@beechcms/api 0.5.0 → 0.6.0-preview.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (225) hide show
  1. package/assets/dashboard/BeechLogo.svg +18 -18
  2. package/assets/dashboard/BeechLogoLIght.svg +48 -48
  3. package/assets/dashboard/Searching.svg +1 -0
  4. package/assets/dashboard/assets/chart-BrJFdsGZ.js +39 -0
  5. package/assets/dashboard/assets/index-CIaoMxuB.css +1 -0
  6. package/assets/dashboard/assets/index-wTKgygsg.js +636 -0
  7. package/assets/dashboard/assets/pie-chart-recharts-BEaE1FOE.js +1 -0
  8. package/assets/dashboard/assets/timeseries-chart-recharts-DmWM6imF.js +1 -0
  9. package/assets/dashboard/beechLogoDark.svg +48 -48
  10. package/assets/dashboard/index.html +18 -18
  11. package/assets/dashboard/noResult.svg +43 -0
  12. package/assets/dashboard/sol.svg +3 -3
  13. package/assets/dashboard/undraw_enter_nwx3.svg +36 -36
  14. package/assets/dashboard/working.svg +1 -0
  15. package/migrations/0000_v040_base.sql +265 -238
  16. package/migrations/0029_automations.sql +14 -14
  17. package/migrations/0030_test_seeds.sql +125 -125
  18. package/package.json +13 -9
  19. package/src/auth/{in-memory-hash-provider.ts → __fixtures__/in-memory-hash-provider.ts} +17 -13
  20. package/src/auth/{static-token-service.ts → __fixtures__/static-token-service.ts} +22 -18
  21. package/src/auth/bcrypt-hash-provider.ts +24 -20
  22. package/src/auth/constants.ts +14 -10
  23. package/src/auth/generate-refresh-token.test.ts +23 -19
  24. package/src/auth/hash-provider.test.ts +55 -46
  25. package/src/auth/jose-token-service.ts +62 -55
  26. package/src/auth/jwt-claims-passthrough.test.ts +87 -0
  27. package/src/auth/login.test.ts +100 -92
  28. package/src/auth/login.ts +78 -74
  29. package/src/auth/refresh.ts +11 -5
  30. package/src/auth/token-service.test.ts +90 -82
  31. package/src/factory.ts +370 -347
  32. package/src/features/automations/__tests__/action-executors.test.ts +255 -268
  33. package/src/features/automations/__tests__/automation-runner.test.ts +196 -192
  34. package/src/features/automations/__tests__/automation-runner.utils.test.ts +60 -56
  35. package/src/features/automations/__tests__/automations.handler.test.ts +264 -260
  36. package/src/features/automations/__tests__/automations.repository.test.ts +163 -159
  37. package/src/features/automations/__tests__/automations.schema.test.ts +224 -134
  38. package/src/features/automations/__tests__/context-resolver.test.ts +126 -122
  39. package/src/features/automations/__tests__/cron-runner.test.ts +267 -263
  40. package/src/features/automations/__tests__/cron-runner.utils.test.ts +144 -140
  41. package/src/features/automations/__tests__/set-variable.executor.test.ts +383 -306
  42. package/src/features/automations/__tests__/template-grammar.test.ts +308 -304
  43. package/src/features/automations/__tests__/webhook.executor.test.ts +142 -0
  44. package/src/features/automations/__tests__/when-evaluator.test.ts +274 -270
  45. package/src/features/automations/__tests__/when-pushdown.test.ts +281 -277
  46. package/src/features/automations/action-executors/create-entry.executor.ts +27 -23
  47. package/src/features/automations/action-executors/edit-field.executor.ts +26 -22
  48. package/src/features/automations/action-executors/index.ts +37 -33
  49. package/src/features/automations/action-executors/send-mail.executor.ts +53 -42
  50. package/src/features/automations/action-executors/set-variable.executor.ts +159 -146
  51. package/src/features/automations/action-executors/webhook.executor.ts +67 -25
  52. package/src/features/automations/automation-runner.ts +85 -81
  53. package/src/features/automations/automation-runner.utils.ts +47 -43
  54. package/src/features/automations/automations.handler.ts +197 -193
  55. package/src/features/automations/automations.schema.ts +177 -160
  56. package/src/features/automations/context-resolver.ts +152 -148
  57. package/src/features/automations/cron-runner.ts +140 -136
  58. package/src/features/automations/cron-runner.utils.ts +44 -40
  59. package/src/features/automations/filter-translation.ts +46 -42
  60. package/src/features/automations/index.ts +16 -12
  61. package/src/features/automations/template-grammar.ts +245 -241
  62. package/src/features/automations/var-access-resolver.ts +140 -136
  63. package/src/features/automations/when-evaluator.ts +87 -83
  64. package/src/features/automations/when-pushdown.ts +57 -53
  65. package/src/features/backrefs/__tests__/backrefs.handler.test.ts +359 -0
  66. package/src/features/backrefs/backrefs.handler.ts +168 -0
  67. package/src/features/backrefs/d1-backref.repository.ts +84 -0
  68. package/src/features/backrefs/index.ts +5 -0
  69. package/src/features/content/constants.ts +16 -10
  70. package/src/features/content/handlers/bulk.handler.ts +185 -0
  71. package/src/features/content/handlers/create.ts +129 -165
  72. package/src/features/content/handlers/delete.ts +62 -87
  73. package/src/features/content/handlers/facets.ts +49 -45
  74. package/src/features/content/handlers/get.ts +120 -116
  75. package/src/features/content/handlers/helpers.test.ts +180 -0
  76. package/src/features/content/handlers/helpers.ts +93 -0
  77. package/src/features/content/handlers/list.ts +174 -88
  78. package/src/features/content/handlers/update.ts +174 -219
  79. package/src/features/content/index.ts +26 -20
  80. package/src/features/dashboard-layout/__tests__/dashboard-layout.handler.test.ts +388 -0
  81. package/src/features/dashboard-layout/dashboard-layout.handler.ts +206 -0
  82. package/src/features/dashboard-layout/index.ts +5 -0
  83. package/src/features/draft/draft.handler.ts +195 -170
  84. package/src/features/draft/draft.middleware.ts +66 -62
  85. package/src/features/draft/index.ts +5 -1
  86. package/src/features/email/email.provider.ts +42 -38
  87. package/src/features/email/email.service.ts +98 -93
  88. package/src/features/email/email.types.ts +119 -108
  89. package/src/features/email/index.ts +33 -29
  90. package/src/features/email/providers/resend.ts +67 -63
  91. package/src/features/email/providers/smtp.ts +55 -0
  92. package/src/features/email/templates/automation-mail.ts +19 -15
  93. package/src/features/email/templates/password-changed.ts +63 -59
  94. package/src/features/email/templates/password-reset.ts +68 -64
  95. package/src/features/email/templates/shell.ts +96 -92
  96. package/src/features/notifications/index.ts +5 -1
  97. package/src/features/notifications/notifications.handler.ts +105 -101
  98. package/src/features/password-reset/index.ts +19 -15
  99. package/src/features/password-reset/request.ts +92 -82
  100. package/src/features/password-reset/reset.ts +102 -92
  101. package/src/features/rotate-field/index.ts +5 -1
  102. package/src/features/rotate-field/rotate-field.handler.ts +132 -128
  103. package/src/features/rotate-field/rotate-field.schema.ts +17 -13
  104. package/src/features/schema/schema.handler.ts +131 -16
  105. package/src/features/seeds/index.ts +5 -0
  106. package/src/features/seeds/seeds.handler.test.ts +1199 -0
  107. package/src/features/seeds/seeds.handler.ts +558 -0
  108. package/src/features/settings/__tests__/settings.handler.test.ts +555 -0
  109. package/src/features/settings/settings.handler.ts +392 -302
  110. package/src/features/setup/index.ts +288 -91
  111. package/src/features/stats/index.ts +5 -1
  112. package/src/features/stats/stats.handler.ts +420 -430
  113. package/src/features/webhooks/index.ts +63 -0
  114. package/src/index.ts +65 -56
  115. package/src/media-utils.ts +82 -78
  116. package/src/middleware/auth-providers.middleware.test.ts +85 -0
  117. package/src/middleware/auth-providers.middleware.ts +45 -32
  118. package/src/middleware/observability.middleware.test.ts +93 -0
  119. package/src/middleware/observability.middleware.ts +70 -52
  120. package/src/middleware/rate-limit.middleware.ts +45 -41
  121. package/src/middleware/repository.middleware.ts +117 -91
  122. package/src/middleware/seed-registry.middleware.test.ts +97 -0
  123. package/src/middleware/seed-registry.middleware.ts +21 -0
  124. package/src/middleware/storage.middleware.ts +25 -21
  125. package/src/middleware.ts +45 -47
  126. package/src/public/access-policy.ts +27 -23
  127. package/src/public/api-key-middleware.ts +57 -53
  128. package/src/public/cache-utils.ts +38 -34
  129. package/src/public/entry-projection.ts +46 -42
  130. package/src/public/idempotency.ts +23 -19
  131. package/src/public/index.ts +16 -12
  132. package/src/public/problem-details.ts +124 -53
  133. package/src/public/public-add.ts +114 -110
  134. package/src/public/public-edit.ts +163 -159
  135. package/src/public/public-errors.ts +19 -15
  136. package/src/public/public-read.ts +63 -59
  137. package/src/public/public-routes.ts +88 -84
  138. package/src/public/query-builder.test.ts +224 -220
  139. package/src/public/query-builder.ts +156 -152
  140. package/src/public/rate-limit-middleware.ts +34 -30
  141. package/src/public/read-list.ts +54 -50
  142. package/src/public/read-single.ts +48 -44
  143. package/src/public/response-builder.ts +30 -26
  144. package/src/public/sanitize.ts +69 -65
  145. package/src/public/slug-utils.ts +18 -14
  146. package/src/rate-limit/cloudflare-rate-limiter.test.ts +30 -26
  147. package/src/rate-limit/cloudflare-rate-limiter.ts +15 -11
  148. package/src/rate-limit/in-memory-rate-limiter.test.ts +37 -33
  149. package/src/rate-limit/in-memory-rate-limiter.ts +17 -13
  150. package/src/rate-limit/no-op-rate-limiter.test.ts +22 -18
  151. package/src/rate-limit/no-op-rate-limiter.ts +11 -7
  152. package/src/search-utils.test.ts +211 -207
  153. package/src/search-utils.ts +213 -209
  154. package/src/search.ts +65 -61
  155. package/src/shared/apply-policies.test.ts +81 -77
  156. package/src/shared/apply-policies.ts +67 -63
  157. package/src/shared/automations.repository.d1.ts +150 -146
  158. package/src/shared/background-notification-service.test.ts +62 -58
  159. package/src/shared/background-notification-service.ts +52 -48
  160. package/src/shared/base.repository.d1.ts +32 -28
  161. package/src/shared/content-utils.test.ts +165 -161
  162. package/src/shared/content-utils.ts +86 -82
  163. package/src/shared/content.repository.d1.test.ts +507 -312
  164. package/src/shared/content.repository.d1.ts +851 -382
  165. package/src/shared/d1-activity-log.repository.test.ts +140 -136
  166. package/src/shared/d1-activity-log.repository.ts +105 -101
  167. package/src/shared/d1-activity-logger.test.ts +86 -82
  168. package/src/shared/d1-activity-logger.ts +67 -63
  169. package/src/shared/d1-analytics.repository.test.ts +78 -74
  170. package/src/shared/d1-analytics.repository.ts +85 -81
  171. package/src/shared/d1-content-scan.repository.test.ts +80 -76
  172. package/src/shared/d1-content-scan.repository.ts +37 -29
  173. package/src/shared/d1-notification.repository.test.ts +128 -124
  174. package/src/shared/d1-notification.repository.ts +118 -114
  175. package/src/shared/d1-password-reset-token.repository.test.ts +81 -77
  176. package/src/shared/d1-password-reset-token.repository.ts +56 -52
  177. package/src/shared/d1-search.repository.test.ts +87 -83
  178. package/src/shared/d1-search.repository.ts +88 -84
  179. package/src/shared/d1-session.repository.test.ts +125 -121
  180. package/src/shared/d1-session.repository.ts +102 -98
  181. package/src/shared/d1-setup-checklist.repository.ts +36 -0
  182. package/src/shared/d1-user.repository.test.ts +151 -147
  183. package/src/shared/d1-user.repository.ts +119 -109
  184. package/src/shared/d1-widget.repository.test.ts +267 -217
  185. package/src/shared/d1-widget.repository.ts +385 -337
  186. package/src/shared/dashboard-layout.repository.d1.test.ts +135 -0
  187. package/src/shared/dashboard-layout.repository.d1.ts +58 -0
  188. package/src/shared/demo-data-sql.ts +216 -0
  189. package/src/shared/demo-data.repository.d1.ts +20 -0
  190. package/src/shared/execution-context-scheduler.ts +13 -9
  191. package/src/shared/fixed-clock.ts +25 -21
  192. package/src/shared/fts-sync.ts +8 -4
  193. package/src/shared/idempotency.repository.d1.test.ts +83 -79
  194. package/src/shared/idempotency.repository.d1.ts +60 -56
  195. package/src/shared/in-memory-activity-logger.ts +19 -15
  196. package/src/shared/in-memory-notification-service.ts +19 -15
  197. package/src/shared/in-memory-seed.repository.ts +58 -0
  198. package/src/shared/media.repository.d1.test.ts +107 -103
  199. package/src/shared/media.repository.d1.ts +68 -64
  200. package/src/shared/qstash-notification-service.test.ts +67 -0
  201. package/src/shared/qstash-notification-service.ts +55 -0
  202. package/src/shared/query-utils.ts +141 -137
  203. package/src/shared/request-utils.ts +26 -22
  204. package/src/shared/schema-mutator.d1.test.ts +142 -0
  205. package/src/shared/schema-mutator.d1.ts +64 -0
  206. package/src/shared/seed-layout.repository.d1.test.ts +114 -0
  207. package/src/shared/seed-layout.repository.d1.ts +62 -0
  208. package/src/shared/seed-registry-cache.test.ts +68 -0
  209. package/src/shared/seed-registry-cache.ts +49 -0
  210. package/src/shared/seed.repository.d1.test.ts +143 -0
  211. package/src/shared/seed.repository.d1.ts +98 -0
  212. package/src/shared/sequential-id-generator.ts +33 -22
  213. package/src/shared/site-settings.repository.d1.ts +53 -0
  214. package/src/shared/storage/factory.ts +41 -40
  215. package/src/shared/storage/s3-bucket.ts +195 -163
  216. package/src/shared/storage-utils.ts +40 -36
  217. package/src/shared/system-stats.repository.d1.test.ts +58 -54
  218. package/src/shared/system-stats.repository.d1.ts +48 -44
  219. package/src/types.ts +90 -67
  220. package/src/upload.ts +198 -187
  221. package/src/widget.test.ts +85 -0
  222. package/src/widget.ts +251 -208
  223. package/assets/dashboard/assets/index-B1mUfgiK.css +0 -1
  224. package/assets/dashboard/assets/index-CHxxc_id.js +0 -629
  225. package/src/shared/storage/r2-binding-bucket.ts +0 -81
@@ -1,152 +1,156 @@
1
- import type { Seed, FilterGroup, FilterOperator, FilterType, BranchType } from '@beechcms/core'
2
- import { parsePositiveInt } from '../shared/query-utils'
3
-
4
- export type PublicQueryInput = {
5
- page?: string
6
- limit?: string
7
- latest?: string
8
- }
9
-
10
- export type PublicFilterLogic = 'AND' | 'OR'
11
- export type PublicFilterOperator =
12
- | 'eq'
13
- | 'neq'
14
- | 'gt'
15
- | 'gte'
16
- | 'lt'
17
- | 'lte'
18
- | 'contains'
19
- | 'not_contains'
20
- | 'starts_with'
21
- | 'ends_with'
22
- | 'is_empty'
23
- | 'is_not_empty'
24
- | 'in'
25
- | 'not_in'
26
- | 'has_tag'
27
- | 'has_any_tag'
28
- | 'has_all_tags'
29
-
30
- export type PublicFilterCondition = {
31
- field: string
32
- op: PublicFilterOperator
33
- value?: unknown
34
- }
35
-
36
- export type ParsedPublicFilter = {
37
- where: PublicFilterCondition[]
38
- logic: PublicFilterLogic
39
- }
40
-
41
- const PUBLIC_FILTER_OPERATORS = new Set<PublicFilterOperator>([
42
- 'eq', 'neq', 'gt', 'gte', 'lt', 'lte',
43
- 'contains', 'not_contains', 'starts_with', 'ends_with',
44
- 'is_empty', 'is_not_empty', 'in', 'not_in',
45
- 'has_tag', 'has_any_tag', 'has_all_tags',
46
- ])
47
-
48
- function asString(value: unknown): string | null {
49
- return typeof value === 'string' && value.trim() ? value.trim() : null
50
- }
51
-
52
- function validateLogic(logicRaw: unknown): PublicFilterLogic {
53
- if (logicRaw === undefined) return 'AND'
54
- if (typeof logicRaw !== 'string') throw new TypeError("Invalid filter: 'logic' must be 'AND' or 'OR'")
55
- const normalized = logicRaw.toUpperCase()
56
- if (normalized !== 'AND' && normalized !== 'OR') throw new TypeError("Invalid filter: 'logic' must be 'AND' or 'OR'")
57
- return normalized
58
- }
59
-
60
- function parseWhereCondition(raw: unknown): PublicFilterCondition | null {
61
- if (!raw || typeof raw !== 'object') return null
62
- const maybe = raw as Record<string, unknown>
63
- const field = asString(maybe.field)
64
- const opRaw = asString(maybe.op)
65
- if (!field || !opRaw || !PUBLIC_FILTER_OPERATORS.has(opRaw as PublicFilterOperator)) {
66
- throw new TypeError(`Invalid filter: unknown operator '${opRaw ?? 'undefined'}'`)
67
- }
68
- return { field, op: opRaw as PublicFilterOperator, value: maybe.value }
69
- }
70
-
71
- export function parsePublicFilter(raw: string | undefined): ParsedPublicFilter | null {
72
- if (!raw) return null
73
- let parsed: unknown
74
- try {
75
- parsed = JSON.parse(raw)
76
- } catch {
77
- throw new TypeError('Invalid filter: malformed JSON')
78
- }
79
- if (!parsed || typeof parsed !== 'object') throw new TypeError('Invalid filter: object expected')
80
- const filterObj = parsed as Record<string, unknown>
81
- const logic = validateLogic(filterObj.logic)
82
- if (!Array.isArray(filterObj.where)) throw new TypeError("Invalid filter: 'where' must be an array")
83
- const where = filterObj.where
84
- .map(parseWhereCondition)
85
- .filter((item): item is PublicFilterCondition => item !== null)
86
- return { where, logic }
87
- }
88
-
89
- const SYSTEM_COLUMNS = new Set(['id', 'slug', 'status', 'created_at', 'updated_at'])
90
-
91
- function mapBranchToFilterType(type: BranchType): FilterType {
92
- switch (type) {
93
- case 'richtext':
94
- case 'file':
95
- return 'text'
96
- case 'json':
97
- return 'json'
98
- case 'tags':
99
- return 'tags'
100
- case 'number':
101
- return 'number'
102
- case 'boolean':
103
- return 'boolean'
104
- case 'date':
105
- return 'date'
106
- case 'text':
107
- default:
108
- return 'text'
109
- }
110
- }
111
-
112
- /**
113
- * Trasforma il filtro pubblico in FilterGroup[] per il Repository.
114
- * Zero SQL: la logica di generazione query risiede esclusivamente nel Repository/Engine core.
115
- */
116
- export function toEngineFilters(seed: Seed, parsedFilter: ParsedPublicFilter | null): FilterGroup[] {
117
- if (!parsedFilter || parsedFilter.where.length === 0) return []
118
-
119
- // Note: Repository currently joins groups with AND.
120
- // Public API supports logic: OR but the core engine currently defaults to AND for top-level groups.
121
- // We map each condition to a group for maximum compatibility with the engine's buildFilterCondition.
122
- return parsedFilter.where.map((cond) => {
123
- const branch = seed.branches.find(b => b.alias === cond.field)
124
- const type: FilterType = branch
125
- ? mapBranchToFilterType(branch.type)
126
- : (SYSTEM_COLUMNS.has(cond.field) ? 'system' : 'text')
127
-
128
- return {
129
- column: cond.field,
130
- type,
131
- conditions: [{
132
- op: cond.op as FilterOperator,
133
- value: cond.value as any
134
- }]
135
- }
136
- })
137
- }
138
-
139
- export function parsePublicPagination(input: PublicQueryInput): { page: number; limit: number } {
140
- const page = parsePositiveInt(input.page, 1)
141
- const limit = Math.min(parsePositiveInt(input.limit, 25), 100)
142
- return { page, limit }
143
- }
144
-
145
- export function parseLatestCount(latest: string | undefined): number {
146
- if (!latest) return 10
147
- const raw = Number.parseInt(latest, 10)
148
- const parsed = Number.isNaN(raw) ? 10 : raw
149
- if (parsed < 1) return 1
150
- if (parsed > 100) return 100
151
- return parsed
152
- }
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ import type { Seed, FilterGroup, FilterOperator, FilterType, BranchType } from '@beechcms/core'
6
+ import { parsePositiveInt } from '../shared/query-utils'
7
+
8
+ export type PublicQueryInput = {
9
+ page?: string
10
+ limit?: string
11
+ latest?: string
12
+ }
13
+
14
+ export type PublicFilterLogic = 'AND' | 'OR'
15
+ export type PublicFilterOperator =
16
+ | 'eq'
17
+ | 'neq'
18
+ | 'gt'
19
+ | 'gte'
20
+ | 'lt'
21
+ | 'lte'
22
+ | 'contains'
23
+ | 'not_contains'
24
+ | 'starts_with'
25
+ | 'ends_with'
26
+ | 'is_empty'
27
+ | 'is_not_empty'
28
+ | 'in'
29
+ | 'not_in'
30
+ | 'has_tag'
31
+ | 'has_any_tag'
32
+ | 'has_all_tags'
33
+
34
+ export type PublicFilterCondition = {
35
+ field: string
36
+ op: PublicFilterOperator
37
+ value?: unknown
38
+ }
39
+
40
+ export type ParsedPublicFilter = {
41
+ where: PublicFilterCondition[]
42
+ logic: PublicFilterLogic
43
+ }
44
+
45
+ const PUBLIC_FILTER_OPERATORS = new Set<PublicFilterOperator>([
46
+ 'eq', 'neq', 'gt', 'gte', 'lt', 'lte',
47
+ 'contains', 'not_contains', 'starts_with', 'ends_with',
48
+ 'is_empty', 'is_not_empty', 'in', 'not_in',
49
+ 'has_tag', 'has_any_tag', 'has_all_tags',
50
+ ])
51
+
52
+ function asString(value: unknown): string | null {
53
+ return typeof value === 'string' && value.trim() ? value.trim() : null
54
+ }
55
+
56
+ function validateLogic(logicRaw: unknown): PublicFilterLogic {
57
+ if (logicRaw === undefined) return 'AND'
58
+ if (typeof logicRaw !== 'string') throw new TypeError("Invalid filter: 'logic' must be 'AND' or 'OR'")
59
+ const normalized = logicRaw.toUpperCase()
60
+ if (normalized !== 'AND' && normalized !== 'OR') throw new TypeError("Invalid filter: 'logic' must be 'AND' or 'OR'")
61
+ return normalized
62
+ }
63
+
64
+ function parseWhereCondition(raw: unknown): PublicFilterCondition | null {
65
+ if (!raw || typeof raw !== 'object') return null
66
+ const maybe = raw as Record<string, unknown>
67
+ const field = asString(maybe.field)
68
+ const opRaw = asString(maybe.op)
69
+ if (!field || !opRaw || !PUBLIC_FILTER_OPERATORS.has(opRaw as PublicFilterOperator)) {
70
+ throw new TypeError(`Invalid filter: unknown operator '${opRaw ?? 'undefined'}'`)
71
+ }
72
+ return { field, op: opRaw as PublicFilterOperator, value: maybe.value }
73
+ }
74
+
75
+ export function parsePublicFilter(raw: string | undefined): ParsedPublicFilter | null {
76
+ if (!raw) return null
77
+ let parsed: unknown
78
+ try {
79
+ parsed = JSON.parse(raw)
80
+ } catch {
81
+ throw new TypeError('Invalid filter: malformed JSON')
82
+ }
83
+ if (!parsed || typeof parsed !== 'object') throw new TypeError('Invalid filter: object expected')
84
+ const filterObj = parsed as Record<string, unknown>
85
+ const logic = validateLogic(filterObj.logic)
86
+ if (!Array.isArray(filterObj.where)) throw new TypeError("Invalid filter: 'where' must be an array")
87
+ const where = filterObj.where
88
+ .map(parseWhereCondition)
89
+ .filter((item): item is PublicFilterCondition => item !== null)
90
+ return { where, logic }
91
+ }
92
+
93
+ const SYSTEM_COLUMNS = new Set(['id', 'slug', 'status', 'created_at', 'updated_at'])
94
+
95
+ function mapBranchToFilterType(type: BranchType): FilterType {
96
+ switch (type) {
97
+ case 'richtext':
98
+ case 'file':
99
+ return 'text'
100
+ case 'json':
101
+ return 'json'
102
+ case 'tags':
103
+ return 'tags'
104
+ case 'number':
105
+ return 'number'
106
+ case 'boolean':
107
+ return 'boolean'
108
+ case 'date':
109
+ return 'date'
110
+ case 'text':
111
+ default:
112
+ return 'text'
113
+ }
114
+ }
115
+
116
+ /**
117
+ * Trasforma il filtro pubblico in FilterGroup[] per il Repository.
118
+ * Zero SQL: la logica di generazione query risiede esclusivamente nel Repository/Engine core.
119
+ */
120
+ export function toEngineFilters(seed: Seed, parsedFilter: ParsedPublicFilter | null): FilterGroup[] {
121
+ if (!parsedFilter || parsedFilter.where.length === 0) return []
122
+
123
+ // Note: Repository currently joins groups with AND.
124
+ // Public API supports logic: OR but the core engine currently defaults to AND for top-level groups.
125
+ // We map each condition to a group for maximum compatibility with the engine's buildFilterCondition.
126
+ return parsedFilter.where.map((cond) => {
127
+ const branch = seed.branches.find(b => b.alias === cond.field)
128
+ const type: FilterType = branch
129
+ ? mapBranchToFilterType(branch.type)
130
+ : (SYSTEM_COLUMNS.has(cond.field) ? 'system' : 'text')
131
+
132
+ return {
133
+ column: cond.field,
134
+ type,
135
+ conditions: [{
136
+ op: cond.op as FilterOperator,
137
+ value: cond.value as any
138
+ }]
139
+ }
140
+ })
141
+ }
142
+
143
+ export function parsePublicPagination(input: PublicQueryInput): { page: number; limit: number } {
144
+ const page = parsePositiveInt(input.page, 1)
145
+ const limit = Math.min(parsePositiveInt(input.limit, 25), 100)
146
+ return { page, limit }
147
+ }
148
+
149
+ export function parseLatestCount(latest: string | undefined): number {
150
+ if (!latest) return 10
151
+ const raw = Number.parseInt(latest, 10)
152
+ const parsed = Number.isNaN(raw) ? 10 : raw
153
+ if (parsed < 1) return 1
154
+ if (parsed > 100) return 100
155
+ return parsed
156
+ }
@@ -1,30 +1,34 @@
1
- import type { Context, Next } from 'hono'
2
- import type { AppEnv } from '../types'
3
- import { publicProblem } from './problem-details'
4
- import { getClientIp } from '../shared/request-utils'
5
-
6
- function isReadMethod(method: string): boolean {
7
- return method === 'GET' || method === 'HEAD' || method === 'OPTIONS'
8
- }
9
-
10
- export function publicRateLimitMiddleware() {
11
- return async (c: Context<AppEnv>, next: Next): Promise<Response | void> => {
12
- const readMethod = isReadMethod(c.req.method)
13
- const limiterName = readMethod ? ('publicApiRead' as const) : ('publicApiWrite' as const)
14
-
15
- const seed = c.req.param('seed') ?? 'no-seed'
16
- const key = `${getClientIp(c.req)}:${seed}:${limiterName}`
17
- const result = await c.get('rateLimiters').getLimiter(limiterName).checkLimit(key)
18
-
19
- if (!result.isAllowed) {
20
- return publicProblem(c, {
21
- type: 'rate-limit-exceeded',
22
- title: 'Too Many Requests',
23
- status: 429,
24
- detail: 'Too many requests',
25
- })
26
- }
27
-
28
- await next()
29
- }
30
- }
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ import type { Context, Next } from 'hono'
6
+ import type { AppEnv } from '../types'
7
+ import { publicProblem } from './problem-details'
8
+ import { getClientIp } from '../shared/request-utils'
9
+
10
+ function isReadMethod(method: string): boolean {
11
+ return method === 'GET' || method === 'HEAD' || method === 'OPTIONS'
12
+ }
13
+
14
+ export function publicRateLimitMiddleware() {
15
+ return async (c: Context<AppEnv>, next: Next): Promise<Response | void> => {
16
+ const readMethod = isReadMethod(c.req.method)
17
+ const limiterName = readMethod ? ('publicApiRead' as const) : ('publicApiWrite' as const)
18
+
19
+ const seed = c.req.param('seed') ?? 'no-seed'
20
+ const key = `${getClientIp(c.req)}:${seed}:${limiterName}`
21
+ const result = await c.get('rateLimiters').getLimiter(limiterName).checkLimit(key)
22
+
23
+ if (!result.isAllowed) {
24
+ return publicProblem(c, {
25
+ type: 'rate-limit-exceeded',
26
+ title: 'Too Many Requests',
27
+ status: 429,
28
+ detail: 'Too many requests',
29
+ })
30
+ }
31
+
32
+ await next()
33
+ }
34
+ }
@@ -1,50 +1,54 @@
1
- import type { Seed, ContentRepository } from '@beechcms/core'
2
- import { cleanStr } from '../shared/query-utils'
3
- import { toFlatPublicEntry } from './entry-projection'
4
- import { buildPublicListMeta } from './response-builder'
5
- import { parsePublicFilter, parsePublicPagination, parseLatestCount, toEngineFilters } from './query-builder'
6
-
7
- type ReadListInput = {
8
- seed: Seed
9
- seedSlug: string
10
- repository: ContentRepository
11
- query: Record<string, string | undefined>
12
- publishedOnly: boolean
13
- }
14
-
15
- export async function readListEntries(input: ReadListInput) {
16
- const { seed, seedSlug, repository, query, publishedOnly } = input
17
-
18
- const parsedFilter = parsePublicFilter(query.filter)
19
- const allMode = cleanStr(query.all)?.toLowerCase() === 'true'
20
- const latestMode = cleanStr(query.latest) !== null
21
- const latestCount = latestMode ? parseLatestCount(query.latest ?? '') : null
22
- const pagination = allMode ? { page: 1, limit: 100 } : parsePublicPagination(query)
23
- const offset = (pagination.page - 1) * pagination.limit
24
- const search = cleanStr(query.search) ?? ''
25
- const engineFilters = toEngineFilters(seed, parsedFilter)
26
- const sortBy = cleanStr(query.orderBy) ?? 'created_at'
27
- const sortDir = (cleanStr(query.orderDir) ?? 'desc').toLowerCase() === 'asc' ? 'ASC' : 'DESC'
28
-
29
- const { items, total } = await repository.findMany(seed, {
30
- filters: engineFilters,
31
- search: search || undefined,
32
- status: publishedOnly ? 'published' : null,
33
- pagination: {
34
- limit: latestMode ? (latestCount ?? 10) : pagination.limit,
35
- offset: latestMode ? 0 : offset,
36
- },
37
- orderBy: latestMode ? { column: 'created_at', dir: 'DESC' } : { column: sortBy, dir: sortDir },
38
- })
39
-
40
- const data = items.map(item => toFlatPublicEntry(item, seed, query.fields))
41
-
42
- if (latestMode) {
43
- return { data, meta: { total, returned: data.length, seed: seedSlug } }
44
- }
45
-
46
- return {
47
- data,
48
- meta: buildPublicListMeta({ total, page: pagination.page, limit: pagination.limit, returned: data.length, seed: seedSlug }),
49
- }
50
- }
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ import type { Seed, ContentRepository } from '@beechcms/core'
6
+ import { cleanStr } from '../shared/query-utils'
7
+ import { toFlatPublicEntry } from './entry-projection'
8
+ import { buildPublicListMeta } from './response-builder'
9
+ import { parsePublicFilter, parsePublicPagination, parseLatestCount, toEngineFilters } from './query-builder'
10
+
11
+ type ReadListInput = {
12
+ seed: Seed
13
+ seedSlug: string
14
+ repository: ContentRepository
15
+ query: Record<string, string | undefined>
16
+ publishedOnly: boolean
17
+ }
18
+
19
+ export async function readListEntries(input: ReadListInput) {
20
+ const { seed, seedSlug, repository, query, publishedOnly } = input
21
+
22
+ const parsedFilter = parsePublicFilter(query.filter)
23
+ const allMode = cleanStr(query.all)?.toLowerCase() === 'true'
24
+ const latestMode = cleanStr(query.latest) !== null
25
+ const latestCount = latestMode ? parseLatestCount(query.latest ?? '') : null
26
+ const pagination = allMode ? { page: 1, limit: 100 } : parsePublicPagination(query)
27
+ const offset = (pagination.page - 1) * pagination.limit
28
+ const search = cleanStr(query.search) ?? ''
29
+ const engineFilters = toEngineFilters(seed, parsedFilter)
30
+ const sortBy = cleanStr(query.orderBy) ?? 'created_at'
31
+ const sortDir = (cleanStr(query.orderDir) ?? 'desc').toLowerCase() === 'asc' ? 'ASC' : 'DESC'
32
+
33
+ const { items, total } = await repository.findMany(seed, {
34
+ filters: engineFilters,
35
+ search: search || undefined,
36
+ status: publishedOnly ? 'published' : null,
37
+ pagination: {
38
+ limit: latestMode ? (latestCount ?? 10) : pagination.limit,
39
+ offset: latestMode ? 0 : offset,
40
+ },
41
+ orderBy: latestMode ? { column: 'created_at', dir: 'DESC' } : { column: sortBy, dir: sortDir },
42
+ })
43
+
44
+ const data = items.map(item => toFlatPublicEntry(item, seed, query.fields))
45
+
46
+ if (latestMode) {
47
+ return { data, meta: { total, returned: data.length, seed: seedSlug } }
48
+ }
49
+
50
+ return {
51
+ data,
52
+ meta: buildPublicListMeta({ total, page: pagination.page, limit: pagination.limit, returned: data.length, seed: seedSlug }),
53
+ }
54
+ }
@@ -1,44 +1,48 @@
1
- import { EntryNotFoundError } from '@beechcms/core'
2
- import type { Seed, ContentRepository } from '@beechcms/core'
3
- import { toFlatPublicEntry } from './entry-projection'
4
- import { buildPublicSingleMeta } from './response-builder'
5
-
6
- type ReadSingleInput = {
7
- seed: Seed
8
- seedSlug: string
9
- repository: ContentRepository
10
- id: string | null
11
- slug: string | null
12
- publishedOnly: boolean
13
- fieldsParam?: string
14
- }
15
-
16
- export type ReadSingleResult =
17
- | { ok: true; data: Record<string, unknown>; meta: { seed: string } }
18
- | { ok: false; detail: string }
19
-
20
- export async function readSingleEntry(input: ReadSingleInput): Promise<ReadSingleResult> {
21
- const { seed, seedSlug, repository, id, slug, publishedOnly, fieldsParam } = input
22
- const label = id ?? slug!
23
-
24
- try {
25
- const entry = id
26
- ? await repository.findById(seed, id)
27
- : await repository.findBySlug(seed, slug!)
28
-
29
- if (publishedOnly && entry.status !== 'published') {
30
- return { ok: false, detail: `Entry '${label}' not found or not published.` }
31
- }
32
-
33
- return {
34
- ok: true,
35
- data: toFlatPublicEntry(entry, seed, fieldsParam),
36
- meta: buildPublicSingleMeta(seedSlug),
37
- }
38
- } catch (error) {
39
- if (error instanceof EntryNotFoundError) {
40
- return { ok: false, detail: `Entry '${label}' not found for content type '${seedSlug}'.` }
41
- }
42
- throw error
43
- }
44
- }
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ import { EntryNotFoundError } from '@beechcms/core'
6
+ import type { Seed, ContentRepository } from '@beechcms/core'
7
+ import { toFlatPublicEntry } from './entry-projection'
8
+ import { buildPublicSingleMeta } from './response-builder'
9
+
10
+ type ReadSingleInput = {
11
+ seed: Seed
12
+ seedSlug: string
13
+ repository: ContentRepository
14
+ id: string | null
15
+ slug: string | null
16
+ publishedOnly: boolean
17
+ fieldsParam?: string
18
+ }
19
+
20
+ export type ReadSingleResult =
21
+ | { ok: true; data: Record<string, unknown>; meta: { seed: string } }
22
+ | { ok: false; detail: string }
23
+
24
+ export async function readSingleEntry(input: ReadSingleInput): Promise<ReadSingleResult> {
25
+ const { seed, seedSlug, repository, id, slug, publishedOnly, fieldsParam } = input
26
+ const label = id ?? slug!
27
+
28
+ try {
29
+ const entry = id
30
+ ? await repository.findById(seed, id)
31
+ : await repository.findBySlug(seed, slug!)
32
+
33
+ if (publishedOnly && entry.status !== 'published') {
34
+ return { ok: false, detail: `Entry '${label}' not found or not published.` }
35
+ }
36
+
37
+ return {
38
+ ok: true,
39
+ data: toFlatPublicEntry(entry, seed, fieldsParam),
40
+ meta: buildPublicSingleMeta(seedSlug),
41
+ }
42
+ } catch (error) {
43
+ if (error instanceof EntryNotFoundError) {
44
+ return { ok: false, detail: `Entry '${label}' not found for content type '${seedSlug}'.` }
45
+ }
46
+ throw error
47
+ }
48
+ }
@@ -1,26 +1,30 @@
1
- /**
2
- * Helper meta per risposta lista Public API.
3
- */
4
- export function buildPublicListMeta(input: {
5
- total: number
6
- page: number
7
- limit: number
8
- returned: number
9
- seed: string
10
- }) {
11
- return {
12
- total: input.total,
13
- page: input.page,
14
- limit: input.limit,
15
- returned: input.returned,
16
- seed: input.seed,
17
- }
18
- }
19
-
20
- /**
21
- * Helper meta per risposta singolo elemento Public API.
22
- */
23
- export function buildPublicSingleMeta(seed: string) {
24
- return { seed }
25
- }
26
-
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ /**
6
+ * Helper meta per risposta lista Public API.
7
+ */
8
+ export function buildPublicListMeta(input: {
9
+ total: number
10
+ page: number
11
+ limit: number
12
+ returned: number
13
+ seed: string
14
+ }) {
15
+ return {
16
+ total: input.total,
17
+ page: input.page,
18
+ limit: input.limit,
19
+ returned: input.returned,
20
+ seed: input.seed,
21
+ }
22
+ }
23
+
24
+ /**
25
+ * Helper meta per risposta singolo elemento Public API.
26
+ */
27
+ export function buildPublicSingleMeta(seed: string) {
28
+ return { seed }
29
+ }
30
+