canopycms 0.0.0 → 0.0.2

package/src/api/permissions.ts

@@ -1,334 +0,0 @@
-import { z } from 'zod'
-
-import type { ApiContext, ApiRequest, ApiResponse } from './types'
-import type { PathPermission } from '../config'
-import type { UserSearchResult, GroupMetadata } from '../auth/types'
-import { loadPathPermissions, savePathPermissions, loadPermissionsFile } from '../authorization'
-import { permissionPathSchema } from './validators'
-import { defineEndpoint } from './route-builder'
-import { getSettingsBranchContext, commitSettings } from './settings-helpers'
-
-/** Response type for getting permissions */
-export type PermissionsResponse = ApiResponse<{ permissions: PathPermission[] }>
-
-/** Response type for user search */
-export type SearchUsersResponse = ApiResponse<{ users: UserSearchResult[] }>
-
-/** Response type for list groups */
-export type ListGroupsResponse = ApiResponse<{ groups: GroupMetadata[] }>
-
-/** Response type for get user metadata */
-export type GetUserMetadataResponse = ApiResponse<{
-  user: UserSearchResult | null
-}>
-
-// ============================================================================
-// Zod Schemas for Validation
-// ============================================================================
-
-const permissionTargetSchema = z.object({
-  allowedUsers: z.array(z.string()).optional(),
-  allowedGroups: z.array(z.string()).optional(),
-})
-
-const pathPermissionSchema = z.object({
-  path: permissionPathSchema,
-  read: permissionTargetSchema.optional(),
-  edit: permissionTargetSchema.optional(),
-  review: permissionTargetSchema.optional(),
-})
-
-const updatePermissionsBodySchema = z.object({
-  permissions: z.array(pathPermissionSchema),
-  expectedContentVersion: z.number().optional(),
-})
-
-const searchUsersParamsSchema = z.object({
-  q: z.string(),
-  limit: z.string().optional(),
-})
-
-const getUserMetadataParamsSchema = z.object({
-  userId: z.string(),
-})
-
-export type UpdatePermissionsBody = z.infer<typeof updatePermissionsBodySchema>
-export type SearchUsersParams = z.infer<typeof searchUsersParamsSchema>
-export type GetUserMetadataParams = z.infer<typeof getUserMetadataParamsSchema>
-
-/**
- * Get current permissions (admin only)
- */
-const getPermissionsHandler = async (
-  _gc: Record<string, never>,
-  ctx: ApiContext,
-  _req: ApiRequest,
-): Promise<PermissionsResponse> => {
-  try {
-    const result = await getSettingsBranchContext(ctx)
-    if ('error' in result) {
-      return { ok: false, status: result.status, error: result.error }
-    }
-
-    const { context, mode } = result
-    const permissions = await loadPathPermissions(context.branchRoot, mode)
-
-    return {
-      ok: true,
-      status: 200,
-      data: { permissions },
-    }
-  } catch (error) {
-    return {
-      ok: false,
-      status: 500,
-      error: error instanceof Error ? error.message : 'Failed to load permissions',
-    }
-  }
-}
-
-/**
- * Update permissions (admin only)
- */
-const updatePermissionsHandler = async (
-  _gc: Record<string, never>,
-  ctx: ApiContext,
-  req: ApiRequest,
-  body: z.infer<typeof updatePermissionsBodySchema>,
-): Promise<ApiResponse> => {
-  if (!body?.permissions) {
-    return { ok: false, status: 400, error: 'permissions array required' }
-  }
-
-  try {
-    const result = await getSettingsBranchContext(ctx)
-    if ('error' in result) {
-      return { ok: false, status: result.status, error: result.error }
-    }
-
-    const { context, mode } = result
-
-    // Load current file to check version (optimistic locking)
-    const currentFile = await loadPermissionsFile(context.branchRoot, mode)
-
-    // Check for version conflict if client sent expected version
-    if (body.expectedContentVersion !== undefined) {
-      const currentVersion = currentFile?.contentVersion ?? 0
-      if (currentVersion !== body.expectedContentVersion) {
-        return {
-          ok: false,
-          status: 409,
-          error: 'Permissions were modified by another user. Please reload and try again.',
-        }
-      }
-    }
-
-    // Increment version when saving
-    const newContentVersion = (currentFile?.contentVersion ?? 0) + 1
-
-    // Save file (uses mode-aware file path)
-    await savePathPermissions(
-      context.branchRoot,
-      body.permissions,
-      req.user.userId,
-      mode,
-      newContentVersion,
-    )
-
-    // Commit and push (mode-aware)
-    await commitSettings(ctx, {
-      context,
-      branchRoot: context.branchRoot,
-      fileName: 'permissions.json',
-      message: 'Update permissions',
-      mode,
-    })
-
-    return { ok: true, status: 200 }
-  } catch (error) {
-    return {
-      ok: false,
-      status: 500,
-      error: error instanceof Error ? error.message : 'Failed to save permissions',
-    }
-  }
-}
-
-/**
- * Search users (for permission UI)
- */
-const searchUsersHandler = async (
-  _gc: Record<string, never>,
-  ctx: ApiContext,
-  req: ApiRequest,
-  params: z.infer<typeof searchUsersParamsSchema>,
-): Promise<SearchUsersResponse> => {
-  const authPlugin = ctx.authPlugin
-  if (!authPlugin) {
-    return { ok: false, status: 501, error: 'Auth plugin not configured' }
-  }
-
-  const query = params.q
-  const limit = params.limit ? parseInt(params.limit, 10) : undefined
-
-  try {
-    const users = await authPlugin.searchUsers(query, limit)
-    return { ok: true, status: 200, data: { users } }
-  } catch (error) {
-    return {
-      ok: false,
-      status: 500,
-      error: error instanceof Error ? error.message : 'User search failed',
-    }
-  }
-}
-
-/**
- * List groups (for permission UI)
- */
-const listGroupsHandler = async (
-  _gc: Record<string, never>,
-  ctx: ApiContext,
-  _req: ApiRequest,
-): Promise<ListGroupsResponse> => {
-  const authPlugin = ctx.authPlugin
-  if (!authPlugin) {
-    return { ok: false, status: 501, error: 'Auth plugin not configured' }
-  }
-
-  try {
-    const groups = await authPlugin.listGroups()
-    return { ok: true, status: 200, data: { groups } }
-  } catch (error) {
-    return {
-      ok: false,
-      status: 500,
-      error: error instanceof Error ? error.message : 'Group list failed',
-    }
-  }
-}
-
-/**
- * Get user metadata by ID (for UI display)
- */
-const getUserMetadataHandler = async (
-  _gc: Record<string, never>,
-  ctx: ApiContext,
-  req: ApiRequest,
-  params: z.infer<typeof getUserMetadataParamsSchema>,
-): Promise<GetUserMetadataResponse> => {
-  const authPlugin = ctx.authPlugin
-  if (!authPlugin) {
-    return { ok: false, status: 501, error: 'Auth plugin not configured' }
-  }
-
-  try {
-    const user = await authPlugin.getUserMetadata(params.userId)
-    return { ok: true, status: 200, data: { user } }
-  } catch (error) {
-    return {
-      ok: false,
-      status: 500,
-      error: error instanceof Error ? error.message : 'Failed to get user metadata',
-    }
-  }
-}
-
-// ============================================================================
-// Route Definitions with defineEndpoint
-// ============================================================================
-
-/**
- * Get current permissions (admin only)
- * GET /permissions
- */
-const getPermissions = defineEndpoint({
-  namespace: 'permissions',
-  name: 'get',
-  method: 'GET',
-  path: '/permissions',
-  responseType: 'PermissionsResponse',
-  response: {} as PermissionsResponse,
-  defaultMockData: { permissions: [] },
-  guards: ['admin'] as const,
-  handler: getPermissionsHandler,
-})
-
-/**
- * Update permissions (admin only)
- * PUT /permissions
- */
-const updatePermissions = defineEndpoint({
-  namespace: 'permissions',
-  name: 'update',
-  method: 'PUT',
-  path: '/permissions',
-  body: updatePermissionsBodySchema,
-  bodyType: 'UpdatePermissionsBody',
-  responseType: 'PermissionsResponse',
-  response: {} as PermissionsResponse,
-  defaultMockData: { permissions: [] },
-  guards: ['admin'] as const,
-  handler: updatePermissionsHandler,
-})
-
-/**
- * Search for users (admin/reviewer only)
- * GET /users/search?q=...
- */
-const searchUsers = defineEndpoint({
-  namespace: 'permissions',
-  name: 'searchUsers',
-  method: 'GET',
-  path: '/users/search',
-  params: searchUsersParamsSchema,
-  responseType: 'SearchUsersResponse',
-  response: {} as SearchUsersResponse,
-  defaultMockData: { users: [] },
-  guards: ['privileged'] as const,
-  handler: searchUsersHandler,
-})
-
-/**
- * List groups (admin/reviewer only)
- * GET /groups
- */
-const listGroups = defineEndpoint({
-  namespace: 'permissions',
-  name: 'listGroups',
-  method: 'GET',
-  path: '/groups',
-  responseType: 'ListGroupsResponse',
-  response: {} as ListGroupsResponse,
-  defaultMockData: { groups: [] },
-  guards: ['privileged'] as const,
-  handler: listGroupsHandler,
-})
-
-/**
- * Get user metadata by ID (admin/reviewer only)
- * GET /users/:userId
- */
-const getUserMetadata = defineEndpoint({
-  namespace: 'permissions',
-  name: 'getUserMetadata',
-  method: 'GET',
-  path: '/users/:userId',
-  params: getUserMetadataParamsSchema,
-  responseType: 'GetUserMetadataResponse',
-  response: {} as GetUserMetadataResponse,
-  defaultMockData: { user: null },
-  guards: ['privileged'] as const,
-  handler: getUserMetadataHandler,
-})
-
-/**
- * Exported routes for router registration
- */
-export const PERMISSION_ROUTES = {
-  get: getPermissions,
-  update: updatePermissions,
-  searchUsers: searchUsers,
-  listGroups: listGroups,
-  getUserMetadata: getUserMetadata,
-} as const

package/src/api/reference-options.ts

@@ -1,118 +0,0 @@
-import { z } from 'zod'
-
-import type { ApiContext, ApiRequest, ApiResponse } from './types'
-import type { BranchContextWithSchema } from '../types'
-import { ContentStore } from '../content-store'
-import { defineEndpoint } from './route-builder'
-import { ReferenceResolver } from '../reference-resolver'
-import { parseLogicalPath } from '../paths'
-import type { LogicalPath } from '../paths/types'
-import { branchNameSchema } from './validators'
-
-/** Response type for reference options */
-export type ReferenceOptionsResponse = ApiResponse<{
-  options: Array<{
-    id: string
-    label: string
-    collection: string
-  }>
-}>
-
-// ============================================================================
-// Zod Schemas for Validation
-// ============================================================================
-
-const getReferenceOptionsParamsSchema = z.object({
-  branch: branchNameSchema,
-})
-
-const getReferenceOptionsHandler = async (
-  gc: { branchContext: BranchContextWithSchema },
-  ctx: ApiContext,
-  req: ApiRequest,
-  _params: z.infer<typeof getReferenceOptionsParamsSchema>,
-): Promise<ReferenceOptionsResponse> => {
-  const { branchContext } = gc
-
-  // Query parameter validation
-  const querySchema = z.object({
-    collections: z.string().min(1),
-    displayField: z.string().optional(),
-    search: z.string().optional(),
-  })
-  const queryResult = querySchema.safeParse(req.query ?? {})
-  if (!queryResult.success) {
-    return {
-      ok: false,
-      status: 400,
-      error: 'Query parameter "collections" is required',
-    }
-  }
-
-  const collectionsParam = queryResult.data.collections
-  const displayField = queryResult.data.displayField || 'title'
-  const search = queryResult.data.search
-
-  const flatSchema = branchContext.flatSchema
-  const store = new ContentStore(branchContext.branchRoot, flatSchema)
-
-  // Get ID index (automatically loads if needed)
-  const idIndex = await store.idIndex()
-
-  // Parse and validate collections from query params
-  const rawCollections = collectionsParam
-    .split(',')
-    .map((c) => c.trim())
-    .filter(Boolean)
-  const collections: LogicalPath[] = []
-  for (const raw of rawCollections) {
-    const result = parseLogicalPath(raw)
-    if (!result.ok) {
-      return {
-        ok: false,
-        status: 400,
-        error: `Invalid collection path "${raw}": ${result.error}`,
-      }
-    }
-    collections.push(result.path)
-  }
-
-  // Load reference options
-  const resolver = new ReferenceResolver(store, idIndex)
-  const options = await resolver.loadReferenceOptions(collections, displayField, search)
-
-  return {
-    ok: true,
-    status: 200,
-    data: { options },
-  }
-}
-
-// ============================================================================
-// Route Definitions
-// ============================================================================
-
-/**
- * Get reference options for a field
- * GET /:branch/reference-options
- * Query params: collections (comma-separated), displayField, search
- */
-const getReferenceOptions = defineEndpoint({
-  namespace: 'content',
-  name: 'getReferenceOptions',
-  method: 'GET',
-  path: '/:branch/reference-options',
-  params: getReferenceOptionsParamsSchema,
-  responseType: 'ReferenceOptionsResponse',
-  response: {} as ReferenceOptionsResponse,
-  defaultMockData: { options: [] },
-  guards: ['branchAccessWithSchema'] as const,
-  handler: getReferenceOptionsHandler,
-})
-
-/**
- * Exported routes for router registration
- */
-export const REFERENCE_OPTIONS_ROUTES = {
-  get: getReferenceOptions,
-} as const

package/src/api/resolve-references.ts

@@ -1,107 +0,0 @@
-import { z } from 'zod'
-
-import type { ApiContext, ApiRequest, ApiResponse } from './types'
-import type { BranchContextWithSchema } from '../types'
-import { ContentStore } from '../content-store'
-import { defineEndpoint } from './route-builder'
-import { ReferenceResolver } from '../reference-resolver'
-import { branchNameSchema, contentIdSchema } from './validators'
-
-export interface ResolveReferencesBody {
-  ids: string[] // ContentId strings at runtime
-}
-
-/** Response type for resolved references */
-export type ResolveReferencesResponse = ApiResponse<{
-  resolved: Record<string, unknown>
-}>
-
-// ============================================================================
-// Zod Schemas for Validation
-// ============================================================================
-
-const resolveReferencesParamsSchema = z.object({
-  branch: branchNameSchema,
-})
-
-const resolveReferencesBodySchema = z.object({
-  ids: z.array(contentIdSchema).min(1),
-})
-
-const resolveReferencesHandler = async (
-  gc: { branchContext: BranchContextWithSchema },
-  ctx: ApiContext,
-  req: ApiRequest,
-  params: z.infer<typeof resolveReferencesParamsSchema>,
-  body: z.infer<typeof resolveReferencesBodySchema>,
-): Promise<ResolveReferencesResponse> => {
-  const { branchContext } = gc
-
-  const { ids } = body
-
-  const flatSchema = branchContext.flatSchema
-  const store = new ContentStore(branchContext.branchRoot, flatSchema)
-
-  // Get ID index (automatically loads if needed)
-  const idIndex = await store.idIndex()
-
-  // Resolve each ID to full document
-  const resolver = new ReferenceResolver(store, idIndex)
-
-  const resolved: Record<string, unknown> = {}
-
-  for (const id of ids) {
-    try {
-      const result = await resolver.resolve(id)
-      if (result && result.exists && result.collection && result.slug) {
-        const doc = await store.read(result.collection, result.slug)
-        if (doc && doc.data) {
-          resolved[id] = {
-            id,
-            ...doc.data,
-          }
-        }
-      }
-    } catch (error) {
-      // Skip failed resolutions, don't block entire request
-      console.error(`Failed to resolve reference ID ${id}:`, error)
-    }
-  }
-
-  return {
-    ok: true,
-    status: 200,
-    data: { resolved },
-  }
-}
-
-// ============================================================================
-// Route Definitions
-// ============================================================================
-
-/**
- * Resolve reference IDs to full document objects
- * POST /:branch/resolve-references
- * Body: { ids: string[] }
- */
-const resolveReferences = defineEndpoint({
-  namespace: 'content',
-  name: 'resolveReferences',
-  method: 'POST',
-  path: '/:branch/resolve-references',
-  params: resolveReferencesParamsSchema,
-  body: resolveReferencesBodySchema,
-  bodyType: 'ResolveReferencesBody',
-  responseType: 'ResolveReferencesResponse',
-  response: {} as ResolveReferencesResponse,
-  defaultMockData: { resolved: {} },
-  guards: ['branchAccessWithSchema'] as const,
-  handler: resolveReferencesHandler,
-})
-
-/**
- * Exported routes for router registration
- */
-export const RESOLVE_REFERENCES_ROUTES = {
-  post: resolveReferences,
-} as const