@beechcms/api 0.6.0-preview.1 → 0.6.0-preview.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (222) hide show
  1. package/assets/dashboard/BeechLogo.svg +18 -18
  2. package/assets/dashboard/BeechLogoLIght.svg +48 -48
  3. package/assets/dashboard/assets/chart-BrJFdsGZ.js +39 -0
  4. package/assets/dashboard/assets/index-CIaoMxuB.css +1 -0
  5. package/assets/dashboard/assets/index-wTKgygsg.js +636 -0
  6. package/assets/dashboard/assets/pie-chart-recharts-BEaE1FOE.js +1 -0
  7. package/assets/dashboard/assets/timeseries-chart-recharts-DmWM6imF.js +1 -0
  8. package/assets/dashboard/beechLogoDark.svg +48 -48
  9. package/assets/dashboard/index.html +18 -18
  10. package/assets/dashboard/noResult.svg +42 -42
  11. package/assets/dashboard/sol.svg +3 -3
  12. package/assets/dashboard/undraw_enter_nwx3.svg +36 -36
  13. package/migrations/0000_v040_base.sql +265 -265
  14. package/migrations/0029_automations.sql +14 -14
  15. package/migrations/0030_test_seeds.sql +125 -125
  16. package/package.json +2 -2
  17. package/src/auth/__fixtures__/in-memory-hash-provider.ts +17 -17
  18. package/src/auth/__fixtures__/static-token-service.ts +22 -22
  19. package/src/auth/bcrypt-hash-provider.ts +24 -24
  20. package/src/auth/constants.ts +14 -14
  21. package/src/auth/generate-refresh-token.test.ts +23 -23
  22. package/src/auth/hash-provider.test.ts +55 -55
  23. package/src/auth/jose-token-service.ts +62 -62
  24. package/src/auth/jwt-claims-passthrough.test.ts +87 -87
  25. package/src/auth/login.test.ts +100 -100
  26. package/src/auth/login.ts +78 -78
  27. package/src/auth/refresh.ts +11 -11
  28. package/src/auth/token-service.test.ts +90 -90
  29. package/src/factory.ts +370 -368
  30. package/src/features/automations/__tests__/action-executors.test.ts +255 -255
  31. package/src/features/automations/__tests__/automation-runner.test.ts +196 -196
  32. package/src/features/automations/__tests__/automation-runner.utils.test.ts +60 -60
  33. package/src/features/automations/__tests__/automations.handler.test.ts +264 -264
  34. package/src/features/automations/__tests__/automations.repository.test.ts +163 -163
  35. package/src/features/automations/__tests__/automations.schema.test.ts +224 -224
  36. package/src/features/automations/__tests__/context-resolver.test.ts +126 -126
  37. package/src/features/automations/__tests__/cron-runner.test.ts +267 -267
  38. package/src/features/automations/__tests__/cron-runner.utils.test.ts +144 -144
  39. package/src/features/automations/__tests__/set-variable.executor.test.ts +383 -383
  40. package/src/features/automations/__tests__/template-grammar.test.ts +308 -308
  41. package/src/features/automations/__tests__/webhook.executor.test.ts +142 -142
  42. package/src/features/automations/__tests__/when-evaluator.test.ts +274 -274
  43. package/src/features/automations/__tests__/when-pushdown.test.ts +281 -281
  44. package/src/features/automations/action-executors/create-entry.executor.ts +27 -27
  45. package/src/features/automations/action-executors/edit-field.executor.ts +26 -26
  46. package/src/features/automations/action-executors/index.ts +37 -37
  47. package/src/features/automations/action-executors/send-mail.executor.ts +53 -53
  48. package/src/features/automations/action-executors/set-variable.executor.ts +159 -159
  49. package/src/features/automations/action-executors/webhook.executor.ts +67 -67
  50. package/src/features/automations/automation-runner.ts +85 -85
  51. package/src/features/automations/automation-runner.utils.ts +47 -47
  52. package/src/features/automations/automations.handler.ts +197 -197
  53. package/src/features/automations/automations.schema.ts +177 -177
  54. package/src/features/automations/context-resolver.ts +152 -152
  55. package/src/features/automations/cron-runner.ts +140 -140
  56. package/src/features/automations/cron-runner.utils.ts +44 -44
  57. package/src/features/automations/filter-translation.ts +46 -46
  58. package/src/features/automations/index.ts +16 -16
  59. package/src/features/automations/template-grammar.ts +245 -245
  60. package/src/features/automations/var-access-resolver.ts +140 -140
  61. package/src/features/automations/when-evaluator.ts +87 -87
  62. package/src/features/automations/when-pushdown.ts +57 -57
  63. package/src/features/backrefs/__tests__/backrefs.handler.test.ts +359 -359
  64. package/src/features/backrefs/backrefs.handler.ts +168 -168
  65. package/src/features/backrefs/d1-backref.repository.ts +84 -84
  66. package/src/features/backrefs/index.ts +5 -5
  67. package/src/features/content/constants.ts +16 -16
  68. package/src/features/content/handlers/bulk.handler.ts +185 -185
  69. package/src/features/content/handlers/create.ts +129 -129
  70. package/src/features/content/handlers/delete.ts +62 -62
  71. package/src/features/content/handlers/facets.ts +49 -49
  72. package/src/features/content/handlers/get.ts +120 -120
  73. package/src/features/content/handlers/helpers.test.ts +180 -180
  74. package/src/features/content/handlers/helpers.ts +93 -93
  75. package/src/features/content/handlers/list.ts +174 -174
  76. package/src/features/content/handlers/update.ts +174 -174
  77. package/src/features/content/index.ts +26 -26
  78. package/src/features/dashboard-layout/__tests__/dashboard-layout.handler.test.ts +388 -0
  79. package/src/features/dashboard-layout/dashboard-layout.handler.ts +206 -0
  80. package/src/features/dashboard-layout/index.ts +5 -0
  81. package/src/features/draft/draft.handler.ts +195 -195
  82. package/src/features/draft/draft.middleware.ts +66 -66
  83. package/src/features/draft/index.ts +5 -5
  84. package/src/features/email/email.provider.ts +42 -42
  85. package/src/features/email/email.service.ts +98 -98
  86. package/src/features/email/email.types.ts +119 -119
  87. package/src/features/email/index.ts +33 -33
  88. package/src/features/email/providers/resend.ts +67 -67
  89. package/src/features/email/providers/smtp.ts +55 -55
  90. package/src/features/email/templates/automation-mail.ts +19 -19
  91. package/src/features/email/templates/password-changed.ts +63 -63
  92. package/src/features/email/templates/password-reset.ts +68 -68
  93. package/src/features/email/templates/shell.ts +96 -96
  94. package/src/features/notifications/index.ts +5 -5
  95. package/src/features/notifications/notifications.handler.ts +105 -105
  96. package/src/features/password-reset/index.ts +19 -19
  97. package/src/features/password-reset/request.ts +92 -92
  98. package/src/features/password-reset/reset.ts +102 -102
  99. package/src/features/rotate-field/index.ts +5 -5
  100. package/src/features/rotate-field/rotate-field.handler.ts +132 -132
  101. package/src/features/rotate-field/rotate-field.schema.ts +17 -17
  102. package/src/features/schema/schema.handler.ts +131 -131
  103. package/src/features/seeds/index.ts +5 -5
  104. package/src/features/seeds/seeds.handler.test.ts +1199 -632
  105. package/src/features/seeds/seeds.handler.ts +558 -693
  106. package/src/features/settings/__tests__/settings.handler.test.ts +555 -555
  107. package/src/features/settings/settings.handler.ts +392 -392
  108. package/src/features/setup/index.ts +288 -204
  109. package/src/features/stats/index.ts +5 -5
  110. package/src/features/stats/stats.handler.ts +420 -420
  111. package/src/features/webhooks/index.ts +63 -63
  112. package/src/index.ts +65 -65
  113. package/src/media-utils.ts +82 -82
  114. package/src/middleware/auth-providers.middleware.test.ts +85 -0
  115. package/src/middleware/auth-providers.middleware.ts +45 -45
  116. package/src/middleware/observability.middleware.test.ts +93 -0
  117. package/src/middleware/observability.middleware.ts +70 -70
  118. package/src/middleware/rate-limit.middleware.ts +45 -45
  119. package/src/middleware/repository.middleware.ts +117 -114
  120. package/src/middleware/seed-registry.middleware.test.ts +97 -97
  121. package/src/middleware/seed-registry.middleware.ts +21 -21
  122. package/src/middleware/storage.middleware.ts +25 -25
  123. package/src/middleware.ts +45 -45
  124. package/src/public/access-policy.ts +27 -27
  125. package/src/public/api-key-middleware.ts +57 -57
  126. package/src/public/cache-utils.ts +38 -38
  127. package/src/public/entry-projection.ts +46 -46
  128. package/src/public/idempotency.ts +23 -23
  129. package/src/public/index.ts +16 -16
  130. package/src/public/problem-details.ts +124 -124
  131. package/src/public/public-add.ts +114 -114
  132. package/src/public/public-edit.ts +163 -163
  133. package/src/public/public-errors.ts +19 -19
  134. package/src/public/public-read.ts +63 -63
  135. package/src/public/public-routes.ts +88 -88
  136. package/src/public/query-builder.test.ts +224 -224
  137. package/src/public/query-builder.ts +156 -156
  138. package/src/public/rate-limit-middleware.ts +34 -34
  139. package/src/public/read-list.ts +54 -54
  140. package/src/public/read-single.ts +48 -48
  141. package/src/public/response-builder.ts +30 -30
  142. package/src/public/sanitize.ts +69 -69
  143. package/src/public/slug-utils.ts +18 -18
  144. package/src/rate-limit/cloudflare-rate-limiter.test.ts +30 -30
  145. package/src/rate-limit/cloudflare-rate-limiter.ts +15 -15
  146. package/src/rate-limit/in-memory-rate-limiter.test.ts +37 -37
  147. package/src/rate-limit/in-memory-rate-limiter.ts +17 -17
  148. package/src/rate-limit/no-op-rate-limiter.test.ts +22 -22
  149. package/src/rate-limit/no-op-rate-limiter.ts +11 -11
  150. package/src/search-utils.test.ts +211 -211
  151. package/src/search-utils.ts +213 -213
  152. package/src/search.ts +65 -65
  153. package/src/shared/apply-policies.test.ts +81 -81
  154. package/src/shared/apply-policies.ts +67 -67
  155. package/src/shared/automations.repository.d1.ts +150 -150
  156. package/src/shared/background-notification-service.test.ts +62 -62
  157. package/src/shared/background-notification-service.ts +52 -52
  158. package/src/shared/base.repository.d1.ts +32 -32
  159. package/src/shared/content-utils.test.ts +165 -165
  160. package/src/shared/content-utils.ts +86 -86
  161. package/src/shared/content.repository.d1.test.ts +507 -458
  162. package/src/shared/content.repository.d1.ts +851 -851
  163. package/src/shared/d1-activity-log.repository.test.ts +140 -140
  164. package/src/shared/d1-activity-log.repository.ts +105 -105
  165. package/src/shared/d1-activity-logger.test.ts +86 -86
  166. package/src/shared/d1-activity-logger.ts +67 -67
  167. package/src/shared/d1-analytics.repository.test.ts +78 -78
  168. package/src/shared/d1-analytics.repository.ts +85 -85
  169. package/src/shared/d1-content-scan.repository.test.ts +80 -80
  170. package/src/shared/d1-content-scan.repository.ts +37 -37
  171. package/src/shared/d1-notification.repository.test.ts +128 -128
  172. package/src/shared/d1-notification.repository.ts +118 -118
  173. package/src/shared/d1-password-reset-token.repository.test.ts +81 -81
  174. package/src/shared/d1-password-reset-token.repository.ts +56 -56
  175. package/src/shared/d1-search.repository.test.ts +87 -87
  176. package/src/shared/d1-search.repository.ts +88 -88
  177. package/src/shared/d1-session.repository.test.ts +125 -125
  178. package/src/shared/d1-session.repository.ts +102 -102
  179. package/src/shared/d1-setup-checklist.repository.ts +36 -36
  180. package/src/shared/d1-user.repository.test.ts +151 -151
  181. package/src/shared/d1-user.repository.ts +119 -119
  182. package/src/shared/d1-widget.repository.test.ts +267 -221
  183. package/src/shared/d1-widget.repository.ts +385 -341
  184. package/src/shared/dashboard-layout.repository.d1.test.ts +135 -0
  185. package/src/shared/dashboard-layout.repository.d1.ts +58 -0
  186. package/src/shared/demo-data-sql.ts +216 -54
  187. package/src/shared/demo-data.repository.d1.ts +20 -20
  188. package/src/shared/execution-context-scheduler.ts +13 -13
  189. package/src/shared/fixed-clock.ts +25 -25
  190. package/src/shared/fts-sync.ts +8 -8
  191. package/src/shared/idempotency.repository.d1.test.ts +83 -83
  192. package/src/shared/idempotency.repository.d1.ts +60 -60
  193. package/src/shared/in-memory-activity-logger.ts +19 -19
  194. package/src/shared/in-memory-notification-service.ts +19 -19
  195. package/src/shared/in-memory-seed.repository.ts +58 -51
  196. package/src/shared/media.repository.d1.test.ts +107 -107
  197. package/src/shared/media.repository.d1.ts +68 -68
  198. package/src/shared/qstash-notification-service.test.ts +67 -67
  199. package/src/shared/qstash-notification-service.ts +55 -55
  200. package/src/shared/query-utils.ts +141 -141
  201. package/src/shared/request-utils.ts +26 -26
  202. package/src/shared/schema-mutator.d1.test.ts +142 -0
  203. package/src/shared/schema-mutator.d1.ts +64 -64
  204. package/src/shared/seed-layout.repository.d1.test.ts +114 -114
  205. package/src/shared/seed-layout.repository.d1.ts +62 -62
  206. package/src/shared/seed-registry-cache.test.ts +68 -68
  207. package/src/shared/seed-registry-cache.ts +49 -49
  208. package/src/shared/seed.repository.d1.test.ts +143 -143
  209. package/src/shared/seed.repository.d1.ts +98 -98
  210. package/src/shared/sequential-id-generator.ts +33 -33
  211. package/src/shared/site-settings.repository.d1.ts +53 -53
  212. package/src/shared/storage/factory.ts +41 -41
  213. package/src/shared/storage/s3-bucket.ts +195 -195
  214. package/src/shared/storage-utils.ts +40 -40
  215. package/src/shared/system-stats.repository.d1.test.ts +58 -58
  216. package/src/shared/system-stats.repository.d1.ts +48 -48
  217. package/src/types.ts +90 -87
  218. package/src/upload.ts +198 -198
  219. package/src/widget.test.ts +85 -0
  220. package/src/widget.ts +251 -212
  221. package/assets/dashboard/assets/index-BSjk0Sx9.js +0 -634
  222. package/assets/dashboard/assets/index-kRCYVN2B.css +0 -1
@@ -1,156 +1,156 @@
1
- // SPDX-License-Identifier: BUSL-1.1
2
- // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
- // See LICENSE in the repository root for license terms.
4
-
5
- import type { Seed, FilterGroup, FilterOperator, FilterType, BranchType } from '@beechcms/core'
6
- import { parsePositiveInt } from '../shared/query-utils'
7
-
8
- export type PublicQueryInput = {
9
- page?: string
10
- limit?: string
11
- latest?: string
12
- }
13
-
14
- export type PublicFilterLogic = 'AND' | 'OR'
15
- export type PublicFilterOperator =
16
- | 'eq'
17
- | 'neq'
18
- | 'gt'
19
- | 'gte'
20
- | 'lt'
21
- | 'lte'
22
- | 'contains'
23
- | 'not_contains'
24
- | 'starts_with'
25
- | 'ends_with'
26
- | 'is_empty'
27
- | 'is_not_empty'
28
- | 'in'
29
- | 'not_in'
30
- | 'has_tag'
31
- | 'has_any_tag'
32
- | 'has_all_tags'
33
-
34
- export type PublicFilterCondition = {
35
- field: string
36
- op: PublicFilterOperator
37
- value?: unknown
38
- }
39
-
40
- export type ParsedPublicFilter = {
41
- where: PublicFilterCondition[]
42
- logic: PublicFilterLogic
43
- }
44
-
45
- const PUBLIC_FILTER_OPERATORS = new Set<PublicFilterOperator>([
46
- 'eq', 'neq', 'gt', 'gte', 'lt', 'lte',
47
- 'contains', 'not_contains', 'starts_with', 'ends_with',
48
- 'is_empty', 'is_not_empty', 'in', 'not_in',
49
- 'has_tag', 'has_any_tag', 'has_all_tags',
50
- ])
51
-
52
- function asString(value: unknown): string | null {
53
- return typeof value === 'string' && value.trim() ? value.trim() : null
54
- }
55
-
56
- function validateLogic(logicRaw: unknown): PublicFilterLogic {
57
- if (logicRaw === undefined) return 'AND'
58
- if (typeof logicRaw !== 'string') throw new TypeError("Invalid filter: 'logic' must be 'AND' or 'OR'")
59
- const normalized = logicRaw.toUpperCase()
60
- if (normalized !== 'AND' && normalized !== 'OR') throw new TypeError("Invalid filter: 'logic' must be 'AND' or 'OR'")
61
- return normalized
62
- }
63
-
64
- function parseWhereCondition(raw: unknown): PublicFilterCondition | null {
65
- if (!raw || typeof raw !== 'object') return null
66
- const maybe = raw as Record<string, unknown>
67
- const field = asString(maybe.field)
68
- const opRaw = asString(maybe.op)
69
- if (!field || !opRaw || !PUBLIC_FILTER_OPERATORS.has(opRaw as PublicFilterOperator)) {
70
- throw new TypeError(`Invalid filter: unknown operator '${opRaw ?? 'undefined'}'`)
71
- }
72
- return { field, op: opRaw as PublicFilterOperator, value: maybe.value }
73
- }
74
-
75
- export function parsePublicFilter(raw: string | undefined): ParsedPublicFilter | null {
76
- if (!raw) return null
77
- let parsed: unknown
78
- try {
79
- parsed = JSON.parse(raw)
80
- } catch {
81
- throw new TypeError('Invalid filter: malformed JSON')
82
- }
83
- if (!parsed || typeof parsed !== 'object') throw new TypeError('Invalid filter: object expected')
84
- const filterObj = parsed as Record<string, unknown>
85
- const logic = validateLogic(filterObj.logic)
86
- if (!Array.isArray(filterObj.where)) throw new TypeError("Invalid filter: 'where' must be an array")
87
- const where = filterObj.where
88
- .map(parseWhereCondition)
89
- .filter((item): item is PublicFilterCondition => item !== null)
90
- return { where, logic }
91
- }
92
-
93
- const SYSTEM_COLUMNS = new Set(['id', 'slug', 'status', 'created_at', 'updated_at'])
94
-
95
- function mapBranchToFilterType(type: BranchType): FilterType {
96
- switch (type) {
97
- case 'richtext':
98
- case 'file':
99
- return 'text'
100
- case 'json':
101
- return 'json'
102
- case 'tags':
103
- return 'tags'
104
- case 'number':
105
- return 'number'
106
- case 'boolean':
107
- return 'boolean'
108
- case 'date':
109
- return 'date'
110
- case 'text':
111
- default:
112
- return 'text'
113
- }
114
- }
115
-
116
- /**
117
- * Trasforma il filtro pubblico in FilterGroup[] per il Repository.
118
- * Zero SQL: la logica di generazione query risiede esclusivamente nel Repository/Engine core.
119
- */
120
- export function toEngineFilters(seed: Seed, parsedFilter: ParsedPublicFilter | null): FilterGroup[] {
121
- if (!parsedFilter || parsedFilter.where.length === 0) return []
122
-
123
- // Note: Repository currently joins groups with AND.
124
- // Public API supports logic: OR but the core engine currently defaults to AND for top-level groups.
125
- // We map each condition to a group for maximum compatibility with the engine's buildFilterCondition.
126
- return parsedFilter.where.map((cond) => {
127
- const branch = seed.branches.find(b => b.alias === cond.field)
128
- const type: FilterType = branch
129
- ? mapBranchToFilterType(branch.type)
130
- : (SYSTEM_COLUMNS.has(cond.field) ? 'system' : 'text')
131
-
132
- return {
133
- column: cond.field,
134
- type,
135
- conditions: [{
136
- op: cond.op as FilterOperator,
137
- value: cond.value as any
138
- }]
139
- }
140
- })
141
- }
142
-
143
- export function parsePublicPagination(input: PublicQueryInput): { page: number; limit: number } {
144
- const page = parsePositiveInt(input.page, 1)
145
- const limit = Math.min(parsePositiveInt(input.limit, 25), 100)
146
- return { page, limit }
147
- }
148
-
149
- export function parseLatestCount(latest: string | undefined): number {
150
- if (!latest) return 10
151
- const raw = Number.parseInt(latest, 10)
152
- const parsed = Number.isNaN(raw) ? 10 : raw
153
- if (parsed < 1) return 1
154
- if (parsed > 100) return 100
155
- return parsed
156
- }
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ import type { Seed, FilterGroup, FilterOperator, FilterType, BranchType } from '@beechcms/core'
6
+ import { parsePositiveInt } from '../shared/query-utils'
7
+
8
+ export type PublicQueryInput = {
9
+ page?: string
10
+ limit?: string
11
+ latest?: string
12
+ }
13
+
14
+ export type PublicFilterLogic = 'AND' | 'OR'
15
+ export type PublicFilterOperator =
16
+ | 'eq'
17
+ | 'neq'
18
+ | 'gt'
19
+ | 'gte'
20
+ | 'lt'
21
+ | 'lte'
22
+ | 'contains'
23
+ | 'not_contains'
24
+ | 'starts_with'
25
+ | 'ends_with'
26
+ | 'is_empty'
27
+ | 'is_not_empty'
28
+ | 'in'
29
+ | 'not_in'
30
+ | 'has_tag'
31
+ | 'has_any_tag'
32
+ | 'has_all_tags'
33
+
34
+ export type PublicFilterCondition = {
35
+ field: string
36
+ op: PublicFilterOperator
37
+ value?: unknown
38
+ }
39
+
40
+ export type ParsedPublicFilter = {
41
+ where: PublicFilterCondition[]
42
+ logic: PublicFilterLogic
43
+ }
44
+
45
+ const PUBLIC_FILTER_OPERATORS = new Set<PublicFilterOperator>([
46
+ 'eq', 'neq', 'gt', 'gte', 'lt', 'lte',
47
+ 'contains', 'not_contains', 'starts_with', 'ends_with',
48
+ 'is_empty', 'is_not_empty', 'in', 'not_in',
49
+ 'has_tag', 'has_any_tag', 'has_all_tags',
50
+ ])
51
+
52
+ function asString(value: unknown): string | null {
53
+ return typeof value === 'string' && value.trim() ? value.trim() : null
54
+ }
55
+
56
+ function validateLogic(logicRaw: unknown): PublicFilterLogic {
57
+ if (logicRaw === undefined) return 'AND'
58
+ if (typeof logicRaw !== 'string') throw new TypeError("Invalid filter: 'logic' must be 'AND' or 'OR'")
59
+ const normalized = logicRaw.toUpperCase()
60
+ if (normalized !== 'AND' && normalized !== 'OR') throw new TypeError("Invalid filter: 'logic' must be 'AND' or 'OR'")
61
+ return normalized
62
+ }
63
+
64
+ function parseWhereCondition(raw: unknown): PublicFilterCondition | null {
65
+ if (!raw || typeof raw !== 'object') return null
66
+ const maybe = raw as Record<string, unknown>
67
+ const field = asString(maybe.field)
68
+ const opRaw = asString(maybe.op)
69
+ if (!field || !opRaw || !PUBLIC_FILTER_OPERATORS.has(opRaw as PublicFilterOperator)) {
70
+ throw new TypeError(`Invalid filter: unknown operator '${opRaw ?? 'undefined'}'`)
71
+ }
72
+ return { field, op: opRaw as PublicFilterOperator, value: maybe.value }
73
+ }
74
+
75
+ export function parsePublicFilter(raw: string | undefined): ParsedPublicFilter | null {
76
+ if (!raw) return null
77
+ let parsed: unknown
78
+ try {
79
+ parsed = JSON.parse(raw)
80
+ } catch {
81
+ throw new TypeError('Invalid filter: malformed JSON')
82
+ }
83
+ if (!parsed || typeof parsed !== 'object') throw new TypeError('Invalid filter: object expected')
84
+ const filterObj = parsed as Record<string, unknown>
85
+ const logic = validateLogic(filterObj.logic)
86
+ if (!Array.isArray(filterObj.where)) throw new TypeError("Invalid filter: 'where' must be an array")
87
+ const where = filterObj.where
88
+ .map(parseWhereCondition)
89
+ .filter((item): item is PublicFilterCondition => item !== null)
90
+ return { where, logic }
91
+ }
92
+
93
+ const SYSTEM_COLUMNS = new Set(['id', 'slug', 'status', 'created_at', 'updated_at'])
94
+
95
+ function mapBranchToFilterType(type: BranchType): FilterType {
96
+ switch (type) {
97
+ case 'richtext':
98
+ case 'file':
99
+ return 'text'
100
+ case 'json':
101
+ return 'json'
102
+ case 'tags':
103
+ return 'tags'
104
+ case 'number':
105
+ return 'number'
106
+ case 'boolean':
107
+ return 'boolean'
108
+ case 'date':
109
+ return 'date'
110
+ case 'text':
111
+ default:
112
+ return 'text'
113
+ }
114
+ }
115
+
116
+ /**
117
+ * Trasforma il filtro pubblico in FilterGroup[] per il Repository.
118
+ * Zero SQL: la logica di generazione query risiede esclusivamente nel Repository/Engine core.
119
+ */
120
+ export function toEngineFilters(seed: Seed, parsedFilter: ParsedPublicFilter | null): FilterGroup[] {
121
+ if (!parsedFilter || parsedFilter.where.length === 0) return []
122
+
123
+ // Note: Repository currently joins groups with AND.
124
+ // Public API supports logic: OR but the core engine currently defaults to AND for top-level groups.
125
+ // We map each condition to a group for maximum compatibility with the engine's buildFilterCondition.
126
+ return parsedFilter.where.map((cond) => {
127
+ const branch = seed.branches.find(b => b.alias === cond.field)
128
+ const type: FilterType = branch
129
+ ? mapBranchToFilterType(branch.type)
130
+ : (SYSTEM_COLUMNS.has(cond.field) ? 'system' : 'text')
131
+
132
+ return {
133
+ column: cond.field,
134
+ type,
135
+ conditions: [{
136
+ op: cond.op as FilterOperator,
137
+ value: cond.value as any
138
+ }]
139
+ }
140
+ })
141
+ }
142
+
143
+ export function parsePublicPagination(input: PublicQueryInput): { page: number; limit: number } {
144
+ const page = parsePositiveInt(input.page, 1)
145
+ const limit = Math.min(parsePositiveInt(input.limit, 25), 100)
146
+ return { page, limit }
147
+ }
148
+
149
+ export function parseLatestCount(latest: string | undefined): number {
150
+ if (!latest) return 10
151
+ const raw = Number.parseInt(latest, 10)
152
+ const parsed = Number.isNaN(raw) ? 10 : raw
153
+ if (parsed < 1) return 1
154
+ if (parsed > 100) return 100
155
+ return parsed
156
+ }
@@ -1,34 +1,34 @@
1
- // SPDX-License-Identifier: BUSL-1.1
2
- // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
- // See LICENSE in the repository root for license terms.
4
-
5
- import type { Context, Next } from 'hono'
6
- import type { AppEnv } from '../types'
7
- import { publicProblem } from './problem-details'
8
- import { getClientIp } from '../shared/request-utils'
9
-
10
- function isReadMethod(method: string): boolean {
11
- return method === 'GET' || method === 'HEAD' || method === 'OPTIONS'
12
- }
13
-
14
- export function publicRateLimitMiddleware() {
15
- return async (c: Context<AppEnv>, next: Next): Promise<Response | void> => {
16
- const readMethod = isReadMethod(c.req.method)
17
- const limiterName = readMethod ? ('publicApiRead' as const) : ('publicApiWrite' as const)
18
-
19
- const seed = c.req.param('seed') ?? 'no-seed'
20
- const key = `${getClientIp(c.req)}:${seed}:${limiterName}`
21
- const result = await c.get('rateLimiters').getLimiter(limiterName).checkLimit(key)
22
-
23
- if (!result.isAllowed) {
24
- return publicProblem(c, {
25
- type: 'rate-limit-exceeded',
26
- title: 'Too Many Requests',
27
- status: 429,
28
- detail: 'Too many requests',
29
- })
30
- }
31
-
32
- await next()
33
- }
34
- }
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ import type { Context, Next } from 'hono'
6
+ import type { AppEnv } from '../types'
7
+ import { publicProblem } from './problem-details'
8
+ import { getClientIp } from '../shared/request-utils'
9
+
10
+ function isReadMethod(method: string): boolean {
11
+ return method === 'GET' || method === 'HEAD' || method === 'OPTIONS'
12
+ }
13
+
14
+ export function publicRateLimitMiddleware() {
15
+ return async (c: Context<AppEnv>, next: Next): Promise<Response | void> => {
16
+ const readMethod = isReadMethod(c.req.method)
17
+ const limiterName = readMethod ? ('publicApiRead' as const) : ('publicApiWrite' as const)
18
+
19
+ const seed = c.req.param('seed') ?? 'no-seed'
20
+ const key = `${getClientIp(c.req)}:${seed}:${limiterName}`
21
+ const result = await c.get('rateLimiters').getLimiter(limiterName).checkLimit(key)
22
+
23
+ if (!result.isAllowed) {
24
+ return publicProblem(c, {
25
+ type: 'rate-limit-exceeded',
26
+ title: 'Too Many Requests',
27
+ status: 429,
28
+ detail: 'Too many requests',
29
+ })
30
+ }
31
+
32
+ await next()
33
+ }
34
+ }
@@ -1,54 +1,54 @@
1
- // SPDX-License-Identifier: BUSL-1.1
2
- // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
- // See LICENSE in the repository root for license terms.
4
-
5
- import type { Seed, ContentRepository } from '@beechcms/core'
6
- import { cleanStr } from '../shared/query-utils'
7
- import { toFlatPublicEntry } from './entry-projection'
8
- import { buildPublicListMeta } from './response-builder'
9
- import { parsePublicFilter, parsePublicPagination, parseLatestCount, toEngineFilters } from './query-builder'
10
-
11
- type ReadListInput = {
12
- seed: Seed
13
- seedSlug: string
14
- repository: ContentRepository
15
- query: Record<string, string | undefined>
16
- publishedOnly: boolean
17
- }
18
-
19
- export async function readListEntries(input: ReadListInput) {
20
- const { seed, seedSlug, repository, query, publishedOnly } = input
21
-
22
- const parsedFilter = parsePublicFilter(query.filter)
23
- const allMode = cleanStr(query.all)?.toLowerCase() === 'true'
24
- const latestMode = cleanStr(query.latest) !== null
25
- const latestCount = latestMode ? parseLatestCount(query.latest ?? '') : null
26
- const pagination = allMode ? { page: 1, limit: 100 } : parsePublicPagination(query)
27
- const offset = (pagination.page - 1) * pagination.limit
28
- const search = cleanStr(query.search) ?? ''
29
- const engineFilters = toEngineFilters(seed, parsedFilter)
30
- const sortBy = cleanStr(query.orderBy) ?? 'created_at'
31
- const sortDir = (cleanStr(query.orderDir) ?? 'desc').toLowerCase() === 'asc' ? 'ASC' : 'DESC'
32
-
33
- const { items, total } = await repository.findMany(seed, {
34
- filters: engineFilters,
35
- search: search || undefined,
36
- status: publishedOnly ? 'published' : null,
37
- pagination: {
38
- limit: latestMode ? (latestCount ?? 10) : pagination.limit,
39
- offset: latestMode ? 0 : offset,
40
- },
41
- orderBy: latestMode ? { column: 'created_at', dir: 'DESC' } : { column: sortBy, dir: sortDir },
42
- })
43
-
44
- const data = items.map(item => toFlatPublicEntry(item, seed, query.fields))
45
-
46
- if (latestMode) {
47
- return { data, meta: { total, returned: data.length, seed: seedSlug } }
48
- }
49
-
50
- return {
51
- data,
52
- meta: buildPublicListMeta({ total, page: pagination.page, limit: pagination.limit, returned: data.length, seed: seedSlug }),
53
- }
54
- }
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ import type { Seed, ContentRepository } from '@beechcms/core'
6
+ import { cleanStr } from '../shared/query-utils'
7
+ import { toFlatPublicEntry } from './entry-projection'
8
+ import { buildPublicListMeta } from './response-builder'
9
+ import { parsePublicFilter, parsePublicPagination, parseLatestCount, toEngineFilters } from './query-builder'
10
+
11
+ type ReadListInput = {
12
+ seed: Seed
13
+ seedSlug: string
14
+ repository: ContentRepository
15
+ query: Record<string, string | undefined>
16
+ publishedOnly: boolean
17
+ }
18
+
19
+ export async function readListEntries(input: ReadListInput) {
20
+ const { seed, seedSlug, repository, query, publishedOnly } = input
21
+
22
+ const parsedFilter = parsePublicFilter(query.filter)
23
+ const allMode = cleanStr(query.all)?.toLowerCase() === 'true'
24
+ const latestMode = cleanStr(query.latest) !== null
25
+ const latestCount = latestMode ? parseLatestCount(query.latest ?? '') : null
26
+ const pagination = allMode ? { page: 1, limit: 100 } : parsePublicPagination(query)
27
+ const offset = (pagination.page - 1) * pagination.limit
28
+ const search = cleanStr(query.search) ?? ''
29
+ const engineFilters = toEngineFilters(seed, parsedFilter)
30
+ const sortBy = cleanStr(query.orderBy) ?? 'created_at'
31
+ const sortDir = (cleanStr(query.orderDir) ?? 'desc').toLowerCase() === 'asc' ? 'ASC' : 'DESC'
32
+
33
+ const { items, total } = await repository.findMany(seed, {
34
+ filters: engineFilters,
35
+ search: search || undefined,
36
+ status: publishedOnly ? 'published' : null,
37
+ pagination: {
38
+ limit: latestMode ? (latestCount ?? 10) : pagination.limit,
39
+ offset: latestMode ? 0 : offset,
40
+ },
41
+ orderBy: latestMode ? { column: 'created_at', dir: 'DESC' } : { column: sortBy, dir: sortDir },
42
+ })
43
+
44
+ const data = items.map(item => toFlatPublicEntry(item, seed, query.fields))
45
+
46
+ if (latestMode) {
47
+ return { data, meta: { total, returned: data.length, seed: seedSlug } }
48
+ }
49
+
50
+ return {
51
+ data,
52
+ meta: buildPublicListMeta({ total, page: pagination.page, limit: pagination.limit, returned: data.length, seed: seedSlug }),
53
+ }
54
+ }
@@ -1,48 +1,48 @@
1
- // SPDX-License-Identifier: BUSL-1.1
2
- // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
- // See LICENSE in the repository root for license terms.
4
-
5
- import { EntryNotFoundError } from '@beechcms/core'
6
- import type { Seed, ContentRepository } from '@beechcms/core'
7
- import { toFlatPublicEntry } from './entry-projection'
8
- import { buildPublicSingleMeta } from './response-builder'
9
-
10
- type ReadSingleInput = {
11
- seed: Seed
12
- seedSlug: string
13
- repository: ContentRepository
14
- id: string | null
15
- slug: string | null
16
- publishedOnly: boolean
17
- fieldsParam?: string
18
- }
19
-
20
- export type ReadSingleResult =
21
- | { ok: true; data: Record<string, unknown>; meta: { seed: string } }
22
- | { ok: false; detail: string }
23
-
24
- export async function readSingleEntry(input: ReadSingleInput): Promise<ReadSingleResult> {
25
- const { seed, seedSlug, repository, id, slug, publishedOnly, fieldsParam } = input
26
- const label = id ?? slug!
27
-
28
- try {
29
- const entry = id
30
- ? await repository.findById(seed, id)
31
- : await repository.findBySlug(seed, slug!)
32
-
33
- if (publishedOnly && entry.status !== 'published') {
34
- return { ok: false, detail: `Entry '${label}' not found or not published.` }
35
- }
36
-
37
- return {
38
- ok: true,
39
- data: toFlatPublicEntry(entry, seed, fieldsParam),
40
- meta: buildPublicSingleMeta(seedSlug),
41
- }
42
- } catch (error) {
43
- if (error instanceof EntryNotFoundError) {
44
- return { ok: false, detail: `Entry '${label}' not found for content type '${seedSlug}'.` }
45
- }
46
- throw error
47
- }
48
- }
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ import { EntryNotFoundError } from '@beechcms/core'
6
+ import type { Seed, ContentRepository } from '@beechcms/core'
7
+ import { toFlatPublicEntry } from './entry-projection'
8
+ import { buildPublicSingleMeta } from './response-builder'
9
+
10
+ type ReadSingleInput = {
11
+ seed: Seed
12
+ seedSlug: string
13
+ repository: ContentRepository
14
+ id: string | null
15
+ slug: string | null
16
+ publishedOnly: boolean
17
+ fieldsParam?: string
18
+ }
19
+
20
+ export type ReadSingleResult =
21
+ | { ok: true; data: Record<string, unknown>; meta: { seed: string } }
22
+ | { ok: false; detail: string }
23
+
24
+ export async function readSingleEntry(input: ReadSingleInput): Promise<ReadSingleResult> {
25
+ const { seed, seedSlug, repository, id, slug, publishedOnly, fieldsParam } = input
26
+ const label = id ?? slug!
27
+
28
+ try {
29
+ const entry = id
30
+ ? await repository.findById(seed, id)
31
+ : await repository.findBySlug(seed, slug!)
32
+
33
+ if (publishedOnly && entry.status !== 'published') {
34
+ return { ok: false, detail: `Entry '${label}' not found or not published.` }
35
+ }
36
+
37
+ return {
38
+ ok: true,
39
+ data: toFlatPublicEntry(entry, seed, fieldsParam),
40
+ meta: buildPublicSingleMeta(seedSlug),
41
+ }
42
+ } catch (error) {
43
+ if (error instanceof EntryNotFoundError) {
44
+ return { ok: false, detail: `Entry '${label}' not found for content type '${seedSlug}'.` }
45
+ }
46
+ throw error
47
+ }
48
+ }
@@ -1,30 +1,30 @@
1
- // SPDX-License-Identifier: BUSL-1.1
2
- // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
- // See LICENSE in the repository root for license terms.
4
-
5
- /**
6
- * Helper meta per risposta lista Public API.
7
- */
8
- export function buildPublicListMeta(input: {
9
- total: number
10
- page: number
11
- limit: number
12
- returned: number
13
- seed: string
14
- }) {
15
- return {
16
- total: input.total,
17
- page: input.page,
18
- limit: input.limit,
19
- returned: input.returned,
20
- seed: input.seed,
21
- }
22
- }
23
-
24
- /**
25
- * Helper meta per risposta singolo elemento Public API.
26
- */
27
- export function buildPublicSingleMeta(seed: string) {
28
- return { seed }
29
- }
30
-
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ /**
6
+ * Helper meta per risposta lista Public API.
7
+ */
8
+ export function buildPublicListMeta(input: {
9
+ total: number
10
+ page: number
11
+ limit: number
12
+ returned: number
13
+ seed: string
14
+ }) {
15
+ return {
16
+ total: input.total,
17
+ page: input.page,
18
+ limit: input.limit,
19
+ returned: input.returned,
20
+ seed: input.seed,
21
+ }
22
+ }
23
+
24
+ /**
25
+ * Helper meta per risposta singolo elemento Public API.
26
+ */
27
+ export function buildPublicSingleMeta(seed: string) {
28
+ return { seed }
29
+ }
30
+