@stacksjs/defaults 0.70.112 → 0.70.113

package/app/Actions/Dashboard/Email/InboxIndexAction.ts

@@ -0,0 +1,49 @@
+import { Action } from '@stacksjs/actions'
+import { emailSDK } from '@stacksjs/email'
+import { config } from '@stacksjs/config'
+
+export interface InboxItem {
+  messageId: string
+  from: string
+  fromName?: string
+  to: string
+  subject: string
+  date: string
+  read: boolean
+  preview?: string
+  hasAttachments?: boolean
+  path: string
+}
+
+function defaultMailbox(): string {
+  const domain = (config as any)?.email?.domain || 'stacksjs.com'
+  return `chris@${domain}`
+}
+
+export default new Action({
+  name: 'InboxIndexAction',
+  description: 'Returns real inbound emails for a mailbox from S3.',
+  method: 'GET',
+  apiResponse: true,
+
+  async handle(request: any) {
+    try {
+      const mailbox = request?.query?.mailbox || defaultMailbox()
+      const emails = await emailSDK.getInbox(mailbox, { limit: 1000 })
+
+      return {
+        mailbox,
+        total: emails.length,
+        emails,
+      }
+    }
+    catch (err) {
+      return {
+        mailbox: request?.query?.mailbox || defaultMailbox(),
+        total: 0,
+        emails: [],
+        error: err instanceof Error ? err.message : 'unknown error',
+      }
+    }
+  },
+})

package/app/Actions/Dashboard/Email/InboxMarkReadAction.ts

@@ -0,0 +1,36 @@
+import { Action } from '@stacksjs/actions'
+import { emailSDK } from '@stacksjs/email'
+import { config } from '@stacksjs/config'
+
+function defaultMailbox(): string {
+  const domain = (config as any)?.email?.domain || 'stacksjs.com'
+  return `chris@${domain}`
+}
+
+export default new Action({
+  name: 'InboxMarkReadAction',
+  description: 'Marks a single inbound email as read.',
+  method: 'POST',
+  apiResponse: true,
+
+  async handle(request: any) {
+    try {
+      const body = request?.body || {}
+      const mailbox = body.mailbox || defaultMailbox()
+      const messageId = body.messageId
+
+      if (!messageId) {
+        return { ok: false, error: 'messageId is required' }
+      }
+
+      const ok = await emailSDK.markAsRead(mailbox, messageId)
+      return { ok, mailbox, messageId }
+    }
+    catch (err) {
+      return {
+        ok: false,
+        error: err instanceof Error ? err.message : 'unknown error',
+      }
+    }
+  },
+})

package/app/Actions/Dashboard/Email/InboxShowAction.ts

@@ -0,0 +1,44 @@
+import { Action } from '@stacksjs/actions'
+import { emailSDK } from '@stacksjs/email'
+import { config } from '@stacksjs/config'
+
+function defaultMailbox(): string {
+  const domain = (config as any)?.email?.domain || 'stacksjs.com'
+  return `chris@${domain}`
+}
+
+export default new Action({
+  name: 'InboxShowAction',
+  description: 'Returns the body and metadata of a single inbound email.',
+  method: 'GET',
+  apiResponse: true,
+
+  async handle(request: any) {
+    try {
+      const mailbox = request?.query?.mailbox || defaultMailbox()
+      const messageId = request?.params?.id
+
+      if (!messageId) {
+        return { error: 'messageId is required' }
+      }
+
+      const email = await emailSDK.getEmail(mailbox, messageId)
+      if (!email) {
+        return { error: 'Email not found' }
+      }
+
+      return {
+        mailbox,
+        messageId,
+        html: email.html ?? '',
+        text: email.text ?? '',
+        metadata: email.metadata,
+      }
+    }
+    catch (err) {
+      return {
+        error: err instanceof Error ? err.message : 'unknown error',
+      }
+    }
+  },
+})

package/app/Actions/Dashboard/Email/InboxStatsAction.ts

@@ -0,0 +1,36 @@
+import { Action } from '@stacksjs/actions'
+import { emailSDK } from '@stacksjs/email'
+import { config } from '@stacksjs/config'
+
+function defaultMailbox(): string {
+  const domain = (config as any)?.email?.domain || 'stacksjs.com'
+  return `chris@${domain}`
+}
+
+export default new Action({
+  name: 'InboxStatsAction',
+  description: 'Returns aggregate inbox statistics (total/unread/read) for a mailbox.',
+  method: 'GET',
+  apiResponse: true,
+
+  async handle(request: any) {
+    try {
+      const mailbox = request?.query?.mailbox || defaultMailbox()
+      const stats = await emailSDK.getInboxStats(mailbox)
+
+      return {
+        mailbox,
+        ...stats,
+      }
+    }
+    catch (err) {
+      return {
+        mailbox: request?.query?.mailbox || defaultMailbox(),
+        total: 0,
+        unread: 0,
+        read: 0,
+        error: err instanceof Error ? err.message : 'unknown error',
+      }
+    }
+  },
+})

package/app/Controllers/QueryController.ts

@@ -49,7 +49,7 @@ export default class QueryController extends Controller {
           db.fn.count('id').as('count'),
         ])
         .where('status', '=', 'slow')
-        .where('executed_at', '>=', sql`datetime("now", "-1 day")` as any)
+        .whereRaw(sql`executed_at >= datetime("now", "-1 day")`)
         .groupBy(sql`strftime("%Y-%m-%d %H:00:00", executed_at)`)
         .orderBy('hour')
         .execute()
@@ -84,8 +84,39 @@ export default class QueryController extends Controller {
     search = '',
   }) {
     try {
-      let query = db
-        .selectFrom('query_logs')
+      // The wrapped builder is mutable: every chained call rewrites the
+      // same statement text, so a count projection would clobber the
+      // data projection on a shared instance. Route both queries
+      // through one filter helper over independent builders instead.
+      const applyFilters = (q: any): any => {
+        if (connection !== 'all')
+          q = q.where('connection', '=', connection)
+
+        if (status !== 'all')
+          q = q.where('status', '=', status as any)
+
+        if (type !== 'all')
+          q = q.where('tags', 'like', `%"${type}"%`)
+
+        if (search) {
+          // Parenthesized OR-group with bound parameters.
+          q = q.whereAny(['query', 'model', 'method', 'affected_tables'], 'like', `%${search}%`)
+        }
+
+        return q
+      }
+
+      // Get total count for pagination
+      const totalResult = await applyFilters(db.selectFrom('query_logs'))
+        .select(db.fn.count('id').as('count'))
+        .executeTakeFirstOrThrow()
+      const total = Number(totalResult.count)
+
+      // Apply pagination
+      const offset = (page - 1) * perPage
+
+      // Execute paginated query
+      const results = await applyFilters(db.selectFrom('query_logs'))
         .select([
           'id',
           'query',
@@ -100,37 +131,9 @@ export default class QueryController extends Controller {
           'tags',
         ])
         .orderBy('executed_at', 'desc')
-
-      // Apply filters
-      if (connection !== 'all')
-        query = query.where('connection', '=', connection)
-
-      if (status !== 'all')
-        query = query.where('status', '=', status as any)
-
-      if (type !== 'all')
-        query = query.where('tags', 'like', `%"${type}"%`)
-
-      if (search) {
-        query = query.where(eb => eb.or([
-          eb('query', 'like', `%${search}%`),
-          eb('model', 'like', `%${search}%`),
-          eb('method', 'like', `%${search}%`),
-          eb('affected_tables', 'like', `%${search}%`),
-        ]))
-      }
-
-      // Get total count for pagination
-      const countQuery = query.$call(q => q.select(db.fn.count('id').as('count')))
-      const totalResult = await countQuery.executeTakeFirstOrThrow()
-      const total = Number(totalResult.count)
-
-      // Apply pagination
-      const offset = (page - 1) * perPage
-      query = query.limit(perPage).offset(offset)
-
-      // Execute paginated query
-      const results = await query.execute()
+        .limit(perPage)
+        .offset(offset)
+        .execute()
 
       return {
         data: results,
@@ -163,8 +166,29 @@ export default class QueryController extends Controller {
       if (slowThreshold < 0)
         slowThreshold = config.database?.queryLogging?.slowThreshold || 100
 
-      let query = db
-        .selectFrom('query_logs')
+      // Mutable builder: see getRecentQueries for why count and data
+      // queries are independent builders sharing one filter helper.
+      const applyFilters = (q: any): any => {
+        q = q.where('duration', '>=', slowThreshold)
+
+        if (connection !== 'all')
+          q = q.where('connection', '=', connection)
+
+        if (search) {
+          q = q.whereAny(['query', 'model', 'method', 'affected_tables'], 'like', `%${search}%`)
+        }
+
+        return q
+      }
+
+      const totalResult = await applyFilters(db.selectFrom('query_logs'))
+        .select(db.fn.count('id').as('count'))
+        .executeTakeFirstOrThrow()
+      const total = Number(totalResult.count)
+
+      const offset = (page - 1) * perPage
+
+      const results = await applyFilters(db.selectFrom('query_logs'))
         .select([
           'id',
           'query',
@@ -181,29 +205,10 @@ export default class QueryController extends Controller {
           'indexes_used',
           'missing_indexes',
         ])
-        .where('duration', '>=', slowThreshold)
         .orderBy('duration', 'desc')
-
-      if (connection !== 'all')
-        query = query.where('connection', '=', connection)
-
-      if (search) {
-        query = query.where(eb => eb.or([
-          eb('query', 'like', `%${search}%`),
-          eb('model', 'like', `%${search}%`),
-          eb('method', 'like', `%${search}%`),
-          eb('affected_tables', 'like', `%${search}%`),
-        ]))
-      }
-
-      const countQuery = query.$call(q => q.select(db.fn.count('id').as('count')))
-      const totalResult = await countQuery.executeTakeFirstOrThrow()
-      const total = Number(totalResult.count)
-
-      const offset = (page - 1) * perPage
-      query = query.limit(perPage).offset(offset)
-
-      const results = await query.execute()
+        .limit(perPage)
+        .offset(offset)
+        .execute()
 
       return {
         data: results,
@@ -289,11 +294,11 @@ export default class QueryController extends Controller {
       let query = db
         .selectFrom('query_logs')
         .select([
-          sql`strftime("${interval}", executed_at)`.as('time_interval'),
+          sql`strftime(${sql.literal(interval)}, executed_at)`.as('time_interval'),
           db.fn.count('id').as('count'),
           db.fn.avg('duration').as('avg_duration'),
         ])
-        .where('executed_at', '>=', sql`datetime("now", "${timeConstraint}")` as any)
+        .whereRaw(sql`executed_at >= datetime("now", ${sql.literal(timeConstraint)})`)
         .groupBy('time_interval')
         .orderBy('time_interval')
 
@@ -355,13 +360,16 @@ export default class QueryController extends Controller {
     try {
       const retentionDays = config.database?.queryLogging?.retention || 7
 
-      const result = await db
-        .deleteFrom('query_logs')
-        .where('executed_at', '<', sql`datetime("now", "-${retentionDays} day")` as any)
-        .executeTakeFirst()
+      // Parameterized via db.unsafe: the delete builder can neither
+      // bind a datetime() expression nor render raw WHERE fragments.
+      const statement = await (db as any).unsafe(
+        `DELETE FROM query_logs WHERE executed_at < datetime("now", ?)`,
+        [`-${retentionDays} day`],
+      )
+      const result = typeof statement?.execute === 'function' ? await statement.execute() : statement
 
       return {
-        pruned: result.numDeletedRows,
+        pruned: Number(result?.changes ?? result?.numDeletedRows ?? 0),
         retentionDays,
       }
     }

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/defaults",
   "type": "module",
   "sideEffects": false,
-  "version": "0.70.112",
+  "version": "0.70.113",
   "description": "Default Stacks scaffold resources (views, layouts, components, preloader) — shipped so apps consuming the framework from node_modules get the same fallback resources a vendored checkout provides. Source of truth: storage/framework/defaults.",
   "author": "Chris Breuer",
   "license": "MIT",