kempo 4.2.3 → 4.2.5

package/server/db/schema.js

@@ -0,0 +1,173 @@
+import { pgTable, text, timestamp, boolean, index, jsonb } from 'drizzle-orm/pg-core';
+
+/*
+  Auth Tables
+*/
+
+export const user = pgTable('user', {
+  id: text('id').primaryKey(),
+  name: text('name').notNull(),
+  email: text('email').notNull().unique(),
+  passwordHash: text('passwordHash').notNull(),
+  emailVerified: boolean('emailVerified').notNull().default(false),
+  createdAt: timestamp('createdAt').notNull(),
+  updatedAt: timestamp('updatedAt').notNull(),
+});
+
+export const session = pgTable('session', {
+  token: text('token').primaryKey(),
+  userId: text('userId')
+    .notNull()
+    .references(() => user.id),
+  expiresAt: timestamp('expiresAt').notNull(),
+  createdAt: timestamp('createdAt').notNull(),
+  ipAddress: text('ipAddress'),
+  userAgent: text('userAgent'),
+});
+
+export const verificationToken = pgTable('verificationToken', {
+  token: text('token').primaryKey(),
+  userId: text('userId')
+    .notNull()
+    .references(() => user.id),
+  type: text('type').notNull(),
+  expiresAt: timestamp('expiresAt').notNull(),
+  createdAt: timestamp('createdAt').notNull(),
+});
+
+/*
+  Group-Based Permission System
+*/
+
+export const group = pgTable('group', {
+  name: text('name').primaryKey(),
+  description: text('description'),
+  owner: text('owner').notNull().default('user'),
+  createdAt: timestamp('createdAt').notNull(),
+  updatedAt: timestamp('updatedAt'),
+});
+
+export const userGroup = pgTable('userGroup', {
+  id: text('id').primaryKey(),
+  userId: text('userId')
+    .notNull()
+    .references(() => user.id),
+  groupName: text('groupName')
+    .notNull()
+    .references(() => group.name),
+  createdAt: timestamp('createdAt').notNull(),
+});
+
+export const permission = pgTable('permission', {
+  name: text('name').primaryKey(),
+  description: text('description'),
+  owner: text('owner').notNull().default('user'),
+  createdAt: timestamp('createdAt').notNull(),
+});
+
+export const groupPermission = pgTable('groupPermission', {
+  id: text('id').primaryKey(),
+  groupName: text('groupName')
+    .notNull()
+    .references(() => group.name),
+  permissionName: text('permissionName')
+    .notNull()
+    .references(() => permission.name),
+  createdAt: timestamp('createdAt').notNull(),
+});
+
+/*
+  Settings System
+*/
+
+export const setting = pgTable('setting', {
+  name: text('name').primaryKey(),
+  value: text('value'),
+  type: text('type').notNull().default('string'),
+  isPublic: boolean('isPublic').notNull().default(false),
+  description: text('description'),
+  createdAt: timestamp('createdAt').notNull(),
+  updatedAt: timestamp('updatedAt').notNull(),
+});
+
+/*
+  Extension System
+*/
+
+export const hook = pgTable('hook', {
+  id: text('id').primaryKey(),
+  owner: text('owner').notNull(),
+  event: text('event').notNull(),
+  callback: text('callback').notNull(),
+  createdAt: timestamp('createdAt').notNull(),
+}, table => [
+  index('hook_event_idx').on(table.event),
+  index('hook_owner_idx').on(table.owner),
+]);
+
+export const extension = pgTable('extension', {
+  name: text('name').primaryKey(),
+  version: text('version'),
+  enabled: boolean('enabled').notNull().default(true),
+  kempo: jsonb('kempo'),
+  installedAt: timestamp('installedAt').notNull(),
+  updatedAt: timestamp('updatedAt').notNull(),
+});
+
+/*
+  Triggers to prevent deletion of system resources
+*/
+export const createSettingProtectionTrigger = () => `
+CREATE OR REPLACE FUNCTION prevent_system_setting_delete()
+RETURNS TRIGGER AS $$
+BEGIN
+  IF OLD.name LIKE 'system:%' THEN
+    RAISE EXCEPTION 'Cannot delete system settings';
+  END IF;
+  RETURN OLD;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE TRIGGER protect_system_settings
+BEFORE DELETE ON setting
+FOR EACH ROW
+EXECUTE FUNCTION prevent_system_setting_delete();
+`;
+
+export const createGroupProtectionTrigger = () => `
+CREATE OR REPLACE FUNCTION prevent_system_group_delete()
+RETURNS TRIGGER AS $$
+BEGIN
+  IF OLD.owner = 'system' THEN
+    RAISE EXCEPTION 'Cannot delete system groups';
+  END IF;
+  RETURN OLD;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE TRIGGER protect_system_groups
+BEFORE DELETE ON "group"
+FOR EACH ROW
+EXECUTE FUNCTION prevent_system_group_delete();
+`;
+
+export const createPermissionProtectionTrigger = () => `
+CREATE OR REPLACE FUNCTION prevent_system_permission_delete()
+RETURNS TRIGGER AS $$
+BEGIN
+  IF OLD.owner = 'system' THEN
+    RAISE EXCEPTION 'Cannot delete system permissions';
+  END IF;
+  RETURN OLD;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE TRIGGER protect_system_permissions
+BEFORE DELETE ON permission
+FOR EACH ROW
+EXECUTE FUNCTION prevent_system_permission_delete();
+`;
+
+
+
+

package/server/sdk.js

@@ -0,0 +1,192 @@
+/*
+  Database
+*/
+
+export { default as db } from './db/index.js';
+export * as schema from './db/schema.js';
+
+/*
+  Auth
+*/
+
+export { default as changePassword } from './utils/auth/changePassword.js';
+export { default as getSession } from './utils/auth/getSession.js';
+export { default as loginEmail } from './utils/auth/loginEmail.js';
+export { default as logout } from './utils/auth/logout.js';
+export { default as registerEmail } from './utils/auth/registerEmail.js';
+export { default as requestPasswordReset } from './utils/auth/requestPasswordReset.js';
+export { default as resetPassword } from './utils/auth/resetPassword.js';
+export { default as sendVerificationEmail } from './utils/auth/sendVerificationEmail.js';
+export { default as verifyEmail } from './utils/auth/verifyEmail.js';
+
+/*
+  Users
+*/
+
+export { default as createUser } from './utils/users/createUser.js';
+export { default as deleteUser } from './utils/users/deleteUser.js';
+export { default as findUsersByEmail } from './utils/users/findUsersByEmail.js';
+export { default as findUsersByName } from './utils/users/findUsersByName.js';
+export { default as getUserByEmail } from './utils/users/getUserByEmail.js';
+export { default as getUserById } from './utils/users/getUserById.js';
+export { default as getUsers } from './utils/users/getUsers.js';
+export { default as searchUsers } from './utils/users/searchUsers.js';
+export { default as updateUser } from './utils/users/updateUser.js';
+
+/*
+  Sessions
+*/
+
+export { default as createSession } from './utils/sessions/createSession.js';
+export { default as deleteExpiredUserSessions } from './utils/sessions/deleteExpiredUserSessions.js';
+export { default as deleteSession } from './utils/sessions/deleteSession.js';
+export { default as deleteUserSessions } from './utils/sessions/deleteUserSessions.js';
+export { default as getSessionById } from './utils/sessions/getSessionById.js';
+export { default as getSessionByToken } from './utils/sessions/getSessionByToken.js';
+export { default as getSessions } from './utils/sessions/getSessions.js';
+export { default as getUserSessions } from './utils/sessions/getUserSessions.js';
+
+/*
+  Groups
+*/
+
+export { default as addUserToGroup } from './utils/groups/addUserToGroup.js';
+export { default as createGroup } from './utils/groups/createGroup.js';
+export { default as deleteGroup } from './utils/groups/deleteGroup.js';
+export { default as getGroup } from './utils/groups/getGroup.js';
+export { default as getGroupMembers } from './utils/groups/getGroupMembers.js';
+export { default as listGroups } from './utils/groups/listGroups.js';
+export { default as removeUserFromGroup } from './utils/groups/removeUserFromGroup.js';
+export { default as updateGroup } from './utils/groups/updateGroup.js';
+
+/*
+  Permissions
+*/
+
+export { default as createPermission } from './utils/permissions/createPermission.js';
+export { default as currentUserHasAllPermissions } from './utils/permissions/currentUserHasAllPermissions.js';
+export { default as currentUserHasPermission } from './utils/permissions/currentUserHasPermission.js';
+export { default as currentUserHasSomePermissions } from './utils/permissions/currentUserHasSomePermissions.js';
+export { default as deletePermission } from './utils/permissions/deletePermission.js';
+export { default as getAllPermissions } from './utils/permissions/getAllPermissions.js';
+export { default as getPermissionsForGroups } from './utils/permissions/getPermissionsForGroups.js';
+export { default as getUserGroups } from './utils/permissions/getUserGroups.js';
+export { default as getUserPermission } from './utils/permissions/getUserPermission.js';
+export { default as getUserPermissions } from './utils/permissions/getUserPermissions.js';
+export { default as updatePermission } from './utils/permissions/updatePermission.js';
+export { default as userHasAllPermissions } from './utils/permissions/userHasAllPermissions.js';
+export { default as userHasPermission } from './utils/permissions/userHasPermission.js';
+export { default as userHasSomePermissions } from './utils/permissions/userHasSomePermissions.js';
+
+/*
+  Settings
+*/
+
+export { default as deleteSetting } from './utils/settings/deleteSetting.js';
+export { default as getPublicSettings } from './utils/settings/getPublicSettings.js';
+export { default as getSetting } from './utils/settings/getSetting.js';
+export { default as getSettingsByOwner } from './utils/settings/getSettingsByOwner.js';
+export { default as getSettingWithMetadata } from './utils/settings/getSettingWithMetadata.js';
+export { default as listSettings } from './utils/settings/listSettings.js';
+export { default as setSetting } from './utils/settings/setSetting.js';
+
+/*
+  Pages
+*/
+
+export { default as createPage } from './utils/pages/createPage.js';
+export { default as deletePage } from './utils/pages/deletePage.js';
+export { default as disablePage } from './utils/pages/disablePage.js';
+export { default as enablePage } from './utils/pages/enablePage.js';
+export { default as getPage } from './utils/pages/getPage.js';
+export { default as listDirectories } from './utils/pages/listDirectories.js';
+export { default as listPages } from './utils/pages/listPages.js';
+export { default as listTemplates } from './utils/pages/listTemplates.js';
+export { default as movePage } from './utils/pages/movePage.js';
+export { default as updatePage } from './utils/pages/updatePage.js';
+
+/*
+  Templates
+*/
+
+export { default as createTemplate } from './utils/templates/createTemplate.js';
+export { default as deleteTemplate } from './utils/templates/deleteTemplate.js';
+export { default as disableTemplate } from './utils/templates/disableTemplate.js';
+export { default as enableTemplate } from './utils/templates/enableTemplate.js';
+export { default as getTemplate } from './utils/templates/getTemplate.js';
+export { default as updateTemplate } from './utils/templates/updateTemplate.js';
+
+/*
+  Fragments
+*/
+
+export { default as createFragment } from './utils/fragments/createFragment.js';
+export { default as deleteFragment } from './utils/fragments/deleteFragment.js';
+export { default as disableFragment } from './utils/fragments/disableFragment.js';
+export { default as enableFragment } from './utils/fragments/enableFragment.js';
+export { default as getFragment } from './utils/fragments/getFragment.js';
+export { default as listFragments } from './utils/fragments/listFragments.js';
+export { default as updateFragment } from './utils/fragments/updateFragment.js';
+
+/*
+  Global Content
+*/
+
+export { default as createGlobalContent } from './utils/global-content/createGlobalContent.js';
+export { default as deleteGlobalContent } from './utils/global-content/deleteGlobalContent.js';
+export { default as disableGlobalContent } from './utils/global-content/disableGlobalContent.js';
+export { default as enableGlobalContent } from './utils/global-content/enableGlobalContent.js';
+export { default as getGlobalContent } from './utils/global-content/getGlobalContent.js';
+export { default as listGlobalContent } from './utils/global-content/listGlobalContent.js';
+export { default as updateGlobalContent } from './utils/global-content/updateGlobalContent.js';
+
+/*
+  Admin Global Content
+*/
+
+export { default as createAdminGlobalContent } from './utils/admin-global-content/createAdminGlobalContent.js';
+export { default as deleteAdminGlobalContent } from './utils/admin-global-content/deleteAdminGlobalContent.js';
+export { default as deleteAdminGlobalContentByOwner } from './utils/admin-global-content/deleteAdminGlobalContentByOwner.js';
+export { default as disableAdminGlobalContent } from './utils/admin-global-content/disableAdminGlobalContent.js';
+export { default as enableAdminGlobalContent } from './utils/admin-global-content/enableAdminGlobalContent.js';
+export { default as getAdminGlobalContent } from './utils/admin-global-content/getAdminGlobalContent.js';
+export { default as listAdminGlobalContent } from './utils/admin-global-content/listAdminGlobalContent.js';
+export { default as updateAdminGlobalContent } from './utils/admin-global-content/updateAdminGlobalContent.js';
+
+/*
+  Email
+*/
+
+export { default as sendEmail } from './utils/email/sendEmail.js';
+export { default as sendEmailFromTemplate } from './utils/email/sendEmailFromTemplate.js';
+
+/*
+  Filesystem Utilities
+*/
+
+export { default as parseFrontmatter } from './utils/fs/parseFrontmatter.js';
+export { default as scanDir } from './utils/fs/scanDir.js';
+
+/*
+  Hooks
+*/
+
+export { default as createHook } from './utils/hooks/createHook.js';
+export { default as deleteHook } from './utils/hooks/deleteHook.js';
+export { default as getHook } from './utils/hooks/getHook.js';
+export { default as listHooks } from './utils/hooks/listHooks.js';
+export { default as triggerHook, clearHandlerCache } from './utils/hooks/triggerHook.js';
+export { default as updateHook } from './utils/hooks/updateHook.js';
+
+/*
+  Extensions
+*/
+
+export { default as disableExtension } from './utils/extensions/disableExtension.js';
+export { default as enableExtension } from './utils/extensions/enableExtension.js';
+export { default as getExtension } from './utils/extensions/getExtension.js';
+export { default as installExtension } from './utils/extensions/installExtension.js';
+export { default as listExtensions } from './utils/extensions/listExtensions.js';
+export { default as uninstallExtension } from './utils/extensions/uninstallExtension.js';
+export { default as updateExtension } from './utils/extensions/updateExtension.js';
+

package/server/utils/admin-global-content/createAdminGlobalContent.js

@@ -0,0 +1,43 @@
+import { readFile, writeFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import crypto from 'crypto';
+import { ADMIN_GLOBAL_FILE, parseEntries, serializeEntries } from './helpers.js';
+
+export default async ({ adminDir, name, location, priority, owner, markup }) => {
+  if(!adminDir){
+    return [{ code: 400, msg: 'Admin directory is required' }, null];
+  }
+  if(!name){
+    return [{ code: 400, msg: 'Name is required' }, null];
+  }
+  if(!location){
+    return [{ code: 400, msg: 'Location is required' }, null];
+  }
+
+  const filePath = join(adminDir, ADMIN_GLOBAL_FILE);
+  let entries = [];
+  if(existsSync(filePath)){
+    const raw = await readFile(filePath, 'utf-8');
+    entries = parseEntries(raw);
+  }
+
+  const now = new Date().toISOString();
+  const entry = {
+    id: crypto.randomUUID(),
+    name,
+    owner: owner || 'custom',
+    locked: false,
+    enabled: true,
+    location,
+    priority: parseInt(priority || '0', 10),
+    createdAt: now,
+    updatedAt: now,
+    markup: markup || '',
+  };
+
+  entries.push(entry);
+  await writeFile(filePath, serializeEntries(entries) + '\n', 'utf-8');
+
+  return [null, entry];
+};

package/server/utils/admin-global-content/deleteAdminGlobalContent.js

@@ -0,0 +1,34 @@
+import { readFile, writeFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import { ADMIN_GLOBAL_FILE, parseEntries, serializeEntries } from './helpers.js';
+
+export default async ({ adminDir, ids }) => {
+  if(!adminDir){
+    return [{ code: 400, msg: 'Admin directory is required' }, null];
+  }
+  if(!ids?.length){
+    return [{ code: 400, msg: 'No IDs specified' }, null];
+  }
+
+  const filePath = join(adminDir, ADMIN_GLOBAL_FILE);
+  if(!existsSync(filePath)){
+    return [{ code: 404, msg: 'Admin global content file not found' }, null];
+  }
+
+  const raw = await readFile(filePath, 'utf-8');
+  const entries = parseEntries(raw);
+  const idSet = new Set(ids);
+
+  for(const entry of entries){
+    if(!idSet.has(entry.id)) continue;
+    if(entry.locked){
+      return [{ code: 403, msg: `Cannot delete locked content: ${entry.name}` }, null];
+    }
+  }
+
+  const remaining = entries.filter(e => !idSet.has(e.id));
+  await writeFile(filePath, remaining.length ? serializeEntries(remaining) + '\n' : '', 'utf-8');
+
+  return [null, { success: true }];
+};

package/server/utils/admin-global-content/deleteAdminGlobalContentByOwner.js

@@ -0,0 +1,26 @@
+import { readFile, writeFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import { ADMIN_GLOBAL_FILE, parseEntries, serializeEntries } from './helpers.js';
+
+export default async ({ adminDir, owner }) => {
+  if(!adminDir){
+    return [{ code: 400, msg: 'Admin directory is required' }, null];
+  }
+  if(!owner){
+    return [{ code: 400, msg: 'Owner is required' }, null];
+  }
+
+  const filePath = join(adminDir, ADMIN_GLOBAL_FILE);
+  if(!existsSync(filePath)){
+    return [null, { success: true }];
+  }
+
+  const raw = await readFile(filePath, 'utf-8');
+  const entries = parseEntries(raw);
+  const remaining = entries.filter(e => e.owner !== owner);
+
+  await writeFile(filePath, remaining.length ? serializeEntries(remaining) + '\n' : '', 'utf-8');
+
+  return [null, { success: true }];
+};

package/server/utils/admin-global-content/disableAdminGlobalContent.js

@@ -0,0 +1,33 @@
+import { readFile, writeFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import { ADMIN_GLOBAL_FILE, parseEntries, serializeEntries } from './helpers.js';
+
+export default async ({ adminDir, id }) => {
+  if(!adminDir){
+    return [{ code: 400, msg: 'Admin directory is required' }, null];
+  }
+  if(!id){
+    return [{ code: 400, msg: 'Content ID is required' }, null];
+  }
+
+  const filePath = join(adminDir, ADMIN_GLOBAL_FILE);
+  if(!existsSync(filePath)){
+    return [{ code: 404, msg: 'Admin global content not found' }, null];
+  }
+
+  const raw = await readFile(filePath, 'utf-8');
+  const entries = parseEntries(raw);
+  const idx = entries.findIndex(e => e.id === id);
+
+  if(idx === -1){
+    return [{ code: 404, msg: 'Admin global content not found' }, null];
+  }
+
+  entries[idx].enabled = false;
+  entries[idx].updatedAt = new Date().toISOString();
+
+  await writeFile(filePath, serializeEntries(entries) + '\n', 'utf-8');
+
+  return [null, { id, enabled: false }];
+};

package/server/utils/admin-global-content/enableAdminGlobalContent.js

@@ -0,0 +1,33 @@
+import { readFile, writeFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import { ADMIN_GLOBAL_FILE, parseEntries, serializeEntries } from './helpers.js';
+
+export default async ({ adminDir, id }) => {
+  if(!adminDir){
+    return [{ code: 400, msg: 'Admin directory is required' }, null];
+  }
+  if(!id){
+    return [{ code: 400, msg: 'Content ID is required' }, null];
+  }
+
+  const filePath = join(adminDir, ADMIN_GLOBAL_FILE);
+  if(!existsSync(filePath)){
+    return [{ code: 404, msg: 'Admin global content not found' }, null];
+  }
+
+  const raw = await readFile(filePath, 'utf-8');
+  const entries = parseEntries(raw);
+  const idx = entries.findIndex(e => e.id === id);
+
+  if(idx === -1){
+    return [{ code: 404, msg: 'Admin global content not found' }, null];
+  }
+
+  entries[idx].enabled = true;
+  entries[idx].updatedAt = new Date().toISOString();
+
+  await writeFile(filePath, serializeEntries(entries) + '\n', 'utf-8');
+
+  return [null, { id, enabled: true }];
+};

package/server/utils/admin-global-content/getAdminGlobalContent.js

@@ -0,0 +1,28 @@
+import { readFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import { ADMIN_GLOBAL_FILE, parseEntries } from './helpers.js';
+
+export default async ({ adminDir, id }) => {
+  if(!adminDir){
+    return [{ code: 400, msg: 'Admin directory is required' }, null];
+  }
+  if(!id){
+    return [{ code: 400, msg: 'Content ID is required' }, null];
+  }
+
+  const filePath = join(adminDir, ADMIN_GLOBAL_FILE);
+  if(!existsSync(filePath)){
+    return [{ code: 404, msg: 'Admin global content not found' }, null];
+  }
+
+  const raw = await readFile(filePath, 'utf-8');
+  const entries = parseEntries(raw);
+  const entry = entries.find(e => e.id === id);
+
+  if(!entry){
+    return [{ code: 404, msg: 'Admin global content not found' }, null];
+  }
+
+  return [null, entry];
+};

package/server/utils/admin-global-content/helpers.js

@@ -0,0 +1,47 @@
+import { readFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+
+const ADMIN_GLOBAL_FILE = 'kempo-global.global.html';
+
+const parseEntries = raw => {
+  const entries = [];
+  const regex = /<content\s([^>]*)>([\s\S]*?)<\/content>/g;
+  let match;
+  while((match = regex.exec(raw)) !== null){
+    const attrs = {};
+    const attrRegex = /(\w[\w-]*)="([^"]*)"/g;
+    let a;
+    while((a = attrRegex.exec(match[1])) !== null) attrs[a[1]] = a[2];
+    entries.push({
+      id: attrs.id || '',
+      name: attrs.name || '',
+      owner: attrs.owner || 'custom',
+      locked: attrs.locked === 'true',
+      enabled: attrs.enabled !== 'false',
+      location: attrs.location || 'default',
+      priority: parseInt(attrs.priority || '0', 10),
+      createdAt: attrs.created || '',
+      updatedAt: attrs.updated || '',
+      markup: match[2].trim(),
+    });
+  }
+  return entries;
+};
+
+const serializeEntries = entries => entries.map(e => {
+  const attrs = [
+    `id="${e.id}"`,
+    `name="${e.name}"`,
+    `owner="${e.owner}"`,
+    `enabled="${e.enabled}"`,
+    `created="${e.createdAt}"`,
+    `updated="${e.updatedAt}"`,
+    `locked="${e.locked}"`,
+    `location="${e.location}"`,
+    `priority="${e.priority}"`,
+  ].join(' ');
+  return `<content ${attrs}>\n${e.markup}\n</content>`;
+}).join('\n');
+
+export { ADMIN_GLOBAL_FILE, parseEntries, serializeEntries };

package/server/utils/admin-global-content/listAdminGlobalContent.js

@@ -0,0 +1,20 @@
+import { readFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import { ADMIN_GLOBAL_FILE, parseEntries } from './helpers.js';
+
+export default async ({ adminDir }) => {
+  if(!adminDir){
+    return [{ code: 400, msg: 'Admin directory is required' }, null];
+  }
+
+  const filePath = join(adminDir, ADMIN_GLOBAL_FILE);
+  if(!existsSync(filePath)){
+    return [null, { entries: [], total: 0 }];
+  }
+
+  const raw = await readFile(filePath, 'utf-8');
+  const entries = parseEntries(raw);
+
+  return [null, { entries, total: entries.length }];
+};

package/server/utils/admin-global-content/updateAdminGlobalContent.js

@@ -0,0 +1,41 @@
+import { readFile, writeFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import { ADMIN_GLOBAL_FILE, parseEntries, serializeEntries } from './helpers.js';
+
+export default async ({ adminDir, id, name, location, priority, markup }) => {
+  if(!adminDir){
+    return [{ code: 400, msg: 'Admin directory is required' }, null];
+  }
+  if(!id){
+    return [{ code: 400, msg: 'Content ID is required' }, null];
+  }
+
+  const filePath = join(adminDir, ADMIN_GLOBAL_FILE);
+  if(!existsSync(filePath)){
+    return [{ code: 404, msg: 'Admin global content not found' }, null];
+  }
+
+  const raw = await readFile(filePath, 'utf-8');
+  const entries = parseEntries(raw);
+  const idx = entries.findIndex(e => e.id === id);
+
+  if(idx === -1){
+    return [{ code: 404, msg: 'Admin global content not found' }, null];
+  }
+
+  if(entries[idx].locked){
+    return [{ code: 403, msg: 'This content is locked and cannot be edited' }, null];
+  }
+
+  const now = new Date().toISOString();
+  if(name !== undefined) entries[idx].name = name;
+  if(location !== undefined) entries[idx].location = location;
+  if(priority !== undefined) entries[idx].priority = parseInt(priority, 10);
+  if(markup !== undefined) entries[idx].markup = markup;
+  entries[idx].updatedAt = now;
+
+  await writeFile(filePath, serializeEntries(entries) + '\n', 'utf-8');
+
+  return [null, { id, updatedAt: now }];
+};