@rmdes/indiekit-endpoint-posts 1.0.0-beta.30 → 1.0.0-beta.31

package/index.js

@@ -5,6 +5,7 @@ import { ISO_6709_RE, isRequired } from "@indiekit/util";
 import express from "express";
 
 import { deleteController } from "./lib/controllers/delete.js";
+import { purgeController } from "./lib/controllers/purge.js";
 import { formController } from "./lib/controllers/form.js";
 import { newController } from "./lib/controllers/new.js";
 import { postController } from "./lib/controllers/post.js";
@@ -58,6 +59,9 @@ export default class PostsEndpoint {
     router.get(["/:uid/delete", "/:uid/undelete"], deleteController.get);
     router.post(["/:uid/delete", "/:uid/undelete"], deleteController.post);
 
+    router.get("/:uid/purge", purgeController.get);
+    router.post("/:uid/purge", purgeController.post);
+
     return router;
   }
 

package/lib/controllers/post.js

@@ -44,6 +44,14 @@ export const postController = async (request, response) => {
             text: response.locals.__("posts.undelete.action"),
           }
         : {},
+      scope && checkScope(scope, "delete") && properties.deleted
+        ? {
+            classes: "actions__link--warning",
+            href: path.join(request.baseUrl + request.path, "/purge"),
+            icon: "delete",
+            text: response.locals.__("posts.purge.action"),
+          }
+        : {},
     ],
     redirectUri: path.join(request.baseUrl, request.params.uid),
     success: request.query.success,

package/lib/controllers/purge.js

@@ -0,0 +1,54 @@
+import { checkScope } from "@indiekit/endpoint-micropub/lib/scope.js";
+
+import { purgePost } from "../utils.js";
+
+export const purgeController = {
+  /**
+   * Confirm permanent deletion
+   * @type {import("express").RequestHandler}
+   */
+  async get(request, response) {
+    const { postName, postsPath, properties, scope } = response.locals;
+
+    if (scope && checkScope(scope, "delete") && properties.deleted) {
+      return response.render("post-purge", {
+        title: response.locals.__("posts.purge.title"),
+        parent: { text: postName },
+      });
+    }
+
+    response.redirect(postsPath);
+  },
+
+  /**
+   * Permanently delete post from database
+   * @type {import("express").RequestHandler}
+   */
+  async post(request, response) {
+    const { application } = request.app.locals;
+    const { properties, postsPath } = response.locals;
+    const uid = request.params.uid;
+
+    try {
+      // Only allow purging already soft-deleted posts
+      if (!properties.deleted) {
+        response.redirect(postsPath);
+        return;
+      }
+
+      await purgePost(uid, application);
+
+      const message = encodeURIComponent(
+        response.locals.__("posts.purge.success"),
+      );
+      response.redirect(`${request.baseUrl}?success=${message}`);
+    } catch (error) {
+      response.status(error.status || 500);
+      response.render("post-purge", {
+        title: response.locals.__("posts.purge.title"),
+        parent: { text: postName },
+        error,
+      });
+    }
+  },
+};

package/lib/utils.js

@@ -278,6 +278,26 @@ export const getPostTypeCounts = async (application) => {
     .toArray();
 };
 
+/**
+ * Permanently delete a post from MongoDB
+ * @param {string} uid - MongoDB ObjectId string
+ * @param {object} application - Application object with collections
+ * @returns {Promise<boolean>} True if deleted, false if not found
+ */
+export const purgePost = async (uid, application) => {
+  const postsCollection = application?.collections?.get("posts");
+  if (!postsCollection) {
+    return false;
+  }
+
+  // Match _id as string to avoid BSON version issues
+  const result = await postsCollection.deleteOne({
+    $expr: { $eq: [{ $toString: "$_id" }, uid] },
+  });
+
+  return result.deletedCount > 0;
+};
+
 /**
  * Get post URL from ID
  * @param {string} id - ID

package/locales/en.json

@@ -52,7 +52,15 @@
     "undelete": {
       "action": "Restore post",
       "title": "Are you sure you want to restore this post?",
-      "submit": "I’m sure – restore this post"
+      "submit": "I'm sure – restore this post"
+    },
+    "purge": {
+      "action": "Permanently delete",
+      "title": "Permanently delete this post?",
+      "warning": "This will remove the post from the database. This action cannot be undone.",
+      "submit": "I'm sure – permanently delete",
+      "cancel": "No – return to posts",
+      "success": "Post permanently deleted"
     },
     "form": {
       "advancedOptions": "Advanced options",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rmdes/indiekit-endpoint-posts",
-  "version": "1.0.0-beta.30",
+  "version": "1.0.0-beta.31",
   "description": "Post management endpoint for Indiekit with syndicate form fix. View posts published by your Micropub endpoint and publish new posts to it.",
   "keywords": [
     "indiekit",

package/views/post-purge.njk

@@ -0,0 +1,21 @@
+{% extends "form.njk" %}
+
+{% block form %}
+  {{ heading({
+    text: title,
+    parent: parent
+  }) }}
+
+  {{ prose({
+    text: __("posts.purge.warning")
+  }) }}
+
+  {{ button({
+    classes: "button--warning",
+    text: __("posts.purge.submit")
+  }) }}
+
+  {{ prose({
+    text: "[" + __("posts.purge.cancel") + "](" + postsPath + ")"
+  }) }}
+{% endblock %}