@sonicjs-cms/core 2.19.0 → 3.0.0-beta.3

package/migrations/027_fix_slug_field_type.sql

@@ -1,18 +0,0 @@
--- Migration: Fix slug field type
--- Description: Update slug fields to use 'slug' field type instead of 'text' for proper auto-generation
--- Created: 2026-01-10
-
--- Update pages collection slug field to use 'slug' field type
-UPDATE content_fields 
-SET field_type = 'slug'
-WHERE field_name = 'slug' AND collection_id = 'pages-collection';
-
--- Update blog posts slug field if it exists
-UPDATE content_fields 
-SET field_type = 'slug'
-WHERE field_name = 'slug' AND collection_id = 'blog-posts-collection';
-
--- Update news slug field if it exists
-UPDATE content_fields 
-SET field_type = 'slug'
-WHERE field_name = 'slug' AND collection_id = 'news-collection';

package/migrations/028_fix_slug_field_type_in_schemas.sql

@@ -1,30 +0,0 @@
--- Migration: Fix slug field type in collection schemas
--- Description: Update slug fields in collection schemas to use 'slug' type instead of 'string'
--- Created: 2026-01-10
-
--- Update pages-collection schema
-UPDATE collections 
-SET schema = REPLACE(
-  schema,
-  '"slug":{"type":"string"',
-  '"slug":{"type":"slug"'
-)
-WHERE id = 'pages-collection' AND schema LIKE '%"slug":{"type":"string"%';
-
--- Update blog-posts-collection schema if it exists
-UPDATE collections 
-SET schema = REPLACE(
-  schema,
-  '"slug":{"type":"string"',
-  '"slug":{"type":"slug"'
-)
-WHERE id = 'blog-posts-collection' AND schema LIKE '%"slug":{"type":"string"%';
-
--- Update news-collection schema if it exists
-UPDATE collections 
-SET schema = REPLACE(
-  schema,
-  '"slug":{"type":"string"',
-  '"slug":{"type":"slug"'
-)
-WHERE id = 'news-collection' AND schema LIKE '%"slug":{"type":"string"%';

package/migrations/029_add_forms_system.sql

@@ -1,184 +0,0 @@
--- Migration: 029_add_forms_system.sql
--- Description: Add Form.io integration for advanced form building
--- Date: January 23, 2026
--- Phase: 1 - Database Schema
-
--- =====================================================
--- Table: forms
--- Description: Stores form definitions and configuration
--- =====================================================
-
-CREATE TABLE IF NOT EXISTS forms (
-  id TEXT PRIMARY KEY,
-  name TEXT NOT NULL UNIQUE,              -- Machine name (e.g., "contact-form")
-  display_name TEXT NOT NULL,             -- Human name (e.g., "Contact Form")
-  description TEXT,                       -- Optional description
-  category TEXT DEFAULT 'general',        -- Form category (contact, survey, registration, etc.)
-  
-  -- Form.io schema (JSON)
-  formio_schema TEXT NOT NULL,            -- Complete Form.io JSON schema
-  
-  -- Settings
-  settings TEXT,                          -- JSON: {
-                                          --   emailNotifications: true,
-                                          --   notifyEmail: "admin@example.com",
-                                          --   successMessage: "Thank you!",
-                                          --   redirectUrl: "/thank-you",
-                                          --   allowAnonymous: true,
-                                          --   requireAuth: false,
-                                          --   maxSubmissions: null,
-                                          --   submitButtonText: "Submit",
-                                          --   saveProgress: true,
-                                          --   webhookUrl: null
-                                          -- }
-  
-  -- Status & Management
-  is_active INTEGER DEFAULT 1,            -- Active/inactive flag
-  is_public INTEGER DEFAULT 1,            -- Public (anyone) vs private (auth required)
-  managed INTEGER DEFAULT 0,              -- Code-managed (like collections)
-  
-  -- Metadata
-  icon TEXT,                              -- Optional icon for admin UI
-  color TEXT,                             -- Optional color (hex) for admin UI
-  tags TEXT,                              -- JSON array of tags
-  
-  -- Stats
-  submission_count INTEGER DEFAULT 0,     -- Total submissions received
-  view_count INTEGER DEFAULT 0,           -- Form views (optional tracking)
-  
-  -- Ownership
-  created_by TEXT REFERENCES users(id),   -- User who created the form
-  updated_by TEXT REFERENCES users(id),   -- User who last updated
-  
-  -- Timestamps
-  created_at INTEGER NOT NULL,
-  updated_at INTEGER NOT NULL
-);
-
--- Indexes for forms
-CREATE INDEX IF NOT EXISTS idx_forms_name ON forms(name);
-CREATE INDEX IF NOT EXISTS idx_forms_category ON forms(category);
-CREATE INDEX IF NOT EXISTS idx_forms_active ON forms(is_active);
-CREATE INDEX IF NOT EXISTS idx_forms_public ON forms(is_public);
-CREATE INDEX IF NOT EXISTS idx_forms_created_by ON forms(created_by);
-
--- =====================================================
--- Table: form_submissions
--- Description: Stores submitted form data
--- =====================================================
-
-CREATE TABLE IF NOT EXISTS form_submissions (
-  id TEXT PRIMARY KEY,
-  form_id TEXT NOT NULL REFERENCES forms(id) ON DELETE CASCADE,
-  
-  -- Submission data
-  submission_data TEXT NOT NULL,          -- JSON: The actual form data submitted
-  
-  -- Submission metadata
-  status TEXT DEFAULT 'pending',          -- pending, reviewed, approved, rejected, spam
-  submission_number INTEGER,              -- Sequential number per form
-  
-  -- User information (if authenticated)
-  user_id TEXT REFERENCES users(id),      -- Submitter user ID (if logged in)
-  user_email TEXT,                        -- Email from form (or user account)
-  
-  -- Tracking information
-  ip_address TEXT,                        -- IP address of submitter
-  user_agent TEXT,                        -- Browser user agent
-  referrer TEXT,                          -- Page that referred to form
-  utm_source TEXT,                        -- UTM tracking params
-  utm_medium TEXT,
-  utm_campaign TEXT,
-  
-  -- Review/Processing
-  reviewed_by TEXT REFERENCES users(id),  -- Admin who reviewed
-  reviewed_at INTEGER,                    -- Review timestamp
-  review_notes TEXT,                      -- Admin notes
-  
-  -- Flags
-  is_spam INTEGER DEFAULT 0,              -- Spam flag
-  is_archived INTEGER DEFAULT 0,          -- Archived flag
-  
-  -- Timestamps
-  submitted_at INTEGER NOT NULL,
-  updated_at INTEGER NOT NULL
-);
-
--- Indexes for submissions
-CREATE INDEX IF NOT EXISTS idx_form_submissions_form_id ON form_submissions(form_id);
-CREATE INDEX IF NOT EXISTS idx_form_submissions_status ON form_submissions(status);
-CREATE INDEX IF NOT EXISTS idx_form_submissions_user_id ON form_submissions(user_id);
-CREATE INDEX IF NOT EXISTS idx_form_submissions_email ON form_submissions(user_email);
-CREATE INDEX IF NOT EXISTS idx_form_submissions_submitted_at ON form_submissions(submitted_at);
-CREATE INDEX IF NOT EXISTS idx_form_submissions_spam ON form_submissions(is_spam);
-
--- Trigger to auto-increment submission_number per form
-CREATE TRIGGER IF NOT EXISTS set_submission_number
-AFTER INSERT ON form_submissions
-BEGIN
-  UPDATE form_submissions 
-  SET submission_number = (
-    SELECT COUNT(*) 
-    FROM form_submissions 
-    WHERE form_id = NEW.form_id 
-    AND id <= NEW.id
-  )
-  WHERE id = NEW.id;
-END;
-
--- Trigger to update form submission_count
-CREATE TRIGGER IF NOT EXISTS increment_form_submission_count
-AFTER INSERT ON form_submissions
-BEGIN
-  UPDATE forms 
-  SET submission_count = submission_count + 1,
-      updated_at = unixepoch() * 1000
-  WHERE id = NEW.form_id;
-END;
-
--- =====================================================
--- Table: form_files (Optional)
--- Description: Link form submissions to uploaded files
--- =====================================================
-
-CREATE TABLE IF NOT EXISTS form_files (
-  id TEXT PRIMARY KEY,
-  submission_id TEXT NOT NULL REFERENCES form_submissions(id) ON DELETE CASCADE,
-  media_id TEXT NOT NULL REFERENCES media(id) ON DELETE CASCADE,
-  field_name TEXT NOT NULL,               -- Form field that uploaded this file
-  uploaded_at INTEGER NOT NULL
-);
-
--- Indexes for form files
-CREATE INDEX IF NOT EXISTS idx_form_files_submission ON form_files(submission_id);
-CREATE INDEX IF NOT EXISTS idx_form_files_media ON form_files(media_id);
-
--- =====================================================
--- Sample Data: Create a default contact form
--- =====================================================
-
-INSERT OR IGNORE INTO forms (
-  id,
-  name,
-  display_name,
-  description,
-  category,
-  formio_schema,
-  settings,
-  is_active,
-  is_public,
-  created_at,
-  updated_at
-) VALUES (
-  'default-contact-form',
-  'contact',
-  'Contact Form',
-  'A simple contact form for getting in touch',
-  'contact',
-  '{"components":[]}',
-  '{"emailNotifications":false,"successMessage":"Thank you for your submission!","submitButtonText":"Submit","requireAuth":false}',
-  1,
-  1,
-  unixepoch() * 1000,
-  unixepoch() * 1000
-);

package/migrations/030_add_turnstile_to_forms.sql

@@ -1,14 +0,0 @@
--- Add Turnstile configuration to forms table
--- This allows per-form Turnstile settings with global fallback
-
--- Add columns (D1 may not support CHECK constraints in ALTER TABLE)
-ALTER TABLE forms ADD COLUMN turnstile_enabled INTEGER DEFAULT 0;
-ALTER TABLE forms ADD COLUMN turnstile_settings TEXT;
-
--- Set default to inherit global settings for existing forms
-UPDATE forms 
-SET turnstile_settings = '{"inherit":true}' 
-WHERE turnstile_settings IS NULL;
-
--- Add index for faster lookups
-CREATE INDEX IF NOT EXISTS idx_forms_turnstile ON forms(turnstile_enabled);

package/migrations/031_ai_search_plugin.sql

@@ -1,45 +0,0 @@
--- AI Search plugin settings
-CREATE TABLE IF NOT EXISTS ai_search_settings (
-  id INTEGER PRIMARY KEY AUTOINCREMENT,
-  enabled BOOLEAN DEFAULT 0,
-  ai_mode_enabled BOOLEAN DEFAULT 1,
-  selected_collections TEXT, -- JSON array of collection IDs to index
-  dismissed_collections TEXT, -- JSON array of collection IDs user chose not to index
-  autocomplete_enabled BOOLEAN DEFAULT 1,
-  cache_duration INTEGER DEFAULT 1, -- hours
-  results_limit INTEGER DEFAULT 20,
-  index_media BOOLEAN DEFAULT 0,
-  index_status TEXT, -- JSON object with status per collection
-  last_indexed_at INTEGER,
-  created_at INTEGER DEFAULT (strftime('%s', 'now') * 1000),
-  updated_at INTEGER DEFAULT (strftime('%s', 'now') * 1000)
-);
-
--- Search history/analytics
-CREATE TABLE IF NOT EXISTS ai_search_history (
-  id INTEGER PRIMARY KEY AUTOINCREMENT,
-  query TEXT NOT NULL,
-  mode TEXT, -- 'ai' or 'keyword'
-  results_count INTEGER,
-  user_id INTEGER,
-  created_at INTEGER DEFAULT (strftime('%s', 'now') * 1000)
-);
-
--- Index metadata tracking (per collection)
-CREATE TABLE IF NOT EXISTS ai_search_index_meta (
-  id INTEGER PRIMARY KEY AUTOINCREMENT,
-  collection_id INTEGER NOT NULL,
-  collection_name TEXT NOT NULL, -- Cache collection name for display
-  total_items INTEGER DEFAULT 0,
-  indexed_items INTEGER DEFAULT 0,
-  last_sync_at INTEGER,
-  status TEXT DEFAULT 'pending', -- 'pending', 'indexing', 'completed', 'error'
-  error_message TEXT,
-  UNIQUE(collection_id)
-);
-
--- Indexes for performance
-CREATE INDEX IF NOT EXISTS idx_ai_search_history_created_at ON ai_search_history(created_at);
-CREATE INDEX IF NOT EXISTS idx_ai_search_history_mode ON ai_search_history(mode);
-CREATE INDEX IF NOT EXISTS idx_ai_search_index_meta_collection_id ON ai_search_index_meta(collection_id);
-CREATE INDEX IF NOT EXISTS idx_ai_search_index_meta_status ON ai_search_index_meta(status);

package/migrations/032_user_profiles.sql

@@ -1,37 +0,0 @@
--- User Profiles Table (Core Migration)
--- Stores extended user profile data separate from auth concerns
--- Required by admin-users.ts for user edit page profile management
---
--- Originally introduced as app-level migration (my-sonicjs-app/migrations/018_user_profiles.sql)
--- in upstream PR #508. Core routes (admin-users.ts) were updated to query this table in PR #512,
--- but no corresponding core migration was added. This migration corrects that gap.
---
--- IF NOT EXISTS guards ensure idempotency for databases that already have the table
--- from the app-level migration.
-
-CREATE TABLE IF NOT EXISTS user_profiles (
-  id TEXT PRIMARY KEY,
-  user_id TEXT NOT NULL UNIQUE REFERENCES users(id) ON DELETE CASCADE,
-
-  display_name TEXT,
-  bio TEXT,
-  company TEXT,
-  job_title TEXT,
-  website TEXT,
-  location TEXT,
-  date_of_birth INTEGER,
-  data TEXT DEFAULT '{}',
-
-  created_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now') * 1000),
-  updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now') * 1000)
-);
-
--- Index for fast user lookups
-CREATE INDEX IF NOT EXISTS idx_user_profiles_user_id ON user_profiles(user_id);
-
--- Trigger to auto-update updated_at timestamp
-CREATE TRIGGER IF NOT EXISTS user_profiles_updated_at
-  AFTER UPDATE ON user_profiles
-BEGIN
-  UPDATE user_profiles SET updated_at = strftime('%s', 'now') * 1000 WHERE id = NEW.id;
-END;

package/migrations/033_form_content_integration.sql

@@ -1,19 +0,0 @@
--- Migration 033: Form-Content Integration
--- Adds bridge columns to link forms to collections and submissions to content items
-
--- Add source_type and source_id to collections for form-derived collections
-ALTER TABLE collections ADD COLUMN source_type TEXT DEFAULT 'user';
-ALTER TABLE collections ADD COLUMN source_id TEXT;
-
--- Index for efficient lookup of form-derived collections
-CREATE INDEX IF NOT EXISTS idx_collections_source ON collections(source_type, source_id);
-
--- Add content_id to form_submissions for linking to content items
-ALTER TABLE form_submissions ADD COLUMN content_id TEXT REFERENCES content(id);
-
--- Index for efficient lookup by content_id
-CREATE INDEX IF NOT EXISTS idx_form_submissions_content_id ON form_submissions(content_id);
-
--- Create system user for anonymous form submissions
-INSERT OR IGNORE INTO users (id, email, username, first_name, last_name, password_hash, role, is_active, created_at, updated_at)
-VALUES ('system-form-submission', 'system-forms@sonicjs.internal', 'system-forms', 'Form', 'Submission', NULL, 'viewer', 0, strftime('%s','now') * 1000, strftime('%s','now') * 1000);

package/migrations/034_security_audit_plugin.sql

@@ -1,27 +0,0 @@
--- Security Audit Plugin
--- Tracks login attempts, registrations, and security events for monitoring and brute-force detection
-
-CREATE TABLE IF NOT EXISTS security_events (
-  id TEXT PRIMARY KEY,
-  event_type TEXT NOT NULL,
-  severity TEXT NOT NULL DEFAULT 'info',
-  user_id TEXT,
-  email TEXT,
-  ip_address TEXT,
-  user_agent TEXT,
-  country_code TEXT,
-  request_path TEXT,
-  request_method TEXT,
-  details TEXT,
-  fingerprint TEXT,
-  blocked INTEGER NOT NULL DEFAULT 0,
-  created_at INTEGER NOT NULL
-);
-
-CREATE INDEX IF NOT EXISTS idx_security_events_type ON security_events(event_type);
-CREATE INDEX IF NOT EXISTS idx_security_events_user ON security_events(user_id);
-CREATE INDEX IF NOT EXISTS idx_security_events_email ON security_events(email);
-CREATE INDEX IF NOT EXISTS idx_security_events_ip ON security_events(ip_address);
-CREATE INDEX IF NOT EXISTS idx_security_events_severity ON security_events(severity);
-CREATE INDEX IF NOT EXISTS idx_security_events_created ON security_events(created_at);
-CREATE INDEX IF NOT EXISTS idx_security_events_fingerprint ON security_events(fingerprint);

package/migrations/035_user_profiles_data_column.sql

@@ -1,16 +0,0 @@
--- Migration 035: Add data column to user_profiles (no-op)
---
--- This migration originally added a missing 'data' column to user_profiles.
--- Migration 032 has since been updated to include the column in the CREATE TABLE,
--- so on fresh installs the column already exists by the time this runs.
---
--- The ALTER TABLE has been removed to prevent "duplicate column name: data" errors
--- during fresh installs (GitHub issue #771). Wrangler's migration runner does not
--- gracefully handle duplicate column errors like the runtime MigrationService does.
---
--- Existing databases that ran the old 032 (without the data column) get the column
--- added at runtime by the core MigrationService, which skips duplicate-column errors.
---
--- This file is kept as a no-op so that wrangler's migration tracking remains
--- consistent (it tracks migrations by filename).
-SELECT 1;

package/migrations/036_analytics_events.sql

@@ -1,22 +0,0 @@
--- Migration 036: Analytics Events Table
--- Provides storage for user behavior event tracking (page views, custom events)
-
-CREATE TABLE IF NOT EXISTS analytics_events (
-    id TEXT PRIMARY KEY,
-    event TEXT NOT NULL,
-    category TEXT NOT NULL DEFAULT 'user-activity',
-    properties TEXT,
-    user_id TEXT,
-    session_id TEXT,
-    ip_address TEXT,
-    user_agent TEXT,
-    path TEXT,
-    created_at INTEGER NOT NULL DEFAULT (unixepoch())
-);
-
-CREATE INDEX IF NOT EXISTS idx_analytics_events_event ON analytics_events(event);
-CREATE INDEX IF NOT EXISTS idx_analytics_events_category ON analytics_events(category);
-CREATE INDEX IF NOT EXISTS idx_analytics_events_user_id ON analytics_events(user_id);
-CREATE INDEX IF NOT EXISTS idx_analytics_events_session_id ON analytics_events(session_id);
-CREATE INDEX IF NOT EXISTS idx_analytics_events_created_at ON analytics_events(created_at);
-CREATE INDEX IF NOT EXISTS idx_analytics_events_path ON analytics_events(path);