@prenta/core 0.118.0

package/prisma/seed.ts

@@ -0,0 +1,82 @@
+/**
+ * Seed script for Prenta CMS.
+ *
+ * Reads credentials from environment variables (never hardcoded):
+ *   CMS_ADMIN_EMAIL, CMS_ADMIN_PASSWORD, CMS_ADMIN_NAME
+ *
+ * Usage:
+ *   cd packages/cms-core
+ *   pnpm tsx prisma/seed.ts
+ *
+ * Requires DATABASE_URL + CMS_ADMIN_* vars in environment or .env file.
+ */
+
+import 'dotenv/config'
+import pg from 'pg'
+import { PrismaPg } from '@prisma/adapter-pg'
+import { PrismaClient } from '../generated/client.js'
+
+async function main() {
+  const email = process.env.CMS_ADMIN_EMAIL
+  const password = process.env.CMS_ADMIN_PASSWORD
+  const name = process.env.CMS_ADMIN_NAME ?? 'Admin'
+
+  if (!email || !password) {
+    console.error('Set CMS_ADMIN_EMAIL and CMS_ADMIN_PASSWORD in your .env file')
+    process.exit(1)
+  }
+
+  const pool = new pg.Pool({ connectionString: process.env.DATABASE_URL })
+  const adapter = new PrismaPg(pool)
+  const prisma = new PrismaClient({ adapter })
+
+  try {
+    const existingCount = await prisma.user.count()
+    if (existingCount > 0) {
+      console.log(`Skipping seed — ${existingCount} user(s) already exist.`)
+      return
+    }
+
+    const salt = crypto.getRandomValues(new Uint8Array(16))
+    const key = await crypto.subtle.importKey(
+      'raw',
+      new TextEncoder().encode(password),
+      'PBKDF2',
+      false,
+      ['deriveBits'],
+    )
+    const derived = await crypto.subtle.deriveBits(
+      { name: 'PBKDF2', salt, iterations: 100_000, hash: 'SHA-256' },
+      key,
+      256,
+    )
+    const saltHex = Buffer.from(salt).toString('hex')
+    const hashHex = Buffer.from(derived).toString('hex')
+    const passwordHash = `pbkdf2:100000:${saltHex}:${hashHex}`
+
+    const user = await prisma.user.create({
+      data: {
+        email: email.toLowerCase().trim(),
+        name,
+        passwordHash,
+        role: 'ADMIN',
+        isActive: true,
+        isApproved: true,
+        emailVerified: true,
+      },
+    })
+
+    console.log(`Seeded admin user:`)
+    console.log(`  Email: ${email}`)
+    console.log(`  Role:  ADMIN`)
+    console.log(`  ID:    ${user.id}`)
+  } finally {
+    await prisma.$disconnect()
+    await pool.end()
+  }
+}
+
+main().catch((err) => {
+  console.error('Seed failed:', err)
+  process.exit(1)
+})

package/schema-fragments/cms-schema.prisma

@@ -0,0 +1,526 @@
+// ═══════════════════════════════════════════════════════════════════════════════
+// Prenta CMS — Prisma schema fragment
+// ═══════════════════════════════════════════════════════════════════════════════
+//
+// This file defines the database models expected by `@prentacms/cms-core` API
+// handlers and server actions. It is a **fragment**: it does not include a
+// `generator` block. A reference `datasource` is included so the Prisma
+// language server validates PostgreSQL-native types (`@db.Text`, `String[]`).
+//
+// IMPORTANT: Keep this file outside `prisma/` — the Prisma language server
+// loads every `.prisma` file in that directory as one schema. Living beside
+// `schema.prisma` causes duplicate-model diagnostics in the IDE.
+//
+// ── How to merge into your project ─────────────────────────────────────────────
+//
+// 1. Ensure your root `schema.prisma` uses PostgreSQL, for example:
+//      datasource db {
+//        provider = "postgresql"
+//        url      = env("DATABASE_URL")
+//      }
+//      generator client {
+//        provider = "prisma-client-js"
+//        output   = "../node_modules/.prisma/client"
+//      }
+//
+// 2. Copy the `enum` and `model` blocks below into your `schema.prisma` (skip
+//    the reference `datasource` at the top of this file — use your own). Or use
+//    Prisma’s multi-file schema preview: put this file in `prisma/schema/` and
+//    include it per Prisma’s multi-file docs).
+//
+// 3. Resolve naming clashes: if you already have a `User` or `Document` model,
+//    rename these models and update your Prenta integration to use a custom
+//    Prisma client, or map tables with `@@map("…")` and align delegate names.
+//
+// 4. Run migrations:
+//      npx prisma migrate dev --name prenta-cms
+//
+// Models mirror `packages/cms-core/src/api/handlers.ts` and `actions.ts`
+// (including `contentHash`, `changeType` on versions, scheduling fields, etc.).
+//
+// ═══════════════════════════════════════════════════════════════════════════════
+
+// Reference datasource for Prisma language-server validation only. When
+// merging into your project, do NOT copy this block — use your existing
+// `datasource db` with `provider = "postgresql"`.
+datasource db {
+  provider = "postgresql"
+}
+
+enum DocumentStatus {
+  DRAFT
+  PUBLISHED
+  ARCHIVED
+  SCHEDULED
+}
+
+model User {
+  id            String    @id @default(cuid())
+  email         String    @unique
+  name          String    @default("")
+  role          String    @default("EDITOR")
+  passwordHash  String?
+  isActive      Boolean   @default(true)
+  isApproved    Boolean   @default(false)
+  emailVerified Boolean   @default(false)
+  totpEnabled   Boolean   @default(false)
+  totpSecret    String?
+  /// Last consumed TOTP time-step (single-use replay guard, #565).
+  lastTotpStep  Int?
+  /// JSON array of one-time backup codes (e.g. `["abcd-1234", …]`).
+  backupCodes   Json?
+  oauthProvider String?
+  oauthId       String?
+  createdAt     DateTime  @default(now())
+  updatedAt     DateTime  @updatedAt
+
+  sessions          Session[]
+  documentsCreated  Document[]             @relation("DocumentCreatedBy")
+  documentsUpdated  Document[]             @relation("DocumentUpdatedBy")
+  documentsReviewed Document[]             @relation("DocumentReviewer")
+  versions          Version[]
+  mediaUploaded     Media[]                @relation("MediaUploadedBy")
+  auditLogs         AuditLog[]
+  comments          DocumentComment[]
+  notifications     DocumentNotification[]
+
+  @@index([role])
+  @@index([isActive])
+}
+
+model Session {
+  id        String    @id @default(cuid())
+  userId    String
+  user      User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  /// JWT or opaque session token; optional until first persisted login (e.g. OAuth).
+  token     String?   @unique
+  expiresAt DateTime
+  revokedAt DateTime?
+  ipAddress String?
+  userAgent String?
+  createdAt DateTime  @default(now())
+
+  @@index([userId])
+  @@index([expiresAt])
+}
+
+model Document {
+  id                   String          @id @default(cuid())
+  collection           String
+  slug                 String?
+  title                String?
+  data                 Json
+  status               DocumentStatus  @default(DRAFT)
+  plainText            String?         @db.Text
+  locale               String?
+  folderId             String?
+  structuredData       Json?
+  workflowStage        String?
+  reviewerId           String?
+  reviewNote           String?         @db.Text
+  publishedAt          DateTime?
+  scheduledAt          DateTime?
+  scheduledUnpublishAt DateTime?
+  deletedAt            DateTime?
+  contentHash          String?
+  siteId               String?
+  templateId           String?
+  createdById          String
+  updatedById          String
+  createdAt            DateTime        @default(now())
+  updatedAt            DateTime        @updatedAt
+
+  createdBy       User             @relation("DocumentCreatedBy", fields: [createdById], references: [id], onDelete: Restrict)
+  updatedBy       User             @relation("DocumentUpdatedBy", fields: [updatedById], references: [id], onDelete: Restrict)
+  reviewer        User?            @relation("DocumentReviewer", fields: [reviewerId], references: [id], onDelete: SetNull)
+  folder          Folder?          @relation(fields: [folderId], references: [id], onDelete: SetNull)
+  versions        Version[]
+  formSubmissions FormSubmission[]
+
+  @@unique([collection, slug], name: "collection_slug")
+  @@index([collection])
+  @@index([status])
+  @@index([deletedAt])
+  @@index([publishedAt])
+  @@index([folderId])
+  @@index([locale])
+  @@index([scheduledAt])
+  @@index([scheduledUnpublishAt])
+  @@index([createdById])
+  @@index([updatedById])
+}
+
+model Media {
+  id           String   @id @default(cuid())
+  filename     String
+  storageKey   String   @unique
+  mimeType     String
+  fileSize     Int
+  width        Int?
+  height       Int?
+  altText      String?
+  title        String?
+  blurHash     String?
+  focalPointX  Float?
+  focalPointY  Float?
+  folderId     String?
+  uploadedById String
+  createdAt    DateTime @default(now())
+  updatedAt    DateTime @updatedAt
+
+  uploadedBy User    @relation("MediaUploadedBy", fields: [uploadedById], references: [id], onDelete: Restrict)
+  folder     Folder? @relation(fields: [folderId], references: [id], onDelete: SetNull)
+
+  @@index([folderId])
+  @@index([mimeType])
+  @@index([createdAt])
+}
+
+model Version {
+  id          String   @id @default(cuid())
+  documentId  String
+  document    Document @relation(fields: [documentId], references: [id], onDelete: Cascade)
+  data        Json
+  changedById String
+  changedBy   User     @relation(fields: [changedById], references: [id], onDelete: Restrict)
+  /// CREATE | UPDATE | DELETE (see `actions.ts` / workflow).
+  changeType  String   @default("UPDATE")
+  createdAt   DateTime @default(now())
+
+  @@index([documentId])
+  @@index([createdAt])
+}
+
+model Folder {
+  id        String   @id @default(cuid())
+  name      String
+  /// Discriminator for folder trees (e.g. `documents`, `media`).
+  scope     String
+  parentId  String?
+  position  Int      @default(0)
+  createdAt DateTime @default(now())
+
+  parent    Folder?    @relation("FolderTree", fields: [parentId], references: [id], onDelete: Cascade)
+  children  Folder[]   @relation("FolderTree")
+  documents Document[]
+  media     Media[]
+
+  @@index([scope])
+  @@index([parentId])
+  @@index([scope, parentId, position])
+}
+
+model Redirect {
+  id          String   @id @default(cuid())
+  source      String
+  destination String
+  statusCode  Int      @default(301)
+  isRegex     Boolean  @default(false)
+  notes       String?
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@unique([source])
+  @@index([createdAt])
+}
+
+model FormSchemaVersion {
+  id          String   @id @default(cuid())
+  formId      String
+  version     Int
+  fields      Json
+  notes       String?
+  createdById String?
+  createdAt   DateTime @default(now())
+
+  @@unique([formId, version])
+  @@index([formId])
+}
+
+model FormSubmission {
+  id              String    @id @default(cuid())
+  entryNumber     Int?
+  formId          String
+  form            Document  @relation(fields: [formId], references: [id], onDelete: Cascade)
+  schemaVersionId String?
+  data            Json
+  normalizedData  Json?
+  attribution     Json?
+  senderName      String?
+  senderEmail     String?
+  senderPhone     String?
+  preview         String?
+  status          String    @default("new")
+  unread          Boolean   @default(true)
+  starred         Boolean   @default(false)
+  archived        Boolean   @default(false)
+  spamStatus      String    @default("clean")
+  ipAddressHash   String?
+  userAgent       String?
+  referrer        String?
+  pageUrl         String?
+  utmSource       String?
+  utmMedium       String?
+  utmCampaign     String?
+  submittedAt     DateTime  @default(now())
+  readAt          DateTime?
+  archivedAt      DateTime?
+  createdAt       DateTime  @default(now())
+  updatedAt       DateTime  @updatedAt
+
+  files FormSubmissionFile[]
+
+  @@index([formId])
+  @@index([submittedAt])
+  @@index([createdAt])
+  @@index([unread])
+  @@index([starred])
+  @@index([archived])
+}
+
+model FormSubmissionFile {
+  id                String   @id @default(cuid())
+  submissionId      String
+  fieldKey          String
+  mediaAssetId      String?
+  fileName          String
+  mimeType          String
+  sizeBytes         Int
+  storageKey        String
+  publicUrl         String?
+  secureDownloadUrl String?
+  createdAt         DateTime @default(now())
+
+  submission FormSubmission @relation(fields: [submissionId], references: [id], onDelete: Cascade)
+
+  @@index([submissionId])
+}
+
+model FormWebhook {
+  id                 String    @id @default(cuid())
+  formId             String
+  url                String
+  secret             String
+  enabled            Boolean   @default(true)
+  events             Json
+  retryCount         Int       @default(0)
+  lastDeliveryAt     DateTime?
+  lastDeliveryStatus String?
+  createdAt          DateTime  @default(now())
+  updatedAt          DateTime  @updatedAt
+
+  @@index([formId])
+}
+
+model AuditLog {
+  id        String   @id @default(cuid())
+  event     String
+  userId    String?
+  user      User?    @relation(fields: [userId], references: [id], onDelete: SetNull)
+  details   Json?
+  ipAddress String?
+  userAgent String?
+  createdAt DateTime @default(now())
+
+  @@index([event])
+  @@index([userId])
+  @@index([createdAt])
+}
+
+model PasswordResetToken {
+  id        String    @id @default(cuid())
+  userId    String
+  tokenHash String
+  expiresAt DateTime
+  usedAt    DateTime?
+  createdAt DateTime  @default(now())
+
+  @@index([tokenHash])
+  @@index([userId])
+}
+
+model MediaUsage {
+  id          String   @id @default(cuid())
+  mediaId     String
+  documentId  String
+  fieldPath   String?
+  createdAt   DateTime @default(now())
+
+  @@unique([mediaId, documentId, fieldPath])
+  @@index([mediaId])
+  @@index([documentId])
+}
+
+model ScriptTag {
+  id          String   @id @default(cuid())
+  name        String
+  code        String   @db.Text
+  placement   String
+  scope       String
+  targetPaths String[]
+  priority    Int      @default(100)
+  enabled     Boolean  @default(true)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@index([enabled])
+  @@index([placement])
+}
+
+model PageTemplate {
+  id          String   @id @default(cuid())
+  name        String
+  description String?
+  category    String   @default("content")
+  tree        Json
+  thumbnail   String?
+  builtIn     Boolean  @default(false)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@index([category])
+  @@index([builtIn])
+}
+
+model SavedSection {
+  id          String   @id @default(cuid())
+  name        String
+  description String?
+  category    String   @default("content")
+  tree        Json
+  thumbnail   String?
+  usageCount  Int      @default(0)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@index([category])
+}
+
+/// Persisted Yjs state for a document, used by `@prenta/realtime`.
+///
+/// Each row holds the encoded Yjs document (`Y.encodeStateAsUpdate`) plus a
+/// version vector so consumers can serve incremental sync to late joiners
+/// without replaying full history. There is at most one row per `documentId`;
+/// it is upserted on every persistence flush from a live collaboration room.
+///
+/// The model is *optional*: an Prenta deployment that does not use the
+/// realtime collaboration features can leave this table empty. Cms-core only
+/// touches it when the `/realtime/sync` endpoint is hit.
+model DocumentCRDT {
+  /// References `Document.id`. We don't declare a Prisma relation here so
+  /// the realtime stack stays decoupled from the `Document` schema; the
+  /// constraint is enforced at the application layer.
+  documentId    String   @id
+  /// Yjs `encodeStateAsUpdate` bytes. Use bytea on Postgres.
+  state         Bytes
+  /// Yjs `encodeStateVector` bytes — lets us reply to a `SyncStep1` without
+  /// decoding the full doc when persistence is hot but the room is cold.
+  stateVector   Bytes
+  /// Monotonic counter for optimistic locking (incremented on every save).
+  version       Int      @default(0)
+  /// Wall-clock of the most recent flush.
+  lastUpdatedAt DateTime @default(now()) @updatedAt
+  /// User id of the most recent editor, if known.
+  lastUpdatedById String?
+  createdAt     DateTime @default(now())
+
+  @@index([lastUpdatedAt])
+}
+
+/// Threaded inline comment anchored to a Yjs document range.
+///
+/// Comments survive concurrent edits because the `anchor` field stores Yjs
+/// *relative positions* (the binary blob you get from
+/// `Y.createRelativePositionFromTypeIndex` followed by
+/// `Y.encodeRelativePosition`) rather than absolute offsets. Slice 5 binds
+/// these back to live ranges in the TipTap document.
+///
+/// Threading is single-level: a top-level comment has `parentId == null`,
+/// replies set `parentId` to the root comment's id. Deletes cascade so a
+/// resolved or removed thread cleans up its replies.
+///
+/// The model is *optional*. Deployments that don't enable Phase 3 simply
+/// leave the table empty; the cms-core API stays serviceable without it.
+model DocumentComment {
+  id           String   @id @default(cuid())
+  /// References `Document.id`. Like `DocumentCRDT`, we keep the foreign
+  /// constraint at the application layer so the realtime stack stays
+  /// decoupled from the core `Document` schema.
+  documentId   String
+  /// `null` for top-level comments; the root comment's id for replies.
+  /// Replies cannot themselves be parents — slice 5 enforces this in the
+  /// API handler.
+  parentId     String?
+  parent       DocumentComment?  @relation("CommentThread", fields: [parentId], references: [id], onDelete: Cascade)
+  replies      DocumentComment[] @relation("CommentThread")
+  /// Author of the comment. We don't cascade on user deletion so an
+  /// orphaned comment is preserved with a null `userId`; the UI can then
+  /// render "deleted user" without losing thread history.
+  userId       String?
+  user         User?    @relation(fields: [userId], references: [id], onDelete: SetNull)
+  /// Markdown body (sanitized server-side before render).
+  body         String   @db.Text
+  /// Yjs relative-position JSON: `{ from: number[]; to: number[] }` where
+  /// each entry is the Base64-encoded `encodeRelativePosition` bytes.
+  /// Stored as JSON (not Bytes) so the API can return it without an
+  /// extra encoding hop. May be null for document-level (un-anchored)
+  /// comments.
+  anchor       Json?
+  /// When set, the thread is resolved. UI hides resolved threads by
+  /// default but they remain in the table for audit.
+  resolvedAt   DateTime?
+  /// User that resolved the thread, if any.
+  resolvedById String?
+  /// Soft delete for moderation; row is preserved so replies don't lose
+  /// their parent.
+  deletedAt    DateTime?
+  createdAt    DateTime @default(now())
+  updatedAt    DateTime @updatedAt
+
+  @@index([documentId])
+  @@index([documentId, resolvedAt])
+  @@index([parentId])
+  @@index([userId])
+  @@index([createdAt])
+}
+
+// ─── Notifications (slice 6 — Phase 3) ─────────────────────────────────────────
+//
+// Per-user notification feed driven by collaboration events. Slice 6 wires
+// the comment lifecycle (reply, resolve, mention) into this table so editors
+// see "someone replied to your thread" without polling the comments API.
+//
+// The model is intentionally generic — the `kind` discriminator + `payload`
+// JSON blob keeps the schema stable while future slices add new notification
+// types (e.g. publish workflow transitions, document share invites).
+
+model DocumentNotification {
+  id          String   @id @default(cuid())
+  /// Recipient. Cascade-deletes on user removal — we don't want orphan
+  /// notifications pointing at gone-users in the dropdown.
+  userId      String
+  user        User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+  /// Discriminator. Slice 6 ships:
+  ///   - "comment_reply"   — someone replied to a thread you authored
+  ///   - "comment_resolved" — your thread was resolved by another user
+  ///   - "comment_mention" — your @handle was mentioned in a comment body
+  /// Future slices can extend this without a migration.
+  kind        String
+  /// Optional document scope so the bell can group / link notifications.
+  documentId  String?
+  /// Optional comment scope (the comment that triggered the notification).
+  commentId   String?
+  /// `{ actorId, actorName, excerpt?, ... }`. Shape depends on `kind`;
+  /// the service module documents each variant.
+  payload     Json
+  /// `null` until the user marks the notification read. We keep read rows
+  /// in the table so the dropdown can show recent activity, but the bell
+  /// counts only `readAt = null` rows.
+  readAt      DateTime?
+  createdAt   DateTime @default(now())
+
+  @@index([userId, readAt])
+  @@index([userId, createdAt])
+  @@index([documentId])
+  @@index([commentId])
+}