@infuro/cms-core 1.0.4 → 1.0.5

package/dist/api.cjs

@@ -201,14 +201,156 @@ function createCrudHandler(dataSource, entityMap, options) {
       if (!resource || !entity) {
         return json({ error: "Invalid resource" }, { status: 400 });
       }
-      const repo = dataSource.getRepository(entity);
       const { searchParams } = new URL(req.url);
       const page = Number(searchParams.get("page")) || 1;
-      const limit = Number(searchParams.get("limit")) || 10;
+      const limit = Math.min(Number(searchParams.get("limit")) || 10, 100);
       const skip = (page - 1) * limit;
-      const sortField = searchParams.get("sortField") || "createdAt";
+      const sortFieldRaw = searchParams.get("sortField") || "createdAt";
       const sortOrder = searchParams.get("sortOrder") === "desc" ? "DESC" : "ASC";
       const search = searchParams.get("search");
+      if (resource === "orders") {
+        const repo2 = dataSource.getRepository(entity);
+        const allowedSort = ["id", "orderNumber", "contactId", "status", "total", "currency", "createdAt", "updatedAt"];
+        const sortField = allowedSort.includes(sortFieldRaw) ? sortFieldRaw : "createdAt";
+        const sortOrderOrders = searchParams.get("sortOrder") === "asc" ? "ASC" : "DESC";
+        const statusFilter = searchParams.get("status")?.trim();
+        const dateFrom = searchParams.get("dateFrom")?.trim();
+        const dateTo = searchParams.get("dateTo")?.trim();
+        const paymentRef = searchParams.get("paymentRef")?.trim();
+        let orderIdsFromPayment = null;
+        if (paymentRef && entityMap["payments"]) {
+          const paymentRepo = dataSource.getRepository(entityMap["payments"]);
+          const payments = await paymentRepo.createQueryBuilder("p").select("p.orderId").where("p.externalReference = :ref", { ref: paymentRef }).orWhere("p.metadata->>'razorpayPaymentId' = :ref", { ref: paymentRef }).getRawMany();
+          orderIdsFromPayment = payments.map((r) => r.orderId);
+          if (orderIdsFromPayment.length === 0) {
+            return json({ total: 0, page, limit, totalPages: 0, data: [] });
+          }
+        }
+        const qb = repo2.createQueryBuilder("order").leftJoinAndSelect("order.contact", "contact").leftJoinAndSelect("order.items", "items").leftJoinAndSelect("items.product", "product").leftJoinAndSelect("product.collection", "collection").orderBy(`order.${sortField}`, sortOrderOrders).skip(skip).take(limit);
+        if (search && typeof search === "string" && search.trim()) {
+          const term = `%${search.trim()}%`;
+          qb.andWhere(
+            "(order.orderNumber ILIKE :term OR contact.name ILIKE :term OR contact.email ILIKE :term)",
+            { term }
+          );
+        }
+        if (statusFilter) qb.andWhere("order.status = :status", { status: statusFilter });
+        if (dateFrom) qb.andWhere("order.createdAt >= :dateFrom", { dateFrom: /* @__PURE__ */ new Date(dateFrom + "T00:00:00.000Z") });
+        if (dateTo) qb.andWhere("order.createdAt <= :dateTo", { dateTo: /* @__PURE__ */ new Date(dateTo + "T23:59:59.999Z") });
+        if (orderIdsFromPayment && orderIdsFromPayment.length) qb.andWhere("order.id IN (:...orderIds)", { orderIds: orderIdsFromPayment });
+        const [rows, total2] = await qb.getManyAndCount();
+        const data2 = rows.map((order) => {
+          const contact = order.contact;
+          const items = order.items ?? [];
+          const itemsSummary = items.map((i) => {
+            const label = i.product?.collection?.name ?? i.product?.name ?? "Product";
+            return `${label} \xD7 ${i.quantity}`;
+          }).join(", ") || "\u2014";
+          return {
+            ...order,
+            contact: contact ? { id: contact.id, name: contact.name, email: contact.email, phone: contact.phone } : null,
+            itemsSummary
+          };
+        });
+        return json({ total: total2, page, limit, totalPages: Math.ceil(total2 / limit), data: data2 });
+      }
+      if (resource === "payments") {
+        const repo2 = dataSource.getRepository(entity);
+        const allowedSort = ["id", "orderId", "amount", "currency", "status", "method", "paidAt", "createdAt", "updatedAt"];
+        const sortField = allowedSort.includes(sortFieldRaw) ? sortFieldRaw : "createdAt";
+        const sortOrderPayments = searchParams.get("sortOrder") === "asc" ? "ASC" : "DESC";
+        const statusFilter = searchParams.get("status")?.trim();
+        const dateFrom = searchParams.get("dateFrom")?.trim();
+        const dateTo = searchParams.get("dateTo")?.trim();
+        const methodFilter = searchParams.get("method")?.trim();
+        const orderNumberParam = searchParams.get("orderNumber")?.trim();
+        const qb = repo2.createQueryBuilder("payment").leftJoinAndSelect("payment.order", "ord").leftJoinAndSelect("ord.contact", "orderContact").leftJoinAndSelect("payment.contact", "contact").orderBy(`payment.${sortField}`, sortOrderPayments).skip(skip).take(limit);
+        if (search && typeof search === "string" && search.trim()) {
+          const term = `%${search.trim()}%`;
+          qb.andWhere(
+            "(orderContact.name ILIKE :term OR orderContact.email ILIKE :term OR contact.name ILIKE :term OR contact.email ILIKE :term)",
+            { term }
+          );
+        }
+        if (statusFilter) qb.andWhere("payment.status = :status", { status: statusFilter });
+        if (dateFrom) qb.andWhere("payment.createdAt >= :dateFrom", { dateFrom: /* @__PURE__ */ new Date(dateFrom + "T00:00:00.000Z") });
+        if (dateTo) qb.andWhere("payment.createdAt <= :dateTo", { dateTo: /* @__PURE__ */ new Date(dateTo + "T23:59:59.999Z") });
+        if (methodFilter) qb.andWhere("payment.method = :method", { method: methodFilter });
+        if (orderNumberParam) qb.andWhere("ord.orderNumber ILIKE :orderNumber", { orderNumber: `%${orderNumberParam}%` });
+        const [rows, total2] = await qb.getManyAndCount();
+        const data2 = rows.map((payment) => {
+          const order = payment.order;
+          const orderContact = order?.contact;
+          const contact = payment.contact;
+          const customer = orderContact ?? contact;
+          return {
+            ...payment,
+            order: order ? { id: order.id, orderNumber: order.orderNumber, contact: orderContact ? { name: orderContact.name, email: orderContact.email } : null } : null,
+            contact: customer ? { id: customer.id, name: customer.name, email: customer.email } : null
+          };
+        });
+        return json({ total: total2, page, limit, totalPages: Math.ceil(total2 / limit), data: data2 });
+      }
+      if (resource === "products") {
+        const repo2 = dataSource.getRepository(entity);
+        const statusFilter = searchParams.get("status")?.trim();
+        const inventory = searchParams.get("inventory")?.trim();
+        const productWhere = {};
+        if (statusFilter) productWhere.status = statusFilter;
+        if (inventory === "in_stock") productWhere.quantity = (0, import_typeorm.MoreThan)(0);
+        if (inventory === "out_of_stock") productWhere.quantity = 0;
+        if (search && typeof search === "string" && search.trim()) {
+          productWhere.name = (0, import_typeorm.ILike)(`%${search.trim()}%`);
+        }
+        const [data2, total2] = await repo2.findAndCount({
+          where: Object.keys(productWhere).length ? productWhere : void 0,
+          skip,
+          take: limit,
+          order: { [sortFieldRaw]: sortOrder }
+        });
+        return json({ total: total2, page, limit, totalPages: Math.ceil(total2 / limit), data: data2 });
+      }
+      if (resource === "contacts") {
+        const repo2 = dataSource.getRepository(entity);
+        const allowedSort = ["id", "name", "email", "createdAt", "type"];
+        const sortField = allowedSort.includes(sortFieldRaw) ? sortFieldRaw : "createdAt";
+        const sortOrderContacts = searchParams.get("sortOrder") === "asc" ? "ASC" : "DESC";
+        const typeFilter2 = searchParams.get("type")?.trim();
+        const orderIdParam = searchParams.get("orderId")?.trim();
+        const includeSummary = searchParams.get("includeSummary") === "1";
+        const qb = repo2.createQueryBuilder("contact").orderBy(`contact.${sortField}`, sortOrderContacts).skip(skip).take(limit);
+        if (search && typeof search === "string" && search.trim()) {
+          const term = `%${search.trim()}%`;
+          qb.andWhere("(contact.name ILIKE :term OR contact.email ILIKE :term OR contact.phone ILIKE :term)", { term });
+        }
+        if (typeFilter2) qb.andWhere("contact.type = :type", { type: typeFilter2 });
+        if (orderIdParam) {
+          const orderId = Number(orderIdParam);
+          if (!Number.isNaN(orderId)) {
+            qb.andWhere('contact.id IN (SELECT "contactId" FROM orders WHERE id = :orderId)', { orderId });
+          }
+        }
+        if (includeSummary && entityMap["orders"] && entityMap["payments"]) {
+          qb.loadRelationCountAndMap("contact._orderCount", "contact.orders");
+          const [rows, total3] = await qb.getManyAndCount();
+          const contactIds = rows.map((c) => c.id);
+          const paymentRepo = dataSource.getRepository(entityMap["payments"]);
+          const paidByContact = await paymentRepo.createQueryBuilder("p").select("p.contactId", "contactId").addSelect("COALESCE(SUM(CAST(p.amount AS DECIMAL)), 0)", "total").where("p.contactId IN (:...ids)", { ids: contactIds.length ? contactIds : [0] }).andWhere("p.status = :status", { status: "completed" }).groupBy("p.contactId").getRawMany();
+          const totalPaidMap = new Map(paidByContact.map((r) => [r.contactId, Number(r.total)]));
+          const data3 = rows.map((c) => {
+            const { _orderCount, ...rest } = c;
+            return {
+              ...rest,
+              orderCount: _orderCount ?? 0,
+              totalPaid: totalPaidMap.get(rest.id) ?? 0
+            };
+          });
+          return json({ total: total3, page, limit, totalPages: Math.ceil(total3 / limit), data: data3 });
+        }
+        const [data2, total2] = await qb.getManyAndCount();
+        return json({ total: total2, page, limit, totalPages: Math.ceil(total2 / limit), data: data2 });
+      }
+      const repo = dataSource.getRepository(entity);
       const typeFilter = searchParams.get("type");
       let where = {};
       if (resource === "media") {
@@ -222,7 +364,7 @@ function createCrudHandler(dataSource, entityMap, options) {
       const [data, total] = await repo.findAndCount({
         skip,
         take: limit,
-        order: { [sortField]: sortOrder },
+        order: { [sortFieldRaw]: sortOrder },
         where
       });
       return json({ total, page, limit, totalPages: Math.ceil(total / limit), data });
@@ -242,6 +384,107 @@ function createCrudHandler(dataSource, entityMap, options) {
       sanitizeBodyForEntity(repo, body);
       const created = await repo.save(repo.create(body));
       return json(created, { status: 201 });
+    },
+    async GET_METADATA(req, resource) {
+      const authError = await requireAuth(req);
+      if (authError) return authError;
+      const entity = entityMap[resource];
+      if (!resource || !entity) {
+        return json({ error: "Invalid resource" }, { status: 400 });
+      }
+      const repo = dataSource.getRepository(entity);
+      const meta = repo.metadata;
+      const uniqueFromIndices = /* @__PURE__ */ new Set();
+      for (const idx of meta.indices) {
+        if (idx.isUnique && idx.columns.length === 1) {
+          uniqueFromIndices.add(idx.columns[0].propertyName);
+        }
+      }
+      for (const uniq of meta.uniques) {
+        if (uniq.columns.length === 1) {
+          uniqueFromIndices.add(uniq.columns[0].propertyName);
+        }
+      }
+      const columns = meta.columns.map((col) => ({
+        name: col.propertyName,
+        type: typeof col.type === "string" ? col.type : col.type?.name ?? "unknown",
+        nullable: col.isNullable,
+        isUnique: uniqueFromIndices.has(col.propertyName),
+        isPrimary: col.isPrimary,
+        default: col.default
+      }));
+      const uniqueColumns = [...uniqueFromIndices];
+      return json({ columns, uniqueColumns });
+    },
+    async BULK_POST(req, resource) {
+      const authError = await requireAuth(req);
+      if (authError) return authError;
+      const entity = entityMap[resource];
+      if (!resource || !entity) {
+        return json({ error: "Invalid resource" }, { status: 400 });
+      }
+      const body = await req.json();
+      const { records, upsertKey = "id" } = body;
+      if (!Array.isArray(records) || records.length === 0) {
+        return json({ error: "Records array is required" }, { status: 400 });
+      }
+      const repo = dataSource.getRepository(entity);
+      for (const record of records) {
+        sanitizeBodyForEntity(repo, record);
+      }
+      try {
+        const result = await repo.upsert(records, {
+          conflictPaths: [upsertKey],
+          skipUpdateIfNoValuesChanged: true
+        });
+        return json({
+          success: true,
+          imported: result.identifiers.length,
+          identifiers: result.identifiers
+        });
+      } catch (error) {
+        const message = error instanceof Error ? error.message : "Bulk import failed";
+        return json({ error: message }, { status: 400 });
+      }
+    },
+    async GET_EXPORT(req, resource) {
+      const authError = await requireAuth(req);
+      if (authError) return authError;
+      const entity = entityMap[resource];
+      if (!resource || !entity) {
+        return json({ error: "Invalid resource" }, { status: 400 });
+      }
+      const { searchParams } = new URL(req.url);
+      const format = searchParams.get("format") || "csv";
+      const repo = dataSource.getRepository(entity);
+      const meta = repo.metadata;
+      const hasDeleted = meta.columns.some((c) => c.propertyName === "deleted");
+      const where = hasDeleted ? { deleted: false } : {};
+      const data = await repo.find({ where });
+      const excludeCols = /* @__PURE__ */ new Set(["deletedAt", "deletedBy", "deleted"]);
+      const columns = meta.columns.filter((c) => !excludeCols.has(c.propertyName)).map((c) => c.propertyName);
+      if (format === "json") {
+        return json(data);
+      }
+      const escapeCSV = (val) => {
+        if (val === null || val === void 0) return "";
+        const str = typeof val === "object" ? JSON.stringify(val) : String(val);
+        if (str.includes(",") || str.includes('"') || str.includes("\n")) {
+          return `"${str.replace(/"/g, '""')}"`;
+        }
+        return str;
+      };
+      const header = columns.join(",");
+      const rows = data.map(
+        (row) => columns.map((col) => escapeCSV(row[col])).join(",")
+      );
+      const csv = [header, ...rows].join("\n");
+      return new Response(csv, {
+        headers: {
+          "Content-Type": "text/csv; charset=utf-8",
+          "Content-Disposition": `attachment; filename="${resource}.csv"`
+        }
+      });
     }
   };
 }
@@ -254,6 +497,44 @@ function createCrudByIdHandler(dataSource, entityMap, options) {
       const entity = entityMap[resource];
       if (!entity) return json({ error: "Invalid resource" }, { status: 400 });
       const repo = dataSource.getRepository(entity);
+      if (resource === "orders") {
+        const order = await repo.findOne({
+          where: { id: Number(id) },
+          relations: ["contact", "billingAddress", "shippingAddress", "items", "items.product", "items.product.collection", "payments"]
+        });
+        if (!order) return json({ message: "Not found" }, { status: 404 });
+        return json(order);
+      }
+      if (resource === "contacts") {
+        const contact = await repo.findOne({
+          where: { id: Number(id) },
+          relations: ["form_submissions", "form_submissions.form", "orders", "payments", "addresses"]
+        });
+        if (!contact) return json({ message: "Not found" }, { status: 404 });
+        const orders = contact.orders ?? [];
+        const payments = contact.payments ?? [];
+        const totalPaid = payments.filter((p) => p.status === "completed").reduce((sum, p) => sum + Number(p.amount ?? 0), 0);
+        const lastOrderAt = orders.length > 0 ? orders.reduce((latest, o) => {
+          const t = o.createdAt ? new Date(o.createdAt).getTime() : 0;
+          return t > latest ? t : latest;
+        }, 0) : null;
+        return json({
+          ...contact,
+          summary: {
+            totalOrders: orders.length,
+            totalPaid,
+            lastOrderAt: lastOrderAt ? new Date(lastOrderAt).toISOString() : null
+          }
+        });
+      }
+      if (resource === "payments") {
+        const payment = await repo.findOne({
+          where: { id: Number(id) },
+          relations: ["order", "order.contact", "contact"]
+        });
+        if (!payment) return json({ message: "Not found" }, { status: 404 });
+        return json(payment);
+      }
       const item = await repo.findOne({ where: { id: Number(id) } });
       return item ? json(item) : json({ message: "Not found" }, { status: 404 });
     },
@@ -1119,6 +1400,17 @@ function createCmsApiHandler(config) {
       if (path.length === 0) return config.json({ error: "Not found" }, { status: 404 });
       const resource = resolveResource(path[0]);
       if (!crudResources.includes(resource)) return config.json({ error: "Invalid resource" }, { status: 400 });
+      if (path.length === 2) {
+        if (path[1] === "metadata" && method === "GET") {
+          return crud.GET_METADATA(req, resource);
+        }
+        if (path[1] === "bulk" && method === "POST") {
+          return crud.BULK_POST(req, resource);
+        }
+        if (path[1] === "export" && method === "GET") {
+          return crud.GET_EXPORT(req, resource);
+        }
+      }
       if (path.length === 1) {
         if (method === "GET") return crud.GET(req, resource);
         if (method === "POST") return crud.POST(req, resource);