@beechcms/api 0.5.0 → 0.6.0-preview.2

package/src/shared/apply-policies.test.ts

@@ -1,77 +1,81 @@
-import { describe, it, expect } from 'vitest'
-import { applyPrivacy, applyVisibility, PrivacyPolicyError } from './apply-policies'
-import type { Seed } from '@beechcms/core'
-
-function makeSeed(branches: any[]): Seed {
-  return { slug: 'test', displayNameAlias: 'title', branches } as unknown as Seed
-}
-
-// ─── applyPrivacy ─────────────────────────────────────────────────────────────
-
-describe('applyPrivacy', () => {
-  it('passes through fields with no privacy policy (default: public)', async () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
-    const result = await applyPrivacy({ title: 'Hello' }, seed)
-    expect(result.title).toBe('Hello')
-  })
-
-  it('hashes the value when branch privacy is "hash"', async () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'email', type: 'text', policies: { privacy: 'hash' } }])
-    const result = await applyPrivacy({ email: 'user@test.com' }, seed)
-    // sha256 produces a 64-char hex string
-    expect(typeof result.email).toBe('string')
-    expect((result.email as string).length).toBe(64)
-    expect(result.email).not.toBe('user@test.com')
-  })
-
-  it('leaves null/undefined values unhashed even when privacy is "hash"', async () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'email', type: 'text', policies: { privacy: 'hash' } }])
-    const result = await applyPrivacy({ email: null }, seed)
-    expect(result.email).toBeNull()
-  })
-
-  it('throws PrivacyPolicyError for "encrypt" privacy (not yet implemented)', async () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'secret', type: 'text', policies: { privacy: 'encrypt' } }])
-    await expect(applyPrivacy({ secret: 'value' }, seed)).rejects.toBeInstanceOf(PrivacyPolicyError)
-  })
-
-  it('passes through fields not present in the seed branches unchanged', async () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
-    const result = await applyPrivacy({ title: 'Hi', extraField: 'extra' }, seed)
-    expect(result.extraField).toBe('extra')
-  })
-})
-
-// ─── applyVisibility ──────────────────────────────────────────────────────────
-
-describe('applyVisibility', () => {
-  it('includes fields with default (visible) visibility', () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
-    const result = applyVisibility({ title: 'Hello' }, seed)
-    expect(result.title).toBe('Hello')
-  })
-
-  it('omits fields with visibility "hidden"', () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'internal', type: 'text', policies: { visibility: 'hidden' } }])
-    const result = applyVisibility({ internal: 'secret' }, seed)
-    expect(result).not.toHaveProperty('internal')
-  })
-
-  it('masks non-empty string fields with visibility "masked"', () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'password', type: 'text', policies: { visibility: 'masked' } }])
-    const result = applyVisibility({ password: 'secret123' }, seed)
-    expect(result.password).toBe('••••••••')
-  })
-
-  it('returns null for empty string fields with visibility "masked"', () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'password', type: 'text', policies: { visibility: 'masked' } }])
-    const result = applyVisibility({ password: '' }, seed)
-    expect(result.password).toBeNull()
-  })
-
-  it('passes through fields not present in the seed branches', () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
-    const result = applyVisibility({ title: 'Hi', extraField: 'pass' }, seed)
-    expect(result.extraField).toBe('pass')
-  })
-})
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { describe, it, expect } from 'vitest'
+import { applyPrivacy, applyVisibility, PrivacyPolicyError } from './apply-policies'
+import type { Seed } from '@beechcms/core'
+
+function makeSeed(branches: any[]): Seed {
+  return { slug: 'test', displayNameAlias: 'title', branches } as unknown as Seed
+}
+
+// ─── applyPrivacy ─────────────────────────────────────────────────────────────
+
+describe('applyPrivacy', () => {
+  it('passes through fields with no privacy policy (default: public)', async () => {
+    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
+    const result = await applyPrivacy({ title: 'Hello' }, seed)
+    expect(result.title).toBe('Hello')
+  })
+
+  it('hashes the value when branch privacy is "hash"', async () => {
+    const seed = makeSeed([{ id: 'br_01', alias: 'email', type: 'text', policies: { privacy: 'hash' } }])
+    const result = await applyPrivacy({ email: 'user@test.com' }, seed)
+    // sha256 produces a 64-char hex string
+    expect(typeof result.email).toBe('string')
+    expect((result.email as string).length).toBe(64)
+    expect(result.email).not.toBe('user@test.com')
+  })
+
+  it('leaves null/undefined values unhashed even when privacy is "hash"', async () => {
+    const seed = makeSeed([{ id: 'br_01', alias: 'email', type: 'text', policies: { privacy: 'hash' } }])
+    const result = await applyPrivacy({ email: null }, seed)
+    expect(result.email).toBeNull()
+  })
+
+  it('throws PrivacyPolicyError for "encrypt" privacy (not yet implemented)', async () => {
+    const seed = makeSeed([{ id: 'br_01', alias: 'secret', type: 'text', policies: { privacy: 'encrypt' } }])
+    await expect(applyPrivacy({ secret: 'value' }, seed)).rejects.toBeInstanceOf(PrivacyPolicyError)
+  })
+
+  it('passes through fields not present in the seed branches unchanged', async () => {
+    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
+    const result = await applyPrivacy({ title: 'Hi', extraField: 'extra' }, seed)
+    expect(result.extraField).toBe('extra')
+  })
+})
+
+// ─── applyVisibility ──────────────────────────────────────────────────────────
+
+describe('applyVisibility', () => {
+  it('includes fields with default (visible) visibility', () => {
+    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
+    const result = applyVisibility({ title: 'Hello' }, seed)
+    expect(result.title).toBe('Hello')
+  })
+
+  it('omits fields with visibility "hidden"', () => {
+    const seed = makeSeed([{ id: 'br_01', alias: 'internal', type: 'text', policies: { visibility: 'hidden' } }])
+    const result = applyVisibility({ internal: 'secret' }, seed)
+    expect(result).not.toHaveProperty('internal')
+  })
+
+  it('masks non-empty string fields with visibility "masked"', () => {
+    const seed = makeSeed([{ id: 'br_01', alias: 'password', type: 'text', policies: { visibility: 'masked' } }])
+    const result = applyVisibility({ password: 'secret123' }, seed)
+    expect(result.password).toBe('••••••••')
+  })
+
+  it('returns null for empty string fields with visibility "masked"', () => {
+    const seed = makeSeed([{ id: 'br_01', alias: 'password', type: 'text', policies: { visibility: 'masked' } }])
+    const result = applyVisibility({ password: '' }, seed)
+    expect(result.password).toBeNull()
+  })
+
+  it('passes through fields not present in the seed branches', () => {
+    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
+    const result = applyVisibility({ title: 'Hi', extraField: 'pass' }, seed)
+    expect(result.extraField).toBe('pass')
+  })
+})

package/src/shared/apply-policies.ts

@@ -1,63 +1,67 @@
-/// <reference types="@cloudflare/workers-types" />
-import { resolvePolicies, sha256hex } from '@beechcms/core'
-import type { Seed } from '@beechcms/core'
-
-class PrivacyPolicyError extends Error {
-  readonly status = 501 as const
-  constructor(message: string) {
-    super(message)
-    this.name = 'PrivacyPolicyError'
-  }
-}
-
-export { PrivacyPolicyError }
-
-/** Applica la privacy policy ai campi del payload prima della scrittura su DB. */
-export async function applyPrivacy(
-  data: Record<string, unknown>,
-  seed: Seed,
-): Promise<Record<string, unknown>> {
-  const result: Record<string, unknown> = {}
-  for (const [alias, value] of Object.entries(data)) {
-    const branch = seed.branches.find((b) => b.alias === alias)
-    if (!branch) {
-      result[alias] = value
-      continue
-    }
-    const { privacy } = resolvePolicies(branch)
-    if (privacy === 'encrypt') {
-      throw new PrivacyPolicyError(
-        `Field '${alias}' uses 'encrypt' privacy which is not yet implemented.`,
-      )
-    }
-    if (privacy === 'hash' && value != null) {
-      result[alias] = await sha256hex(String(value))
-    } else {
-      result[alias] = value
-    }
-  }
-  return result
-}
-
-/** Applica la visibility policy ai campi del payload in uscita verso il client. */
-export function applyVisibility(
-  data: Record<string, unknown>,
-  seed: Seed,
-): Record<string, unknown> {
-  const result: Record<string, unknown> = {}
-  for (const [alias, value] of Object.entries(data)) {
-    const branch = seed.branches.find((b) => b.alias === alias)
-    if (!branch) {
-      result[alias] = value
-      continue
-    }
-    const { visibility } = resolvePolicies(branch)
-    if (visibility === 'hidden') continue
-    if (visibility === 'masked') {
-      result[alias] = typeof value === 'string' && value.length > 0 ? '••••••••' : null
-    } else {
-      result[alias] = value
-    }
-  }
-  return result
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+/// <reference types="@cloudflare/workers-types" />
+import { resolvePolicies, sha256hex } from '@beechcms/core'
+import type { Seed } from '@beechcms/core'
+
+class PrivacyPolicyError extends Error {
+  readonly status = 501 as const
+  constructor(message: string) {
+    super(message)
+    this.name = 'PrivacyPolicyError'
+  }
+}
+
+export { PrivacyPolicyError }
+
+/** Applica la privacy policy ai campi del payload prima della scrittura su DB. */
+export async function applyPrivacy(
+  data: Record<string, unknown>,
+  seed: Seed,
+): Promise<Record<string, unknown>> {
+  const result: Record<string, unknown> = {}
+  for (const [alias, value] of Object.entries(data)) {
+    const branch = seed.branches.find((b) => b.alias === alias)
+    if (!branch) {
+      result[alias] = value
+      continue
+    }
+    const { privacy } = resolvePolicies(branch)
+    if (privacy === 'encrypt') {
+      throw new PrivacyPolicyError(
+        `Field '${alias}' uses 'encrypt' privacy which is not yet implemented.`,
+      )
+    }
+    if (privacy === 'hash' && value != null) {
+      result[alias] = await sha256hex(String(value))
+    } else {
+      result[alias] = value
+    }
+  }
+  return result
+}
+
+/** Applica la visibility policy ai campi del payload in uscita verso il client. */
+export function applyVisibility(
+  data: Record<string, unknown>,
+  seed: Seed,
+): Record<string, unknown> {
+  const result: Record<string, unknown> = {}
+  for (const [alias, value] of Object.entries(data)) {
+    const branch = seed.branches.find((b) => b.alias === alias)
+    if (!branch) {
+      result[alias] = value
+      continue
+    }
+    const { visibility } = resolvePolicies(branch)
+    if (visibility === 'hidden') continue
+    if (visibility === 'masked') {
+      result[alias] = typeof value === 'string' && value.length > 0 ? '••••••••' : null
+    } else {
+      result[alias] = value
+    }
+  }
+  return result
+}

package/src/shared/automations.repository.d1.ts

@@ -1,146 +1,150 @@
-import type {
-  IAutomationRepository,
-  Automation,
-  AutomationAction,
-  AutomationTrigger,
-  AutomationTriggerEvent,
-  CreateAutomationInput,
-  UpdateAutomationInput,
-  WhenNode,
-} from '@beechcms/core'
-
-interface AutomationRow {
-  id: string
-  seed_slug: string
-  name: string
-  enabled: number
-  triggers: string
-  trigger_conditions: string | null
-  actions: string
-  created_at: number
-  updated_at: number
-}
-
-export class D1AutomationRepository implements IAutomationRepository {
-  constructor(private readonly db: D1Database) {}
-
-  async findActive(seedSlug: string, event: AutomationTriggerEvent): Promise<Automation[]> {
-    const result = seedSlug === '*'
-      ? await this.db
-          .prepare(
-            `SELECT DISTINCT a.* FROM automations a, json_each(a.triggers) t
-             WHERE a.enabled = 1 AND json_extract(t.value, '$.event') = ?`,
-          )
-          .bind(event)
-          .all<AutomationRow>()
-      : await this.db
-          .prepare(
-            `SELECT DISTINCT a.* FROM automations a, json_each(a.triggers) t
-             WHERE a.seed_slug = ? AND a.enabled = 1 AND json_extract(t.value, '$.event') = ?`,
-          )
-          .bind(seedSlug, event)
-          .all<AutomationRow>()
-    return (result.results ?? []).map(rowToAutomation)
-  }
-
-  async list(seedSlug: string): Promise<Automation[]> {
-    const result = await this.db
-      .prepare(`SELECT * FROM automations WHERE seed_slug = ? ORDER BY created_at DESC`)
-      .bind(seedSlug)
-      .all<AutomationRow>()
-    return (result.results ?? []).map(rowToAutomation)
-  }
-
-  async findById(id: string): Promise<Automation | null> {
-    const row = await this.db
-      .prepare(`SELECT * FROM automations WHERE id = ?`)
-      .bind(id)
-      .first<AutomationRow>()
-    return row ? rowToAutomation(row) : null
-  }
-
-  async create(input: CreateAutomationInput): Promise<string> {
-    const id = crypto.randomUUID()
-    const now = Math.floor(Date.now() / 1000)
-    await this.db
-      .prepare(
-        `INSERT INTO automations
-           (id, seed_slug, name, enabled, triggers, trigger_conditions, actions, created_at, updated_at)
-         VALUES (?, ?, ?, 1, ?, ?, ?, ?, ?)`,
-      )
-      .bind(
-        id,
-        input.seed_slug,
-        input.name,
-        JSON.stringify(input.triggers),
-        input.trigger_conditions ? JSON.stringify(input.trigger_conditions) : null,
-        JSON.stringify(input.actions),
-        now,
-        now,
-      )
-      .run()
-    return id
-  }
-
-  async update(id: string, input: UpdateAutomationInput): Promise<void> {
-    const now = Math.floor(Date.now() / 1000)
-    const fields: string[] = []
-    const values: unknown[] = []
-
-    const map: Record<string, unknown> = {
-      seed_slug: input.seed_slug,
-      name: input.name,
-      triggers: input.triggers !== undefined ? JSON.stringify(input.triggers) : undefined,
-      trigger_conditions:
-        input.trigger_conditions !== undefined
-          ? input.trigger_conditions === null
-            ? null
-            : JSON.stringify(input.trigger_conditions)
-          : undefined,
-      actions: input.actions !== undefined ? JSON.stringify(input.actions) : undefined,
-    }
-
-    for (const [column, value] of Object.entries(map)) {
-      if (value !== undefined) {
-        fields.push(`${column} = ?`)
-        values.push(value)
-      }
-    }
-
-    if (fields.length === 0) return
-
-    values.push(now, id)
-    await this.db
-      .prepare(`UPDATE automations SET ${fields.join(', ')}, updated_at = ? WHERE id = ?`)
-      .bind(...values)
-      .run()
-  }
-
-  async toggle(id: string, enabled: boolean): Promise<void> {
-    const now = Math.floor(Date.now() / 1000)
-    await this.db
-      .prepare(`UPDATE automations SET enabled = ?, updated_at = ? WHERE id = ?`)
-      .bind(enabled ? 1 : 0, now, id)
-      .run()
-  }
-
-  async delete(id: string): Promise<void> {
-    await this.db.prepare(`DELETE FROM automations WHERE id = ?`).bind(id).run()
-  }
-}
-
-function rowToAutomation(row: AutomationRow): Automation {
-  return {
-    id: row.id,
-    seed_slug: row.seed_slug,
-    name: row.name,
-    enabled: row.enabled === 1,
-    triggers: JSON.parse(row.triggers) as AutomationTrigger[],
-    trigger_conditions: row.trigger_conditions
-      ? (JSON.parse(row.trigger_conditions) as WhenNode)
-      : null,
-    actions: JSON.parse(row.actions) as AutomationAction[],
-    created_at: row.created_at,
-    updated_at: row.updated_at,
-  }
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import type {
+  IAutomationRepository,
+  Automation,
+  AutomationAction,
+  AutomationTrigger,
+  AutomationTriggerEvent,
+  CreateAutomationInput,
+  UpdateAutomationInput,
+  WhenNode,
+} from '@beechcms/core'
+
+interface AutomationRow {
+  id: string
+  seed_slug: string
+  name: string
+  enabled: number
+  triggers: string
+  trigger_conditions: string | null
+  actions: string
+  created_at: number
+  updated_at: number
+}
+
+export class D1AutomationRepository implements IAutomationRepository {
+  constructor(private readonly db: D1Database) {}
+
+  async findActive(seedSlug: string, event: AutomationTriggerEvent): Promise<Automation[]> {
+    const result = seedSlug === '*'
+      ? await this.db
+          .prepare(
+            `SELECT DISTINCT a.* FROM automations a, json_each(a.triggers) t
+             WHERE a.enabled = 1 AND json_extract(t.value, '$.event') = ?`,
+          )
+          .bind(event)
+          .all<AutomationRow>()
+      : await this.db
+          .prepare(
+            `SELECT DISTINCT a.* FROM automations a, json_each(a.triggers) t
+             WHERE a.seed_slug = ? AND a.enabled = 1 AND json_extract(t.value, '$.event') = ?`,
+          )
+          .bind(seedSlug, event)
+          .all<AutomationRow>()
+    return (result.results ?? []).map(rowToAutomation)
+  }
+
+  async list(seedSlug: string): Promise<Automation[]> {
+    const result = await this.db
+      .prepare(`SELECT * FROM automations WHERE seed_slug = ? ORDER BY created_at DESC`)
+      .bind(seedSlug)
+      .all<AutomationRow>()
+    return (result.results ?? []).map(rowToAutomation)
+  }
+
+  async findById(id: string): Promise<Automation | null> {
+    const row = await this.db
+      .prepare(`SELECT * FROM automations WHERE id = ?`)
+      .bind(id)
+      .first<AutomationRow>()
+    return row ? rowToAutomation(row) : null
+  }
+
+  async create(input: CreateAutomationInput): Promise<string> {
+    const id = crypto.randomUUID()
+    const now = Math.floor(Date.now() / 1000)
+    await this.db
+      .prepare(
+        `INSERT INTO automations
+           (id, seed_slug, name, enabled, triggers, trigger_conditions, actions, created_at, updated_at)
+         VALUES (?, ?, ?, 1, ?, ?, ?, ?, ?)`,
+      )
+      .bind(
+        id,
+        input.seed_slug,
+        input.name,
+        JSON.stringify(input.triggers),
+        input.trigger_conditions ? JSON.stringify(input.trigger_conditions) : null,
+        JSON.stringify(input.actions),
+        now,
+        now,
+      )
+      .run()
+    return id
+  }
+
+  async update(id: string, input: UpdateAutomationInput): Promise<void> {
+    const now = Math.floor(Date.now() / 1000)
+    const fields: string[] = []
+    const values: unknown[] = []
+
+    const map: Record<string, unknown> = {
+      seed_slug: input.seed_slug,
+      name: input.name,
+      triggers: input.triggers !== undefined ? JSON.stringify(input.triggers) : undefined,
+      trigger_conditions:
+        input.trigger_conditions !== undefined
+          ? input.trigger_conditions === null
+            ? null
+            : JSON.stringify(input.trigger_conditions)
+          : undefined,
+      actions: input.actions !== undefined ? JSON.stringify(input.actions) : undefined,
+    }
+
+    for (const [column, value] of Object.entries(map)) {
+      if (value !== undefined) {
+        fields.push(`${column} = ?`)
+        values.push(value)
+      }
+    }
+
+    if (fields.length === 0) return
+
+    values.push(now, id)
+    await this.db
+      .prepare(`UPDATE automations SET ${fields.join(', ')}, updated_at = ? WHERE id = ?`)
+      .bind(...values)
+      .run()
+  }
+
+  async toggle(id: string, enabled: boolean): Promise<void> {
+    const now = Math.floor(Date.now() / 1000)
+    await this.db
+      .prepare(`UPDATE automations SET enabled = ?, updated_at = ? WHERE id = ?`)
+      .bind(enabled ? 1 : 0, now, id)
+      .run()
+  }
+
+  async delete(id: string): Promise<void> {
+    await this.db.prepare(`DELETE FROM automations WHERE id = ?`).bind(id).run()
+  }
+}
+
+function rowToAutomation(row: AutomationRow): Automation {
+  return {
+    id: row.id,
+    seed_slug: row.seed_slug,
+    name: row.name,
+    enabled: row.enabled === 1,
+    triggers: JSON.parse(row.triggers) as AutomationTrigger[],
+    trigger_conditions: row.trigger_conditions
+      ? (JSON.parse(row.trigger_conditions) as WhenNode)
+      : null,
+    actions: JSON.parse(row.actions) as AutomationAction[],
+    created_at: row.created_at,
+    updated_at: row.updated_at,
+  }
+}