@raclettejs/core 0.1.16 → 0.1.18

package/CHANGELOG.md

@@ -7,15 +7,42 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-## [0.1.16] - 05.11.2025 <a href="https://gitlab.com/raclettejs/core/-/compare/v0.1.15...v0.1.16" target="_blank" rel="noopener"><b>Overview of all changes</b></a>
+## [0.1.18] - 05.12.2025 <a href="https://gitlab.com/raclettejs/core/-/compare/v0.1.17...v0.1.18" target="_blank" rel="noopener"><b>Overview of all changes</b></a>
+
+### Changed
+
+- Backend: project data type deletion routes temporarily disabled. Will be reenabled soon
+- Frontend: updated dependencies
+
+### Added
+
+- Frontend: usermenu - added alternate render mode for inline composition if no trigger id/title is set
+- Frontend: Appbar can now house interactionLinks and inline compositions
+- Frontend: appbar can now launch compositions in a floating window
+- Backend: added restore endpoints for tag/user/composition/interactionLink
+- Frontend: Token expiry will now redirect automatically to login. Last location during auth loss will be used for redirect later
+- Frontend: Simple search input can now receive custom label and uses debounce before model update
+- Frontend: PageNavigation can now rail
+- Backend: Project dataType can now hold config values
+- Global: Added new Tagtype "event"
+
+### Fixed
+
+- Backend: isDeleted handling in getAll routes. isDeleted needs to be explicitly true to see deleted entries
+- Backend: TTL for auth token is not derived from raclette.config
+
+## [0.1.17] - 06.11.2025 <a href="https://gitlab.com/raclettejs/core/-/compare/v0.1.15...v0.1.17" target="_blank" rel="noopener"><b>Overview of all changes</b></a>
 
 ### Fixed
 
 - Frontend: axios Delete handling
+- Frontend: retrieval of deleted compositions/interactionLinks during socket join
+- Frontend: notifications for delete events now show name
 
 ### Added
 
 - Frontend: added i18n keys
+- Frontend: hard delete of core datatypes
 - Backend: getAll routes for core datatypes do now respect set filters
 
 ## [0.1.15] - 02.11.2025 <a href="https://gitlab.com/raclettejs/core/-/compare/v0.1.13...v0.1.15" target="_blank" rel="noopener"><b>Overview of all changes</b></a>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raclettejs/core",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "description": "racletteJS core package",
   "repository": "https://gitlab.com/raclettejs/core",
   "author": "Pacifico Digital Explorations GmbH <info@raclettejs.com>",
@@ -69,7 +69,7 @@
   },
   "devDependencies": {
     "@eslint/js": "9.35.0",
-    "@raclettejs/types": "0.1.16",
+    "@raclettejs/types": "^0.1.18",
     "@types/fs-extra": "11.0.4",
     "@types/js-yaml": "4.0.9",
     "@types/node": "24.5.1",

package/services/backend/package.json

@@ -30,7 +30,7 @@
     "@fastify/sensible": "6.0.3",
     "@sinclair/typebox": "0.34.41",
     "@types/vary": "1.1.3",
-    "axios": "1.12.2",
+    "axios": "1.13.2",
     "bcrypt": "6.0.0",
     "copyfiles": "2.4.1",
     "fastify": "5.6.0",
@@ -62,4 +62,4 @@
     "typescript": "5.9.2",
     "typescript-eslint": "8.44.0"
   }
-}
+}

package/services/backend/src/core/backgroundTasks/taskManager.ts

@@ -122,7 +122,7 @@ const setupTaskManager = (fastify: FastifyInstance) => {
 
       if (removed) {
         taskMetadata.delete(name)
-        fastify.log.info(`Cancelled task: ${name}`)
+        fastify.log.info(`Canceled task: ${name}`)
       } else {
         fastify.log.warn(`Task not found: ${name}`)
       }

package/services/backend/src/core/config/configService.ts

@@ -13,6 +13,7 @@ type RacletteBackendConfig = {
   plugins?: string[]
   global?: {
     requireAuthentication?: boolean
+    authTokenExpiryDays?: number
   }
   additionalPluginPaths?: string[]
 }
@@ -130,6 +131,9 @@ export class ConfigService {
   public isAuthRequired(): boolean {
     return this.config?.global?.requireAuthentication ?? true
   }
+  public getAuthTokenExpiryDays(): number {
+    return this.config?.global?.authTokenExpiryDays ?? 30
+  }
   public isAdminTagRequired(): boolean {
     return this.config?.onlyAllowLoginWithAdminTag ?? false
   }

package/services/backend/src/core/sockets/socketManager.ts

@@ -93,6 +93,7 @@ const registerSocketEvents = (fastify: FastifyInstance): void => {
           "composition",
           "readAll",
           fastify,
+          { isDeleted: false },
         )
       }
 
@@ -103,6 +104,7 @@ const registerSocketEvents = (fastify: FastifyInstance): void => {
           "interactionLink",
           "readAll",
           fastify,
+          { isDeleted: false },
         )
       }
 

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/account/account.service.ts

@@ -6,7 +6,7 @@ import type {
 import type { PluginFastifyInstance } from "types"
 import { v4 as uuidv4, validate } from "uuid"
 import { createAccountPayload } from "./helpers/payload"
-import { Model } from "mongoose"
+import type { Model } from "mongoose"
 
 export type AccountBody = Partial<Omit<AccountType, "_id">> & {
   _id?: string
@@ -277,9 +277,13 @@ export class AccountService {
         )
       }
 
-      await this.accountModel.deleteOne({ _id: id })
+      const res = await account.deleteOne()
 
-      return account.toObject ? account.toObject() : account
+      if (res?.deletedCount === 1) {
+        return account.toObject ? account.toObject() : account
+      }
+
+      throw new Error(`Deletion of Account with ID ${id} was not successful.`)
     } catch (error: any) {
       fastify.log.error(error.message)
       throw error

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/account/routes/route.account.hardDelete.ts

@@ -2,6 +2,7 @@ import type { Static } from "@sinclair/typebox"
 import type { FastifyReply, FastifyRequest } from "fastify"
 import type { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
+import { ForbiddenError } from "@/utils/errors"
 
 const ParamsSchema = Type.Object({
   _id: Type.String(),
@@ -17,19 +18,23 @@ export default (fastify: PluginFastifyInstance) => {
     }>,
     reply: FastifyReply,
   ) => {
-    try {
-      const { _id } = req.params
+    if (req.user.isAdmin) {
+      try {
+        const { _id } = req.params
 
-      const payload = await accountService.hardDeleteAccount(
-        fastify,
-        req.requestParams,
-        _id,
-      )
+        const payload = await accountService.hardDeleteAccount(
+          fastify,
+          req.requestParams,
+          _id,
+        )
 
-      return payload
-    } catch (error: any) {
-      fastify.log.error(error.message)
-      return reply.internalServerError(error.message)
+        return payload
+      } catch (error: any) {
+        fastify.log.error(error.message)
+        return reply.internalServerError(error.message)
+      }
+    } else {
+      throw new ForbiddenError("Only admins can hard delete this core datatype")
     }
   }
 

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/composition/composition.service.ts

@@ -97,6 +97,8 @@ export class CompositionService {
     filters: Record<string, any> = {},
   ): Promise<CompositionType[]> {
     try {
+      if (filters.isDeleted !== true && filters.isDeleted !== "true")
+        filters.isDeleted = false
       return await this.compositionModel
         .find({
           ...filters,
@@ -292,7 +294,7 @@ export class CompositionService {
   ): Promise<CompositionType> {
     try {
       const composition = await this.compositionModel.findOne({
-        id,
+        _id: id,
         isDeleted: true,
       })
 
@@ -302,9 +304,15 @@ export class CompositionService {
         )
       }
 
-      await this.compositionModel.deleteOne({ _id: id })
+      const res = await composition.deleteOne()
 
-      return composition.toObject ? composition.toObject() : composition
+      if (res?.deletedCount === 1) {
+        return composition.toObject ? composition.toObject() : composition
+      }
+
+      throw new Error(
+        `Deletion of Composition with ID ${id} was not successful.`,
+      )
     } catch (error: any) {
       fastify.log.error(error.message)
       throw error

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/composition/routes/index.ts

@@ -5,11 +5,13 @@ import hardDelete from "./route.composition.hardDelete"
 import patch from "./route.composition.patch"
 import post from "./route.composition.post"
 import remove from "./route.composition.remove"
+import restore from "./route.composition.restore"
 
 const registerRoutes = async (fastify: PluginFastifyInstance) => {
   await fastify.get("/composition/all", getAll(fastify))
   await fastify.get("/composition/:_id", get(fastify))
   await fastify.patch("/composition/:_id", patch(fastify))
+  await fastify.patch("/composition/:_id/restore", restore(fastify))
   await fastify.post("/composition", post(fastify))
   await fastify.delete("/composition/:_id", remove(fastify))
   await fastify.delete("/composition/:_id/hard", hardDelete(fastify))

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/composition/routes/route.composition.hardDelete.ts

@@ -2,6 +2,7 @@ import type { Static } from "@sinclair/typebox"
 import type { FastifyReply, FastifyRequest } from "fastify"
 import type { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
+import { ForbiddenError } from "@/utils/errors"
 
 const ParamsSchema = Type.Object({
   _id: Type.String(),
@@ -17,19 +18,23 @@ export default (fastify: PluginFastifyInstance) => {
     }>,
     reply: FastifyReply,
   ) => {
-    try {
-      const { _id } = req.params
+    if (req.user.isAdmin) {
+      try {
+        const { _id } = req.params
 
-      const payload = await compositionService.hardDeleteComposition(
-        fastify,
-        req.requestParams,
-        _id,
-      )
+        const payload = await compositionService.hardDeleteComposition(
+          fastify,
+          req.requestParams,
+          _id,
+        )
 
-      return payload
-    } catch (error: any) {
-      fastify.log.error(error.message)
-      return reply.internalServerError(error.message)
+        return payload
+      } catch (error: any) {
+        fastify.log.error(error.message)
+        return reply.internalServerError(error.message)
+      }
+    } else {
+      throw new ForbiddenError("Only admins can hard delete this core datatype")
     }
   }
 

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/composition/routes/route.composition.restore.ts

@@ -0,0 +1,55 @@
+import type { Static } from "@sinclair/typebox"
+import type { FastifyReply, FastifyRequest } from "fastify"
+import { PluginFastifyInstance } from "types"
+import { Type } from "@sinclair/typebox"
+import { ForbiddenError } from "@/utils/errors"
+
+const ParamsSchema = Type.Object({
+  _id: Type.String(),
+})
+type Params = Static<typeof ParamsSchema>
+
+export default (fastify: PluginFastifyInstance) => {
+  const compositionService = fastify.custom.compositionService
+
+  const handler = async (
+    req: FastifyRequest<{ Params: Params }>,
+    reply: FastifyReply,
+  ) => {
+    try {
+      if (req.user.isAdmin) {
+        const { _id } = req.params
+
+        const payload = await compositionService.updateComposition(
+          fastify,
+          req.requestParams,
+          _id,
+          { isDeleted: false },
+          req.user._id,
+        )
+
+        return payload
+      } else {
+        throw new ForbiddenError("Only admins can restore this core datatype")
+      }
+    } catch (error: any) {
+      fastify.log.error(error.message)
+      return reply.internalServerError(error.message)
+    }
+  }
+
+  return {
+    handler,
+    onRequest: [fastify.authenticate],
+    config: {
+      type: "dataRestore",
+      broadcastChannels: ["compositionRestored"],
+    },
+    schema: {
+      summary: "restore a composition by id",
+      description: "Restore a composition",
+      tags: ["core/composition"],
+      params: ParamsSchema,
+    },
+  }
+}

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/interactionLink.service.ts

@@ -5,8 +5,8 @@ import type {
 } from "@c/payload/payloadTypes"
 import { v4 as uuidv4, validate } from "uuid"
 import { createInteractionLinkPayload } from "./helpers/payload"
-import { PluginFastifyInstance } from "types"
-import { Model } from "mongoose"
+import type { PluginFastifyInstance } from "types"
+import type { Model } from "mongoose"
 
 export type InteractionLinkBody = Partial<Omit<InteractionLinkType, "_id">> & {
   _id?: string
@@ -100,6 +100,8 @@ export class InteractionLinkService {
     filters: Record<string, any> = {},
   ): Promise<InteractionLinkType[]> {
     try {
+      if (filters.isDeleted !== true && filters.isDeleted !== "true")
+        filters.isDeleted = false
       return await this.interactionLinkModel
         .find({
           ...filters,
@@ -352,11 +354,17 @@ export class InteractionLinkService {
         )
       }
 
-      await this.interactionLinkModel.deleteOne({ id })
+      const res = await interactionLink.deleteOne()
 
-      return interactionLink.toObject
-        ? interactionLink.toObject()
-        : interactionLink
+      if (res?.deletedCount === 1) {
+        return interactionLink.toObject
+          ? interactionLink.toObject()
+          : interactionLink
+      }
+
+      throw new Error(
+        `Deletion of InteractionLink with ID ${id} was not successful.`,
+      )
     } catch (error: any) {
       fastify.log.error(error.message)
       throw error

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/index.ts

@@ -5,11 +5,13 @@ import hardDelete from "./route.interactionLink.hardDelete"
 import patch from "./route.interactionLink.patch"
 import post from "./route.interactionLink.post"
 import remove from "./route.interactionLink.remove"
+import restore from "./route.interactionLink.restore"
 
 const registerRoutes = async (fastify: PluginFastifyInstance) => {
   await fastify.get("/interactionLink/all", getAll(fastify))
   await fastify.get("/interactionLink/:_id", get(fastify))
   await fastify.patch("/interactionLink/:_id", patch(fastify))
+  await fastify.patch("/interactionLink/:_id/restore", restore(fastify))
   await fastify.post("/interactionLink", post(fastify))
   await fastify.delete("/interactionLink/:_id", remove(fastify))
   await fastify.delete("/interactionLink/:_id/hard", hardDelete(fastify))

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/route.interactionLink.hardDelete.ts

@@ -2,6 +2,7 @@ import type { Static } from "@sinclair/typebox"
 import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
+import { ForbiddenError } from "@/utils/errors"
 
 const ParamsSchema = Type.Object({
   _id: Type.String(),
@@ -18,15 +19,21 @@ export default (fastify: PluginFastifyInstance) => {
     reply: FastifyReply,
   ) => {
     try {
-      const { _id } = req.params
+      if (req.user.isAdmin) {
+        const { _id } = req.params
 
-      const payload = await interactionLinkService.hardDeleteInteractionLink(
-        fastify,
-        req.requestParams,
-        _id,
-      )
+        const payload = await interactionLinkService.hardDeleteInteractionLink(
+          fastify,
+          req.requestParams,
+          _id,
+        )
 
-      return payload
+        return payload
+      } else {
+        throw new ForbiddenError(
+          "Only admins can hard delete this core datatype",
+        )
+      }
     } catch (error: any) {
       fastify.log.error(error.message)
       return reply.internalServerError(error.message)

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/route.interactionLink.restore.ts

@@ -0,0 +1,55 @@
+import type { Static } from "@sinclair/typebox"
+import type { FastifyReply, FastifyRequest } from "fastify"
+import { PluginFastifyInstance } from "types"
+import { Type } from "@sinclair/typebox"
+import { ForbiddenError } from "@/utils/errors"
+
+const ParamsSchema = Type.Object({
+  _id: Type.String(),
+})
+type Params = Static<typeof ParamsSchema>
+
+export default (fastify: PluginFastifyInstance) => {
+  const interactionLinkService = fastify.custom.interactionLinkService
+
+  const handler = async (
+    req: FastifyRequest<{ Params: Params }>,
+    reply: FastifyReply,
+  ) => {
+    try {
+      if (req.user.isAdmin) {
+        const { _id } = req.params
+
+        const payload = await interactionLinkService.updateInteractionLink(
+          fastify,
+          req.requestParams,
+          _id,
+          { isDeleted: false },
+          req.user._id,
+        )
+
+        return payload
+      } else {
+        throw new ForbiddenError("Only admins can restore this core datatype")
+      }
+    } catch (error: any) {
+      fastify.log.error(error.message)
+      return reply.internalServerError(error.message)
+    }
+  }
+
+  return {
+    handler,
+    onRequest: [fastify.authenticate],
+    config: {
+      type: "dataRestore",
+      broadcastChannels: ["interactionLinkRestored"],
+    },
+    schema: {
+      summary: "restore a interactionLink by id",
+      description: "Restore a interactionLink",
+      tags: ["core/interactionLink"],
+      params: ParamsSchema,
+    },
+  }
+}

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/project/project.model.ts

@@ -34,6 +34,23 @@ const projectSchema = new Schema(
 
     // soft delete
     isDeleted: { type: Boolean, default: false },
+    config: {
+      type: {
+        tags: {
+          type: [Schema.Types.String],
+          ref: "raclette__core-tag",
+          default: [],
+        },
+        railPageNavigation: {
+          type: Boolean,
+          default: false,
+        },
+      },
+      default: () => ({
+        tags: [],
+        railPageNavigation: false,
+      }),
+    },
   },
   { timestamps: true },
 )

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/project/project.schema.ts

@@ -2,16 +2,28 @@ import type { Static } from "@sinclair/typebox"
 import type { Document } from "mongoose"
 import { Type } from "@sinclair/typebox"
 import { PluginFastifyInstance } from "types"
-
 /**
  * Base Project Schema - Fields common to all operations
  */
+const projectConfigSchema = Type.Optional(
+  Type.Object(
+    {
+      tags: Type.Array(Type.String(), { default: [] }),
+      railPageNavigation: Type.Boolean({ default: false }),
+    },
+    {
+      $id: "#project/config",
+      title: "core/project-config",
+    },
+  ),
+)
 const baseProjectSchema = {
   title: Type.Optional(Type.String({ maxLength: 200 })),
   account: Type.Optional(Type.String({ default: null })),
   tags: Type.Optional(Type.Array(Type.String(), { default: [] })),
   description: Type.Optional(Type.String()),
   isDefault: Type.Optional(Type.Boolean({ default: false })),
+  config: projectConfigSchema,
 }
 
 /**
@@ -51,11 +63,7 @@ export const projectCreateSchema = Type.Object(
 export const projectUpdateSchema = Type.Object(
   {
     _id: Type.Optional(Type.String()),
-    title: Type.Optional(Type.String({ maxLength: 200 })),
-    account: Type.Optional(Type.String()),
-    tags: Type.Optional(Type.Array(Type.String())),
-    description: Type.Optional(Type.String()),
-    isDefault: Type.Optional(Type.Boolean()),
+    ...baseProjectSchema,
   },
   {
     $id: "#project/update",
@@ -104,4 +112,8 @@ export const registerSchemas = (fastify: PluginFastifyInstance) => {
     schema: projectUpdateSchema,
     name: "ProjectUpdate",
   })
+  fastify.registerSchema({
+    schema: projectConfigSchema,
+    name: "ProjectConfig",
+  })
 }

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/project/project.service.ts

@@ -10,8 +10,8 @@ import type {
 import type { QueryOptions } from "@m/database/providers/mongodb/service"
 import { v4 as uuidv4, validate } from "uuid"
 import { createProjectPayload } from "./helpers/payload"
-import { Model } from "mongoose"
-import { PluginFastifyInstance } from "types"
+import type { Model } from "mongoose"
+import type { PluginFastifyInstance } from "types"
 
 export type ProjectBody = Partial<Omit<ProjectType, "_id">> & { _id?: string }
 
@@ -316,9 +316,13 @@ export class ProjectService {
         )
       }
 
-      await this.projectModel.deleteOne({ _id: id })
+      const res = await project.deleteOne()
 
-      return project.toObject ? project.toObject() : project
+      if (res?.deletedCount === 1) {
+        return project.toObject ? project.toObject() : project
+      }
+
+      throw new Error(`Deletion of Project with ID ${id} was not successful.`)
     } catch (error: any) {
       fastify.log.error(error.message)
       throw error

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/project/routes/index.ts

@@ -1,10 +1,10 @@
 import { PluginFastifyInstance } from "types"
 import get from "./route.project.get"
 import getAll from "./route.project.getAll"
-import hardDelete from "./route.project.hardDelete"
 import patch from "./route.project.patch"
 import post from "./route.project.post"
-import remove from "./route.project.remove"
+//import hardDelete from "./route.project.hardDelete"
+//import remove from "./route.project.remove"
 
 const registerRoutes = async (fastify: PluginFastifyInstance) => {
   await fastify.get("/project/all", getAll(fastify))
@@ -12,9 +12,9 @@ const registerRoutes = async (fastify: PluginFastifyInstance) => {
 
   await fastify.post("/project", post(fastify))
   await fastify.patch("/project/:_id", patch(fastify))
-
-  await fastify.delete("/project/:_id", remove(fastify))
-  await fastify.delete("/project/:_id/hard", hardDelete(fastify))
+  // TODO reenable once we have deletion concept and space datatype implemented
+  //await fastify.delete("/project/:_id", remove(fastify))
+  //await fastify.delete("/project/:_id/hard", hardDelete(fastify))
 }
 
 export default registerRoutes

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/tag/routes/index.ts

@@ -5,11 +5,13 @@ import hardDelete from "./route.tag.hardDelete"
 import patch from "./route.tag.patch"
 import post from "./route.tag.post"
 import remove from "./route.tag.remove"
+import restore from "./route.tag.restore"
 
 const registerRoutes = async (fastify: PluginFastifyInstance) => {
   await fastify.get("/tag/all", getAll(fastify))
   await fastify.get("/tag/:_id", get(fastify))
   await fastify.patch("/tag/:_id", patch(fastify))
+  await fastify.patch("/tag/:_id/restore", restore(fastify))
   await fastify.post("/tag/:project/:_id", post(fastify))
   await fastify.delete("/tag/:_id", remove(fastify))
   await fastify.delete("/tag/:_id/hard", hardDelete(fastify))