@bygghammar/cms-platform 0.3.0 → 0.4.0

package/README.md

@@ -43,6 +43,11 @@ versions. Keep the dynamic import behind an `import.meta.env.SSR` guard in SSR
 applications so the browser-only ZIP code cannot enter the optimized server
 chunk graph.
 
+Individual media downloads are retried before an export is stopped. Public
+media-bucket adapters should also fall back to the object's public URL when an
+authenticated Storage download fails, so one transient large-file request
+cannot discard an otherwise valid archive.
+
 The consuming site remains responsible for its dataset groups, table import
 order, Supabase clients, superadmin authorization, HTTP routes, audit records
 and database migrations. The package never contains site data or credentials.

package/package.json

@@ -1,13 +1,12 @@
 {
   "name": "@bygghammar/cms-platform",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Shared CMS platform: blocks, block types, i18n core, UI primitives and design-token contract used by every Bygghammar/Voyara site.",
   "type": "module",
   "sideEffects": false,
   "license": "UNLICENSED",
   "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/"
+    "access": "public"
   },
   "files": [
     "src",
@@ -18,9 +17,6 @@
     "url": "git+https://github.com/byggis79/devsba.git",
     "directory": "packages/cms-platform"
   },
-  "publishConfig": {
-    "access": "public"
-  },
   "exports": {
     ".": "./src/index.ts",
     "./i18n": "./src/i18n/index.ts",
@@ -44,7 +40,34 @@
     "./blocks/registry": "./src/blocks/registry.tsx",
     "./trips": "./src/trips/index.ts",
     "./trips/TripSectionEditor": "./src/trips/TripSectionEditor.tsx",
-    "./navigation": "./src/navigation/index.ts"
+    "./navigation": "./src/navigation/index.ts",
+    "./forms/conditions": "./src/forms/conditions.ts",
+    "./forms/field-sets": "./src/forms/field-sets.ts",
+    "./forms/form-audit": "./src/forms/form-audit.ts",
+    "./forms/rich-text": "./src/forms/rich-text.tsx",
+    "./media/urls": "./src/media/urls.ts",
+    "./media/filename": "./src/media/filename.ts",
+    "./media/focus": "./src/media/focus.ts",
+    "./media/internal-paths": "./src/media/internal-paths.ts",
+    "./media/optimize": "./src/media/optimize.ts",
+    "./media/srcset": "./src/media/srcset.ts",
+    "./media/media-meta": "./src/media/media-meta.ts",
+    "./media/review-image": "./src/media/review-image.ts",
+    "./media/storage": "./src/media/storage.ts",
+    "./media/usage-types": "./src/media/usage-types.ts",
+    "./cms/version-diff": "./src/cms/version-diff.ts",
+    "./cms/shared-draft-store": "./src/cms/shared-draft-store.ts",
+    "./http/cache-policy": "./src/http/cache-policy.ts",
+    "./http/compression": "./src/http/compression.ts",
+    "./http/response-headers": "./src/http/response-headers.ts",
+    "./backup/datasets": "./src/backup/datasets.ts",
+    "./backup/export-core": "./src/backup/export-core.ts",
+    "./backup/restore-core": "./src/backup/restore-core.ts",
+    "./backup/media-export": "./src/backup/media-export.ts",
+    "./i18n/json": "./src/i18n/json.ts",
+    "./i18n/resolve-locale": "./src/i18n/resolve-locale.ts",
+    "./i18n/translation-meta": "./src/i18n/translation-meta.ts",
+    "./platform": "./src/platform/index.ts"
   },
   "dependencies": {
     "fflate": "^0.8.3"
@@ -54,6 +77,20 @@
     "lucide-react": ">=0.5.0",
     "react": ">=19",
     "react-dom": ">=19",
-    "sonner": ">=2"
+    "sonner": ">=2",
+    "@supabase/supabase-js": ">=2",
+    "@tanstack/react-start": ">=1",
+    "@tanstack/react-router": ">=1"
+  },
+  "peerDependenciesMeta": {
+    "@supabase/supabase-js": {
+      "optional": true
+    },
+    "@tanstack/react-start": {
+      "optional": true
+    },
+    "@tanstack/react-router": {
+      "optional": true
+    }
   }
-}
+}

package/src/backup/browser-media.ts

@@ -41,6 +41,23 @@ export type BrowserMediaExportOptions = {
   onProgress?: (progress: MediaExportProgress) => void;
 };
 
+const MEDIA_DOWNLOAD_ATTEMPTS = 3;
+
+async function downloadWithRetry(storage: BrowserBackupStorage, path: string): Promise<Uint8Array> {
+  let lastError: unknown;
+  for (let attempt = 1; attempt <= MEDIA_DOWNLOAD_ATTEMPTS; attempt += 1) {
+    try {
+      return await storage.download(path);
+    } catch (error) {
+      lastError = error;
+      if (attempt < MEDIA_DOWNLOAD_ATTEMPTS) {
+        await new Promise((resolve) => setTimeout(resolve, attempt * 250));
+      }
+    }
+  }
+  throw lastError;
+}
+
 function readManifest<M extends BackupArchiveManifest>(
   files: Record<string, Uint8Array>,
   expectedFormat: number | string,
@@ -149,7 +166,7 @@ export async function buildBrowserMediaArchive<M extends BackupArchiveManifest>(
     for (const file of candidates) {
       let data: Uint8Array;
       try {
-        data = await storage.download(file.name);
+        data = await downloadWithRetry(storage, file.name);
       } catch (error) {
         throw new Error(
           `Could not download media file “${file.name}”: ${

package/src/backup/datasets.ts

@@ -0,0 +1,249 @@
+/**
+ * Client-safe description of what a backup archive can contain.
+ *
+ * Used by both the backoffice UI and the server-side export/import engine so
+ * the two can never drift apart.
+ */
+
+/**
+ * Archive layout version. Format 2 adds accounts, email configuration,
+ * verified media and secret sanitising. Format 1 archives are rejected.
+ */
+export const ARCHIVE_FORMAT_VERSION = 2;
+/** Bump when the database schema changes in a way that breaks old archives. */
+export const SCHEMA_VERSION = 2;
+
+export {
+  ALLOWED_MEDIA_EXTENSIONS,
+  isAllowedMediaFile,
+  hasAllowedMediaExtension,
+  verifyMediaFile,
+  isSafeArchivePath,
+  sanitizeSecrets,
+  rewriteMediaUrls,
+  neutralizeInjection,
+} from "./safety";
+
+export type TableSpec = {
+  table: string;
+  /** Primary key column(s) used for upserts. */
+  pk: string;
+  /**
+   * Conflict target for upserts. Defaults to `pk`, but tables that carry a
+   * business key (pages.key, forms.key, …) must conflict on that instead, or
+   * archives with different UUIDs collide on the unique index.
+   */
+  conflict?: string;
+  /**
+   * Columns that reference rows created later in the import order.
+   * They are stripped on the first pass and written in a second pass.
+   */
+  deferred?: string[];
+  /** Tables that must have imported cleanly before this one is attempted. */
+  requires?: string[];
+  /** Credential-like values in these JSON columns are stripped on export. */
+  sanitize?: string[];
+  /**
+   * Nullable foreign keys checked against the archive itself. A non-null value
+   * whose parent row is absent fails analysis before anything is restored.
+   */
+  references?: { column: string; table: string; pk?: string }[];
+};
+
+/** Business keys used to detect that an archive comes from another database. */
+export const LINEAGE_KEYS: Record<string, string> = {
+  pages: "key",
+  global_sections: "key",
+  forms: "key",
+  content_sections: "key",
+  page_seo: "page_key",
+  redirects: "from_path",
+  locale_domains: "locale",
+};
+
+export type DatasetGroup = {
+  id: string;
+  label: string;
+  description: string;
+  tables: TableSpec[];
+  /** Rows are only ever inserted — never updated or deleted. */
+  insertOnly?: boolean;
+  /** Special payloads that are not plain tables. */
+  special?: "mediaFiles" | "authUsers";
+  /** Not selected when the user picks "recommended". */
+  heavy?: boolean;
+};
+
+export const DATASET_GROUPS: DatasetGroup[] = [
+  {
+    id: "content",
+    label: "Content & pages",
+    description:
+      "Pages, page versions, publications, sections, global sections and block templates.",
+    tables: [
+      { table: "pages", pk: "id", conflict: "key", deferred: ["current_version_id"] },
+      { table: "page_versions", pk: "id", conflict: "page_id,version_no", requires: ["pages"] },
+      { table: "page_publications", pk: "id", requires: ["pages", "page_versions"] },
+      { table: "content_sections", pk: "key", conflict: "key" },
+      { table: "global_sections", pk: "id", conflict: "key", deferred: ["current_version_id"] },
+      {
+        table: "global_section_versions",
+        pk: "id",
+        conflict: "section_id,version_no",
+        requires: ["global_sections"],
+      },
+      { table: "block_templates", pk: "id" },
+    ],
+  },
+  {
+    id: "seo",
+    label: "SEO & routing",
+    description: "Page SEO, redirects, language domains and tracking/code injections.",
+    tables: [
+      { table: "page_seo", pk: "page_key", conflict: "page_key" },
+      { table: "redirects", pk: "id", conflict: "from_path" },
+      { table: "locale_domains", pk: "locale", conflict: "locale" },
+      { table: "site_injections", pk: "id" },
+    ],
+  },
+  {
+    id: "forms",
+    label: "Forms",
+    description: "Form definitions, their version history and global form settings.",
+    tables: [
+      { table: "forms", pk: "id", conflict: "key" },
+      { table: "form_versions", pk: "id", conflict: "form_key,version_no", requires: ["forms"] },
+      { table: "form_settings", pk: "id" },
+    ],
+  },
+
+  {
+    id: "customer",
+    label: "Customer data",
+    description:
+      "Form submissions, partial submissions and delivery attempts. Always insert-only — never overwritten or deleted.",
+    insertOnly: true,
+    tables: [
+      { table: "form_submissions", pk: "id", requires: ["forms"] },
+      { table: "form_partials", pk: "id", conflict: "form_key,client_token", requires: ["forms"] },
+      {
+        table: "form_delivery_attempts",
+        pk: "id",
+        requires: ["forms", "form_submissions"],
+      },
+    ],
+  },
+
+  {
+    id: "mediaMeta",
+    label: "Media metadata",
+    description: "Alt texts, titles, descriptions, focus points and the media bin index.",
+    tables: [
+      { table: "media_meta", pk: "path" },
+      { table: "media_focus", pk: "path" },
+      { table: "media_trash", pk: "id" },
+    ],
+  },
+  {
+    id: "mediaFiles",
+    label: "Media files",
+    description: "The actual images and videos. This is by far the largest part of an archive.",
+    special: "mediaFiles",
+    heavy: true,
+    tables: [],
+  },
+  {
+    id: "users",
+    label: "Users & roles",
+    description:
+      "Accounts and their role assignments. Passwords can never be exported — restored users must reset theirs.",
+    special: "authUsers",
+    tables: [
+      { table: "app_users", pk: "id" },
+      { table: "user_roles", pk: "id", conflict: "user_id,role", requires: ["app_users"] },
+    ],
+  },
+  {
+    id: "email",
+    label: "Email configuration",
+    description:
+      "Sending providers and global email settings. Only the names of secrets are stored — never their values.",
+    tables: [
+      { table: "email_providers", pk: "id", sanitize: ["config", "notes"] },
+      {
+        table: "email_settings",
+        pk: "id",
+        requires: ["email_providers"],
+        sanitize: ["*"],
+        references: [
+          { column: "default_provider_id", table: "email_providers" },
+          { column: "fallback_provider_id", table: "email_providers" },
+        ],
+      },
+    ],
+  },
+  {
+    id: "logs",
+    label: "Logs",
+    description: "Audit log and outgoing email history.",
+    insertOnly: true,
+    heavy: true,
+    tables: [
+      { table: "audit_logs", pk: "id" },
+      { table: "email_logs", pk: "id" },
+    ],
+  },
+];
+
+export const ALL_GROUP_IDS = DATASET_GROUPS.map((g) => g.id);
+export const DEFAULT_GROUP_IDS = DATASET_GROUPS.filter((g) => !g.heavy).map((g) => g.id);
+
+export function groupById(id: string): DatasetGroup | undefined {
+  return DATASET_GROUPS.find((g) => g.id === id);
+}
+
+/** Import order across all groups, respecting foreign keys. */
+export const IMPORT_ORDER: string[] = [
+  "app_users",
+  "user_roles",
+  "pages",
+  "page_versions",
+  "page_publications",
+  "global_sections",
+  "global_section_versions",
+  "content_sections",
+  "block_templates",
+  "page_seo",
+  "redirects",
+  "locale_domains",
+  "site_injections",
+  "email_providers",
+  "email_settings",
+  "forms",
+  "form_versions",
+  "form_settings",
+  "form_submissions",
+  "form_partials",
+  "form_delivery_attempts",
+  "media_meta",
+  "media_focus",
+  "media_trash",
+  "audit_logs",
+  "email_logs",
+];
+
+export type ArchiveManifest = {
+  format: number;
+  schemaVersion: number;
+  createdAt: string;
+  createdBy: string | null;
+  site: string | null;
+  groups: string[];
+  counts: Record<string, number>;
+  mediaFiles: number;
+  mediaBytes: number;
+  /** Files found in the library but excluded because they are not media. */
+  quarantinedMedia?: string[];
+};
+
+export type ImportMode = "merge" | "replace";