- package/src/features/automations/cron-runner.ts +140 -136
- package/src/features/automations/cron-runner.utils.ts +44 -40
- package/src/features/automations/filter-translation.ts +46 -42
- package/src/features/automations/index.ts +16 -12
- package/src/features/automations/template-grammar.ts +245 -241
- package/src/features/automations/var-access-resolver.ts +140 -136
- package/src/features/automations/when-evaluator.ts +87 -83
- package/src/features/automations/when-pushdown.ts +57 -53
- package/src/features/backrefs/__tests__/backrefs.handler.test.ts +359 -0
- package/src/features/backrefs/backrefs.handler.ts +168 -0
- package/src/features/backrefs/d1-backref.repository.ts +84 -0
- package/src/features/backrefs/index.ts +5 -0
- package/src/features/content/constants.ts +16 -10
- package/src/features/content/handlers/bulk.handler.ts +185 -0
- package/src/features/content/handlers/create.ts +129 -165
- package/src/features/content/handlers/delete.ts +62 -87
- package/src/features/content/handlers/facets.ts +49 -45
- package/src/features/content/handlers/get.ts +120 -116
- package/src/features/content/handlers/helpers.test.ts +180 -0
- package/src/features/content/handlers/helpers.ts +93 -0
- package/src/features/content/handlers/list.ts +174 -88
- package/src/features/content/handlers/update.ts +174 -219
- package/src/features/content/index.ts +26 -20
- package/src/features/dashboard-layout/__tests__/dashboard-layout.handler.test.ts +388 -0
- package/src/features/dashboard-layout/dashboard-layout.handler.ts +206 -0
- package/src/features/dashboard-layout/index.ts +5 -0
- package/src/features/draft/draft.handler.ts +195 -170
- package/src/features/draft/draft.middleware.ts +66 -62
- package/src/features/draft/index.ts +5 -1
- package/src/features/email/email.provider.ts +42 -38
- package/src/features/email/email.service.ts +98 -93
- package/src/features/email/email.types.ts +119 -108
- package/src/features/email/index.ts +33 -29
- package/src/features/email/providers/resend.ts +67 -63
- package/src/features/email/providers/smtp.ts +55 -0
- package/src/features/email/templates/automation-mail.ts +19 -15
- package/src/features/email/templates/password-changed.ts +63 -59
- package/src/features/email/templates/password-reset.ts +68 -64
- package/src/features/email/templates/shell.ts +96 -92
- package/src/features/notifications/index.ts +5 -1
- package/src/features/notifications/notifications.handler.ts +105 -101
- package/src/features/password-reset/index.ts +19 -15
- package/src/features/password-reset/request.ts +92 -82
- package/src/features/password-reset/reset.ts +102 -92
- package/src/features/rotate-field/index.ts +5 -1
- package/src/features/rotate-field/rotate-field.handler.ts +132 -128
- package/src/features/rotate-field/rotate-field.schema.ts +17 -13
- package/src/features/schema/schema.handler.ts +131 -16
- package/src/features/seeds/index.ts +5 -0
- package/src/features/seeds/seeds.handler.test.ts +1199 -0
- package/src/features/seeds/seeds.handler.ts +558 -0
- package/src/features/settings/__tests__/settings.handler.test.ts +555 -0
- package/src/features/settings/settings.handler.ts +392 -302
- package/src/features/setup/index.ts +288 -91
- package/src/features/stats/index.ts +5 -1
- package/src/features/stats/stats.handler.ts +420 -430
- package/src/features/webhooks/index.ts +63 -0
- package/src/index.ts +65 -56
- package/src/media-utils.ts +82 -78
- package/src/middleware/auth-providers.middleware.test.ts +85 -0
- package/src/middleware/auth-providers.middleware.ts +45 -32
- package/src/middleware/observability.middleware.test.ts +93 -0
- package/src/middleware/observability.middleware.ts +70 -52
- package/src/middleware/rate-limit.middleware.ts +45 -41
- package/src/middleware/repository.middleware.ts +117 -91
- package/src/middleware/seed-registry.middleware.test.ts +97 -0
- package/src/middleware/seed-registry.middleware.ts +21 -0
- package/src/middleware/storage.middleware.ts +25 -21
- package/src/middleware.ts +45 -47
- package/src/public/access-policy.ts +27 -23
- package/src/public/api-key-middleware.ts +57 -53
- package/src/public/cache-utils.ts +38 -34
- package/src/public/entry-projection.ts +46 -42
- package/src/public/idempotency.ts +23 -19
- package/src/public/index.ts +16 -12
- package/src/public/problem-details.ts +124 -53
- package/src/public/public-add.ts +114 -110
- package/src/public/public-edit.ts +163 -159
- package/src/public/public-errors.ts +19 -15
- package/src/public/public-read.ts +63 -59
- package/src/public/public-routes.ts +88 -84
- package/src/public/query-builder.test.ts +224 -220
- package/src/public/query-builder.ts +156 -152
- package/src/public/rate-limit-middleware.ts +34 -30
- package/src/public/read-list.ts +54 -50
- package/src/public/read-single.ts +48 -44
- package/src/public/response-builder.ts +30 -26
- package/src/public/sanitize.ts +69 -65
- package/src/public/slug-utils.ts +18 -14
- package/src/rate-limit/cloudflare-rate-limiter.test.ts +30 -26
- package/src/rate-limit/cloudflare-rate-limiter.ts +15 -11
- package/src/rate-limit/in-memory-rate-limiter.test.ts +37 -33
- package/src/rate-limit/in-memory-rate-limiter.ts +17 -13
- package/src/rate-limit/no-op-rate-limiter.test.ts +22 -18
- package/src/rate-limit/no-op-rate-limiter.ts +11 -7
- package/src/search-utils.test.ts +211 -207
- package/src/search-utils.ts +213 -209
- package/src/search.ts +65 -61
- package/src/shared/apply-policies.test.ts +81 -77
- package/src/shared/apply-policies.ts +67 -63
- package/src/shared/automations.repository.d1.ts +150 -146
- package/src/shared/background-notification-service.test.ts +62 -58
- package/src/shared/background-notification-service.ts +52 -48
- package/src/shared/base.repository.d1.ts +32 -28
- package/src/shared/content-utils.test.ts +165 -161
- package/src/shared/content-utils.ts +86 -82
- package/src/shared/content.repository.d1.test.ts +507 -312
- package/src/shared/content.repository.d1.ts +851 -382
- package/src/shared/d1-activity-log.repository.test.ts +140 -136
- package/src/shared/d1-activity-log.repository.ts +105 -101
- package/src/shared/d1-activity-logger.test.ts +86 -82
- package/src/shared/d1-activity-logger.ts +67 -63
- package/src/shared/d1-analytics.repository.test.ts +78 -74
- package/src/shared/d1-analytics.repository.ts +85 -81
- package/src/shared/d1-content-scan.repository.test.ts +80 -76
- package/src/shared/d1-content-scan.repository.ts +37 -29
- package/src/shared/d1-notification.repository.test.ts +128 -124
- package/src/shared/d1-notification.repository.ts +118 -114
- package/src/shared/d1-password-reset-token.repository.test.ts +81 -77
- package/src/shared/d1-password-reset-token.repository.ts +56 -52
- package/src/shared/d1-search.repository.test.ts +87 -83
- package/src/shared/d1-search.repository.ts +88 -84
- package/src/shared/d1-session.repository.test.ts +125 -121
- package/src/shared/d1-session.repository.ts +102 -98
- package/src/shared/d1-setup-checklist.repository.ts +36 -0
- package/src/shared/d1-user.repository.test.ts +151 -147
- package/src/shared/d1-user.repository.ts +119 -109
- package/src/shared/d1-widget.repository.test.ts +267 -217
- package/src/shared/d1-widget.repository.ts +385 -337
- package/src/shared/dashboard-layout.repository.d1.test.ts +135 -0
- package/src/shared/dashboard-layout.repository.d1.ts +58 -0
- package/src/shared/demo-data-sql.ts +216 -0
- package/src/shared/demo-data.repository.d1.ts +20 -0
- package/src/shared/execution-context-scheduler.ts +13 -9
- package/src/shared/fixed-clock.ts +25 -21
- package/src/shared/fts-sync.ts +8 -4
- package/src/shared/idempotency.repository.d1.test.ts +83 -79
- package/src/shared/idempotency.repository.d1.ts +60 -56
- package/src/shared/in-memory-activity-logger.ts +19 -15
- package/src/shared/in-memory-notification-service.ts +19 -15
- package/src/shared/in-memory-seed.repository.ts +58 -0
- package/src/shared/media.repository.d1.test.ts +107 -103
- package/src/shared/media.repository.d1.ts +68 -64
- package/src/shared/qstash-notification-service.test.ts +67 -0
- package/src/shared/qstash-notification-service.ts +55 -0
- package/src/shared/query-utils.ts +141 -137
- package/src/shared/request-utils.ts +26 -22
- package/src/shared/schema-mutator.d1.test.ts +142 -0
- package/src/shared/schema-mutator.d1.ts +64 -0
- package/src/shared/seed-layout.repository.d1.test.ts +114 -0
- package/src/shared/seed-layout.repository.d1.ts +62 -0
- package/src/shared/seed-registry-cache.test.ts +68 -0
- package/src/shared/seed-registry-cache.ts +49 -0
- package/src/shared/seed.repository.d1.test.ts +143 -0
- package/src/shared/seed.repository.d1.ts +98 -0
- package/src/shared/sequential-id-generator.ts +33 -22
- package/src/shared/site-settings.repository.d1.ts +53 -0
- package/src/shared/storage/factory.ts +41 -40
- package/src/shared/storage/s3-bucket.ts +195 -163
- package/src/shared/storage-utils.ts +40 -36
- package/src/shared/system-stats.repository.d1.test.ts +58 -54
- package/src/shared/system-stats.repository.d1.ts +48 -44
- package/src/types.ts +90 -67
- package/src/upload.ts +198 -187
- package/src/widget.test.ts +85 -0
- package/src/widget.ts +251 -208
- package/assets/dashboard/assets/index-B1mUfgiK.css +0 -1
- package/assets/dashboard/assets/index-CHxxc_id.js +0 -629
- package/src/shared/storage/r2-binding-bucket.ts +0 -81
|
@@ -1,152 +1,156 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
| '
|
|
17
|
-
| '
|
|
18
|
-
| '
|
|
19
|
-
| '
|
|
20
|
-
| '
|
|
21
|
-
| '
|
|
22
|
-
| '
|
|
23
|
-
| '
|
|
24
|
-
| '
|
|
25
|
-
| '
|
|
26
|
-
| '
|
|
27
|
-
| '
|
|
28
|
-
| '
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
function
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
return
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
if (!
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
case '
|
|
99
|
-
return '
|
|
100
|
-
case '
|
|
101
|
-
return '
|
|
102
|
-
case '
|
|
103
|
-
return '
|
|
104
|
-
case '
|
|
105
|
-
return '
|
|
106
|
-
case '
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
}
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
if (
|
|
151
|
-
|
|
152
|
-
|
|
1
|
+
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
+
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
+
// See LICENSE in the repository root for license terms.
|
|
4
|
+
|
|
5
|
+
import type { Seed, FilterGroup, FilterOperator, FilterType, BranchType } from '@beechcms/core'
|
|
6
|
+
import { parsePositiveInt } from '../shared/query-utils'
|
|
7
|
+
|
|
8
|
+
export type PublicQueryInput = {
|
|
9
|
+
page?: string
|
|
10
|
+
limit?: string
|
|
11
|
+
latest?: string
|
|
12
|
+
}
|
|
13
|
+
|
|
14
|
+
export type PublicFilterLogic = 'AND' | 'OR'
|
|
15
|
+
export type PublicFilterOperator =
|
|
16
|
+
| 'eq'
|
|
17
|
+
| 'neq'
|
|
18
|
+
| 'gt'
|
|
19
|
+
| 'gte'
|
|
20
|
+
| 'lt'
|
|
21
|
+
| 'lte'
|
|
22
|
+
| 'contains'
|
|
23
|
+
| 'not_contains'
|
|
24
|
+
| 'starts_with'
|
|
25
|
+
| 'ends_with'
|
|
26
|
+
| 'is_empty'
|
|
27
|
+
| 'is_not_empty'
|
|
28
|
+
| 'in'
|
|
29
|
+
| 'not_in'
|
|
30
|
+
| 'has_tag'
|
|
31
|
+
| 'has_any_tag'
|
|
32
|
+
| 'has_all_tags'
|
|
33
|
+
|
|
34
|
+
export type PublicFilterCondition = {
|
|
35
|
+
field: string
|
|
36
|
+
op: PublicFilterOperator
|
|
37
|
+
value?: unknown
|
|
38
|
+
}
|
|
39
|
+
|
|
40
|
+
export type ParsedPublicFilter = {
|
|
41
|
+
where: PublicFilterCondition[]
|
|
42
|
+
logic: PublicFilterLogic
|
|
43
|
+
}
|
|
44
|
+
|
|
45
|
+
const PUBLIC_FILTER_OPERATORS = new Set<PublicFilterOperator>([
|
|
46
|
+
'eq', 'neq', 'gt', 'gte', 'lt', 'lte',
|
|
47
|
+
'contains', 'not_contains', 'starts_with', 'ends_with',
|
|
48
|
+
'is_empty', 'is_not_empty', 'in', 'not_in',
|
|
49
|
+
'has_tag', 'has_any_tag', 'has_all_tags',
|
|
50
|
+
])
|
|
51
|
+
|
|
52
|
+
function asString(value: unknown): string | null {
|
|
53
|
+
return typeof value === 'string' && value.trim() ? value.trim() : null
|
|
54
|
+
}
|
|
55
|
+
|
|
56
|
+
function validateLogic(logicRaw: unknown): PublicFilterLogic {
|
|
57
|
+
if (logicRaw === undefined) return 'AND'
|
|
58
|
+
if (typeof logicRaw !== 'string') throw new TypeError("Invalid filter: 'logic' must be 'AND' or 'OR'")
|
|
59
|
+
const normalized = logicRaw.toUpperCase()
|
|
60
|
+
if (normalized !== 'AND' && normalized !== 'OR') throw new TypeError("Invalid filter: 'logic' must be 'AND' or 'OR'")
|
|
61
|
+
return normalized
|
|
62
|
+
}
|
|
63
|
+
|
|
64
|
+
function parseWhereCondition(raw: unknown): PublicFilterCondition | null {
|
|
65
|
+
if (!raw || typeof raw !== 'object') return null
|
|
66
|
+
const maybe = raw as Record<string, unknown>
|
|
67
|
+
const field = asString(maybe.field)
|
|
68
|
+
const opRaw = asString(maybe.op)
|
|
69
|
+
if (!field || !opRaw || !PUBLIC_FILTER_OPERATORS.has(opRaw as PublicFilterOperator)) {
|
|
70
|
+
throw new TypeError(`Invalid filter: unknown operator '${opRaw ?? 'undefined'}'`)
|
|
71
|
+
}
|
|
72
|
+
return { field, op: opRaw as PublicFilterOperator, value: maybe.value }
|
|
73
|
+
}
|
|
74
|
+
|
|
75
|
+
export function parsePublicFilter(raw: string | undefined): ParsedPublicFilter | null {
|
|
76
|
+
if (!raw) return null
|
|
77
|
+
let parsed: unknown
|
|
78
|
+
try {
|
|
79
|
+
parsed = JSON.parse(raw)
|
|
80
|
+
} catch {
|
|
81
|
+
throw new TypeError('Invalid filter: malformed JSON')
|
|
82
|
+
}
|
|
83
|
+
if (!parsed || typeof parsed !== 'object') throw new TypeError('Invalid filter: object expected')
|
|
84
|
+
const filterObj = parsed as Record<string, unknown>
|
|
85
|
+
const logic = validateLogic(filterObj.logic)
|
|
86
|
+
if (!Array.isArray(filterObj.where)) throw new TypeError("Invalid filter: 'where' must be an array")
|
|
87
|
+
const where = filterObj.where
|
|
88
|
+
.map(parseWhereCondition)
|
|
89
|
+
.filter((item): item is PublicFilterCondition => item !== null)
|
|
90
|
+
return { where, logic }
|
|
91
|
+
}
|
|
92
|
+
|
|
93
|
+
const SYSTEM_COLUMNS = new Set(['id', 'slug', 'status', 'created_at', 'updated_at'])
|
|
94
|
+
|
|
95
|
+
function mapBranchToFilterType(type: BranchType): FilterType {
|
|
96
|
+
switch (type) {
|
|
97
|
+
case 'richtext':
|
|
98
|
+
case 'file':
|
|
99
|
+
return 'text'
|
|
100
|
+
case 'json':
|
|
101
|
+
return 'json'
|
|
102
|
+
case 'tags':
|
|
103
|
+
return 'tags'
|
|
104
|
+
case 'number':
|
|
105
|
+
return 'number'
|
|
106
|
+
case 'boolean':
|
|
107
|
+
return 'boolean'
|
|
108
|
+
case 'date':
|
|
109
|
+
return 'date'
|
|
110
|
+
case 'text':
|
|
111
|
+
default:
|
|
112
|
+
return 'text'
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
|
|
116
|
+
/**
|
|
117
|
+
* Trasforma il filtro pubblico in FilterGroup[] per il Repository.
|
|
118
|
+
* Zero SQL: la logica di generazione query risiede esclusivamente nel Repository/Engine core.
|
|
119
|
+
*/
|
|
120
|
+
export function toEngineFilters(seed: Seed, parsedFilter: ParsedPublicFilter | null): FilterGroup[] {
|
|
121
|
+
if (!parsedFilter || parsedFilter.where.length === 0) return []
|
|
122
|
+
|
|
123
|
+
// Note: Repository currently joins groups with AND.
|
|
124
|
+
// Public API supports logic: OR but the core engine currently defaults to AND for top-level groups.
|
|
125
|
+
// We map each condition to a group for maximum compatibility with the engine's buildFilterCondition.
|
|
126
|
+
return parsedFilter.where.map((cond) => {
|
|
127
|
+
const branch = seed.branches.find(b => b.alias === cond.field)
|
|
128
|
+
const type: FilterType = branch
|
|
129
|
+
? mapBranchToFilterType(branch.type)
|
|
130
|
+
: (SYSTEM_COLUMNS.has(cond.field) ? 'system' : 'text')
|
|
131
|
+
|
|
132
|
+
return {
|
|
133
|
+
column: cond.field,
|
|
134
|
+
type,
|
|
135
|
+
conditions: [{
|
|
136
|
+
op: cond.op as FilterOperator,
|
|
137
|
+
value: cond.value as any
|
|
138
|
+
}]
|
|
139
|
+
}
|
|
140
|
+
})
|
|
141
|
+
}
|
|
142
|
+
|
|
143
|
+
export function parsePublicPagination(input: PublicQueryInput): { page: number; limit: number } {
|
|
144
|
+
const page = parsePositiveInt(input.page, 1)
|
|
145
|
+
const limit = Math.min(parsePositiveInt(input.limit, 25), 100)
|
|
146
|
+
return { page, limit }
|
|
147
|
+
}
|
|
148
|
+
|
|
149
|
+
export function parseLatestCount(latest: string | undefined): number {
|
|
150
|
+
if (!latest) return 10
|
|
151
|
+
const raw = Number.parseInt(latest, 10)
|
|
152
|
+
const parsed = Number.isNaN(raw) ? 10 : raw
|
|
153
|
+
if (parsed < 1) return 1
|
|
154
|
+
if (parsed > 100) return 100
|
|
155
|
+
return parsed
|
|
156
|
+
}
|
|
@@ -1,30 +1,34 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
}
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
return
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
const
|
|
17
|
-
const
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
}
|
|
1
|
+
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
+
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
+
// See LICENSE in the repository root for license terms.
|
|
4
|
+
|
|
5
|
+
import type { Context, Next } from 'hono'
|
|
6
|
+
import type { AppEnv } from '../types'
|
|
7
|
+
import { publicProblem } from './problem-details'
|
|
8
|
+
import { getClientIp } from '../shared/request-utils'
|
|
9
|
+
|
|
10
|
+
function isReadMethod(method: string): boolean {
|
|
11
|
+
return method === 'GET' || method === 'HEAD' || method === 'OPTIONS'
|
|
12
|
+
}
|
|
13
|
+
|
|
14
|
+
export function publicRateLimitMiddleware() {
|
|
15
|
+
return async (c: Context<AppEnv>, next: Next): Promise<Response | void> => {
|
|
16
|
+
const readMethod = isReadMethod(c.req.method)
|
|
17
|
+
const limiterName = readMethod ? ('publicApiRead' as const) : ('publicApiWrite' as const)
|
|
18
|
+
|
|
19
|
+
const seed = c.req.param('seed') ?? 'no-seed'
|
|
20
|
+
const key = `${getClientIp(c.req)}:${seed}:${limiterName}`
|
|
21
|
+
const result = await c.get('rateLimiters').getLimiter(limiterName).checkLimit(key)
|
|
22
|
+
|
|
23
|
+
if (!result.isAllowed) {
|
|
24
|
+
return publicProblem(c, {
|
|
25
|
+
type: 'rate-limit-exceeded',
|
|
26
|
+
title: 'Too Many Requests',
|
|
27
|
+
status: 429,
|
|
28
|
+
detail: 'Too many requests',
|
|
29
|
+
})
|
|
30
|
+
}
|
|
31
|
+
|
|
32
|
+
await next()
|
|
33
|
+
}
|
|
34
|
+
}
|
package/src/public/read-list.ts
CHANGED
|
@@ -1,50 +1,54 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
import {
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
const
|
|
21
|
-
|
|
22
|
-
const
|
|
23
|
-
const
|
|
24
|
-
const
|
|
25
|
-
const
|
|
26
|
-
const
|
|
27
|
-
const
|
|
28
|
-
|
|
29
|
-
const
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
data,
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
1
|
+
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
+
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
+
// See LICENSE in the repository root for license terms.
|
|
4
|
+
|
|
5
|
+
import type { Seed, ContentRepository } from '@beechcms/core'
|
|
6
|
+
import { cleanStr } from '../shared/query-utils'
|
|
7
|
+
import { toFlatPublicEntry } from './entry-projection'
|
|
8
|
+
import { buildPublicListMeta } from './response-builder'
|
|
9
|
+
import { parsePublicFilter, parsePublicPagination, parseLatestCount, toEngineFilters } from './query-builder'
|
|
10
|
+
|
|
11
|
+
type ReadListInput = {
|
|
12
|
+
seed: Seed
|
|
13
|
+
seedSlug: string
|
|
14
|
+
repository: ContentRepository
|
|
15
|
+
query: Record<string, string | undefined>
|
|
16
|
+
publishedOnly: boolean
|
|
17
|
+
}
|
|
18
|
+
|
|
19
|
+
export async function readListEntries(input: ReadListInput) {
|
|
20
|
+
const { seed, seedSlug, repository, query, publishedOnly } = input
|
|
21
|
+
|
|
22
|
+
const parsedFilter = parsePublicFilter(query.filter)
|
|
23
|
+
const allMode = cleanStr(query.all)?.toLowerCase() === 'true'
|
|
24
|
+
const latestMode = cleanStr(query.latest) !== null
|
|
25
|
+
const latestCount = latestMode ? parseLatestCount(query.latest ?? '') : null
|
|
26
|
+
const pagination = allMode ? { page: 1, limit: 100 } : parsePublicPagination(query)
|
|
27
|
+
const offset = (pagination.page - 1) * pagination.limit
|
|
28
|
+
const search = cleanStr(query.search) ?? ''
|
|
29
|
+
const engineFilters = toEngineFilters(seed, parsedFilter)
|
|
30
|
+
const sortBy = cleanStr(query.orderBy) ?? 'created_at'
|
|
31
|
+
const sortDir = (cleanStr(query.orderDir) ?? 'desc').toLowerCase() === 'asc' ? 'ASC' : 'DESC'
|
|
32
|
+
|
|
33
|
+
const { items, total } = await repository.findMany(seed, {
|
|
34
|
+
filters: engineFilters,
|
|
35
|
+
search: search || undefined,
|
|
36
|
+
status: publishedOnly ? 'published' : null,
|
|
37
|
+
pagination: {
|
|
38
|
+
limit: latestMode ? (latestCount ?? 10) : pagination.limit,
|
|
39
|
+
offset: latestMode ? 0 : offset,
|
|
40
|
+
},
|
|
41
|
+
orderBy: latestMode ? { column: 'created_at', dir: 'DESC' } : { column: sortBy, dir: sortDir },
|
|
42
|
+
})
|
|
43
|
+
|
|
44
|
+
const data = items.map(item => toFlatPublicEntry(item, seed, query.fields))
|
|
45
|
+
|
|
46
|
+
if (latestMode) {
|
|
47
|
+
return { data, meta: { total, returned: data.length, seed: seedSlug } }
|
|
48
|
+
}
|
|
49
|
+
|
|
50
|
+
return {
|
|
51
|
+
data,
|
|
52
|
+
meta: buildPublicListMeta({ total, page: pagination.page, limit: pagination.limit, returned: data.length, seed: seedSlug }),
|
|
53
|
+
}
|
|
54
|
+
}
|
|
@@ -1,44 +1,48 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
type
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
export
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
ok:
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
}
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
}
|
|
1
|
+
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
+
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
+
// See LICENSE in the repository root for license terms.
|
|
4
|
+
|
|
5
|
+
import { EntryNotFoundError } from '@beechcms/core'
|
|
6
|
+
import type { Seed, ContentRepository } from '@beechcms/core'
|
|
7
|
+
import { toFlatPublicEntry } from './entry-projection'
|
|
8
|
+
import { buildPublicSingleMeta } from './response-builder'
|
|
9
|
+
|
|
10
|
+
type ReadSingleInput = {
|
|
11
|
+
seed: Seed
|
|
12
|
+
seedSlug: string
|
|
13
|
+
repository: ContentRepository
|
|
14
|
+
id: string | null
|
|
15
|
+
slug: string | null
|
|
16
|
+
publishedOnly: boolean
|
|
17
|
+
fieldsParam?: string
|
|
18
|
+
}
|
|
19
|
+
|
|
20
|
+
export type ReadSingleResult =
|
|
21
|
+
| { ok: true; data: Record<string, unknown>; meta: { seed: string } }
|
|
22
|
+
| { ok: false; detail: string }
|
|
23
|
+
|
|
24
|
+
export async function readSingleEntry(input: ReadSingleInput): Promise<ReadSingleResult> {
|
|
25
|
+
const { seed, seedSlug, repository, id, slug, publishedOnly, fieldsParam } = input
|
|
26
|
+
const label = id ?? slug!
|
|
27
|
+
|
|
28
|
+
try {
|
|
29
|
+
const entry = id
|
|
30
|
+
? await repository.findById(seed, id)
|
|
31
|
+
: await repository.findBySlug(seed, slug!)
|
|
32
|
+
|
|
33
|
+
if (publishedOnly && entry.status !== 'published') {
|
|
34
|
+
return { ok: false, detail: `Entry '${label}' not found or not published.` }
|
|
35
|
+
}
|
|
36
|
+
|
|
37
|
+
return {
|
|
38
|
+
ok: true,
|
|
39
|
+
data: toFlatPublicEntry(entry, seed, fieldsParam),
|
|
40
|
+
meta: buildPublicSingleMeta(seedSlug),
|
|
41
|
+
}
|
|
42
|
+
} catch (error) {
|
|
43
|
+
if (error instanceof EntryNotFoundError) {
|
|
44
|
+
return { ok: false, detail: `Entry '${label}' not found for content type '${seedSlug}'.` }
|
|
45
|
+
}
|
|
46
|
+
throw error
|
|
47
|
+
}
|
|
48
|
+
}
|
|
@@ -1,26 +1,30 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
1
|
+
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
+
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
+
// See LICENSE in the repository root for license terms.
|
|
4
|
+
|
|
5
|
+
/**
|
|
6
|
+
* Helper meta per risposta lista Public API.
|
|
7
|
+
*/
|
|
8
|
+
export function buildPublicListMeta(input: {
|
|
9
|
+
total: number
|
|
10
|
+
page: number
|
|
11
|
+
limit: number
|
|
12
|
+
returned: number
|
|
13
|
+
seed: string
|
|
14
|
+
}) {
|
|
15
|
+
return {
|
|
16
|
+
total: input.total,
|
|
17
|
+
page: input.page,
|
|
18
|
+
limit: input.limit,
|
|
19
|
+
returned: input.returned,
|
|
20
|
+
seed: input.seed,
|
|
21
|
+
}
|
|
22
|
+
}
|
|
23
|
+
|
|
24
|
+
/**
|
|
25
|
+
* Helper meta per risposta singolo elemento Public API.
|
|
26
|
+
*/
|
|
27
|
+
export function buildPublicSingleMeta(seed: string) {
|
|
28
|
+
return { seed }
|
|
29
|
+
}
|
|
30
|
+
|