@sonicjs-cms/core 2.18.1 → 3.0.0-beta.10

package/migrations/0002_documents.sql

@@ -0,0 +1,163 @@
+-- Migration 0002: Document Schema (v3 greenfield)
+-- Contains only the new document data model tables, generated columns, and indexes.
+
+-- Document type registry
+CREATE TABLE IF NOT EXISTS document_types (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL UNIQUE,
+  display_name TEXT NOT NULL,
+  description TEXT,
+  schema TEXT NOT NULL DEFAULT '{}',
+  queryable_fields TEXT NOT NULL DEFAULT '[]',
+  settings TEXT NOT NULL DEFAULT '{}',
+  plugin_id TEXT,
+  source TEXT NOT NULL DEFAULT 'code' CHECK (source IN ('code', 'plugin', 'system')),
+  schema_version INTEGER NOT NULL DEFAULT 1,
+  is_system INTEGER NOT NULL DEFAULT 0,
+  is_active INTEGER NOT NULL DEFAULT 1,
+  is_auth INTEGER NOT NULL DEFAULT 0,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+
+CREATE INDEX IF NOT EXISTS idx_document_types_plugin ON document_types(plugin_id);
+CREATE INDEX IF NOT EXISTS idx_document_types_active ON document_types(is_active);
+
+-- Documents: canonical document rows and historical versions.
+CREATE TABLE IF NOT EXISTS documents (
+  id TEXT PRIMARY KEY,
+  root_id TEXT NOT NULL,
+  type_id TEXT NOT NULL REFERENCES document_types(id),
+  type_version INTEGER NOT NULL DEFAULT 1,
+
+  version_of_id TEXT REFERENCES documents(id),
+  version_number INTEGER NOT NULL DEFAULT 1,
+
+  is_current_draft INTEGER NOT NULL DEFAULT 1,
+  is_published INTEGER NOT NULL DEFAULT 0,
+  status TEXT NOT NULL DEFAULT 'draft' CHECK (status IN ('draft', 'published', 'archived')),
+
+  parent_root_id TEXT NOT NULL DEFAULT '',
+  slug TEXT,
+  path TEXT,
+  title TEXT,
+  zone TEXT,
+  sort_order INTEGER NOT NULL DEFAULT 0,
+  visible INTEGER NOT NULL DEFAULT 1,
+
+  published_at INTEGER,
+  scheduled_at INTEGER,
+  expires_at INTEGER,
+  deleted_at INTEGER,
+
+  tenant_id TEXT NOT NULL DEFAULT 'default',
+  locale TEXT NOT NULL DEFAULT 'default',
+  translation_group_id TEXT NOT NULL DEFAULT '',
+
+  data TEXT NOT NULL DEFAULT '{}',
+  metadata TEXT NOT NULL DEFAULT '{}',
+
+  owner_id TEXT,
+  created_by TEXT,
+  updated_by TEXT,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+
+-- Queryable scalar fields (VIRTUAL generated columns) and their q_* filter indexes
+-- are AUTO-GENERATED at runtime from each document type's queryableFields config —
+-- see DocumentTypeRegistry.register() -> ensureScalarSchema() (document-scalar-schema.ts).
+-- Do not hand-add q_* columns/indexes here; declare the field in the type instead.
+
+-- Revision chain
+CREATE INDEX IF NOT EXISTS idx_documents_root ON documents(root_id, version_number DESC);
+
+-- List / lifecycle
+CREATE INDEX IF NOT EXISTS idx_documents_published ON documents(tenant_id, type_id, locale, is_published)
+  WHERE is_published = 1 AND deleted_at IS NULL;
+CREATE INDEX IF NOT EXISTS idx_documents_drafts ON documents(tenant_id, type_id, status, is_current_draft)
+  WHERE is_current_draft = 1;
+CREATE INDEX IF NOT EXISTS idx_documents_parent ON documents(tenant_id, parent_root_id, sort_order, is_published);
+CREATE INDEX IF NOT EXISTS idx_documents_path ON documents(tenant_id, path);
+CREATE INDEX IF NOT EXISTS idx_documents_translation ON documents(translation_group_id, locale);
+CREATE INDEX IF NOT EXISTS idx_documents_deleted ON documents(deleted_at);
+CREATE INDEX IF NOT EXISTS idx_documents_scheduled ON documents(scheduled_at) WHERE scheduled_at IS NOT NULL;
+CREATE INDEX IF NOT EXISTS idx_documents_expires ON documents(expires_at) WHERE expires_at IS NOT NULL;
+
+-- Stable keyset/cursor pagination for published lists
+CREATE INDEX IF NOT EXISTS idx_documents_published_cursor
+  ON documents(tenant_id, type_id, updated_at DESC, id DESC)
+  WHERE is_published = 1 AND deleted_at IS NULL;
+
+-- (q_* generated-column filter indexes are auto-created at runtime — see note above.)
+
+-- Partial unique indexes: the hard concurrency guarantees for draft/publish invariants.
+CREATE UNIQUE INDEX IF NOT EXISTS idx_documents_one_current_draft
+  ON documents(root_id) WHERE is_current_draft = 1;
+CREATE UNIQUE INDEX IF NOT EXISTS idx_documents_one_published
+  ON documents(root_id) WHERE is_published = 1;
+CREATE UNIQUE INDEX IF NOT EXISTS idx_documents_unique_version
+  ON documents(root_id, version_number);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_documents_unique_slug
+  ON documents(tenant_id, locale, type_id, parent_root_id, slug)
+  WHERE is_current_draft = 1 AND deleted_at IS NULL AND slug IS NOT NULL;
+CREATE UNIQUE INDEX IF NOT EXISTS idx_documents_one_translation_per_locale
+  ON documents(tenant_id, translation_group_id, locale)
+  WHERE is_current_draft = 1 AND translation_group_id <> '';
+
+-- Document references: typed document-to-document edges.
+CREATE TABLE IF NOT EXISTS document_references (
+  id TEXT PRIMARY KEY,
+  tenant_id TEXT NOT NULL,
+  from_root_id TEXT NOT NULL,
+  from_document_id TEXT NOT NULL REFERENCES documents(id) ON DELETE CASCADE,
+  field_name TEXT NOT NULL,
+  ordinal INTEGER NOT NULL DEFAULT 0,
+  to_root_id TEXT NOT NULL,
+  ref_strength TEXT NOT NULL DEFAULT 'weak' CHECK (ref_strength IN ('strong', 'weak')),
+  created_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+
+CREATE INDEX IF NOT EXISTS idx_docref_to   ON document_references(tenant_id, to_root_id);
+CREATE INDEX IF NOT EXISTS idx_docref_from ON document_references(from_document_id);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_docref_unique
+  ON document_references(from_document_id, field_name, ordinal);
+
+-- Document facets: indexed rows for multi-valued scalar fields (e.g. tags arrays).
+CREATE TABLE IF NOT EXISTS document_facets (
+  id TEXT PRIMARY KEY,
+  tenant_id TEXT NOT NULL,
+  document_id TEXT NOT NULL REFERENCES documents(id) ON DELETE CASCADE,
+  root_id TEXT NOT NULL,
+  type_id TEXT NOT NULL,
+  field_name TEXT NOT NULL,
+  ordinal INTEGER NOT NULL DEFAULT 0,
+  value_text TEXT,
+  value_number REAL,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch())
+);
+
+CREATE INDEX IF NOT EXISTS idx_facets_lookup ON document_facets(tenant_id, type_id, field_name, value_text);
+CREATE INDEX IF NOT EXISTS idx_facets_doc    ON document_facets(document_id);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_facets_unique
+  ON document_facets(document_id, field_name, ordinal);
+
+-- Document permissions: per-document ACL overrides.
+CREATE TABLE IF NOT EXISTS document_permissions (
+  id TEXT PRIMARY KEY,
+  tenant_id TEXT NOT NULL,
+  root_id TEXT NOT NULL,
+  principal_type TEXT NOT NULL CHECK (principal_type IN ('user', 'role', 'group', 'public', 'token')),
+  principal_id TEXT NOT NULL,
+  permission TEXT NOT NULL CHECK (permission IN ('read', 'create', 'update', 'delete', 'publish', 'manage')),
+  effect TEXT NOT NULL DEFAULT 'allow' CHECK (effect IN ('allow', 'deny')),
+  inherited INTEGER NOT NULL DEFAULT 0,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  created_by TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_document_permissions_root ON document_permissions(tenant_id, root_id);
+CREATE INDEX IF NOT EXISTS idx_document_permissions_principal
+  ON document_permissions(tenant_id, principal_type, principal_id, permission);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_document_permissions_unique
+  ON document_permissions(root_id, principal_type, principal_id, permission);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sonicjs-cms/core",
-  "version": "2.18.1",
+  "version": "3.0.0-beta.10",
   "description": "Core framework for SonicJS headless CMS - Edge-first, TypeScript-native CMS built for Cloudflare Workers",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -67,10 +67,11 @@
     "type-check": "tsc --noEmit",
     "lint": "eslint src/",
     "lint:fix": "eslint src/ --fix",
-    "test": "vitest --run",
-    "test:cov": "vitest --run --coverage",
+    "test": "vitest run",
+    "test:cov": "vitest run --coverage",
     "test:watch": "vitest",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build",
+    "prepare": "npm run build"
   },
   "keywords": [
     "cms",
@@ -103,6 +104,8 @@
   },
   "dependencies": {
     "@cf-wasm/resvg": "^0.3.3",
+    "better-auth": "^1.6.13",
+    "better-auth-cloudflare": "^0.3.0",
     "csv-parse": "^6.2.1",
     "drizzle-zod": "^0.8.3",
     "highlight.js": "^11.11.1",
@@ -114,18 +117,20 @@
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20251014.0",
+    "@types/better-sqlite3": "^7.6.13",
     "@types/node": "^24.9.2",
     "@types/qrcode-svg": "^1.1.5",
     "@typescript-eslint/eslint-plugin": "^8.50.0",
     "@typescript-eslint/parser": "^8.50.0",
-    "@vitest/coverage-v8": "^4.0.5",
+    "@vitest/coverage-v8": "^4.1.9",
+    "better-sqlite3": "^12.10.0",
     "drizzle-orm": "^0.45.2",
     "eslint": "^9.39.2",
     "glob": "^10.5.0",
-    "hono": "^4.12.12",
+    "hono": "^4.12.26",
     "tsup": "^8.5.0",
     "typescript": "^5.9.3",
-    "vitest": "^4.0.5",
+    "vitest": "^4.1.9",
     "zod": "^4.1.12"
   },
   "engines": {

package/dist/admin-layout-catalyst.template-HFD37TY5.cjs

@@ -1,17 +0,0 @@
-'use strict';
-
-var chunkUYJ6TJHX_cjs = require('./chunk-UYJ6TJHX.cjs');
-require('./chunk-IGJUBJBW.cjs');
-
-chunkUYJ6TJHX_cjs.init_admin_layout_catalyst_template();
-
-Object.defineProperty(exports, "renderAdminLayoutCatalyst", {
-  enumerable: true,
-  get: function () { return chunkUYJ6TJHX_cjs.renderAdminLayoutCatalyst; }
-});
-Object.defineProperty(exports, "renderCatalystCheckbox", {
-  enumerable: true,
-  get: function () { return chunkUYJ6TJHX_cjs.renderCatalystCheckbox; }
-});
-//# sourceMappingURL=admin-layout-catalyst.template-HFD37TY5.cjs.map
-//# sourceMappingURL=admin-layout-catalyst.template-HFD37TY5.cjs.map

package/dist/admin-layout-catalyst.template-UMTIN66R.js

@@ -1,7 +0,0 @@
-import { init_admin_layout_catalyst_template } from './chunk-55RDMDOP.js';
-export { renderAdminLayoutCatalyst, renderCatalystCheckbox } from './chunk-55RDMDOP.js';
-import './chunk-V4OQ3NZ2.js';
-
-init_admin_layout_catalyst_template();
-//# sourceMappingURL=admin-layout-catalyst.template-UMTIN66R.js.map
-//# sourceMappingURL=admin-layout-catalyst.template-UMTIN66R.js.map

package/dist/app-C9esKLmh.d.cts

@@ -1,112 +0,0 @@
-import { Hono, Context } from 'hono';
-import { D1Database, KVNamespace, R2Bucket } from '@cloudflare/workers-types';
-
-/**
- * Main Application Factory
- *
- * Creates a configured SonicJS application with all core functionality
- */
-
-interface Bindings {
-    DB: D1Database;
-    CACHE_KV: KVNamespace;
-    MEDIA_BUCKET: R2Bucket;
-    ASSETS: Fetcher;
-    EMAIL_QUEUE?: Queue;
-    SENDGRID_API_KEY?: string;
-    DEFAULT_FROM_EMAIL?: string;
-    IMAGES_ACCOUNT_ID?: string;
-    IMAGES_API_TOKEN?: string;
-    ENVIRONMENT?: string;
-    CORS_ORIGINS?: string;
-    JWT_SECRET?: string;
-    JWT_EXPIRES_IN?: string;
-    JWT_REFRESH_GRACE_SECONDS?: string;
-    BUCKET_NAME?: string;
-    GOOGLE_MAPS_API_KEY?: string;
-}
-interface Variables {
-    user?: {
-        userId: string;
-        email: string;
-        role: string;
-        exp: number;
-        iat: number;
-    };
-    requestId?: string;
-    startTime?: number;
-    appVersion?: string;
-    csrfToken?: string;
-    pluginMenuItems?: Array<{
-        label: string;
-        path: string;
-        icon: string;
-    }>;
-}
-interface SonicJSConfig {
-    collections?: {
-        directory?: string;
-        autoSync?: boolean;
-    };
-    plugins?: {
-        directory?: string;
-        autoLoad?: boolean;
-        disableAll?: boolean;
-    };
-    routes?: Array<{
-        path: string;
-        handler: Hono;
-    }>;
-    middleware?: {
-        beforeAuth?: Array<(c: Context, next: () => Promise<void>) => Promise<void>>;
-        afterAuth?: Array<(c: Context, next: () => Promise<void>) => Promise<void>>;
-    };
-    adminAccessRoles?: string[];
-    version?: string;
-    name?: string;
-}
-type SonicJSApp = Hono<{
-    Bindings: Bindings;
-    Variables: Variables;
-}>;
-/**
- * Create a SonicJS application with core functionality
- *
- * @param config - Application configuration
- * @returns Configured Hono application
- *
- * @example
- * ```typescript
- * import { createSonicJSApp } from '@sonicjs-cms/core'
- *
- * const app = createSonicJSApp({
- *   collections: {
- *     directory: './src/collections',
- *     autoSync: true
- *   },
- *   plugins: {
- *     directory: './src/plugins',
- *     autoLoad: true
- *   }
- * })
- *
- * export default app
- * ```
- */
-declare function createSonicJSApp(config?: SonicJSConfig): SonicJSApp;
-/**
- * Setup core middleware (backward compatibility)
- *
- * @param _app - Hono application
- * @deprecated Use createSonicJSApp() instead
- */
-declare function setupCoreMiddleware(_app: SonicJSApp): void;
-/**
- * Setup core routes (backward compatibility)
- *
- * @param _app - Hono application
- * @deprecated Use createSonicJSApp() instead
- */
-declare function setupCoreRoutes(_app: SonicJSApp): void;
-
-export { type Bindings as B, type SonicJSConfig as S, type Variables as V, type SonicJSApp as a, setupCoreRoutes as b, createSonicJSApp as c, setupCoreMiddleware as s };

package/dist/app-C9esKLmh.d.ts

@@ -1,112 +0,0 @@
-import { Hono, Context } from 'hono';
-import { D1Database, KVNamespace, R2Bucket } from '@cloudflare/workers-types';
-
-/**
- * Main Application Factory
- *
- * Creates a configured SonicJS application with all core functionality
- */
-
-interface Bindings {
-    DB: D1Database;
-    CACHE_KV: KVNamespace;
-    MEDIA_BUCKET: R2Bucket;
-    ASSETS: Fetcher;
-    EMAIL_QUEUE?: Queue;
-    SENDGRID_API_KEY?: string;
-    DEFAULT_FROM_EMAIL?: string;
-    IMAGES_ACCOUNT_ID?: string;
-    IMAGES_API_TOKEN?: string;
-    ENVIRONMENT?: string;
-    CORS_ORIGINS?: string;
-    JWT_SECRET?: string;
-    JWT_EXPIRES_IN?: string;
-    JWT_REFRESH_GRACE_SECONDS?: string;
-    BUCKET_NAME?: string;
-    GOOGLE_MAPS_API_KEY?: string;
-}
-interface Variables {
-    user?: {
-        userId: string;
-        email: string;
-        role: string;
-        exp: number;
-        iat: number;
-    };
-    requestId?: string;
-    startTime?: number;
-    appVersion?: string;
-    csrfToken?: string;
-    pluginMenuItems?: Array<{
-        label: string;
-        path: string;
-        icon: string;
-    }>;
-}
-interface SonicJSConfig {
-    collections?: {
-        directory?: string;
-        autoSync?: boolean;
-    };
-    plugins?: {
-        directory?: string;
-        autoLoad?: boolean;
-        disableAll?: boolean;
-    };
-    routes?: Array<{
-        path: string;
-        handler: Hono;
-    }>;
-    middleware?: {
-        beforeAuth?: Array<(c: Context, next: () => Promise<void>) => Promise<void>>;
-        afterAuth?: Array<(c: Context, next: () => Promise<void>) => Promise<void>>;
-    };
-    adminAccessRoles?: string[];
-    version?: string;
-    name?: string;
-}
-type SonicJSApp = Hono<{
-    Bindings: Bindings;
-    Variables: Variables;
-}>;
-/**
- * Create a SonicJS application with core functionality
- *
- * @param config - Application configuration
- * @returns Configured Hono application
- *
- * @example
- * ```typescript
- * import { createSonicJSApp } from '@sonicjs-cms/core'
- *
- * const app = createSonicJSApp({
- *   collections: {
- *     directory: './src/collections',
- *     autoSync: true
- *   },
- *   plugins: {
- *     directory: './src/plugins',
- *     autoLoad: true
- *   }
- * })
- *
- * export default app
- * ```
- */
-declare function createSonicJSApp(config?: SonicJSConfig): SonicJSApp;
-/**
- * Setup core middleware (backward compatibility)
- *
- * @param _app - Hono application
- * @deprecated Use createSonicJSApp() instead
- */
-declare function setupCoreMiddleware(_app: SonicJSApp): void;
-/**
- * Setup core routes (backward compatibility)
- *
- * @param _app - Hono application
- * @deprecated Use createSonicJSApp() instead
- */
-declare function setupCoreRoutes(_app: SonicJSApp): void;
-
-export { type Bindings as B, type SonicJSConfig as S, type Variables as V, type SonicJSApp as a, setupCoreRoutes as b, createSonicJSApp as c, setupCoreMiddleware as s };