domma-cms 0.6.15 → 0.6.20

package/plugins/notes/admin/templates/notes.html

@@ -0,0 +1,92 @@
+<div class="notes-plugin-wrap" style="padding: 24px; max-width: 1200px;">
+
+    <!-- Toolbar -->
+    <div class="notes-toolbar" style="display:flex;align-items:center;gap:12px;flex-wrap:wrap;margin-bottom:20px;">
+        <h2 style="margin:0;flex:0 0 auto;font-size:1.4rem;">
+            <span data-icon="file-text" data-icon-size="20" style="margin-right:8px;"></span>Notes
+        </h2>
+        <input
+            id="notes-search"
+            type="search"
+            class="form-input"
+            placeholder="Search notes…"
+            style="flex:1;min-width:180px;max-width:320px;"
+        />
+        <button id="new-note-btn" class="btn btn-primary" style="flex-shrink:0;">
+            <span data-icon="plus" data-icon-size="15" style="margin-right:6px;"></span>New Note
+        </button>
+    </div>
+
+    <!-- Category filter -->
+    <div id="category-filter" style="display:flex;flex-wrap:wrap;gap:6px;margin-bottom:18px;"></div>
+
+    <!-- Notes grid -->
+    <div
+        id="notes-grid"
+        style="display:grid;grid-template-columns:repeat(auto-fill,minmax(280px,1fr));gap:16px;"
+    ></div>
+
+    <!-- Empty state -->
+    <div id="notes-empty" style="display:none;text-align:center;padding:60px 20px;opacity:0.6;">
+        <span data-icon="file-text" data-icon-size="48" style="display:block;margin-bottom:12px;"></span>
+        <p style="font-size:1rem;margin:0;">No notes yet. Click <strong>New Note</strong> to get started.</p>
+    </div>
+
+    <!-- Editor overlay -->
+    <div
+        id="note-editor"
+        style="display:none;position:fixed;inset:0;z-index:1000;background:rgba(0,0,0,0.45);
+               align-items:center;justify-content:center;padding:20px;"
+    >
+        <div class="card" style="width:100%;max-width:640px;max-height:90vh;display:flex;flex-direction:column;">
+            <div class="card-header" style="display:flex;align-items:center;justify-content:space-between;padding:16px 20px;">
+                <strong style="font-size:1rem;">Edit Note</strong>
+                <button id="cancel-note-btn" class="btn btn-sm btn-secondary" title="Close">
+                    <span data-icon="x" data-icon-size="15"></span>
+                </button>
+            </div>
+            <div class="card-body" style="flex:1;overflow-y:auto;padding:20px;display:flex;flex-direction:column;gap:14px;">
+                <div>
+                    <label for="note-title" class="form-label" style="font-weight:500;margin-bottom:4px;display:block;">Title</label>
+                    <input
+                        id="note-title"
+                        type="text"
+                        class="form-input"
+                        placeholder="Note title…"
+                    />
+                </div>
+                <div style="flex:1;display:flex;flex-direction:column;">
+                    <label for="note-content" class="form-label" style="font-weight:500;margin-bottom:4px;display:block;">Content</label>
+                    <textarea
+                        id="note-content"
+                        class="form-input"
+                        placeholder="Write your note here… (Ctrl+Enter to save)"
+                        style="flex:1;min-height:220px;resize:vertical;font-family:inherit;"
+                    ></textarea>
+                </div>
+                <div>
+                    <label for="note-categories" class="form-label" style="font-weight:500;margin-bottom:4px;display:block;">Categories</label>
+                    <input
+                        id="note-categories"
+                        type="text"
+                        class="form-input"
+                        placeholder="Comma-separated, e.g. work, ideas, personal"
+                    />
+                    <small style="opacity:0.6;margin-top:4px;display:block;">Separate multiple categories with commas.</small>
+                </div>
+            </div>
+            <div class="card-footer" style="display:flex;align-items:center;justify-content:space-between;gap:10px;padding:14px 20px;">
+                <button id="delete-note-btn" class="btn btn-danger btn-sm" style="display:none;">
+                    <span data-icon="trash" data-icon-size="13" style="margin-right:5px;"></span>Delete
+                </button>
+                <div style="display:flex;gap:8px;margin-left:auto;">
+                    <button id="cancel-note-btn-footer" class="btn btn-secondary btn-sm">Cancel</button>
+                    <button id="save-note-btn" class="btn btn-primary btn-sm">
+                        <span data-icon="save" data-icon-size="13" style="margin-right:5px;"></span>Save
+                    </button>
+                </div>
+            </div>
+        </div>
+    </div>
+
+</div>

package/plugins/notes/admin/views/notes.js

@@ -0,0 +1,304 @@
+// ============================================================
+// Notes plugin admin view
+// Uses auth-aware api() helper for all API calls (Bearer token from S.get('auth_token'))
+// Uses $container.find() for all DOM queries
+// Security: all user-supplied content passes through escapeHtml()
+//   before being assigned to innerHTML — same pattern as todo plugin.
+// ============================================================
+
+/** Escape user-supplied text before inserting into HTML markup */
+function escapeHtml(str) {
+    return String(str ?? '')
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+
+/** Debounce a function call */
+function debounce(fn, delay) {
+    let timer;
+    return (...args) => {
+        clearTimeout(timer);
+        timer = setTimeout(() => fn(...args), delay);
+    };
+}
+
+async function api(url, method = 'GET', body) {
+    const opts = {method, headers: {'Authorization': 'Bearer ' + (S.get('auth_token') || '')}};
+    if (body !== undefined) {
+        opts.headers['Content-Type'] = 'application/json';
+        opts.body = JSON.stringify(body);
+    }
+    const res = await fetch(url, opts);
+    if (!res.ok) {
+        const err = await res.json().catch(() => ({error: res.statusText}));
+        throw new Error(err.error || res.statusText);
+    }
+    const text = await res.text();
+    return text ? JSON.parse(text) : {};
+}
+
+export const notesView = {
+    templateUrl: '/plugins/notes/admin/templates/notes.html',
+
+    async onMount($container) {
+        // ---- State ----
+        let notes = [];
+        let categories = [];
+        let activeCategory = '';
+        let searchQuery = '';
+        let editingNoteId = null; // null = new note
+
+        // ---- DOM refs (resolved once after template renders) ----
+        const gridEl       = $container.find('#notes-grid').get(0);
+        const emptyEl      = $container.find('#notes-empty').get(0);
+        const editorEl     = $container.find('#note-editor').get(0);
+        const titleInput   = $container.find('#note-title').get(0);
+        const contentInput = $container.find('#note-content').get(0);
+        const catsInput    = $container.find('#note-categories').get(0);
+        const deleteBtnEl  = $container.find('#delete-note-btn').get(0);
+        const catFilterEl  = $container.find('#category-filter').get(0);
+
+        // ---- Fetch ----
+        async function loadNotes() {
+            try {
+                const params = new URLSearchParams();
+                if (searchQuery) params.set('q', searchQuery);
+                if (activeCategory) params.set('category', activeCategory);
+                const qs  = params.toString();
+                const url = '/api/plugins/notes/items' + (qs ? '?' + qs : '');
+                const res = await api(url);
+                notes = Array.isArray(res) ? res : (res.data ?? []);
+            } catch {
+                E.toast('Failed to load notes', { type: 'error' });
+                notes = [];
+            }
+        }
+
+        async function loadCategories() {
+            try {
+                const res = await api('/api/plugins/notes/categories');
+                categories = Array.isArray(res) ? res : [];
+            } catch {
+                categories = [];
+            }
+        }
+
+        // ---- Render notes grid ----
+        // Safe: all user values are run through escapeHtml() before string interpolation.
+        function renderGrid() {
+            if (notes.length === 0) {
+                gridEl.textContent = '';
+                emptyEl.style.display = 'block';
+                return;
+            }
+
+            emptyEl.style.display = 'none';
+
+            const cards = notes.map((note) => {
+                const safeId      = escapeHtml(note.id);
+                const safeTitle   = escapeHtml(note.title || 'Untitled');
+                const preview     = escapeHtml((note.content || '').slice(0, 120));
+                const ellipsis    = note.content && note.content.length > 120 ? '\u2026' : '';
+                const safeFromNow = escapeHtml(D(note.updatedAt).fromNow());
+                const safeFullDt  = escapeHtml(D(note.updatedAt).format('DD MMM YYYY HH:mm'));
+
+                const catTags = Array.isArray(note.categories) && note.categories.length > 0
+                    ? note.categories.map((c) =>
+                        '<span class="badge badge-outline notes-cat-tag"'
+                        + ' style="font-size:0.7rem;cursor:pointer;"'
+                        + ' data-cat="' + escapeHtml(c) + '">'
+                        + escapeHtml(c)
+                        + '</span>'
+                    ).join(' ')
+                    : '';
+
+                const previewHtml = preview
+                    ? '<p class="notes-card-preview" style="margin:0 0 8px;font-size:0.875rem;opacity:0.8;white-space:pre-wrap;">'
+                      + preview + ellipsis + '</p>'
+                    : '';
+
+                return '<div class="card notes-card" data-id="' + safeId + '" style="cursor:default;">'
+                    + '<div class="card-body">'
+                    + '<div style="display:flex;align-items:flex-start;justify-content:space-between;gap:8px;margin-bottom:6px;">'
+                    + '<h4 class="notes-card-title" style="margin:0;font-size:1rem;font-weight:600;flex:1;">' + safeTitle + '</h4>'
+                    + '<button class="btn btn-sm btn-danger delete-note-card" data-id="' + safeId + '" title="Delete note" style="flex-shrink:0;">'
+                    + '<span data-icon="trash" data-icon-size="13"></span>'
+                    + '</button>'
+                    + '</div>'
+                    + previewHtml
+                    + '<div class="notes-card-footer" style="display:flex;align-items:center;justify-content:space-between;flex-wrap:wrap;gap:4px;">'
+                    + '<div class="notes-card-cats">' + catTags + '</div>'
+                    + '<small style="opacity:0.6;" title="' + safeFullDt + '">' + safeFromNow + '</small>'
+                    + '</div>'
+                    + '</div>'
+                    + '</div>';
+            }).join('');
+
+            // All values in `cards` have been escaped — safe assignment.
+            gridEl.innerHTML = cards;
+            Domma.icons.scan(gridEl);
+        }
+
+        // ---- Render category filter bar ----
+        // Safe: all category strings are run through escapeHtml().
+        function renderCategoryFilter() {
+            const allActive = activeCategory === '';
+            let html = '<button class="btn btn-sm ' + (allActive ? 'btn-primary' : 'btn-secondary')
+                + ' cat-filter-btn" data-cat="" style="margin-right:4px;">All</button>';
+
+            for (const c of categories) {
+                const safeC = escapeHtml(c);
+                const isActive = activeCategory === c;
+                html += '<button class="btn btn-sm ' + (isActive ? 'btn-primary' : 'btn-secondary')
+                    + ' cat-filter-btn" data-cat="' + safeC + '" style="margin-right:4px;">'
+                    + safeC + '</button>';
+            }
+
+            // All values in `html` have been escaped — safe assignment.
+            catFilterEl.innerHTML = html;
+        }
+
+        // ---- Full reload ----
+        async function reload() {
+            await Promise.all([loadNotes(), loadCategories()]);
+            renderGrid();
+            renderCategoryFilter();
+        }
+
+        // ---- Editor helpers ----
+        function openEditor(note = null) {
+            editingNoteId             = note ? note.id : null;
+            titleInput.value          = note ? (note.title || '') : '';
+            contentInput.value        = note ? (note.content || '') : '';
+            catsInput.value           = note && Array.isArray(note.categories) ? note.categories.join(', ') : '';
+            deleteBtnEl.style.display = note ? 'inline-flex' : 'none';
+            editorEl.style.display    = 'flex';
+            titleInput.focus();
+        }
+
+        function closeEditor() {
+            editorEl.style.display = 'none';
+            editingNoteId          = null;
+            titleInput.value       = '';
+            contentInput.value     = '';
+            catsInput.value        = '';
+        }
+
+        function parseCategoriesInput() {
+            return catsInput.value
+                .split(',')
+                .map((c) => c.trim())
+                .filter(Boolean);
+        }
+
+        // ---- Save (create or update) ----
+        async function saveNote() {
+            const title   = titleInput.value.trim();
+            const content = contentInput.value.trim();
+            const cats    = parseCategoriesInput();
+
+            try {
+                if (editingNoteId) {
+                    await api('/api/plugins/notes/items/' + editingNoteId, 'PUT', {title, content, categories: cats});
+                    E.toast('Note updated', { type: 'success' });
+                } else {
+                    await api('/api/plugins/notes/items', 'POST', {title, content, categories: cats});
+                    E.toast('Note created', { type: 'success' });
+                }
+                closeEditor();
+                await reload();
+            } catch {
+                E.toast('Failed to save note', { type: 'error' });
+            }
+        }
+
+        // ---- Delete ----
+        async function deleteNote(id) {
+            const confirmed = await E.confirm('Delete this note?');
+            if (!confirmed) return;
+
+            try {
+                await api('/api/plugins/notes/items/' + id, 'DELETE');
+                E.toast('Note deleted', { type: 'success' });
+                if (editingNoteId === id) closeEditor();
+                await reload();
+            } catch {
+                E.toast('Failed to delete note', { type: 'error' });
+            }
+        }
+
+        // ---- Event bindings ----
+
+        // New note button
+        $container.find('#new-note-btn').get(0).addEventListener('click', () => openEditor());
+
+        // Save button
+        $container.find('#save-note-btn').get(0).addEventListener('click', saveNote);
+
+        // Cancel buttons (header X and footer Cancel both call closeEditor)
+        $container.find('#cancel-note-btn').get(0).addEventListener('click', closeEditor);
+        $container.find('#cancel-note-btn-footer').get(0).addEventListener('click', closeEditor);
+
+        // Delete button (inside editor)
+        deleteBtnEl.addEventListener('click', () => {
+            if (editingNoteId) deleteNote(editingNoteId);
+        });
+
+        // Search input (debounced)
+        $container.find('#notes-search').get(0).addEventListener('input', debounce(async (e) => {
+            searchQuery = e.target.value.trim();
+            await loadNotes();
+            renderGrid();
+        }, 300));
+
+        // Category filter — native delegation on catFilterEl
+        catFilterEl.addEventListener('click', async (e) => {
+            const btn = e.target.closest('.cat-filter-btn');
+            if (!btn) return;
+            activeCategory = btn.dataset.cat;
+            renderCategoryFilter();
+            await loadNotes();
+            renderGrid();
+        });
+
+        // Notes grid — native delegation
+        gridEl.addEventListener('click', (e) => {
+            // Delete button on card
+            const deleteBtn = e.target.closest('.delete-note-card');
+            if (deleteBtn) {
+                deleteNote(deleteBtn.dataset.id);
+                return;
+            }
+
+            // Category tag — filter by that category
+            const catTag = e.target.closest('.notes-cat-tag');
+            if (catTag) {
+                activeCategory = catTag.dataset.cat;
+                renderCategoryFilter();
+                loadNotes().then(renderGrid);
+                return;
+            }
+
+            // Click anywhere else on card — open editor
+            const card = e.target.closest('.notes-card');
+            if (card) {
+                const note = notes.find((n) => n.id === card.dataset.id);
+                if (note) openEditor(note);
+            }
+        });
+
+        // Ctrl+Enter / Cmd+Enter to save from editor
+        editorEl.addEventListener('keydown', (e) => {
+            if ((e.ctrlKey || e.metaKey) && e.key === 'Enter') {
+                saveNote();
+            }
+        });
+
+        // ---- Initial load ----
+        await reload();
+        Domma.icons.scan($container.get(0));
+    }
+};

package/plugins/notes/config.js

@@ -0,0 +1,6 @@
+export default {
+    scope: 'user',
+    maxPerUser: 1000,
+    // storage.adapter: 'mongodb' uses config/connections.json; 'file' uses local JSON
+    storage: {adapter: 'mongodb', connection: 'default'}
+};

package/plugins/notes/data/notes.json

@@ -0,0 +1 @@
+[]

package/plugins/notes/plugin.js

@@ -0,0 +1,177 @@
+import defaultConfig from './config.js';
+import {
+    listEntries,
+    createEntry,
+    updateEntry,
+    deleteEntry,
+    getEntry,
+    getCollection,
+    createCollection
+} from '../../server/services/collections.js';
+
+const SLUG = 'user-notes';
+const STORAGE = defaultConfig.storage ?? {adapter: 'file'};
+
+const FIELDS = [
+    {name: 'title', label: 'Title', type: 'text', required: false},
+    {name: 'content', label: 'Content', type: 'textarea', required: false},
+    {name: 'categories', label: 'Categories', type: 'text', required: false},
+    {name: 'userId', label: 'User ID', type: 'text', required: false}
+];
+
+/**
+ * Lifecycle: create the notes collection (MongoDB-backed) on plugin enable.
+ */
+export async function onEnable({services: {collections}}) {
+    const existing = await collections.getCollection(SLUG).catch(() => null);
+    if (existing) return;
+    await collections.createCollection({
+        title: 'Notes',
+        slug: SLUG,
+        description: 'Notes managed by the Notes plugin.',
+        fields: FIELDS,
+        storage: STORAGE
+    });
+}
+
+/**
+ * Lifecycle: remove the notes collection on plugin disable.
+ */
+export async function onDisable({services: {collections}}) {
+    await collections.deleteCollection(SLUG).catch(() => {
+    });
+}
+
+/** Flatten a collection entry into the shape the admin view expects. */
+function toNote(entry) {
+    return {
+        id: entry.id,
+        ...entry.data,
+        categories: Array.isArray(entry.data.categories) ? entry.data.categories : [],
+        createdAt: entry.meta.createdAt,
+        updatedAt: entry.meta.updatedAt
+    };
+}
+
+export default async function notesPlugin(fastify, options) {
+    const { authenticate } = options.auth;
+    const config = {...defaultConfig, ...(options.settings || {})};
+    const scope = config.scope ?? 'user';
+    const storage = config.storage ?? STORAGE;
+
+    // Auto-create the collection if it doesn't exist yet.
+    const existing = await getCollection(SLUG).catch(() => null);
+    if (!existing) {
+        await createCollection({
+            title: 'Notes',
+            slug: SLUG,
+            description: 'Notes managed by the Notes plugin.',
+            fields: FIELDS,
+            storage
+        }).catch(err => fastify.log.warn(`[notes] Collection setup: ${err.message}`));
+    }
+
+    function userId(request) {
+        return scope === 'user' ? (request.user?.id ?? request.user?.sub ?? null) : null;
+    }
+
+    async function loadAll(uid) {
+        const {entries} = await listEntries(SLUG, {limit: 10000, sort: 'updatedAt', order: 'desc'});
+        let items = entries.map(toNote);
+        if (uid) items = items.filter(n => n.userId === uid);
+        return items;
+    }
+
+    /** GET /api/plugins/notes/items — supports ?q= and ?category= */
+    fastify.get('/items', { preHandler: [authenticate] }, async (request, reply) => {
+        const uid = userId(request);
+        const { q, category } = request.query;
+
+        let items = await loadAll(uid);
+
+        if (q && typeof q === 'string' && q.trim()) {
+            const term = q.trim().toLowerCase();
+            items = items.filter(n =>
+                (n.title ?? '').toLowerCase().includes(term) ||
+                (n.content ?? '').toLowerCase().includes(term)
+            );
+        }
+
+        if (category && typeof category === 'string' && category.trim()) {
+            const cat = category.trim().toLowerCase();
+            items = items.filter(n =>
+                Array.isArray(n.categories) && n.categories.some(c => c.toLowerCase() === cat)
+            );
+        }
+
+        return reply.send(items);
+    });
+
+    /** POST /api/plugins/notes/items */
+    fastify.post('/items', { preHandler: [authenticate] }, async (request, reply) => {
+        const uid = userId(request);
+        const { title, content, categories } = request.body ?? {};
+
+        const entry = await createEntry(SLUG, {
+            title: typeof title === 'string' ? title.trim() : '',
+            content: typeof content === 'string' ? content.trim() : '',
+            categories: Array.isArray(categories)
+                ? categories.map(c => String(c).trim()).filter(Boolean)
+                : [],
+            userId: uid ?? null
+        }, {createdBy: uid, source: 'admin'});
+
+        return reply.code(201).send(toNote(entry));
+    });
+
+    /** PUT /api/plugins/notes/items/:id */
+    fastify.put('/items/:id', { preHandler: [authenticate] }, async (request, reply) => {
+        const uid = userId(request);
+        const { id } = request.params;
+        const { title, content, categories } = request.body ?? {};
+
+        const entry = await getEntry(SLUG, id);
+        if (!entry) return reply.code(404).send({error: 'Note not found'});
+        if (uid && entry.data.userId !== uid) return reply.code(404).send({error: 'Note not found'});
+
+        const merged = {...entry.data};
+        if (title !== undefined) merged.title = String(title).trim();
+        if (content !== undefined) merged.content = String(content).trim();
+        if (categories !== undefined) {
+            merged.categories = Array.isArray(categories)
+                ? categories.map(c => String(c).trim()).filter(Boolean)
+                : [];
+        }
+
+        const updated = await updateEntry(SLUG, id, merged);
+        return reply.send(toNote(updated));
+    });
+
+    /** DELETE /api/plugins/notes/items/:id */
+    fastify.delete('/items/:id', { preHandler: [authenticate] }, async (request, reply) => {
+        const uid = userId(request);
+        const { id } = request.params;
+
+        const entry = await getEntry(SLUG, id);
+        if (!entry) return reply.code(404).send({error: 'Note not found'});
+        if (uid && entry.data.userId !== uid) return reply.code(404).send({error: 'Note not found'});
+
+        await deleteEntry(SLUG, id);
+        return reply.send({ success: true });
+    });
+
+    /** GET /api/plugins/notes/categories */
+    fastify.get('/categories', { preHandler: [authenticate] }, async (request, reply) => {
+        const uid = userId(request);
+        const items = await loadAll(uid);
+        const cats = new Set();
+        for (const note of items) {
+            if (Array.isArray(note.categories)) {
+                note.categories.forEach(c => {
+                    if (c) cats.add(c.trim());
+                });
+            }
+        }
+        return reply.send([...cats].sort());
+    });
+}

package/plugins/notes/plugin.json

@@ -0,0 +1,23 @@
+{
+  "name": "notes",
+  "displayName": "Notes",
+  "version": "1.0.0",
+  "description": "Rich note-taking with categories, search, and markdown content.",
+  "author": "Darryl Waterhouse",
+  "date": "2026-03-24",
+  "icon": "file-text",
+  "admin": {
+    "sidebar": [
+      { "id": "notes", "text": "Notes", "icon": "file-text", "url": "#/plugins/notes", "section": "#/plugins/notes" }
+    ],
+    "routes": [
+      { "path": "/plugins/notes", "view": "plugin-notes", "title": "Notes - Domma CMS" }
+    ],
+    "views": {
+      "plugin-notes": {
+        "entry": "notes/admin/views/notes.js",
+        "exportName": "notesView"
+      }
+    }
+  }
+}