@beechcms/api 0.6.0-preview.1 → 0.6.0-preview.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (222) hide show
  1. package/assets/dashboard/BeechLogo.svg +18 -18
  2. package/assets/dashboard/BeechLogoLIght.svg +48 -48
  3. package/assets/dashboard/assets/chart-BrJFdsGZ.js +39 -0
  4. package/assets/dashboard/assets/index-CIaoMxuB.css +1 -0
  5. package/assets/dashboard/assets/index-wTKgygsg.js +636 -0
  6. package/assets/dashboard/assets/pie-chart-recharts-BEaE1FOE.js +1 -0
  7. package/assets/dashboard/assets/timeseries-chart-recharts-DmWM6imF.js +1 -0
  8. package/assets/dashboard/beechLogoDark.svg +48 -48
  9. package/assets/dashboard/index.html +18 -18
  10. package/assets/dashboard/noResult.svg +42 -42
  11. package/assets/dashboard/sol.svg +3 -3
  12. package/assets/dashboard/undraw_enter_nwx3.svg +36 -36
  13. package/migrations/0000_v040_base.sql +265 -265
  14. package/migrations/0029_automations.sql +14 -14
  15. package/migrations/0030_test_seeds.sql +125 -125
  16. package/package.json +2 -2
  17. package/src/auth/__fixtures__/in-memory-hash-provider.ts +17 -17
  18. package/src/auth/__fixtures__/static-token-service.ts +22 -22
  19. package/src/auth/bcrypt-hash-provider.ts +24 -24
  20. package/src/auth/constants.ts +14 -14
  21. package/src/auth/generate-refresh-token.test.ts +23 -23
  22. package/src/auth/hash-provider.test.ts +55 -55
  23. package/src/auth/jose-token-service.ts +62 -62
  24. package/src/auth/jwt-claims-passthrough.test.ts +87 -87
  25. package/src/auth/login.test.ts +100 -100
  26. package/src/auth/login.ts +78 -78
  27. package/src/auth/refresh.ts +11 -11
  28. package/src/auth/token-service.test.ts +90 -90
  29. package/src/factory.ts +370 -368
  30. package/src/features/automations/__tests__/action-executors.test.ts +255 -255
  31. package/src/features/automations/__tests__/automation-runner.test.ts +196 -196
  32. package/src/features/automations/__tests__/automation-runner.utils.test.ts +60 -60
  33. package/src/features/automations/__tests__/automations.handler.test.ts +264 -264
  34. package/src/features/automations/__tests__/automations.repository.test.ts +163 -163
  35. package/src/features/automations/__tests__/automations.schema.test.ts +224 -224
  36. package/src/features/automations/__tests__/context-resolver.test.ts +126 -126
  37. package/src/features/automations/__tests__/cron-runner.test.ts +267 -267
  38. package/src/features/automations/__tests__/cron-runner.utils.test.ts +144 -144
  39. package/src/features/automations/__tests__/set-variable.executor.test.ts +383 -383
  40. package/src/features/automations/__tests__/template-grammar.test.ts +308 -308
  41. package/src/features/automations/__tests__/webhook.executor.test.ts +142 -142
  42. package/src/features/automations/__tests__/when-evaluator.test.ts +274 -274
  43. package/src/features/automations/__tests__/when-pushdown.test.ts +281 -281
  44. package/src/features/automations/action-executors/create-entry.executor.ts +27 -27
  45. package/src/features/automations/action-executors/edit-field.executor.ts +26 -26
  46. package/src/features/automations/action-executors/index.ts +37 -37
  47. package/src/features/automations/action-executors/send-mail.executor.ts +53 -53
  48. package/src/features/automations/action-executors/set-variable.executor.ts +159 -159
  49. package/src/features/automations/action-executors/webhook.executor.ts +67 -67
  50. package/src/features/automations/automation-runner.ts +85 -85
  51. package/src/features/automations/automation-runner.utils.ts +47 -47
  52. package/src/features/automations/automations.handler.ts +197 -197
  53. package/src/features/automations/automations.schema.ts +177 -177
  54. package/src/features/automations/context-resolver.ts +152 -152
  55. package/src/features/automations/cron-runner.ts +140 -140
  56. package/src/features/automations/cron-runner.utils.ts +44 -44
  57. package/src/features/automations/filter-translation.ts +46 -46
  58. package/src/features/automations/index.ts +16 -16
  59. package/src/features/automations/template-grammar.ts +245 -245
  60. package/src/features/automations/var-access-resolver.ts +140 -140
  61. package/src/features/automations/when-evaluator.ts +87 -87
  62. package/src/features/automations/when-pushdown.ts +57 -57
  63. package/src/features/backrefs/__tests__/backrefs.handler.test.ts +359 -359
  64. package/src/features/backrefs/backrefs.handler.ts +168 -168
  65. package/src/features/backrefs/d1-backref.repository.ts +84 -84
  66. package/src/features/backrefs/index.ts +5 -5
  67. package/src/features/content/constants.ts +16 -16
  68. package/src/features/content/handlers/bulk.handler.ts +185 -185
  69. package/src/features/content/handlers/create.ts +129 -129
  70. package/src/features/content/handlers/delete.ts +62 -62
  71. package/src/features/content/handlers/facets.ts +49 -49
  72. package/src/features/content/handlers/get.ts +120 -120
  73. package/src/features/content/handlers/helpers.test.ts +180 -180
  74. package/src/features/content/handlers/helpers.ts +93 -93
  75. package/src/features/content/handlers/list.ts +174 -174
  76. package/src/features/content/handlers/update.ts +174 -174
  77. package/src/features/content/index.ts +26 -26
  78. package/src/features/dashboard-layout/__tests__/dashboard-layout.handler.test.ts +388 -0
  79. package/src/features/dashboard-layout/dashboard-layout.handler.ts +206 -0
  80. package/src/features/dashboard-layout/index.ts +5 -0
  81. package/src/features/draft/draft.handler.ts +195 -195
  82. package/src/features/draft/draft.middleware.ts +66 -66
  83. package/src/features/draft/index.ts +5 -5
  84. package/src/features/email/email.provider.ts +42 -42
  85. package/src/features/email/email.service.ts +98 -98
  86. package/src/features/email/email.types.ts +119 -119
  87. package/src/features/email/index.ts +33 -33
  88. package/src/features/email/providers/resend.ts +67 -67
  89. package/src/features/email/providers/smtp.ts +55 -55
  90. package/src/features/email/templates/automation-mail.ts +19 -19
  91. package/src/features/email/templates/password-changed.ts +63 -63
  92. package/src/features/email/templates/password-reset.ts +68 -68
  93. package/src/features/email/templates/shell.ts +96 -96
  94. package/src/features/notifications/index.ts +5 -5
  95. package/src/features/notifications/notifications.handler.ts +105 -105
  96. package/src/features/password-reset/index.ts +19 -19
  97. package/src/features/password-reset/request.ts +92 -92
  98. package/src/features/password-reset/reset.ts +102 -102
  99. package/src/features/rotate-field/index.ts +5 -5
  100. package/src/features/rotate-field/rotate-field.handler.ts +132 -132
  101. package/src/features/rotate-field/rotate-field.schema.ts +17 -17
  102. package/src/features/schema/schema.handler.ts +131 -131
  103. package/src/features/seeds/index.ts +5 -5
  104. package/src/features/seeds/seeds.handler.test.ts +1199 -632
  105. package/src/features/seeds/seeds.handler.ts +558 -693
  106. package/src/features/settings/__tests__/settings.handler.test.ts +555 -555
  107. package/src/features/settings/settings.handler.ts +392 -392
  108. package/src/features/setup/index.ts +288 -204
  109. package/src/features/stats/index.ts +5 -5
  110. package/src/features/stats/stats.handler.ts +420 -420
  111. package/src/features/webhooks/index.ts +63 -63
  112. package/src/index.ts +65 -65
  113. package/src/media-utils.ts +82 -82
  114. package/src/middleware/auth-providers.middleware.test.ts +85 -0
  115. package/src/middleware/auth-providers.middleware.ts +45 -45
  116. package/src/middleware/observability.middleware.test.ts +93 -0
  117. package/src/middleware/observability.middleware.ts +70 -70
  118. package/src/middleware/rate-limit.middleware.ts +45 -45
  119. package/src/middleware/repository.middleware.ts +117 -114
  120. package/src/middleware/seed-registry.middleware.test.ts +97 -97
  121. package/src/middleware/seed-registry.middleware.ts +21 -21
  122. package/src/middleware/storage.middleware.ts +25 -25
  123. package/src/middleware.ts +45 -45
  124. package/src/public/access-policy.ts +27 -27
  125. package/src/public/api-key-middleware.ts +57 -57
  126. package/src/public/cache-utils.ts +38 -38
  127. package/src/public/entry-projection.ts +46 -46
  128. package/src/public/idempotency.ts +23 -23
  129. package/src/public/index.ts +16 -16
  130. package/src/public/problem-details.ts +124 -124
  131. package/src/public/public-add.ts +114 -114
  132. package/src/public/public-edit.ts +163 -163
  133. package/src/public/public-errors.ts +19 -19
  134. package/src/public/public-read.ts +63 -63
  135. package/src/public/public-routes.ts +88 -88
  136. package/src/public/query-builder.test.ts +224 -224
  137. package/src/public/query-builder.ts +156 -156
  138. package/src/public/rate-limit-middleware.ts +34 -34
  139. package/src/public/read-list.ts +54 -54
  140. package/src/public/read-single.ts +48 -48
  141. package/src/public/response-builder.ts +30 -30
  142. package/src/public/sanitize.ts +69 -69
  143. package/src/public/slug-utils.ts +18 -18
  144. package/src/rate-limit/cloudflare-rate-limiter.test.ts +30 -30
  145. package/src/rate-limit/cloudflare-rate-limiter.ts +15 -15
  146. package/src/rate-limit/in-memory-rate-limiter.test.ts +37 -37
  147. package/src/rate-limit/in-memory-rate-limiter.ts +17 -17
  148. package/src/rate-limit/no-op-rate-limiter.test.ts +22 -22
  149. package/src/rate-limit/no-op-rate-limiter.ts +11 -11
  150. package/src/search-utils.test.ts +211 -211
  151. package/src/search-utils.ts +213 -213
  152. package/src/search.ts +65 -65
  153. package/src/shared/apply-policies.test.ts +81 -81
  154. package/src/shared/apply-policies.ts +67 -67
  155. package/src/shared/automations.repository.d1.ts +150 -150
  156. package/src/shared/background-notification-service.test.ts +62 -62
  157. package/src/shared/background-notification-service.ts +52 -52
  158. package/src/shared/base.repository.d1.ts +32 -32
  159. package/src/shared/content-utils.test.ts +165 -165
  160. package/src/shared/content-utils.ts +86 -86
  161. package/src/shared/content.repository.d1.test.ts +507 -458
  162. package/src/shared/content.repository.d1.ts +851 -851
  163. package/src/shared/d1-activity-log.repository.test.ts +140 -140
  164. package/src/shared/d1-activity-log.repository.ts +105 -105
  165. package/src/shared/d1-activity-logger.test.ts +86 -86
  166. package/src/shared/d1-activity-logger.ts +67 -67
  167. package/src/shared/d1-analytics.repository.test.ts +78 -78
  168. package/src/shared/d1-analytics.repository.ts +85 -85
  169. package/src/shared/d1-content-scan.repository.test.ts +80 -80
  170. package/src/shared/d1-content-scan.repository.ts +37 -37
  171. package/src/shared/d1-notification.repository.test.ts +128 -128
  172. package/src/shared/d1-notification.repository.ts +118 -118
  173. package/src/shared/d1-password-reset-token.repository.test.ts +81 -81
  174. package/src/shared/d1-password-reset-token.repository.ts +56 -56
  175. package/src/shared/d1-search.repository.test.ts +87 -87
  176. package/src/shared/d1-search.repository.ts +88 -88
  177. package/src/shared/d1-session.repository.test.ts +125 -125
  178. package/src/shared/d1-session.repository.ts +102 -102
  179. package/src/shared/d1-setup-checklist.repository.ts +36 -36
  180. package/src/shared/d1-user.repository.test.ts +151 -151
  181. package/src/shared/d1-user.repository.ts +119 -119
  182. package/src/shared/d1-widget.repository.test.ts +267 -221
  183. package/src/shared/d1-widget.repository.ts +385 -341
  184. package/src/shared/dashboard-layout.repository.d1.test.ts +135 -0
  185. package/src/shared/dashboard-layout.repository.d1.ts +58 -0
  186. package/src/shared/demo-data-sql.ts +216 -54
  187. package/src/shared/demo-data.repository.d1.ts +20 -20
  188. package/src/shared/execution-context-scheduler.ts +13 -13
  189. package/src/shared/fixed-clock.ts +25 -25
  190. package/src/shared/fts-sync.ts +8 -8
  191. package/src/shared/idempotency.repository.d1.test.ts +83 -83
  192. package/src/shared/idempotency.repository.d1.ts +60 -60
  193. package/src/shared/in-memory-activity-logger.ts +19 -19
  194. package/src/shared/in-memory-notification-service.ts +19 -19
  195. package/src/shared/in-memory-seed.repository.ts +58 -51
  196. package/src/shared/media.repository.d1.test.ts +107 -107
  197. package/src/shared/media.repository.d1.ts +68 -68
  198. package/src/shared/qstash-notification-service.test.ts +67 -67
  199. package/src/shared/qstash-notification-service.ts +55 -55
  200. package/src/shared/query-utils.ts +141 -141
  201. package/src/shared/request-utils.ts +26 -26
  202. package/src/shared/schema-mutator.d1.test.ts +142 -0
  203. package/src/shared/schema-mutator.d1.ts +64 -64
  204. package/src/shared/seed-layout.repository.d1.test.ts +114 -114
  205. package/src/shared/seed-layout.repository.d1.ts +62 -62
  206. package/src/shared/seed-registry-cache.test.ts +68 -68
  207. package/src/shared/seed-registry-cache.ts +49 -49
  208. package/src/shared/seed.repository.d1.test.ts +143 -143
  209. package/src/shared/seed.repository.d1.ts +98 -98
  210. package/src/shared/sequential-id-generator.ts +33 -33
  211. package/src/shared/site-settings.repository.d1.ts +53 -53
  212. package/src/shared/storage/factory.ts +41 -41
  213. package/src/shared/storage/s3-bucket.ts +195 -195
  214. package/src/shared/storage-utils.ts +40 -40
  215. package/src/shared/system-stats.repository.d1.test.ts +58 -58
  216. package/src/shared/system-stats.repository.d1.ts +48 -48
  217. package/src/types.ts +90 -87
  218. package/src/upload.ts +198 -198
  219. package/src/widget.test.ts +85 -0
  220. package/src/widget.ts +251 -212
  221. package/assets/dashboard/assets/index-BSjk0Sx9.js +0 -634
  222. package/assets/dashboard/assets/index-kRCYVN2B.css +0 -1
@@ -1,151 +1,151 @@
1
- // SPDX-License-Identifier: BUSL-1.1
2
- // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
- // See LICENSE in the repository root for license terms.
4
-
5
- import { describe, it, expect, vi } from 'vitest'
6
- import { D1UserRepository } from './d1-user.repository'
7
-
8
- const USER_ROW = {
9
- id: 'u1',
10
- email: 'test@test.com',
11
- name: 'Test User',
12
- password_hash: 'hash-abc',
13
- role: 'admin',
14
- avatar_url: null,
15
- notification_prefs: '{}',
16
- }
17
-
18
- function makeMockDb(opts: {
19
- firstResult?: unknown
20
- runChanges?: number
21
- allResults?: unknown[]
22
- } = {}) {
23
- const { firstResult = null, runChanges = 1, allResults = [] } = opts
24
- const runMock = vi.fn().mockResolvedValue({ success: true, meta: { changes: runChanges } })
25
- const firstMock = vi.fn().mockResolvedValue(firstResult)
26
- const allMock = vi.fn().mockResolvedValue({ results: allResults })
27
- const bindMock = vi.fn(() => ({ first: firstMock, all: allMock, run: runMock }))
28
- // prepare() may be called without bind() for countAll (which calls .first() directly)
29
- const prepareMock = vi.fn(() => ({ bind: bindMock, first: firstMock, run: runMock }))
30
- return { db: { prepare: prepareMock } as any, prepareMock, bindMock, runMock, firstMock }
31
- }
32
-
33
- describe('D1UserRepository', () => {
34
- describe('countAll', () => {
35
- it('returns the count value from the database', async () => {
36
- const { db, firstMock } = makeMockDb()
37
- firstMock.mockResolvedValue({ count: 5 })
38
- expect(await new D1UserRepository(db).countAll()).toBe(5)
39
- })
40
-
41
- it('returns 0 when the query returns null', async () => {
42
- const { db } = makeMockDb({ firstResult: null })
43
- expect(await new D1UserRepository(db).countAll()).toBe(0)
44
- })
45
- })
46
-
47
- describe('findByEmail', () => {
48
- it('returns a UserRecord with camelCase keys mapped from the snake_case row', async () => {
49
- const { db } = makeMockDb({ firstResult: USER_ROW })
50
- const result = await new D1UserRepository(db).findByEmail('test@test.com')
51
- expect(result).toEqual({
52
- id: 'u1',
53
- email: 'test@test.com',
54
- name: 'Test User',
55
- passwordHash: 'hash-abc',
56
- role: 'admin',
57
- avatarUrl: null,
58
- notificationPreferences: '{}',
59
- })
60
- })
61
-
62
- it('returns null when no user is found', async () => {
63
- const { db } = makeMockDb({ firstResult: null })
64
- expect(await new D1UserRepository(db).findByEmail('nobody@test.com')).toBeNull()
65
- })
66
- })
67
-
68
- describe('findById', () => {
69
- it('returns a mapped UserRecord when found', async () => {
70
- const { db } = makeMockDb({ firstResult: USER_ROW })
71
- const result = await new D1UserRepository(db).findById('u1')
72
- expect(result?.id).toBe('u1')
73
- expect(result?.passwordHash).toBe('hash-abc')
74
- })
75
-
76
- it('returns null when the user is not found', async () => {
77
- const { db } = makeMockDb({ firstResult: null })
78
- expect(await new D1UserRepository(db).findById('unknown')).toBeNull()
79
- })
80
- })
81
-
82
- describe('create', () => {
83
- it('calls prepare with an INSERT INTO users statement', async () => {
84
- const { db, prepareMock } = makeMockDb()
85
- await new D1UserRepository(db).create({
86
- id: 'u1', email: 'a@b.com', passwordHash: 'hash', role: 'admin', name: 'Test', surname: null,
87
- })
88
- expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('INSERT INTO users'))
89
- })
90
-
91
- it('binds id, email, passwordHash, role, name, surname in the correct order', async () => {
92
- const { db, bindMock } = makeMockDb()
93
- await new D1UserRepository(db).create({
94
- id: 'u1', email: 'a@b.com', passwordHash: 'hash', role: 'admin', name: 'Test', surname: null,
95
- })
96
- expect(bindMock).toHaveBeenCalledWith('u1', 'a@b.com', 'hash', 'admin', 'Test', null)
97
- })
98
- })
99
-
100
- describe('updateProfile', () => {
101
- it('does nothing when no fields are provided', async () => {
102
- const { db, prepareMock } = makeMockDb()
103
- await new D1UserRepository(db).updateProfile('u1', {})
104
- expect(prepareMock).not.toHaveBeenCalled()
105
- })
106
-
107
- it('generates a SET clause containing only the provided field', async () => {
108
- const { db, prepareMock } = makeMockDb()
109
- await new D1UserRepository(db).updateProfile('u1', { name: 'New Name' })
110
- const sql: string = prepareMock.mock.calls[0][0]
111
- expect(sql).toContain('name = ?')
112
- expect(sql).not.toContain('email = ?')
113
- })
114
-
115
- it('includes both fields when both name and email are provided', async () => {
116
- const { db, prepareMock } = makeMockDb()
117
- await new D1UserRepository(db).updateProfile('u1', { name: 'N', email: 'e@e.com' })
118
- const sql: string = prepareMock.mock.calls[0][0]
119
- expect(sql).toContain('name = ?')
120
- expect(sql).toContain('email = ?')
121
- })
122
- })
123
-
124
- describe('updatePasswordHash', () => {
125
- it('calls UPDATE users SET password_hash', async () => {
126
- const { db, prepareMock } = makeMockDb()
127
- await new D1UserRepository(db).updatePasswordHash('u1', 'new-hash')
128
- expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('password_hash'))
129
- })
130
- })
131
-
132
- describe('updateAvatarUrl', () => {
133
- it('calls UPDATE users SET avatar_url', async () => {
134
- const { db, prepareMock } = makeMockDb()
135
- await new D1UserRepository(db).updateAvatarUrl('u1', 'https://cdn.example.com/avatar.jpg')
136
- expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('avatar_url'))
137
- })
138
- })
139
-
140
- describe('emailBelongsToAnotherUser', () => {
141
- it('returns true when another user row is found with that email', async () => {
142
- const { db } = makeMockDb({ firstResult: { id: 'other-user' } })
143
- expect(await new D1UserRepository(db).emailBelongsToAnotherUser('taken@test.com', 'current')).toBe(true)
144
- })
145
-
146
- it('returns false when no other user owns the email', async () => {
147
- const { db } = makeMockDb({ firstResult: null })
148
- expect(await new D1UserRepository(db).emailBelongsToAnotherUser('free@test.com', 'current')).toBe(false)
149
- })
150
- })
151
- })
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ import { describe, it, expect, vi } from 'vitest'
6
+ import { D1UserRepository } from './d1-user.repository'
7
+
8
+ const USER_ROW = {
9
+ id: 'u1',
10
+ email: 'test@test.com',
11
+ name: 'Test User',
12
+ password_hash: 'hash-abc',
13
+ role: 'admin',
14
+ avatar_url: null,
15
+ notification_prefs: '{}',
16
+ }
17
+
18
+ function makeMockDb(opts: {
19
+ firstResult?: unknown
20
+ runChanges?: number
21
+ allResults?: unknown[]
22
+ } = {}) {
23
+ const { firstResult = null, runChanges = 1, allResults = [] } = opts
24
+ const runMock = vi.fn().mockResolvedValue({ success: true, meta: { changes: runChanges } })
25
+ const firstMock = vi.fn().mockResolvedValue(firstResult)
26
+ const allMock = vi.fn().mockResolvedValue({ results: allResults })
27
+ const bindMock = vi.fn(() => ({ first: firstMock, all: allMock, run: runMock }))
28
+ // prepare() may be called without bind() for countAll (which calls .first() directly)
29
+ const prepareMock = vi.fn(() => ({ bind: bindMock, first: firstMock, run: runMock }))
30
+ return { db: { prepare: prepareMock } as any, prepareMock, bindMock, runMock, firstMock }
31
+ }
32
+
33
+ describe('D1UserRepository', () => {
34
+ describe('countAll', () => {
35
+ it('returns the count value from the database', async () => {
36
+ const { db, firstMock } = makeMockDb()
37
+ firstMock.mockResolvedValue({ count: 5 })
38
+ expect(await new D1UserRepository(db).countAll()).toBe(5)
39
+ })
40
+
41
+ it('returns 0 when the query returns null', async () => {
42
+ const { db } = makeMockDb({ firstResult: null })
43
+ expect(await new D1UserRepository(db).countAll()).toBe(0)
44
+ })
45
+ })
46
+
47
+ describe('findByEmail', () => {
48
+ it('returns a UserRecord with camelCase keys mapped from the snake_case row', async () => {
49
+ const { db } = makeMockDb({ firstResult: USER_ROW })
50
+ const result = await new D1UserRepository(db).findByEmail('test@test.com')
51
+ expect(result).toEqual({
52
+ id: 'u1',
53
+ email: 'test@test.com',
54
+ name: 'Test User',
55
+ passwordHash: 'hash-abc',
56
+ role: 'admin',
57
+ avatarUrl: null,
58
+ notificationPreferences: '{}',
59
+ })
60
+ })
61
+
62
+ it('returns null when no user is found', async () => {
63
+ const { db } = makeMockDb({ firstResult: null })
64
+ expect(await new D1UserRepository(db).findByEmail('nobody@test.com')).toBeNull()
65
+ })
66
+ })
67
+
68
+ describe('findById', () => {
69
+ it('returns a mapped UserRecord when found', async () => {
70
+ const { db } = makeMockDb({ firstResult: USER_ROW })
71
+ const result = await new D1UserRepository(db).findById('u1')
72
+ expect(result?.id).toBe('u1')
73
+ expect(result?.passwordHash).toBe('hash-abc')
74
+ })
75
+
76
+ it('returns null when the user is not found', async () => {
77
+ const { db } = makeMockDb({ firstResult: null })
78
+ expect(await new D1UserRepository(db).findById('unknown')).toBeNull()
79
+ })
80
+ })
81
+
82
+ describe('create', () => {
83
+ it('calls prepare with an INSERT INTO users statement', async () => {
84
+ const { db, prepareMock } = makeMockDb()
85
+ await new D1UserRepository(db).create({
86
+ id: 'u1', email: 'a@b.com', passwordHash: 'hash', role: 'admin', name: 'Test', surname: null,
87
+ })
88
+ expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('INSERT INTO users'))
89
+ })
90
+
91
+ it('binds id, email, passwordHash, role, name, surname in the correct order', async () => {
92
+ const { db, bindMock } = makeMockDb()
93
+ await new D1UserRepository(db).create({
94
+ id: 'u1', email: 'a@b.com', passwordHash: 'hash', role: 'admin', name: 'Test', surname: null,
95
+ })
96
+ expect(bindMock).toHaveBeenCalledWith('u1', 'a@b.com', 'hash', 'admin', 'Test', null)
97
+ })
98
+ })
99
+
100
+ describe('updateProfile', () => {
101
+ it('does nothing when no fields are provided', async () => {
102
+ const { db, prepareMock } = makeMockDb()
103
+ await new D1UserRepository(db).updateProfile('u1', {})
104
+ expect(prepareMock).not.toHaveBeenCalled()
105
+ })
106
+
107
+ it('generates a SET clause containing only the provided field', async () => {
108
+ const { db, prepareMock } = makeMockDb()
109
+ await new D1UserRepository(db).updateProfile('u1', { name: 'New Name' })
110
+ const sql: string = prepareMock.mock.calls[0][0]
111
+ expect(sql).toContain('name = ?')
112
+ expect(sql).not.toContain('email = ?')
113
+ })
114
+
115
+ it('includes both fields when both name and email are provided', async () => {
116
+ const { db, prepareMock } = makeMockDb()
117
+ await new D1UserRepository(db).updateProfile('u1', { name: 'N', email: 'e@e.com' })
118
+ const sql: string = prepareMock.mock.calls[0][0]
119
+ expect(sql).toContain('name = ?')
120
+ expect(sql).toContain('email = ?')
121
+ })
122
+ })
123
+
124
+ describe('updatePasswordHash', () => {
125
+ it('calls UPDATE users SET password_hash', async () => {
126
+ const { db, prepareMock } = makeMockDb()
127
+ await new D1UserRepository(db).updatePasswordHash('u1', 'new-hash')
128
+ expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('password_hash'))
129
+ })
130
+ })
131
+
132
+ describe('updateAvatarUrl', () => {
133
+ it('calls UPDATE users SET avatar_url', async () => {
134
+ const { db, prepareMock } = makeMockDb()
135
+ await new D1UserRepository(db).updateAvatarUrl('u1', 'https://cdn.example.com/avatar.jpg')
136
+ expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('avatar_url'))
137
+ })
138
+ })
139
+
140
+ describe('emailBelongsToAnotherUser', () => {
141
+ it('returns true when another user row is found with that email', async () => {
142
+ const { db } = makeMockDb({ firstResult: { id: 'other-user' } })
143
+ expect(await new D1UserRepository(db).emailBelongsToAnotherUser('taken@test.com', 'current')).toBe(true)
144
+ })
145
+
146
+ it('returns false when no other user owns the email', async () => {
147
+ const { db } = makeMockDb({ firstResult: null })
148
+ expect(await new D1UserRepository(db).emailBelongsToAnotherUser('free@test.com', 'current')).toBe(false)
149
+ })
150
+ })
151
+ })
@@ -1,119 +1,119 @@
1
- // SPDX-License-Identifier: BUSL-1.1
2
- // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
- // See LICENSE in the repository root for license terms.
4
-
5
- /// <reference types="@cloudflare/workers-types" />
6
- import type { IUserRepository, UserRecord, NewUserInput } from '@beechcms/core'
7
-
8
- type UserRow = {
9
- id: string
10
- email: string
11
- name: string | null
12
- surname: string | null
13
- password_hash: string
14
- role: string
15
- avatar_url: string | null
16
- notification_prefs: string
17
- }
18
-
19
- function rowToRecord(row: UserRow): UserRecord {
20
- return {
21
- id: row.id,
22
- email: row.email,
23
- name: row.name,
24
- surname: row.surname,
25
- passwordHash: row.password_hash,
26
- role: row.role,
27
- avatarUrl: row.avatar_url,
28
- notificationPreferences: row.notification_prefs,
29
- }
30
- }
31
-
32
- export class D1UserRepository implements IUserRepository {
33
- constructor(private readonly db: D1Database) {}
34
-
35
- async countAll(): Promise<number> {
36
- const result = await this.db
37
- .prepare('SELECT COUNT(*) as count FROM users')
38
- .first<{ count: number }>()
39
- return result?.count ?? 0
40
- }
41
-
42
- async findById(userId: string): Promise<UserRecord | null> {
43
- const row = await this.db
44
- .prepare('SELECT id, email, name, surname, password_hash, role, avatar_url, notification_prefs FROM users WHERE id = ? LIMIT 1')
45
- .bind(userId)
46
- .first<UserRow>()
47
- return row ? rowToRecord(row) : null
48
- }
49
-
50
- async findByEmail(email: string): Promise<UserRecord | null> {
51
- const row = await this.db
52
- .prepare('SELECT id, email, name, surname, password_hash, role, avatar_url, notification_prefs FROM users WHERE email = ? LIMIT 1')
53
- .bind(email)
54
- .first<UserRow>()
55
- return row ? rowToRecord(row) : null
56
- }
57
-
58
- async create(user: NewUserInput): Promise<void> {
59
- await this.db
60
- .prepare('INSERT INTO users (id, email, password_hash, role, name, surname) VALUES (?, ?, ?, ?, ?, ?)')
61
- .bind(user.id, user.email, user.passwordHash, user.role, user.name, user.surname)
62
- .run()
63
- }
64
-
65
- async updateProfile(userId: string, fields: { name?: string; surname?: string; email?: string }): Promise<void> {
66
- const columnAssignments: string[] = []
67
- const boundValues: unknown[] = []
68
-
69
- if (fields.name !== undefined) {
70
- columnAssignments.push('name = ?')
71
- boundValues.push(fields.name)
72
- }
73
- if (fields.surname !== undefined) {
74
- columnAssignments.push('surname = ?')
75
- boundValues.push(fields.surname)
76
- }
77
- if (fields.email !== undefined) {
78
- columnAssignments.push('email = ?')
79
- boundValues.push(fields.email)
80
- }
81
-
82
- if (columnAssignments.length === 0) return
83
-
84
- boundValues.push(userId)
85
- await this.db
86
- .prepare(`UPDATE users SET ${columnAssignments.join(', ')} WHERE id = ?`)
87
- .bind(...boundValues)
88
- .run()
89
- }
90
-
91
- async updatePasswordHash(userId: string, newPasswordHash: string): Promise<void> {
92
- await this.db
93
- .prepare('UPDATE users SET password_hash = ? WHERE id = ?')
94
- .bind(newPasswordHash, userId)
95
- .run()
96
- }
97
-
98
- async updateAvatarUrl(userId: string, avatarUrl: string | null): Promise<void> {
99
- await this.db
100
- .prepare('UPDATE users SET avatar_url = ? WHERE id = ?')
101
- .bind(avatarUrl, userId)
102
- .run()
103
- }
104
-
105
- async updateNotificationPreferences(userId: string, preferencesJson: string): Promise<void> {
106
- await this.db
107
- .prepare('UPDATE users SET notification_prefs = ? WHERE id = ?')
108
- .bind(preferencesJson, userId)
109
- .run()
110
- }
111
-
112
- async emailBelongsToAnotherUser(email: string, currentUserId: string): Promise<boolean> {
113
- const row = await this.db
114
- .prepare('SELECT id FROM users WHERE email = ? AND id != ? LIMIT 1')
115
- .bind(email, currentUserId)
116
- .first()
117
- return row !== null
118
- }
119
- }
1
+ // SPDX-License-Identifier: BUSL-1.1
2
+ // Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
3
+ // See LICENSE in the repository root for license terms.
4
+
5
+ /// <reference types="@cloudflare/workers-types" />
6
+ import type { IUserRepository, UserRecord, NewUserInput } from '@beechcms/core'
7
+
8
+ type UserRow = {
9
+ id: string
10
+ email: string
11
+ name: string | null
12
+ surname: string | null
13
+ password_hash: string
14
+ role: string
15
+ avatar_url: string | null
16
+ notification_prefs: string
17
+ }
18
+
19
+ function rowToRecord(row: UserRow): UserRecord {
20
+ return {
21
+ id: row.id,
22
+ email: row.email,
23
+ name: row.name,
24
+ surname: row.surname,
25
+ passwordHash: row.password_hash,
26
+ role: row.role,
27
+ avatarUrl: row.avatar_url,
28
+ notificationPreferences: row.notification_prefs,
29
+ }
30
+ }
31
+
32
+ export class D1UserRepository implements IUserRepository {
33
+ constructor(private readonly db: D1Database) {}
34
+
35
+ async countAll(): Promise<number> {
36
+ const result = await this.db
37
+ .prepare('SELECT COUNT(*) as count FROM users')
38
+ .first<{ count: number }>()
39
+ return result?.count ?? 0
40
+ }
41
+
42
+ async findById(userId: string): Promise<UserRecord | null> {
43
+ const row = await this.db
44
+ .prepare('SELECT id, email, name, surname, password_hash, role, avatar_url, notification_prefs FROM users WHERE id = ? LIMIT 1')
45
+ .bind(userId)
46
+ .first<UserRow>()
47
+ return row ? rowToRecord(row) : null
48
+ }
49
+
50
+ async findByEmail(email: string): Promise<UserRecord | null> {
51
+ const row = await this.db
52
+ .prepare('SELECT id, email, name, surname, password_hash, role, avatar_url, notification_prefs FROM users WHERE email = ? LIMIT 1')
53
+ .bind(email)
54
+ .first<UserRow>()
55
+ return row ? rowToRecord(row) : null
56
+ }
57
+
58
+ async create(user: NewUserInput): Promise<void> {
59
+ await this.db
60
+ .prepare('INSERT INTO users (id, email, password_hash, role, name, surname) VALUES (?, ?, ?, ?, ?, ?)')
61
+ .bind(user.id, user.email, user.passwordHash, user.role, user.name, user.surname)
62
+ .run()
63
+ }
64
+
65
+ async updateProfile(userId: string, fields: { name?: string; surname?: string; email?: string }): Promise<void> {
66
+ const columnAssignments: string[] = []
67
+ const boundValues: unknown[] = []
68
+
69
+ if (fields.name !== undefined) {
70
+ columnAssignments.push('name = ?')
71
+ boundValues.push(fields.name)
72
+ }
73
+ if (fields.surname !== undefined) {
74
+ columnAssignments.push('surname = ?')
75
+ boundValues.push(fields.surname)
76
+ }
77
+ if (fields.email !== undefined) {
78
+ columnAssignments.push('email = ?')
79
+ boundValues.push(fields.email)
80
+ }
81
+
82
+ if (columnAssignments.length === 0) return
83
+
84
+ boundValues.push(userId)
85
+ await this.db
86
+ .prepare(`UPDATE users SET ${columnAssignments.join(', ')} WHERE id = ?`)
87
+ .bind(...boundValues)
88
+ .run()
89
+ }
90
+
91
+ async updatePasswordHash(userId: string, newPasswordHash: string): Promise<void> {
92
+ await this.db
93
+ .prepare('UPDATE users SET password_hash = ? WHERE id = ?')
94
+ .bind(newPasswordHash, userId)
95
+ .run()
96
+ }
97
+
98
+ async updateAvatarUrl(userId: string, avatarUrl: string | null): Promise<void> {
99
+ await this.db
100
+ .prepare('UPDATE users SET avatar_url = ? WHERE id = ?')
101
+ .bind(avatarUrl, userId)
102
+ .run()
103
+ }
104
+
105
+ async updateNotificationPreferences(userId: string, preferencesJson: string): Promise<void> {
106
+ await this.db
107
+ .prepare('UPDATE users SET notification_prefs = ? WHERE id = ?')
108
+ .bind(preferencesJson, userId)
109
+ .run()
110
+ }
111
+
112
+ async emailBelongsToAnotherUser(email: string, currentUserId: string): Promise<boolean> {
113
+ const row = await this.db
114
+ .prepare('SELECT id FROM users WHERE email = ? AND id != ? LIMIT 1')
115
+ .bind(email, currentUserId)
116
+ .first()
117
+ return row !== null
118
+ }
119
+ }