domma-cms 0.44.0 → 0.45.0

package/server/services/userProfiles.js

@@ -1,199 +1,199 @@
-/**
- * User Profiles Service
- * Preset Collection — stores extended profile data for each user,
- * keyed by user UUID. Seeded on startup; entries auto-managed on user lifecycle.
- */
-import fs from 'fs/promises';
-import path from 'path';
-import {config} from '../config.js';
-
-const COLLECTIONS_DIR = path.resolve(config.content.collectionsDir);
-const SLUG = 'user-profiles';
-const DIR = path.join(COLLECTIONS_DIR, SLUG);
-const SCHEMA_PATH = path.join(DIR, 'schema.json');
-const DATA_PATH = path.join(DIR, 'data.json');
-
-const USERS_DIR = path.resolve(config.content.usersDir);
-
-const PRESET_SCHEMA = {
-    slug: SLUG,
-    title: 'User Profiles',
-    description: 'Extended profile data linked to users by ID.',
-    preset: true,
-    fields: [],
-    api: {
-        create: {enabled: false, access: 'admin'},
-        read: {enabled: false, access: 'admin'},
-        update: {enabled: false, access: 'admin'},
-        delete: {enabled: false, access: 'admin'}
-    }
-};
-
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
-
-/**
- * Read data.json, returning an empty array on any error.
- *
- * @returns {Promise<object[]>}
- */
-async function readData() {
-    try {
-        const raw = await fs.readFile(DATA_PATH, 'utf8');
-        return JSON.parse(raw);
-    } catch {
-        return [];
-    }
-}
-
-/**
- * Write entries array to data.json.
- *
- * @param {object[]} entries
- * @returns {Promise<void>}
- */
-async function writeData(entries) {
-    await fs.writeFile(DATA_PATH, JSON.stringify(entries, null, 2) + '\n', 'utf8');
-}
-
-// ---------------------------------------------------------------------------
-// Public API
-// ---------------------------------------------------------------------------
-
-/**
- * Seed the preset collection on boot.
- * Schema is always overwritten; data.json is only created if absent.
- *
- * @returns {Promise<void>}
- */
-export async function seed() {
-    await fs.mkdir(DIR, {recursive: true});
-
-    // Only write schema if absent — admin edits to fields must be preserved across restarts
-    try {
-        await fs.access(SCHEMA_PATH);
-    } catch {
-        await fs.writeFile(SCHEMA_PATH, JSON.stringify(PRESET_SCHEMA, null, 2) + '\n', 'utf8');
-    }
-
-    // Only create data file if absent
-    try {
-        await fs.access(DATA_PATH);
-    } catch {
-        await writeData([]);
-    }
-}
-
-/**
- * Ensure a profile entry exists for the given user ID.
- * Creates an empty profile if one does not already exist.
- *
- * @param {string} userId
- * @returns {Promise<void>}
- */
-export async function ensureProfile(userId) {
-    const entries = await readData();
-    const exists = entries.some(e => e.id === userId);
-    if (!exists) {
-        entries.push({
-            id: userId,
-            data: {},
-            meta: {createdAt: new Date().toISOString(), updatedAt: new Date().toISOString()}
-        });
-        await writeData(entries);
-    }
-}
-
-/**
- * Get the profile entry for a user, or null if not found.
- *
- * @param {string} userId
- * @returns {Promise<object|null>}
- */
-export async function getProfile(userId) {
-    const entries = await readData();
-    return entries.find(e => e.id === userId) || null;
-}
-
-/**
- * Merge new data into a user's profile.
- * Creates the profile entry if it does not exist.
- *
- * @param {string} userId
- * @param {object} data - Flat key/value pairs to merge into profile data
- * @returns {Promise<object>} Updated profile entry
- */
-export async function updateProfile(userId, data) {
-    const entries = await readData();
-    const index = entries.findIndex(e => e.id === userId);
-
-    if (index === -1) {
-        const entry = {
-            id: userId,
-            data: {...data},
-            meta: {createdAt: new Date().toISOString(), updatedAt: new Date().toISOString()}
-        };
-        entries.push(entry);
-        await writeData(entries);
-        return entry;
-    }
-
-    entries[index] = {
-        ...entries[index],
-        data: {...entries[index].data, ...data},
-        meta: {...entries[index].meta, updatedAt: new Date().toISOString()}
-    };
-    await writeData(entries);
-    return entries[index];
-}
-
-/**
- * Remove a user's profile entry. Silent if not found.
- *
- * @param {string} userId
- * @returns {Promise<void>}
- */
-export async function deleteProfile(userId) {
-    const entries = await readData();
-    const filtered = entries.filter(e => e.id !== userId);
-    if (filtered.length !== entries.length) {
-        await writeData(filtered);
-    }
-}
-
-/**
- * Return a Map of userId → profile data object.
- * Reads data.json once — use this for list endpoints to avoid N+1 reads.
- *
- * @returns {Promise<Map<string, object>>}
- */
-export async function listProfiles() {
-    const entries = await readData();
-    const map = new Map();
-    for (const entry of entries) {
-        map.set(entry.id, entry.data || {});
-    }
-    return map;
-}
-
-/**
- * Migration helper — ensure every existing user has a profile entry.
- * Called once on startup after seed().
- *
- * @returns {Promise<void>}
- */
-export async function ensureAllProfiles() {
-    let userFiles;
-    try {
-        userFiles = await fs.readdir(USERS_DIR);
-    } catch {
-        return;
-    }
-
-    const jsonFiles = userFiles.filter(f => f.endsWith('.json'));
-    for (const file of jsonFiles) {
-        const userId = file.replace(/\.json$/, '');
-        await ensureProfile(userId);
-    }
-}
+/**
+ * User Profiles Service
+ * Preset Collection - stores extended profile data for each user,
+ * keyed by user UUID. Seeded on startup; entries auto-managed on user lifecycle.
+ */
+import fs from 'fs/promises';
+import path from 'path';
+import {config} from '../config.js';
+
+const COLLECTIONS_DIR = path.resolve(config.content.collectionsDir);
+const SLUG = 'user-profiles';
+const DIR = path.join(COLLECTIONS_DIR, SLUG);
+const SCHEMA_PATH = path.join(DIR, 'schema.json');
+const DATA_PATH = path.join(DIR, 'data.json');
+
+const USERS_DIR = path.resolve(config.content.usersDir);
+
+const PRESET_SCHEMA = {
+    slug: SLUG,
+    title: 'User Profiles',
+    description: 'Extended profile data linked to users by ID.',
+    preset: true,
+    fields: [],
+    api: {
+        create: {enabled: false, access: 'admin'},
+        read: {enabled: false, access: 'admin'},
+        update: {enabled: false, access: 'admin'},
+        delete: {enabled: false, access: 'admin'}
+    }
+};
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+/**
+ * Read data.json, returning an empty array on any error.
+ *
+ * @returns {Promise<object[]>}
+ */
+async function readData() {
+    try {
+        const raw = await fs.readFile(DATA_PATH, 'utf8');
+        return JSON.parse(raw);
+    } catch {
+        return [];
+    }
+}
+
+/**
+ * Write entries array to data.json.
+ *
+ * @param {object[]} entries
+ * @returns {Promise<void>}
+ */
+async function writeData(entries) {
+    await fs.writeFile(DATA_PATH, JSON.stringify(entries, null, 2) + '\n', 'utf8');
+}
+
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+
+/**
+ * Seed the preset collection on boot.
+ * Schema is always overwritten; data.json is only created if absent.
+ *
+ * @returns {Promise<void>}
+ */
+export async function seed() {
+    await fs.mkdir(DIR, {recursive: true});
+
+    // Only write schema if absent - admin edits to fields must be preserved across restarts
+    try {
+        await fs.access(SCHEMA_PATH);
+    } catch {
+        await fs.writeFile(SCHEMA_PATH, JSON.stringify(PRESET_SCHEMA, null, 2) + '\n', 'utf8');
+    }
+
+    // Only create data file if absent
+    try {
+        await fs.access(DATA_PATH);
+    } catch {
+        await writeData([]);
+    }
+}
+
+/**
+ * Ensure a profile entry exists for the given user ID.
+ * Creates an empty profile if one does not already exist.
+ *
+ * @param {string} userId
+ * @returns {Promise<void>}
+ */
+export async function ensureProfile(userId) {
+    const entries = await readData();
+    const exists = entries.some(e => e.id === userId);
+    if (!exists) {
+        entries.push({
+            id: userId,
+            data: {},
+            meta: {createdAt: new Date().toISOString(), updatedAt: new Date().toISOString()}
+        });
+        await writeData(entries);
+    }
+}
+
+/**
+ * Get the profile entry for a user, or null if not found.
+ *
+ * @param {string} userId
+ * @returns {Promise<object|null>}
+ */
+export async function getProfile(userId) {
+    const entries = await readData();
+    return entries.find(e => e.id === userId) || null;
+}
+
+/**
+ * Merge new data into a user's profile.
+ * Creates the profile entry if it does not exist.
+ *
+ * @param {string} userId
+ * @param {object} data - Flat key/value pairs to merge into profile data
+ * @returns {Promise<object>} Updated profile entry
+ */
+export async function updateProfile(userId, data) {
+    const entries = await readData();
+    const index = entries.findIndex(e => e.id === userId);
+
+    if (index === -1) {
+        const entry = {
+            id: userId,
+            data: {...data},
+            meta: {createdAt: new Date().toISOString(), updatedAt: new Date().toISOString()}
+        };
+        entries.push(entry);
+        await writeData(entries);
+        return entry;
+    }
+
+    entries[index] = {
+        ...entries[index],
+        data: {...entries[index].data, ...data},
+        meta: {...entries[index].meta, updatedAt: new Date().toISOString()}
+    };
+    await writeData(entries);
+    return entries[index];
+}
+
+/**
+ * Remove a user's profile entry. Silent if not found.
+ *
+ * @param {string} userId
+ * @returns {Promise<void>}
+ */
+export async function deleteProfile(userId) {
+    const entries = await readData();
+    const filtered = entries.filter(e => e.id !== userId);
+    if (filtered.length !== entries.length) {
+        await writeData(filtered);
+    }
+}
+
+/**
+ * Return a Map of userId → profile data object.
+ * Reads data.json once - use this for list endpoints to avoid N+1 reads.
+ *
+ * @returns {Promise<Map<string, object>>}
+ */
+export async function listProfiles() {
+    const entries = await readData();
+    const map = new Map();
+    for (const entry of entries) {
+        map.set(entry.id, entry.data || {});
+    }
+    return map;
+}
+
+/**
+ * Migration helper - ensure every existing user has a profile entry.
+ * Called once on startup after seed().
+ *
+ * @returns {Promise<void>}
+ */
+export async function ensureAllProfiles() {
+    let userFiles;
+    try {
+        userFiles = await fs.readdir(USERS_DIR);
+    } catch {
+        return;
+    }
+
+    const jsonFiles = userFiles.filter(f => f.endsWith('.json'));
+    for (const file of jsonFiles) {
+        const userId = file.replace(/\.json$/, '');
+        await ensureProfile(userId);
+    }
+}

package/server/services/userRoles.js

@@ -1,21 +1,21 @@
 /**
- * User Roles — multi-role support helpers.
+ * User Roles - multi-role support helpers.
  *
  * A user has ONE primary role (`user.role`) and an optional array of
  * additional roles (`user.additionalRoles`). Permission, visibility, and
  * row-access checks consult ALL of them and grant access if any one role
- * satisfies — "any path wins" semantics that matches how most apps actually
+ * satisfies - "any path wins" semantics that matches how most apps actually
  * model multi-membership (you can be both a candidate AND a recruiter).
  *
  * Hierarchical-level comparisons (`canManageUser`, `requireAdmin`, the
  * level-clamp in `checkSingleVisibility`) use `getEffectiveLevel` which
- * returns the LOWEST level number across all the user's roles — i.e. the
+ * returns the LOWEST level number across all the user's roles - i.e. the
  * highest privilege the user has access to. This is what makes "additional
  * admin" meaningfully grant admin-tier access without rewriting the level
  * arithmetic everywhere.
  *
  * Backward compatibility: users with no `additionalRoles` field behave
- * exactly as before — `getEffectiveRoles` returns `[user.role]`, `getEffectiveLevel`
+ * exactly as before - `getEffectiveRoles` returns `[user.role]`, `getEffectiveLevel`
  * returns `getRoleLevel(user.role)`. Existing callers that read `user.role`
  * directly continue to work; the new helpers are opt-in for callers that
  * want the union semantics.
@@ -40,7 +40,7 @@ export function getEffectiveRoles(user) {
 }
 
 /**
- * Return the effective role level for a user — the LOWEST level number
+ * Return the effective role level for a user - the LOWEST level number
  * across all roles. Lower number = higher privilege, so the user's most
  * privileged role wins all hierarchical checks.
  *
@@ -57,7 +57,7 @@ export function getEffectiveLevel(user) {
 
 /**
  * Check whether a user holds a specific role (primary or additional).
- * Exact-name match — does NOT walk the hierarchy. For hierarchical "user
+ * Exact-name match - does NOT walk the hierarchy. For hierarchical "user
  * is at least this level" checks use `getEffectiveLevel` against the target
  * role's level instead.
  *
@@ -72,7 +72,7 @@ export function userHasRole(user, role) {
 
 /**
  * Check whether a user holds ANY of the given roles. Convenience helper
- * for "anyone in this set can do X" patterns — equivalent to OR-ing
+ * for "anyone in this set can do X" patterns - equivalent to OR-ing
  * `userHasRole` over the list.
  *
  * @param {object|null} user