npm - @beechcms/api - Versions diffs - 0.6.0-preview.1 → 0.6.0-preview.2 - Mend

@beechcms/api 0.6.0-preview.1 → 0.6.0-preview.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (222) hide show

package/assets/dashboard/BeechLogo.svg +18 -18
package/assets/dashboard/BeechLogoLIght.svg +48 -48
package/assets/dashboard/assets/chart-BrJFdsGZ.js +39 -0
package/assets/dashboard/assets/index-CIaoMxuB.css +1 -0
package/assets/dashboard/assets/index-wTKgygsg.js +636 -0
package/assets/dashboard/assets/pie-chart-recharts-BEaE1FOE.js +1 -0
package/assets/dashboard/assets/timeseries-chart-recharts-DmWM6imF.js +1 -0
package/assets/dashboard/beechLogoDark.svg +48 -48
package/assets/dashboard/index.html +18 -18
package/assets/dashboard/noResult.svg +42 -42
package/assets/dashboard/sol.svg +3 -3
package/assets/dashboard/undraw_enter_nwx3.svg +36 -36
package/migrations/0000_v040_base.sql +265 -265
package/migrations/0029_automations.sql +14 -14
package/migrations/0030_test_seeds.sql +125 -125
package/package.json +2 -2
package/src/auth/__fixtures__/in-memory-hash-provider.ts +17 -17
package/src/auth/__fixtures__/static-token-service.ts +22 -22
package/src/auth/bcrypt-hash-provider.ts +24 -24
package/src/auth/constants.ts +14 -14
package/src/auth/generate-refresh-token.test.ts +23 -23
package/src/auth/hash-provider.test.ts +55 -55
package/src/auth/jose-token-service.ts +62 -62
package/src/auth/jwt-claims-passthrough.test.ts +87 -87
package/src/auth/login.test.ts +100 -100
package/src/auth/login.ts +78 -78
package/src/auth/refresh.ts +11 -11
package/src/auth/token-service.test.ts +90 -90
package/src/factory.ts +370 -368
package/src/features/automations/__tests__/action-executors.test.ts +255 -255
package/src/features/automations/__tests__/automation-runner.test.ts +196 -196
package/src/features/automations/__tests__/automation-runner.utils.test.ts +60 -60
package/src/features/automations/__tests__/automations.handler.test.ts +264 -264
package/src/features/automations/__tests__/automations.repository.test.ts +163 -163
package/src/features/automations/__tests__/automations.schema.test.ts +224 -224
package/src/features/automations/__tests__/context-resolver.test.ts +126 -126
package/src/features/automations/__tests__/cron-runner.test.ts +267 -267
package/src/features/automations/__tests__/cron-runner.utils.test.ts +144 -144
package/src/features/automations/__tests__/set-variable.executor.test.ts +383 -383
package/src/features/automations/__tests__/template-grammar.test.ts +308 -308
package/src/features/automations/__tests__/webhook.executor.test.ts +142 -142
package/src/features/automations/__tests__/when-evaluator.test.ts +274 -274
package/src/features/automations/__tests__/when-pushdown.test.ts +281 -281
package/src/features/automations/action-executors/create-entry.executor.ts +27 -27
package/src/features/automations/action-executors/edit-field.executor.ts +26 -26
package/src/features/automations/action-executors/index.ts +37 -37
package/src/features/automations/action-executors/send-mail.executor.ts +53 -53
package/src/features/automations/action-executors/set-variable.executor.ts +159 -159
package/src/features/automations/action-executors/webhook.executor.ts +67 -67
package/src/features/automations/automation-runner.ts +85 -85
package/src/features/automations/automation-runner.utils.ts +47 -47
package/src/features/automations/automations.handler.ts +197 -197
package/src/features/automations/automations.schema.ts +177 -177
package/src/features/automations/context-resolver.ts +152 -152
package/src/features/automations/cron-runner.ts +140 -140
package/src/features/automations/cron-runner.utils.ts +44 -44
package/src/features/automations/filter-translation.ts +46 -46
package/src/features/automations/index.ts +16 -16
package/src/features/automations/template-grammar.ts +245 -245
package/src/features/automations/var-access-resolver.ts +140 -140
package/src/features/automations/when-evaluator.ts +87 -87
package/src/features/automations/when-pushdown.ts +57 -57
package/src/features/backrefs/__tests__/backrefs.handler.test.ts +359 -359
package/src/features/backrefs/backrefs.handler.ts +168 -168
package/src/features/backrefs/d1-backref.repository.ts +84 -84
package/src/features/backrefs/index.ts +5 -5
package/src/features/content/constants.ts +16 -16
package/src/features/content/handlers/bulk.handler.ts +185 -185
package/src/features/content/handlers/create.ts +129 -129
package/src/features/content/handlers/delete.ts +62 -62
package/src/features/content/handlers/facets.ts +49 -49
package/src/features/content/handlers/get.ts +120 -120
package/src/features/content/handlers/helpers.test.ts +180 -180
package/src/features/content/handlers/helpers.ts +93 -93
package/src/features/content/handlers/list.ts +174 -174
package/src/features/content/handlers/update.ts +174 -174
package/src/features/content/index.ts +26 -26
package/src/features/dashboard-layout/__tests__/dashboard-layout.handler.test.ts +388 -0
package/src/features/dashboard-layout/dashboard-layout.handler.ts +206 -0
package/src/features/dashboard-layout/index.ts +5 -0
package/src/features/draft/draft.handler.ts +195 -195
package/src/features/draft/draft.middleware.ts +66 -66
package/src/features/draft/index.ts +5 -5
package/src/features/email/email.provider.ts +42 -42
package/src/features/email/email.service.ts +98 -98
package/src/features/email/email.types.ts +119 -119
package/src/features/email/index.ts +33 -33
package/src/features/email/providers/resend.ts +67 -67
package/src/features/email/providers/smtp.ts +55 -55
package/src/features/email/templates/automation-mail.ts +19 -19
package/src/features/email/templates/password-changed.ts +63 -63
package/src/features/email/templates/password-reset.ts +68 -68
package/src/features/email/templates/shell.ts +96 -96
package/src/features/notifications/index.ts +5 -5
package/src/features/notifications/notifications.handler.ts +105 -105
package/src/features/password-reset/index.ts +19 -19
package/src/features/password-reset/request.ts +92 -92
package/src/features/password-reset/reset.ts +102 -102
package/src/features/rotate-field/index.ts +5 -5
package/src/features/rotate-field/rotate-field.handler.ts +132 -132
package/src/features/rotate-field/rotate-field.schema.ts +17 -17
package/src/features/schema/schema.handler.ts +131 -131
package/src/features/seeds/index.ts +5 -5
package/src/features/seeds/seeds.handler.test.ts +1199 -632
package/src/features/seeds/seeds.handler.ts +558 -693
package/src/features/settings/__tests__/settings.handler.test.ts +555 -555
package/src/features/settings/settings.handler.ts +392 -392
package/src/features/setup/index.ts +288 -204
package/src/features/stats/index.ts +5 -5
package/src/features/stats/stats.handler.ts +420 -420
package/src/features/webhooks/index.ts +63 -63
package/src/index.ts +65 -65
package/src/media-utils.ts +82 -82
package/src/middleware/auth-providers.middleware.test.ts +85 -0
package/src/middleware/auth-providers.middleware.ts +45 -45
package/src/middleware/observability.middleware.test.ts +93 -0
package/src/middleware/observability.middleware.ts +70 -70
package/src/middleware/rate-limit.middleware.ts +45 -45
package/src/middleware/repository.middleware.ts +117 -114
package/src/middleware/seed-registry.middleware.test.ts +97 -97
package/src/middleware/seed-registry.middleware.ts +21 -21
package/src/middleware/storage.middleware.ts +25 -25
package/src/middleware.ts +45 -45
package/src/public/access-policy.ts +27 -27
package/src/public/api-key-middleware.ts +57 -57
package/src/public/cache-utils.ts +38 -38
package/src/public/entry-projection.ts +46 -46
package/src/public/idempotency.ts +23 -23
package/src/public/index.ts +16 -16
package/src/public/problem-details.ts +124 -124
package/src/public/public-add.ts +114 -114
package/src/public/public-edit.ts +163 -163
package/src/public/public-errors.ts +19 -19
package/src/public/public-read.ts +63 -63
package/src/public/public-routes.ts +88 -88
package/src/public/query-builder.test.ts +224 -224
package/src/public/query-builder.ts +156 -156
package/src/public/rate-limit-middleware.ts +34 -34
package/src/public/read-list.ts +54 -54
package/src/public/read-single.ts +48 -48
package/src/public/response-builder.ts +30 -30
package/src/public/sanitize.ts +69 -69
package/src/public/slug-utils.ts +18 -18
package/src/rate-limit/cloudflare-rate-limiter.test.ts +30 -30
package/src/rate-limit/cloudflare-rate-limiter.ts +15 -15
package/src/rate-limit/in-memory-rate-limiter.test.ts +37 -37
package/src/rate-limit/in-memory-rate-limiter.ts +17 -17
package/src/rate-limit/no-op-rate-limiter.test.ts +22 -22
package/src/rate-limit/no-op-rate-limiter.ts +11 -11
package/src/search-utils.test.ts +211 -211
package/src/search-utils.ts +213 -213
package/src/search.ts +65 -65
package/src/shared/apply-policies.test.ts +81 -81
package/src/shared/apply-policies.ts +67 -67
package/src/shared/automations.repository.d1.ts +150 -150
package/src/shared/background-notification-service.test.ts +62 -62
package/src/shared/background-notification-service.ts +52 -52
package/src/shared/base.repository.d1.ts +32 -32
package/src/shared/content-utils.test.ts +165 -165
package/src/shared/content-utils.ts +86 -86
package/src/shared/content.repository.d1.test.ts +507 -458
package/src/shared/content.repository.d1.ts +851 -851
package/src/shared/d1-activity-log.repository.test.ts +140 -140
package/src/shared/d1-activity-log.repository.ts +105 -105
package/src/shared/d1-activity-logger.test.ts +86 -86
package/src/shared/d1-activity-logger.ts +67 -67
package/src/shared/d1-analytics.repository.test.ts +78 -78
package/src/shared/d1-analytics.repository.ts +85 -85
package/src/shared/d1-content-scan.repository.test.ts +80 -80
package/src/shared/d1-content-scan.repository.ts +37 -37
package/src/shared/d1-notification.repository.test.ts +128 -128
package/src/shared/d1-notification.repository.ts +118 -118
package/src/shared/d1-password-reset-token.repository.test.ts +81 -81
package/src/shared/d1-password-reset-token.repository.ts +56 -56
package/src/shared/d1-search.repository.test.ts +87 -87
package/src/shared/d1-search.repository.ts +88 -88
package/src/shared/d1-session.repository.test.ts +125 -125
package/src/shared/d1-session.repository.ts +102 -102
package/src/shared/d1-setup-checklist.repository.ts +36 -36
package/src/shared/d1-user.repository.test.ts +151 -151
package/src/shared/d1-user.repository.ts +119 -119
package/src/shared/d1-widget.repository.test.ts +267 -221
package/src/shared/d1-widget.repository.ts +385 -341
package/src/shared/dashboard-layout.repository.d1.test.ts +135 -0
package/src/shared/dashboard-layout.repository.d1.ts +58 -0
package/src/shared/demo-data-sql.ts +216 -54
package/src/shared/demo-data.repository.d1.ts +20 -20
package/src/shared/execution-context-scheduler.ts +13 -13
package/src/shared/fixed-clock.ts +25 -25
package/src/shared/fts-sync.ts +8 -8
package/src/shared/idempotency.repository.d1.test.ts +83 -83
package/src/shared/idempotency.repository.d1.ts +60 -60
package/src/shared/in-memory-activity-logger.ts +19 -19
package/src/shared/in-memory-notification-service.ts +19 -19
package/src/shared/in-memory-seed.repository.ts +58 -51
package/src/shared/media.repository.d1.test.ts +107 -107
package/src/shared/media.repository.d1.ts +68 -68
package/src/shared/qstash-notification-service.test.ts +67 -67
package/src/shared/qstash-notification-service.ts +55 -55
package/src/shared/query-utils.ts +141 -141
package/src/shared/request-utils.ts +26 -26
package/src/shared/schema-mutator.d1.test.ts +142 -0
package/src/shared/schema-mutator.d1.ts +64 -64
package/src/shared/seed-layout.repository.d1.test.ts +114 -114
package/src/shared/seed-layout.repository.d1.ts +62 -62
package/src/shared/seed-registry-cache.test.ts +68 -68
package/src/shared/seed-registry-cache.ts +49 -49
package/src/shared/seed.repository.d1.test.ts +143 -143
package/src/shared/seed.repository.d1.ts +98 -98
package/src/shared/sequential-id-generator.ts +33 -33
package/src/shared/site-settings.repository.d1.ts +53 -53
package/src/shared/storage/factory.ts +41 -41
package/src/shared/storage/s3-bucket.ts +195 -195
package/src/shared/storage-utils.ts +40 -40
package/src/shared/system-stats.repository.d1.test.ts +58 -58
package/src/shared/system-stats.repository.d1.ts +48 -48
package/src/types.ts +90 -87
package/src/upload.ts +198 -198
package/src/widget.test.ts +85 -0
package/src/widget.ts +251 -212
package/assets/dashboard/assets/index-BSjk0Sx9.js +0 -634
package/assets/dashboard/assets/index-kRCYVN2B.css +0 -1

package/src/public/public-routes.ts CHANGED Viewed

@@ -1,88 +1,88 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-import { Hono } from 'hono'
-import type { AppEnv } from '../types'
-import { publicReadHandler } from './public-read'
-import { publicAddHandler } from './public-add'
-import { publicEditHandler } from './public-edit'
-const publicApp = new Hono<AppEnv>()
-publicApp.get('/health', (c) => {
-  return c.json({ ok: true, service: 'public-api' }, 200)
-})
-/** Returns the public-facing schema: only seeds with public read or post enabled. */
-publicApp.get('/schema', (c) => {
-  const registry = c.get('seedRegistry')
-  const publicSeeds = registry.all()
-    .filter(seed => seed.allowPublicRead === true || seed.allowPublicPost === true || seed.allowPublicEdit === true)
-    .map(seed => ({
-      slug: seed.slug,
-      label: seed.label,
-      labelPlural: seed.labelPlural,
-      allowPublicRead: seed.allowPublicRead ?? false,
-      allowPublicPost: seed.allowPublicPost ?? false,
-      allowPublicEdit: seed.allowPublicEdit ?? false,
-      branches: (seed.branches ?? []).map(branch => ({
-        alias: branch.alias,
-        type: branch.type,
-        label: branch.label,
-        requiredOnCreate: branch.requiredOnCreate ?? false,
-        policies: {
-          public: branch.policies?.public ?? true,
-          visibility: branch.policies?.visibility ?? 'full',
-        },
-      })),
-    }))
-  return c.json({ seeds: publicSeeds })
-})
-/** HTML render of the public schema for quick browser inspection. */
-publicApp.get('/schema.html', (c) => {
-  const registry = c.get('seedRegistry')
-  const publicSeeds = registry.all()
-    .filter(seed => seed.allowPublicRead === true || seed.allowPublicPost === true || seed.allowPublicEdit === true)
-  const seedHtml = publicSeeds.map(seed => {
-    const ops = [
-      seed.allowPublicRead && 'GET /:seed',
-      seed.allowPublicPost && 'POST /:seed/add',
-      seed.allowPublicEdit && 'PUT /:seed/edit/:id',
-    ].filter(Boolean).join(', ')
-    const branchRows = (seed.branches ?? []).map(b =>
-      `<tr><td>${b.alias}</td><td>${b.type}</td><td>${b.label}</td><td>${b.requiredOnCreate ? 'yes' : ''}</td><td>${(b.policies?.public ?? true) ? 'readable' : 'hidden'}</td></tr>`
-    ).join('')
-    return `<section>
-      <h2>${seed.label} <code>${seed.slug}</code></h2>
-      <p><strong>Allowed operations:</strong> ${ops || 'none'}</p>
-      <table><thead><tr><th>alias</th><th>type</th><th>label</th><th>required</th><th>public access</th></tr></thead>
-      <tbody>${branchRows}</tbody></table>
-    </section>`
-  }).join('\n')
-  const html = `<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8">
-<title>BeechCMS Public Schema</title>
-<style>body{font-family:system-ui,sans-serif;max-width:900px;margin:2rem auto;padding:0 1rem;color:#222}
-code{background:#f3f4f6;padding:2px 6px;border-radius:4px}
-table{border-collapse:collapse;width:100%}th,td{text-align:left;padding:6px 10px;border:1px solid #e5e7eb}
-th{background:#f9fafb}h2{margin-top:2rem}section{margin-bottom:2rem}</style>
-</head><body>
-<h1>BeechCMS — Public API Schema</h1>
-<p>Only content types with public access enabled are listed here.</p>
-${seedHtml || '<p><em>No content types with public access configured.</em></p>'}
-</body></html>`
-  return c.html(html)
-})
-publicApp.get('/:seed', publicReadHandler)
-publicApp.post('/:seed/add', publicAddHandler)
-publicApp.put('/:seed/edit/:id', publicEditHandler)
-export const publicRoutes = publicApp
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+import { Hono } from 'hono'
+import type { AppEnv } from '../types'
+import { publicReadHandler } from './public-read'
+import { publicAddHandler } from './public-add'
+import { publicEditHandler } from './public-edit'
+const publicApp = new Hono<AppEnv>()
+publicApp.get('/health', (c) => {
+  return c.json({ ok: true, service: 'public-api' }, 200)
+})
+/** Returns the public-facing schema: only seeds with public read or post enabled. */
+publicApp.get('/schema', (c) => {
+  const registry = c.get('seedRegistry')
+  const publicSeeds = registry.all()
+    .filter(seed => seed.allowPublicRead === true || seed.allowPublicPost === true || seed.allowPublicEdit === true)
+    .map(seed => ({
+      slug: seed.slug,
+      label: seed.label,
+      labelPlural: seed.labelPlural,
+      allowPublicRead: seed.allowPublicRead ?? false,
+      allowPublicPost: seed.allowPublicPost ?? false,
+      allowPublicEdit: seed.allowPublicEdit ?? false,
+      branches: (seed.branches ?? []).map(branch => ({
+        alias: branch.alias,
+        type: branch.type,
+        label: branch.label,
+        requiredOnCreate: branch.requiredOnCreate ?? false,
+        policies: {
+          public: branch.policies?.public ?? true,
+          visibility: branch.policies?.visibility ?? 'full',
+        },
+      })),
+    }))
+  return c.json({ seeds: publicSeeds })
+})
+/** HTML render of the public schema for quick browser inspection. */
+publicApp.get('/schema.html', (c) => {
+  const registry = c.get('seedRegistry')
+  const publicSeeds = registry.all()
+    .filter(seed => seed.allowPublicRead === true || seed.allowPublicPost === true || seed.allowPublicEdit === true)
+  const seedHtml = publicSeeds.map(seed => {
+    const ops = [
+      seed.allowPublicRead && 'GET /:seed',
+      seed.allowPublicPost && 'POST /:seed/add',
+      seed.allowPublicEdit && 'PUT /:seed/edit/:id',
+    ].filter(Boolean).join(', ')
+    const branchRows = (seed.branches ?? []).map(b =>
+      `<tr><td>${b.alias}</td><td>${b.type}</td><td>${b.label}</td><td>${b.requiredOnCreate ? 'yes' : ''}</td><td>${(b.policies?.public ?? true) ? 'readable' : 'hidden'}</td></tr>`
+    ).join('')
+    return `<section>
+      <h2>${seed.label} <code>${seed.slug}</code></h2>
+      <p><strong>Allowed operations:</strong> ${ops || 'none'}</p>
+      <table><thead><tr><th>alias</th><th>type</th><th>label</th><th>required</th><th>public access</th></tr></thead>
+      <tbody>${branchRows}</tbody></table>
+    </section>`
+  }).join('\n')
+  const html = `<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8">
+<title>BeechCMS Public Schema</title>
+<style>body{font-family:system-ui,sans-serif;max-width:900px;margin:2rem auto;padding:0 1rem;color:#222}
+code{background:#f3f4f6;padding:2px 6px;border-radius:4px}
+table{border-collapse:collapse;width:100%}th,td{text-align:left;padding:6px 10px;border:1px solid #e5e7eb}
+th{background:#f9fafb}h2{margin-top:2rem}section{margin-bottom:2rem}</style>
+</head><body>
+<h1>BeechCMS — Public API Schema</h1>
+<p>Only content types with public access enabled are listed here.</p>
+${seedHtml || '<p><em>No content types with public access configured.</em></p>'}
+</body></html>`
+  return c.html(html)
+})
+publicApp.get('/:seed', publicReadHandler)
+publicApp.post('/:seed/add', publicAddHandler)
+publicApp.put('/:seed/edit/:id', publicEditHandler)
+export const publicRoutes = publicApp

package/src/public/query-builder.test.ts CHANGED Viewed

@@ -1,224 +1,224 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-import { describe, it, expect } from 'vitest'
-import {
-  parsePublicFilter,
-  toEngineFilters,
-  parsePublicPagination,
-  parseLatestCount,
-} from './query-builder'
-import type { Seed } from '@beechcms/core'
-const SEED = {
-  slug: 'posts',
-  displayNameAlias: 'title',
-  branches: [
-    { id: 'br_01', alias: 'title', type: 'text' },
-    { id: 'br_02', alias: 'count', type: 'number' },
-    { id: 'br_03', alias: 'active', type: 'boolean' },
-    { id: 'br_04', alias: 'published_at', type: 'date' },
-    { id: 'br_05', alias: 'tags', type: 'tags' },
-    { id: 'br_06', alias: 'body', type: 'richtext' },
-    { id: 'br_07', alias: 'attachment', type: 'file' },
-    { id: 'br_08', alias: 'meta', type: 'json' },
-  ],
-} as unknown as Seed
-// ─── parsePublicFilter ────────────────────────────────────────────────────────
-describe('parsePublicFilter', () => {
-  it('returns null for undefined input', () => {
-    expect(parsePublicFilter(undefined)).toBeNull()
-  })
-  it('returns null for empty string', () => {
-    expect(parsePublicFilter('')).toBeNull()
-  })
-  it('parses a valid filter with explicit AND logic', () => {
-    const raw = JSON.stringify({ logic: 'AND', where: [{ field: 'title', op: 'eq', value: 'Hello' }] })
-    const result = parsePublicFilter(raw)!
-    expect(result.logic).toBe('AND')
-    expect(result.where).toHaveLength(1)
-    expect(result.where[0]).toEqual({ field: 'title', op: 'eq', value: 'Hello' })
-  })
-  it('defaults logic to AND when omitted', () => {
-    const raw = JSON.stringify({ where: [{ field: 'title', op: 'contains', value: 'x' }] })
-    expect(parsePublicFilter(raw)!.logic).toBe('AND')
-  })
-  it('accepts case-insensitive logic value', () => {
-    const raw = JSON.stringify({ logic: 'or', where: [] })
-    expect(parsePublicFilter(raw)!.logic).toBe('OR')
-  })
-  it('throws for malformed JSON', () => {
-    expect(() => parsePublicFilter('{not-json')).toThrow('malformed JSON')
-  })
-  it('throws when parsed value is not an object', () => {
-    expect(() => parsePublicFilter('"a string"')).toThrow('object expected')
-  })
-  it('throws for an invalid logic value', () => {
-    const raw = JSON.stringify({ logic: 'BOTH', where: [] })
-    expect(() => parsePublicFilter(raw)).toThrow("'AND' or 'OR'")
-  })
-  it('throws for an unknown operator in a where condition', () => {
-    const raw = JSON.stringify({ where: [{ field: 'title', op: 'like', value: 'x' }] })
-    expect(() => parsePublicFilter(raw)).toThrow("unknown operator 'like'")
-  })
-  it('throws when where is not an array', () => {
-    const raw = JSON.stringify({ where: { field: 'title', op: 'eq' } })
-    expect(() => parsePublicFilter(raw)).toThrow("'where' must be an array")
-  })
-  it('filters out null conditions from where (missing field/op)', () => {
-    const raw = JSON.stringify({ where: [null, { field: 'title', op: 'eq', value: 'x' }] })
-    const result = parsePublicFilter(raw)!
-    expect(result.where).toHaveLength(1)
-  })
-  it('accepts all valid operators without throwing', () => {
-    const operators = ['eq', 'neq', 'gt', 'gte', 'lt', 'lte', 'contains', 'not_contains',
-      'starts_with', 'ends_with', 'is_empty', 'is_not_empty', 'in', 'not_in',
-      'has_tag', 'has_any_tag', 'has_all_tags']
-    for (const op of operators) {
-      const raw = JSON.stringify({ where: [{ field: 'title', op, value: 'x' }] })
-      expect(() => parsePublicFilter(raw)).not.toThrow()
-    }
-  })
-})
-// ─── toEngineFilters ──────────────────────────────────────────────────────────
-describe('toEngineFilters', () => {
-  it('returns [] for null filter', () => {
-    expect(toEngineFilters(SEED, null)).toEqual([])
-  })
-  it('returns [] when where array is empty', () => {
-    expect(toEngineFilters(SEED, { where: [], logic: 'AND' })).toEqual([])
-  })
-  it('maps text branch to FilterType "text"', () => {
-    const result = toEngineFilters(SEED, { where: [{ field: 'title', op: 'eq', value: 'Hi' }], logic: 'AND' })
-    expect(result[0].type).toBe('text')
-  })
-  it('maps number branch to FilterType "number"', () => {
-    const result = toEngineFilters(SEED, { where: [{ field: 'count', op: 'gt', value: 5 }], logic: 'AND' })
-    expect(result[0].type).toBe('number')
-  })
-  it('maps boolean branch to FilterType "boolean"', () => {
-    const result = toEngineFilters(SEED, { where: [{ field: 'active', op: 'eq', value: true }], logic: 'AND' })
-    expect(result[0].type).toBe('boolean')
-  })
-  it('maps date branch to FilterType "date"', () => {
-    const result = toEngineFilters(SEED, { where: [{ field: 'published_at', op: 'gt', value: '2024-01-01' }], logic: 'AND' })
-    expect(result[0].type).toBe('date')
-  })
-  it('maps tags branch to FilterType "tags"', () => {
-    const result = toEngineFilters(SEED, { where: [{ field: 'tags', op: 'has_tag', value: 'news' }], logic: 'AND' })
-    expect(result[0].type).toBe('tags')
-  })
-  it('maps richtext branch to FilterType "text"', () => {
-    const result = toEngineFilters(SEED, { where: [{ field: 'body', op: 'contains', value: 'x' }], logic: 'AND' })
-    expect(result[0].type).toBe('text')
-  })
-  it('maps file branch to FilterType "text"', () => {
-    const result = toEngineFilters(SEED, { where: [{ field: 'attachment', op: 'contains', value: 'url' }], logic: 'AND' })
-    expect(result[0].type).toBe('text')
-  })
-  it('maps json branch to FilterType "json"', () => {
-    const result = toEngineFilters(SEED, { where: [{ field: 'meta', op: 'eq', value: '{}' }], logic: 'AND' })
-    expect(result[0].type).toBe('json')
-  })
-  it('maps system columns (id, slug, status) to FilterType "system"', () => {
-    for (const field of ['id', 'slug', 'status', 'created_at', 'updated_at']) {
-      const result = toEngineFilters(SEED, { where: [{ field, op: 'eq', value: 'x' }], logic: 'AND' })
-      expect(result[0].type).toBe('system')
-    }
-  })
-  it('maps unknown fields to FilterType "text"', () => {
-    const result = toEngineFilters(SEED, { where: [{ field: 'ghost_field', op: 'eq', value: 'x' }], logic: 'AND' })
-    expect(result[0].type).toBe('text')
-  })
-  it('produces one FilterGroup per condition', () => {
-    const filter = {
-      where: [
-        { field: 'title', op: 'eq' as const, value: 'A' },
-        { field: 'count', op: 'gt' as const, value: 5 },
-      ],
-      logic: 'AND' as const,
-    }
-    expect(toEngineFilters(SEED, filter)).toHaveLength(2)
-  })
-  it('includes column and conditions in each FilterGroup', () => {
-    const filter = { where: [{ field: 'title', op: 'contains' as const, value: 'hi' }], logic: 'AND' as const }
-    const [group] = toEngineFilters(SEED, filter)
-    expect(group.column).toBe('title')
-    expect(group.conditions[0].op).toBe('contains')
-    expect(group.conditions[0].value).toBe('hi')
-  })
-})
-// ─── parsePublicPagination ────────────────────────────────────────────────────
-describe('parsePublicPagination', () => {
-  it('defaults to page=1 and limit=25 when input is empty', () => {
-    expect(parsePublicPagination({})).toEqual({ page: 1, limit: 25 })
-  })
-  it('parses valid page and limit values', () => {
-    expect(parsePublicPagination({ page: '3', limit: '10' })).toEqual({ page: 3, limit: 10 })
-  })
-  it('clamps limit to a maximum of 100', () => {
-    expect(parsePublicPagination({ limit: '500' }).limit).toBe(100)
-  })
-  it('uses default for invalid (non-numeric) input', () => {
-    expect(parsePublicPagination({ page: 'abc', limit: 'xyz' })).toEqual({ page: 1, limit: 25 })
-  })
-})
-// ─── parseLatestCount ─────────────────────────────────────────────────────────
-describe('parseLatestCount', () => {
-  it('returns 10 for undefined', () => {
-    expect(parseLatestCount(undefined)).toBe(10)
-  })
-  it('parses a valid integer string', () => {
-    expect(parseLatestCount('5')).toBe(5)
-  })
-  it('clamps to 1 for values below minimum', () => {
-    expect(parseLatestCount('0')).toBe(1)
-    expect(parseLatestCount('-5')).toBe(1)
-  })
-  it('clamps to 100 for values above maximum', () => {
-    expect(parseLatestCount('200')).toBe(100)
-  })
-  it('returns 10 for non-numeric input', () => {
-    expect(parseLatestCount('abc')).toBe(10)
-  })
-})
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+import { describe, it, expect } from 'vitest'
+import {
+  parsePublicFilter,
+  toEngineFilters,
+  parsePublicPagination,
+  parseLatestCount,
+} from './query-builder'
+import type { Seed } from '@beechcms/core'
+const SEED = {
+  slug: 'posts',
+  displayNameAlias: 'title',
+  branches: [
+    { id: 'br_01', alias: 'title', type: 'text' },
+    { id: 'br_02', alias: 'count', type: 'number' },
+    { id: 'br_03', alias: 'active', type: 'boolean' },
+    { id: 'br_04', alias: 'published_at', type: 'date' },
+    { id: 'br_05', alias: 'tags', type: 'tags' },
+    { id: 'br_06', alias: 'body', type: 'richtext' },
+    { id: 'br_07', alias: 'attachment', type: 'file' },
+    { id: 'br_08', alias: 'meta', type: 'json' },
+  ],
+} as unknown as Seed
+// ─── parsePublicFilter ────────────────────────────────────────────────────────
+describe('parsePublicFilter', () => {
+  it('returns null for undefined input', () => {
+    expect(parsePublicFilter(undefined)).toBeNull()
+  })
+  it('returns null for empty string', () => {
+    expect(parsePublicFilter('')).toBeNull()
+  })
+  it('parses a valid filter with explicit AND logic', () => {
+    const raw = JSON.stringify({ logic: 'AND', where: [{ field: 'title', op: 'eq', value: 'Hello' }] })
+    const result = parsePublicFilter(raw)!
+    expect(result.logic).toBe('AND')
+    expect(result.where).toHaveLength(1)
+    expect(result.where[0]).toEqual({ field: 'title', op: 'eq', value: 'Hello' })
+  })
+  it('defaults logic to AND when omitted', () => {
+    const raw = JSON.stringify({ where: [{ field: 'title', op: 'contains', value: 'x' }] })
+    expect(parsePublicFilter(raw)!.logic).toBe('AND')
+  })
+  it('accepts case-insensitive logic value', () => {
+    const raw = JSON.stringify({ logic: 'or', where: [] })
+    expect(parsePublicFilter(raw)!.logic).toBe('OR')
+  })
+  it('throws for malformed JSON', () => {
+    expect(() => parsePublicFilter('{not-json')).toThrow('malformed JSON')
+  })
+  it('throws when parsed value is not an object', () => {
+    expect(() => parsePublicFilter('"a string"')).toThrow('object expected')
+  })
+  it('throws for an invalid logic value', () => {
+    const raw = JSON.stringify({ logic: 'BOTH', where: [] })
+    expect(() => parsePublicFilter(raw)).toThrow("'AND' or 'OR'")
+  })
+  it('throws for an unknown operator in a where condition', () => {
+    const raw = JSON.stringify({ where: [{ field: 'title', op: 'like', value: 'x' }] })
+    expect(() => parsePublicFilter(raw)).toThrow("unknown operator 'like'")
+  })
+  it('throws when where is not an array', () => {
+    const raw = JSON.stringify({ where: { field: 'title', op: 'eq' } })
+    expect(() => parsePublicFilter(raw)).toThrow("'where' must be an array")
+  })
+  it('filters out null conditions from where (missing field/op)', () => {
+    const raw = JSON.stringify({ where: [null, { field: 'title', op: 'eq', value: 'x' }] })
+    const result = parsePublicFilter(raw)!
+    expect(result.where).toHaveLength(1)
+  })
+  it('accepts all valid operators without throwing', () => {
+    const operators = ['eq', 'neq', 'gt', 'gte', 'lt', 'lte', 'contains', 'not_contains',
+      'starts_with', 'ends_with', 'is_empty', 'is_not_empty', 'in', 'not_in',
+      'has_tag', 'has_any_tag', 'has_all_tags']
+    for (const op of operators) {
+      const raw = JSON.stringify({ where: [{ field: 'title', op, value: 'x' }] })
+      expect(() => parsePublicFilter(raw)).not.toThrow()
+    }
+  })
+})
+// ─── toEngineFilters ──────────────────────────────────────────────────────────
+describe('toEngineFilters', () => {
+  it('returns [] for null filter', () => {
+    expect(toEngineFilters(SEED, null)).toEqual([])
+  })
+  it('returns [] when where array is empty', () => {
+    expect(toEngineFilters(SEED, { where: [], logic: 'AND' })).toEqual([])
+  })
+  it('maps text branch to FilterType "text"', () => {
+    const result = toEngineFilters(SEED, { where: [{ field: 'title', op: 'eq', value: 'Hi' }], logic: 'AND' })
+    expect(result[0].type).toBe('text')
+  })
+  it('maps number branch to FilterType "number"', () => {
+    const result = toEngineFilters(SEED, { where: [{ field: 'count', op: 'gt', value: 5 }], logic: 'AND' })
+    expect(result[0].type).toBe('number')
+  })
+  it('maps boolean branch to FilterType "boolean"', () => {
+    const result = toEngineFilters(SEED, { where: [{ field: 'active', op: 'eq', value: true }], logic: 'AND' })
+    expect(result[0].type).toBe('boolean')
+  })
+  it('maps date branch to FilterType "date"', () => {
+    const result = toEngineFilters(SEED, { where: [{ field: 'published_at', op: 'gt', value: '2024-01-01' }], logic: 'AND' })
+    expect(result[0].type).toBe('date')
+  })
+  it('maps tags branch to FilterType "tags"', () => {
+    const result = toEngineFilters(SEED, { where: [{ field: 'tags', op: 'has_tag', value: 'news' }], logic: 'AND' })
+    expect(result[0].type).toBe('tags')
+  })
+  it('maps richtext branch to FilterType "text"', () => {
+    const result = toEngineFilters(SEED, { where: [{ field: 'body', op: 'contains', value: 'x' }], logic: 'AND' })
+    expect(result[0].type).toBe('text')
+  })
+  it('maps file branch to FilterType "text"', () => {
+    const result = toEngineFilters(SEED, { where: [{ field: 'attachment', op: 'contains', value: 'url' }], logic: 'AND' })
+    expect(result[0].type).toBe('text')
+  })
+  it('maps json branch to FilterType "json"', () => {
+    const result = toEngineFilters(SEED, { where: [{ field: 'meta', op: 'eq', value: '{}' }], logic: 'AND' })
+    expect(result[0].type).toBe('json')
+  })
+  it('maps system columns (id, slug, status) to FilterType "system"', () => {
+    for (const field of ['id', 'slug', 'status', 'created_at', 'updated_at']) {
+      const result = toEngineFilters(SEED, { where: [{ field, op: 'eq', value: 'x' }], logic: 'AND' })
+      expect(result[0].type).toBe('system')
+    }
+  })
+  it('maps unknown fields to FilterType "text"', () => {
+    const result = toEngineFilters(SEED, { where: [{ field: 'ghost_field', op: 'eq', value: 'x' }], logic: 'AND' })
+    expect(result[0].type).toBe('text')
+  })
+  it('produces one FilterGroup per condition', () => {
+    const filter = {
+      where: [
+        { field: 'title', op: 'eq' as const, value: 'A' },
+        { field: 'count', op: 'gt' as const, value: 5 },
+      ],
+      logic: 'AND' as const,
+    }
+    expect(toEngineFilters(SEED, filter)).toHaveLength(2)
+  })
+  it('includes column and conditions in each FilterGroup', () => {
+    const filter = { where: [{ field: 'title', op: 'contains' as const, value: 'hi' }], logic: 'AND' as const }
+    const [group] = toEngineFilters(SEED, filter)
+    expect(group.column).toBe('title')
+    expect(group.conditions[0].op).toBe('contains')
+    expect(group.conditions[0].value).toBe('hi')
+  })
+})
+// ─── parsePublicPagination ────────────────────────────────────────────────────
+describe('parsePublicPagination', () => {
+  it('defaults to page=1 and limit=25 when input is empty', () => {
+    expect(parsePublicPagination({})).toEqual({ page: 1, limit: 25 })
+  })
+  it('parses valid page and limit values', () => {
+    expect(parsePublicPagination({ page: '3', limit: '10' })).toEqual({ page: 3, limit: 10 })
+  })
+  it('clamps limit to a maximum of 100', () => {
+    expect(parsePublicPagination({ limit: '500' }).limit).toBe(100)
+  })
+  it('uses default for invalid (non-numeric) input', () => {
+    expect(parsePublicPagination({ page: 'abc', limit: 'xyz' })).toEqual({ page: 1, limit: 25 })
+  })
+})
+// ─── parseLatestCount ─────────────────────────────────────────────────────────
+describe('parseLatestCount', () => {
+  it('returns 10 for undefined', () => {
+    expect(parseLatestCount(undefined)).toBe(10)
+  })
+  it('parses a valid integer string', () => {
+    expect(parseLatestCount('5')).toBe(5)
+  })
+  it('clamps to 1 for values below minimum', () => {
+    expect(parseLatestCount('0')).toBe(1)
+    expect(parseLatestCount('-5')).toBe(1)
+  })
+  it('clamps to 100 for values above maximum', () => {
+    expect(parseLatestCount('200')).toBe(100)
+  })
+  it('returns 10 for non-numeric input', () => {
+    expect(parseLatestCount('abc')).toBe(10)
+  })
+})