domma-cms 0.6.16 → 0.6.21

package/plugins/notes/admin/views/notes.js

@@ -0,0 +1,304 @@
+// ============================================================
+// Notes plugin admin view
+// Uses auth-aware api() helper for all API calls (Bearer token from S.get('auth_token'))
+// Uses $container.find() for all DOM queries
+// Security: all user-supplied content passes through escapeHtml()
+//   before being assigned to innerHTML — same pattern as todo plugin.
+// ============================================================
+
+/** Escape user-supplied text before inserting into HTML markup */
+function escapeHtml(str) {
+    return String(str ?? '')
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+
+/** Debounce a function call */
+function debounce(fn, delay) {
+    let timer;
+    return (...args) => {
+        clearTimeout(timer);
+        timer = setTimeout(() => fn(...args), delay);
+    };
+}
+
+async function api(url, method = 'GET', body) {
+    const opts = {method, headers: {'Authorization': 'Bearer ' + (S.get('auth_token') || '')}};
+    if (body !== undefined) {
+        opts.headers['Content-Type'] = 'application/json';
+        opts.body = JSON.stringify(body);
+    }
+    const res = await fetch(url, opts);
+    if (!res.ok) {
+        const err = await res.json().catch(() => ({error: res.statusText}));
+        throw new Error(err.error || res.statusText);
+    }
+    const text = await res.text();
+    return text ? JSON.parse(text) : {};
+}
+
+export const notesView = {
+    templateUrl: '/plugins/notes/admin/templates/notes.html',
+
+    async onMount($container) {
+        // ---- State ----
+        let notes = [];
+        let categories = [];
+        let activeCategory = '';
+        let searchQuery = '';
+        let editingNoteId = null; // null = new note
+
+        // ---- DOM refs (resolved once after template renders) ----
+        const gridEl       = $container.find('#notes-grid').get(0);
+        const emptyEl      = $container.find('#notes-empty').get(0);
+        const editorEl     = $container.find('#note-editor').get(0);
+        const titleInput   = $container.find('#note-title').get(0);
+        const contentInput = $container.find('#note-content').get(0);
+        const catsInput    = $container.find('#note-categories').get(0);
+        const deleteBtnEl  = $container.find('#delete-note-btn').get(0);
+        const catFilterEl  = $container.find('#category-filter').get(0);
+
+        // ---- Fetch ----
+        async function loadNotes() {
+            try {
+                const params = new URLSearchParams();
+                if (searchQuery) params.set('q', searchQuery);
+                if (activeCategory) params.set('category', activeCategory);
+                const qs  = params.toString();
+                const url = '/api/plugins/notes/items' + (qs ? '?' + qs : '');
+                const res = await api(url);
+                notes = Array.isArray(res) ? res : (res.data ?? []);
+            } catch {
+                E.toast('Failed to load notes', { type: 'error' });
+                notes = [];
+            }
+        }
+
+        async function loadCategories() {
+            try {
+                const res = await api('/api/plugins/notes/categories');
+                categories = Array.isArray(res) ? res : [];
+            } catch {
+                categories = [];
+            }
+        }
+
+        // ---- Render notes grid ----
+        // Safe: all user values are run through escapeHtml() before string interpolation.
+        function renderGrid() {
+            if (notes.length === 0) {
+                gridEl.textContent = '';
+                emptyEl.style.display = 'block';
+                return;
+            }
+
+            emptyEl.style.display = 'none';
+
+            const cards = notes.map((note) => {
+                const safeId      = escapeHtml(note.id);
+                const safeTitle   = escapeHtml(note.title || 'Untitled');
+                const preview     = escapeHtml((note.content || '').slice(0, 120));
+                const ellipsis    = note.content && note.content.length > 120 ? '\u2026' : '';
+                const safeFromNow = escapeHtml(D(note.updatedAt).fromNow());
+                const safeFullDt  = escapeHtml(D(note.updatedAt).format('DD MMM YYYY HH:mm'));
+
+                const catTags = Array.isArray(note.categories) && note.categories.length > 0
+                    ? note.categories.map((c) =>
+                        '<span class="badge badge-outline notes-cat-tag"'
+                        + ' style="font-size:0.7rem;cursor:pointer;"'
+                        + ' data-cat="' + escapeHtml(c) + '">'
+                        + escapeHtml(c)
+                        + '</span>'
+                    ).join(' ')
+                    : '';
+
+                const previewHtml = preview
+                    ? '<p class="notes-card-preview" style="margin:0 0 8px;font-size:0.875rem;opacity:0.8;white-space:pre-wrap;">'
+                      + preview + ellipsis + '</p>'
+                    : '';
+
+                return '<div class="card notes-card" data-id="' + safeId + '" style="cursor:default;">'
+                    + '<div class="card-body">'
+                    + '<div style="display:flex;align-items:flex-start;justify-content:space-between;gap:8px;margin-bottom:6px;">'
+                    + '<h4 class="notes-card-title" style="margin:0;font-size:1rem;font-weight:600;flex:1;">' + safeTitle + '</h4>'
+                    + '<button class="btn btn-sm btn-danger delete-note-card" data-id="' + safeId + '" title="Delete note" style="flex-shrink:0;">'
+                    + '<span data-icon="trash" data-icon-size="13"></span>'
+                    + '</button>'
+                    + '</div>'
+                    + previewHtml
+                    + '<div class="notes-card-footer" style="display:flex;align-items:center;justify-content:space-between;flex-wrap:wrap;gap:4px;">'
+                    + '<div class="notes-card-cats">' + catTags + '</div>'
+                    + '<small style="opacity:0.6;" title="' + safeFullDt + '">' + safeFromNow + '</small>'
+                    + '</div>'
+                    + '</div>'
+                    + '</div>';
+            }).join('');
+
+            // All values in `cards` have been escaped — safe assignment.
+            gridEl.innerHTML = cards;
+            Domma.icons.scan(gridEl);
+        }
+
+        // ---- Render category filter bar ----
+        // Safe: all category strings are run through escapeHtml().
+        function renderCategoryFilter() {
+            const allActive = activeCategory === '';
+            let html = '<button class="btn btn-sm ' + (allActive ? 'btn-primary' : 'btn-secondary')
+                + ' cat-filter-btn" data-cat="" style="margin-right:4px;">All</button>';
+
+            for (const c of categories) {
+                const safeC = escapeHtml(c);
+                const isActive = activeCategory === c;
+                html += '<button class="btn btn-sm ' + (isActive ? 'btn-primary' : 'btn-secondary')
+                    + ' cat-filter-btn" data-cat="' + safeC + '" style="margin-right:4px;">'
+                    + safeC + '</button>';
+            }
+
+            // All values in `html` have been escaped — safe assignment.
+            catFilterEl.innerHTML = html;
+        }
+
+        // ---- Full reload ----
+        async function reload() {
+            await Promise.all([loadNotes(), loadCategories()]);
+            renderGrid();
+            renderCategoryFilter();
+        }
+
+        // ---- Editor helpers ----
+        function openEditor(note = null) {
+            editingNoteId             = note ? note.id : null;
+            titleInput.value          = note ? (note.title || '') : '';
+            contentInput.value        = note ? (note.content || '') : '';
+            catsInput.value           = note && Array.isArray(note.categories) ? note.categories.join(', ') : '';
+            deleteBtnEl.style.display = note ? 'inline-flex' : 'none';
+            editorEl.style.display    = 'flex';
+            titleInput.focus();
+        }
+
+        function closeEditor() {
+            editorEl.style.display = 'none';
+            editingNoteId          = null;
+            titleInput.value       = '';
+            contentInput.value     = '';
+            catsInput.value        = '';
+        }
+
+        function parseCategoriesInput() {
+            return catsInput.value
+                .split(',')
+                .map((c) => c.trim())
+                .filter(Boolean);
+        }
+
+        // ---- Save (create or update) ----
+        async function saveNote() {
+            const title   = titleInput.value.trim();
+            const content = contentInput.value.trim();
+            const cats    = parseCategoriesInput();
+
+            try {
+                if (editingNoteId) {
+                    await api('/api/plugins/notes/items/' + editingNoteId, 'PUT', {title, content, categories: cats});
+                    E.toast('Note updated', { type: 'success' });
+                } else {
+                    await api('/api/plugins/notes/items', 'POST', {title, content, categories: cats});
+                    E.toast('Note created', { type: 'success' });
+                }
+                closeEditor();
+                await reload();
+            } catch {
+                E.toast('Failed to save note', { type: 'error' });
+            }
+        }
+
+        // ---- Delete ----
+        async function deleteNote(id) {
+            const confirmed = await E.confirm('Delete this note?');
+            if (!confirmed) return;
+
+            try {
+                await api('/api/plugins/notes/items/' + id, 'DELETE');
+                E.toast('Note deleted', { type: 'success' });
+                if (editingNoteId === id) closeEditor();
+                await reload();
+            } catch {
+                E.toast('Failed to delete note', { type: 'error' });
+            }
+        }
+
+        // ---- Event bindings ----
+
+        // New note button
+        $container.find('#new-note-btn').get(0).addEventListener('click', () => openEditor());
+
+        // Save button
+        $container.find('#save-note-btn').get(0).addEventListener('click', saveNote);
+
+        // Cancel buttons (header X and footer Cancel both call closeEditor)
+        $container.find('#cancel-note-btn').get(0).addEventListener('click', closeEditor);
+        $container.find('#cancel-note-btn-footer').get(0).addEventListener('click', closeEditor);
+
+        // Delete button (inside editor)
+        deleteBtnEl.addEventListener('click', () => {
+            if (editingNoteId) deleteNote(editingNoteId);
+        });
+
+        // Search input (debounced)
+        $container.find('#notes-search').get(0).addEventListener('input', debounce(async (e) => {
+            searchQuery = e.target.value.trim();
+            await loadNotes();
+            renderGrid();
+        }, 300));
+
+        // Category filter — native delegation on catFilterEl
+        catFilterEl.addEventListener('click', async (e) => {
+            const btn = e.target.closest('.cat-filter-btn');
+            if (!btn) return;
+            activeCategory = btn.dataset.cat;
+            renderCategoryFilter();
+            await loadNotes();
+            renderGrid();
+        });
+
+        // Notes grid — native delegation
+        gridEl.addEventListener('click', (e) => {
+            // Delete button on card
+            const deleteBtn = e.target.closest('.delete-note-card');
+            if (deleteBtn) {
+                deleteNote(deleteBtn.dataset.id);
+                return;
+            }
+
+            // Category tag — filter by that category
+            const catTag = e.target.closest('.notes-cat-tag');
+            if (catTag) {
+                activeCategory = catTag.dataset.cat;
+                renderCategoryFilter();
+                loadNotes().then(renderGrid);
+                return;
+            }
+
+            // Click anywhere else on card — open editor
+            const card = e.target.closest('.notes-card');
+            if (card) {
+                const note = notes.find((n) => n.id === card.dataset.id);
+                if (note) openEditor(note);
+            }
+        });
+
+        // Ctrl+Enter / Cmd+Enter to save from editor
+        editorEl.addEventListener('keydown', (e) => {
+            if ((e.ctrlKey || e.metaKey) && e.key === 'Enter') {
+                saveNote();
+            }
+        });
+
+        // ---- Initial load ----
+        await reload();
+        Domma.icons.scan($container.get(0));
+    }
+};

package/plugins/notes/config.js

@@ -0,0 +1,6 @@
+export default {
+    scope: 'user',
+    maxPerUser: 1000,
+    // storage.adapter: 'mongodb' uses config/connections.json; 'file' uses local JSON
+    storage: {adapter: 'mongodb', connection: 'default'}
+};

package/plugins/notes/data/notes.json

@@ -0,0 +1 @@
+[]

package/plugins/notes/plugin.js

@@ -0,0 +1,177 @@
+import defaultConfig from './config.js';
+import {
+    listEntries,
+    createEntry,
+    updateEntry,
+    deleteEntry,
+    getEntry,
+    getCollection,
+    createCollection
+} from '../../server/services/collections.js';
+
+const SLUG = 'user-notes';
+const STORAGE = defaultConfig.storage ?? {adapter: 'file'};
+
+const FIELDS = [
+    {name: 'title', label: 'Title', type: 'text', required: false},
+    {name: 'content', label: 'Content', type: 'textarea', required: false},
+    {name: 'categories', label: 'Categories', type: 'text', required: false},
+    {name: 'userId', label: 'User ID', type: 'text', required: false}
+];
+
+/**
+ * Lifecycle: create the notes collection (MongoDB-backed) on plugin enable.
+ */
+export async function onEnable({services: {collections}}) {
+    const existing = await collections.getCollection(SLUG).catch(() => null);
+    if (existing) return;
+    await collections.createCollection({
+        title: 'Notes',
+        slug: SLUG,
+        description: 'Notes managed by the Notes plugin.',
+        fields: FIELDS,
+        storage: STORAGE
+    });
+}
+
+/**
+ * Lifecycle: remove the notes collection on plugin disable.
+ */
+export async function onDisable({services: {collections}}) {
+    await collections.deleteCollection(SLUG).catch(() => {
+    });
+}
+
+/** Flatten a collection entry into the shape the admin view expects. */
+function toNote(entry) {
+    return {
+        id: entry.id,
+        ...entry.data,
+        categories: Array.isArray(entry.data.categories) ? entry.data.categories : [],
+        createdAt: entry.meta.createdAt,
+        updatedAt: entry.meta.updatedAt
+    };
+}
+
+export default async function notesPlugin(fastify, options) {
+    const { authenticate } = options.auth;
+    const config = {...defaultConfig, ...(options.settings || {})};
+    const scope = config.scope ?? 'user';
+    const storage = config.storage ?? STORAGE;
+
+    // Auto-create the collection if it doesn't exist yet.
+    const existing = await getCollection(SLUG).catch(() => null);
+    if (!existing) {
+        await createCollection({
+            title: 'Notes',
+            slug: SLUG,
+            description: 'Notes managed by the Notes plugin.',
+            fields: FIELDS,
+            storage
+        }).catch(err => fastify.log.warn(`[notes] Collection setup: ${err.message}`));
+    }
+
+    function userId(request) {
+        return scope === 'user' ? (request.user?.id ?? request.user?.sub ?? null) : null;
+    }
+
+    async function loadAll(uid) {
+        const {entries} = await listEntries(SLUG, {limit: 10000, sort: 'updatedAt', order: 'desc'});
+        let items = entries.map(toNote);
+        if (uid) items = items.filter(n => n.userId === uid);
+        return items;
+    }
+
+    /** GET /api/plugins/notes/items — supports ?q= and ?category= */
+    fastify.get('/items', { preHandler: [authenticate] }, async (request, reply) => {
+        const uid = userId(request);
+        const { q, category } = request.query;
+
+        let items = await loadAll(uid);
+
+        if (q && typeof q === 'string' && q.trim()) {
+            const term = q.trim().toLowerCase();
+            items = items.filter(n =>
+                (n.title ?? '').toLowerCase().includes(term) ||
+                (n.content ?? '').toLowerCase().includes(term)
+            );
+        }
+
+        if (category && typeof category === 'string' && category.trim()) {
+            const cat = category.trim().toLowerCase();
+            items = items.filter(n =>
+                Array.isArray(n.categories) && n.categories.some(c => c.toLowerCase() === cat)
+            );
+        }
+
+        return reply.send(items);
+    });
+
+    /** POST /api/plugins/notes/items */
+    fastify.post('/items', { preHandler: [authenticate] }, async (request, reply) => {
+        const uid = userId(request);
+        const { title, content, categories } = request.body ?? {};
+
+        const entry = await createEntry(SLUG, {
+            title: typeof title === 'string' ? title.trim() : '',
+            content: typeof content === 'string' ? content.trim() : '',
+            categories: Array.isArray(categories)
+                ? categories.map(c => String(c).trim()).filter(Boolean)
+                : [],
+            userId: uid ?? null
+        }, {createdBy: uid, source: 'admin'});
+
+        return reply.code(201).send(toNote(entry));
+    });
+
+    /** PUT /api/plugins/notes/items/:id */
+    fastify.put('/items/:id', { preHandler: [authenticate] }, async (request, reply) => {
+        const uid = userId(request);
+        const { id } = request.params;
+        const { title, content, categories } = request.body ?? {};
+
+        const entry = await getEntry(SLUG, id);
+        if (!entry) return reply.code(404).send({error: 'Note not found'});
+        if (uid && entry.data.userId !== uid) return reply.code(404).send({error: 'Note not found'});
+
+        const merged = {...entry.data};
+        if (title !== undefined) merged.title = String(title).trim();
+        if (content !== undefined) merged.content = String(content).trim();
+        if (categories !== undefined) {
+            merged.categories = Array.isArray(categories)
+                ? categories.map(c => String(c).trim()).filter(Boolean)
+                : [];
+        }
+
+        const updated = await updateEntry(SLUG, id, merged);
+        return reply.send(toNote(updated));
+    });
+
+    /** DELETE /api/plugins/notes/items/:id */
+    fastify.delete('/items/:id', { preHandler: [authenticate] }, async (request, reply) => {
+        const uid = userId(request);
+        const { id } = request.params;
+
+        const entry = await getEntry(SLUG, id);
+        if (!entry) return reply.code(404).send({error: 'Note not found'});
+        if (uid && entry.data.userId !== uid) return reply.code(404).send({error: 'Note not found'});
+
+        await deleteEntry(SLUG, id);
+        return reply.send({ success: true });
+    });
+
+    /** GET /api/plugins/notes/categories */
+    fastify.get('/categories', { preHandler: [authenticate] }, async (request, reply) => {
+        const uid = userId(request);
+        const items = await loadAll(uid);
+        const cats = new Set();
+        for (const note of items) {
+            if (Array.isArray(note.categories)) {
+                note.categories.forEach(c => {
+                    if (c) cats.add(c.trim());
+                });
+            }
+        }
+        return reply.send([...cats].sort());
+    });
+}

package/plugins/notes/plugin.json

@@ -0,0 +1,23 @@
+{
+  "name": "notes",
+  "displayName": "Notes",
+  "version": "1.0.0",
+  "description": "Rich note-taking with categories, search, and markdown content.",
+  "author": "Darryl Waterhouse",
+  "date": "2026-03-24",
+  "icon": "file-text",
+  "admin": {
+    "sidebar": [
+      { "id": "notes", "text": "Notes", "icon": "file-text", "url": "#/plugins/notes", "section": "#/plugins/notes" }
+    ],
+    "routes": [
+      { "path": "/plugins/notes", "view": "plugin-notes", "title": "Notes - Domma CMS" }
+    ],
+    "views": {
+      "plugin-notes": {
+        "entry": "notes/admin/views/notes.js",
+        "exportName": "notesView"
+      }
+    }
+  }
+}

package/plugins/todo/admin/templates/todo.html

@@ -0,0 +1,164 @@
+<div class="p-4">
+    <div class="card">
+        <div class="card-body">
+
+            <!-- Header -->
+            <div class="flex items-center justify-between mb-4">
+                <h2 class="text-lg font-semibold" style="margin:0;">
+                    <span data-icon="check-square" data-icon-size="20" style="vertical-align:middle;margin-right:8px;"></span>
+                    Todo
+                </h2>
+                <button id="clear-completed-btn" class="btn btn-sm btn-danger">
+                    <span data-icon="trash" data-icon-size="14"></span>
+                    Clear Completed
+                </button>
+            </div>
+
+            <!-- Add new todo row -->
+            <div class="flex gap-2 mb-4" style="display:flex;gap:8px;align-items:center;flex-wrap:wrap;">
+                <input
+                    type="text"
+                    id="todo-input"
+                    class="form-input"
+                    placeholder="What needs to be done?"
+                    autocomplete="off"
+                    style="flex:1;min-width:200px;"
+                />
+                <select id="priority-input" class="form-input" style="width:130px;">
+                    <option value="highest">Highest</option>
+                    <option value="high">High</option>
+                    <option value="medium" selected>Medium</option>
+                    <option value="low">Low</option>
+                    <option value="lowest">Lowest</option>
+                </select>
+                <input type="date" id="due-date-input" class="form-input" title="Due date (optional)"
+                       style="width:145px;"/>
+                <button id="add-todo-btn" class="btn btn-primary">
+                    <span data-icon="plus" data-icon-size="14"></span>
+                    Add
+                </button>
+            </div>
+
+            <!-- Filter bar -->
+            <div id="filter-bar" class="flex gap-2 mb-4" style="display:flex;gap:8px;flex-wrap:wrap;">
+                <button class="btn btn-sm filter-btn active" data-filter="all">All</button>
+                <button class="btn btn-sm filter-btn" data-filter="not-started">Not Started</button>
+                <button class="btn btn-sm filter-btn" data-filter="in-progress">In Progress</button>
+                <button class="btn btn-sm filter-btn" data-filter="completed">Completed</button>
+            </div>
+
+            <!-- Todo list -->
+            <ul id="todo-list" style="list-style:none;padding:0;margin:0;"></ul>
+
+            <!-- Empty state -->
+            <div id="empty-state" style="display:none;text-align:center;padding:40px 0;color:var(--dm-text-muted);">
+                <span data-icon="check-circle" data-icon-size="48" style="display:block;margin-bottom:12px;opacity:0.4;"></span>
+                <p style="margin:0;font-size:0.95rem;">No tasks yet. Add one above to get started.</p>
+            </div>
+
+        </div>
+    </div>
+</div>
+
+<style>
+.todo-item {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+    padding: 9px 0;
+    border-bottom: 1px solid var(--dm-border);
+}
+
+.todo-item:last-child {
+    border-bottom: none;
+}
+.todo-item.completed .todo-text {
+    text-decoration: line-through;
+    opacity: 0.45;
+}
+
+.todo-checkbox {
+    flex-shrink: 0;
+}
+
+.todo-text {
+    flex: 1;
+    min-width: 0;
+    word-break: break-word;
+    font-size: 0.9rem;
+}
+
+.todo-selects {
+    display: flex;
+    gap: 5px;
+    flex-shrink: 0;
+}
+
+.todo-select-pill {
+    appearance: none;
+    -webkit-appearance: none;
+    border: none;
+    border-radius: 999px;
+    padding: 2px 10px 2px 8px;
+    font-size: 0.72rem;
+    font-weight: 500;
+    cursor: pointer;
+    outline: none;
+}
+
+.todo-select-pill:focus {
+    box-shadow: 0 0 0 2px var(--dm-primary-soft, rgba(99, 102, 241, .3));
+}
+.todo-actions {
+    display: flex;
+    gap: 3px;
+    flex-shrink: 0;
+}
+.filter-btn.active {
+    background: var(--dm-primary);
+    color: #fff;
+    border-color: var(--dm-primary);
+}
+
+/* Status pill colours */
+.status-pill-not-started {
+    background: var(--dm-gray-200, #e5e7eb);
+    color: var(--dm-gray-700, #374151);
+}
+
+.status-pill-in-progress {
+    background: #dbeafe;
+    color: #2563eb;
+}
+
+.status-pill-completed {
+    background: #dcfce7;
+    color: #16a34a;
+}
+
+/* Priority pill colours */
+.priority-pill-highest {
+    background: #fee2e2;
+    color: #b91c1c;
+}
+
+.priority-pill-high {
+    background: #ffedd5;
+    color: #c2410c;
+}
+
+.priority-pill-medium {
+    background: #fef9c3;
+    color: #a16207;
+}
+
+.priority-pill-low {
+    background: #dbeafe;
+    color: #1d4ed8;
+}
+
+.priority-pill-lowest {
+    background: #f3f4f6;
+    color: #6b7280;
+}
+</style>