@bobbykim/manguito-cms-api 0.8.4 → 0.9.1

package/dist/index.mjs

@@ -4,13 +4,14 @@ import {
   createFieldKeyMapFromProjection,
   deleteParagraphField,
   isColumnBacked,
+  junctionOrderBy,
   oneOrMany,
   paragraphItems,
   persistJunctionField,
   persistParagraphField,
   resolveRelationBareIds,
   resolveRelationField
-} from "./chunk-IHEIX6P4.mjs";
+} from "./chunk-GUZZQZSN.mjs";
 
 // src/paths.ts
 function normalizePrefix(prefix) {
@@ -1169,8 +1170,7 @@ function checkRelationInput(fields, body, registry, path = "") {
       });
       continue;
     }
-    const comp = field.ui_component;
-    const pType = comp.component === "paragraph-embed" ? registry.paragraph_types[comp.ref] : void 0;
+    const pType = paragraphTypeOf(field, registry);
     if (!pType) continue;
     items.forEach((item, i) => {
       const prefix = cardinality === "one" ? `${name}.` : `${name}[${i}].`;
@@ -1179,12 +1179,15 @@ function checkRelationInput(fields, body, registry, path = "") {
   }
   return errors;
 }
+function paragraphTypeOf(field, registry) {
+  const comp = field.ui_component;
+  return comp.component === "paragraph-embed" ? registry.paragraph_types[comp.ref] : void 0;
+}
 function paragraphItemsIn(fields, body, registry, path) {
   const out = [];
   for (const field of fields) {
     if (field.field_type !== "paragraph" || !(field.name in body)) continue;
-    const comp = field.ui_component;
-    const pType = comp.component === "paragraph-embed" ? registry.paragraph_types[comp.ref] : void 0;
+    const pType = paragraphTypeOf(field, registry);
     if (!pType) continue;
     const value = body[field.name];
     const name = `${path}${field.name}`;
@@ -1256,6 +1259,133 @@ async function findMissingReferences(db, fields, body, registry) {
   return uses.filter((u) => !found.get(u.table).has(u.id.toLowerCase())).map((u) => ({ field: u.field, message: `${u.field} refers to an item that does not exist.` }));
 }
 
+// src/field-values.ts
+var VARCHAR_DEFAULT_LIMIT = 255;
+var INTEGER_MIN = -2147483648;
+var INTEGER_MAX = 2147483647;
+var DECIMAL_LIMIT = 1e6;
+var ISO_TIMESTAMP = /^(\d{4})-(\d{2})-(\d{2})(?:[T ](\d{2}):(\d{2})(?::(\d{2})(?:\.\d+)?)?(?:Z|[+-]\d{2}:?\d{2})?)?$/;
+var DECIMAL_STRING = /^-?\d+(?:\.\d+)?$/;
+var EMPTY_MEANS_NULL = /* @__PURE__ */ new Set(["date", "integer", "float", "enum"]);
+function emptyValuesToNull(fields, body, registry) {
+  const out = { ...body };
+  for (const f of fields) {
+    if (!(f.name in out)) continue;
+    const value = out[f.name];
+    if (value === "" && EMPTY_MEANS_NULL.has(f.field_type)) {
+      out[f.name] = null;
+      continue;
+    }
+    if (f.field_type !== "paragraph") continue;
+    const pType = paragraphTypeOf(f, registry);
+    if (!pType) continue;
+    if (isPlainObject(value)) out[f.name] = emptyValuesToNull(pType.fields, value, registry);
+    else if (Array.isArray(value)) {
+      out[f.name] = value.map((item) => isPlainObject(item) ? emptyValuesToNull(pType.fields, item, registry) : item);
+    }
+  }
+  return out;
+}
+var compiled = /* @__PURE__ */ new Map();
+function patternOf(source) {
+  if (!compiled.has(source)) {
+    let re;
+    try {
+      re = new RegExp(source);
+    } catch {
+      re = null;
+    }
+    compiled.set(source, re);
+  }
+  return compiled.get(source) ?? null;
+}
+function isRealDate(value) {
+  const m = ISO_TIMESTAMP.exec(value);
+  if (!m) return false;
+  const [y, mo, d, h = 0, mi = 0, sec = 0] = m.slice(1).map((part) => part === void 0 ? void 0 : Number(part));
+  if (y === void 0 || mo === void 0 || d === void 0 || y < 1) return false;
+  const date = new Date(Date.UTC(y, mo - 1, d));
+  date.setUTCFullYear(y);
+  return date.getUTCMonth() === mo - 1 && date.getUTCDate() === d && h <= 23 && mi <= 59 && sec <= 59;
+}
+function valueError(f, value, name) {
+  const v = f.validation;
+  if (Array.isArray(value) && (f.field_type === "paragraph" || f.field_type === "reference")) {
+    if (v.max_items !== void 0 && value.length > v.max_items) {
+      return `${name} can hold at most ${v.max_items} items.`;
+    }
+    return null;
+  }
+  const col = f.db_column;
+  if (!col || col.junction || col.column_type === "uuid") return null;
+  if (value === null || value === void 0) {
+    if (col.nullable) return null;
+    return f.required ? `${name} is required.` : `${name} cannot be empty.`;
+  }
+  switch (f.field_type) {
+    case "text/plain": {
+      if (typeof value !== "string") return `${name} must be text.`;
+      if (value.includes("\0")) return `${name} contains a character that cannot be stored (U+0000).`;
+      const limit = v.limit ?? VARCHAR_DEFAULT_LIMIT;
+      if ([...value].length > limit) return `${name} can be at most ${limit} characters.`;
+      const pattern = v.pattern === void 0 ? null : patternOf(v.pattern);
+      if (value !== "" && pattern && !pattern.test(value)) return `${name} is not in the correct format.`;
+      return null;
+    }
+    case "text/rich":
+      if (typeof value !== "string") return `${name} must be text.`;
+      return value.includes("\0") ? `${name} contains a character that cannot be stored (U+0000).` : null;
+    case "integer":
+      if (typeof value !== "number" || !Number.isInteger(value)) return `${name} must be a whole number.`;
+      if (value < INTEGER_MIN || value > INTEGER_MAX) {
+        return `${name} must be between ${INTEGER_MIN} and ${INTEGER_MAX}.`;
+      }
+      return rangeError(name, value, v.min, v.max);
+    case "float": {
+      const n = typeof value === "number" ? value : typeof value === "string" && DECIMAL_STRING.test(value) ? Number(value) : NaN;
+      if (!Number.isFinite(n)) return `${name} must be a number.`;
+      if (roundedSize(typeof value === "string" ? value : String(n)) >= DECIMAL_LIMIT) {
+        return `${name} must be less than ${DECIMAL_LIMIT} in size.`;
+      }
+      return rangeError(name, n, v.min, v.max);
+    }
+    case "boolean":
+      return typeof value === "boolean" ? null : `${name} must be true or false.`;
+    case "date":
+      return typeof value === "string" && isRealDate(value) ? null : `${name} must be a date, such as 2026-10-11 or 2026-10-11T09:30:00Z.`;
+    case "enum": {
+      const allowed = v.allowed_values ?? [];
+      return typeof value === "string" && allowed.includes(value) ? null : `${name} must be one of: ${allowed.join(", ")}.`;
+    }
+    default:
+      return null;
+  }
+}
+function roundedSize(text) {
+  if (text.includes("e")) return Math.abs(Number(text));
+  const [int = "0", frac = ""] = text.replace("-", "").split(".");
+  const kept = Number(`${int}.${frac.slice(0, 4) || "0"}`);
+  return frac.length > 4 && frac.charAt(4) >= "5" ? kept + 1e-4 : kept;
+}
+function rangeError(name, value, min, max) {
+  if (min !== void 0 && value < min) return `${name} must be at least ${min}.`;
+  if (max !== void 0 && value > max) return `${name} must be at most ${max}.`;
+  return null;
+}
+function checkFieldValues(fields, body, registry, path = "") {
+  const errors = [];
+  for (const f of fields) {
+    if (!(f.name in body) || f.removed === true) continue;
+    const name = `${path}${f.name}`;
+    const message = valueError(f, body[f.name], name);
+    if (message) errors.push({ field: name, message });
+  }
+  for (const { item, fields: itemFields, prefix } of paragraphItemsIn(fields, body, registry, path)) {
+    errors.push(...checkFieldValues(itemFields, item, registry, prefix));
+  }
+  return errors;
+}
+
 // src/routes/admin/content.ts
 function quoteIdent3(name) {
   if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
@@ -1292,7 +1422,7 @@ async function loadRelationsForEdit(db, registry, fields, id, row) {
     } else if (f.db_column.junction) {
       const j = f.db_column.junction;
       const r = await db.execute(
-        sql4`SELECT ${sql4.raw(quoteIdent3(j.right_column))} FROM ${sql4.raw(quoteIdent3(j.table_name))} WHERE ${sql4.raw(quoteIdent3(j.left_column))} = ${id}`
+        sql4`SELECT ${sql4.raw(quoteIdent3(j.right_column))} FROM ${sql4.raw(quoteIdent3(j.table_name))} WHERE ${sql4.raw(quoteIdent3(j.left_column))} = ${id}${junctionOrderBy(j)}`
       );
       row[f.name] = r.rows.map((linked) => linked[j.right_column]);
     }
@@ -1335,6 +1465,8 @@ async function relationInputError(c, fields, body, registry, db) {
   const refuse = (message, details) => c.json({ ok: false, error: { code: "VALIDATION_ERROR", message, details } }, 422);
   const shape = checkRelationInput(fields, body, registry);
   if (shape.length > 0) return refuse("Relation fields have the wrong shape", shape);
+  const values = checkFieldValues(fields, body, registry);
+  if (values.length > 0) return refuse("Some values are not valid", values);
   const required = checkRequiredInParagraphItems(fields, body, registry);
   if (required.length > 0) return refuse("Required fields are missing", required);
   if (db) {
@@ -1485,7 +1617,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
       `/admin/api/${basePath}`,
       requirePermission("content:create"),
       async (c) => {
-        const body = await c.req.json();
+        const body = emptyValuesToNull(contentType.fields, await c.req.json(), registry);
         if (contentType.only_one) {
           const existing = await repo.findMany({ page: 1, per_page: 1 });
           if (existing.meta.total > 0) {
@@ -1612,7 +1744,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
       requirePermission("content:edit"),
       async (c) => {
         const id = c.req.param("id");
-        const body = await c.req.json();
+        const body = emptyValuesToNull(contentType.fields, await c.req.json(), registry);
         const existing = await repo.findOne(id);
         if (!existing) {
           return c.json(
@@ -1719,7 +1851,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
         `/admin/api/${basePath}`,
         requirePermission("content:edit"),
         async (c) => {
-          const body = await c.req.json();
+          const body = emptyValuesToNull(contentType.fields, await c.req.json(), registry);
           const existingResult = await repo.findMany({ page: 1, per_page: 1 });
           const existing = existingResult.data[0];
           if (!existing) {
@@ -1846,7 +1978,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
       `/admin/api/taxonomy/${typeName}`,
       requirePermission("content:create"),
       async (c) => {
-        const body = await c.req.json();
+        const body = emptyValuesToNull(taxonomyType.fields, await c.req.json(), registry);
         const inputError = await relationInputError(c, taxonomyType.fields, body, registry, db);
         if (inputError) return inputError;
         const storageBody = fieldKeys.toStorage(body);
@@ -1894,7 +2026,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
       requirePermission("content:edit"),
       async (c) => {
         const id = c.req.param("id");
-        const body = await c.req.json();
+        const body = emptyValuesToNull(taxonomyType.fields, await c.req.json(), registry);
         const storageBody = fieldKeys.toStorage(body);
         const existing = await repo.findOne(id);
         if (!existing) {
@@ -2951,7 +3083,7 @@ function registerUserRoutes(app, db, requirePermission, requireHierarchy) {
 import { sql as sql7 } from "drizzle-orm";
 var API_VERSION = (() => {
   try {
-    return "0.8.4";
+    return "0.9.1";
   } catch {
     return "0.0.0";
   }
@@ -3649,7 +3781,7 @@ function createCmsApp(options) {
       handler: null,
       error: null
     }));
-    const ready = import("./handler-VEOWJRAL.mjs").then(({ createGraphQLHandler }) => {
+    const ready = import("./handler-MFF32JB4.mjs").then(({ createGraphQLHandler }) => {
       gqlPasses.forEach((pass, i) => {
         const mount = mounts[i];
         try {