domma-cms 0.75.0 → 0.77.0

package/server/services/components.js

@@ -303,6 +303,15 @@ export async function getComponent(name) {
         } catch { /* return malformed source for editing; UI flags it */ }
         return {name, source, props, bundled, ...(meta && {meta})};
     } catch (err) {
+        // A plugin's component has no file: return its source, read-only
+        // (saveComponent/deleteComponent refuse it as PLUGIN_OWNED). The list's
+        // "View source" opened the editor on it and got a 404.
+        const pc = err.code === 'ENOENT' && getPluginComponents().find(c => c.name === name);
+        if (pc) {
+            let props = {};
+            try { props = validatePropsJson(parseDmcSource(pc.source).props); } catch { /* flagged by the UI */ }
+            return {name, source: pc.source, props, bundled: true, origin: 'plugin', readOnly: true};
+        }
         if (err.code === 'ENOENT') {
             const nf = new Error('Component not found');
             nf.code = 'ENOENT';

package/server/services/plugins.js

@@ -266,6 +266,13 @@ async function loadConfigDefaults(name) {
   if (_configDefaultsCache.has(name)) return _configDefaultsCache.get(name);
   const configJsPath = path.join(PLUGINS_DIR, name, 'config.js');
   let defaults = {};
+  // No config.js is "no defaults", not a failure: the Marketplace asks for every
+  // installed plugin's settings (enabled or not), and recording a load failure for
+  // one without the file would put it on the health report for being looked at.
+  try { await fs.access(configJsPath); } catch {
+    _configDefaultsCache.set(name, defaults);
+    return defaults;
+  }
   try {
     const {default: exported} = await import(configJsPath);
     defaults = exported || {};

package/server/services/roles.js

@@ -26,6 +26,9 @@ const USERS_DIR = path.resolve(path.dirname(COLLECTIONS_DIR), 'users');
 /** Base role slugs that should always exist */
 const BASE_ROLE_NAMES = ['super-admin', 'admin', 'user'];
 
+/** The seeded roles every site relies on - never deletable, whatever route is asked. */
+export const isBaseRole = (name) => BASE_ROLE_NAMES.includes(name);
+
 /** Role slugs that were seeded by the old 4-role system - used to detect legacy data */
 const DEFUNCT_ROLE_NAMES = ['manager', 'editor', 'subscriber'];
 

package/server/services/search.js

@@ -411,3 +411,61 @@ export function searchPages(pages, query, {maxResults = 10, onError = () => {}}
     results.sort((a, b) => b.score - a.score);
     return results.slice(0, maxResults);
 }
+
+// ---------------------------------------------------------------------------
+// The admin screen: coverage, and the sidebar badge
+// ---------------------------------------------------------------------------
+
+/**
+ * Which pages search can return, and which it leaves out - the same rule
+ * searchPages() applies (drafts and private pages are never results).
+ *
+ * @param {object[]} pages
+ * @returns {{searchable: number, drafts: number, private: number, total: number}}
+ */
+export function searchCoverage(pages = []) {
+    let drafts = 0;
+    let priv = 0;
+    for (const p of pages) {
+        if (p?.status === 'draft') drafts++;
+        else if (p?.visibility === 'private') priv++;
+    }
+    return {searchable: pages.length - drafts - priv, drafts, private: priv, total: pages.length};
+}
+
+/**
+ * The sidebar badge on System > Search (its countUrl, GET /api/search/_count):
+ * how many pages a visitor's search can find, with whether search is on at all
+ * and how it is reached in the popover. An inventory, not a signal - plain text
+ * throughout, the popover sets it with textContent.
+ *
+ * @param {object} settings - normalised search settings
+ * @param {object[]} pages
+ */
+export function searchBadge(settings = SEARCH_DEFAULTS, pages = []) {
+    const s = normaliseSearchSettings(settings);
+    const c = searchCoverage(pages);
+    const pl = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
+    const trigger = s.displayMode === 'floating'
+        ? `Floating button, ${s.position.replace('-', ' ')}`
+        : 'Icon in the navigation bar';
+    return {
+        count: c.searchable,
+        label: s.enabled
+            ? `Search is on - ${pl(c.searchable, 'page')} searchable`
+            : `Search is off - ${pl(c.searchable, 'page')} would be searchable`,
+        tone: 'info',
+        details: {
+            title: 'Site search',
+            rows: [
+                {label: 'Status', value: s.enabled ? 'On' : 'Off'},
+                {label: 'Trigger', value: s.enabled ? trigger : '-'},
+                {label: 'Keyboard shortcut', value: s.enabled && s.keyboardShortcut ? 'Ctrl+K / ⌘K' : 'Off'},
+                {label: 'Searchable pages', value: String(c.searchable)},
+                {label: 'Left out (drafts, private)', value: String(c.drafts + c.private)}
+            ],
+            items: [],
+            empty: s.enabled ? 'Visitors can search every published, public page.' : 'Search is switched off - nothing is added to public pages.'
+        }
+    };
+}

package/server/services/users.js

@@ -124,7 +124,7 @@ export async function getUserByEmail(email) {
  * @param {object} data - { name, email, password, role }
  * @returns {Promise<object>} Created user (password stripped)
  */
-export async function createUser({ name, email, password, role = 'user', additionalRoles = [], meta, projects }) {
+export async function createUser({ name, email, password, role = 'user', additionalRoles = [], meta, projects, isActive = true }) {
     const existing = await getUserByEmail(email);
     if (existing) throw new Error('A user with that email already exists');
 
@@ -144,7 +144,7 @@ export async function createUser({ name, email, password, role = 'user', additio
         // Project access-scope: when non-empty, the user is restricted to artefacts
         // tagged with one of these project slugs (see canSeeArtefact in projects.js).
         projects: Array.isArray(projects) ? projects.filter(Boolean) : [],
-        isActive: true,
+        isActive: isActive !== false,
         createdAt: now,
         updatedAt: now,
         lastLogin: null,
@@ -168,6 +168,20 @@ export async function updateUser(id, updates) {
     const user = await readUserFile(id);
     if (!user) throw new Error('User not found');
 
+    // An email is how an account signs in: two accounts must never share one.
+    // createUser always refused a taken address; an update did not check at all.
+    if (typeof updates.email === 'string' && updates.email.trim()) {
+        updates.email = updates.email.toLowerCase().trim();
+        if (updates.email !== String(user.email || '').toLowerCase()) {
+            const other = await getUserByEmail(updates.email);
+            if (other && other.id !== user.id) {
+                const err = new Error('A user with that email already exists');
+                err.code = 'EMAIL_TAKEN';
+                throw err;
+            }
+        }
+    }
+
     if (updates.password) {
         updates.password = await bcrypt.hash(updates.password, config.auth.bcryptRounds);
     }

package/server/services/views.js

@@ -452,7 +452,21 @@ async function executeFileView(view, { page, limit, user }) {
 export async function executeView(slug, {page = 1, limit = 25, user = null} = {}) {
     const view = await getView(slug);
     if (!view) throw new Error(`View "${slug}" not found`);
+    return executeViewConfig(view, {page, limit, user});
+}
 
+/**
+ * Execute a view config that need not be saved - the view editor's live
+ * Results run the pipeline being edited. Same validation and the same two
+ * engines (native aggregation for a MongoDB source, the JS evaluator
+ * otherwise) as executeView.
+ *
+ * @param {{connection?: string, pipeline: {source: string, stages?: object[]}, access?: object}} view
+ * @param {{page?: number, limit?: number, user?: object|null}} [opts]
+ * @returns {Promise<{ results: object[], total: number, page: number, limit: number }>}
+ */
+export async function executeViewConfig(view, {page = 1, limit = 25, user = null} = {}) {
+    if (!view?.pipeline?.source) throw new Error('pipeline.source is required');
     validateStages(view.pipeline?.stages || []);
 
     // Dispatch on the SOURCE collection's storage adapter. A mongodb-declared

package/admin/js/templates/dashboard/activity-feed.html

@@ -1,3 +0,0 @@
-<h3>Recent activity</h3>
-<div data-field="rows"></div>
-<p class="dash-empty" hidden>No recent activity.</p>

package/admin/js/templates/dashboard/cache.html

@@ -1,32 +0,0 @@
-<div class="dash-card-header">
-    <h3>Response Cache</h3>
-    <label class="dash-cache-toggle" title="Enable / disable cache">
-        <input type="checkbox" data-field="toggle">
-        <span data-field="toggle-label">…</span>
-    </label>
-</div>
-<div class="dash-cache-grid">
-    <div class="dash-cache-stat">
-        <div class="dash-cache-stat-label">Hit rate</div>
-        <div class="dash-cache-stat-value" data-field="hit-rate">-</div>
-        <div class="dash-cache-stat-sub" data-field="hits-misses">no traffic yet</div>
-    </div>
-    <div class="dash-cache-stat">
-        <div class="dash-cache-stat-label">Entries</div>
-        <div class="dash-cache-stat-value" data-field="size">-</div>
-        <div class="dash-cache-stat-sub" data-field="size-bar"><span data-field="size-fill"></span></div>
-    </div>
-    <div class="dash-cache-stat">
-        <div class="dash-cache-stat-label">Writes</div>
-        <div class="dash-cache-stat-value" data-field="writes">0</div>
-        <div class="dash-cache-stat-sub" data-field="invalidations">0 invalidations</div>
-    </div>
-    <div class="dash-cache-stat">
-        <div class="dash-cache-stat-label">Last cleared</div>
-        <div class="dash-cache-stat-value" data-field="last-cleared">never</div>
-        <div class="dash-cache-stat-sub" data-field="driver">driver: -</div>
-    </div>
-</div>
-<div class="dash-cache-actions">
-    <button class="btn btn-sm btn-ghost" data-field="clear-btn"><span data-icon="trash"></span> Clear cache</button>
-</div>

package/admin/js/templates/dashboard/health-detail.html

@@ -1,2 +0,0 @@
-<h3>Health</h3>
-<div data-field="rows"></div>

package/admin/js/templates/dashboard/journeys.html

@@ -1,17 +0,0 @@
-<h3>User journeys - last 7 days</h3>
-<div class="dash-journey-grid">
-    <div>
-        <h4>Top entry pages</h4>
-        <div data-field="entry"></div>
-    </div>
-    <div>
-        <h4>Top exit pages</h4>
-        <div data-field="exit"></div>
-    </div>
-    <div>
-        <h4>Top paths</h4>
-        <div data-field="paths"></div>
-    </div>
-</div>
-<p class="dash-bounce">Bounce rate: <strong data-field="bounce">-</strong></p>
-<p class="dash-empty" hidden>No journey data yet - encourage some traffic and check back.</p>

package/admin/js/templates/dashboard/kpi-strip.html

@@ -1,34 +0,0 @@
-<div class="dash-card dash-kpi">
-    <span class="dash-kpi-icon" data-icon="trending-up"></span>
-    <div>
-        <div class="dash-kpi-value" data-field="hits-today">-</div>
-        <div class="dash-kpi-label">Hits today</div>
-        <div class="dash-kpi-delta" data-field="hits-delta"></div>
-    </div>
-</div>
-<div class="dash-card dash-kpi">
-    <span class="dash-kpi-icon" data-icon="users"></span>
-    <div>
-        <div class="dash-kpi-value" data-field="active-sessions">-</div>
-        <div class="dash-kpi-label">Active sessions (5m)</div>
-    </div>
-</div>
-<div class="dash-card dash-kpi">
-    <span class="dash-kpi-icon" data-icon="inbox"></span>
-    <div>
-        <div class="dash-kpi-value" data-field="submissions-week">-</div>
-        <div class="dash-kpi-label">Submissions this week</div>
-    </div>
-</div>
-<div class="dash-card dash-kpi">
-    <span class="dash-kpi-icon" data-icon="activity"></span>
-    <div>
-        <div class="dash-kpi-value">
-            <span class="dash-health-pill" data-field="health-pill" data-level="ok">
-                <span data-icon="circle"></span>
-                <span data-field="health-label">OK</span>
-            </span>
-        </div>
-        <div class="dash-kpi-label">Site health</div>
-    </div>
-</div>

package/admin/js/templates/dashboard/spike-feed.html

@@ -1,3 +0,0 @@
-<h3>Spikes (last hour)</h3>
-<div data-field="spike-list"></div>
-<p class="dash-empty" hidden>No anomalies detected.</p>

package/admin/js/templates/dashboard/top-pages.html

@@ -1,3 +0,0 @@
-<h3>Top pages - last 7 days</h3>
-<div data-field="rows"></div>
-<p class="dash-empty" hidden>No traffic recorded yet.</p>

package/admin/js/templates/dashboard/traffic-chart.html

@@ -1,3 +0,0 @@
-<h3>Traffic - last 30 days</h3>
-<div class="dash-chart-wrap"><canvas id="dash-traffic-canvas"></canvas></div>
-<p class="dash-empty" hidden>No traffic recorded yet.</p>

package/admin/js/templates/plugin-marketplace.html

@@ -1,29 +0,0 @@
-<div class="view-header">
-  <h2><span data-icon="store"></span> Browse</h2>
-  <p class="text-muted">Plugins available to this site.</p>
-</div>
-
-<!--
-  Shown when this site is not managed. Telling an unmanaged customer to set
-  MANAGER_URL is telling them to configure something they will never have: a
-  standalone purchase arrives as a file, and Install from File is the whole
-  procedure. The managed path is mentioned second because it is not theirs to
-  set up.
--->
-<div id="marketplace-unavailable" style="display:none">
-  <div class="card">
-    <div class="card-body">
-      <p><strong>This site installs plugins from a file.</strong></p>
-      <p class="text-muted">Buy a plugin and you are sent a single <code>.dcmsplugin</code> file. Use
-        <strong>Install from File</strong> above to install it - no connection to anything is needed, and the
-        same button takes an update later.</p>
-      <p class="text-muted" style="margin-bottom:0">Sites managed for you browse and install here instead, over their
-        manager connection.</p>
-    </div>
-  </div>
-</div>
-
-<div id="marketplace-available" style="display:none">
-  <p id="marketplace-site" class="text-muted" style="display:none;font-size:.85rem;margin:0 0 .75rem"></p>
-  <div id="marketplace-grid" class="card-grid"></div>
-</div>

package/admin/js/views/block-editor-enhance.js

@@ -1 +0,0 @@
-import{blockEditorView as r}from"./block-editor.js";import{createSimpleEditor as u}from"../lib/simple-editor.js";const p=r.onMount;r.onMount=async function(e){await p.call(this,e);const n=e.find(".editor-pane--write").get(0),l=e.find("#block-line-numbers").get(0),t=e.find("#block-content").get(0);if(!n||!t||n.dataset.dmEnhanced==="1")return;n.dataset.dmEnhanced="1",l&&(l.style.display="none"),t.style.display="none",n.style.display="block",n.style.position="relative",n.style.overflow="hidden";const i=document.createElement("div");i.style.cssText="width:100%;height:100%;",n.appendChild(i);const a=u(i,{initialValue:t.value,onChange:o=>{t.value!==o&&(t.value=o,t.dispatchEvent(new Event("input",{bubbles:!0})))}}),d=Object.getPrototypeOf(t),c=Object.getOwnPropertyDescriptor(d,"value");Object.defineProperty(t,"value",{configurable:!0,get(){return c.get.call(this)},set(o){c.set.call(this,o),a.getValue()!==o&&a.setValue(o??"")}});const s=e.find(".card.editor-card").get(0);s&&(s.style.height="min(78vh, 900px)",s.style.minHeight="520px"),g(e)};const f={icon:"box","facebook-icon":"facebook","instagram-icon":"instagram"};function g(e){const n=e.get?e.get(0):e;if(!n)return;const l=n.querySelectorAll("input[data-placeholder]");for(const t of l){const i=(t.dataset.placeholder||"").toLowerCase(),a=f[i];a&&(t.value&&!/^Sample /i.test(t.value)||(t.value=a,t.dispatchEvent(new Event("input",{bubbles:!0}))))}}

package/admin/js/views/dashboard/lib/escape.js

@@ -1 +0,0 @@
-export function escapeHtml(t){return t==null?"":String(t).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}export function safeHref(t){if(t==null)return"#";const r=String(t).trim();if(r==="")return"#";if(r.startsWith("/"))return escapeHtml(r);const e=r.toLowerCase();return e.startsWith("http://")||e.startsWith("https://")||e.startsWith("mailto:")?escapeHtml(r):"#"}

package/admin/js/views/dashboard/widgets/activity-feed.js

@@ -1 +0,0 @@
-import{escapeHtml as s}from"../lib/escape.js";const p={edit:"edited",publish:"published",form:"received submission"};function f(e,n){e&&(e.innerHTML=n)}export default function m(e,n){const r=Array.isArray(n?.activity)?n.activity:[];r.length===0?e.find(".dash-empty").removeAttr("hidden"):e.find(".dash-empty").attr("hidden","hidden");const i=r.map(t=>{const o=t.at?D(t.at).fromNow():"",a=t.target||t.form||"",d=t.actor?"<strong>"+s(t.actor)+"</strong> ":"",c=s(p[t.type]||t.type||"");return'<div class="dash-spike-row"><span>'+d+c+" <code>"+s(a)+"</code></span><span>"+s(o)+"</span></div>"});f(e.find('[data-field="rows"]').get(0),i.join(""))}

package/admin/js/views/dashboard/widgets/cache.js

@@ -1 +0,0 @@
-import{apiRequest as r}from"../../../api.js";function h(t){if(!t)return"never";const e=Date.now()-new Date(t).getTime();if(e<0)return"just now";const a=Math.floor(e/1e3);if(a<60)return`${a}s ago`;const i=Math.floor(a/60);if(i<60)return`${i}m ago`;const n=Math.floor(i/60);return n<24?`${n}h ago`:`${Math.floor(n/24)}d ago`}function d(t,e){const a=e.hits+e.misses,i=e.hitRate;t.find('[data-field="hit-rate"]').text(i===null?"-":(i*100).toFixed(1)+"%"),t.find('[data-field="hits-misses"]').text(a===0?"no traffic yet":`${e.hits.toLocaleString()} hits \xB7 ${e.misses.toLocaleString()} misses`);const n=e.size??0,c=e.maxItems??0;t.find('[data-field="size"]').text(c?`${n} / ${c}`:String(n));const l=c?Math.min(100,n/c*100):0,o=t.find('[data-field="size-fill"]').get(0);o&&(o.style.width=l+"%"),t.find('[data-field="writes"]').text(e.writes.toLocaleString()),t.find('[data-field="invalidations"]').text(`${e.invalidations.toLocaleString()} invalidations`),t.find('[data-field="last-cleared"]').text(h(e.lastClearedAt)),t.find('[data-field="driver"]').text("driver: "+e.driver);const f=t.find('[data-field="toggle"]').get(0);f&&(f.checked=!!e.enabled),t.find('[data-field="toggle-label"]').text(e.enabled?"On":"Off")}async function s(t){try{const e=await r("/cache/status");d(t,e),t.data("cache-stats",e)}catch(e){console.warn("[cache widget] failed to refresh:",e)}}export default async function g(t){await s(t);const e=t.find('[data-field="toggle"]');e.on("change",async()=>{const a=e.get(0).checked;try{const i=await r("/cache/toggle",{method:"POST",body:JSON.stringify({enabled:a})});d(t,i),E.toast(`Cache ${i.enabled?"enabled":"disabled"}.`,{type:"success"})}catch(i){e.get(0).checked=!a,E.toast(i.message||"Failed to toggle cache.",{type:"error"})}}),t.find('[data-field="clear-btn"]').on("click",async()=>{if(await E.confirm("Clear the entire response cache?"))try{const a=await r("/cache/clear",{method:"POST"});d(t,a),E.toast("Cache cleared.",{type:"success"})}catch(a){E.toast(a.message||"Failed to clear cache.",{type:"error"})}}),window.Domma&&Domma.icons&&Domma.icons.scan()}export{s as refreshCacheWidget};

package/admin/js/views/dashboard/widgets/health-detail.js

@@ -1 +0,0 @@
-const p={ok:"check-circle",warn:"warning",fail:"x-circle"};export default function h(o,s){const r=s?.health?.checks||[],l=o.find('[data-field="rows"]');l.empty();const a=l.get(0);if(a){for(const e of r){const n=document.createElement("div");n.className="dash-spike-row dash-health-pill",n.setAttribute("data-level",e.level);const c=document.createElement("span"),i=document.createElement("span");i.setAttribute("data-icon",p[e.level]||"circle"),c.appendChild(i),c.appendChild(document.createTextNode(" "+(e.label||e.id)));const d=document.createElement("span");if(d.textContent=String(e.value),n.appendChild(c),n.appendChild(d),a.appendChild(n),Array.isArray(e.detail)&&e.detail.length>0){const t=document.createElement("div");t.className="dash-health-detail",t.style.fontSize="12px",t.style.opacity="0.75",t.style.padding="4px 0 8px",t.textContent=e.detail.slice(0,5).join(", "),a.appendChild(t)}}window.Domma&&Domma.icons&&Domma.icons.scan()}}

package/admin/js/views/dashboard/widgets/journeys.js

@@ -1 +0,0 @@
-import{escapeHtml as r}from"../lib/escape.js";function s(n,a){return n.map(e=>'<div class="dash-spike-row">'+a(e)+"</div>").join("")}function i(n,a){n&&(n.innerHTML=a)}export default function f(n,a){const e=a?.journeys,d=n.find(".dash-empty"),o=n.find('[data-field="entry"]'),p=n.find('[data-field="exit"]'),u=n.find('[data-field="paths"]'),c=n.find('[data-field="bounce"]');if(!e||!e.totalSessions){d.removeAttr("hidden"),o.empty(),p.empty(),u.empty(),c.text("-");return}d.attr("hidden","hidden"),i(o.get(0),s(e.entry||[],t=>"<span>"+r(t.url)+"</span><span>"+(Number(t.count)|0)+"</span>")),i(p.get(0),s(e.exit||[],t=>"<span>"+r(t.url)+"</span><span>"+(Number(t.count)|0)+"</span>")),i(u.get(0),s(e.paths||[],t=>"<span>"+r(t.from)+" &rarr; "+r(t.to)+"</span><span>"+(Number(t.count)|0)+"</span>")),c.text((Number(e.bounceRate)*100).toFixed(1)+"%")}

package/admin/js/views/dashboard/widgets/kpi-strip.js

@@ -1 +0,0 @@
-export default function n(e,t){const d=t?.traffic?.today??0,a=t?.traffic?.deltaPct;e.find('[data-field="hits-today"]').text(d);const s=e.find('[data-field="hits-delta"]');a==null?s.text("").removeClass("up down"):a>=0?s.text("+"+a+"% vs yesterday").removeClass("down").addClass("up"):s.text(a+"% vs yesterday").removeClass("up").addClass("down"),e.find('[data-field="active-sessions"]').text(t?.realtime?.activeSessions??0),e.find('[data-field="submissions-week"]').text(t?._submissionsWeek??"-");const i=t?.health?.status||"ok",l={ok:"OK",warn:"Attention",fail:"Failing"};e.find('[data-field="health-pill"]').attr("data-level",i),e.find('[data-field="health-label"]').text(l[i])}

package/admin/js/views/dashboard/widgets/spike-feed.js

@@ -1,6 +0,0 @@
-import{escapeHtml as a,safeHref as d}from"../lib/escape.js";export default function p(i,r){const t=Array.isArray(r?.spikes)?r.spikes:[];t.length===0?i.find(".dash-empty").removeAttr("hidden"):i.find(".dash-empty").attr("hidden","hidden");const s=t.map(e=>`
-        <div class="dash-spike-row">
-            <span><a href="${d(e.url)}">${a(e.url)}</a></span>
-            <span><strong>${Number(e.hits)|0}</strong> \xB7 \xD7${Number(e.ratio)||0}</span>
-        </div>
-    `).join(""),n=i.find('[data-field="spike-list"]').get(0);n&&(n.innerHTML=s)}

package/admin/js/views/dashboard/widgets/top-pages.js

@@ -1 +0,0 @@
-import{escapeHtml as l,safeHref as i}from"../lib/escape.js";function c(n,s,e){if(s=s||80,e=e||24,!n||n.length===0)return"";const a=n.map(p=>Number(p)||0),o=Math.max.apply(null,a.concat([1])),t=s/Math.max(a.length-1,1),r=a.map((p,d)=>(d*t).toFixed(1)+","+(e-p/o*e).toFixed(1)).join(" ");return'<svg class="dash-spark" viewBox="0 0 '+s+" "+e+'" xmlns="http://www.w3.org/2000/svg" preserveAspectRatio="none"><polyline fill="none" stroke="currentColor" stroke-width="1.5" points="'+r+'"/></svg>'}export default function m(n,s){const e=Array.isArray(s?.topPages)?s.topPages:[];e.length===0?n.find(".dash-empty").removeAttr("hidden"):n.find(".dash-empty").attr("hidden","hidden");const a=e.map(t=>{const r=t.deltaPct==null?"":'<span class="'+(t.deltaPct>=0?"up":"down")+' dash-kpi-delta">'+(t.deltaPct>=0?"+":"")+(Number(t.deltaPct)||0)+"%</span>";return'<div class="dash-spike-row"><span><a href="'+i(t.url)+'">'+l(t.url)+"</a> "+c(t.spark)+"</span><span><strong>"+(Number(t.hits)|0)+"</strong> "+r+"</span></div>"}).join(""),o=n.find('[data-field="rows"]').get(0);o&&(o.innerHTML=a)}

package/admin/js/views/dashboard/widgets/traffic-chart.js

@@ -1 +0,0 @@
-const p="https://cdn.jsdelivr.net/npm/chart.js@4/dist/chart.umd.js";let s=null;function u(){return window.Chart?Promise.resolve(window.Chart):s||(s=new Promise((r,n)=>{const e=document.createElement("script");e.src=p,e.onload=()=>r(window.Chart),e.onerror=n,document.head.appendChild(e)}),s)}let i=null;export default async function m(r,n){const e=await u(),o=30,a=[];for(let t=o-1;t>=0;t-=1)a.push({label:D().subtract(t,"days").format("MM-DD"),hits:0});if(Array.isArray(n?.topPages))for(const t of n.topPages){if(!Array.isArray(t.spark))continue;const l=o-t.spark.length;t.spark.forEach((f,h)=>{a[l+h].hits+=f})}const d=a.every(t=>t.hits===0);d?r.find(".dash-empty").removeAttr("hidden"):r.find(".dash-empty").attr("hidden","hidden");const c=r.find("#dash-traffic-canvas").get(0);c&&(i&&(i.destroy(),i=null),!d&&(i=new e(c,{type:"line",data:{labels:a.map(t=>t.label),datasets:[{data:a.map(t=>t.hits),borderColor:"rgba(37, 99, 235, 1)",backgroundColor:"rgba(37, 99, 235, 0.15)",fill:!0,tension:.3,pointRadius:0}]},options:{responsive:!0,maintainAspectRatio:!1,plugins:{legend:{display:!1}},scales:{x:{ticks:{maxTicksLimit:8}},y:{beginAtZero:!0}}}})))}

package/admin/js/views/plugin-marketplace.js

@@ -1 +0,0 @@
-import{api as u}from"../api.js";import{pluginAccent as P,pluginWatermark as S}from"../lib/plugin-accent.js";export const pluginMarketplaceView={templateUrl:"/admin/js/templates/plugin-marketplace.html",async onMount(e){const a=E.loader(e.get(0),{type:"dots"});let t;try{t=await u.marketplace.catalogue()}catch(s){E.toast(`Failed to load marketplace: ${s.message}`,{type:"error"}),a.destroy();return}if(a.destroy(),!t.available){e.find("#marketplace-unavailable").show();return}e.find("#marketplace-available").show(),t.site&&e.find("#marketplace-site").text(`Licensed to ${t.site}.`).show(),U(e,t.catalogue),Domma.icons.scan()}};function U(e,a){const t=e.find("#marketplace-grid").get(0);if(t){for(;t.firstChild;)t.removeChild(t.firstChild);if(!a||a.length===0){const s=document.createElement("p");s.className="text-muted",s.textContent="No plugins available in the marketplace.",t.appendChild(s);return}a.forEach(s=>{const i=R(s,e);t.appendChild(i)})}}function F(e){if(e.tier!=="paid")return"Free";const a=e.terms?.managed?.monthly;return a==null||!Number.isFinite(Number(a))?"Paid":`${e.terms?.currency==="GBP"?"\xA3":(e.terms?.currency||"")+" "}${(Number(a)/100).toFixed(2)}/mo`}function R(e,a){const{slug:t,version:s,displayName:i,description:y,entitled:o,installed:l,installedVersion:p,updatable:b}=e,r=document.createElement("div");r.className="card plugin-card",r.dataset.slug=t,r.style.setProperty("--plugin-accent",P(t)),r.appendChild(S(e.icon));const h=document.createElement("div");h.className="card-body";const m=document.createElement("div");m.className="plugin-header";const N=document.createElement("div");N.className="plugin-icon";const I=document.createElement("span");I.dataset.icon=e.icon||"package",N.appendChild(I);const g=document.createElement("div");g.className="plugin-meta";const x=document.createElement("div");x.className="plugin-name",x.textContent=i||t;const k=document.createElement("div");k.className="plugin-version",k.textContent=l&&p&&p!==s?`v${p} \u2192 v${s}`:`v${s}`,g.appendChild(x),g.appendChild(k);const f=document.createElement("div");f.style.cssText="display:flex;gap:.35rem;align-items:center;";const w=document.createElement("span");if(w.className="badge badge-outline",w.textContent=F(e),f.appendChild(w),o&&e.tier==="paid"){const c=document.createElement("span");c.className="badge badge-success",c.textContent=e.licenceStatus==="grace"?"Renew":"Licensed",c.title=e.licenceStatus==="grace"?"The rental term has ended - still running during the grace period":"This site holds a live licence",f.appendChild(c)}m.appendChild(N),m.appendChild(g),m.appendChild(f);const $=document.createElement("p");$.className="plugin-desc",$.textContent=y||"",h.appendChild(m),h.appendChild($);const C=document.createElement("div");C.className="plugin-footer";const v=document.createElement("span");v.className="text-muted",v.style.fontSize=".8rem",v.textContent="Restart server after changes",C.appendChild(v);const d=document.createElement("div");d.className="plugin-footer-actions";const n=document.createElement("button");if(n.className="btn btn-sm",l&&b&&o){n.className+=" btn-primary",n.textContent="Update",n.onclick=()=>T(e,a,{update:!0}),d.appendChild(n);const c=document.createElement("button");c.className="btn btn-sm btn-ghost",c.textContent="Uninstall",c.onclick=()=>D(t,a),d.appendChild(c)}else l?(n.className+=" btn-ghost",n.textContent="Uninstall",n.onclick=()=>D(t,a),d.appendChild(n)):o?(n.className+=" btn-primary",n.textContent="Install",n.onclick=()=>T(e,a),d.appendChild(n)):(n.className+=" btn-ghost",n.textContent=e.licenceStatus==="expired"?"Licence expired":"Not licensed",n.disabled=!0,n.title="Contact us to add this to your site.",d.appendChild(n));return C.appendChild(d),r.appendChild(h),r.appendChild(C),r}async function T(e,a,{update:t=!1}={}){const{slug:s,version:i,installedVersion:y}=e,o=t?`<p>Update ${s} from ${y} to ${i}?</p><p class="text-muted">The plugin keeps its data, and the current version is put back if the update fails.</p>`:`<p>Install ${e.displayName||s} v${i}?</p><p class="text-muted">It arrives licensed to this site and takes effect after a restart.</p>`;if(await E.confirm(o,{title:t?"Update plugin":"Install plugin",confirmText:t?"Update":"Install",cancelText:"Cancel",html:!0}))try{const l=await u.marketplace.install(s,i,{update:t}),p=l?.action==="upgrade"?`${s} updated${l.from?` from ${l.from}`:""} to ${l.version}.`:`${s} ${l?.version??i} installed.`;E.toast(`${p} Restart the server to activate it.`,{type:"success"});const b=await u.marketplace.catalogue();U(a,b.catalogue),Domma.icons.scan()}catch(l){E.toast(l.message||"Install failed.",{type:"error"})}}async function D(e,a){if(await E.confirm(`Uninstall ${e}? This will remove its files.`))try{await u.marketplace.uninstall(e),E.toast(`${e} uninstalled. Restart to apply.`,{type:"success"});const t=await u.marketplace.catalogue();U(a,t.catalogue),Domma.icons.scan()}catch(t){E.toast(`Uninstall failed: ${t.message}`,{type:"error"})}}