domma-cms 0.13.7 → 0.14.1

package/server/routes/api/pages.js

@@ -1,132 +1,135 @@
-/**
- * Pages API
- * GET    /api/pages          - list all pages
- * GET    /api/pages/*        - get single page by URL path
- * POST   /api/pages          - create page
- * PUT    /api/pages/*        - update page
- * DELETE /api/pages/*        - delete page
- */
-import {createPage, deletePage, getPage, listPages, renamePage, updatePage} from '../../services/content.js';
-import {parseMarkdown} from '../../services/markdown.js';
-import {authenticate, requirePermission} from '../../middleware/auth.js';
-import {getConfig, saveConfig} from '../../config.js';
-
-export async function pagesRoutes(fastify) {
-    const canRead = {preHandler: [authenticate, requirePermission('pages', 'read')]};
-    const canCreate = {preHandler: [authenticate, requirePermission('pages', 'create')]};
-    const canUpdate = {preHandler: [authenticate, requirePermission('pages', 'update')]};
-    const canDelete = {preHandler: [authenticate, requirePermission('pages', 'delete')]};
-
-  // Render markdown preview (shortcodes + sanitize, no frontmatter)
-    fastify.post('/pages/preview', canRead, async (request, reply) => {
-    const {markdown} = request.body;
-    if (typeof markdown !== 'string') return reply.status(400).send({error: 'markdown must be a string'});
-    const {html} = await parseMarkdown(`---\ntitle: preview\n---\n${markdown}`);
-    return {html};
-  });
-
-    // Aggregate unique tags from all pages — must be registered before the wildcard /pages/* route
-    fastify.get('/pages/tags', canRead, async (request, reply) => {
-        const pages = await listPages();
-        const tagSet = new Set();
-        pages.forEach(p => {
-            if (Array.isArray(p.tags)) p.tags.forEach(t => { if (t) tagSet.add(t); });
-        });
-        return { tags: [...tagSet].sort() };
-    });
-
-    // List all pages
-    fastify.get('/pages', canRead, async (request, reply) => {
-        const pages = await listPages();
-        return pages.map(p => ({
-            urlPath: p.urlPath,
-            title: p.title,
-            slug: p.slug,
-            status: p.status,
-            layout: p.layout,
-            showInNav: p.showInNav,
-            sortOrder: p.sortOrder,
-          category: p.category || null,
-          visibility: p.visibility || 'public',
-          tags: p.tags || [],
-            updatedAt: p.updatedAt,
-            createdAt: p.createdAt
-        }));
-    });
-
-    // Get single page
-    fastify.get('/pages/*', canRead, async (request, reply) => {
-        const urlPath = '/' + request.params['*'];
-        const page = await getPage(urlPath);
-        if (!page) return reply.status(404).send({ error: 'Page not found' });
-        return page;
-    });
-
-    // Create page
-    fastify.post('/pages', canCreate, async (request, reply) => {
-        const { urlPath, frontmatter, body } = request.body;
-        if (!urlPath) return reply.status(400).send({ error: 'urlPath is required' });
-
-        const existing = await getPage(urlPath);
-        if (existing) return reply.status(409).send({ error: 'Page already exists at that path' });
-
-        const page = await createPage(urlPath, frontmatter || {}, body || '');
-        return reply.status(201).send(page);
-    });
-
-    // Update page (optionally rename to a new URL path)
-    fastify.put('/pages/*', canUpdate, async (request, reply) => {
-        const urlPath = '/' + request.params['*'];
-        const { frontmatter, body, newUrlPath } = request.body;
-
-        const existing = await getPage(urlPath);
-        if (!existing) return reply.status(404).send({ error: 'Page not found' });
-
-        if (newUrlPath && newUrlPath !== urlPath) {
-            const conflict = await getPage(newUrlPath);
-            if (conflict) return reply.status(409).send({ error: 'A page already exists at that path' });
-
-            await renamePage(urlPath, newUrlPath);
-            await rewriteNavLinks(urlPath, newUrlPath);
-
-            const page = await updatePage(newUrlPath, frontmatter || {}, body, {author: request.user.username});
-            return page;
-        }
-
-        const page = await updatePage(urlPath, frontmatter || {}, body, {author: request.user.username});
-        return page;
-    });
-
-    // Delete page
-    fastify.delete('/pages/*', canDelete, async (request, reply) => {
-        const urlPath = '/' + request.params['*'];
-        const existing = await getPage(urlPath);
-        if (!existing) return reply.status(404).send({ error: 'Page not found' });
-
-        await deletePage(urlPath);
-        return { success: true };
-    });
-}
-
-/**
- * Rewrite any navigation item URLs that match oldUrlPath to newUrlPath,
- * then persist the updated navigation config.
- *
- * @param {string} oldUrlPath
- * @param {string} newUrlPath
- * @returns {Promise<void>}
- */
-async function rewriteNavLinks(oldUrlPath, newUrlPath) {
-    const nav = getConfig('navigation');
-    if (!nav?.items?.length) return;
-
-    let changed = false;
-    for (const item of nav.items) {
-        if (item.url === oldUrlPath) { item.url = newUrlPath; changed = true; }
-        for (const child of item.children || []) {
-            if (child.url === oldUrlPath) { child.url = newUrlPath; changed = true; }
-        }
-    }
-
-    if (changed) await saveConfig('navigation', nav);
-}
+/**
+ * Pages API
+ * GET    /api/pages          - list all pages
+ * GET    /api/pages/*        - get single page by URL path
+ * POST   /api/pages          - create page
+ * PUT    /api/pages/*        - update page
+ * DELETE /api/pages/*        - delete page
+ */
+import {createPage, deletePage, getPage, listPages, renamePage, updatePage} from '../../services/content.js';
+import {parseMarkdown} from '../../services/markdown.js';
+import {getVersionCount} from '../../services/versions.js';
+import {authenticate, requirePermission} from '../../middleware/auth.js';
+import {getConfig, saveConfig} from '../../config.js';
+
+export async function pagesRoutes(fastify) {
+    const canRead = {preHandler: [authenticate, requirePermission('pages', 'read')]};
+    const canCreate = {preHandler: [authenticate, requirePermission('pages', 'create')]};
+    const canUpdate = {preHandler: [authenticate, requirePermission('pages', 'update')]};
+    const canDelete = {preHandler: [authenticate, requirePermission('pages', 'delete')]};
+
+  // Render markdown preview (shortcodes + sanitize, no frontmatter)
+    fastify.post('/pages/preview', canRead, async (request, reply) => {
+    const {markdown} = request.body;
+    if (typeof markdown !== 'string') return reply.status(400).send({error: 'markdown must be a string'});
+    const {html} = await parseMarkdown(`---\ntitle: preview\n---\n${markdown}`);
+    return {html};
+  });
+
+    // Aggregate unique tags from all pages — must be registered before the wildcard /pages/* route
+    fastify.get('/pages/tags', canRead, async (request, reply) => {
+        const pages = await listPages();
+        const tagSet = new Set();
+        pages.forEach(p => {
+            if (Array.isArray(p.tags)) p.tags.forEach(t => { if (t) tagSet.add(t); });
+        });
+        return { tags: [...tagSet].sort() };
+    });
+
+    // List all pages
+    fastify.get('/pages', canRead, async (request, reply) => {
+        const pages = await listPages();
+        const counts = await Promise.all(pages.map(p => getVersionCount(p.urlPath)));
+        return pages.map((p, i) => ({
+            urlPath: p.urlPath,
+            title: p.title,
+            slug: p.slug,
+            status: p.status,
+            layout: p.layout,
+            showInNav: p.showInNav,
+            sortOrder: p.sortOrder,
+            category: p.category || null,
+            visibility: p.visibility || 'public',
+            tags: p.tags || [],
+            updatedAt: p.updatedAt,
+            createdAt: p.createdAt,
+            versionCount: counts[i]
+        }));
+    });
+
+    // Get single page
+    fastify.get('/pages/*', canRead, async (request, reply) => {
+        const urlPath = '/' + request.params['*'];
+        const page = await getPage(urlPath);
+        if (!page) return reply.status(404).send({ error: 'Page not found' });
+        return page;
+    });
+
+    // Create page
+    fastify.post('/pages', canCreate, async (request, reply) => {
+        const { urlPath, frontmatter, body } = request.body;
+        if (!urlPath) return reply.status(400).send({ error: 'urlPath is required' });
+
+        const existing = await getPage(urlPath);
+        if (existing) return reply.status(409).send({ error: 'Page already exists at that path' });
+
+        const page = await createPage(urlPath, frontmatter || {}, body || '');
+        return reply.status(201).send(page);
+    });
+
+    // Update page (optionally rename to a new URL path)
+    fastify.put('/pages/*', canUpdate, async (request, reply) => {
+        const urlPath = '/' + request.params['*'];
+        const { frontmatter, body, newUrlPath } = request.body;
+
+        const existing = await getPage(urlPath);
+        if (!existing) return reply.status(404).send({ error: 'Page not found' });
+
+        if (newUrlPath && newUrlPath !== urlPath) {
+            const conflict = await getPage(newUrlPath);
+            if (conflict) return reply.status(409).send({ error: 'A page already exists at that path' });
+
+            await renamePage(urlPath, newUrlPath);
+            await rewriteNavLinks(urlPath, newUrlPath);
+
+            const page = await updatePage(newUrlPath, frontmatter || {}, body, {author: request.user.username});
+            return page;
+        }
+
+        const page = await updatePage(urlPath, frontmatter || {}, body, {author: request.user.username});
+        return page;
+    });
+
+    // Delete page
+    fastify.delete('/pages/*', canDelete, async (request, reply) => {
+        const urlPath = '/' + request.params['*'];
+        const existing = await getPage(urlPath);
+        if (!existing) return reply.status(404).send({ error: 'Page not found' });
+
+        await deletePage(urlPath);
+        return { success: true };
+    });
+}
+
+/**
+ * Rewrite any navigation item URLs that match oldUrlPath to newUrlPath,
+ * then persist the updated navigation config.
+ *
+ * @param {string} oldUrlPath
+ * @param {string} newUrlPath
+ * @returns {Promise<void>}
+ */
+async function rewriteNavLinks(oldUrlPath, newUrlPath) {
+    const nav = getConfig('navigation');
+    if (!nav?.items?.length) return;
+
+    let changed = false;
+    for (const item of nav.items) {
+        if (item.url === oldUrlPath) { item.url = newUrlPath; changed = true; }
+        for (const child of item.children || []) {
+            if (child.url === oldUrlPath) { child.url = newUrlPath; changed = true; }
+        }
+    }
+
+    if (changed) await saveConfig('navigation', nav);
+}

package/server/routes/api/versions.js

@@ -14,6 +14,7 @@ import {
     deleteVersions,
     getVersion,
     listVersions,
+    pruneVersions,
     restoreVersion
 } from '../../services/versions.js';
 import {authenticate, requirePermission} from '../../middleware/auth.js';
@@ -82,6 +83,21 @@ export async function versionsRoutes(fastify) {
         }
     });
 
+    // Prune versions — keep the most recent N (policy decided in pruneVersions)
+    fastify.post('/versions/prune/*', canDelete, async (request, reply) => {
+        const urlPath = '/' + request.params['*'];
+        const keep = Number.parseInt(request.body?.keep, 10);
+        if (!Number.isFinite(keep) || keep < 0) {
+            return reply.status(400).send({error: 'keep must be a non-negative integer'});
+        }
+        try {
+            const result = await pruneVersions(urlPath, {keep});
+            return result;
+        } catch (err) {
+            return reply.status(400).send({error: err.message});
+        }
+    });
+
     // Bulk delete versions (POST used as DELETE with body is poorly supported)
     fastify.post('/versions/bulk-delete/*', canDelete, async (request, reply) => {
         const urlPath = '/' + request.params['*'];

package/server/server.js

@@ -22,6 +22,8 @@ import {load as loadRoles, seed as seedRoles} from './services/roles.js';
 import {ensureAllProfiles, seed as seedUserProfiles} from './services/userProfiles.js';
 import {seedAll as seedPresetCollections} from './services/presetCollections.js';
 import {seedDefaultBlocks} from './services/blocks.js';
+import {seedDefaultComponents} from './services/components.js';
+import {refreshComponentTagAllowlist} from './services/markdown.js';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const ROOT = path.resolve(__dirname, '..');
@@ -167,6 +169,8 @@ await seedUserProfiles();
 await ensureAllProfiles();
 await seedPresetCollections();
 await seedDefaultBlocks();
+await seedDefaultComponents();
+await refreshComponentTagAllowlist();
 
 // Serve uploaded media files — nosniff prevents browsers rendering spoofed content types
 await app.register(staticPlugin, {
@@ -241,6 +245,7 @@ const { formsRoutes }       = await import('./routes/api/forms.js');
 const { viewsRoutes }       = await import('./routes/api/views.js');
 const { actionsRoutes }     = await import('./routes/api/actions.js');
 const {blocksRoutes} = await import('./routes/api/blocks.js');
+const {componentsRoutes} = await import('./routes/api/components.js');
 const {versionsRoutes} = await import('./routes/api/versions.js');
 const {effectsRoutes} = await import('./routes/api/effects.js');
 const {notificationsRoutes} = await import('./routes/api/notifications.js');
@@ -258,6 +263,7 @@ await app.register(formsRoutes,       { prefix: '/api' });
 await app.register(viewsRoutes,       { prefix: '/api' });
 await app.register(actionsRoutes,     { prefix: '/api' });
 await app.register(blocksRoutes, {prefix: '/api'});
+await app.register(componentsRoutes, {prefix: '/api'});
 await app.register(versionsRoutes, {prefix: '/api'});
 await app.register(effectsRoutes, {prefix: '/api'});
 await app.register(notificationsRoutes, {prefix: '/api'});