@beechcms/api 0.6.0-preview.1 → 0.6.0-preview.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (222) hide show
  1. package/assets/dashboard/BeechLogo.svg +18 -18
  2. package/assets/dashboard/BeechLogoLIght.svg +48 -48
  3. package/assets/dashboard/assets/chart-BrJFdsGZ.js +39 -0
  4. package/assets/dashboard/assets/index-CIaoMxuB.css +1 -0
  5. package/assets/dashboard/assets/index-wTKgygsg.js +636 -0
  6. package/assets/dashboard/assets/pie-chart-recharts-BEaE1FOE.js +1 -0
  7. package/assets/dashboard/assets/timeseries-chart-recharts-DmWM6imF.js +1 -0
  8. package/assets/dashboard/beechLogoDark.svg +48 -48
  9. package/assets/dashboard/index.html +18 -18
  10. package/assets/dashboard/noResult.svg +42 -42
  11. package/assets/dashboard/sol.svg +3 -3
  12. package/assets/dashboard/undraw_enter_nwx3.svg +36 -36
  13. package/migrations/0000_v040_base.sql +265 -265
  14. package/migrations/0029_automations.sql +14 -14
  15. package/migrations/0030_test_seeds.sql +125 -125
  16. package/package.json +2 -2
  17. package/src/auth/__fixtures__/in-memory-hash-provider.ts +17 -17
  18. package/src/auth/__fixtures__/static-token-service.ts +22 -22
  19. package/src/auth/bcrypt-hash-provider.ts +24 -24
  20. package/src/auth/constants.ts +14 -14
  21. package/src/auth/generate-refresh-token.test.ts +23 -23
  22. package/src/auth/hash-provider.test.ts +55 -55
  23. package/src/auth/jose-token-service.ts +62 -62
  24. package/src/auth/jwt-claims-passthrough.test.ts +87 -87
  25. package/src/auth/login.test.ts +100 -100
  26. package/src/auth/login.ts +78 -78
  27. package/src/auth/refresh.ts +11 -11
  28. package/src/auth/token-service.test.ts +90 -90
  29. package/src/factory.ts +370 -368
  30. package/src/features/automations/__tests__/action-executors.test.ts +255 -255
  31. package/src/features/automations/__tests__/automation-runner.test.ts +196 -196
  32. package/src/features/automations/__tests__/automation-runner.utils.test.ts +60 -60
  33. package/src/features/automations/__tests__/automations.handler.test.ts +264 -264
  34. package/src/features/automations/__tests__/automations.repository.test.ts +163 -163
  35. package/src/features/automations/__tests__/automations.schema.test.ts +224 -224
  36. package/src/features/automations/__tests__/context-resolver.test.ts +126 -126
  37. package/src/features/automations/__tests__/cron-runner.test.ts +267 -267
  38. package/src/features/automations/__tests__/cron-runner.utils.test.ts +144 -144
  39. package/src/features/automations/__tests__/set-variable.executor.test.ts +383 -383
  40. package/src/features/automations/__tests__/template-grammar.test.ts +308 -308
  41. package/src/features/automations/__tests__/webhook.executor.test.ts +142 -142
  42. package/src/features/automations/__tests__/when-evaluator.test.ts +274 -274
  43. package/src/features/automations/__tests__/when-pushdown.test.ts +281 -281
  44. package/src/features/automations/action-executors/create-entry.executor.ts +27 -27
  45. package/src/features/automations/action-executors/edit-field.executor.ts +26 -26
  46. package/src/features/automations/action-executors/index.ts +37 -37
  47. package/src/features/automations/action-executors/send-mail.executor.ts +53 -53
  48. package/src/features/automations/action-executors/set-variable.executor.ts +159 -159
  49. package/src/features/automations/action-executors/webhook.executor.ts +67 -67
  50. package/src/features/automations/automation-runner.ts +85 -85
  51. package/src/features/automations/automation-runner.utils.ts +47 -47
  52. package/src/features/automations/automations.handler.ts +197 -197
  53. package/src/features/automations/automations.schema.ts +177 -177
  54. package/src/features/automations/context-resolver.ts +152 -152
  55. package/src/features/automations/cron-runner.ts +140 -140
  56. package/src/features/automations/cron-runner.utils.ts +44 -44
  57. package/src/features/automations/filter-translation.ts +46 -46
  58. package/src/features/automations/index.ts +16 -16
  59. package/src/features/automations/template-grammar.ts +245 -245
  60. package/src/features/automations/var-access-resolver.ts +140 -140
  61. package/src/features/automations/when-evaluator.ts +87 -87
  62. package/src/features/automations/when-pushdown.ts +57 -57
  63. package/src/features/backrefs/__tests__/backrefs.handler.test.ts +359 -359
  64. package/src/features/backrefs/backrefs.handler.ts +168 -168
  65. package/src/features/backrefs/d1-backref.repository.ts +84 -84
  66. package/src/features/backrefs/index.ts +5 -5
  67. package/src/features/content/constants.ts +16 -16
  68. package/src/features/content/handlers/bulk.handler.ts +185 -185
  69. package/src/features/content/handlers/create.ts +129 -129
  70. package/src/features/content/handlers/delete.ts +62 -62
  71. package/src/features/content/handlers/facets.ts +49 -49
  72. package/src/features/content/handlers/get.ts +120 -120
  73. package/src/features/content/handlers/helpers.test.ts +180 -180
  74. package/src/features/content/handlers/helpers.ts +93 -93
  75. package/src/features/content/handlers/list.ts +174 -174
  76. package/src/features/content/handlers/update.ts +174 -174
  77. package/src/features/content/index.ts +26 -26
  78. package/src/features/dashboard-layout/__tests__/dashboard-layout.handler.test.ts +388 -0
  79. package/src/features/dashboard-layout/dashboard-layout.handler.ts +206 -0
  80. package/src/features/dashboard-layout/index.ts +5 -0
  81. package/src/features/draft/draft.handler.ts +195 -195
  82. package/src/features/draft/draft.middleware.ts +66 -66
  83. package/src/features/draft/index.ts +5 -5
  84. package/src/features/email/email.provider.ts +42 -42
  85. package/src/features/email/email.service.ts +98 -98
  86. package/src/features/email/email.types.ts +119 -119
  87. package/src/features/email/index.ts +33 -33
  88. package/src/features/email/providers/resend.ts +67 -67
  89. package/src/features/email/providers/smtp.ts +55 -55
  90. package/src/features/email/templates/automation-mail.ts +19 -19
  91. package/src/features/email/templates/password-changed.ts +63 -63
  92. package/src/features/email/templates/password-reset.ts +68 -68
  93. package/src/features/email/templates/shell.ts +96 -96
  94. package/src/features/notifications/index.ts +5 -5
  95. package/src/features/notifications/notifications.handler.ts +105 -105
  96. package/src/features/password-reset/index.ts +19 -19
  97. package/src/features/password-reset/request.ts +92 -92
  98. package/src/features/password-reset/reset.ts +102 -102
  99. package/src/features/rotate-field/index.ts +5 -5
  100. package/src/features/rotate-field/rotate-field.handler.ts +132 -132
  101. package/src/features/rotate-field/rotate-field.schema.ts +17 -17
  102. package/src/features/schema/schema.handler.ts +131 -131
  103. package/src/features/seeds/index.ts +5 -5
  104. package/src/features/seeds/seeds.handler.test.ts +1199 -632
  105. package/src/features/seeds/seeds.handler.ts +558 -693
  106. package/src/features/settings/__tests__/settings.handler.test.ts +555 -555
  107. package/src/features/settings/settings.handler.ts +392 -392
  108. package/src/features/setup/index.ts +288 -204
  109. package/src/features/stats/index.ts +5 -5
  110. package/src/features/stats/stats.handler.ts +420 -420
  111. package/src/features/webhooks/index.ts +63 -63
  112. package/src/index.ts +65 -65
  113. package/src/media-utils.ts +82 -82
  114. package/src/middleware/auth-providers.middleware.test.ts +85 -0
  115. package/src/middleware/auth-providers.middleware.ts +45 -45
  116. package/src/middleware/observability.middleware.test.ts +93 -0
  117. package/src/middleware/observability.middleware.ts +70 -70
  118. package/src/middleware/rate-limit.middleware.ts +45 -45
  119. package/src/middleware/repository.middleware.ts +117 -114
  120. package/src/middleware/seed-registry.middleware.test.ts +97 -97
  121. package/src/middleware/seed-registry.middleware.ts +21 -21
  122. package/src/middleware/storage.middleware.ts +25 -25
  123. package/src/middleware.ts +45 -45
  124. package/src/public/access-policy.ts +27 -27
  125. package/src/public/api-key-middleware.ts +57 -57
  126. package/src/public/cache-utils.ts +38 -38
  127. package/src/public/entry-projection.ts +46 -46
  128. package/src/public/idempotency.ts +23 -23
  129. package/src/public/index.ts +16 -16
  130. package/src/public/problem-details.ts +124 -124
  131. package/src/public/public-add.ts +114 -114
  132. package/src/public/public-edit.ts +163 -163
  133. package/src/public/public-errors.ts +19 -19
  134. package/src/public/public-read.ts +63 -63
  135. package/src/public/public-routes.ts +88 -88
  136. package/src/public/query-builder.test.ts +224 -224
  137. package/src/public/query-builder.ts +156 -156
  138. package/src/public/rate-limit-middleware.ts +34 -34
  139. package/src/public/read-list.ts +54 -54
  140. package/src/public/read-single.ts +48 -48
  141. package/src/public/response-builder.ts +30 -30
  142. package/src/public/sanitize.ts +69 -69
  143. package/src/public/slug-utils.ts +18 -18
  144. package/src/rate-limit/cloudflare-rate-limiter.test.ts +30 -30
  145. package/src/rate-limit/cloudflare-rate-limiter.ts +15 -15
  146. package/src/rate-limit/in-memory-rate-limiter.test.ts +37 -37
  147. package/src/rate-limit/in-memory-rate-limiter.ts +17 -17
  148. package/src/rate-limit/no-op-rate-limiter.test.ts +22 -22
  149. package/src/rate-limit/no-op-rate-limiter.ts +11 -11
  150. package/src/search-utils.test.ts +211 -211
  151. package/src/search-utils.ts +213 -213
  152. package/src/search.ts +65 -65
  153. package/src/shared/apply-policies.test.ts +81 -81
  154. package/src/shared/apply-policies.ts +67 -67
  155. package/src/shared/automations.repository.d1.ts +150 -150
  156. package/src/shared/background-notification-service.test.ts +62 -62
  157. package/src/shared/background-notification-service.ts +52 -52
  158. package/src/shared/base.repository.d1.ts +32 -32
  159. package/src/shared/content-utils.test.ts +165 -165
  160. package/src/shared/content-utils.ts +86 -86
  161. package/src/shared/content.repository.d1.test.ts +507 -458
  162. package/src/shared/content.repository.d1.ts +851 -851
  163. package/src/shared/d1-activity-log.repository.test.ts +140 -140
  164. package/src/shared/d1-activity-log.repository.ts +105 -105
  165. package/src/shared/d1-activity-logger.test.ts +86 -86
  166. package/src/shared/d1-activity-logger.ts +67 -67
  167. package/src/shared/d1-analytics.repository.test.ts +78 -78
  168. package/src/shared/d1-analytics.repository.ts +85 -85
  169. package/src/shared/d1-content-scan.repository.test.ts +80 -80
  170. package/src/shared/d1-content-scan.repository.ts +37 -37
  171. package/src/shared/d1-notification.repository.test.ts +128 -128
  172. package/src/shared/d1-notification.repository.ts +118 -118
  173. package/src/shared/d1-password-reset-token.repository.test.ts +81 -81
  174. package/src/shared/d1-password-reset-token.repository.ts +56 -56
  175. package/src/shared/d1-search.repository.test.ts +87 -87
  176. package/src/shared/d1-search.repository.ts +88 -88
  177. package/src/shared/d1-session.repository.test.ts +125 -125
  178. package/src/shared/d1-session.repository.ts +102 -102
  179. package/src/shared/d1-setup-checklist.repository.ts +36 -36
  180. package/src/shared/d1-user.repository.test.ts +151 -151
  181. package/src/shared/d1-user.repository.ts +119 -119
  182. package/src/shared/d1-widget.repository.test.ts +267 -221
  183. package/src/shared/d1-widget.repository.ts +385 -341
  184. package/src/shared/dashboard-layout.repository.d1.test.ts +135 -0
  185. package/src/shared/dashboard-layout.repository.d1.ts +58 -0
  186. package/src/shared/demo-data-sql.ts +216 -54
  187. package/src/shared/demo-data.repository.d1.ts +20 -20
  188. package/src/shared/execution-context-scheduler.ts +13 -13
  189. package/src/shared/fixed-clock.ts +25 -25
  190. package/src/shared/fts-sync.ts +8 -8
  191. package/src/shared/idempotency.repository.d1.test.ts +83 -83
  192. package/src/shared/idempotency.repository.d1.ts +60 -60
  193. package/src/shared/in-memory-activity-logger.ts +19 -19
  194. package/src/shared/in-memory-notification-service.ts +19 -19
  195. package/src/shared/in-memory-seed.repository.ts +58 -51
  196. package/src/shared/media.repository.d1.test.ts +107 -107
  197. package/src/shared/media.repository.d1.ts +68 -68
  198. package/src/shared/qstash-notification-service.test.ts +67 -67
  199. package/src/shared/qstash-notification-service.ts +55 -55
  200. package/src/shared/query-utils.ts +141 -141
  201. package/src/shared/request-utils.ts +26 -26
  202. package/src/shared/schema-mutator.d1.test.ts +142 -0
  203. package/src/shared/schema-mutator.d1.ts +64 -64
  204. package/src/shared/seed-layout.repository.d1.test.ts +114 -114
  205. package/src/shared/seed-layout.repository.d1.ts +62 -62
  206. package/src/shared/seed-registry-cache.test.ts +68 -68
  207. package/src/shared/seed-registry-cache.ts +49 -49
  208. package/src/shared/seed.repository.d1.test.ts +143 -143
  209. package/src/shared/seed.repository.d1.ts +98 -98
  210. package/src/shared/sequential-id-generator.ts +33 -33
  211. package/src/shared/site-settings.repository.d1.ts +53 -53
  212. package/src/shared/storage/factory.ts +41 -41
  213. package/src/shared/storage/s3-bucket.ts +195 -195
  214. package/src/shared/storage-utils.ts +40 -40
  215. package/src/shared/system-stats.repository.d1.test.ts +58 -58
  216. package/src/shared/system-stats.repository.d1.ts +48 -48
  217. package/src/types.ts +90 -87
  218. package/src/upload.ts +198 -198
  219. package/src/widget.test.ts +85 -0
  220. package/src/widget.ts +251 -212
  221. package/assets/dashboard/assets/index-BSjk0Sx9.js +0 -634
  222. package/assets/dashboard/assets/index-kRCYVN2B.css +0 -1
@@ -1,177 +1,177 @@
1
- // SPDX-License-Identifier: BUSL-1.1
2
- // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
- // See LICENSE in the repository root for license terms.
4
-
5
- // Mirror: apps/dashboard/src/features/automations/schema/automation.schema.ts — keep structurally identical.
6
- import { z } from 'zod'
7
- import type { WhenNode } from '@beechcms/core'
8
- import { isPrivateHost } from '@beechcms/core'
9
- import { AUTOMATION_RESERVED_WORDS } from './template-grammar'
10
-
11
- // ---------------------------------------------------------------------------
12
- // Trigger conditions — recursive WhenNode schema (Task 14)
13
- // ---------------------------------------------------------------------------
14
-
15
- const whenOperandSchema = z.union([
16
- z.object({ kind: z.literal('literal'), value: z.unknown() }),
17
- z.object({ kind: z.literal('ref'), key: z.string().min(1) }),
18
- ])
19
-
20
- const whenPredicateSchema = z.object({
21
- kind: z.literal('predicate'),
22
- left: whenOperandSchema,
23
- op: z.enum(['eq', 'neq', 'gt', 'gte', 'lt', 'lte', 'contains', 'startswith', 'endswith', 'in', 'notin', 'isempty', 'isnotempty', 'matches']),
24
- right: whenOperandSchema.optional(),
25
- })
26
-
27
- const whenNodeSchema: z.ZodType<WhenNode> = z.lazy(() =>
28
- z.union([
29
- whenPredicateSchema,
30
- z.object({
31
- kind: z.literal('group'),
32
- op: z.enum(['AND', 'OR']),
33
- children: z.array(whenNodeSchema).min(1),
34
- negate: z.boolean().optional(),
35
- }).refine(
36
- (g) => depthOf(g) <= 10,
37
- { message: 'WhenNode nesting exceeds maximum depth of 10' },
38
- ),
39
- ]),
40
- )
41
-
42
- function depthOf(node: unknown, d = 0): number {
43
- if (d > 10) return d
44
- if (typeof node !== 'object' || !node) return d
45
- const n = node as Record<string, unknown>
46
- if (n['kind'] === 'group' && Array.isArray(n['children'])) {
47
- return Math.max(...(n['children'] as unknown[]).map((c) => depthOf(c, d + 1)))
48
- }
49
- return d
50
- }
51
-
52
- const triggerConditionsSchema = whenNodeSchema.nullable().optional()
53
-
54
- const setVariableFilterSchema = z.object({
55
- field: z.string().min(1),
56
- op: z.enum(['eq', 'neq', 'contains', 'gt', 'lt', 'isempty', 'isnotempty']),
57
- value: z.unknown(),
58
- })
59
-
60
- // ---------------------------------------------------------------------------
61
- // Action schemas
62
- // ---------------------------------------------------------------------------
63
-
64
- const setVariableActionSchema = z.object({
65
- type: z.literal('set_variable'),
66
- name: z
67
- .string()
68
- .min(1)
69
- .regex(/^[a-zA-Z_][a-zA-Z0-9_]*$/)
70
- .refine((v) => !AUTOMATION_RESERVED_WORDS.has(v), {
71
- message: 'automations.editor.errors.variableNameReserved',
72
- }),
73
- seed_slug: z.string().min(1).optional(),
74
- fixed_id: z.string().min(1).optional(),
75
- column: z.string().min(1).optional(),
76
- filters: z.array(setVariableFilterSchema).default([]),
77
- order_by: z.string().optional(),
78
- order: z.enum(['asc', 'desc']).optional(),
79
- load_type: z.enum(['fruit', 'branch']).optional(), // accepted but ignored at runtime
80
- })
81
-
82
- const webhookActionSchema = z.object({
83
- type: z.literal('webhook'),
84
- url: z
85
- .string()
86
- .url()
87
- .refine((u) => {
88
- try { return new URL(u).protocol === 'https:' } catch { return false }
89
- }, { message: 'automations.editor.errors.webhookHttpsRequired' })
90
- .refine((u) => {
91
- try { return !isPrivateHost(new URL(u).hostname) } catch { return false }
92
- }, { message: 'automations.editor.errors.webhookPrivateHostBlocked' }),
93
- method: z.enum(['POST', 'GET', 'PUT']).optional(),
94
- headers: z.record(z.string(), z.string()).optional(),
95
- body_template: z.preprocess(
96
- (v) => (v == null ? '' : v),
97
- z.string().min(1, 'automations.editor.errors.bodyRequired'),
98
- ),
99
- })
100
-
101
- const sendMailActionSchema = z.object({
102
- type: z.literal('send_mail'),
103
- to: z.string().email(),
104
- subject_template: z.string().min(1),
105
- body_template: z.string().min(1),
106
- })
107
-
108
- const editFieldActionSchema = z.object({
109
- type: z.literal('edit_field'),
110
- field: z.string().min(1),
111
- value: z.unknown(),
112
- })
113
-
114
- const createEntryActionSchema = z.object({
115
- type: z.literal('create_entry'),
116
- seed_slug: z.string().min(1),
117
- field_map: z.record(z.string(), z.string()),
118
- })
119
-
120
- export const automationActionSchema = z.discriminatedUnion('type', [
121
- setVariableActionSchema,
122
- webhookActionSchema,
123
- sendMailActionSchema,
124
- editFieldActionSchema,
125
- createEntryActionSchema,
126
- ])
127
-
128
- // ---------------------------------------------------------------------------
129
- // Triggers schema
130
- // ---------------------------------------------------------------------------
131
-
132
- const automationTriggerSchema = z.object({
133
- event: z.enum(['create', 'update', 'delete', 'cron']),
134
- cron: z.string().nullable().optional(),
135
- })
136
-
137
- const triggersSchema = z
138
- .array(automationTriggerSchema)
139
- .min(1, 'At least one trigger is required')
140
- .refine(
141
- (triggers) => triggers.filter((t) => t.event === 'cron').length <= 1,
142
- { message: 'Only one cron trigger is allowed per automation' },
143
- )
144
- .refine(
145
- (triggers) => {
146
- const events = triggers.map((t) => t.event)
147
- return new Set(events).size === events.length
148
- },
149
- { message: 'Duplicate trigger events are not allowed' },
150
- )
151
- .refine(
152
- (triggers) => triggers.every((t) => t.event !== 'cron' || !!t.cron),
153
- { message: 'cron expression is required for cron triggers', path: ['cron'] },
154
- )
155
-
156
- // ---------------------------------------------------------------------------
157
- // Automation create/update schemas
158
- // ---------------------------------------------------------------------------
159
-
160
- const createAutomationBaseSchema = z.object({
161
- seed_slug: z.string().min(1),
162
- name: z.string().min(1).max(100),
163
- triggers: triggersSchema,
164
- trigger_conditions: triggerConditionsSchema,
165
- actions: z.array(automationActionSchema).min(1, 'At least one action is required'),
166
- })
167
-
168
- export const createAutomationSchema = createAutomationBaseSchema
169
-
170
- export const updateAutomationSchema = createAutomationBaseSchema.partial()
171
-
172
- export const toggleAutomationSchema = z.object({
173
- enabled: z.boolean(),
174
- })
175
-
176
- export type CreateAutomationBody = z.infer<typeof createAutomationSchema>
177
- export type UpdateAutomationBody = z.infer<typeof updateAutomationSchema>
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ // Mirror: apps/dashboard/src/features/automations/schema/automation.schema.ts — keep structurally identical.
6
+ import { z } from 'zod'
7
+ import type { WhenNode } from '@beechcms/core'
8
+ import { isPrivateHost } from '@beechcms/core'
9
+ import { AUTOMATION_RESERVED_WORDS } from './template-grammar'
10
+
11
+ // ---------------------------------------------------------------------------
12
+ // Trigger conditions — recursive WhenNode schema (Task 14)
13
+ // ---------------------------------------------------------------------------
14
+
15
+ const whenOperandSchema = z.union([
16
+ z.object({ kind: z.literal('literal'), value: z.unknown() }),
17
+ z.object({ kind: z.literal('ref'), key: z.string().min(1) }),
18
+ ])
19
+
20
+ const whenPredicateSchema = z.object({
21
+ kind: z.literal('predicate'),
22
+ left: whenOperandSchema,
23
+ op: z.enum(['eq', 'neq', 'gt', 'gte', 'lt', 'lte', 'contains', 'startswith', 'endswith', 'in', 'notin', 'isempty', 'isnotempty', 'matches']),
24
+ right: whenOperandSchema.optional(),
25
+ })
26
+
27
+ const whenNodeSchema: z.ZodType<WhenNode> = z.lazy(() =>
28
+ z.union([
29
+ whenPredicateSchema,
30
+ z.object({
31
+ kind: z.literal('group'),
32
+ op: z.enum(['AND', 'OR']),
33
+ children: z.array(whenNodeSchema).min(1),
34
+ negate: z.boolean().optional(),
35
+ }).refine(
36
+ (g) => depthOf(g) <= 10,
37
+ { message: 'WhenNode nesting exceeds maximum depth of 10' },
38
+ ),
39
+ ]),
40
+ )
41
+
42
+ function depthOf(node: unknown, d = 0): number {
43
+ if (d > 10) return d
44
+ if (typeof node !== 'object' || !node) return d
45
+ const n = node as Record<string, unknown>
46
+ if (n['kind'] === 'group' && Array.isArray(n['children'])) {
47
+ return Math.max(...(n['children'] as unknown[]).map((c) => depthOf(c, d + 1)))
48
+ }
49
+ return d
50
+ }
51
+
52
+ const triggerConditionsSchema = whenNodeSchema.nullable().optional()
53
+
54
+ const setVariableFilterSchema = z.object({
55
+ field: z.string().min(1),
56
+ op: z.enum(['eq', 'neq', 'contains', 'gt', 'lt', 'isempty', 'isnotempty']),
57
+ value: z.unknown(),
58
+ })
59
+
60
+ // ---------------------------------------------------------------------------
61
+ // Action schemas
62
+ // ---------------------------------------------------------------------------
63
+
64
+ const setVariableActionSchema = z.object({
65
+ type: z.literal('set_variable'),
66
+ name: z
67
+ .string()
68
+ .min(1)
69
+ .regex(/^[a-zA-Z_][a-zA-Z0-9_]*$/)
70
+ .refine((v) => !AUTOMATION_RESERVED_WORDS.has(v), {
71
+ message: 'automations.editor.errors.variableNameReserved',
72
+ }),
73
+ seed_slug: z.string().min(1).optional(),
74
+ fixed_id: z.string().min(1).optional(),
75
+ column: z.string().min(1).optional(),
76
+ filters: z.array(setVariableFilterSchema).default([]),
77
+ order_by: z.string().optional(),
78
+ order: z.enum(['asc', 'desc']).optional(),
79
+ load_type: z.enum(['fruit', 'branch']).optional(), // accepted but ignored at runtime
80
+ })
81
+
82
+ const webhookActionSchema = z.object({
83
+ type: z.literal('webhook'),
84
+ url: z
85
+ .string()
86
+ .url()
87
+ .refine((u) => {
88
+ try { return new URL(u).protocol === 'https:' } catch { return false }
89
+ }, { message: 'automations.editor.errors.webhookHttpsRequired' })
90
+ .refine((u) => {
91
+ try { return !isPrivateHost(new URL(u).hostname) } catch { return false }
92
+ }, { message: 'automations.editor.errors.webhookPrivateHostBlocked' }),
93
+ method: z.enum(['POST', 'GET', 'PUT']).optional(),
94
+ headers: z.record(z.string(), z.string()).optional(),
95
+ body_template: z.preprocess(
96
+ (v) => (v == null ? '' : v),
97
+ z.string().min(1, 'automations.editor.errors.bodyRequired'),
98
+ ),
99
+ })
100
+
101
+ const sendMailActionSchema = z.object({
102
+ type: z.literal('send_mail'),
103
+ to: z.string().email(),
104
+ subject_template: z.string().min(1),
105
+ body_template: z.string().min(1),
106
+ })
107
+
108
+ const editFieldActionSchema = z.object({
109
+ type: z.literal('edit_field'),
110
+ field: z.string().min(1),
111
+ value: z.unknown(),
112
+ })
113
+
114
+ const createEntryActionSchema = z.object({
115
+ type: z.literal('create_entry'),
116
+ seed_slug: z.string().min(1),
117
+ field_map: z.record(z.string(), z.string()),
118
+ })
119
+
120
+ export const automationActionSchema = z.discriminatedUnion('type', [
121
+ setVariableActionSchema,
122
+ webhookActionSchema,
123
+ sendMailActionSchema,
124
+ editFieldActionSchema,
125
+ createEntryActionSchema,
126
+ ])
127
+
128
+ // ---------------------------------------------------------------------------
129
+ // Triggers schema
130
+ // ---------------------------------------------------------------------------
131
+
132
+ const automationTriggerSchema = z.object({
133
+ event: z.enum(['create', 'update', 'delete', 'cron']),
134
+ cron: z.string().nullable().optional(),
135
+ })
136
+
137
+ const triggersSchema = z
138
+ .array(automationTriggerSchema)
139
+ .min(1, 'At least one trigger is required')
140
+ .refine(
141
+ (triggers) => triggers.filter((t) => t.event === 'cron').length <= 1,
142
+ { message: 'Only one cron trigger is allowed per automation' },
143
+ )
144
+ .refine(
145
+ (triggers) => {
146
+ const events = triggers.map((t) => t.event)
147
+ return new Set(events).size === events.length
148
+ },
149
+ { message: 'Duplicate trigger events are not allowed' },
150
+ )
151
+ .refine(
152
+ (triggers) => triggers.every((t) => t.event !== 'cron' || !!t.cron),
153
+ { message: 'cron expression is required for cron triggers', path: ['cron'] },
154
+ )
155
+
156
+ // ---------------------------------------------------------------------------
157
+ // Automation create/update schemas
158
+ // ---------------------------------------------------------------------------
159
+
160
+ const createAutomationBaseSchema = z.object({
161
+ seed_slug: z.string().min(1),
162
+ name: z.string().min(1).max(100),
163
+ triggers: triggersSchema,
164
+ trigger_conditions: triggerConditionsSchema,
165
+ actions: z.array(automationActionSchema).min(1, 'At least one action is required'),
166
+ })
167
+
168
+ export const createAutomationSchema = createAutomationBaseSchema
169
+
170
+ export const updateAutomationSchema = createAutomationBaseSchema.partial()
171
+
172
+ export const toggleAutomationSchema = z.object({
173
+ enabled: z.boolean(),
174
+ })
175
+
176
+ export type CreateAutomationBody = z.infer<typeof createAutomationSchema>
177
+ export type UpdateAutomationBody = z.infer<typeof updateAutomationSchema>
@@ -1,152 +1,152 @@
1
- // SPDX-License-Identifier: BUSL-1.1
2
- // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
- // See LICENSE in the repository root for license terms.
4
-
5
- import type { Automation } from '@beechcms/core'
6
- import type { AutomationContextSelector, ParsedKey } from './template-grammar'
7
- import { resolvePath } from './automation-runner.utils'
8
-
9
- export interface ResolvedContext {
10
- lookup(key: ParsedKey, onMissing?: (field: string) => void): unknown
11
- triggerEntry: Record<string, unknown> | null
12
- }
13
-
14
- const MAX_PLUCK = 100
15
- const AGGREGATE_OPS = new Set(['count', 'sum', 'avg', 'min', 'max', 'pluck'])
16
-
17
- function applyAggregate(
18
- op: string,
19
- field: string | null,
20
- rows: Array<Record<string, unknown>>,
21
- onMissing?: (f: string) => void,
22
- ): unknown {
23
- switch (op) {
24
- case 'count':
25
- return rows.length
26
-
27
- case 'sum': {
28
- if (!field) { if (onMissing) onMissing('sum:field'); return 0 }
29
- return rows.reduce((acc, r) => {
30
- const v = Number(r[field])
31
- if (Number.isNaN(v)) { if (onMissing) onMissing(`sum:${field}:NaN`); return acc }
32
- return acc + v
33
- }, 0)
34
- }
35
-
36
- case 'avg': {
37
- if (!field || rows.length === 0) { if (onMissing && !field) onMissing('avg:field'); return 0 }
38
- const total = rows.reduce((acc, r) => {
39
- const v = Number(r[field])
40
- if (Number.isNaN(v)) { if (onMissing) onMissing(`avg:${field}:NaN`); return acc }
41
- return acc + v
42
- }, 0)
43
- return rows.length > 0 ? total / rows.length : 0
44
- }
45
-
46
- case 'min': {
47
- if (!field || rows.length === 0) { if (onMissing && !field) onMissing('min:field'); return null }
48
- return rows.reduce<number | null>((acc, r) => {
49
- const v = Number(r[field])
50
- if (Number.isNaN(v)) return acc
51
- return acc === null || v < acc ? v : acc
52
- }, null)
53
- }
54
-
55
- case 'max': {
56
- if (!field || rows.length === 0) { if (onMissing && !field) onMissing('max:field'); return null }
57
- return rows.reduce<number | null>((acc, r) => {
58
- const v = Number(r[field])
59
- if (Number.isNaN(v)) return acc
60
- return acc === null || v > acc ? v : acc
61
- }, null)
62
- }
63
-
64
- case 'pluck': {
65
- if (!field) { if (onMissing) onMissing('pluck:field'); return '' }
66
- const values = rows.slice(0, MAX_PLUCK).map((r) => String(r[field] ?? ''))
67
- const truncated = rows.length > MAX_PLUCK
68
- return values.join(', ') + (truncated ? ' …' : '')
69
- }
70
-
71
- default:
72
- return undefined
73
- }
74
- }
75
-
76
- export async function resolveAutomationContext(
77
- _automation: Automation,
78
- triggerEntry: Record<string, unknown> | null,
79
- batchEntries: Array<Record<string, unknown>>,
80
- ): Promise<ResolvedContext> {
81
- function lookup(parsed: ParsedKey, onMissing?: (field: string) => void): unknown {
82
- if (parsed.kind === 'simple') {
83
- if (parsed.path.startsWith('this.')) {
84
- const field = parsed.path.slice(5)
85
- const val = resolvePath(triggerEntry ?? {}, field)
86
- if (val === undefined && onMissing) onMissing(parsed.path)
87
- return val
88
- }
89
- const val = resolvePath(triggerEntry ?? {}, parsed.path)
90
- if (val === undefined && onMissing) onMissing(parsed.path)
91
- return val
92
- }
93
-
94
- if (parsed.kind !== 'scoped') {
95
- if (onMissing) onMissing(parsed.kind === 'var_access' ? parsed.name : 'unknown')
96
- return undefined
97
- }
98
-
99
- const { scope, selector: _selector, op, field } = parsed
100
-
101
- if (scope === 'this') {
102
- if (op !== 'field' || !field) { if (onMissing) onMissing(`this.${field}`); return undefined }
103
- const val = resolvePath(triggerEntry ?? {}, field)
104
- if (val === undefined && onMissing) onMissing(`this.${field}`)
105
- return val
106
- }
107
-
108
- if (scope === 'batch') {
109
- if (op === 'field') {
110
- if (!field) { if (onMissing) onMissing('batch.field'); return undefined }
111
- const val = resolvePath(batchEntries[0] ?? {}, field)
112
- if (val === undefined && onMissing) onMissing(`batch.${field}`)
113
- return val
114
- }
115
- return applyAggregate(op, field, batchEntries, onMissing)
116
- }
117
-
118
- if (onMissing) onMissing(scope)
119
- return undefined
120
- }
121
-
122
- return { lookup, triggerEntry }
123
- }
124
-
125
- export function deriveEntryContext(
126
- base: ResolvedContext,
127
- entry: Record<string, unknown>,
128
- ): ResolvedContext {
129
- return {
130
- lookup(parsed: ParsedKey, onMissing?: (field: string) => void): unknown {
131
- if (parsed.kind === 'simple') {
132
- if (parsed.path.startsWith('this.')) {
133
- const field = parsed.path.slice(5)
134
- const val = resolvePath(entry, field)
135
- if (val === undefined && onMissing) onMissing(parsed.path)
136
- return val
137
- }
138
- const val = resolvePath(entry, parsed.path)
139
- if (val === undefined && onMissing) onMissing(parsed.path)
140
- return val
141
- }
142
- if (parsed.kind === 'scoped' && parsed.scope === 'this') {
143
- if (parsed.op !== 'field' || !parsed.field) { if (onMissing) onMissing('this.field'); return undefined }
144
- const val = resolvePath(entry, parsed.field)
145
- if (val === undefined && onMissing) onMissing(`this.${parsed.field}`)
146
- return val
147
- }
148
- return base.lookup(parsed, onMissing)
149
- },
150
- triggerEntry: entry,
151
- }
152
- }
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ import type { Automation } from '@beechcms/core'
6
+ import type { AutomationContextSelector, ParsedKey } from './template-grammar'
7
+ import { resolvePath } from './automation-runner.utils'
8
+
9
+ export interface ResolvedContext {
10
+ lookup(key: ParsedKey, onMissing?: (field: string) => void): unknown
11
+ triggerEntry: Record<string, unknown> | null
12
+ }
13
+
14
+ const MAX_PLUCK = 100
15
+ const AGGREGATE_OPS = new Set(['count', 'sum', 'avg', 'min', 'max', 'pluck'])
16
+
17
+ function applyAggregate(
18
+ op: string,
19
+ field: string | null,
20
+ rows: Array<Record<string, unknown>>,
21
+ onMissing?: (f: string) => void,
22
+ ): unknown {
23
+ switch (op) {
24
+ case 'count':
25
+ return rows.length
26
+
27
+ case 'sum': {
28
+ if (!field) { if (onMissing) onMissing('sum:field'); return 0 }
29
+ return rows.reduce((acc, r) => {
30
+ const v = Number(r[field])
31
+ if (Number.isNaN(v)) { if (onMissing) onMissing(`sum:${field}:NaN`); return acc }
32
+ return acc + v
33
+ }, 0)
34
+ }
35
+
36
+ case 'avg': {
37
+ if (!field || rows.length === 0) { if (onMissing && !field) onMissing('avg:field'); return 0 }
38
+ const total = rows.reduce((acc, r) => {
39
+ const v = Number(r[field])
40
+ if (Number.isNaN(v)) { if (onMissing) onMissing(`avg:${field}:NaN`); return acc }
41
+ return acc + v
42
+ }, 0)
43
+ return rows.length > 0 ? total / rows.length : 0
44
+ }
45
+
46
+ case 'min': {
47
+ if (!field || rows.length === 0) { if (onMissing && !field) onMissing('min:field'); return null }
48
+ return rows.reduce<number | null>((acc, r) => {
49
+ const v = Number(r[field])
50
+ if (Number.isNaN(v)) return acc
51
+ return acc === null || v < acc ? v : acc
52
+ }, null)
53
+ }
54
+
55
+ case 'max': {
56
+ if (!field || rows.length === 0) { if (onMissing && !field) onMissing('max:field'); return null }
57
+ return rows.reduce<number | null>((acc, r) => {
58
+ const v = Number(r[field])
59
+ if (Number.isNaN(v)) return acc
60
+ return acc === null || v > acc ? v : acc
61
+ }, null)
62
+ }
63
+
64
+ case 'pluck': {
65
+ if (!field) { if (onMissing) onMissing('pluck:field'); return '' }
66
+ const values = rows.slice(0, MAX_PLUCK).map((r) => String(r[field] ?? ''))
67
+ const truncated = rows.length > MAX_PLUCK
68
+ return values.join(', ') + (truncated ? ' …' : '')
69
+ }
70
+
71
+ default:
72
+ return undefined
73
+ }
74
+ }
75
+
76
+ export async function resolveAutomationContext(
77
+ _automation: Automation,
78
+ triggerEntry: Record<string, unknown> | null,
79
+ batchEntries: Array<Record<string, unknown>>,
80
+ ): Promise<ResolvedContext> {
81
+ function lookup(parsed: ParsedKey, onMissing?: (field: string) => void): unknown {
82
+ if (parsed.kind === 'simple') {
83
+ if (parsed.path.startsWith('this.')) {
84
+ const field = parsed.path.slice(5)
85
+ const val = resolvePath(triggerEntry ?? {}, field)
86
+ if (val === undefined && onMissing) onMissing(parsed.path)
87
+ return val
88
+ }
89
+ const val = resolvePath(triggerEntry ?? {}, parsed.path)
90
+ if (val === undefined && onMissing) onMissing(parsed.path)
91
+ return val
92
+ }
93
+
94
+ if (parsed.kind !== 'scoped') {
95
+ if (onMissing) onMissing(parsed.kind === 'var_access' ? parsed.name : 'unknown')
96
+ return undefined
97
+ }
98
+
99
+ const { scope, selector: _selector, op, field } = parsed
100
+
101
+ if (scope === 'this') {
102
+ if (op !== 'field' || !field) { if (onMissing) onMissing(`this.${field}`); return undefined }
103
+ const val = resolvePath(triggerEntry ?? {}, field)
104
+ if (val === undefined && onMissing) onMissing(`this.${field}`)
105
+ return val
106
+ }
107
+
108
+ if (scope === 'batch') {
109
+ if (op === 'field') {
110
+ if (!field) { if (onMissing) onMissing('batch.field'); return undefined }
111
+ const val = resolvePath(batchEntries[0] ?? {}, field)
112
+ if (val === undefined && onMissing) onMissing(`batch.${field}`)
113
+ return val
114
+ }
115
+ return applyAggregate(op, field, batchEntries, onMissing)
116
+ }
117
+
118
+ if (onMissing) onMissing(scope)
119
+ return undefined
120
+ }
121
+
122
+ return { lookup, triggerEntry }
123
+ }
124
+
125
+ export function deriveEntryContext(
126
+ base: ResolvedContext,
127
+ entry: Record<string, unknown>,
128
+ ): ResolvedContext {
129
+ return {
130
+ lookup(parsed: ParsedKey, onMissing?: (field: string) => void): unknown {
131
+ if (parsed.kind === 'simple') {
132
+ if (parsed.path.startsWith('this.')) {
133
+ const field = parsed.path.slice(5)
134
+ const val = resolvePath(entry, field)
135
+ if (val === undefined && onMissing) onMissing(parsed.path)
136
+ return val
137
+ }
138
+ const val = resolvePath(entry, parsed.path)
139
+ if (val === undefined && onMissing) onMissing(parsed.path)
140
+ return val
141
+ }
142
+ if (parsed.kind === 'scoped' && parsed.scope === 'this') {
143
+ if (parsed.op !== 'field' || !parsed.field) { if (onMissing) onMissing('this.field'); return undefined }
144
+ const val = resolvePath(entry, parsed.field)
145
+ if (val === undefined && onMissing) onMissing(`this.${parsed.field}`)
146
+ return val
147
+ }
148
+ return base.lookup(parsed, onMissing)
149
+ },
150
+ triggerEntry: entry,
151
+ }
152
+ }