@yunsoft/yuncms-core 0.1.0 → 0.1.2

package/README.md

@@ -3,3 +3,9 @@
 Core services, schema, authentication, permissions, hooks and storage primitives used by YunCMS.
 
 This package is installed by `@yunsoft/yuncms` and `@yunsoft/yuncms-api`. See the [project repository](https://github.com/Yunsoft-Software/yuncms) for architecture and service documentation.
+
+## Project status
+
+YunCMS is developed and maintained by [Yunsoft Software](https://yunsoft.com). It is under active development, so interfaces and behavior may change between releases. Test upgrades and keep verified backups before production use.
+
+Use YunCMS at your own risk. This package is provided under the [MIT License](https://github.com/Yunsoft-Software/yuncms/blob/16-08-2026/LICENSE) without warranty.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yunsoft/yuncms-core",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Core services, schema, authentication, permissions and storage primitives for YunCMS.",
   "license": "MIT",
   "type": "module",

package/src/auth/users-repository.js

@@ -1,7 +1,7 @@
 export async function readAuthenticationUserByEmail(database, email) {
   const [rows] = await database.query(
     `SELECT u.id, u.email, u.password_hash, u.role, u.status, u.email_verified_at,
-            r.admin AS role_admin, r.public AS role_public
+            r.name AS role_name, r.admin AS role_admin, r.public AS role_public
      FROM yuncms_users u
      LEFT JOIN yuncms_roles r ON r.id = u.role
      WHERE u.email = ?
@@ -14,7 +14,7 @@ export async function readAuthenticationUserByEmail(database, email) {
 export async function readAuthenticationUserById(database, id) {
   const [rows] = await database.query(
     `SELECT u.id, u.email, u.password_hash, u.role, u.status, u.email_verified_at,
-            r.admin AS role_admin, r.public AS role_public
+            r.name AS role_name, r.admin AS role_admin, r.public AS role_public
      FROM yuncms_users u
      LEFT JOIN yuncms_roles r ON r.id = u.role
      WHERE u.id = ?

package/src/bootstrap.js

@@ -4,13 +4,20 @@ import { systemSchemaMigration } from './migrations/0001-system-schema.js';
 import { sessionAccessTokensMigration } from './migrations/0002-session-access-tokens.js';
 import { publicRoleConstraintsMigration } from './migrations/0003-public-role-constraints.js';
 import { authActionTokensMigration } from './migrations/0004-auth-action-tokens.js';
+import { defaultPublicRoleMigration } from './migrations/0005-default-public-role.js';
+import { studioSettingsMigration } from './migrations/0006-studio-settings.js';
+import { systemPermissionResourcesMigration } from './migrations/0007-system-permission-resources.js';
 import { readSchemaVersion } from './schema-version.js';
+import { ensurePublicRole } from './setup.js';
 
 export const CORE_MIGRATIONS = Object.freeze([
   systemSchemaMigration,
   sessionAccessTokensMigration,
   publicRoleConstraintsMigration,
   authActionTokensMigration,
+  defaultPublicRoleMigration,
+  studioSettingsMigration,
+  systemPermissionResourcesMigration,
 ]);
 
 export const REQUIRED_CORE_MIGRATION_IDS = Object.freeze(
@@ -23,10 +30,17 @@ export async function bootstrapDatabase(pool, { lockTimeoutSeconds = 10 } = {})
     'yuncms:bootstrap',
     async (connection) => {
       const migrationResult = await applyMigrations(connection, CORE_MIGRATIONS);
+      const publicRole = await ensurePublicRole(connection);
       const schemaVersion = await readSchemaVersion(connection);
+      const publicRoleMigrated = migrationResult.newlyApplied.includes(defaultPublicRoleMigration.id);
 
       return {
         ...migrationResult,
+        publicRole: {
+          id: publicRole.id,
+          name: publicRole.name,
+          created: publicRole.created || publicRoleMigrated,
+        },
         schemaVersion,
       };
     },

package/src/config.js

@@ -1,5 +1,7 @@
 import { loadEnvFile } from 'node:process';
 
+export const DEFAULT_SERVER_PORT = 3008;
+
 function readInteger(value, fallback, name, { min = 0, max = Number.MAX_SAFE_INTEGER } = {}) {
   if (value === undefined || value === '') return fallback;
 
@@ -33,7 +35,7 @@ export function loadEnvFileIfPresent(path = '.env') {
 }
 
 export function loadConfig(env = process.env) {
-  const serverPort = readInteger(env.PORT, 3008, 'PORT', { min: 1, max: 65535 });
+  const serverPort = readInteger(env.PORT, DEFAULT_SERVER_PORT, 'PORT', { min: 1, max: 65535 });
   const studioOrigin = readString(env.STUDIO_ORIGIN, `http://localhost:${serverPort}`);
 
   return {
@@ -41,6 +43,7 @@ export function loadConfig(env = process.env) {
       host: readString(env.HOST, '127.0.0.1'),
       port: serverPort,
       studioOrigin,
+      trustProxyHops: readInteger(env.TRUST_PROXY_HOPS, 0, 'TRUST_PROXY_HOPS', { min: 0, max: 10 }),
     },
     logging: {
       level: readString(env.LOG_LEVEL, 'info'),

package/src/field-types.js

@@ -12,6 +12,9 @@ const TYPE_NAMES = new Set([
   'uuid',
 ]);
 
+const FILE_INTERFACES = new Set(['file', 'image']);
+const CURRENT_TIME_TYPES = new Set(['datetime', 'timestamp']);
+
 function integerOption(value, fallback, { min, max, label }) {
   const resolved = value ?? fallback;
   if (!Number.isInteger(resolved) || resolved < min || resolved > max) {
@@ -29,8 +32,47 @@ export function assertFieldType(type) {
   return type;
 }
 
+function assertInterfaceStorage(type, fieldInterface) {
+  if (!FILE_INTERFACES.has(fieldInterface)) return;
+  if (type !== 'uuid') {
+    const error = new Error(`${fieldInterface} interface requires uuid storage`);
+    error.code = 'INVALID_FIELD_INTERFACE';
+    throw error;
+  }
+}
+
+function assertTimePresets(type, input) {
+  if (Object.hasOwn(input, 'defaultValue') && input.defaultPreset != null) {
+    const error = new Error('defaultValue and defaultPreset cannot be used together');
+    error.code = 'INVALID_FIELD_DEFAULT';
+    throw error;
+  }
+  if (input.defaultPreset != null && input.defaultPreset !== 'now') {
+    const error = new Error(`Unsupported default preset: ${String(input.defaultPreset)}`);
+    error.code = 'UNSUPPORTED_FIELD_DEFAULT';
+    throw error;
+  }
+  if (input.defaultPreset === 'now' && !CURRENT_TIME_TYPES.has(type)) {
+    const error = new Error('Current-time defaults require datetime or timestamp storage');
+    error.code = 'UNSUPPORTED_FIELD_DEFAULT';
+    throw error;
+  }
+  if (input.autoUpdate != null && typeof input.autoUpdate !== 'boolean') {
+    const error = new Error('autoUpdate must be boolean');
+    error.code = 'INVALID_SCHEMA_PAYLOAD';
+    throw error;
+  }
+  if (input.autoUpdate === true && !CURRENT_TIME_TYPES.has(type)) {
+    const error = new Error('Automatic update timestamps require datetime or timestamp storage');
+    error.code = 'UNSUPPORTED_FIELD_DEFAULT';
+    throw error;
+  }
+}
+
 export function compileFieldColumn(input = {}) {
   const type = assertFieldType(input.type);
+  assertInterfaceStorage(type, input.interface);
+  assertTimePresets(type, input);
   const params = [];
   let sqlType;
 
@@ -81,7 +123,9 @@ export function compileFieldColumn(input = {}) {
   let sql = sqlType;
   sql += input.required === true ? ' NOT NULL' : ' NULL';
 
-  if (Object.hasOwn(input, 'defaultValue')) {
+  if (input.defaultPreset === 'now') {
+    sql += ' DEFAULT CURRENT_TIMESTAMP(3)';
+  } else if (Object.hasOwn(input, 'defaultValue')) {
     if (type === 'text' || type === 'json') {
       const error = new Error(`Defaults for ${type} fields are postponed in V1`);
       error.code = 'UNSUPPORTED_FIELD_DEFAULT';
@@ -97,6 +141,8 @@ export function compileFieldColumn(input = {}) {
     }
   }
 
+  if (input.autoUpdate === true) sql += ' ON UPDATE CURRENT_TIMESTAMP(3)';
+
   return {
     sql,
     params,
@@ -105,6 +151,8 @@ export function compileFieldColumn(input = {}) {
       precision: type === 'decimal' ? (input.precision ?? 18) : undefined,
       scale: type === 'decimal' ? (input.scale ?? 2) : undefined,
       defaultValue: Object.hasOwn(input, 'defaultValue') ? input.defaultValue : undefined,
+      defaultPreset: input.defaultPreset ?? undefined,
+      autoUpdate: input.autoUpdate === true ? true : undefined,
     },
   };
 }

package/src/index.js

@@ -1,4 +1,4 @@
-export { loadConfig, loadEnvFileIfPresent } from './config.js';
+export { DEFAULT_SERVER_PORT, loadConfig, loadEnvFileIfPresent } from './config.js';
 export { createDatabasePool, pingDatabase, closeDatabasePool } from './database.js';
 export { withTransaction, withConnectionTransaction } from './transaction.js';
 export { assertIdentifier, quoteIdentifier } from './identifier.js';
@@ -11,10 +11,16 @@ export {
   requireAccountability,
 } from './accountability.js';
 export { createRequestContext } from './context.js';
-export { createInitialAdmin, findExistingAdmin } from './setup.js';
+export {
+  createInitialAdmin,
+  findExistingAdmin,
+  findPublicRole,
+  ensurePublicRole,
+} from './setup.js';
 export { HookEmitter } from './hooks.js';
 export { createJsonLogger, LEVELS as LOG_LEVELS } from './logger.js';
 export { deleteM2MJunction } from './m2m-lifecycle.js';
+export { createO2ORelation, deleteO2ORelation, o2oUniqueIndexName } from './o2o-relation.js';
 export {
   MAX_EXPAND_FIELDS,
   parseExpandInput,
@@ -41,9 +47,24 @@ export { RolesService } from './services/roles-service.js';
 export { PermissionsService } from './services/permissions-service.js';
 export { FilesService } from './services/files-service.js';
 export { FileReconciliationService } from './services/file-reconciliation-service.js';
+export { StudioSettingsService, STUDIO_SETTING_DEFAULTS } from './services/studio-settings-service.js';
 export { SchemaMetadataRepository } from './schema-metadata-repository.js';
 export { loadSchemaSnapshot, SchemaCache } from './schema.js';
 export { assertFieldType, compileFieldColumn } from './field-types.js';
+export {
+  COLLECTION_SYSTEM_FIELDS,
+  compileCollectionSystemFields,
+  fieldSpecial,
+  isSystemManagedField,
+  normalizeCollectionSystemFields,
+  systemMutationEntries,
+} from './system-fields.js';
+export {
+  assertActionOnlyPermissionPayload,
+  assertSystemResourceAction,
+  isPermissionManagedSystemResource,
+  systemPermissionConfig,
+} from './system-permissions.js';
 export {
   parseItemsQuery,
   compileSelectFields,
@@ -64,4 +85,4 @@ export {
   REQUIRED_CORE_MIGRATION_IDS,
   bootstrapDatabase,
   assertDatabaseCompatible,
-} from './bootstrap.js';
+} from './bootstrap.js';

package/src/migrations/0005-default-public-role.js

@@ -0,0 +1,16 @@
+export const defaultPublicRoleMigration = {
+  id: '0005-default-public-role',
+  statements: [
+    `INSERT INTO yuncms_roles (id, name, description, admin, public)
+     SELECT UUID(),
+            CASE
+              WHEN EXISTS (SELECT 1 FROM yuncms_roles AS named WHERE named.name = 'Public')
+                THEN CONCAT('Public ', LEFT(REPLACE(UUID(), '-', ''), 8))
+              ELSE 'Public'
+            END,
+            'Unauthenticated public API access. No collection access is granted by default.',
+            0,
+            1
+     WHERE NOT EXISTS (SELECT 1 FROM yuncms_roles AS existing WHERE existing.public = 1)`,
+  ],
+};

package/src/migrations/0006-studio-settings.js

@@ -0,0 +1,20 @@
+export const studioSettingsMigration = {
+  id: '0006-studio-settings',
+  statements: [
+    `CREATE TABLE IF NOT EXISTS yuncms_studio_settings (
+      id TINYINT UNSIGNED NOT NULL PRIMARY KEY,
+      brand_name VARCHAR(100) NOT NULL DEFAULT 'YunCMS',
+      logo_url VARCHAR(512) NOT NULL DEFAULT 'https://yunsoft.com/light-logo.png',
+      accent_color CHAR(7) NOT NULL DEFAULT '#2563eb',
+      theme VARCHAR(16) NOT NULL DEFAULT 'system',
+      default_locale VARCHAR(5) NOT NULL DEFAULT 'en',
+      updated_at DATETIME(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) ON UPDATE CURRENT_TIMESTAMP(3),
+      CONSTRAINT chk_yuncms_studio_settings_singleton CHECK (id = 1),
+      CONSTRAINT chk_yuncms_studio_settings_theme CHECK (theme IN ('system', 'light', 'dark')),
+      CONSTRAINT chk_yuncms_studio_settings_locale CHECK (default_locale IN ('en', 'tr'))
+    ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci`,
+    `INSERT IGNORE INTO yuncms_studio_settings
+      (id, brand_name, logo_url, accent_color, theme, default_locale)
+     VALUES (1, 'YunCMS', 'https://yunsoft.com/light-logo.png', '#2563eb', 'system', 'en')`,
+  ],
+};

package/src/migrations/0007-system-permission-resources.js

@@ -0,0 +1,46 @@
+export const systemPermissionResourcesMigration = {
+  id: '0007-system-permission-resources',
+  statements: [
+    `INSERT IGNORE INTO yuncms_collections
+      (collection, primary_key, note, singleton, hidden, \`system\`, metadata)
+     VALUES
+      ('yuncms_users', 'id', 'System users resource', 0, 1, 1,
+        JSON_OBJECT('permissionManaged', TRUE, 'permissionMode', 'action-only', 'resource', 'users',
+          'allowedActions', JSON_ARRAY('read', 'create', 'update', 'delete'))),
+      ('yuncms_files', 'id', 'System files resource', 0, 1, 1,
+        JSON_OBJECT('permissionManaged', TRUE, 'permissionMode', 'action-only', 'resource', 'files',
+          'allowedActions', JSON_ARRAY('read', 'create', 'update', 'delete'))),
+      ('yuncms_roles', 'id', 'System roles resource', 0, 1, 1,
+        JSON_OBJECT('permissionManaged', TRUE, 'permissionMode', 'action-only', 'resource', 'roles',
+          'allowedActions', JSON_ARRAY('read')))`,
+
+    `INSERT IGNORE INTO yuncms_fields
+      (collection, field, type, required, readonly, hidden, interface, schema_metadata)
+     VALUES
+      ('yuncms_users', 'id', 'uuid', 1, 1, 0, 'input', JSON_OBJECT('primaryKey', TRUE, 'length', 36)),
+      ('yuncms_users', 'email', 'string', 1, 0, 0, 'input', JSON_OBJECT('length', 191)),
+      ('yuncms_users', 'role', 'uuid', 0, 0, 0, 'input', JSON_OBJECT('length', 36)),
+      ('yuncms_users', 'status', 'string', 1, 0, 0, 'input', JSON_OBJECT('length', 32)),
+      ('yuncms_users', 'email_verified_at', 'datetime', 0, 1, 0, 'datetime', NULL),
+      ('yuncms_users', 'last_access', 'datetime', 0, 1, 0, 'datetime', NULL),
+      ('yuncms_users', 'created_at', 'datetime', 1, 1, 0, 'datetime', JSON_OBJECT('special', 'date-created', 'systemManaged', TRUE)),
+      ('yuncms_users', 'updated_at', 'datetime', 1, 1, 0, 'datetime', JSON_OBJECT('special', 'date-updated', 'systemManaged', TRUE)),
+
+      ('yuncms_files', 'id', 'uuid', 1, 1, 0, 'input', JSON_OBJECT('primaryKey', TRUE, 'length', 36)),
+      ('yuncms_files', 'storage', 'string', 1, 1, 0, 'input', JSON_OBJECT('length', 64)),
+      ('yuncms_files', 'filename_download', 'string', 1, 0, 0, 'input', JSON_OBJECT('length', 255)),
+      ('yuncms_files', 'title', 'string', 0, 0, 0, 'input', JSON_OBJECT('length', 255)),
+      ('yuncms_files', 'mimetype', 'string', 0, 1, 0, 'input', JSON_OBJECT('length', 191)),
+      ('yuncms_files', 'filesize', 'bigint', 0, 1, 0, 'input', NULL),
+      ('yuncms_files', 'uploaded_by', 'uuid', 0, 1, 0, 'user', JSON_OBJECT('length', 36)),
+      ('yuncms_files', 'uploaded_at', 'datetime', 1, 1, 0, 'datetime', JSON_OBJECT('special', 'date-created', 'systemManaged', TRUE)),
+
+      ('yuncms_roles', 'id', 'uuid', 1, 1, 0, 'input', JSON_OBJECT('primaryKey', TRUE, 'length', 36)),
+      ('yuncms_roles', 'name', 'string', 1, 1, 0, 'input', JSON_OBJECT('length', 100)),
+      ('yuncms_roles', 'description', 'text', 0, 1, 0, 'textarea', NULL),
+      ('yuncms_roles', 'admin', 'boolean', 1, 1, 0, 'boolean', NULL),
+      ('yuncms_roles', 'public', 'boolean', 1, 1, 0, 'boolean', NULL)`,
+
+    `UPDATE yuncms_schema_state SET version = version + 1 WHERE id = 1`,
+  ],
+};

package/src/o2o-relation.js

@@ -0,0 +1,231 @@
+import { createHash } from 'node:crypto';
+
+import { withAdvisoryLock } from './advisory-lock.js';
+import { assertIdentifier, quoteIdentifier } from './identifier.js';
+import { SchemaMetadataRepository } from './schema-metadata-repository.js';
+import { incrementSchemaVersion } from './schema-version.js';
+import { withConnectionTransaction } from './transaction.js';
+import { assertSchemaManager } from './services/schema-access.js';
+
+const ON_DELETE_ACTIONS = new Set(['RESTRICT', 'CASCADE', 'SET NULL']);
+
+function parseMetadata(value) {
+  if (!value) return {};
+  if (typeof value === 'object') return value;
+  try {
+    const parsed = JSON.parse(value);
+    return parsed && typeof parsed === 'object' ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+
+function assertOnDelete(value) {
+  const action = String(value ?? 'RESTRICT').toUpperCase();
+  if (!ON_DELETE_ACTIONS.has(action)) {
+    const error = new Error(`Unsupported ON DELETE action: ${action}`);
+    error.code = 'INVALID_ON_DELETE';
+    throw error;
+  }
+  return action;
+}
+
+function constraintName(manyCollection, manyField, oneCollection) {
+  const digest = createHash('sha256')
+    .update(`${manyCollection}:${manyField}:${oneCollection}`)
+    .digest('hex')
+    .slice(0, 24);
+  return `yfk_${digest}`;
+}
+
+export function o2oUniqueIndexName(collection, field) {
+  const digest = createHash('sha256')
+    .update(`${collection}:${field}:o2o`)
+    .digest('hex')
+    .slice(0, 24);
+  return `yuo_${digest}`;
+}
+
+export async function createO2ORelation({ database, accountability, input = {} }) {
+  assertSchemaManager(accountability);
+  const manyCollection = assertIdentifier(input.manyCollection, 'one-to-one source collection');
+  const manyField = assertIdentifier(input.manyField, 'one-to-one source field');
+  const oneCollection = assertIdentifier(input.oneCollection, 'one-to-one target collection');
+  const onDelete = assertOnDelete(input.onDelete);
+
+  return withAdvisoryLock(database, 'yuncms:schema', async (connection) => {
+    const metadata = new SchemaMetadataRepository(connection);
+    const [manyCollectionMetadata, oneCollectionMetadata] = await Promise.all([
+      metadata.readCollection(manyCollection),
+      metadata.readCollection(oneCollection),
+    ]);
+
+    if (!manyCollectionMetadata || !oneCollectionMetadata) {
+      const error = new Error('Both one-to-one collections must exist');
+      error.code = 'COLLECTION_NOT_FOUND';
+      throw error;
+    }
+    if (manyCollectionMetadata.system || oneCollectionMetadata.system) {
+      const error = new Error('System collections cannot be changed through the dynamic relation API');
+      error.code = 'SYSTEM_SCHEMA_READ_ONLY';
+      throw error;
+    }
+
+    const oneField = input.oneField ?? oneCollectionMetadata.primary_key;
+    assertIdentifier(oneField, 'one-to-one target field');
+    if (oneField !== oneCollectionMetadata.primary_key) {
+      const error = new Error('One-to-one relations must reference the target collection primary key');
+      error.code = 'UNSUPPORTED_RELATION_TARGET';
+      throw error;
+    }
+
+    const [manyFieldMetadata, oneFieldMetadata, existingRelation] = await Promise.all([
+      metadata.readField(manyCollection, manyField),
+      metadata.readField(oneCollection, oneField),
+      metadata.readRelation(manyCollection, manyField),
+    ]);
+    if (!manyFieldMetadata || !oneFieldMetadata) {
+      const error = new Error('Both one-to-one fields must exist in schema metadata');
+      error.code = 'FIELD_NOT_FOUND';
+      throw error;
+    }
+    if (existingRelation) {
+      const error = new Error(`Relation already exists for ${manyCollection}.${manyField}`);
+      error.code = 'RELATION_EXISTS';
+      throw error;
+    }
+    if (manyFieldMetadata.type !== oneFieldMetadata.type) {
+      const error = new Error(`Relation field types do not match: ${manyFieldMetadata.type} -> ${oneFieldMetadata.type}`);
+      error.code = 'RELATION_TYPE_MISMATCH';
+      throw error;
+    }
+    if (onDelete === 'SET NULL' && Boolean(manyFieldMetadata.required)) {
+      const error = new Error('SET NULL cannot be used with a required one-to-one field');
+      error.code = 'INVALID_ON_DELETE';
+      throw error;
+    }
+
+    const fkName = constraintName(manyCollection, manyField, oneCollection);
+    const uniqueIndex = o2oUniqueIndexName(manyCollection, manyField);
+    const tableSql = quoteIdentifier(manyCollection, 'one-to-one source collection');
+    const fieldSql = quoteIdentifier(manyField, 'one-to-one source field');
+    const targetTableSql = quoteIdentifier(oneCollection, 'one-to-one target collection');
+    const targetFieldSql = quoteIdentifier(oneField, 'one-to-one target field');
+    const constraintSql = quoteIdentifier(fkName, 'one-to-one foreign key');
+    const uniqueSql = quoteIdentifier(uniqueIndex, 'one-to-one unique index');
+    let physicalRelationCreated = false;
+
+    try {
+      await connection.query(
+        `ALTER TABLE ${tableSql}
+         ADD CONSTRAINT ${constraintSql}
+           FOREIGN KEY (${fieldSql}) REFERENCES ${targetTableSql} (${targetFieldSql})
+           ON DELETE ${onDelete},
+         ADD UNIQUE INDEX ${uniqueSql} (${fieldSql})`,
+      );
+      physicalRelationCreated = true;
+
+      return await withConnectionTransaction(connection, async () => {
+        const created = await metadata.createRelation({
+          manyCollection,
+          manyField,
+          oneCollection,
+          oneField,
+          onDelete,
+          metadata: { constraintName: fkName, kind: 'o2o', uniqueIndex },
+        });
+        const schemaVersion = await incrementSchemaVersion(connection);
+        return { ...created, schemaVersion };
+      });
+    } catch (error) {
+      const cleanupErrors = [];
+      try {
+        await metadata.deleteRelation(manyCollection, manyField);
+      } catch (cleanupError) {
+        cleanupErrors.push(cleanupError);
+      }
+      if (physicalRelationCreated) {
+        try {
+          await connection.query(
+            `ALTER TABLE ${tableSql}
+             DROP FOREIGN KEY ${constraintSql},
+             DROP INDEX ${uniqueSql}`,
+          );
+        } catch (cleanupError) {
+          cleanupErrors.push(cleanupError);
+        }
+      }
+      if (cleanupErrors.length > 0) {
+        error.cleanupErrors = cleanupErrors;
+        error.code ||= 'SCHEMA_PARTIAL_FAILURE';
+      }
+      throw error;
+    }
+  });
+}
+
+export async function deleteO2ORelation({ database, accountability, manyCollection, manyField }) {
+  assertSchemaManager(accountability);
+  assertIdentifier(manyCollection, 'one-to-one source collection');
+  assertIdentifier(manyField, 'one-to-one source field');
+
+  return withAdvisoryLock(database, 'yuncms:schema', async (connection) => {
+    const metadata = new SchemaMetadataRepository(connection);
+    const relation = await metadata.readRelation(manyCollection, manyField);
+    if (!relation) {
+      const error = new Error(`Unknown relation: ${manyCollection}.${manyField}`);
+      error.code = 'RELATION_NOT_FOUND';
+      throw error;
+    }
+
+    const relationMetadata = parseMetadata(relation.metadata);
+    if (relationMetadata.kind !== 'o2o') {
+      const error = new Error(`Relation is not one-to-one: ${manyCollection}.${manyField}`);
+      error.code = 'RELATION_TYPE_MISMATCH';
+      throw error;
+    }
+
+    const tableSql = quoteIdentifier(relation.many_collection, 'one-to-one source collection');
+    const fieldSql = quoteIdentifier(relation.many_field, 'one-to-one source field');
+    const targetTableSql = quoteIdentifier(relation.one_collection, 'one-to-one target collection');
+    const targetFieldSql = quoteIdentifier(relation.one_field, 'one-to-one target field');
+    const constraintSql = quoteIdentifier(relationMetadata.constraintName, 'one-to-one foreign key');
+    const uniqueSql = quoteIdentifier(
+      relationMetadata.uniqueIndex || o2oUniqueIndexName(manyCollection, manyField),
+      'one-to-one unique index',
+    );
+
+    await connection.query(
+      `ALTER TABLE ${tableSql}
+       DROP FOREIGN KEY ${constraintSql},
+       DROP INDEX ${uniqueSql}`,
+    );
+
+    try {
+      return await withConnectionTransaction(connection, async () => {
+        const deleted = await metadata.deleteRelation(manyCollection, manyField);
+        if (deleted !== 1) {
+          const error = new Error(`Relation metadata disappeared during delete: ${manyCollection}.${manyField}`);
+          error.code = 'SCHEMA_METADATA_DRIFT';
+          throw error;
+        }
+        const schemaVersion = await incrementSchemaVersion(connection);
+        return { deleted: true, schemaVersion };
+      });
+    } catch (error) {
+      try {
+        await connection.query(
+          `ALTER TABLE ${tableSql}
+           ADD CONSTRAINT ${constraintSql}
+             FOREIGN KEY (${fieldSql}) REFERENCES ${targetTableSql} (${targetFieldSql})
+             ON DELETE ${relation.on_delete},
+           ADD UNIQUE INDEX ${uniqueSql} (${fieldSql})`,
+        );
+      } catch (restoreError) {
+        error.restoreError = restoreError;
+        error.code ||= 'SCHEMA_PARTIAL_FAILURE';
+      }
+      throw error;
+    }
+  });
+}

package/src/schema-metadata-repository.js

@@ -2,6 +2,8 @@ function encodeJson(value) {
   return value == null ? null : JSON.stringify(value);
 }
 
+const FILE_INTERFACES = new Set(['file', 'image']);
+
 export class SchemaMetadataRepository {
   constructor(database) {
     if (!database) throw new Error('Database handle is required');
@@ -128,6 +130,11 @@ export class SchemaMetadataRepository {
     options = null,
     schemaMetadata = null,
   }) {
+    if (FILE_INTERFACES.has(fieldInterface) && type !== 'uuid') {
+      const error = new Error(`${fieldInterface} interface requires uuid storage`);
+      error.code = 'INVALID_FIELD_INTERFACE';
+      throw error;
+    }
     await this.database.query(
       `INSERT INTO yuncms_fields
        (collection, field, type, required, readonly, hidden, sort, interface, options, schema_metadata)
@@ -152,6 +159,16 @@ export class SchemaMetadataRepository {
     const assignments = [];
     const params = [];
 
+    if (Object.hasOwn(patch, 'interface') && FILE_INTERFACES.has(patch.interface)) {
+      const existing = await this.readField(collection, field);
+      if (!existing) return null;
+      if (existing.type !== 'uuid') {
+        const error = new Error(`${patch.interface} interface requires uuid storage`);
+        error.code = 'INVALID_FIELD_INTERFACE';
+        throw error;
+      }
+    }
+
     if (Object.hasOwn(patch, 'readonly')) {
       assignments.push('readonly = ?');
       params.push(patch.readonly ? 1 : 0);

package/src/services/auth-service.js

@@ -31,6 +31,7 @@ function publicUser(user) {
     id: user.id,
     email: user.email,
     role: user.role ?? null,
+    role_name: user.role_name ?? null,
     status: user.status,
     email_verified_at: user.email_verified_at ?? null,
   };
@@ -95,7 +96,7 @@ export class AuthService extends BaseService {
     if (tokenType(token) !== 'api') throw invalidToken();
     const [rows] = await this.database.query(
       `SELECT t.id AS api_token_id, t.user, u.email, u.role, u.status,
-              r.admin AS role_admin
+              r.name AS role_name, r.admin AS role_admin
        FROM yuncms_api_tokens t
        INNER JOIN yuncms_users u ON u.id = t.user
        LEFT JOIN yuncms_roles r ON r.id = u.role
@@ -119,6 +120,7 @@ export class AuthService extends BaseService {
     return {
       user: row.user,
       role: row.role ?? null,
+      role_name: row.role_name ?? null,
       admin: Boolean(row.role_admin),
       email: row.email,
       session: null,
@@ -141,6 +143,7 @@ export class AuthService extends BaseService {
         id: result.user,
         email: result.email,
         role: result.role,
+        role_name: result.role_name ?? null,
       },
       access_token: result.access_token,
       access_expires_at: result.access_expires_at,