@momentumcms/server-core 0.0.1

package/src/lib/server-core.d.ts

@@ -0,0 +1,71 @@
+import type { DatabaseAdapter, MomentumConfig } from '@momentumcms/core';
+import type { MomentumAPIContext } from './momentum-api.types';
+export type { DatabaseAdapter, MomentumConfig, ResolvedMomentumConfig } from '@momentumcms/core';
+/**
+ * Query options for database operations.
+ */
+export interface QueryOptions {
+    limit?: number;
+    page?: number;
+    sort?: string;
+    where?: Record<string, unknown>;
+    [key: string]: unknown;
+}
+/**
+ * Momentum request object - framework-agnostic.
+ */
+export interface MomentumRequest {
+    method: 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
+    collectionSlug: string;
+    id?: string;
+    body?: Record<string, unknown>;
+    query?: QueryOptions;
+    /** User context for access control */
+    user?: MomentumAPIContext['user'];
+}
+/**
+ * Validation error structure.
+ */
+export interface ValidationError {
+    field: string;
+    message: string;
+}
+/**
+ * Momentum response object - framework-agnostic.
+ */
+export interface MomentumResponse {
+    status?: number;
+    docs?: Record<string, unknown>[];
+    doc?: Record<string, unknown>;
+    totalDocs?: number;
+    deleted?: boolean;
+    id?: string;
+    error?: string;
+    errors?: ValidationError[];
+}
+/**
+ * Momentum handlers interface.
+ */
+export interface MomentumHandlers {
+    handleFind(request: MomentumRequest): Promise<MomentumResponse>;
+    handleFindById(request: MomentumRequest): Promise<MomentumResponse>;
+    handleCreate(request: MomentumRequest): Promise<MomentumResponse>;
+    handleUpdate(request: MomentumRequest): Promise<MomentumResponse>;
+    handleDelete(request: MomentumRequest): Promise<MomentumResponse>;
+    handleForceDelete(request: MomentumRequest): Promise<MomentumResponse>;
+    handleRestore(request: MomentumRequest): Promise<MomentumResponse>;
+    handleSearch(request: MomentumRequest): Promise<MomentumResponse>;
+    routeRequest(request: MomentumRequest): Promise<MomentumResponse>;
+}
+/**
+ * Creates Momentum CMS handlers.
+ * Framework-agnostic - can be used with Express, h3, Fastify, etc.
+ *
+ * Now delegates to the MomentumAPI singleton for consistent behavior
+ * between HTTP requests and direct API calls.
+ */
+export declare function createMomentumHandlers(config: MomentumConfig): MomentumHandlers;
+/**
+ * In-memory database adapter for development/testing.
+ */
+export declare function createInMemoryAdapter(): DatabaseAdapter;

package/src/lib/shared-server-utils.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Shared server utilities used by both Express and Analog server adapters.
+ * Extracted to avoid duplication between server-express and server-analog.
+ */
+/**
+ * Sanitize error messages to prevent leaking internal details (SQL, file paths, etc.).
+ * Returns the original message if it appears safe, otherwise returns the fallback.
+ */
+export declare function sanitizeErrorMessage(error: unknown, fallback: string): string;
+/**
+ * Sanitize a filename for use in Content-Disposition headers.
+ * Strips any characters that could enable header injection.
+ */
+export declare function sanitizeFilename(name: string): string;
+/**
+ * Parses the `where` query parameter.
+ * Handles both JSON string format (?where={"slug":{"equals":"home"}})
+ * and pre-parsed object format from h3/qs/Express.
+ */
+export declare function parseWhereParam(raw: unknown): Record<string, unknown> | undefined;

package/src/lib/swagger-ui-html.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Returns a minimal Swagger UI HTML page that loads the OpenAPI spec
+ * from the adjacent openapi.json endpoint via CDN-hosted Swagger UI.
+ */
+export declare function getSwaggerUIHTML(): string;

package/src/lib/upload-handler.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Upload Handler for Momentum CMS
+ * Framework-agnostic file upload handling
+ */
+import type { StorageAdapter, UploadedFile, MomentumConfig, MediaDocument } from '@momentumcms/core';
+import { type MomentumAPIContext } from './momentum-api';
+/**
+ * Upload request from the client.
+ */
+export interface UploadRequest {
+    /** Uploaded file data */
+    file: UploadedFile;
+    /** User context for access control */
+    user?: MomentumAPIContext['user'];
+    /** Alt text for the file (for images) */
+    alt?: string;
+    /** Target collection (defaults to 'media') */
+    collection?: string;
+}
+/**
+ * Upload response returned to the client.
+ */
+export interface UploadResponse {
+    /** Created media document */
+    doc?: MediaDocument;
+    /** Error message if upload failed */
+    error?: string;
+    /** HTTP status code */
+    status: number;
+}
+/**
+ * Upload configuration from MomentumConfig.
+ */
+export interface UploadConfig {
+    /** Storage adapter for file storage */
+    adapter: StorageAdapter;
+    /** Maximum file size in bytes */
+    maxFileSize?: number;
+    /** Allowed MIME types */
+    allowedMimeTypes?: string[];
+}
+/**
+ * Get upload configuration from MomentumConfig.
+ */
+export declare function getUploadConfig(config: MomentumConfig): UploadConfig | null;
+/**
+ * Handle file upload.
+ *
+ * @param config - Upload configuration
+ * @param request - Upload request with file and user context
+ * @returns Upload response with created media document or error
+ */
+export declare function handleUpload(config: UploadConfig, request: UploadRequest): Promise<UploadResponse>;
+/**
+ * Handle file deletion.
+ *
+ * @param adapter - Storage adapter
+ * @param path - Storage path of the file to delete
+ * @returns True if deleted, false if not found
+ */
+export declare function handleFileDelete(adapter: StorageAdapter, path: string): Promise<boolean>;
+/**
+ * Handle file retrieval for serving.
+ *
+ * @param adapter - Storage adapter
+ * @param path - Storage path of the file
+ * @returns File buffer and metadata, or null if not found
+ */
+export declare function handleFileGet(adapter: StorageAdapter, path: string): Promise<{
+    buffer: Buffer;
+    mimeType?: string;
+} | null>;

package/src/lib/version-operations.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Version Operations Implementation
+ *
+ * Provides version management operations for versioned collections.
+ */
+import type { DatabaseAdapter, CollectionConfig, DocumentStatus, DocumentVersionParsed, VersionQueryResult, RestoreVersionOptions, PublishOptions, SchedulePublishResult } from '@momentumcms/core';
+import type { MomentumAPIContext, VersionOperations, VersionFindOptions } from './momentum-api.types';
+/**
+ * Implementation of version operations for a collection.
+ */
+export declare class VersionOperationsImpl<T = Record<string, unknown>> implements VersionOperations<T> {
+    private readonly slug;
+    private readonly collectionConfig;
+    private readonly adapter;
+    private readonly context;
+    constructor(slug: string, collectionConfig: CollectionConfig, adapter: DatabaseAdapter, context: MomentumAPIContext);
+    findVersions(parentId: string, options?: VersionFindOptions): Promise<VersionQueryResult<T>>;
+    findVersionById(versionId: string): Promise<DocumentVersionParsed<T> | null>;
+    restore(options: RestoreVersionOptions): Promise<T>;
+    publish(docId: string, _options?: PublishOptions): Promise<T>;
+    unpublish(docId: string): Promise<T>;
+    saveDraft(docId: string, data: Partial<T>): Promise<DocumentVersionParsed<T>>;
+    getStatus(docId: string): Promise<DocumentStatus>;
+    compare(versionId1: string, versionId2: string): Promise<{
+        field: string;
+        oldValue: unknown;
+        newValue: unknown;
+    }[]>;
+    schedulePublish(docId: string, publishAt: string): Promise<SchedulePublishResult>;
+    cancelScheduledPublish(docId: string): Promise<void>;
+    private checkAccess;
+    private buildRequestContext;
+}

package/src/lib/webhooks.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Webhook Dispatcher
+ *
+ * Dispatches webhook POST requests when collection events occur.
+ * Supports HMAC-SHA256 signature verification and configurable retries.
+ */
+import type { CollectionConfig, WebhookConfig, WebhookEvent, WebhookPayload } from '@momentumcms/core';
+/**
+ * Sign a webhook payload with HMAC-SHA256.
+ * Returns the hex-encoded signature.
+ */
+declare function signPayload(payload: string, secret: string): string;
+/**
+ * Send a single webhook request with retry support.
+ * Runs in the background (fire-and-forget).
+ */
+declare function sendWebhook(webhook: WebhookConfig, payload: WebhookPayload, attempt?: number): Promise<void>;
+/**
+ * Dispatch webhooks for a collection event.
+ * Runs all matching webhooks in parallel, fire-and-forget.
+ */
+declare function dispatchWebhooks(webhooks: WebhookConfig[], event: WebhookEvent, payload: WebhookPayload): void;
+/**
+ * Register webhook hooks for all collections that have webhook configs.
+ * Call this during server initialization, before initializeMomentumAPI().
+ */
+export declare function registerWebhookHooks(collections: CollectionConfig[]): void;
+export { sendWebhook, dispatchWebhooks, signPayload };