domma-cms 0.2.1 → 0.5.0

package/server/services/permissionRegistry.js

@@ -0,0 +1,173 @@
+/**
+ * Permission Registry
+ * Single source of truth for all resource/action definitions in the CMS.
+ * Adding a new resource or custom action is a one-file change here.
+ */
+
+/** @type {ReadonlyArray<{key:string,label:string,description:string,icon:string,group:string,actions:{key:string,label:string,description:string}[]}>} */
+export const REGISTRY = Object.freeze([
+    {
+        key: 'pages',
+        label: 'Pages',
+        description: 'Manage site pages and their content.',
+        icon: 'file-text',
+        group: 'Content',
+        actions: [
+            {key: 'read', label: 'View', description: 'View pages and their content'},
+            {key: 'create', label: 'Create', description: 'Create new pages'},
+            {key: 'update', label: 'Edit', description: 'Edit existing pages'},
+            {key: 'delete', label: 'Delete', description: 'Delete pages'}
+        ]
+    },
+    {
+        key: 'media',
+        label: 'Media',
+        description: 'Upload and manage media files.',
+        icon: 'image',
+        group: 'Content',
+        actions: [
+            {key: 'read', label: 'View', description: 'View media library'},
+            {key: 'create', label: 'Upload', description: 'Upload new files'},
+            {key: 'update', label: 'Edit', description: 'Rename or update file metadata'},
+            {key: 'delete', label: 'Delete', description: 'Delete media files'}
+        ]
+    },
+    {
+        key: 'blocks',
+        label: 'Blocks',
+        description: 'Manage reusable content blocks.',
+        icon: 'box',
+        group: 'Content',
+        actions: [
+            {key: 'read', label: 'View', description: 'View content blocks'},
+            {key: 'create', label: 'Create', description: 'Create new blocks'},
+            {key: 'update', label: 'Edit', description: 'Edit existing blocks'},
+            {key: 'delete', label: 'Delete', description: 'Delete blocks'}
+        ]
+    },
+    {
+        key: 'navigation',
+        label: 'Navigation',
+        description: 'Configure site navigation menus.',
+        icon: 'menu',
+        group: 'Structure',
+        actions: [
+            {key: 'read', label: 'View', description: 'View navigation menus'},
+            {key: 'create', label: 'Create', description: 'Create new menu items'},
+            {key: 'update', label: 'Edit', description: 'Edit navigation structure'},
+            {key: 'delete', label: 'Delete', description: 'Remove menu items'}
+        ]
+    },
+    {
+        key: 'layouts',
+        label: 'Layouts',
+        description: 'Manage page layouts and templates.',
+        icon: 'layout',
+        group: 'Structure',
+        actions: [
+            {key: 'read', label: 'View', description: 'View layouts'},
+            {key: 'create', label: 'Create', description: 'Create new layouts'},
+            {key: 'update', label: 'Edit', description: 'Edit layouts'},
+            {key: 'delete', label: 'Delete', description: 'Delete layouts'}
+        ]
+    },
+    {
+        key: 'collections',
+        label: 'Collections',
+        description: 'Manage data collections and entries.',
+        icon: 'database',
+        group: 'Data',
+        actions: [
+            {key: 'read', label: 'View', description: 'View collection entries'},
+            {key: 'create', label: 'Create', description: 'Create new entries'},
+            {key: 'update', label: 'Edit', description: 'Edit existing entries'},
+            {key: 'delete', label: 'Delete', description: 'Delete entries'}
+        ]
+    },
+    {
+        key: 'views',
+        label: 'Views',
+        description: 'Create and manage data views.',
+        icon: 'eye',
+        group: 'Data',
+        actions: [
+            {key: 'read', label: 'View', description: 'View data views'},
+            {key: 'create', label: 'Create', description: 'Create new views'},
+            {key: 'update', label: 'Edit', description: 'Edit views'},
+            {key: 'delete', label: 'Delete', description: 'Delete views'}
+        ]
+    },
+    {
+        key: 'actions',
+        label: 'Actions',
+        description: 'Configure automated actions.',
+        icon: 'zap',
+        group: 'Data',
+        actions: [
+            {key: 'read', label: 'View', description: 'View automated actions'},
+            {key: 'create', label: 'Create', description: 'Create new actions'},
+            {key: 'update', label: 'Edit', description: 'Edit actions'},
+            {key: 'delete', label: 'Delete', description: 'Delete actions'}
+        ]
+    },
+    {
+        key: 'users',
+        label: 'Users',
+        description: 'Manage user accounts.',
+        icon: 'users',
+        group: 'Configuration',
+        actions: [
+            {key: 'read', label: 'View', description: 'View user accounts'},
+            {key: 'create', label: 'Create', description: 'Create new users'},
+            {key: 'update', label: 'Edit', description: 'Edit user accounts'},
+            {key: 'delete', label: 'Delete', description: 'Delete users'}
+        ]
+    },
+    {
+        key: 'settings',
+        label: 'Settings',
+        description: 'Configure site settings.',
+        icon: 'settings',
+        group: 'Configuration',
+        actions: [
+            {key: 'read', label: 'View', description: 'View site settings'},
+            {key: 'create', label: 'Create', description: 'Add new settings'},
+            {key: 'update', label: 'Edit', description: 'Modify settings'},
+            {key: 'delete', label: 'Delete', description: 'Remove settings'}
+        ]
+    },
+    {
+        key: 'plugins',
+        label: 'Plugins',
+        description: 'Manage CMS plugins.',
+        icon: 'package',
+        group: 'Configuration',
+        actions: [
+            {key: 'read', label: 'View', description: 'View installed plugins'},
+            {key: 'create', label: 'Install', description: 'Install new plugins'},
+            {key: 'update', label: 'Configure', description: 'Configure plugin settings'},
+            {key: 'delete', label: 'Remove', description: 'Remove plugins'}
+        ]
+    }
+]);
+
+/** Derived array of resource key strings — mirrors the old RESOURCES constant. */
+export const RESOURCES = REGISTRY.map(r => r.key);
+
+/** Default CRUD action keys — mirrors the old ACTIONS constant. */
+export const ACTIONS = ['read', 'create', 'update', 'delete'];
+
+/** Display order for permission groups. */
+export const GROUP_ORDER = ['Content', 'Structure', 'Data', 'Configuration'];
+
+/**
+ * Return the action keys defined for a given resource.
+ * Falls back to the default CRUD set if the resource is not in the registry.
+ *
+ * @param {string} resourceKey
+ * @returns {string[]}
+ */
+export function getActionsForResource(resourceKey) {
+    const resource = REGISTRY.find(r => r.key === resourceKey);
+    return resource ? resource.actions.map(a => a.key) : [...ACTIONS];
+}

package/server/services/presetCollections.js

@@ -0,0 +1,251 @@
+/**
+ * Preset Collections
+ * Built-in collections whose schemas are defined in code and overwritten on boot.
+ * Data files are never touched — only schema.json is reset each startup.
+ */
+import fs from 'fs/promises';
+import path from 'path';
+import {config} from '../config.js';
+import {ensureFormForCollection} from './forms.js';
+
+const COLLECTIONS_DIR = path.resolve(config.content.collectionsDir);
+
+const PRESETS = [
+    {
+        slug: 'contacts',
+        title: 'Contacts',
+        description: 'People and their contact information.',
+        preset: true,
+        fields: [
+            {name: 'full_name', label: 'Full Name', type: 'string', required: true},
+            {name: 'email_address', label: 'Email', type: 'string', required: true},
+            {name: 'phone_number', label: 'Phone', type: 'string', required: false}
+        ],
+        api: {
+            create: {enabled: true, access: 'public'},
+            read: {enabled: true, access: 'admin'},
+            update: {enabled: false, access: 'admin'},
+            delete: {enabled: false, access: 'admin'}
+        }
+    },
+    {
+        slug: 'enquiries',
+        title: 'Enquiries',
+        description: 'Messages and enquiries from website visitors.',
+        preset: true,
+        fields: [
+            {name: 'full_name', label: 'Full Name', type: 'text', required: true},
+            {name: 'email', label: 'Email', type: 'text', required: true},
+            {name: 'phone', label: 'Phone', type: 'text'},
+            {
+                name: 'subject', label: 'Subject', type: 'select', required: true,
+                options: [
+                    {value: 'general-enquiry', label: 'General Enquiry'},
+                    {value: 'support', label: 'Support'},
+                    {value: 'sales', label: 'Sales'},
+                    {value: 'partnership', label: 'Partnership'},
+                    {value: 'other', label: 'Other'}
+                ]
+            },
+            {name: 'message', label: 'Message', type: 'text', required: true}
+        ],
+        api: {
+            create: {enabled: true, access: 'public'},
+            read: {enabled: true, access: 'admin'},
+            update: {enabled: false, access: 'admin'},
+            delete: {enabled: false, access: 'admin'}
+        }
+    },
+    {
+        slug: 'feedback',
+        title: 'Feedback',
+        description: 'User feedback and ratings.',
+        preset: true,
+        fields: [
+            {name: 'name', label: 'Name', type: 'string', required: true},
+            {name: 'email', label: 'Email', type: 'string', required: true},
+            {
+                name: 'rating', label: 'Rating', type: 'select', required: true,
+                options: [
+                    {value: 'excellent', label: 'Excellent'},
+                    {value: 'good', label: 'Good'},
+                    {value: 'average', label: 'Average'},
+                    {value: 'poor', label: 'Poor'}
+                ]
+            },
+            {
+                name: 'category', label: 'Category', type: 'select',
+                options: [
+                    {value: 'feature-request', label: 'Feature Request'},
+                    {value: 'praise', label: 'Praise'},
+                    {value: 'bug-report', label: 'Bug Report'},
+                    {value: 'support', label: 'Support'}
+                ]
+            },
+            {name: 'subject', label: 'Subject', type: 'string'},
+            {name: 'message', label: 'Message', type: 'string', required: true}
+        ],
+        api: {
+            create: {enabled: true, access: 'public'},
+            read: {enabled: true, access: 'admin'},
+            update: {enabled: false, access: 'admin'},
+            delete: {enabled: false, access: 'admin'}
+        }
+    },
+    {
+        slug: 'notes',
+        title: 'Notes',
+        description: 'Free-form notes with categories and tags.',
+        preset: true,
+        fields: [
+            {name: 'title', label: 'Title', type: 'text', required: true},
+            {name: 'content', label: 'Content', type: 'text', required: true},
+            {
+                name: 'category', label: 'Category', type: 'select',
+                options: [
+                    {value: 'general', label: 'General'},
+                    {value: 'idea', label: 'Idea'},
+                    {value: 'reminder', label: 'Reminder'},
+                    {value: 'reference', label: 'Reference'}
+                ]
+            },
+            {name: 'tags', label: 'Tags', type: 'text'}
+        ],
+        api: {
+            create: {enabled: false, access: 'admin'},
+            read: {enabled: false, access: 'admin'},
+            update: {enabled: false, access: 'admin'},
+            delete: {enabled: false, access: 'admin'}
+        }
+    },
+    {
+        slug: 'categories',
+        title: 'Categories',
+        description: 'Content categories for organising posts.',
+        preset: true,
+        fields: [
+            {name: 'name', label: 'Name', type: 'text', required: true},
+            {name: 'slug', label: 'Slug', type: 'text', required: true},
+            {name: 'description', label: 'Description', type: 'textarea'},
+            {name: 'parent_category', label: 'Parent Category', type: 'text'},
+            {name: 'sort_order', label: 'Sort Order', type: 'number'}
+        ],
+        api: {
+            create: {enabled: false, access: 'admin'},
+            read: {enabled: true, access: 'public'},
+            update: {enabled: false, access: 'admin'},
+            delete: {enabled: false, access: 'admin'}
+        }
+    },
+    {
+        slug: 'posts',
+        title: 'Posts',
+        description: 'Blog posts and articles.',
+        preset: true,
+        fields: [
+            {name: 'title', label: 'Title', type: 'text', required: true},
+            {name: 'slug', label: 'Slug', type: 'text', required: true},
+            {name: 'content', label: 'Content', type: 'textarea', required: true},
+            {name: 'excerpt', label: 'Excerpt', type: 'textarea'},
+            {name: 'featured_image', label: 'Featured Image', type: 'url'},
+            {name: 'category', label: 'Category', type: 'text'},
+            {name: 'tags', label: 'Tags', type: 'text'},
+            {
+                name: 'status', label: 'Status', type: 'select', required: true,
+                options: [
+                    {value: 'draft', label: 'Draft'},
+                    {value: 'published', label: 'Published'},
+                    {value: 'archived', label: 'Archived'}
+                ]
+            },
+            {name: 'publish_date', label: 'Publish Date', type: 'date'},
+            {name: 'author', label: 'Author', type: 'text'}
+        ],
+        api: {
+            create: {enabled: false, access: 'admin'},
+            read: {enabled: true, access: 'public'},
+            update: {enabled: false, access: 'admin'},
+            delete: {enabled: false, access: 'admin'}
+        }
+    },
+    {
+        slug: 'comments',
+        title: 'Comments',
+        description: 'User comments on posts and content.',
+        preset: true,
+        fields: [
+            {name: 'post_slug', label: 'Post', type: 'text', required: true},
+            {name: 'author_name', label: 'Name', type: 'text', required: true},
+            {name: 'author_email', label: 'Email', type: 'email', required: true},
+            {name: 'body', label: 'Comment', type: 'textarea', required: true},
+            {
+                name: 'status', label: 'Status', type: 'select', required: true,
+                options: [
+                    {value: 'pending', label: 'Pending'},
+                    {value: 'approved', label: 'Approved'},
+                    {value: 'rejected', label: 'Rejected'}
+                ]
+            }
+        ],
+        api: {
+            create: {enabled: true, access: 'public'},
+            read: {enabled: true, access: 'public'},
+            update: {enabled: false, access: 'admin'},
+            delete: {enabled: false, access: 'admin'}
+        }
+    },
+    {
+        slug: 'to-do',
+        title: 'To-Do',
+        description: 'Task tracking with priorities and due dates.',
+        preset: true,
+        fields: [
+            {name: 'title', label: 'Title', type: 'text', required: true},
+            {name: 'description', label: 'Description', type: 'text'},
+            {
+                name: 'status', label: 'Status', type: 'select', required: true,
+                options: ['Pending', 'In Progress', 'Done']
+            },
+            {
+                name: 'priority', label: 'Priority', type: 'select',
+                options: ['Low', 'Medium', 'High']
+            },
+            {name: 'due_date', label: 'Due Date', type: 'text'},
+            {name: 'assigned_to', label: 'Assigned To', type: 'text'}
+        ],
+        api: {
+            create: {enabled: false, access: 'admin'},
+            read: {enabled: false, access: 'admin'},
+            update: {enabled: false, access: 'admin'},
+            delete: {enabled: false, access: 'admin'}
+        }
+    }
+];
+
+/** Slugs exported for use in adapterRegistry and the delete guard. */
+export const PRESET_COLLECTION_SLUGS = PRESETS.map(p => p.slug);
+
+/**
+ * Seed all preset collections at boot.
+ * Always overwrites schema.json; only creates data.json if absent.
+ *
+ * @returns {Promise<void>}
+ */
+export async function seedAll() {
+    for (const schema of PRESETS) {
+        const dir = path.join(COLLECTIONS_DIR, schema.slug);
+        const schemaPath = path.join(dir, 'schema.json');
+        const dataPath = path.join(dir, 'data.json');
+
+        await fs.mkdir(dir, {recursive: true});
+        await fs.writeFile(schemaPath, JSON.stringify(schema, null, 2) + '\n', 'utf8');
+
+        try {
+            await fs.access(dataPath);
+        } catch {
+            await fs.writeFile(dataPath, '[]\n', 'utf8');
+        }
+
+        await ensureFormForCollection(schema);
+    }
+}

package/server/services/renderer.js

@@ -61,6 +61,8 @@ export async function renderPage(page) {
       ? `window.__CMS_DCONFIG__ = ${dconfigJson};`
       : '';
 
+    const breadcrumbsHtml = buildBreadcrumbsHtml(page, site);
+
     const {fontLink, fontOverride} = buildFontVars(site.fontFamily, site.fontSize);
     const fontStyleTag = fontOverride
       ? `<style>${fontOverride}</style>`
@@ -70,13 +72,23 @@ export async function renderPage(page) {
         ? `<style>${customCss.replace(/<\/style>/gi, '<\\/style>')}</style>`
         : '';
 
+    const activeTheme = page.theme || site.theme || 'charcoal-dark';
+    // When a custom theme is active, Domma's theme engine must receive the base
+    // built-in theme (which it recognises). The custom override class is added
+    // separately after Domma's init so _applyTheme() cannot strip it.
+    const dommaTheme = site.baseTheme || activeTheme;
+    const customThemeClass = site.baseTheme ? `dm-theme-${activeTheme}` : '';
+
     const vars = {
         seoTitle,
         seoDescription,
         ogImage,
         title: page.title,
         html: page.html,
-        theme: site.theme || 'charcoal-dark',
+        breadcrumbsHtml,
+        theme: activeTheme,
+        dommaTheme,
+        customThemeClass,
         fontLink,
         fontStyleTag,
         layout: page.layout || 'default',
@@ -104,6 +116,68 @@ export async function renderPage(page) {
     return applyTransforms('render:afterRender', html, {page});
 }
 
+/**
+ * Build breadcrumbs HTML for a page.
+ * Returns an empty string if breadcrumbs are disabled globally or per-page.
+ *
+ * @param {object} page - Parsed page object with urlPath, title, breadcrumbs fields
+ * @param {object} site - Site config
+ * @returns {string}
+ */
+function buildBreadcrumbsHtml(page, site) {
+    const cfg = site?.breadcrumbs || {};
+    if (!cfg.enabled) return '';
+    if (page.breadcrumbs === false) return '';
+
+    const urlPath = page.urlPath || '/';
+    // Don't render breadcrumbs on the home page
+    if (urlPath === '/') return '';
+
+    const homeLabel = cfg.homeLabel || 'Home';
+    const segments = urlPath.split('/').filter(Boolean);
+    if (!segments.length) return '';
+
+    // Build fixed-position inline style from corner + offsets
+    const pos = (cfg.position || 'TL').toUpperCase();
+    const offsetX = parseInt(cfg.offsetX, 10) || 8;
+    const offsetY = parseInt(cfg.offsetY, 10) || 60;
+    const posStyle = [
+        pos.includes('T') ? `top:${offsetY}px` : `bottom:${offsetY}px`,
+        pos.includes('L') ? `left:${offsetX}px` : `right:${offsetX}px`
+    ].join(';');
+
+    const crumbs = [];
+
+    const homeIcon = '<svg class="dm-breadcrumbs-home-icon" width="11" height="11" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/><polyline points="9 22 9 12 15 12 15 22"/></svg>';
+    // Home crumb
+    crumbs.push(`<a href="/" class="dm-breadcrumbs-item dm-breadcrumbs-link">${homeIcon}${escapeHtml(homeLabel)}</a>`);
+
+    // Middle crumbs (each intermediate path segment)
+    for (let i = 0; i < segments.length - 1; i++) {
+        const href = '/' + segments.slice(0, i + 1).join('/');
+        const label = toTitleCase(segments[i]);
+        crumbs.push(`<a href="${href}" class="dm-breadcrumbs-item dm-breadcrumbs-link">${escapeHtml(label)}</a>`);
+    }
+
+    // Last crumb — current page title, no link
+    crumbs.push(`<span class="dm-breadcrumbs-item dm-breadcrumbs-current" aria-current="page">${escapeHtml(page.title || toTitleCase(segments[segments.length - 1]))}</span>`);
+
+    const sep = '<span class="dm-breadcrumbs-separator" aria-hidden="true">›</span>';
+    return `<nav class="dm-breadcrumbs" aria-label="Breadcrumb" style="${posStyle}">${crumbs.join(sep)}</nav>`;
+}
+
+function toTitleCase(str) {
+    return str.replace(/-/g, ' ').replace(/\b\w/g, c => c.toUpperCase());
+}
+
+function escapeHtml(str) {
+    return String(str)
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;');
+}
+
 function buildFontVars(fontFamily, fontSize) {
     const PRECONNECT = '<link rel="preconnect" href="https://fonts.googleapis.com">\n    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>';
     const family = fontFamily || 'Roboto';