@htmless/core 0.1.0

package/prisma/schema.prisma

@@ -0,0 +1,530 @@
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "postgresql"
+  url      = env("DATABASE_URL")
+}
+
+// ─── Spaces (Multi-tenancy) ───
+
+model Space {
+  id               String   @id @default(cuid())
+  name             String
+  slug             String   @unique
+  whiteLabelConfig Json?
+  createdAt        DateTime @default(now())
+  updatedAt        DateTime @updatedAt
+
+  contentTypes       ContentType[]
+  entries            Entry[]
+  assets             Asset[]
+  apiTokens          ApiToken[]
+  previewTokens      PreviewToken[]
+  webhooks           Webhook[]
+  roleBindings       RoleBinding[]
+  publishedDocuments PublishedDocument[]
+  blockDefinitions   BlockDefinition[]
+  patterns           Pattern[]
+  auditLogs          AuditLog[]
+  locales            Locale[]
+  taxonomies         Taxonomy[]
+  comments           Comment[]
+  environments       Environment[]
+  redirects          Redirect[]
+  extensionConfigs   ExtensionConfig[]
+
+  @@map("spaces")
+}
+
+// ─── Users & Auth ───
+
+model User {
+  id            String   @id @default(cuid())
+  email         String   @unique
+  passwordHash  String
+  name          String
+  avatarUrl     String?
+  createdAt     DateTime @default(now())
+  updatedAt     DateTime @updatedAt
+
+  roleBindings   RoleBinding[]
+  apiTokens      ApiToken[]
+  previewTokens  PreviewToken[]
+  entryVersions  EntryVersion[]
+  auditLogs      AuditLog[]
+  comments       Comment[]
+
+  @@map("users")
+}
+
+model Role {
+  id           String   @id @default(cuid())
+  name         String   @unique // admin, editor, author, viewer
+  permissions  Json     // { "entry.create": true, "entry.publish": true, ... }
+  builtIn      Boolean  @default(false)
+  createdAt    DateTime @default(now())
+
+  roleBindings RoleBinding[]
+
+  @@map("roles")
+}
+
+model RoleBinding {
+  id        String   @id @default(cuid())
+  userId    String
+  roleId    String
+  spaceId   String
+  createdAt DateTime @default(now())
+
+  user  User  @relation(fields: [userId], references: [id], onDelete: Cascade)
+  role  Role  @relation(fields: [roleId], references: [id], onDelete: Cascade)
+  space Space @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+
+  @@unique([userId, roleId, spaceId])
+  @@map("role_bindings")
+}
+
+model ApiToken {
+  id          String    @id @default(cuid())
+  name        String
+  tokenHash   String    @unique
+  scopes      Json      // ["cda:read", "cma:write"]
+  spaceId     String
+  createdById String
+  expiresAt   DateTime?
+  lastUsedAt  DateTime?
+  createdAt   DateTime  @default(now())
+
+  space     Space @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+  createdBy User  @relation(fields: [createdById], references: [id])
+
+  @@map("api_tokens")
+}
+
+model PreviewToken {
+  id          String    @id @default(cuid())
+  tokenHash   String    @unique
+  spaceId     String
+  entryId     String?
+  route       String?
+  createdById String
+  expiresAt   DateTime
+  createdAt   DateTime  @default(now())
+
+  space     Space  @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+  entry     Entry? @relation(fields: [entryId], references: [id])
+  createdBy User   @relation(fields: [createdById], references: [id])
+
+  @@map("preview_tokens")
+}
+
+// ─── Schema Registry ───
+
+model ContentType {
+  id          String   @id @default(cuid())
+  spaceId     String
+  key         String   // "article", "page", "product"
+  name        String   // "Article"
+  description String?
+  version     Int      @default(1)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  space   Space   @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+  fields  Field[]
+  entries Entry[]
+
+  @@unique([spaceId, key])
+  @@map("content_types")
+}
+
+model Field {
+  id              String   @id @default(cuid())
+  contentTypeId   String
+  key             String   // "title", "body", "heroImage"
+  name            String   // "Title"
+  type            String   // text, richtext, number, boolean, date, media, reference, json, slug, enum
+  required        Boolean  @default(false)
+  unique          Boolean  @default(false)
+  localized       Boolean  @default(false)
+  validations     Json?    // { minLength: 1, maxLength: 255, ... }
+  defaultValue    Json?
+  enumValues      Json?    // ["draft", "active", "archived"]
+  referenceTarget String?  // content type key for reference fields
+  sortOrder       Int      @default(0)
+  createdAt       DateTime @default(now())
+  updatedAt       DateTime @updatedAt
+
+  contentType ContentType @relation(fields: [contentTypeId], references: [id], onDelete: Cascade)
+
+  @@unique([contentTypeId, key])
+  @@map("fields")
+}
+
+// ─── Content ───
+
+model Entry {
+  id            String   @id @default(cuid())
+  spaceId       String
+  contentTypeId String
+  slug          String
+  createdAt     DateTime @default(now())
+  updatedAt     DateTime @updatedAt
+
+  space       Space        @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+  contentType ContentType  @relation(fields: [contentTypeId], references: [id])
+  versions    EntryVersion[]
+  state       EntryState?
+  previewTokens PreviewToken[]
+
+  @@unique([spaceId, contentTypeId, slug])
+  @@map("entries")
+}
+
+model EntryVersion {
+  id          String   @id @default(cuid())
+  entryId     String
+  kind        String   // "draft" | "published"
+  data        Json     // { title: "Hello", body: [...] }
+  etag        String
+  createdById String
+  createdAt   DateTime @default(now())
+
+  entry     Entry @relation(fields: [entryId], references: [id], onDelete: Cascade)
+  createdBy User  @relation(fields: [createdById], references: [id])
+
+  // Reverse relations for entry state
+  draftStates     EntryState[] @relation("DraftVersion")
+  publishedStates EntryState[] @relation("PublishedVersion")
+
+  @@index([entryId, createdAt(sort: Desc)])
+  @@map("entry_versions")
+}
+
+model EntryState {
+  id                    String    @id @default(cuid())
+  entryId               String    @unique
+  status                String    @default("draft") // draft, published, scheduled, archived
+  draftVersionId        String
+  publishedVersionId    String?
+  scheduledAt           DateTime?
+  scheduledUnpublishAt  DateTime?
+  updatedAt             DateTime  @updatedAt
+
+  entry            Entry        @relation(fields: [entryId], references: [id], onDelete: Cascade)
+  draftVersion     EntryVersion @relation("DraftVersion", fields: [draftVersionId], references: [id])
+  publishedVersion EntryVersion? @relation("PublishedVersion", fields: [publishedVersionId], references: [id])
+
+  @@map("entry_state")
+}
+
+// ─── Media ───
+
+model Asset {
+  id          String   @id @default(cuid())
+  spaceId     String
+  filename    String
+  mimeType    String
+  bytes       Int
+  width       Int?
+  height      Int?
+  alt         String?
+  caption     String?
+  storageKey  String   // path in storage provider
+  checksum    String?
+  createdById String?
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  space  Space @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+
+  @@map("assets")
+}
+
+// ─── Denormalized Read Model (CDA Performance) ───
+
+model PublishedDocument {
+  id              String   @id @default(cuid())
+  spaceId         String
+  entryId         String   @unique
+  contentTypeKey  String
+  slug            String
+  data            Json     // Pre-resolved JSON with references expanded
+  publishedAt     DateTime
+  etag            String
+  createdAt       DateTime @default(now())
+  updatedAt       DateTime @updatedAt
+
+  space Space @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+
+  @@unique([spaceId, contentTypeKey, slug])
+  @@index([spaceId, contentTypeKey])
+  @@index([spaceId, slug])
+  @@map("published_documents")
+}
+
+// ─── Blocks ───
+
+model BlockDefinition {
+  id               String   @id @default(cuid())
+  spaceId          String
+  key              String   // "paragraph", "heading", "image", "callout"
+  version          String   @default("1.0.0")
+  title            String
+  description      String?
+  icon             String?  // emoji or icon identifier
+  attributesSchema Json     // JSON Schema for block attributes
+  allowedChildren  Json?    // array of block keys allowed as children, null = any
+  builtIn          Boolean  @default(false) // core blocks shipped with HTMLess
+  createdAt        DateTime @default(now())
+  updatedAt        DateTime @updatedAt
+
+  space Space @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+
+  @@unique([spaceId, key, version])
+  @@map("block_definitions")
+}
+
+model Pattern {
+  id          String   @id @default(cuid())
+  spaceId     String
+  title       String
+  description String?
+  blockTree   Json     // array of BlockInstance objects
+  typeKeys    Json?    // content type keys this pattern applies to, null = any
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  space Space @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+
+  @@map("patterns")
+}
+
+// ─── Webhooks ───
+
+model Webhook {
+  id            String   @id @default(cuid())
+  spaceId       String
+  url           String
+  events        Json     // ["entry.published", "asset.created"]
+  signingSecret String
+  active        Boolean  @default(true)
+  createdAt     DateTime @default(now())
+  updatedAt     DateTime @updatedAt
+
+  space      Space              @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+  deliveries WebhookDelivery[]
+
+  @@map("webhooks")
+}
+
+model WebhookDelivery {
+  id            String   @id @default(cuid())
+  webhookId     String
+  eventType     String
+  payload       Json
+  statusCode    Int?
+  responseTime  Int?     // ms
+  attempt       Int      @default(1)
+  success       Boolean  @default(false)
+  error         String?
+  createdAt     DateTime @default(now())
+
+  webhook Webhook @relation(fields: [webhookId], references: [id], onDelete: Cascade)
+
+  @@index([webhookId, createdAt(sort: Desc)])
+  @@map("webhook_deliveries")
+}
+
+// ─── Audit ───
+
+model AuditLog {
+  id        String   @id @default(cuid())
+  spaceId   String
+  userId    String?
+  action    String   // "entry.created", "schema.updated", "user.login"
+  resource  String?  // "entry:ent_123", "contentType:article"
+  meta      Json?
+  createdAt DateTime @default(now())
+
+  space Space @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+  user  User? @relation(fields: [userId], references: [id])
+
+  @@index([spaceId, createdAt(sort: Desc)])
+  @@map("audit_logs")
+}
+
+// ─── Redirects ───
+
+model Redirect {
+  id         String   @id @default(cuid())
+  spaceId    String
+  fromSlug   String
+  toSlug     String
+  statusCode Int      @default(301) // 301 or 302
+  createdAt  DateTime @default(now())
+
+  space Space @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+
+  @@unique([spaceId, fromSlug])
+  @@map("redirects")
+}
+
+// ─── Localization ───
+
+model Locale {
+  id        String   @id @default(cuid())
+  spaceId   String
+  code      String   // "en", "es", "fr", "de"
+  name      String   // "English", "Spanish"
+  isDefault Boolean  @default(false)
+  createdAt DateTime @default(now())
+
+  space Space @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+
+  @@unique([spaceId, code])
+  @@map("locales")
+}
+
+// ─── Taxonomies ───
+
+model Taxonomy {
+  id           String   @id @default(cuid())
+  spaceId      String
+  key          String
+  name         String
+  hierarchical Boolean  @default(false)
+  createdAt    DateTime @default(now())
+  updatedAt    DateTime @updatedAt
+
+  space Space          @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+  terms TaxonomyTerm[]
+
+  @@unique([spaceId, key])
+  @@map("taxonomies")
+}
+
+model TaxonomyTerm {
+  id         String   @id @default(cuid())
+  taxonomyId String
+  slug       String
+  name       String
+  parentId   String?
+  sortOrder  Int      @default(0)
+  createdAt  DateTime @default(now())
+
+  taxonomy Taxonomy       @relation(fields: [taxonomyId], references: [id], onDelete: Cascade)
+  parent   TaxonomyTerm?  @relation("TermParent", fields: [parentId], references: [id])
+  children TaxonomyTerm[] @relation("TermParent")
+
+  @@unique([taxonomyId, slug])
+  @@map("taxonomy_terms")
+}
+
+// ─── Editorial Collaboration ───
+
+model Comment {
+  id        String   @id @default(cuid())
+  spaceId   String
+  entryId   String
+  userId    String
+  body      String
+  parentId  String?
+  resolved  Boolean  @default(false)
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  space   Space    @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+  user    User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+  parent  Comment? @relation("CommentThread", fields: [parentId], references: [id], onDelete: Cascade)
+  replies Comment[] @relation("CommentThread")
+
+  @@index([entryId, createdAt])
+  @@map("comments")
+}
+
+// ─── Environments ───
+
+model Environment {
+  id        String   @id @default(cuid())
+  spaceId   String
+  name      String   // "Production", "Staging", "Development"
+  slug      String   // "production", "staging", "development"
+  isDefault Boolean  @default(false)
+  createdAt DateTime @default(now())
+
+  space Space @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+
+  @@unique([spaceId, slug])
+  @@map("environments")
+}
+
+// ─── Extension Config Storage ───
+
+model ExtensionConfig {
+  id           String   @id @default(cuid())
+  spaceId      String
+  extensionKey String
+  configKey    String
+  value        Json
+  createdAt    DateTime @default(now())
+  updatedAt    DateTime @updatedAt
+
+  space Space @relation(fields: [spaceId], references: [id], onDelete: Cascade)
+
+  @@unique([spaceId, extensionKey, configKey])
+  @@map("extension_configs")
+}
+
+// ─── Marketplace ───
+
+model MarketplaceListing {
+  id              String    @id @default(cuid())
+  extensionKey    String    @unique
+  name            String
+  description     String
+  longDescription String?
+  author          String
+  authorEmail     String?
+  repository      String?
+  homepage        String?
+  iconUrl         String?
+  screenshotUrls  Json?     // string[]
+  category        String    // ai, analytics, commerce, media, seo, notifications, integration, utility
+  tags            Json?     // string[]
+  pricing         String    @default("free") // free, paid, freemium
+  priceMonthly    Int?      // cents
+  license         String    @default("MIT")
+  version         String
+  manifest        Json      // full ExtensionManifest
+  downloads       Int       @default(0)
+  rating          Float?
+  reviewCount     Int       @default(0)
+  status          String    @default("pending") // pending, approved, rejected, suspended
+  rejectionReason String?
+  submittedAt     DateTime  @default(now())
+  approvedAt      DateTime?
+  createdAt       DateTime  @default(now())
+  updatedAt       DateTime  @updatedAt
+
+  reviews MarketplaceReview[]
+
+  @@map("marketplace_listings")
+}
+
+model MarketplaceReview {
+  id        String   @id @default(cuid())
+  listingId String
+  userId    String
+  rating    Int      // 1-5
+  title     String?
+  body      String?
+  createdAt DateTime @default(now())
+
+  listing MarketplaceListing @relation(fields: [listingId], references: [id], onDelete: Cascade)
+
+  @@unique([listingId, userId])
+  @@map("marketplace_reviews")
+}

package/prisma/seed.ts

@@ -0,0 +1,154 @@
+import { PrismaClient } from '@prisma/client';
+import bcrypt from 'bcryptjs';
+
+const prisma = new PrismaClient();
+
+async function main() {
+  // Create built-in roles
+  const adminRole = await prisma.role.upsert({
+    where: { name: 'admin' },
+    update: {},
+    create: {
+      name: 'admin',
+      builtIn: true,
+      permissions: {
+        'space.manage': true,
+        'schema.admin': true,
+        'entry.create': true,
+        'entry.read': true,
+        'entry.update': true,
+        'entry.delete': true,
+        'entry.publish': true,
+        'asset.upload': true,
+        'asset.delete': true,
+        'webhook.manage': true,
+        'token.manage': true,
+        'user.manage': true,
+      },
+    },
+  });
+
+  const editorRole = await prisma.role.upsert({
+    where: { name: 'editor' },
+    update: {},
+    create: {
+      name: 'editor',
+      builtIn: true,
+      permissions: {
+        'entry.create': true,
+        'entry.read': true,
+        'entry.update': true,
+        'entry.publish': true,
+        'asset.upload': true,
+      },
+    },
+  });
+
+  const authorRole = await prisma.role.upsert({
+    where: { name: 'author' },
+    update: {},
+    create: {
+      name: 'author',
+      builtIn: true,
+      permissions: {
+        'entry.create': true,
+        'entry.read': true,
+        'entry.update': true,
+        'asset.upload': true,
+      },
+    },
+  });
+
+  await prisma.role.upsert({
+    where: { name: 'viewer' },
+    update: {},
+    create: {
+      name: 'viewer',
+      builtIn: true,
+      permissions: {
+        'entry.read': true,
+      },
+    },
+  });
+
+  // Create default admin user
+  const passwordHash = await bcrypt.hash('admin123', 12);
+  const admin = await prisma.user.upsert({
+    where: { email: 'admin@htmless.com' },
+    update: {},
+    create: {
+      email: 'admin@htmless.com',
+      name: 'Admin',
+      passwordHash,
+    },
+  });
+
+  // Create default space
+  const space = await prisma.space.upsert({
+    where: { slug: 'default' },
+    update: {},
+    create: {
+      name: 'Default Space',
+      slug: 'default',
+    },
+  });
+
+  // Bind admin to space
+  await prisma.roleBinding.upsert({
+    where: {
+      userId_roleId_spaceId: {
+        userId: admin.id,
+        roleId: adminRole.id,
+        spaceId: space.id,
+      },
+    },
+    update: {},
+    create: {
+      userId: admin.id,
+      roleId: adminRole.id,
+      spaceId: space.id,
+    },
+  });
+
+  // Create sample content type
+  const articleType = await prisma.contentType.upsert({
+    where: { spaceId_key: { spaceId: space.id, key: 'article' } },
+    update: {},
+    create: {
+      spaceId: space.id,
+      key: 'article',
+      name: 'Article',
+      description: 'Blog articles and posts',
+    },
+  });
+
+  // Create fields for article
+  const fields = [
+    { key: 'title', name: 'Title', type: 'text', required: true, sortOrder: 0 },
+    { key: 'slug', name: 'Slug', type: 'slug', required: true, unique: true, sortOrder: 1 },
+    { key: 'excerpt', name: 'Excerpt', type: 'text', required: false, sortOrder: 2 },
+    { key: 'body', name: 'Body', type: 'richtext', required: true, sortOrder: 3 },
+    { key: 'featuredImage', name: 'Featured Image', type: 'media', required: false, sortOrder: 4 },
+  ];
+
+  for (const field of fields) {
+    await prisma.field.upsert({
+      where: { contentTypeId_key: { contentTypeId: articleType.id, key: field.key } },
+      update: {},
+      create: {
+        contentTypeId: articleType.id,
+        ...field,
+      },
+    });
+  }
+
+  console.log('Seed complete:');
+  console.log(`  Roles: admin, editor, author, viewer`);
+  console.log(`  User: admin@htmless.com (password: admin123)`);
+  console.log(`  Space: ${space.slug} (${space.id})`);
+  console.log(`  Content Type: article with ${fields.length} fields`);
+}
+
+main()
+  .catch(console.error)
+  .finally(() => prisma.$disconnect());