domma-cms 0.9.1 → 0.9.5

package/plugins/docs/data/folders.json

@@ -1,9 +1,9 @@
 [
   {
-    "id": "262d8f8b-452c-49b7-82ae-e74edc13249e",
-    "name": "Test",
+    "id": "d62d4e48-39c8-4602-9c46-f5235a6f169c",
+    "name": "Personal",
     "parentId": null,
     "userId": "2421ad8e-060d-4548-8878-af7011d5e08b",
-    "createdAt": "2026-03-24T16:49:14.093Z"
+    "createdAt": "2026-04-03T15:07:14.590Z"
   }
 ]

package/plugins/docs/data/versions/57e003f0-68f2-47dc-9c36-ed4b10ed3deb/1.json

@@ -0,0 +1,5 @@
+{
+  "num": 1,
+  "content": "",
+  "createdAt": "2026-04-03T15:06:45.982Z"
+}

package/plugins/garage/admin/templates/garage.html

@@ -33,6 +33,7 @@
             <button class="tab-item active">Results</button>
             <button class="tab-item" id="tab-btn-garage">My Garage</button>
             <button class="tab-item" id="tab-btn-history">History</button>
+            <button class="tab-item" id="tab-btn-settings"><span data-icon="settings"></span> Settings</button>
         </div>
         <div class="tab-content">
 
@@ -75,6 +76,35 @@
                 </div>
             </div>
 
+            <!-- Settings Tab -->
+            <div class="tab-panel" id="tab-settings">
+                <div style="max-width:480px;margin-top:1rem;">
+                    <div class="card">
+                        <div class="card-header" style="display:flex;align-items:center;gap:0.5rem;">
+                            <span data-icon="key"></span>
+                            <strong>DVLA API Configuration</strong>
+                        </div>
+                        <div class="card-body">
+                            <p style="font-size:0.87rem;color:var(--dm-text-muted,#888);margin:0 0 1rem;">
+                                An API key from the DVLA Vehicle Enquiry Service is required to look up vehicle details.
+                                Obtain yours at the
+                                <a href="https://developer-portal.driver-vehicle-licensing.api.gov.uk" target="_blank"
+                                   rel="noopener">DVLA developer portal</a>.
+                            </p>
+                            <div id="settings-key-status" style="margin-bottom:1rem;font-size:0.87rem;"></div>
+                            <label style="display:block;font-size:0.9rem;font-weight:500;margin-bottom:0.35rem;">API
+                                Key</label>
+                            <input id="settings-api-key" type="password" class="form-input"
+                                   placeholder="Paste your DVLA API key" autocomplete="off"
+                                   style="width:100%;margin-bottom:1rem;">
+                            <button id="settings-save-btn" class="btn btn-primary">
+                                <span data-icon="save"></span> Save
+                            </button>
+                        </div>
+                    </div>
+                </div>
+            </div>
+
         </div>
     </div>
 

package/plugins/garage/admin/views/garage.js

@@ -162,6 +162,9 @@ export const garageView = {
         const clearHistoryBtn = $container.find('#clear-history-btn').get(0);
         const tabBtnGarage = $container.find('#tab-btn-garage').get(0);
         const tabBtnHistory = $container.find('#tab-btn-history').get(0);
+        const settingsApiKeyInput = $container.find('#settings-api-key').get(0);
+        const settingsSaveBtn = $container.find('#settings-save-btn').get(0);
+        const settingsKeyStatus = $container.find('#settings-key-status').get(0);
 
         // ---------------------------------------------------------------
         // Tabs
@@ -552,10 +555,68 @@ export const garageView = {
             await loadHistory();
         });
 
+        // ---------------------------------------------------------------
+        // Settings
+        // ---------------------------------------------------------------
+
+        let currentSettings = {};
+
+        async function loadSettings() {
+            try {
+                const plugins = await api('/api/plugins');
+                const garage = plugins.find(p => p.name === 'garage');
+                currentSettings = garage?.settings || {};
+                const hasKey = !!(currentSettings.dvlaApiKey);
+                const badge = document.createElement('span');
+                badge.className = hasKey ? 'badge badge-success' : 'badge badge-warning';
+                badge.textContent = hasKey
+                    ? 'API key configured'
+                    : 'No API key — lookups will fail until one is saved';
+                settingsKeyStatus.textContent = '';
+                settingsKeyStatus.appendChild(badge);
+            } catch (err) {
+                settingsKeyStatus.textContent = 'Could not load settings.';
+            }
+        }
+
+        settingsSaveBtn.addEventListener('click', async () => {
+            const key = (settingsApiKeyInput.value || '').trim();
+            if (!key) {
+                E.toast('Please enter an API key.', {type: 'warning'});
+                return;
+            }
+
+            settingsSaveBtn.disabled = true;
+            try {
+                await api('/api/plugins/garage', 'PUT', {
+                    enabled: true,
+                    settings: {...currentSettings, dvlaApiKey: key}
+                });
+                currentSettings.dvlaApiKey = key;
+                settingsApiKeyInput.value = '';
+                const badge = document.createElement('span');
+                badge.className = 'badge badge-success';
+                badge.textContent = 'API key configured';
+                settingsKeyStatus.textContent = '';
+                settingsKeyStatus.appendChild(badge);
+                E.toast('Settings saved.', {type: 'success'});
+            } catch (err) {
+                E.toast('Failed to save: ' + err.message, {type: 'error'});
+            } finally {
+                settingsSaveBtn.disabled = false;
+                const icon = document.createElement('span');
+                icon.setAttribute('data-icon', 'save');
+                settingsSaveBtn.textContent = '';
+                settingsSaveBtn.appendChild(icon);
+                settingsSaveBtn.appendChild(document.createTextNode(' Save'));
+                Domma.icons.scan();
+            }
+        });
+
         // ---------------------------------------------------------------
         // Initial load
         // ---------------------------------------------------------------
-        await Promise.all([loadSaved(), loadHistory()]);
+        await Promise.all([loadSaved(), loadHistory(), loadSettings()]);
         Domma.icons.scan();
     }
 };

package/plugins/garage/plugin.json

@@ -25,7 +25,7 @@
     ],
     "views": {
       "plugin-garage": {
-        "entry": "garage/admin/views/garage.js?v=3",
+        "entry": "garage/admin/views/garage.js?v=4",
         "exportName": "garageView"
       }
     }

package/plugins/notes/admin/templates/notes.html

@@ -20,17 +20,8 @@
     <!-- Category filter -->
     <div id="category-filter" style="display:flex;flex-wrap:wrap;gap:6px;margin-bottom:18px;"></div>
 
-    <!-- Notes grid -->
-    <div
-        id="notes-grid"
-        style="display:grid;grid-template-columns:repeat(auto-fill,minmax(280px,1fr));gap:16px;"
-    ></div>
-
-    <!-- Empty state -->
-    <div id="notes-empty" style="display:none;text-align:center;padding:60px 20px;opacity:0.6;">
-        <span data-icon="file-text" data-icon-size="48" style="display:block;margin-bottom:12px;"></span>
-        <p style="font-size:1rem;margin:0;">No notes yet. Click <strong>New Note</strong> to get started.</p>
-    </div>
+    <!-- Notes table -->
+    <div id="notes-table"></div>
 
     <!-- Editor overlay -->
     <div

package/plugins/notes/admin/views/notes.js

@@ -1,22 +1,16 @@
 // ============================================================
 // Notes plugin admin view
-// Uses auth-aware api() helper for all API calls (Bearer token from S.get('auth_token'))
-// Uses $container.find() for all DOM queries
-// Security: all user-supplied content passes through escapeHtml()
-//   before being assigned to innerHTML — same pattern as todo plugin.
+// Uses auth-aware api() helper for all API calls
+// Uses T.create() for table rendering (Domma Table component)
 // ============================================================
 
-/** Escape user-supplied text before inserting into HTML markup */
-function escapeHtml(str) {
-    return String(str ?? '')
-        .replace(/&/g, '&')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/"/g, '&quot;')
-        .replace(/'/g, '&#39;');
-}
+const esc = (str) => String(str ?? '')
+    .replace(/&/g, '&amp;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#39;');
 
-/** Debounce a function call */
 function debounce(fn, delay) {
     let timer;
     return (...args) => {
@@ -49,11 +43,10 @@ export const notesView = {
         let categories = [];
         let activeCategory = '';
         let searchQuery = '';
-        let editingNoteId = null; // null = new note
+        let editingNoteId = null;
+        let notesTable = null;
 
-        // ---- DOM refs (resolved once after template renders) ----
-        const gridEl       = $container.find('#notes-grid').get(0);
-        const emptyEl      = $container.find('#notes-empty').get(0);
+        // ---- DOM refs ----
         const editorEl     = $container.find('#note-editor').get(0);
         const titleInput   = $container.find('#note-title').get(0);
         const contentInput = $container.find('#note-content').get(0);
@@ -86,85 +79,111 @@ export const notesView = {
             }
         }
 
-        // ---- Render notes grid ----
-        // Safe: all user values are run through escapeHtml() before string interpolation.
-        function renderGrid() {
-            if (notes.length === 0) {
-                gridEl.textContent = '';
-                emptyEl.style.display = 'block';
+        // ---- Render table (T.create on first call, setData on subsequent) ----
+        function renderTable() {
+            if (notesTable) {
+                notesTable.setData(notes);
                 return;
             }
 
-            emptyEl.style.display = 'none';
-
-            const cards = notes.map((note) => {
-                const safeId      = escapeHtml(note.id);
-                const safeTitle   = escapeHtml(note.title || 'Untitled');
-                const preview     = escapeHtml((note.content || '').slice(0, 120));
-                const ellipsis    = note.content && note.content.length > 120 ? '\u2026' : '';
-                const safeFromNow = escapeHtml(D(note.updatedAt).fromNow());
-                const safeFullDt  = escapeHtml(D(note.updatedAt).format('DD MMM YYYY HH:mm'));
-
-                const catTags = Array.isArray(note.categories) && note.categories.length > 0
-                    ? note.categories.map((c) =>
-                        '<span class="badge badge-outline notes-cat-tag"'
-                        + ' style="font-size:0.7rem;cursor:pointer;"'
-                        + ' data-cat="' + escapeHtml(c) + '">'
-                        + escapeHtml(c)
-                        + '</span>'
-                    ).join(' ')
-                    : '';
-
-                const previewHtml = preview
-                    ? '<p class="notes-card-preview" style="margin:0 0 8px;font-size:0.875rem;opacity:0.8;white-space:pre-wrap;">'
-                      + preview + ellipsis + '</p>'
-                    : '';
-
-                return '<div class="card notes-card" data-id="' + safeId + '" style="cursor:default;">'
-                    + '<div class="card-body">'
-                    + '<div style="display:flex;align-items:flex-start;justify-content:space-between;gap:8px;margin-bottom:6px;">'
-                    + '<h4 class="notes-card-title" style="margin:0;font-size:1rem;font-weight:600;flex:1;">' + safeTitle + '</h4>'
-                    + '<button class="btn btn-sm btn-danger delete-note-card" data-id="' + safeId + '" title="Delete note" style="flex-shrink:0;">'
-                    + '<span data-icon="trash" data-icon-size="13"></span>'
-                    + '</button>'
-                    + '</div>'
-                    + previewHtml
-                    + '<div class="notes-card-footer" style="display:flex;align-items:center;justify-content:space-between;flex-wrap:wrap;gap:4px;">'
-                    + '<div class="notes-card-cats">' + catTags + '</div>'
-                    + '<small style="opacity:0.6;" title="' + safeFullDt + '">' + safeFromNow + '</small>'
-                    + '</div>'
-                    + '</div>'
-                    + '</div>';
-            }).join('');
-
-            // All values in `cards` have been escaped — safe assignment.
-            gridEl.innerHTML = cards;
-            Domma.icons.scan(gridEl);
+            notesTable = T.create('#notes-table', {
+                data: notes,
+                columns: [
+                    {
+                        key: 'title',
+                        title: 'Title',
+                        sortable: true,
+                        render: (v) => `<strong>${esc(v || 'Untitled')}</strong>`
+                    },
+                    {
+                        key: 'content',
+                        title: 'Content',
+                        sortable: false,
+                        render: (v) => {
+                            const preview = (v || '').slice(0, 100);
+                            const ellipsis = v && v.length > 100 ? '\u2026' : '';
+                            return preview
+                                ? `<span style="font-size:0.87rem;opacity:0.8;">${esc(preview)}${ellipsis}</span>`
+                                : '<span style="opacity:0.35;">\u2014</span>';
+                        }
+                    },
+                    {
+                        key: 'categories',
+                        title: 'Categories',
+                        sortable: false,
+                        render: (v) => {
+                            if (!Array.isArray(v) || v.length === 0) return '<span style="opacity:0.35;">\u2014</span>';
+                            return v.map((c) =>
+                                `<span class="badge badge-outline notes-cat-tag" data-cat="${esc(c)}" `
+                                + `style="font-size:0.7rem;margin-right:2px;cursor:pointer;">${esc(c)}</span>`
+                            ).join('');
+                        }
+                    },
+                    {
+                        key: 'updatedAt',
+                        title: 'Updated',
+                        sortable: true,
+                        render: (v) => v
+                            ? `<span title="${esc(D(v).format('DD MMM YYYY HH:mm'))}">${esc(D(v).fromNow())}</span>`
+                            : '\u2014'
+                    },
+                    {
+                        key: 'id',
+                        title: 'Actions',
+                        sortable: false,
+                        render: (id) =>
+                            `<button class="btn btn-sm btn-outline note-edit-btn" data-id="${esc(id)}" style="margin-right:4px;">` +
+                            `<span data-icon="edit" data-icon-size="13"></span> Edit</button>` +
+                            `<button class="btn btn-sm btn-danger note-delete-btn" data-id="${esc(id)}">` +
+                            `<span data-icon="trash" data-icon-size="13"></span></button>`
+                    }
+                ],
+                emptyMessage: 'No notes yet. Click New Note to get started.'
+            });
+
+            // Event delegation on the table container
+            const tableContainer = $container.find('#notes-table').get(0);
+            tableContainer.addEventListener('click', (e) => {
+                const editBtn = e.target.closest('.note-edit-btn');
+                const deleteBtn = e.target.closest('.note-delete-btn');
+                const catTag = e.target.closest('.notes-cat-tag');
+
+                if (editBtn) {
+                    const note = notes.find((n) => n.id === editBtn.dataset.id);
+                    if (note) openEditor(note);
+                } else if (deleteBtn) {
+                    deleteNote(deleteBtn.dataset.id);
+                } else if (catTag) {
+                    activeCategory = catTag.dataset.cat;
+                    renderCategoryFilter();
+                    loadNotes().then(renderTable);
+                }
+            });
         }
 
-        // ---- Render category filter bar ----
-        // Safe: all category strings are run through escapeHtml().
+        // ---- Render category filter bar (DOM methods — no innerHTML with user data) ----
         function renderCategoryFilter() {
-            const allActive = activeCategory === '';
-            let html = '<button class="btn btn-sm ' + (allActive ? 'btn-primary' : 'btn-secondary')
-                + ' cat-filter-btn" data-cat="" style="margin-right:4px;">All</button>';
-
+            catFilterEl.textContent = '';
+
+            const makeBtn = (label, cat) => {
+                const btn = document.createElement('button');
+                btn.className = 'btn btn-sm cat-filter-btn ' + (activeCategory === cat ? 'btn-primary' : 'btn-secondary');
+                btn.dataset.cat = cat;
+                btn.style.marginRight = '4px';
+                btn.textContent = label;
+                return btn;
+            };
+
+            catFilterEl.appendChild(makeBtn('All', ''));
             for (const c of categories) {
-                const safeC = escapeHtml(c);
-                const isActive = activeCategory === c;
-                html += '<button class="btn btn-sm ' + (isActive ? 'btn-primary' : 'btn-secondary')
-                    + ' cat-filter-btn" data-cat="' + safeC + '" style="margin-right:4px;">'
-                    + safeC + '</button>';
+                catFilterEl.appendChild(makeBtn(c, c));
             }
-
-            // All values in `html` have been escaped — safe assignment.
-            catFilterEl.innerHTML = html;
         }
 
         // ---- Full reload ----
         async function reload() {
             await Promise.all([loadNotes(), loadCategories()]);
-            renderGrid();
+            renderTable();
             renderCategoryFilter();
         }
 
@@ -188,10 +207,7 @@ export const notesView = {
         }
 
         function parseCategoriesInput() {
-            return catsInput.value
-                .split(',')
-                .map((c) => c.trim())
-                .filter(Boolean);
+            return catsInput.value.split(',').map((c) => c.trim()).filter(Boolean);
         }
 
         // ---- Save (create or update) ----
@@ -232,69 +248,31 @@ export const notesView = {
 
         // ---- Event bindings ----
 
-        // New note button
         $container.find('#new-note-btn').get(0).addEventListener('click', () => openEditor());
-
-        // Save button
         $container.find('#save-note-btn').get(0).addEventListener('click', saveNote);
-
-        // Cancel buttons (header X and footer Cancel both call closeEditor)
         $container.find('#cancel-note-btn').get(0).addEventListener('click', closeEditor);
         $container.find('#cancel-note-btn-footer').get(0).addEventListener('click', closeEditor);
-
-        // Delete button (inside editor)
         deleteBtnEl.addEventListener('click', () => {
             if (editingNoteId) deleteNote(editingNoteId);
         });
 
-        // Search input (debounced)
         $container.find('#notes-search').get(0).addEventListener('input', debounce(async (e) => {
             searchQuery = e.target.value.trim();
             await loadNotes();
-            renderGrid();
+            renderTable();
         }, 300));
 
-        // Category filter — native delegation on catFilterEl
         catFilterEl.addEventListener('click', async (e) => {
             const btn = e.target.closest('.cat-filter-btn');
             if (!btn) return;
             activeCategory = btn.dataset.cat;
             renderCategoryFilter();
             await loadNotes();
-            renderGrid();
+            renderTable();
         });
 
-        // Notes grid — native delegation
-        gridEl.addEventListener('click', (e) => {
-            // Delete button on card
-            const deleteBtn = e.target.closest('.delete-note-card');
-            if (deleteBtn) {
-                deleteNote(deleteBtn.dataset.id);
-                return;
-            }
-
-            // Category tag — filter by that category
-            const catTag = e.target.closest('.notes-cat-tag');
-            if (catTag) {
-                activeCategory = catTag.dataset.cat;
-                renderCategoryFilter();
-                loadNotes().then(renderGrid);
-                return;
-            }
-
-            // Click anywhere else on card — open editor
-            const card = e.target.closest('.notes-card');
-            if (card) {
-                const note = notes.find((n) => n.id === card.dataset.id);
-                if (note) openEditor(note);
-            }
-        });
-
-        // Ctrl+Enter / Cmd+Enter to save from editor
         editorEl.addEventListener('keydown', (e) => {
-            if ((e.ctrlKey || e.metaKey) && e.key === 'Enter') {
-                saveNote();
-            }
+            if ((e.ctrlKey || e.metaKey) && e.key === 'Enter') saveNote();
         });
 
         // ---- Initial load ----

package/plugins/notes/collections/user-notes/schema.json

@@ -48,6 +48,7 @@
     }
   },
   "storage": {
-    "adapter": "file"
+    "adapter": "mongodb",
+    "connection": "default"
   }
 }

package/plugins/notes/plugin.json

@@ -15,7 +15,7 @@
     ],
     "views": {
       "plugin-notes": {
-        "entry": "notes/admin/views/notes.js",
+        "entry": "notes/admin/views/notes.js?v=2",
         "exportName": "notesView"
       }
     }