@beezping/adapter-prisma 0.7.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 NeosiaNexus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,48 @@
+[![npm version](https://img.shields.io/npm/v/@beezping/adapter-prisma)](https://www.npmjs.com/package/@beezping/adapter-prisma)
+[![Docs](https://img.shields.io/badge/docs-siteping.dev-0066ff)](https://siteping.dev/docs/adapters/prisma)
+[![TypeScript](https://img.shields.io/badge/TypeScript-strict-blue)](https://www.typescriptlang.org/)
+
+# @beezping/adapter-prisma
+
+The production server adapter for [SitePing](https://github.com/NeosiaNexus/SitePing) — one endpoint that validates, authenticates, and persists client feedback in your database.
+
+**[Documentation](https://siteping.dev/docs/adapters/prisma)** · **[live demo](https://siteping.dev/demo)**
+
+## Install
+
+```bash
+npm install @beezping/adapter-prisma
+```
+
+**Peer dependency:** `@prisma/client` ^5 || ^6 || ^7 · Node ≥ 20.
+
+## Quick start
+
+```ts
+// app/api/siteping/route.ts — Next.js App Router
+import { createSitepingHandler } from "@beezping/adapter-prisma";
+import { prisma } from "@/lib/prisma";
+
+export const { GET, POST, PATCH, DELETE, OPTIONS } = createSitepingHandler({
+  prisma,
+  apiKey: process.env.SITEPING_API_KEY,        // Bearer auth
+  allowedOrigins: ["https://my-site.com"],     // exact-match CORS
+});
+```
+
+The handlers are Web-standard `Request` → `Response` — mount them from any framework (Remix, SvelteKit, Hono, …). Generate the required Prisma models with `npx @beezping/cli sync`.
+
+## Highlights
+
+- **Safe by default** — status changes and deletes require the `apiKey`; in production the factory refuses to start without one. Author emails are redacted for unauthenticated readers and `clientId` never leaves the server
+- **Screenshot storage hook** — upload images to S3/R2/GCS instead of inlining data URLs
+- **Webhooks** — Slack, Discord, or generic POST on each new feedback (5 s timeout, never blocks the submission)
+- **Any store behind the same HTTP surface** — pass `store` instead of `prisma` to mount an in-memory or custom store with identical validation and auth
+
+## Documentation
+
+All options with their real defaults, the full HTTP reference (bodies, query params, errors, validation limits), the exact Prisma schema, and the security model: **[siteping.dev/docs/adapters/prisma](https://siteping.dev/docs/adapters/prisma)**.
+
+## License
+
+[MIT](https://github.com/NeosiaNexus/SitePing/blob/main/LICENSE)

package/dist/email.d.cts

@@ -0,0 +1,19 @@
+/**
+ * The one email pattern every Siteping surface validates against.
+ *
+ * The widget's identity modal and the HTTP handler's schema used to disagree
+ * (a permissive regex on one side, an ASCII-only default on the other), so an
+ * address the modal accepted — and persisted in localStorage for good — came
+ * back as a 400 on every submission afterwards. One pattern, imported on both
+ * sides, makes that drift impossible.
+ *
+ * Deliberately Unicode-aware: internationalised local parts and domains
+ * (`françois@exemple.fr`, `user@münchen.de`) are real addresses and common in
+ * the audience this widget serves. Structure follows the usual rules — a
+ * local part of 1 to 64 characters with no leading, trailing or doubled dot,
+ * dot-separated domain labels of at most 63 characters that neither start nor
+ * end with a hyphen, and a final label of at least two characters.
+ */
+export declare const EMAIL_PATTERN: RegExp;
+/** Whether `value` is an email address Siteping accepts — see {@link EMAIL_PATTERN}. */
+export declare function isValidEmail(value: string): boolean;

package/dist/email.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The one email pattern every Siteping surface validates against.
+ *
+ * The widget's identity modal and the HTTP handler's schema used to disagree
+ * (a permissive regex on one side, an ASCII-only default on the other), so an
+ * address the modal accepted — and persisted in localStorage for good — came
+ * back as a 400 on every submission afterwards. One pattern, imported on both
+ * sides, makes that drift impossible.
+ *
+ * Deliberately Unicode-aware: internationalised local parts and domains
+ * (`françois@exemple.fr`, `user@münchen.de`) are real addresses and common in
+ * the audience this widget serves. Structure follows the usual rules — a
+ * local part of 1 to 64 characters with no leading, trailing or doubled dot,
+ * dot-separated domain labels of at most 63 characters that neither start nor
+ * end with a hyphen, and a final label of at least two characters.
+ */
+export declare const EMAIL_PATTERN: RegExp;
+/** Whether `value` is an email address Siteping accepts — see {@link EMAIL_PATTERN}. */
+export declare function isValidEmail(value: string): boolean;

package/dist/errors.d.cts

@@ -0,0 +1,41 @@
+/**
+ * Typed error hierarchy for Siteping client/server boundaries.
+ *
+ * Consumers can `instanceof`-check or read `code` / `retryable` instead of
+ * pattern-matching error messages. Designed to be additive on top of the
+ * existing store errors (`StoreNotFoundError`, `StoreDuplicateError`) which
+ * remain the canonical signals for server-side store implementations.
+ *
+ * Usage on the widget side (api-client.ts):
+ *   - fetch failures / aborts / timeouts → `SitepingNetworkError` (retryable)
+ *   - HTTP 4xx (except 401/403)         → `SitepingValidationError` (not retryable)
+ *   - HTTP 401 / 403                    → `SitepingAuthError` (not retryable)
+ *   - everything else                   → `SitepingError` generic
+ *
+ * `retryable` is meta information surfaced to host apps that want to wire
+ * their own retry/queue/backoff strategy — the widget already retries
+ * network failures via its built-in retry queue.
+ */
+/**
+ * Discriminant string carried by every `SitepingError`. Subclasses pin a
+ * literal value; the base class accepts a wider string so userland can
+ * extend the hierarchy without colliding with built-ins.
+ */
+export type SitepingErrorCode = "NETWORK" | "VALIDATION" | "AUTH" | "SERVER" | (string & {});
+export declare class SitepingError<TCode extends SitepingErrorCode = SitepingErrorCode> extends Error {
+    readonly code: TCode;
+    readonly retryable: boolean;
+    constructor(message: string, code: TCode, retryable: boolean);
+}
+/** Network-level failure: connection refused, DNS, CORS, timeout, abort. Retryable. */
+export declare class SitepingNetworkError extends SitepingError<"NETWORK"> {
+    constructor(message: string);
+}
+/** Server rejected the request (4xx, not auth). Validation problem on the client side. */
+export declare class SitepingValidationError extends SitepingError<"VALIDATION"> {
+    constructor(message: string);
+}
+/** Server rejected auth (401 or 403). Not retryable without fresh credentials. */
+export declare class SitepingAuthError extends SitepingError<"AUTH"> {
+    constructor(message: string);
+}

package/dist/errors.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Typed error hierarchy for Siteping client/server boundaries.
+ *
+ * Consumers can `instanceof`-check or read `code` / `retryable` instead of
+ * pattern-matching error messages. Designed to be additive on top of the
+ * existing store errors (`StoreNotFoundError`, `StoreDuplicateError`) which
+ * remain the canonical signals for server-side store implementations.
+ *
+ * Usage on the widget side (api-client.ts):
+ *   - fetch failures / aborts / timeouts → `SitepingNetworkError` (retryable)
+ *   - HTTP 4xx (except 401/403)         → `SitepingValidationError` (not retryable)
+ *   - HTTP 401 / 403                    → `SitepingAuthError` (not retryable)
+ *   - everything else                   → `SitepingError` generic
+ *
+ * `retryable` is meta information surfaced to host apps that want to wire
+ * their own retry/queue/backoff strategy — the widget already retries
+ * network failures via its built-in retry queue.
+ */
+/**
+ * Discriminant string carried by every `SitepingError`. Subclasses pin a
+ * literal value; the base class accepts a wider string so userland can
+ * extend the hierarchy without colliding with built-ins.
+ */
+export type SitepingErrorCode = "NETWORK" | "VALIDATION" | "AUTH" | "SERVER" | (string & {});
+export declare class SitepingError<TCode extends SitepingErrorCode = SitepingErrorCode> extends Error {
+    readonly code: TCode;
+    readonly retryable: boolean;
+    constructor(message: string, code: TCode, retryable: boolean);
+}
+/** Network-level failure: connection refused, DNS, CORS, timeout, abort. Retryable. */
+export declare class SitepingNetworkError extends SitepingError<"NETWORK"> {
+    constructor(message: string);
+}
+/** Server rejected the request (4xx, not auth). Validation problem on the client side. */
+export declare class SitepingValidationError extends SitepingError<"VALIDATION"> {
+    constructor(message: string);
+}
+/** Server rejected auth (401 or 403). Not retryable without fresh credentials. */
+export declare class SitepingAuthError extends SitepingError<"AUTH"> {
+    constructor(message: string);
+}

package/dist/filters.d.cts

@@ -0,0 +1,74 @@
+/**
+ * Shared feedback-record filtering and pagination — extracted from
+ * `adapter-memory` and `adapter-localstorage` which previously kept two
+ * near-identical copies of the same logic. Any adapter that holds an
+ * in-memory snapshot of feedbacks can use it.
+ *
+ * Filtering order matches the historical adapter behaviour:
+ *   1. projectName  (always required)
+ *   2. type
+ *   3. status / statuses  (`statuses` bucket wins when both are set)
+ *   4. url
+ *   5. urlPattern
+ *   6. search       (lowercase substring match on `message`)
+ *
+ * Pagination goes through `clampPagination`: `limit` capped at 100, `page`
+ * 1-based, both clamped up to 1 rather than indexing backwards from the end
+ * of the match set. Query adapters reuse the same helper so every store
+ * paginates identically.
+ */
+import type { FeedbackQuery, FeedbackRecord } from "./types.cjs";
+/** Default page size when the caller omits `query.limit`. */
+export declare const DEFAULT_PAGE_LIMIT = 50;
+/** Maximum allowed page size — defends against memory blow-ups on hostile callers. */
+export declare const MAX_PAGE_LIMIT = 100;
+export interface FilterResult {
+    feedbacks: FeedbackRecord[];
+    total: number;
+}
+/** Normalised pagination window — see {@link clampPagination}. */
+export interface Pagination {
+    /** 1-based page number, at least 1. */
+    page: number;
+    /** Page size in `[1, MAX_PAGE_LIMIT]`. */
+    limit: number;
+    /** Offset of the first row: `(page - 1) * limit`. */
+    skip: number;
+}
+/**
+ * Normalise `page` / `limit` to the store contract: `page` is 1-based and
+ * clamped up to 1, `limit` defaults to 50 and is clamped into `[1, 100]`,
+ * non-finite values fall back to the defaults. `skip` is the derived row
+ * offset for query backends (`OFFSET`, Prisma `skip`).
+ *
+ * Shared by the in-memory pipeline and query adapters (`PrismaStore`) so
+ * every store paginates identically — the HTTP schema clamps the same way,
+ * but direct callers (dashboard store mode, server actions) reach the store
+ * without a schema in front of them.
+ */
+export declare function clampPagination(query: Pick<FeedbackQuery, "page" | "limit">): Pagination;
+/**
+ * Whether a {@link clampPagination} offset lies beyond any row a store can
+ * hold. `clampPagination` bounds `page` from below only, so a direct caller's
+ * huge `page` yields an offset past `Number.MAX_SAFE_INTEGER` — or `Infinity`
+ * — that SQL backends reject (`OFFSET` is a 64-bit integer in PostgreSQL and
+ * SQLite; Prisma's `skip` rejects non-integers and 64-bit overflow).
+ *
+ * Every safe integer fits a signed 64-bit offset and no table holds more rows
+ * than that, so query adapters answer such a page as empty — with the real
+ * `total` — instead of issuing the query: the same result the in-memory
+ * pipeline returns.
+ *
+ * @param skip - The `skip` returned by {@link clampPagination}.
+ * @returns `true` when no row can sit at that offset.
+ */
+export declare function isUnreachableOffset(skip: number): boolean;
+/**
+ * Apply the standard feedback filter + pagination pipeline against an
+ * in-memory snapshot. Used by `MemoryStore.getFeedbacks` and
+ * `LocalStorageStore.getFeedbacks` so the two never drift.
+ *
+ * @param items  All known feedback records (already include `annotations`).
+ * @param query  Filter and pagination options. `projectName` is required.
+ */
+export declare function applyFeedbackFilters(items: readonly FeedbackRecord[], query: FeedbackQuery): FilterResult;

package/dist/filters.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Shared feedback-record filtering and pagination — extracted from
+ * `adapter-memory` and `adapter-localstorage` which previously kept two
+ * near-identical copies of the same logic. Any adapter that holds an
+ * in-memory snapshot of feedbacks can use it.
+ *
+ * Filtering order matches the historical adapter behaviour:
+ *   1. projectName  (always required)
+ *   2. type
+ *   3. status / statuses  (`statuses` bucket wins when both are set)
+ *   4. url
+ *   5. urlPattern
+ *   6. search       (lowercase substring match on `message`)
+ *
+ * Pagination goes through `clampPagination`: `limit` capped at 100, `page`
+ * 1-based, both clamped up to 1 rather than indexing backwards from the end
+ * of the match set. Query adapters reuse the same helper so every store
+ * paginates identically.
+ */
+import type { FeedbackQuery, FeedbackRecord } from "./types.js";
+/** Default page size when the caller omits `query.limit`. */
+export declare const DEFAULT_PAGE_LIMIT = 50;
+/** Maximum allowed page size — defends against memory blow-ups on hostile callers. */
+export declare const MAX_PAGE_LIMIT = 100;
+export interface FilterResult {
+    feedbacks: FeedbackRecord[];
+    total: number;
+}
+/** Normalised pagination window — see {@link clampPagination}. */
+export interface Pagination {
+    /** 1-based page number, at least 1. */
+    page: number;
+    /** Page size in `[1, MAX_PAGE_LIMIT]`. */
+    limit: number;
+    /** Offset of the first row: `(page - 1) * limit`. */
+    skip: number;
+}
+/**
+ * Normalise `page` / `limit` to the store contract: `page` is 1-based and
+ * clamped up to 1, `limit` defaults to 50 and is clamped into `[1, 100]`,
+ * non-finite values fall back to the defaults. `skip` is the derived row
+ * offset for query backends (`OFFSET`, Prisma `skip`).
+ *
+ * Shared by the in-memory pipeline and query adapters (`PrismaStore`) so
+ * every store paginates identically — the HTTP schema clamps the same way,
+ * but direct callers (dashboard store mode, server actions) reach the store
+ * without a schema in front of them.
+ */
+export declare function clampPagination(query: Pick<FeedbackQuery, "page" | "limit">): Pagination;
+/**
+ * Whether a {@link clampPagination} offset lies beyond any row a store can
+ * hold. `clampPagination` bounds `page` from below only, so a direct caller's
+ * huge `page` yields an offset past `Number.MAX_SAFE_INTEGER` — or `Infinity`
+ * — that SQL backends reject (`OFFSET` is a 64-bit integer in PostgreSQL and
+ * SQLite; Prisma's `skip` rejects non-integers and 64-bit overflow).
+ *
+ * Every safe integer fits a signed 64-bit offset and no table holds more rows
+ * than that, so query adapters answer such a page as empty — with the real
+ * `total` — instead of issuing the query: the same result the in-memory
+ * pipeline returns.
+ *
+ * @param skip - The `skip` returned by {@link clampPagination}.
+ * @returns `true` when no row can sit at that offset.
+ */
+export declare function isUnreachableOffset(skip: number): boolean;
+/**
+ * Apply the standard feedback filter + pagination pipeline against an
+ * in-memory snapshot. Used by `MemoryStore.getFeedbacks` and
+ * `LocalStorageStore.getFeedbacks` so the two never drift.
+ *
+ * @param items  All known feedback records (already include `annotations`).
+ * @param query  Filter and pagination options. `projectName` is required.
+ */
+export declare function applyFeedbackFilters(items: readonly FeedbackRecord[], query: FeedbackQuery): FilterResult;

package/dist/i18n.d.cts

@@ -0,0 +1,67 @@
+/**
+ * Generic i18n machinery shared by the widget and the dashboard.
+ *
+ * Each package owns its `Translations` interface (their key sets differ) and
+ * its locale dictionaries; everything else — locale normalization, the
+ * custom-locale registry, lazy loading of built-ins, the translate-function
+ * factory, interpolation — is identical and lives here once.
+ *
+ * The `loaders` map is typed `Record<Exclude<BuiltinLocale, "en">, …>`: the
+ * moment a locale code is added to {@link BUILTIN_LOCALES}, every consuming
+ * package fails to compile until its loader entry (and therefore its
+ * dictionary file) exists. Adding a locale cannot silently fall back to
+ * English anymore.
+ */
+import { type BuiltinLocale } from "./types.cjs";
+/**
+ * Lazy dictionary loaders for every non-English built-in locale. Use static
+ * `() => import("./xx.cjs").then((m) => m.xx)` thunks — bundlers keep
+ * emitting one chunk per locale, and only the requested one ships.
+ */
+export type LocaleLoaders<T> = Record<Exclude<BuiltinLocale, "en">, () => Promise<T>>;
+/** Translate function over the message catalog `T`. */
+export type TranslateFunction<T> = (key: keyof T & string) => string;
+/** The i18n API returned by {@link createI18n}. */
+export interface I18n<T> {
+    /**
+     * Create a translation function for the given locale.
+     *
+     * Locale resolution: exact language match > English fallback, per key.
+     * Non-English built-in locales are lazy-loaded via `loadLocale` — call
+     * `await loadLocale(locale)` at init if you want the UI to render in the
+     * target language immediately; until the dictionary lands, keys resolve
+     * to English.
+     */
+    createT(locale: string): TranslateFunction<T>;
+    /**
+     * Dynamically import a built-in locale and register it. Returns the
+     * loaded dictionary, or `null` if the locale isn't a known built-in.
+     * Custom locales registered via `registerLocale` bypass this loader —
+     * they are already in the registry (and are returned as registered, so a
+     * partial custom dictionary comes back partial).
+     */
+    loadLocale(locale: string): Promise<Partial<T> | null>;
+    /**
+     * Register a custom locale at runtime. Partial dictionaries are welcome —
+     * missing keys fall back to English per key, so overriding a single
+     * string never requires copying the whole catalog.
+     */
+    registerLocale(code: string, translations: Partial<T>): void;
+}
+/**
+ * Build the i18n machinery for one message catalog.
+ *
+ * @param en — the complete English catalog, bundled synchronously as the fallback.
+ * @param loaders — lazy import thunks for every other built-in locale.
+ */
+export declare function createI18n<T extends Record<keyof T & string, string>>(en: T, loaders: LocaleLoaders<T>): I18n<T>;
+/**
+ * Interpolate `{paramName}` placeholders in a translated string with the
+ * values from `params`. Stringifies numbers and booleans inline so callers
+ * can pass `t("marker.count")` along with `{ count: 3 }` directly.
+ *
+ * Unknown placeholders are left as-is.
+ */
+export declare function interpolate(template: string, params: Readonly<Record<string, string | number | boolean>>): string;
+/** Shorthand for `interpolate(t(key), params)` — key-checked against the catalog. */
+export declare function tWithParams<K extends string>(t: (key: K) => string, key: K, params: Readonly<Record<string, string | number | boolean>>): string;

package/dist/i18n.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Generic i18n machinery shared by the widget and the dashboard.
+ *
+ * Each package owns its `Translations` interface (their key sets differ) and
+ * its locale dictionaries; everything else — locale normalization, the
+ * custom-locale registry, lazy loading of built-ins, the translate-function
+ * factory, interpolation — is identical and lives here once.
+ *
+ * The `loaders` map is typed `Record<Exclude<BuiltinLocale, "en">, …>`: the
+ * moment a locale code is added to {@link BUILTIN_LOCALES}, every consuming
+ * package fails to compile until its loader entry (and therefore its
+ * dictionary file) exists. Adding a locale cannot silently fall back to
+ * English anymore.
+ */
+import { type BuiltinLocale } from "./types.js";
+/**
+ * Lazy dictionary loaders for every non-English built-in locale. Use static
+ * `() => import("./xx.js").then((m) => m.xx)` thunks — bundlers keep
+ * emitting one chunk per locale, and only the requested one ships.
+ */
+export type LocaleLoaders<T> = Record<Exclude<BuiltinLocale, "en">, () => Promise<T>>;
+/** Translate function over the message catalog `T`. */
+export type TranslateFunction<T> = (key: keyof T & string) => string;
+/** The i18n API returned by {@link createI18n}. */
+export interface I18n<T> {
+    /**
+     * Create a translation function for the given locale.
+     *
+     * Locale resolution: exact language match > English fallback, per key.
+     * Non-English built-in locales are lazy-loaded via `loadLocale` — call
+     * `await loadLocale(locale)` at init if you want the UI to render in the
+     * target language immediately; until the dictionary lands, keys resolve
+     * to English.
+     */
+    createT(locale: string): TranslateFunction<T>;
+    /**
+     * Dynamically import a built-in locale and register it. Returns the
+     * loaded dictionary, or `null` if the locale isn't a known built-in.
+     * Custom locales registered via `registerLocale` bypass this loader —
+     * they are already in the registry (and are returned as registered, so a
+     * partial custom dictionary comes back partial).
+     */
+    loadLocale(locale: string): Promise<Partial<T> | null>;
+    /**
+     * Register a custom locale at runtime. Partial dictionaries are welcome —
+     * missing keys fall back to English per key, so overriding a single
+     * string never requires copying the whole catalog.
+     */
+    registerLocale(code: string, translations: Partial<T>): void;
+}
+/**
+ * Build the i18n machinery for one message catalog.
+ *
+ * @param en — the complete English catalog, bundled synchronously as the fallback.
+ * @param loaders — lazy import thunks for every other built-in locale.
+ */
+export declare function createI18n<T extends Record<keyof T & string, string>>(en: T, loaders: LocaleLoaders<T>): I18n<T>;
+/**
+ * Interpolate `{paramName}` placeholders in a translated string with the
+ * values from `params`. Stringifies numbers and booleans inline so callers
+ * can pass `t("marker.count")` along with `{ count: 3 }` directly.
+ *
+ * Unknown placeholders are left as-is.
+ */
+export declare function interpolate(template: string, params: Readonly<Record<string, string | number | boolean>>): string;
+/** Shorthand for `interpolate(t(key), params)` — key-checked against the catalog. */
+export declare function tWithParams<K extends string>(t: (key: K) => string, key: K, params: Readonly<Record<string, string | number | boolean>>): string;