@cardinali-studio/adminkit 2.2.25 → 2.2.34

package/dist/functions/delivery-public/migrations/0002_deliveries.sql

@@ -0,0 +1,128 @@
+-- Consegne fotografiche private.
+--
+-- Non sono contenuto editoriale: non passano dal repo, dallo schema del front matter
+-- o da una build Hugo. D1 è la sorgente dello stato; Backblaze B2 contiene soltanto
+-- oggetti immutabili identificati dagli id di queste tabelle.
+
+CREATE TABLE IF NOT EXISTS deliveries (
+  id                TEXT PRIMARY KEY,
+  client_name       TEXT NOT NULL,
+  title             TEXT NOT NULL,
+  description       TEXT NOT NULL DEFAULT '',
+  license_notes     TEXT NOT NULL DEFAULT '',
+  cta_enabled       INTEGER NOT NULL DEFAULT 0,
+  cta_label         TEXT NOT NULL DEFAULT 'Lascia una recensione',
+  cta_url           TEXT NOT NULL DEFAULT '',
+  expires_at        TEXT,
+  status            TEXT NOT NULL DEFAULT 'draft'
+                    CHECK (status IN ('draft','uploading','active','archived','deleted')),
+  version           INTEGER NOT NULL DEFAULT 1,
+  created_at        TEXT NOT NULL,
+  updated_at        TEXT NOT NULL,
+  activated_at      TEXT,
+  deleted_at        TEXT,
+  purge_after       TEXT
+);
+
+CREATE INDEX IF NOT EXISTS deliveries_status_updated
+  ON deliveries(status, updated_at DESC);
+CREATE INDEX IF NOT EXISTS deliveries_expiry
+  ON deliveries(expires_at) WHERE expires_at IS NOT NULL;
+
+CREATE TABLE IF NOT EXISTS delivery_packages (
+  id                TEXT PRIMARY KEY,
+  delivery_id       TEXT NOT NULL REFERENCES deliveries(id) ON DELETE CASCADE,
+  label             TEXT NOT NULL,
+  position          INTEGER NOT NULL DEFAULT 0,
+  gallery_enabled   INTEGER NOT NULL DEFAULT 0,
+  web_enabled       INTEGER NOT NULL DEFAULT 0,
+  state             TEXT NOT NULL DEFAULT 'uploading'
+                    CHECK (state IN ('uploading','ready','failed','deleted')),
+  storage_prefix    TEXT NOT NULL UNIQUE,
+  source_fingerprint TEXT NOT NULL DEFAULT '',
+  originals_key     TEXT,
+  web_key           TEXT,
+  thumbs_key        TEXT,
+  manifest_key      TEXT,
+  manifest_json     TEXT,
+  file_count        INTEGER NOT NULL DEFAULT 0,
+  source_bytes      INTEGER NOT NULL DEFAULT 0,
+  stored_bytes      INTEGER NOT NULL DEFAULT 0,
+  created_at        TEXT NOT NULL,
+  updated_at        TEXT NOT NULL,
+  deleted_at        TEXT,
+  purge_after       TEXT,
+  originals_purge_after TEXT
+);
+
+CREATE INDEX IF NOT EXISTS delivery_packages_delivery
+  ON delivery_packages(delivery_id, position);
+
+CREATE TABLE IF NOT EXISTS delivery_links (
+  id                TEXT PRIMARY KEY,
+  delivery_id       TEXT NOT NULL REFERENCES deliveries(id) ON DELETE CASCADE,
+  label             TEXT NOT NULL DEFAULT 'Link principale',
+  token_hash        TEXT NOT NULL UNIQUE,
+  token_ciphertext  TEXT NOT NULL,
+  pin_ciphertext    TEXT,
+  expires_at        TEXT,
+  revoked_at        TEXT,
+  created_at        TEXT NOT NULL,
+  opened_count      INTEGER NOT NULL DEFAULT 0,
+  last_opened_at    TEXT,
+  download_count    INTEGER NOT NULL DEFAULT 0,
+  last_download_at  TEXT
+);
+
+CREATE INDEX IF NOT EXISTS delivery_links_delivery
+  ON delivery_links(delivery_id, created_at);
+
+CREATE TABLE IF NOT EXISTS delivery_uploads (
+  id                TEXT PRIMARY KEY,
+  delivery_id       TEXT NOT NULL REFERENCES deliveries(id) ON DELETE CASCADE,
+  package_id        TEXT NOT NULL REFERENCES delivery_packages(id) ON DELETE CASCADE,
+  variant           TEXT NOT NULL CHECK (variant IN ('originals','web','thumbs')),
+  object_key        TEXT NOT NULL,
+  b2_upload_id      TEXT NOT NULL,
+  bytes             INTEGER NOT NULL DEFAULT 0,
+  state             TEXT NOT NULL DEFAULT 'uploading'
+                    CHECK (state IN ('uploading','completed','aborted','failed')),
+  created_at        TEXT NOT NULL,
+  updated_at        TEXT NOT NULL,
+  completed_at      TEXT,
+  UNIQUE(package_id, variant)
+);
+
+CREATE TABLE IF NOT EXISTS delivery_upload_parts (
+  upload_id         TEXT NOT NULL REFERENCES delivery_uploads(id) ON DELETE CASCADE,
+  part_number       INTEGER NOT NULL,
+  etag              TEXT NOT NULL,
+  digest            TEXT,
+  size              INTEGER NOT NULL,
+  created_at        TEXT NOT NULL,
+  PRIMARY KEY(upload_id, part_number)
+);
+
+CREATE TABLE IF NOT EXISTS delivery_events (
+  id                INTEGER PRIMARY KEY AUTOINCREMENT,
+  delivery_id       TEXT NOT NULL REFERENCES deliveries(id) ON DELETE CASCADE,
+  link_id           TEXT REFERENCES delivery_links(id) ON DELETE SET NULL,
+  package_id        TEXT REFERENCES delivery_packages(id) ON DELETE SET NULL,
+  kind              TEXT NOT NULL CHECK (kind IN ('open','download_started')),
+  variant           TEXT,
+  created_at        TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS delivery_events_delivery
+  ON delivery_events(delivery_id, created_at DESC);
+
+-- Tentativi PIN: contiene soltanto un hash salato dell'IP e si può potare a ogni
+-- richiesta. Nessun indirizzo di rete viene conservato in chiaro.
+CREATE TABLE IF NOT EXISTS delivery_pin_throttle (
+  link_id           TEXT NOT NULL REFERENCES delivery_links(id) ON DELETE CASCADE,
+  ip_hash           TEXT NOT NULL,
+  seen_at            INTEGER NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS delivery_pin_throttle_lookup
+  ON delivery_pin_throttle(link_id, ip_hash, seen_at);

package/dist/functions/delivery-public/migrations/0003_delivery_quick_hero.sql

@@ -0,0 +1,34 @@
+-- Transfer rapidi, hero specifiche e fallback globali.
+--
+-- `hero_json` contiene soltanto riferimenti ordinati:
+-- - package: una WebP già presente dentro web.zip;
+-- - object: una piccola derivata dedicata registrata in delivery_hero_objects.
+-- Gli oggetti dedicati nascono pending: se il browser scompare prima del commit,
+-- l'housekeeping li elimina invece di lasciarli per sempre nel bucket.
+
+ALTER TABLE deliveries ADD COLUMN hero_json TEXT NOT NULL DEFAULT '[]';
+
+CREATE TABLE IF NOT EXISTS delivery_hero_objects (
+  id                TEXT PRIMARY KEY,
+  delivery_id       TEXT NOT NULL REFERENCES deliveries(id) ON DELETE CASCADE,
+  package_id        TEXT REFERENCES delivery_packages(id) ON DELETE SET NULL,
+  object_key        TEXT NOT NULL UNIQUE,
+  source_name       TEXT NOT NULL DEFAULT '',
+  width             INTEGER NOT NULL DEFAULT 0,
+  height            INTEGER NOT NULL DEFAULT 0,
+  bytes             INTEGER NOT NULL DEFAULT 0,
+  state             TEXT NOT NULL DEFAULT 'pending'
+                    CHECK (state IN ('pending','ready','deleted')),
+  created_at        TEXT NOT NULL,
+  updated_at        TEXT NOT NULL,
+  purge_after       TEXT
+);
+
+CREATE INDEX IF NOT EXISTS delivery_hero_objects_cleanup
+  ON delivery_hero_objects(state, updated_at, purge_after);
+
+CREATE TABLE IF NOT EXISTS delivery_settings (
+  key               TEXT PRIMARY KEY,
+  value_json        TEXT NOT NULL,
+  updated_at        TEXT NOT NULL
+);

package/dist/functions/delivery-public/migrations/0004_delivery_file_expiry.sql

@@ -0,0 +1,9 @@
+-- La pagina della consegna resta raggiungibile anche dopo la scadenza dei byte.
+-- `expires_at` continua a rappresentare l'eventuale scadenza del link/pagina
+-- legacy; `files_expires_at` governa esclusivamente la disponibilità su B2.
+
+ALTER TABLE deliveries ADD COLUMN files_expires_at TEXT;
+
+CREATE INDEX IF NOT EXISTS deliveries_files_expiry
+  ON deliveries(files_expires_at)
+  WHERE files_expires_at IS NOT NULL;

package/dist/functions/delivery-public/migrations/0006_delivery_manifest_v2.sql

@@ -0,0 +1,49 @@
+-- Apply to the consumer's delivery DB AFTER its delivery_packages migration.
+-- Separate from AdminKit's editorial CONTENT_DB migrations. Idempotent.
+CREATE TABLE IF NOT EXISTS delivery_manifest_state (
+  package_id TEXT PRIMARY KEY REFERENCES delivery_packages(id) ON DELETE CASCADE,
+  state TEXT NOT NULL DEFAULT 'uploading' CHECK(state IN ('uploading','sealed','ready')),
+  created_at TEXT NOT NULL,
+  writer_token TEXT,
+  writer_until INTEGER NOT NULL DEFAULT 0,
+  metadata_bytes INTEGER NOT NULL DEFAULT 0 CHECK(metadata_bytes BETWEEN 0 AND 67108864),
+  cursor INTEGER NOT NULL DEFAULT 0,
+  page_count INTEGER NOT NULL DEFAULT 0,
+  root_json TEXT
+);
+CREATE TABLE IF NOT EXISTS delivery_manifest_entries (
+  package_id TEXT NOT NULL REFERENCES delivery_manifest_state(package_id) ON DELETE CASCADE,
+  entry_id INTEGER NOT NULL CHECK(entry_id>=0),
+  name TEXT NOT NULL,
+  has_preview INTEGER NOT NULL DEFAULT 0,
+  requires_variant INTEGER NOT NULL DEFAULT 0,
+  variant_done INTEGER NOT NULL DEFAULT 0,
+  source_bytes INTEGER NOT NULL CHECK(source_bytes>=0),
+  entry_json TEXT NOT NULL CHECK(length(CAST(entry_json AS BLOB))<=131072),
+  PRIMARY KEY(package_id,entry_id), UNIQUE(package_id,name)
+);
+CREATE INDEX IF NOT EXISTS delivery_manifest_gallery ON delivery_manifest_entries(package_id,has_preview,entry_id);
+CREATE TABLE IF NOT EXISTS delivery_manifest_receipts (
+  package_id TEXT NOT NULL REFERENCES delivery_manifest_state(package_id) ON DELETE CASCADE,
+  batch_id TEXT NOT NULL, digest TEXT NOT NULL,
+  PRIMARY KEY(package_id,batch_id)
+);
+CREATE TABLE IF NOT EXISTS delivery_manifest_objects (
+  package_id TEXT NOT NULL REFERENCES delivery_manifest_state(package_id) ON DELETE CASCADE,
+  page_number INTEGER NOT NULL,
+  object_key TEXT NOT NULL UNIQUE, digest TEXT NOT NULL,
+  end_cursor INTEGER NOT NULL, entry_count INTEGER NOT NULL,
+  verified INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY(package_id,page_number)
+);
+
+CREATE TABLE IF NOT EXISTS delivery_manifest_claims (
+  package_id TEXT NOT NULL REFERENCES delivery_manifest_state(package_id) ON DELETE CASCADE,
+  phase TEXT NOT NULL, entry_id INTEGER NOT NULL,
+  PRIMARY KEY(package_id,phase,entry_id)
+);
+CREATE TABLE IF NOT EXISTS delivery_checkpoints (
+  package_id TEXT PRIMARY KEY REFERENCES delivery_manifest_state(package_id) ON DELETE CASCADE,
+  offset INTEGER NOT NULL,
+  checkpoint_json TEXT NOT NULL CHECK(length(CAST(checkpoint_json AS BLOB))<=32768)
+);

package/dist/functions/delivery-public/migrations/0007_delivery_link_aliases.sql

@@ -0,0 +1,8 @@
+-- Old addresses remain aliases of the SAME link: PIN, expiry, revocation and
+-- counters are shared. Only hashes are retained, never plaintext bearer tokens.
+CREATE TABLE IF NOT EXISTS delivery_link_aliases (
+  token_hash TEXT PRIMARY KEY,
+  link_id TEXT NOT NULL REFERENCES delivery_links(id) ON DELETE CASCADE,
+  created_at TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS delivery_link_aliases_link ON delivery_link_aliases(link_id);

package/dist/functions/delivery-public/migrations/0008_delivery_web_format.sql

@@ -0,0 +1,2 @@
+-- Existing archives remain WebP; format is immutable after package creation.
+ALTER TABLE delivery_packages ADD COLUMN web_format TEXT NOT NULL DEFAULT 'webp' CHECK (web_format IN ('webp','jpg'));

package/dist/functions/delivery-public/migrations/0009_delivery_download_labels.sql

@@ -0,0 +1,2 @@
+ALTER TABLE deliveries ADD COLUMN download_originals_label TEXT NOT NULL DEFAULT '';
+ALTER TABLE deliveries ADD COLUMN download_web_label TEXT NOT NULL DEFAULT '';

package/dist/functions/index.js

@@ -114,6 +114,9 @@ export async function handleAdminApi(context, config) {
   /* Le barre di troppo e finali non fanno una rotta diversa: `/assets/` e `/assets` sono la
    * stessa cosa per chi la scrive, e farle divergere produce un 404 che sembra un guasto. */
   const path = url.pathname.slice(PREFIX.length).split("/").filter(Boolean).join("/");
+  if (config?.scope === "delivery" && !["deliveries", "delivery/hero", "delivery/image", "delivery/multipart"].includes(path)) {
+    return json({ ok: false, code: "feature_inactive", error: "Funzione non disponibile in questa installazione." }, 404);
+  }
   const route = ROUTES[path];
   if (!route) return json({ ok: false, error: "rotta sconosciuta" }, 404);
   if (path.startsWith("content/") && contentPersistenceMode() !== "d1") {

package/dist/index.d.ts

@@ -15,3 +15,4 @@ export * from "./release.js";
 export * from "./deployment.js";
 export * from "./media.js";
 export * from "./site-access.js";
+export * from "./direct-publication.js";

package/dist/index.js

@@ -15,3 +15,4 @@ export * from "./release.js";
 export * from "./deployment.js";
 export * from "./media.js";
 export * from "./site-access.js";
+export * from "./direct-publication.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cardinali-studio/adminkit",
-  "version": "2.2.25",
+  "version": "2.2.34",
   "type": "module",
   "description": "Motore riusabile di un pannello di amministrazione per siti Hugo su Cloudflare Pages: codec del front matter guidato dallo schema, form React, libreria media su R2. NIENTE di specifico di un sito qui dentro.",
   "license": "0BSD",
@@ -35,7 +35,11 @@
       "types": "./dist/materializer.d.ts",
       "default": "./dist/materializer.js"
     },
-    "./functions/*": "./dist/functions/*"
+    "./functions/*": "./dist/functions/*",
+    "./delivery": {
+      "types": "./dist/app/delivery.d.ts",
+      "default": "./dist/app/delivery.js"
+    }
   },
   "files": [
     "dist"
@@ -43,7 +47,8 @@
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.json && cp src/theme.css dist/theme.css && cp src/app/app.css dist/app/app.css && cp src/app/next.css dist/app/next.css && cp -R src/functions dist/functions && cp -R src/migrations dist/migrations",
     "test": "node --test \"test/*.test.js\"",
-    "check": "npm run build && npm test"
+    "check": "npm run build && npm test",
+    "test:e2e": "playwright test"
   },
   "publishConfig": {
     "access": "public"
@@ -91,8 +96,10 @@
     "@dnd-kit/modifiers": "^9.0.0",
     "@dnd-kit/sortable": "^10.0.0",
     "@dnd-kit/utilities": "^3.2.2",
+    "@playwright/test": "^1.63.0",
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.4",
+    "esbuild": "^0.28.2",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
     "react-hook-form": "^7.85.0",