@nextsparkjs/core 0.1.0-beta.1 → 0.1.0-beta.3

package/templates/features/blog/entities/posts/migrations/001_posts_table.sql

@@ -0,0 +1,115 @@
+-- Migration: 015_posts_table.sql
+-- Description: Posts table for blog system (similar structure to pages)
+-- Date: 2025-12-16
+-- Updated: 2025-12-17 (Add userId, teamId system fields + team isolation RLS)
+
+-- ============================================
+-- TABLE: posts
+-- ============================================
+DROP TABLE IF EXISTS public.posts CASCADE;
+
+CREATE TABLE IF NOT EXISTS public.posts (
+  id              UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+
+  -- Relational Fields (at the beginning)
+  "userId"        TEXT NOT NULL REFERENCES public."users"(id) ON DELETE CASCADE,
+  "teamId"        TEXT NOT NULL REFERENCES public."teams"(id) ON DELETE CASCADE,
+
+  slug            VARCHAR(255) NOT NULL,
+  title           VARCHAR(255) NOT NULL,
+  excerpt         TEXT,
+  "featuredImage" TEXT,
+  blocks          JSONB NOT NULL DEFAULT '[]'::JSONB,
+  locale          VARCHAR(10) NOT NULL DEFAULT 'en',
+
+  -- SEO fields (same as pages)
+  "seoTitle"       VARCHAR(255),
+  "seoDescription" TEXT,
+  "seoKeywords"    TEXT,
+  "ogImage"        TEXT,
+  noindex          BOOLEAN DEFAULT FALSE,
+  nofollow         BOOLEAN DEFAULT FALSE,
+
+  -- Meta fields
+  published        BOOLEAN DEFAULT FALSE,
+  "authorId"       TEXT REFERENCES public."users"(id) ON DELETE SET NULL,
+  "createdAt"      TIMESTAMPTZ NOT NULL DEFAULT now(),
+  "updatedAt"      TIMESTAMPTZ NOT NULL DEFAULT now(),
+
+  -- Constraints
+  CONSTRAINT unique_post_slug_locale UNIQUE(slug, locale),
+  CONSTRAINT valid_post_slug CHECK (slug ~ '^[a-z0-9\-]+$'),
+  CONSTRAINT valid_post_locale CHECK (locale ~ '^[a-z]{2}(-[A-Z]{2})?$'),
+  CONSTRAINT post_slug_length CHECK (LENGTH(slug) >= 2 AND LENGTH(slug) <= 100),
+  CONSTRAINT post_title_not_empty CHECK (LENGTH(TRIM(title)) > 0)
+);
+
+-- ============================================
+-- COMMENTS
+-- ============================================
+COMMENT ON TABLE  public.posts                  IS 'Blog posts with block-based content';
+COMMENT ON COLUMN public.posts."userId"         IS 'User who created this post';
+COMMENT ON COLUMN public.posts."teamId"         IS 'Team context for isolation';
+COMMENT ON COLUMN public.posts.blocks           IS 'Array of block instances with props (JSONB)';
+COMMENT ON COLUMN public.posts.slug             IS 'URL-friendly identifier';
+COMMENT ON COLUMN public.posts.excerpt          IS 'Short summary for previews and SEO';
+COMMENT ON COLUMN public.posts."featuredImage"  IS 'Main image URL for post';
+
+-- ============================================
+-- TRIGGER: updatedAt
+-- ============================================
+DROP TRIGGER IF EXISTS posts_set_updated_at ON public.posts;
+CREATE TRIGGER posts_set_updated_at
+BEFORE UPDATE ON public.posts
+FOR EACH ROW EXECUTE FUNCTION public.set_updated_at();
+
+-- ============================================
+-- INDEXES
+-- ============================================
+CREATE INDEX IF NOT EXISTS idx_posts_user_id            ON public.posts("userId");
+CREATE INDEX IF NOT EXISTS idx_posts_team_id            ON public.posts("teamId");
+CREATE INDEX IF NOT EXISTS idx_posts_slug               ON public.posts(slug);
+CREATE INDEX IF NOT EXISTS idx_posts_locale             ON public.posts(locale);
+CREATE INDEX IF NOT EXISTS idx_posts_published          ON public.posts(published);
+CREATE INDEX IF NOT EXISTS idx_posts_author             ON public.posts("authorId");
+CREATE INDEX IF NOT EXISTS idx_posts_created            ON public.posts("createdAt" DESC);
+CREATE INDEX IF NOT EXISTS idx_posts_slug_locale        ON public.posts(slug, locale);
+CREATE INDEX IF NOT EXISTS idx_posts_published_locale   ON public.posts(published, locale) WHERE published = TRUE;
+CREATE INDEX IF NOT EXISTS idx_posts_blocks_gin         ON public.posts USING GIN (blocks);
+CREATE INDEX IF NOT EXISTS idx_posts_team_created       ON public.posts("teamId", "createdAt" DESC);
+
+-- ============================================
+-- RLS
+-- ============================================
+ALTER TABLE public.posts ENABLE ROW LEVEL SECURITY;
+
+DROP POLICY IF EXISTS "posts public can select" ON public.posts;
+DROP POLICY IF EXISTS "posts auth can do all"   ON public.posts;
+DROP POLICY IF EXISTS "Posts team can do all"   ON public.posts;
+
+-- Public can read published posts
+CREATE POLICY "posts public can select"
+ON public.posts
+FOR SELECT TO anon
+USING (published = TRUE);
+
+-- ============================
+-- RLS: TEAM ISOLATION ONLY
+-- ============================
+-- IMPORTANT: RLS only verifies team membership
+-- access.shared logic (user isolation) is handled at APP LEVEL
+CREATE POLICY "Posts team can do all"
+ON public.posts
+FOR ALL TO authenticated
+USING (
+  -- Superadmin bypass
+  public.is_superadmin()
+  OR
+  -- Team isolation only: user must be member of the team
+  "teamId" = ANY(public.get_user_team_ids())
+)
+WITH CHECK (
+  public.is_superadmin()
+  OR
+  "teamId" = ANY(public.get_user_team_ids())
+);

package/templates/features/blog/entities/posts/migrations/003_add_status.sql

@@ -0,0 +1,44 @@
+-- Migration: 025_add_status_to_posts.sql
+-- Description: Add status column to posts
+-- Date: 2025-12-17
+-- Session: builder-entities-unification-v2
+
+-- ============================================
+-- STEP 1: Add status column (replaces published boolean)
+-- ============================================
+ALTER TABLE public."posts"
+ADD COLUMN IF NOT EXISTS "status" VARCHAR(50) DEFAULT 'draft';
+
+-- Migrate existing data
+UPDATE public."posts"
+SET "status" = CASE
+  WHEN "published" = true THEN 'published'
+  ELSE 'draft'
+END
+WHERE "status" = 'draft' OR "status" IS NULL;
+
+-- Create index for status filtering
+CREATE INDEX IF NOT EXISTS idx_posts_status ON public."posts"("status");
+
+-- Add check constraint
+ALTER TABLE public."posts" DROP CONSTRAINT IF EXISTS posts_status_check;
+ALTER TABLE public."posts"
+ADD CONSTRAINT posts_status_check
+CHECK ("status" IN ('draft', 'published', 'scheduled', 'archived'));
+
+-- ============================================
+-- STEP 2: Update existing RLS policy to use status instead of published
+-- ============================================
+DROP POLICY IF EXISTS "posts public can select" ON public."posts";
+
+CREATE POLICY "posts public can select"
+ON public."posts"
+FOR SELECT TO anon
+USING ("status" = 'published');
+
+-- ============================================
+-- COMMENTS
+-- ============================================
+COMMENT ON COLUMN public."posts"."status" IS 'Publication status: draft, published, scheduled, archived';
+
+-- Note: We keep 'published' column temporarily for rollback safety

package/templates/features/blog/entities/posts/migrations/004_entity_taxonomy_relations.sql

@@ -0,0 +1,129 @@
+-- Migration: 003_entity_taxonomy_relations.sql
+-- Description: Generic entity-taxonomy relations table
+-- Date: 2025-12-17
+-- Session: builder-entities-unification-v2
+-- Note: Placed in posts entity to ensure posts and pages tables exist first
+
+-- ============================================
+-- TABLE: entity_taxonomy_relations
+-- Replaces specific post_taxonomy_relations with a generic system
+-- ============================================
+CREATE TABLE IF NOT EXISTS public."entity_taxonomy_relations" (
+  id TEXT PRIMARY KEY DEFAULT gen_random_uuid()::text,
+  "entityType" VARCHAR(50) NOT NULL,  -- 'posts', 'pages', 'products', etc.
+  "entityId" TEXT NOT NULL,
+  "taxonomyId" TEXT NOT NULL REFERENCES public."taxonomies"(id) ON DELETE CASCADE,
+  "order" INTEGER DEFAULT 0,
+  "createdAt" TIMESTAMPTZ NOT NULL DEFAULT now(),
+
+  CONSTRAINT unique_entity_taxonomy UNIQUE("entityType", "entityId", "taxonomyId")
+);
+
+-- ============================================
+-- COMMENTS
+-- ============================================
+COMMENT ON TABLE public."entity_taxonomy_relations" IS 'Generic many-to-many relation between any entity and taxonomies';
+COMMENT ON COLUMN public."entity_taxonomy_relations"."entityType" IS 'Type of entity (posts, pages, products, etc.)';
+COMMENT ON COLUMN public."entity_taxonomy_relations"."entityId" IS 'ID of the entity (UUID as text)';
+COMMENT ON COLUMN public."entity_taxonomy_relations"."taxonomyId" IS 'Reference to taxonomy';
+COMMENT ON COLUMN public."entity_taxonomy_relations"."order" IS 'Display order of taxonomy within entity';
+
+-- ============================================
+-- INDEXES for common queries
+-- ============================================
+CREATE INDEX IF NOT EXISTS idx_etr_entity_type ON public."entity_taxonomy_relations"("entityType");
+CREATE INDEX IF NOT EXISTS idx_etr_entity_id ON public."entity_taxonomy_relations"("entityId");
+CREATE INDEX IF NOT EXISTS idx_etr_taxonomy_id ON public."entity_taxonomy_relations"("taxonomyId");
+CREATE INDEX IF NOT EXISTS idx_etr_entity_lookup ON public."entity_taxonomy_relations"("entityType", "entityId");
+
+-- ============================================
+-- MIGRATE existing data from post_taxonomy_relations (if exists)
+-- ============================================
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM information_schema.tables WHERE table_name = 'post_taxonomy_relations' AND table_schema = 'public') THEN
+    INSERT INTO public."entity_taxonomy_relations" ("entityType", "entityId", "taxonomyId", "order", "createdAt")
+    SELECT
+      'posts' as "entityType",
+      "postId"::text as "entityId",
+      "taxonomyId",
+      "order",
+      "createdAt"
+    FROM public."post_taxonomy_relations"
+    ON CONFLICT DO NOTHING;
+  END IF;
+END $$;
+
+-- ============================================
+-- RLS
+-- ============================================
+ALTER TABLE public."entity_taxonomy_relations" ENABLE ROW LEVEL SECURITY;
+
+DROP POLICY IF EXISTS "Entity taxonomy relations public read" ON public."entity_taxonomy_relations";
+DROP POLICY IF EXISTS "Entity taxonomy relations authenticated read" ON public."entity_taxonomy_relations";
+DROP POLICY IF EXISTS "Entity taxonomy relations authenticated insert" ON public."entity_taxonomy_relations";
+DROP POLICY IF EXISTS "Entity taxonomy relations authenticated delete" ON public."entity_taxonomy_relations";
+
+-- Public can read relations for published entities
+CREATE POLICY "Entity taxonomy relations public read"
+ON public."entity_taxonomy_relations"
+FOR SELECT TO anon
+USING (
+  -- Posts: check status = published
+  ("entityType" = 'posts' AND EXISTS (
+    SELECT 1 FROM public.posts p WHERE p.id::text = "entityId" AND p.status = 'published'
+  ))
+  OR
+  -- Pages: check status = published
+  ("entityType" = 'pages' AND EXISTS (
+    SELECT 1 FROM public.pages p WHERE p.id::text = "entityId" AND p.status = 'published'
+  ))
+);
+
+-- Authenticated users can manage all relations
+CREATE POLICY "Entity taxonomy relations authenticated read"
+ON public."entity_taxonomy_relations"
+FOR SELECT TO authenticated
+USING (true);
+
+CREATE POLICY "Entity taxonomy relations authenticated insert"
+ON public."entity_taxonomy_relations"
+FOR INSERT TO authenticated
+WITH CHECK (true);
+
+CREATE POLICY "Entity taxonomy relations authenticated delete"
+ON public."entity_taxonomy_relations"
+FOR DELETE TO authenticated
+USING (true);
+
+-- ============================================
+-- CLEANUP TRIGGER function
+-- ============================================
+CREATE OR REPLACE FUNCTION public.cleanup_entity_taxonomy_relations()
+RETURNS TRIGGER AS $$
+BEGIN
+  DELETE FROM public."entity_taxonomy_relations"
+  WHERE "entityType" = TG_ARGV[0] AND "entityId" = OLD.id::text;
+  RETURN OLD;
+END;
+$$ LANGUAGE plpgsql;
+
+-- Trigger for posts
+DROP TRIGGER IF EXISTS cleanup_post_entity_taxonomy ON public."posts";
+CREATE TRIGGER cleanup_post_entity_taxonomy
+AFTER DELETE ON public."posts"
+FOR EACH ROW
+EXECUTE FUNCTION public.cleanup_entity_taxonomy_relations('posts');
+
+-- Trigger for pages
+DROP TRIGGER IF EXISTS cleanup_page_entity_taxonomy ON public."pages";
+CREATE TRIGGER cleanup_page_entity_taxonomy
+AFTER DELETE ON public."pages"
+FOR EACH ROW
+EXECUTE FUNCTION public.cleanup_entity_taxonomy_relations('pages');
+
+-- ============================================
+-- Additional indexes using status
+-- ============================================
+CREATE INDEX IF NOT EXISTS idx_pages_status_locale ON public."pages"("status", locale) WHERE "status" = 'published';
+CREATE INDEX IF NOT EXISTS idx_posts_status_locale ON public."posts"("status", locale) WHERE "status" = 'published';

package/templates/features/blog/entities/posts/migrations/006_posts_metas.sql

@@ -0,0 +1,56 @@
+-- Migration: 006_posts_metas.sql
+-- Description: Create posts_metas table for flexible key-value metadata storage
+-- Date: 2025-12-17
+
+-- Create posts_metas table
+CREATE TABLE IF NOT EXISTS "posts_metas" (
+  id TEXT PRIMARY KEY DEFAULT gen_random_uuid()::text,
+  "postId" UUID NOT NULL REFERENCES public."posts"(id) ON DELETE CASCADE,
+  "metaKey" TEXT NOT NULL,
+  "metaValue" JSONB NOT NULL DEFAULT '{}'::jsonb,
+  "dataType" TEXT,
+  "isPublic" BOOLEAN NOT NULL DEFAULT FALSE,
+  "isSearchable" BOOLEAN NOT NULL DEFAULT FALSE,
+  "createdAt" TIMESTAMPTZ NOT NULL DEFAULT now(),
+  "updatedAt" TIMESTAMPTZ NOT NULL DEFAULT now(),
+  CONSTRAINT posts_metas_unique_key UNIQUE ("postId", "metaKey")
+);
+
+-- Indices
+CREATE INDEX IF NOT EXISTS idx_posts_metas_post_id ON "posts_metas"("postId");
+CREATE INDEX IF NOT EXISTS idx_posts_metas_key ON "posts_metas"("metaKey");
+CREATE INDEX IF NOT EXISTS idx_posts_metas_composite ON "posts_metas"("postId", "metaKey", "isPublic");
+CREATE INDEX IF NOT EXISTS idx_posts_metas_searchable ON "posts_metas"("isSearchable") WHERE "isSearchable" = true;
+CREATE INDEX IF NOT EXISTS idx_posts_metas_public ON "posts_metas"("isPublic") WHERE "isPublic" = true;
+CREATE INDEX IF NOT EXISTS idx_posts_metas_value_gin ON "posts_metas" USING GIN ("metaValue");
+
+-- Trigger for updatedAt
+DROP TRIGGER IF EXISTS posts_metas_set_updated_at ON "posts_metas";
+CREATE TRIGGER posts_metas_set_updated_at
+BEFORE UPDATE ON "posts_metas"
+FOR EACH ROW EXECUTE FUNCTION public.set_updated_at();
+
+-- ============================================
+-- RLS POLICIES
+-- ============================================
+ALTER TABLE "posts_metas" ENABLE ROW LEVEL SECURITY;
+
+-- Public can read public metadata
+DROP POLICY IF EXISTS "posts_metas_public_select" ON "posts_metas";
+CREATE POLICY "posts_metas_public_select"
+ON "posts_metas" FOR SELECT TO anon
+USING ("isPublic" = TRUE);
+
+-- Authenticated users can manage all metadata
+DROP POLICY IF EXISTS "posts_metas_auth_all" ON "posts_metas";
+CREATE POLICY "posts_metas_auth_all"
+ON "posts_metas" FOR ALL TO authenticated
+USING (true)
+WITH CHECK (true);
+
+-- Comments
+COMMENT ON TABLE "posts_metas" IS 'Flexible key-value metadata storage for posts';
+COMMENT ON COLUMN "posts_metas"."postId" IS 'Reference to the parent post';
+COMMENT ON COLUMN "posts_metas"."metaKey" IS 'Unique key identifier for the metadata';
+COMMENT ON COLUMN "posts_metas"."metaValue" IS 'JSONB value for flexible data storage';
+COMMENT ON COLUMN "posts_metas"."isPublic" IS 'If true, this metadata can be read by anyone';

package/templates/features/blog/entities/posts/posts.config.ts

@@ -0,0 +1,112 @@
+/**
+ * Posts Entity Configuration
+ *
+ * Posts are builder-enabled entities with taxonomies support that render at /blog/[slug].
+ * Includes sidebar fields for excerpt and featured image, plus category management.
+ */
+
+import { Newspaper } from 'lucide-react'
+import type { EntityConfig } from '@nextsparkjs/core/lib/entities/types'
+import { postsFields } from './posts.fields'
+
+export const postsEntityConfig: EntityConfig = {
+  // ==========================================
+  // 1. BASIC IDENTIFICATION
+  // ==========================================
+  slug: 'posts',
+  enabled: true,
+
+  names: {
+    singular: 'post',
+    plural: 'Posts',
+  },
+
+  icon: Newspaper,
+  tableName: 'posts',
+
+  // ==========================================
+  // 2. ACCESS AND SCOPE CONFIGURATION
+  // ==========================================
+  access: {
+    public: true,      // Blog posts are public
+    api: true,         // Has external API endpoints
+    metadata: true,    // Posts support metadata
+    shared: true,      // All authenticated users can see all posts
+    basePath: '/blog', // Posts render at /blog/[slug]
+  },
+
+  // ==========================================
+  // 3. UI/UX FEATURES
+  // ==========================================
+  ui: {
+    dashboard: {
+      showInMenu: true,
+      showInTopbar: true,
+      filters: [
+        { field: 'status', type: 'multiSelect' },
+      ],
+    },
+    public: {
+      hasArchivePage: true,  // /blog shows list of posts
+      hasSinglePage: true,   // /blog/[slug] shows individual post
+    },
+    features: {
+      searchable: true,
+      sortable: true,
+      filterable: true,
+      bulkOperations: true,
+      importExport: true,
+    },
+  },
+
+  // ==========================================
+  // 4. PERMISSIONS SYSTEM
+  // ==========================================
+  // Permissions are now centralized in permissions.config.ts
+  // See: contents/themes/default/permissions.config.ts -> entities.posts
+
+  // ==========================================
+  // 5. INTERNATIONALIZATION
+  // ==========================================
+  i18n: {
+    fallbackLocale: 'en',
+    loaders: {
+      en: () => import('./messages/en.json'),
+      es: () => import('./messages/es.json'),
+    },
+  },
+
+  // ==========================================
+  // 6. BUILDER CONFIGURATION
+  // ==========================================
+  builder: {
+    enabled: true,
+    sidebarFields: ['excerpt', 'featuredImage'], // Extra fields shown in sidebar
+    seo: true, // Enable SEO fields panel in editor
+  },
+
+  // ==========================================
+  // 7. TAXONOMIES CONFIGURATION
+  // ==========================================
+  taxonomies: {
+    enabled: true,
+    types: [
+      {
+        type: 'post_category',
+        field: 'categories',
+        multiple: true,
+        label: 'Categories',
+      },
+    ],
+  },
+
+  // ==========================================
+  // FIELDS
+  // ==========================================
+  fields: postsFields,
+
+  // ==========================================
+  // METADATA
+  // ==========================================
+  source: 'theme',
+}

package/templates/features/blog/entities/posts/posts.fields.ts

@@ -0,0 +1,116 @@
+/**
+ * Posts Entity Fields Configuration
+ *
+ * Fields required for builder-enabled posts with sidebar support.
+ * Note: 'blocks' field is NOT in fields[] - it's managed by the builder view automatically.
+ * Note: 'categories' is managed by taxonomies system, not a regular field.
+ */
+
+import type { EntityField } from '@nextsparkjs/core/lib/entities/types'
+
+export const postsFields: EntityField[] = [
+  {
+    name: 'title',
+    type: 'text',
+    required: true,
+    display: {
+      label: 'Title',
+      description: 'Post title',
+      placeholder: 'Enter post title...',
+      showInList: true,
+      showInDetail: true,
+      showInForm: true,
+      order: 1,
+    },
+    api: {
+      searchable: true,
+      sortable: true,
+      readOnly: false,
+    },
+  },
+  {
+    name: 'slug',
+    type: 'text',
+    required: true,
+    display: {
+      label: 'Slug',
+      description: 'URL-friendly identifier',
+      placeholder: 'post-slug',
+      showInList: true,
+      showInDetail: true,
+      showInForm: true,
+      order: 2,
+    },
+    api: {
+      searchable: true,
+      sortable: true,
+      readOnly: false,
+    },
+  },
+  {
+    name: 'status',
+    type: 'select',
+    required: true,
+    defaultValue: 'draft',
+    options: [
+      { value: 'draft', label: 'Draft' },
+      { value: 'published', label: 'Published' },
+      { value: 'scheduled', label: 'Scheduled' },
+      { value: 'archived', label: 'Archived' },
+    ],
+    display: {
+      label: 'Status',
+      description: 'Publication status',
+      showInList: true,
+      showInDetail: true,
+      showInForm: true,
+      order: 3,
+    },
+    api: {
+      searchable: false,
+      sortable: true,
+      filterable: true,
+      readOnly: false,
+    },
+  },
+  {
+    name: 'excerpt',
+    type: 'textarea',
+    required: false,
+    display: {
+      label: 'Excerpt',
+      description: 'Short summary of the post',
+      placeholder: 'Brief description...',
+      showInList: false,
+      showInDetail: true,
+      showInForm: true, // Shown in builder sidebar
+      order: 4,
+    },
+    api: {
+      searchable: true,
+      sortable: false,
+      readOnly: false,
+    },
+  },
+  {
+    name: 'featuredImage',
+    type: 'image',
+    required: false,
+    display: {
+      label: 'Featured Image',
+      description: 'Main image for the post',
+      showInList: false,
+      showInDetail: true,
+      showInForm: true, // Shown in builder sidebar
+      order: 5,
+    },
+    api: {
+      searchable: false,
+      sortable: false,
+      readOnly: false,
+    },
+  },
+  // Note: 'categories' is managed by taxonomies system, not a regular field
+  // Note: SEO fields (seoTitle, seoDescription, etc.) are managed by the builder SEO panel
+  // Note: 'blocks' field is a system field for builder-enabled entities - NOT defined here
+]