@beechcms/api 0.6.0-preview.1 → 0.6.0-preview.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/assets/dashboard/BeechLogo.svg +18 -18
- package/assets/dashboard/BeechLogoLIght.svg +48 -48
- package/assets/dashboard/assets/chart-BrJFdsGZ.js +39 -0
- package/assets/dashboard/assets/index-CIaoMxuB.css +1 -0
- package/assets/dashboard/assets/index-wTKgygsg.js +636 -0
- package/assets/dashboard/assets/pie-chart-recharts-BEaE1FOE.js +1 -0
- package/assets/dashboard/assets/timeseries-chart-recharts-DmWM6imF.js +1 -0
- package/assets/dashboard/beechLogoDark.svg +48 -48
- package/assets/dashboard/index.html +18 -18
- package/assets/dashboard/noResult.svg +42 -42
- package/assets/dashboard/sol.svg +3 -3
- package/assets/dashboard/undraw_enter_nwx3.svg +36 -36
- package/migrations/0000_v040_base.sql +265 -265
- package/migrations/0029_automations.sql +14 -14
- package/migrations/0030_test_seeds.sql +125 -125
- package/package.json +2 -2
- package/src/auth/__fixtures__/in-memory-hash-provider.ts +17 -17
- package/src/auth/__fixtures__/static-token-service.ts +22 -22
- package/src/auth/bcrypt-hash-provider.ts +24 -24
- package/src/auth/constants.ts +14 -14
- package/src/auth/generate-refresh-token.test.ts +23 -23
- package/src/auth/hash-provider.test.ts +55 -55
- package/src/auth/jose-token-service.ts +62 -62
- package/src/auth/jwt-claims-passthrough.test.ts +87 -87
- package/src/auth/login.test.ts +100 -100
- package/src/auth/login.ts +78 -78
- package/src/auth/refresh.ts +11 -11
- package/src/auth/token-service.test.ts +90 -90
- package/src/factory.ts +370 -368
- package/src/features/automations/__tests__/action-executors.test.ts +255 -255
- package/src/features/automations/__tests__/automation-runner.test.ts +196 -196
- package/src/features/automations/__tests__/automation-runner.utils.test.ts +60 -60
- package/src/features/automations/__tests__/automations.handler.test.ts +264 -264
- package/src/features/automations/__tests__/automations.repository.test.ts +163 -163
- package/src/features/automations/__tests__/automations.schema.test.ts +224 -224
- package/src/features/automations/__tests__/context-resolver.test.ts +126 -126
- package/src/features/automations/__tests__/cron-runner.test.ts +267 -267
- package/src/features/automations/__tests__/cron-runner.utils.test.ts +144 -144
- package/src/features/automations/__tests__/set-variable.executor.test.ts +383 -383
- package/src/features/automations/__tests__/template-grammar.test.ts +308 -308
- package/src/features/automations/__tests__/webhook.executor.test.ts +142 -142
- package/src/features/automations/__tests__/when-evaluator.test.ts +274 -274
- package/src/features/automations/__tests__/when-pushdown.test.ts +281 -281
- package/src/features/automations/action-executors/create-entry.executor.ts +27 -27
- package/src/features/automations/action-executors/edit-field.executor.ts +26 -26
- package/src/features/automations/action-executors/index.ts +37 -37
- package/src/features/automations/action-executors/send-mail.executor.ts +53 -53
- package/src/features/automations/action-executors/set-variable.executor.ts +159 -159
- package/src/features/automations/action-executors/webhook.executor.ts +67 -67
- package/src/features/automations/automation-runner.ts +85 -85
- package/src/features/automations/automation-runner.utils.ts +47 -47
- package/src/features/automations/automations.handler.ts +197 -197
- package/src/features/automations/automations.schema.ts +177 -177
- package/src/features/automations/context-resolver.ts +152 -152
- package/src/features/automations/cron-runner.ts +140 -140
- package/src/features/automations/cron-runner.utils.ts +44 -44
- package/src/features/automations/filter-translation.ts +46 -46
- package/src/features/automations/index.ts +16 -16
- package/src/features/automations/template-grammar.ts +245 -245
- package/src/features/automations/var-access-resolver.ts +140 -140
- package/src/features/automations/when-evaluator.ts +87 -87
- package/src/features/automations/when-pushdown.ts +57 -57
- package/src/features/backrefs/__tests__/backrefs.handler.test.ts +359 -359
- package/src/features/backrefs/backrefs.handler.ts +168 -168
- package/src/features/backrefs/d1-backref.repository.ts +84 -84
- package/src/features/backrefs/index.ts +5 -5
- package/src/features/content/constants.ts +16 -16
- package/src/features/content/handlers/bulk.handler.ts +185 -185
- package/src/features/content/handlers/create.ts +129 -129
- package/src/features/content/handlers/delete.ts +62 -62
- package/src/features/content/handlers/facets.ts +49 -49
- package/src/features/content/handlers/get.ts +120 -120
- package/src/features/content/handlers/helpers.test.ts +180 -180
- package/src/features/content/handlers/helpers.ts +93 -93
- package/src/features/content/handlers/list.ts +174 -174
- package/src/features/content/handlers/update.ts +174 -174
- package/src/features/content/index.ts +26 -26
- package/src/features/dashboard-layout/__tests__/dashboard-layout.handler.test.ts +388 -0
- package/src/features/dashboard-layout/dashboard-layout.handler.ts +206 -0
- package/src/features/dashboard-layout/index.ts +5 -0
- package/src/features/draft/draft.handler.ts +195 -195
- package/src/features/draft/draft.middleware.ts +66 -66
- package/src/features/draft/index.ts +5 -5
- package/src/features/email/email.provider.ts +42 -42
- package/src/features/email/email.service.ts +98 -98
- package/src/features/email/email.types.ts +119 -119
- package/src/features/email/index.ts +33 -33
- package/src/features/email/providers/resend.ts +67 -67
- package/src/features/email/providers/smtp.ts +55 -55
- package/src/features/email/templates/automation-mail.ts +19 -19
- package/src/features/email/templates/password-changed.ts +63 -63
- package/src/features/email/templates/password-reset.ts +68 -68
- package/src/features/email/templates/shell.ts +96 -96
- package/src/features/notifications/index.ts +5 -5
- package/src/features/notifications/notifications.handler.ts +105 -105
- package/src/features/password-reset/index.ts +19 -19
- package/src/features/password-reset/request.ts +92 -92
- package/src/features/password-reset/reset.ts +102 -102
- package/src/features/rotate-field/index.ts +5 -5
- package/src/features/rotate-field/rotate-field.handler.ts +132 -132
- package/src/features/rotate-field/rotate-field.schema.ts +17 -17
- package/src/features/schema/schema.handler.ts +131 -131
- package/src/features/seeds/index.ts +5 -5
- package/src/features/seeds/seeds.handler.test.ts +1199 -632
- package/src/features/seeds/seeds.handler.ts +558 -693
- package/src/features/settings/__tests__/settings.handler.test.ts +555 -555
- package/src/features/settings/settings.handler.ts +392 -392
- package/src/features/setup/index.ts +288 -204
- package/src/features/stats/index.ts +5 -5
- package/src/features/stats/stats.handler.ts +420 -420
- package/src/features/webhooks/index.ts +63 -63
- package/src/index.ts +65 -65
- package/src/media-utils.ts +82 -82
- package/src/middleware/auth-providers.middleware.test.ts +85 -0
- package/src/middleware/auth-providers.middleware.ts +45 -45
- package/src/middleware/observability.middleware.test.ts +93 -0
- package/src/middleware/observability.middleware.ts +70 -70
- package/src/middleware/rate-limit.middleware.ts +45 -45
- package/src/middleware/repository.middleware.ts +117 -114
- package/src/middleware/seed-registry.middleware.test.ts +97 -97
- package/src/middleware/seed-registry.middleware.ts +21 -21
- package/src/middleware/storage.middleware.ts +25 -25
- package/src/middleware.ts +45 -45
- package/src/public/access-policy.ts +27 -27
- package/src/public/api-key-middleware.ts +57 -57
- package/src/public/cache-utils.ts +38 -38
- package/src/public/entry-projection.ts +46 -46
- package/src/public/idempotency.ts +23 -23
- package/src/public/index.ts +16 -16
- package/src/public/problem-details.ts +124 -124
- package/src/public/public-add.ts +114 -114
- package/src/public/public-edit.ts +163 -163
- package/src/public/public-errors.ts +19 -19
- package/src/public/public-read.ts +63 -63
- package/src/public/public-routes.ts +88 -88
- package/src/public/query-builder.test.ts +224 -224
- package/src/public/query-builder.ts +156 -156
- package/src/public/rate-limit-middleware.ts +34 -34
- package/src/public/read-list.ts +54 -54
- package/src/public/read-single.ts +48 -48
- package/src/public/response-builder.ts +30 -30
- package/src/public/sanitize.ts +69 -69
- package/src/public/slug-utils.ts +18 -18
- package/src/rate-limit/cloudflare-rate-limiter.test.ts +30 -30
- package/src/rate-limit/cloudflare-rate-limiter.ts +15 -15
- package/src/rate-limit/in-memory-rate-limiter.test.ts +37 -37
- package/src/rate-limit/in-memory-rate-limiter.ts +17 -17
- package/src/rate-limit/no-op-rate-limiter.test.ts +22 -22
- package/src/rate-limit/no-op-rate-limiter.ts +11 -11
- package/src/search-utils.test.ts +211 -211
- package/src/search-utils.ts +213 -213
- package/src/search.ts +65 -65
- package/src/shared/apply-policies.test.ts +81 -81
- package/src/shared/apply-policies.ts +67 -67
- package/src/shared/automations.repository.d1.ts +150 -150
- package/src/shared/background-notification-service.test.ts +62 -62
- package/src/shared/background-notification-service.ts +52 -52
- package/src/shared/base.repository.d1.ts +32 -32
- package/src/shared/content-utils.test.ts +165 -165
- package/src/shared/content-utils.ts +86 -86
- package/src/shared/content.repository.d1.test.ts +507 -458
- package/src/shared/content.repository.d1.ts +851 -851
- package/src/shared/d1-activity-log.repository.test.ts +140 -140
- package/src/shared/d1-activity-log.repository.ts +105 -105
- package/src/shared/d1-activity-logger.test.ts +86 -86
- package/src/shared/d1-activity-logger.ts +67 -67
- package/src/shared/d1-analytics.repository.test.ts +78 -78
- package/src/shared/d1-analytics.repository.ts +85 -85
- package/src/shared/d1-content-scan.repository.test.ts +80 -80
- package/src/shared/d1-content-scan.repository.ts +37 -37
- package/src/shared/d1-notification.repository.test.ts +128 -128
- package/src/shared/d1-notification.repository.ts +118 -118
- package/src/shared/d1-password-reset-token.repository.test.ts +81 -81
- package/src/shared/d1-password-reset-token.repository.ts +56 -56
- package/src/shared/d1-search.repository.test.ts +87 -87
- package/src/shared/d1-search.repository.ts +88 -88
- package/src/shared/d1-session.repository.test.ts +125 -125
- package/src/shared/d1-session.repository.ts +102 -102
- package/src/shared/d1-setup-checklist.repository.ts +36 -36
- package/src/shared/d1-user.repository.test.ts +151 -151
- package/src/shared/d1-user.repository.ts +119 -119
- package/src/shared/d1-widget.repository.test.ts +267 -221
- package/src/shared/d1-widget.repository.ts +385 -341
- package/src/shared/dashboard-layout.repository.d1.test.ts +135 -0
- package/src/shared/dashboard-layout.repository.d1.ts +58 -0
- package/src/shared/demo-data-sql.ts +216 -54
- package/src/shared/demo-data.repository.d1.ts +20 -20
- package/src/shared/execution-context-scheduler.ts +13 -13
- package/src/shared/fixed-clock.ts +25 -25
- package/src/shared/fts-sync.ts +8 -8
- package/src/shared/idempotency.repository.d1.test.ts +83 -83
- package/src/shared/idempotency.repository.d1.ts +60 -60
- package/src/shared/in-memory-activity-logger.ts +19 -19
- package/src/shared/in-memory-notification-service.ts +19 -19
- package/src/shared/in-memory-seed.repository.ts +58 -51
- package/src/shared/media.repository.d1.test.ts +107 -107
- package/src/shared/media.repository.d1.ts +68 -68
- package/src/shared/qstash-notification-service.test.ts +67 -67
- package/src/shared/qstash-notification-service.ts +55 -55
- package/src/shared/query-utils.ts +141 -141
- package/src/shared/request-utils.ts +26 -26
- package/src/shared/schema-mutator.d1.test.ts +142 -0
- package/src/shared/schema-mutator.d1.ts +64 -64
- package/src/shared/seed-layout.repository.d1.test.ts +114 -114
- package/src/shared/seed-layout.repository.d1.ts +62 -62
- package/src/shared/seed-registry-cache.test.ts +68 -68
- package/src/shared/seed-registry-cache.ts +49 -49
- package/src/shared/seed.repository.d1.test.ts +143 -143
- package/src/shared/seed.repository.d1.ts +98 -98
- package/src/shared/sequential-id-generator.ts +33 -33
- package/src/shared/site-settings.repository.d1.ts +53 -53
- package/src/shared/storage/factory.ts +41 -41
- package/src/shared/storage/s3-bucket.ts +195 -195
- package/src/shared/storage-utils.ts +40 -40
- package/src/shared/system-stats.repository.d1.test.ts +58 -58
- package/src/shared/system-stats.repository.d1.ts +48 -48
- package/src/types.ts +90 -87
- package/src/upload.ts +198 -198
- package/src/widget.test.ts +85 -0
- package/src/widget.ts +251 -212
- package/assets/dashboard/assets/index-BSjk0Sx9.js +0 -634
- package/assets/dashboard/assets/index-kRCYVN2B.css +0 -1
|
@@ -1,151 +1,151 @@
|
|
|
1
|
-
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
-
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
-
// See LICENSE in the repository root for license terms.
|
|
4
|
-
|
|
5
|
-
import { describe, it, expect, vi } from 'vitest'
|
|
6
|
-
import { D1UserRepository } from './d1-user.repository'
|
|
7
|
-
|
|
8
|
-
const USER_ROW = {
|
|
9
|
-
id: 'u1',
|
|
10
|
-
email: 'test@test.com',
|
|
11
|
-
name: 'Test User',
|
|
12
|
-
password_hash: 'hash-abc',
|
|
13
|
-
role: 'admin',
|
|
14
|
-
avatar_url: null,
|
|
15
|
-
notification_prefs: '{}',
|
|
16
|
-
}
|
|
17
|
-
|
|
18
|
-
function makeMockDb(opts: {
|
|
19
|
-
firstResult?: unknown
|
|
20
|
-
runChanges?: number
|
|
21
|
-
allResults?: unknown[]
|
|
22
|
-
} = {}) {
|
|
23
|
-
const { firstResult = null, runChanges = 1, allResults = [] } = opts
|
|
24
|
-
const runMock = vi.fn().mockResolvedValue({ success: true, meta: { changes: runChanges } })
|
|
25
|
-
const firstMock = vi.fn().mockResolvedValue(firstResult)
|
|
26
|
-
const allMock = vi.fn().mockResolvedValue({ results: allResults })
|
|
27
|
-
const bindMock = vi.fn(() => ({ first: firstMock, all: allMock, run: runMock }))
|
|
28
|
-
// prepare() may be called without bind() for countAll (which calls .first() directly)
|
|
29
|
-
const prepareMock = vi.fn(() => ({ bind: bindMock, first: firstMock, run: runMock }))
|
|
30
|
-
return { db: { prepare: prepareMock } as any, prepareMock, bindMock, runMock, firstMock }
|
|
31
|
-
}
|
|
32
|
-
|
|
33
|
-
describe('D1UserRepository', () => {
|
|
34
|
-
describe('countAll', () => {
|
|
35
|
-
it('returns the count value from the database', async () => {
|
|
36
|
-
const { db, firstMock } = makeMockDb()
|
|
37
|
-
firstMock.mockResolvedValue({ count: 5 })
|
|
38
|
-
expect(await new D1UserRepository(db).countAll()).toBe(5)
|
|
39
|
-
})
|
|
40
|
-
|
|
41
|
-
it('returns 0 when the query returns null', async () => {
|
|
42
|
-
const { db } = makeMockDb({ firstResult: null })
|
|
43
|
-
expect(await new D1UserRepository(db).countAll()).toBe(0)
|
|
44
|
-
})
|
|
45
|
-
})
|
|
46
|
-
|
|
47
|
-
describe('findByEmail', () => {
|
|
48
|
-
it('returns a UserRecord with camelCase keys mapped from the snake_case row', async () => {
|
|
49
|
-
const { db } = makeMockDb({ firstResult: USER_ROW })
|
|
50
|
-
const result = await new D1UserRepository(db).findByEmail('test@test.com')
|
|
51
|
-
expect(result).toEqual({
|
|
52
|
-
id: 'u1',
|
|
53
|
-
email: 'test@test.com',
|
|
54
|
-
name: 'Test User',
|
|
55
|
-
passwordHash: 'hash-abc',
|
|
56
|
-
role: 'admin',
|
|
57
|
-
avatarUrl: null,
|
|
58
|
-
notificationPreferences: '{}',
|
|
59
|
-
})
|
|
60
|
-
})
|
|
61
|
-
|
|
62
|
-
it('returns null when no user is found', async () => {
|
|
63
|
-
const { db } = makeMockDb({ firstResult: null })
|
|
64
|
-
expect(await new D1UserRepository(db).findByEmail('nobody@test.com')).toBeNull()
|
|
65
|
-
})
|
|
66
|
-
})
|
|
67
|
-
|
|
68
|
-
describe('findById', () => {
|
|
69
|
-
it('returns a mapped UserRecord when found', async () => {
|
|
70
|
-
const { db } = makeMockDb({ firstResult: USER_ROW })
|
|
71
|
-
const result = await new D1UserRepository(db).findById('u1')
|
|
72
|
-
expect(result?.id).toBe('u1')
|
|
73
|
-
expect(result?.passwordHash).toBe('hash-abc')
|
|
74
|
-
})
|
|
75
|
-
|
|
76
|
-
it('returns null when the user is not found', async () => {
|
|
77
|
-
const { db } = makeMockDb({ firstResult: null })
|
|
78
|
-
expect(await new D1UserRepository(db).findById('unknown')).toBeNull()
|
|
79
|
-
})
|
|
80
|
-
})
|
|
81
|
-
|
|
82
|
-
describe('create', () => {
|
|
83
|
-
it('calls prepare with an INSERT INTO users statement', async () => {
|
|
84
|
-
const { db, prepareMock } = makeMockDb()
|
|
85
|
-
await new D1UserRepository(db).create({
|
|
86
|
-
id: 'u1', email: 'a@b.com', passwordHash: 'hash', role: 'admin', name: 'Test', surname: null,
|
|
87
|
-
})
|
|
88
|
-
expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('INSERT INTO users'))
|
|
89
|
-
})
|
|
90
|
-
|
|
91
|
-
it('binds id, email, passwordHash, role, name, surname in the correct order', async () => {
|
|
92
|
-
const { db, bindMock } = makeMockDb()
|
|
93
|
-
await new D1UserRepository(db).create({
|
|
94
|
-
id: 'u1', email: 'a@b.com', passwordHash: 'hash', role: 'admin', name: 'Test', surname: null,
|
|
95
|
-
})
|
|
96
|
-
expect(bindMock).toHaveBeenCalledWith('u1', 'a@b.com', 'hash', 'admin', 'Test', null)
|
|
97
|
-
})
|
|
98
|
-
})
|
|
99
|
-
|
|
100
|
-
describe('updateProfile', () => {
|
|
101
|
-
it('does nothing when no fields are provided', async () => {
|
|
102
|
-
const { db, prepareMock } = makeMockDb()
|
|
103
|
-
await new D1UserRepository(db).updateProfile('u1', {})
|
|
104
|
-
expect(prepareMock).not.toHaveBeenCalled()
|
|
105
|
-
})
|
|
106
|
-
|
|
107
|
-
it('generates a SET clause containing only the provided field', async () => {
|
|
108
|
-
const { db, prepareMock } = makeMockDb()
|
|
109
|
-
await new D1UserRepository(db).updateProfile('u1', { name: 'New Name' })
|
|
110
|
-
const sql: string = prepareMock.mock.calls[0][0]
|
|
111
|
-
expect(sql).toContain('name = ?')
|
|
112
|
-
expect(sql).not.toContain('email = ?')
|
|
113
|
-
})
|
|
114
|
-
|
|
115
|
-
it('includes both fields when both name and email are provided', async () => {
|
|
116
|
-
const { db, prepareMock } = makeMockDb()
|
|
117
|
-
await new D1UserRepository(db).updateProfile('u1', { name: 'N', email: 'e@e.com' })
|
|
118
|
-
const sql: string = prepareMock.mock.calls[0][0]
|
|
119
|
-
expect(sql).toContain('name = ?')
|
|
120
|
-
expect(sql).toContain('email = ?')
|
|
121
|
-
})
|
|
122
|
-
})
|
|
123
|
-
|
|
124
|
-
describe('updatePasswordHash', () => {
|
|
125
|
-
it('calls UPDATE users SET password_hash', async () => {
|
|
126
|
-
const { db, prepareMock } = makeMockDb()
|
|
127
|
-
await new D1UserRepository(db).updatePasswordHash('u1', 'new-hash')
|
|
128
|
-
expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('password_hash'))
|
|
129
|
-
})
|
|
130
|
-
})
|
|
131
|
-
|
|
132
|
-
describe('updateAvatarUrl', () => {
|
|
133
|
-
it('calls UPDATE users SET avatar_url', async () => {
|
|
134
|
-
const { db, prepareMock } = makeMockDb()
|
|
135
|
-
await new D1UserRepository(db).updateAvatarUrl('u1', 'https://cdn.example.com/avatar.jpg')
|
|
136
|
-
expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('avatar_url'))
|
|
137
|
-
})
|
|
138
|
-
})
|
|
139
|
-
|
|
140
|
-
describe('emailBelongsToAnotherUser', () => {
|
|
141
|
-
it('returns true when another user row is found with that email', async () => {
|
|
142
|
-
const { db } = makeMockDb({ firstResult: { id: 'other-user' } })
|
|
143
|
-
expect(await new D1UserRepository(db).emailBelongsToAnotherUser('taken@test.com', 'current')).toBe(true)
|
|
144
|
-
})
|
|
145
|
-
|
|
146
|
-
it('returns false when no other user owns the email', async () => {
|
|
147
|
-
const { db } = makeMockDb({ firstResult: null })
|
|
148
|
-
expect(await new D1UserRepository(db).emailBelongsToAnotherUser('free@test.com', 'current')).toBe(false)
|
|
149
|
-
})
|
|
150
|
-
})
|
|
151
|
-
})
|
|
1
|
+
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
+
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
+
// See LICENSE in the repository root for license terms.
|
|
4
|
+
|
|
5
|
+
import { describe, it, expect, vi } from 'vitest'
|
|
6
|
+
import { D1UserRepository } from './d1-user.repository'
|
|
7
|
+
|
|
8
|
+
const USER_ROW = {
|
|
9
|
+
id: 'u1',
|
|
10
|
+
email: 'test@test.com',
|
|
11
|
+
name: 'Test User',
|
|
12
|
+
password_hash: 'hash-abc',
|
|
13
|
+
role: 'admin',
|
|
14
|
+
avatar_url: null,
|
|
15
|
+
notification_prefs: '{}',
|
|
16
|
+
}
|
|
17
|
+
|
|
18
|
+
function makeMockDb(opts: {
|
|
19
|
+
firstResult?: unknown
|
|
20
|
+
runChanges?: number
|
|
21
|
+
allResults?: unknown[]
|
|
22
|
+
} = {}) {
|
|
23
|
+
const { firstResult = null, runChanges = 1, allResults = [] } = opts
|
|
24
|
+
const runMock = vi.fn().mockResolvedValue({ success: true, meta: { changes: runChanges } })
|
|
25
|
+
const firstMock = vi.fn().mockResolvedValue(firstResult)
|
|
26
|
+
const allMock = vi.fn().mockResolvedValue({ results: allResults })
|
|
27
|
+
const bindMock = vi.fn(() => ({ first: firstMock, all: allMock, run: runMock }))
|
|
28
|
+
// prepare() may be called without bind() for countAll (which calls .first() directly)
|
|
29
|
+
const prepareMock = vi.fn(() => ({ bind: bindMock, first: firstMock, run: runMock }))
|
|
30
|
+
return { db: { prepare: prepareMock } as any, prepareMock, bindMock, runMock, firstMock }
|
|
31
|
+
}
|
|
32
|
+
|
|
33
|
+
describe('D1UserRepository', () => {
|
|
34
|
+
describe('countAll', () => {
|
|
35
|
+
it('returns the count value from the database', async () => {
|
|
36
|
+
const { db, firstMock } = makeMockDb()
|
|
37
|
+
firstMock.mockResolvedValue({ count: 5 })
|
|
38
|
+
expect(await new D1UserRepository(db).countAll()).toBe(5)
|
|
39
|
+
})
|
|
40
|
+
|
|
41
|
+
it('returns 0 when the query returns null', async () => {
|
|
42
|
+
const { db } = makeMockDb({ firstResult: null })
|
|
43
|
+
expect(await new D1UserRepository(db).countAll()).toBe(0)
|
|
44
|
+
})
|
|
45
|
+
})
|
|
46
|
+
|
|
47
|
+
describe('findByEmail', () => {
|
|
48
|
+
it('returns a UserRecord with camelCase keys mapped from the snake_case row', async () => {
|
|
49
|
+
const { db } = makeMockDb({ firstResult: USER_ROW })
|
|
50
|
+
const result = await new D1UserRepository(db).findByEmail('test@test.com')
|
|
51
|
+
expect(result).toEqual({
|
|
52
|
+
id: 'u1',
|
|
53
|
+
email: 'test@test.com',
|
|
54
|
+
name: 'Test User',
|
|
55
|
+
passwordHash: 'hash-abc',
|
|
56
|
+
role: 'admin',
|
|
57
|
+
avatarUrl: null,
|
|
58
|
+
notificationPreferences: '{}',
|
|
59
|
+
})
|
|
60
|
+
})
|
|
61
|
+
|
|
62
|
+
it('returns null when no user is found', async () => {
|
|
63
|
+
const { db } = makeMockDb({ firstResult: null })
|
|
64
|
+
expect(await new D1UserRepository(db).findByEmail('nobody@test.com')).toBeNull()
|
|
65
|
+
})
|
|
66
|
+
})
|
|
67
|
+
|
|
68
|
+
describe('findById', () => {
|
|
69
|
+
it('returns a mapped UserRecord when found', async () => {
|
|
70
|
+
const { db } = makeMockDb({ firstResult: USER_ROW })
|
|
71
|
+
const result = await new D1UserRepository(db).findById('u1')
|
|
72
|
+
expect(result?.id).toBe('u1')
|
|
73
|
+
expect(result?.passwordHash).toBe('hash-abc')
|
|
74
|
+
})
|
|
75
|
+
|
|
76
|
+
it('returns null when the user is not found', async () => {
|
|
77
|
+
const { db } = makeMockDb({ firstResult: null })
|
|
78
|
+
expect(await new D1UserRepository(db).findById('unknown')).toBeNull()
|
|
79
|
+
})
|
|
80
|
+
})
|
|
81
|
+
|
|
82
|
+
describe('create', () => {
|
|
83
|
+
it('calls prepare with an INSERT INTO users statement', async () => {
|
|
84
|
+
const { db, prepareMock } = makeMockDb()
|
|
85
|
+
await new D1UserRepository(db).create({
|
|
86
|
+
id: 'u1', email: 'a@b.com', passwordHash: 'hash', role: 'admin', name: 'Test', surname: null,
|
|
87
|
+
})
|
|
88
|
+
expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('INSERT INTO users'))
|
|
89
|
+
})
|
|
90
|
+
|
|
91
|
+
it('binds id, email, passwordHash, role, name, surname in the correct order', async () => {
|
|
92
|
+
const { db, bindMock } = makeMockDb()
|
|
93
|
+
await new D1UserRepository(db).create({
|
|
94
|
+
id: 'u1', email: 'a@b.com', passwordHash: 'hash', role: 'admin', name: 'Test', surname: null,
|
|
95
|
+
})
|
|
96
|
+
expect(bindMock).toHaveBeenCalledWith('u1', 'a@b.com', 'hash', 'admin', 'Test', null)
|
|
97
|
+
})
|
|
98
|
+
})
|
|
99
|
+
|
|
100
|
+
describe('updateProfile', () => {
|
|
101
|
+
it('does nothing when no fields are provided', async () => {
|
|
102
|
+
const { db, prepareMock } = makeMockDb()
|
|
103
|
+
await new D1UserRepository(db).updateProfile('u1', {})
|
|
104
|
+
expect(prepareMock).not.toHaveBeenCalled()
|
|
105
|
+
})
|
|
106
|
+
|
|
107
|
+
it('generates a SET clause containing only the provided field', async () => {
|
|
108
|
+
const { db, prepareMock } = makeMockDb()
|
|
109
|
+
await new D1UserRepository(db).updateProfile('u1', { name: 'New Name' })
|
|
110
|
+
const sql: string = prepareMock.mock.calls[0][0]
|
|
111
|
+
expect(sql).toContain('name = ?')
|
|
112
|
+
expect(sql).not.toContain('email = ?')
|
|
113
|
+
})
|
|
114
|
+
|
|
115
|
+
it('includes both fields when both name and email are provided', async () => {
|
|
116
|
+
const { db, prepareMock } = makeMockDb()
|
|
117
|
+
await new D1UserRepository(db).updateProfile('u1', { name: 'N', email: 'e@e.com' })
|
|
118
|
+
const sql: string = prepareMock.mock.calls[0][0]
|
|
119
|
+
expect(sql).toContain('name = ?')
|
|
120
|
+
expect(sql).toContain('email = ?')
|
|
121
|
+
})
|
|
122
|
+
})
|
|
123
|
+
|
|
124
|
+
describe('updatePasswordHash', () => {
|
|
125
|
+
it('calls UPDATE users SET password_hash', async () => {
|
|
126
|
+
const { db, prepareMock } = makeMockDb()
|
|
127
|
+
await new D1UserRepository(db).updatePasswordHash('u1', 'new-hash')
|
|
128
|
+
expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('password_hash'))
|
|
129
|
+
})
|
|
130
|
+
})
|
|
131
|
+
|
|
132
|
+
describe('updateAvatarUrl', () => {
|
|
133
|
+
it('calls UPDATE users SET avatar_url', async () => {
|
|
134
|
+
const { db, prepareMock } = makeMockDb()
|
|
135
|
+
await new D1UserRepository(db).updateAvatarUrl('u1', 'https://cdn.example.com/avatar.jpg')
|
|
136
|
+
expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('avatar_url'))
|
|
137
|
+
})
|
|
138
|
+
})
|
|
139
|
+
|
|
140
|
+
describe('emailBelongsToAnotherUser', () => {
|
|
141
|
+
it('returns true when another user row is found with that email', async () => {
|
|
142
|
+
const { db } = makeMockDb({ firstResult: { id: 'other-user' } })
|
|
143
|
+
expect(await new D1UserRepository(db).emailBelongsToAnotherUser('taken@test.com', 'current')).toBe(true)
|
|
144
|
+
})
|
|
145
|
+
|
|
146
|
+
it('returns false when no other user owns the email', async () => {
|
|
147
|
+
const { db } = makeMockDb({ firstResult: null })
|
|
148
|
+
expect(await new D1UserRepository(db).emailBelongsToAnotherUser('free@test.com', 'current')).toBe(false)
|
|
149
|
+
})
|
|
150
|
+
})
|
|
151
|
+
})
|
|
@@ -1,119 +1,119 @@
|
|
|
1
|
-
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
-
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
-
// See LICENSE in the repository root for license terms.
|
|
4
|
-
|
|
5
|
-
/// <reference types="@cloudflare/workers-types" />
|
|
6
|
-
import type { IUserRepository, UserRecord, NewUserInput } from '@beechcms/core'
|
|
7
|
-
|
|
8
|
-
type UserRow = {
|
|
9
|
-
id: string
|
|
10
|
-
email: string
|
|
11
|
-
name: string | null
|
|
12
|
-
surname: string | null
|
|
13
|
-
password_hash: string
|
|
14
|
-
role: string
|
|
15
|
-
avatar_url: string | null
|
|
16
|
-
notification_prefs: string
|
|
17
|
-
}
|
|
18
|
-
|
|
19
|
-
function rowToRecord(row: UserRow): UserRecord {
|
|
20
|
-
return {
|
|
21
|
-
id: row.id,
|
|
22
|
-
email: row.email,
|
|
23
|
-
name: row.name,
|
|
24
|
-
surname: row.surname,
|
|
25
|
-
passwordHash: row.password_hash,
|
|
26
|
-
role: row.role,
|
|
27
|
-
avatarUrl: row.avatar_url,
|
|
28
|
-
notificationPreferences: row.notification_prefs,
|
|
29
|
-
}
|
|
30
|
-
}
|
|
31
|
-
|
|
32
|
-
export class D1UserRepository implements IUserRepository {
|
|
33
|
-
constructor(private readonly db: D1Database) {}
|
|
34
|
-
|
|
35
|
-
async countAll(): Promise<number> {
|
|
36
|
-
const result = await this.db
|
|
37
|
-
.prepare('SELECT COUNT(*) as count FROM users')
|
|
38
|
-
.first<{ count: number }>()
|
|
39
|
-
return result?.count ?? 0
|
|
40
|
-
}
|
|
41
|
-
|
|
42
|
-
async findById(userId: string): Promise<UserRecord | null> {
|
|
43
|
-
const row = await this.db
|
|
44
|
-
.prepare('SELECT id, email, name, surname, password_hash, role, avatar_url, notification_prefs FROM users WHERE id = ? LIMIT 1')
|
|
45
|
-
.bind(userId)
|
|
46
|
-
.first<UserRow>()
|
|
47
|
-
return row ? rowToRecord(row) : null
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
async findByEmail(email: string): Promise<UserRecord | null> {
|
|
51
|
-
const row = await this.db
|
|
52
|
-
.prepare('SELECT id, email, name, surname, password_hash, role, avatar_url, notification_prefs FROM users WHERE email = ? LIMIT 1')
|
|
53
|
-
.bind(email)
|
|
54
|
-
.first<UserRow>()
|
|
55
|
-
return row ? rowToRecord(row) : null
|
|
56
|
-
}
|
|
57
|
-
|
|
58
|
-
async create(user: NewUserInput): Promise<void> {
|
|
59
|
-
await this.db
|
|
60
|
-
.prepare('INSERT INTO users (id, email, password_hash, role, name, surname) VALUES (?, ?, ?, ?, ?, ?)')
|
|
61
|
-
.bind(user.id, user.email, user.passwordHash, user.role, user.name, user.surname)
|
|
62
|
-
.run()
|
|
63
|
-
}
|
|
64
|
-
|
|
65
|
-
async updateProfile(userId: string, fields: { name?: string; surname?: string; email?: string }): Promise<void> {
|
|
66
|
-
const columnAssignments: string[] = []
|
|
67
|
-
const boundValues: unknown[] = []
|
|
68
|
-
|
|
69
|
-
if (fields.name !== undefined) {
|
|
70
|
-
columnAssignments.push('name = ?')
|
|
71
|
-
boundValues.push(fields.name)
|
|
72
|
-
}
|
|
73
|
-
if (fields.surname !== undefined) {
|
|
74
|
-
columnAssignments.push('surname = ?')
|
|
75
|
-
boundValues.push(fields.surname)
|
|
76
|
-
}
|
|
77
|
-
if (fields.email !== undefined) {
|
|
78
|
-
columnAssignments.push('email = ?')
|
|
79
|
-
boundValues.push(fields.email)
|
|
80
|
-
}
|
|
81
|
-
|
|
82
|
-
if (columnAssignments.length === 0) return
|
|
83
|
-
|
|
84
|
-
boundValues.push(userId)
|
|
85
|
-
await this.db
|
|
86
|
-
.prepare(`UPDATE users SET ${columnAssignments.join(', ')} WHERE id = ?`)
|
|
87
|
-
.bind(...boundValues)
|
|
88
|
-
.run()
|
|
89
|
-
}
|
|
90
|
-
|
|
91
|
-
async updatePasswordHash(userId: string, newPasswordHash: string): Promise<void> {
|
|
92
|
-
await this.db
|
|
93
|
-
.prepare('UPDATE users SET password_hash = ? WHERE id = ?')
|
|
94
|
-
.bind(newPasswordHash, userId)
|
|
95
|
-
.run()
|
|
96
|
-
}
|
|
97
|
-
|
|
98
|
-
async updateAvatarUrl(userId: string, avatarUrl: string | null): Promise<void> {
|
|
99
|
-
await this.db
|
|
100
|
-
.prepare('UPDATE users SET avatar_url = ? WHERE id = ?')
|
|
101
|
-
.bind(avatarUrl, userId)
|
|
102
|
-
.run()
|
|
103
|
-
}
|
|
104
|
-
|
|
105
|
-
async updateNotificationPreferences(userId: string, preferencesJson: string): Promise<void> {
|
|
106
|
-
await this.db
|
|
107
|
-
.prepare('UPDATE users SET notification_prefs = ? WHERE id = ?')
|
|
108
|
-
.bind(preferencesJson, userId)
|
|
109
|
-
.run()
|
|
110
|
-
}
|
|
111
|
-
|
|
112
|
-
async emailBelongsToAnotherUser(email: string, currentUserId: string): Promise<boolean> {
|
|
113
|
-
const row = await this.db
|
|
114
|
-
.prepare('SELECT id FROM users WHERE email = ? AND id != ? LIMIT 1')
|
|
115
|
-
.bind(email, currentUserId)
|
|
116
|
-
.first()
|
|
117
|
-
return row !== null
|
|
118
|
-
}
|
|
119
|
-
}
|
|
1
|
+
// SPDX-License-Identifier: BUSL-1.1
|
|
2
|
+
// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
|
|
3
|
+
// See LICENSE in the repository root for license terms.
|
|
4
|
+
|
|
5
|
+
/// <reference types="@cloudflare/workers-types" />
|
|
6
|
+
import type { IUserRepository, UserRecord, NewUserInput } from '@beechcms/core'
|
|
7
|
+
|
|
8
|
+
type UserRow = {
|
|
9
|
+
id: string
|
|
10
|
+
email: string
|
|
11
|
+
name: string | null
|
|
12
|
+
surname: string | null
|
|
13
|
+
password_hash: string
|
|
14
|
+
role: string
|
|
15
|
+
avatar_url: string | null
|
|
16
|
+
notification_prefs: string
|
|
17
|
+
}
|
|
18
|
+
|
|
19
|
+
function rowToRecord(row: UserRow): UserRecord {
|
|
20
|
+
return {
|
|
21
|
+
id: row.id,
|
|
22
|
+
email: row.email,
|
|
23
|
+
name: row.name,
|
|
24
|
+
surname: row.surname,
|
|
25
|
+
passwordHash: row.password_hash,
|
|
26
|
+
role: row.role,
|
|
27
|
+
avatarUrl: row.avatar_url,
|
|
28
|
+
notificationPreferences: row.notification_prefs,
|
|
29
|
+
}
|
|
30
|
+
}
|
|
31
|
+
|
|
32
|
+
export class D1UserRepository implements IUserRepository {
|
|
33
|
+
constructor(private readonly db: D1Database) {}
|
|
34
|
+
|
|
35
|
+
async countAll(): Promise<number> {
|
|
36
|
+
const result = await this.db
|
|
37
|
+
.prepare('SELECT COUNT(*) as count FROM users')
|
|
38
|
+
.first<{ count: number }>()
|
|
39
|
+
return result?.count ?? 0
|
|
40
|
+
}
|
|
41
|
+
|
|
42
|
+
async findById(userId: string): Promise<UserRecord | null> {
|
|
43
|
+
const row = await this.db
|
|
44
|
+
.prepare('SELECT id, email, name, surname, password_hash, role, avatar_url, notification_prefs FROM users WHERE id = ? LIMIT 1')
|
|
45
|
+
.bind(userId)
|
|
46
|
+
.first<UserRow>()
|
|
47
|
+
return row ? rowToRecord(row) : null
|
|
48
|
+
}
|
|
49
|
+
|
|
50
|
+
async findByEmail(email: string): Promise<UserRecord | null> {
|
|
51
|
+
const row = await this.db
|
|
52
|
+
.prepare('SELECT id, email, name, surname, password_hash, role, avatar_url, notification_prefs FROM users WHERE email = ? LIMIT 1')
|
|
53
|
+
.bind(email)
|
|
54
|
+
.first<UserRow>()
|
|
55
|
+
return row ? rowToRecord(row) : null
|
|
56
|
+
}
|
|
57
|
+
|
|
58
|
+
async create(user: NewUserInput): Promise<void> {
|
|
59
|
+
await this.db
|
|
60
|
+
.prepare('INSERT INTO users (id, email, password_hash, role, name, surname) VALUES (?, ?, ?, ?, ?, ?)')
|
|
61
|
+
.bind(user.id, user.email, user.passwordHash, user.role, user.name, user.surname)
|
|
62
|
+
.run()
|
|
63
|
+
}
|
|
64
|
+
|
|
65
|
+
async updateProfile(userId: string, fields: { name?: string; surname?: string; email?: string }): Promise<void> {
|
|
66
|
+
const columnAssignments: string[] = []
|
|
67
|
+
const boundValues: unknown[] = []
|
|
68
|
+
|
|
69
|
+
if (fields.name !== undefined) {
|
|
70
|
+
columnAssignments.push('name = ?')
|
|
71
|
+
boundValues.push(fields.name)
|
|
72
|
+
}
|
|
73
|
+
if (fields.surname !== undefined) {
|
|
74
|
+
columnAssignments.push('surname = ?')
|
|
75
|
+
boundValues.push(fields.surname)
|
|
76
|
+
}
|
|
77
|
+
if (fields.email !== undefined) {
|
|
78
|
+
columnAssignments.push('email = ?')
|
|
79
|
+
boundValues.push(fields.email)
|
|
80
|
+
}
|
|
81
|
+
|
|
82
|
+
if (columnAssignments.length === 0) return
|
|
83
|
+
|
|
84
|
+
boundValues.push(userId)
|
|
85
|
+
await this.db
|
|
86
|
+
.prepare(`UPDATE users SET ${columnAssignments.join(', ')} WHERE id = ?`)
|
|
87
|
+
.bind(...boundValues)
|
|
88
|
+
.run()
|
|
89
|
+
}
|
|
90
|
+
|
|
91
|
+
async updatePasswordHash(userId: string, newPasswordHash: string): Promise<void> {
|
|
92
|
+
await this.db
|
|
93
|
+
.prepare('UPDATE users SET password_hash = ? WHERE id = ?')
|
|
94
|
+
.bind(newPasswordHash, userId)
|
|
95
|
+
.run()
|
|
96
|
+
}
|
|
97
|
+
|
|
98
|
+
async updateAvatarUrl(userId: string, avatarUrl: string | null): Promise<void> {
|
|
99
|
+
await this.db
|
|
100
|
+
.prepare('UPDATE users SET avatar_url = ? WHERE id = ?')
|
|
101
|
+
.bind(avatarUrl, userId)
|
|
102
|
+
.run()
|
|
103
|
+
}
|
|
104
|
+
|
|
105
|
+
async updateNotificationPreferences(userId: string, preferencesJson: string): Promise<void> {
|
|
106
|
+
await this.db
|
|
107
|
+
.prepare('UPDATE users SET notification_prefs = ? WHERE id = ?')
|
|
108
|
+
.bind(preferencesJson, userId)
|
|
109
|
+
.run()
|
|
110
|
+
}
|
|
111
|
+
|
|
112
|
+
async emailBelongsToAnotherUser(email: string, currentUserId: string): Promise<boolean> {
|
|
113
|
+
const row = await this.db
|
|
114
|
+
.prepare('SELECT id FROM users WHERE email = ? AND id != ? LIMIT 1')
|
|
115
|
+
.bind(email, currentUserId)
|
|
116
|
+
.first()
|
|
117
|
+
return row !== null
|
|
118
|
+
}
|
|
119
|
+
}
|