@sonicjs-cms/core 2.0.0-alpha.1 → 2.0.0-alpha.11

package/migrations/005_stage7_workflow_automation.sql

@@ -0,0 +1,294 @@
+-- Stage 7: Workflow & Automation Migration
+-- This migration adds workflow and automation capabilities to SonicJS
+
+-- Workflow States Table
+CREATE TABLE IF NOT EXISTS workflow_states (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  name TEXT NOT NULL,
+  description TEXT,
+  color TEXT DEFAULT '#6B7280',
+  is_initial INTEGER DEFAULT 0,
+  is_final INTEGER DEFAULT 0,
+  created_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+
+-- Insert default workflow states
+INSERT OR IGNORE INTO workflow_states (id, name, description, color, is_initial, is_final) VALUES
+('draft', 'Draft', 'Content is being worked on', '#F59E0B', 1, 0),
+('pending-review', 'Pending Review', 'Content is waiting for review', '#3B82F6', 0, 0),
+('approved', 'Approved', 'Content has been approved', '#10B981', 0, 0),
+('published', 'Published', 'Content is live', '#059669', 0, 1),
+('rejected', 'Rejected', 'Content was rejected', '#EF4444', 0, 1),
+('archived', 'Archived', 'Content has been archived', '#6B7280', 0, 1);
+
+-- Workflows Table
+CREATE TABLE IF NOT EXISTS workflows (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  name TEXT NOT NULL,
+  description TEXT,
+  collection_id TEXT,
+  is_active INTEGER DEFAULT 1,
+  auto_publish INTEGER DEFAULT 0,
+  require_approval INTEGER DEFAULT 1,
+  approval_levels INTEGER DEFAULT 1,
+  created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (collection_id) REFERENCES collections(id) ON DELETE CASCADE
+);
+
+-- Workflow Transitions Table
+CREATE TABLE IF NOT EXISTS workflow_transitions (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  workflow_id TEXT NOT NULL,
+  from_state_id TEXT NOT NULL,
+  to_state_id TEXT NOT NULL,
+  required_permission TEXT,
+  auto_transition INTEGER DEFAULT 0,
+  transition_conditions TEXT, -- JSON
+  created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (workflow_id) REFERENCES workflows(id) ON DELETE CASCADE,
+  FOREIGN KEY (from_state_id) REFERENCES workflow_states(id),
+  FOREIGN KEY (to_state_id) REFERENCES workflow_states(id)
+);
+
+-- Content Workflow Status Table
+CREATE TABLE IF NOT EXISTS content_workflow_status (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  content_id TEXT NOT NULL,
+  workflow_id TEXT NOT NULL,
+  current_state_id TEXT NOT NULL,
+  assigned_to TEXT,
+  due_date DATETIME,
+  created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (content_id) REFERENCES content(id) ON DELETE CASCADE,
+  FOREIGN KEY (workflow_id) REFERENCES workflows(id),
+  FOREIGN KEY (current_state_id) REFERENCES workflow_states(id),
+  FOREIGN KEY (assigned_to) REFERENCES users(id),
+  UNIQUE(content_id, workflow_id)
+);
+
+-- Workflow History Table
+CREATE TABLE IF NOT EXISTS workflow_history (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  content_id TEXT NOT NULL,
+  workflow_id TEXT NOT NULL,
+  from_state_id TEXT,
+  to_state_id TEXT NOT NULL,
+  user_id TEXT NOT NULL,
+  comment TEXT,
+  metadata TEXT, -- JSON
+  created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (content_id) REFERENCES content(id) ON DELETE CASCADE,
+  FOREIGN KEY (workflow_id) REFERENCES workflows(id),
+  FOREIGN KEY (from_state_id) REFERENCES workflow_states(id),
+  FOREIGN KEY (to_state_id) REFERENCES workflow_states(id),
+  FOREIGN KEY (user_id) REFERENCES users(id)
+);
+
+-- Scheduled Content Table
+CREATE TABLE IF NOT EXISTS scheduled_content (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  content_id TEXT NOT NULL,
+  action TEXT NOT NULL, -- 'publish', 'unpublish', 'archive'
+  scheduled_at DATETIME NOT NULL,
+  timezone TEXT DEFAULT 'UTC',
+  user_id TEXT NOT NULL,
+  status TEXT DEFAULT 'pending', -- 'pending', 'completed', 'failed', 'cancelled'
+  executed_at DATETIME,
+  error_message TEXT,
+  created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (content_id) REFERENCES content(id) ON DELETE CASCADE,
+  FOREIGN KEY (user_id) REFERENCES users(id)
+);
+
+-- Notifications Table
+CREATE TABLE IF NOT EXISTS notifications (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  user_id TEXT NOT NULL,
+  type TEXT NOT NULL, -- 'workflow', 'schedule', 'system'
+  title TEXT NOT NULL,
+  message TEXT NOT NULL,
+  data TEXT, -- JSON
+  is_read INTEGER DEFAULT 0,
+  created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+);
+
+-- Notification Preferences Table
+CREATE TABLE IF NOT EXISTS notification_preferences (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  user_id TEXT NOT NULL,
+  notification_type TEXT NOT NULL,
+  email_enabled INTEGER DEFAULT 1,
+  in_app_enabled INTEGER DEFAULT 1,
+  digest_frequency TEXT DEFAULT 'daily', -- 'immediate', 'hourly', 'daily', 'weekly'
+  created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+  UNIQUE(user_id, notification_type)
+);
+
+-- Webhooks Table
+CREATE TABLE IF NOT EXISTS webhooks (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  name TEXT NOT NULL,
+  url TEXT NOT NULL,
+  secret TEXT,
+  events TEXT NOT NULL, -- JSON array of event types
+  is_active INTEGER DEFAULT 1,
+  retry_count INTEGER DEFAULT 3,
+  timeout_seconds INTEGER DEFAULT 30,
+  last_success_at DATETIME,
+  last_failure_at DATETIME,
+  failure_count INTEGER DEFAULT 0,
+  created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+
+-- Webhook Deliveries Table
+CREATE TABLE IF NOT EXISTS webhook_deliveries (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  webhook_id TEXT NOT NULL,
+  event_type TEXT NOT NULL,
+  payload TEXT NOT NULL, -- JSON
+  response_status INTEGER,
+  response_body TEXT,
+  attempt_count INTEGER DEFAULT 1,
+  delivered_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (webhook_id) REFERENCES webhooks(id) ON DELETE CASCADE
+);
+
+-- Content Versions Table (for rollback functionality)
+CREATE TABLE IF NOT EXISTS content_versions (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  content_id TEXT NOT NULL,
+  version_number INTEGER NOT NULL,
+  title TEXT NOT NULL,
+  content TEXT NOT NULL,
+  fields TEXT, -- JSON
+  user_id TEXT NOT NULL,
+  change_summary TEXT,
+  created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (content_id) REFERENCES content(id) ON DELETE CASCADE,
+  FOREIGN KEY (user_id) REFERENCES users(id),
+  UNIQUE(content_id, version_number)
+);
+
+-- Automation Rules Table
+CREATE TABLE IF NOT EXISTS automation_rules (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  name TEXT NOT NULL,
+  description TEXT,
+  trigger_type TEXT NOT NULL, -- 'content_created', 'content_updated', 'workflow_transition', 'schedule'
+  trigger_conditions TEXT, -- JSON
+  action_type TEXT NOT NULL, -- 'workflow_transition', 'send_notification', 'webhook_call', 'auto_save'
+  action_config TEXT, -- JSON
+  is_active INTEGER DEFAULT 1,
+  created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+
+-- Auto-save Drafts Table
+CREATE TABLE IF NOT EXISTS auto_save_drafts (
+  id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  content_id TEXT,
+  user_id TEXT NOT NULL,
+  title TEXT,
+  content TEXT,
+  fields TEXT, -- JSON
+  last_saved_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (content_id) REFERENCES content(id) ON DELETE CASCADE,
+  FOREIGN KEY (user_id) REFERENCES users(id),
+  UNIQUE(content_id, user_id)
+);
+
+-- Add workflow-related columns to existing content table (skip existing columns)
+ALTER TABLE content ADD COLUMN workflow_state_id TEXT DEFAULT 'draft';
+ALTER TABLE content ADD COLUMN embargo_until DATETIME;
+ALTER TABLE content ADD COLUMN expires_at DATETIME;
+ALTER TABLE content ADD COLUMN version_number INTEGER DEFAULT 1;
+ALTER TABLE content ADD COLUMN is_auto_saved INTEGER DEFAULT 0;
+
+-- Create indexes for performance
+CREATE INDEX IF NOT EXISTS idx_content_workflow_status_content_id ON content_workflow_status(content_id);
+CREATE INDEX IF NOT EXISTS idx_content_workflow_status_workflow_id ON content_workflow_status(workflow_id);
+CREATE INDEX IF NOT EXISTS idx_workflow_history_content_id ON workflow_history(content_id);
+CREATE INDEX IF NOT EXISTS idx_scheduled_content_scheduled_at ON scheduled_content(scheduled_at);
+CREATE INDEX IF NOT EXISTS idx_scheduled_content_status ON scheduled_content(status);
+CREATE INDEX IF NOT EXISTS idx_notifications_user_id ON notifications(user_id);
+CREATE INDEX IF NOT EXISTS idx_notifications_is_read ON notifications(is_read);
+CREATE INDEX IF NOT EXISTS idx_content_versions_content_id ON content_versions(content_id);
+CREATE INDEX IF NOT EXISTS idx_auto_save_drafts_user_id ON auto_save_drafts(user_id);
+CREATE INDEX IF NOT EXISTS idx_content_workflow_state ON content(workflow_state_id);
+CREATE INDEX IF NOT EXISTS idx_content_scheduled_publish ON content(scheduled_publish_at);
+
+-- Insert default workflow for collections
+INSERT OR IGNORE INTO workflows (id, name, description, collection_id, is_active, require_approval, approval_levels) 
+SELECT 
+  'default-' || id,
+  'Default Workflow for ' || name,
+  'Standard content approval workflow',
+  id,
+  1,
+  1,
+  1
+FROM collections;
+
+-- Insert default workflow transitions
+INSERT OR IGNORE INTO workflow_transitions (workflow_id, from_state_id, to_state_id, required_permission) 
+SELECT 
+  w.id,
+  'draft',
+  'pending-review',
+  'content:submit'
+FROM workflows w;
+
+INSERT OR IGNORE INTO workflow_transitions (workflow_id, from_state_id, to_state_id, required_permission) 
+SELECT 
+  w.id,
+  'pending-review',
+  'approved',
+  'content:approve'
+FROM workflows w;
+
+INSERT OR IGNORE INTO workflow_transitions (workflow_id, from_state_id, to_state_id, required_permission) 
+SELECT 
+  w.id,
+  'approved',
+  'published',
+  'content:publish'
+FROM workflows w;
+
+INSERT OR IGNORE INTO workflow_transitions (workflow_id, from_state_id, to_state_id, required_permission) 
+SELECT 
+  w.id,
+  'pending-review',
+  'rejected',
+  'content:approve'
+FROM workflows w;
+
+-- Insert default notification preferences for all users
+INSERT OR IGNORE INTO notification_preferences (user_id, notification_type, email_enabled, in_app_enabled)
+SELECT 
+  id,
+  'workflow_assigned',
+  1,
+  1
+FROM users;
+
+INSERT OR IGNORE INTO notification_preferences (user_id, notification_type, email_enabled, in_app_enabled)
+SELECT 
+  id,
+  'workflow_status_change',
+  1,
+  1
+FROM users;
+
+INSERT OR IGNORE INTO notification_preferences (user_id, notification_type, email_enabled, in_app_enabled)
+SELECT 
+  id,
+  'content_scheduled',
+  1,
+  1
+FROM users;

package/migrations/006_plugin_system.sql

@@ -0,0 +1,155 @@
+-- Plugin System Tables
+-- Migration: 006_plugin_system
+-- Description: Add plugin management system tables
+
+-- Plugins table
+CREATE TABLE IF NOT EXISTS plugins (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL UNIQUE,
+    display_name TEXT NOT NULL,
+    description TEXT,
+    version TEXT NOT NULL,
+    author TEXT NOT NULL,
+    category TEXT NOT NULL,
+    icon TEXT,
+    status TEXT DEFAULT 'inactive' CHECK (status IN ('active', 'inactive', 'error')),
+    is_core BOOLEAN DEFAULT FALSE,
+    settings JSON,
+    permissions JSON,
+    dependencies JSON,
+    download_count INTEGER DEFAULT 0,
+    rating REAL DEFAULT 0,
+    installed_at INTEGER NOT NULL,
+    activated_at INTEGER,
+    last_updated INTEGER NOT NULL,
+    error_message TEXT,
+    created_at INTEGER DEFAULT (unixepoch()),
+    updated_at INTEGER DEFAULT (unixepoch())
+);
+
+-- Plugin hooks table (registered hooks by plugins)
+CREATE TABLE IF NOT EXISTS plugin_hooks (
+    id TEXT PRIMARY KEY,
+    plugin_id TEXT NOT NULL,
+    hook_name TEXT NOT NULL,
+    handler_name TEXT NOT NULL,
+    priority INTEGER DEFAULT 10,
+    is_active BOOLEAN DEFAULT TRUE,
+    created_at INTEGER DEFAULT (unixepoch()),
+    FOREIGN KEY (plugin_id) REFERENCES plugins(id) ON DELETE CASCADE,
+    UNIQUE(plugin_id, hook_name, handler_name)
+);
+
+-- Plugin routes table
+CREATE TABLE IF NOT EXISTS plugin_routes (
+    id TEXT PRIMARY KEY,
+    plugin_id TEXT NOT NULL,
+    path TEXT NOT NULL,
+    method TEXT NOT NULL,
+    handler_name TEXT NOT NULL,
+    middleware JSON,
+    is_active BOOLEAN DEFAULT TRUE,
+    created_at INTEGER DEFAULT (unixepoch()),
+    FOREIGN KEY (plugin_id) REFERENCES plugins(id) ON DELETE CASCADE,
+    UNIQUE(plugin_id, path, method)
+);
+
+-- Plugin assets table (CSS, JS files provided by plugins)
+CREATE TABLE IF NOT EXISTS plugin_assets (
+    id TEXT PRIMARY KEY,
+    plugin_id TEXT NOT NULL,
+    asset_type TEXT NOT NULL CHECK (asset_type IN ('css', 'js', 'image', 'font')),
+    asset_path TEXT NOT NULL,
+    load_order INTEGER DEFAULT 100,
+    load_location TEXT DEFAULT 'footer' CHECK (load_location IN ('header', 'footer')),
+    is_active BOOLEAN DEFAULT TRUE,
+    created_at INTEGER DEFAULT (unixepoch()),
+    FOREIGN KEY (plugin_id) REFERENCES plugins(id) ON DELETE CASCADE
+);
+
+-- Plugin activity log
+CREATE TABLE IF NOT EXISTS plugin_activity_log (
+    id TEXT PRIMARY KEY,
+    plugin_id TEXT NOT NULL,
+    action TEXT NOT NULL,
+    user_id TEXT,
+    details JSON,
+    timestamp INTEGER DEFAULT (unixepoch()),
+    FOREIGN KEY (plugin_id) REFERENCES plugins(id) ON DELETE CASCADE
+);
+
+-- Create indexes
+CREATE INDEX IF NOT EXISTS idx_plugins_status ON plugins(status);
+CREATE INDEX IF NOT EXISTS idx_plugins_category ON plugins(category);
+CREATE INDEX IF NOT EXISTS idx_plugin_hooks_plugin ON plugin_hooks(plugin_id);
+CREATE INDEX IF NOT EXISTS idx_plugin_routes_plugin ON plugin_routes(plugin_id);
+CREATE INDEX IF NOT EXISTS idx_plugin_assets_plugin ON plugin_assets(plugin_id);
+CREATE INDEX IF NOT EXISTS idx_plugin_activity_plugin ON plugin_activity_log(plugin_id);
+CREATE INDEX IF NOT EXISTS idx_plugin_activity_timestamp ON plugin_activity_log(timestamp);
+
+-- Insert core plugins
+INSERT INTO plugins (
+    id, name, display_name, description, version, author, category, icon, 
+    status, is_core, permissions, installed_at, last_updated
+) VALUES 
+(
+    'core-auth',
+    'core-auth',
+    'Authentication System',
+    'Core authentication and user management system',
+    '1.0.0',
+    'SonicJS Team',
+    'security',
+    '🔐',
+    'active',
+    TRUE,
+    '["manage:users", "manage:roles", "manage:permissions"]',
+    unixepoch(),
+    unixepoch()
+),
+(
+    'core-media',
+    'core-media', 
+    'Media Manager',
+    'Core media upload and management system',
+    '1.0.0',
+    'SonicJS Team',
+    'media',
+    '📸',
+    'active',
+    TRUE,
+    '["manage:media", "upload:files"]',
+    unixepoch(),
+    unixepoch()
+),
+(
+    'core-workflow',
+    'core-workflow',
+    'Workflow Engine',
+    'Content workflow and approval system',
+    '1.0.0',
+    'SonicJS Team',
+    'content',
+    '🔄',
+    'active',
+    TRUE,
+    '["manage:workflows", "approve:content"]',
+    unixepoch(),
+    unixepoch()
+);
+
+-- FAQ Plugin will be added as a third-party plugin through the admin interface
+
+-- Add plugin management permission
+INSERT OR IGNORE INTO permissions (id, name, description, category, created_at)
+VALUES (
+    'manage:plugins',
+    'Manage Plugins',
+    'Install, uninstall, activate, and configure plugins',
+    'system',
+    unixepoch()
+);
+
+-- Grant plugin management permission to admin role
+INSERT OR IGNORE INTO role_permissions (id, role, permission_id, created_at)
+VALUES ('role-perm-manage-plugins', 'admin', 'manage:plugins', unixepoch());

package/migrations/007_demo_login_plugin.sql

@@ -0,0 +1,23 @@
+-- Demo Login Plugin Migration
+-- Migration: 007_demo_login_plugin
+-- Description: Add demo login prefill plugin to the plugin registry
+
+-- Insert demo login plugin
+INSERT INTO plugins (
+    id, name, display_name, description, version, author, category, icon, 
+    status, is_core, permissions, installed_at, last_updated
+) VALUES (
+    'demo-login-prefill',
+    'demo-login-plugin',
+    'Demo Login Prefill',
+    'Prefills login form with demo credentials (admin@sonicjs.com/admin123) for easy site demonstration',
+    '1.0.0',
+    'SonicJS',
+    'demo',
+    '🎯',
+    'inactive',
+    TRUE,
+    '[]',
+    unixepoch(),
+    unixepoch()
+);

package/migrations/008_fix_slug_validation.sql

@@ -0,0 +1,22 @@
+-- Migration: Fix overly restrictive slug validation patterns
+-- This migration relaxes the slug field validation to be more user-friendly
+
+-- Update the pages collection slug field to allow underscores and be less restrictive
+UPDATE content_fields 
+SET field_options = '{"pattern": "^[a-zA-Z0-9_-]+$", "placeholder": "url-friendly-slug", "help": "Use letters, numbers, underscores, and hyphens only"}'
+WHERE field_name = 'slug' AND collection_id = 'pages-collection';
+
+-- Update blog posts slug field if it exists
+UPDATE content_fields 
+SET field_options = '{"pattern": "^[a-zA-Z0-9_-]+$", "placeholder": "url-friendly-slug", "help": "Use letters, numbers, underscores, and hyphens only"}'
+WHERE field_name = 'slug' AND collection_id = 'blog-posts-collection';
+
+-- Update news slug field if it exists
+UPDATE content_fields 
+SET field_options = '{"pattern": "^[a-zA-Z0-9_-]+$", "placeholder": "url-friendly-slug", "help": "Use letters, numbers, underscores, and hyphens only"}'
+WHERE field_name = 'slug' AND collection_id = 'news-collection';
+
+-- Update any other slug fields with the restrictive pattern
+UPDATE content_fields 
+SET field_options = REPLACE(field_options, '"pattern": "^[a-z0-9-]+$"', '"pattern": "^[a-zA-Z0-9_-]+$"')
+WHERE field_options LIKE '%"pattern": "^[a-z0-9-]+$"%';

package/migrations/009_system_logging.sql

@@ -0,0 +1,57 @@
+-- System Logging Tables
+-- Migration: 009_system_logging
+-- Description: Add system logging and configuration tables
+
+-- System logs table for tracking application events
+CREATE TABLE IF NOT EXISTS system_logs (
+    id TEXT PRIMARY KEY,
+    level TEXT NOT NULL CHECK (level IN ('debug', 'info', 'warn', 'error', 'fatal')),
+    category TEXT NOT NULL CHECK (category IN ('auth', 'api', 'workflow', 'plugin', 'media', 'system', 'security', 'error')),
+    message TEXT NOT NULL,
+    data TEXT,  -- JSON data
+    user_id TEXT,
+    session_id TEXT,
+    request_id TEXT,
+    ip_address TEXT,
+    user_agent TEXT,
+    method TEXT,
+    url TEXT,
+    status_code INTEGER,
+    duration INTEGER,  -- milliseconds
+    stack_trace TEXT,
+    tags TEXT,  -- JSON array
+    source TEXT,  -- source of the log entry
+    created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+    FOREIGN KEY (user_id) REFERENCES users(id)
+);
+
+-- Log configuration table for managing log settings per category
+CREATE TABLE IF NOT EXISTS log_config (
+    id TEXT PRIMARY KEY,
+    category TEXT NOT NULL UNIQUE CHECK (category IN ('auth', 'api', 'workflow', 'plugin', 'media', 'system', 'security', 'error')),
+    enabled BOOLEAN NOT NULL DEFAULT TRUE,
+    level TEXT NOT NULL DEFAULT 'info' CHECK (level IN ('debug', 'info', 'warn', 'error', 'fatal')),
+    retention_days INTEGER NOT NULL DEFAULT 30,
+    max_size_mb INTEGER NOT NULL DEFAULT 100,
+    created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+    updated_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+
+-- Create indexes for better performance
+CREATE INDEX IF NOT EXISTS idx_system_logs_level ON system_logs(level);
+CREATE INDEX IF NOT EXISTS idx_system_logs_category ON system_logs(category);
+CREATE INDEX IF NOT EXISTS idx_system_logs_created_at ON system_logs(created_at);
+CREATE INDEX IF NOT EXISTS idx_system_logs_user_id ON system_logs(user_id);
+CREATE INDEX IF NOT EXISTS idx_system_logs_status_code ON system_logs(status_code);
+CREATE INDEX IF NOT EXISTS idx_system_logs_source ON system_logs(source);
+
+-- Insert default log configurations
+INSERT OR IGNORE INTO log_config (id, category, enabled, level, retention_days, max_size_mb) VALUES
+('log-config-auth', 'auth', TRUE, 'info', 90, 50),
+('log-config-api', 'api', TRUE, 'info', 30, 100),
+('log-config-workflow', 'workflow', TRUE, 'info', 60, 50),
+('log-config-plugin', 'plugin', TRUE, 'warn', 30, 25),
+('log-config-media', 'media', TRUE, 'info', 30, 50),
+('log-config-system', 'system', TRUE, 'info', 90, 100),
+('log-config-security', 'security', TRUE, 'warn', 180, 100),
+('log-config-error', 'error', TRUE, 'error', 90, 200);

package/migrations/011_config_managed_collections.sql

@@ -0,0 +1,14 @@
+-- Migration: Add Config-Managed Collections Support
+-- Description: Add 'managed' column to collections table to support config-based collection definitions
+-- Created: 2025-10-03
+
+-- Add 'managed' column to collections table
+-- This column indicates whether a collection is managed by configuration files (true) or user-created (false)
+-- Managed collections cannot be edited through the admin UI
+ALTER TABLE collections ADD COLUMN managed INTEGER DEFAULT 0 NOT NULL;
+
+-- Create an index on the managed column for faster queries
+CREATE INDEX IF NOT EXISTS idx_collections_managed ON collections(managed);
+
+-- Create an index on managed + is_active for efficient filtering
+CREATE INDEX IF NOT EXISTS idx_collections_managed_active ON collections(managed, is_active);

package/migrations/012_testimonials_plugin.sql

@@ -0,0 +1,80 @@
+-- Testimonials Plugin Migration
+-- Creates testimonials table for the testimonials plugin
+-- This demonstrates a code-based collection defined in src/plugins/core-plugins/testimonials-plugin.ts
+
+CREATE TABLE IF NOT EXISTS testimonials (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  author_name TEXT NOT NULL,
+  author_title TEXT,
+  author_company TEXT,
+  testimonial_text TEXT NOT NULL,
+  rating INTEGER CHECK(rating >= 1 AND rating <= 5),
+  isPublished INTEGER NOT NULL DEFAULT 1,
+  sortOrder INTEGER NOT NULL DEFAULT 0,
+  created_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now')),
+  updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now'))
+);
+
+-- Create indexes for better performance
+CREATE INDEX IF NOT EXISTS idx_testimonials_published ON testimonials(isPublished);
+CREATE INDEX IF NOT EXISTS idx_testimonials_sort_order ON testimonials(sortOrder);
+CREATE INDEX IF NOT EXISTS idx_testimonials_rating ON testimonials(rating);
+
+-- Create trigger to update updated_at timestamp
+CREATE TRIGGER IF NOT EXISTS testimonials_updated_at
+  AFTER UPDATE ON testimonials
+BEGIN
+  UPDATE testimonials SET updated_at = strftime('%s', 'now') WHERE id = NEW.id;
+END;
+
+-- Insert plugin record
+INSERT OR IGNORE INTO plugins (name, display_name, description, version, status, category, settings) VALUES
+('testimonials',
+ 'Customer Testimonials',
+ 'Manage customer testimonials and reviews with rating support. This is a code-based collection example.',
+ '1.0.0',
+ 'active',
+ 'content',
+ '{"defaultPublished": true, "requireRating": false}');
+
+-- Insert sample testimonial data
+INSERT OR IGNORE INTO testimonials (author_name, author_title, author_company, testimonial_text, rating, isPublished, sortOrder) VALUES
+('Jane Smith',
+ 'CTO',
+ 'TechStartup Inc',
+ 'SonicJS AI has transformed how we manage our content. The plugin architecture is brilliant and the edge deployment is blazing fast.',
+ 5,
+ 1,
+ 1),
+
+('Michael Chen',
+ 'Lead Developer',
+ 'Digital Agency Co',
+ 'We migrated from WordPress to SonicJS AI and couldn''t be happier. The TypeScript-first approach and modern tooling make development a joy.',
+ 5,
+ 1,
+ 2),
+
+('Sarah Johnson',
+ 'Product Manager',
+ 'E-commerce Solutions',
+ 'The headless CMS approach combined with Cloudflare Workers gives us unmatched performance. Our content is served globally with minimal latency.',
+ 4,
+ 1,
+ 3),
+
+('David Rodriguez',
+ 'Full Stack Developer',
+ 'Creative Studio',
+ 'Great CMS for modern web applications. The admin interface is clean and the API is well-designed. Plugin system is very flexible.',
+ 5,
+ 1,
+ 4),
+
+('Emily Watson',
+ 'Technical Director',
+ 'Media Company',
+ 'SonicJS AI solved our content distribution challenges. The R2 integration for media storage works flawlessly and scales effortlessly.',
+ 4,
+ 1,
+ 5);