@yunsoft/yuncms-api 0.1.2 → 0.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yunsoft/yuncms-api",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Express API runtime and bundled Studio server for YunCMS.",
   "license": "MIT",
   "type": "module",
@@ -32,7 +32,7 @@
     "test": "node --test"
   },
   "dependencies": {
-    "@yunsoft/yuncms-core": "0.1.2",
+    "@yunsoft/yuncms-core": "0.1.3",
     "express": "5.2.1"
   }
 }

package/src/app.js

@@ -15,6 +15,7 @@ import { createPermissionsRouter } from './routes/permissions.js';
 import { createRolesRouter } from './routes/roles.js';
 import { createSchemaRouter } from './routes/schema.js';
 import { createStudioSettingsRouter } from './routes/studio-settings.js';
+import { createSystemSchemaRouter } from './routes/system-schema.js';
 import { createUsersRouter } from './routes/users.js';
 import { createStudioMiddleware } from './studio.js';
 
@@ -111,6 +112,7 @@ export function createApp({
   app.use('/studio-settings', createStudioSettingsRouter());
   app.use('/auth', createAuthRouter({ mailer, config, logger }));
   app.use('/items', createItemsRouter());
+  app.use('/schema', createSystemSchemaRouter({ schemaCache }));
   app.use('/schema', createSchemaRouter({ schemaCache }));
   app.use('/users', createUsersRouter());
   app.use('/roles', createRolesRouter());

package/src/routes/studio-settings.js

@@ -7,9 +7,25 @@ function settingsService(req) {
   return new Service(serviceOptionsFromRequest(req));
 }
 
+function sendImageAsset(res, asset) {
+  const { file, contents } = asset;
+  res.set('cache-control', 'no-cache, must-revalidate');
+  res.set('content-security-policy', 'sandbox');
+  res.set('content-disposition', 'inline');
+  return res.type(file.mimetype || 'application/octet-stream').send(contents);
+}
+
 export function createStudioSettingsRouter() {
   const router = express.Router();
 
+  router.get('/logo', async (req, res) => {
+    sendImageAsset(res, await settingsService(req).readLogoContent());
+  });
+
+  router.get('/favicon', async (req, res) => {
+    sendImageAsset(res, await settingsService(req).readFaviconContent());
+  });
+
   router.get('/', async (req, res) => {
     res.json({ data: await settingsService(req).readPublic() });
   });

package/src/routes/system-schema.js

@@ -0,0 +1,41 @@
+import express from 'express';
+
+import { serviceOptionsFromRequest } from '../service-options.js';
+
+function service(req, name) {
+  const Service = req.context.services[name];
+  if (!Service) throw new Error(`Service is not registered: ${name}`);
+  return new Service(serviceOptionsFromRequest(req));
+}
+
+export function createSystemSchemaRouter({ schemaCache = null } = {}) {
+  const router = express.Router();
+
+  router.post('/system-collections/:collection/fields', async (req, res) => {
+    const data = await service(req, 'SystemCollectionFieldsService').createOne(
+      req.params.collection,
+      req.body ?? {},
+    );
+    schemaCache?.clear();
+    try {
+      await service(req, 'AuditService').record({
+        action: 'schema.system-field.create',
+        collection: req.params.collection,
+        itemKey: data.field,
+        requestId: req.id,
+        payload: { after: data },
+      });
+    } catch (error) {
+      req.context.logger?.error?.('YunCMS system field audit write failed after committed mutation', {
+        requestId: req.id,
+        collection: req.params.collection,
+        field: data.field,
+        code: error?.code,
+        message: error?.message,
+      });
+    }
+    res.status(201).json({ data });
+  });
+
+  return router;
+}