nextjs-cms 0.9.22 → 0.9.24

package/dist/api/trpc/root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../../../src/api/trpc/root.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAsBvB,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAiBqxe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAA+1nB,CAAC;;;;;2BAA0E,CAAC;;;;;;2BAAgH,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAt4/B,CAAC;;;;;2BAAuE,CAAC;;;;;;2BAA6G,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAH1nH,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAA"}

package/dist/api/trpc/root.js

@@ -0,0 +1,47 @@
+import { privateProcedure, router } from './trpc.js';
+import { adminsRouter } from './routers/admins.js';
+import { hasItemsSectionRouter } from './routers/hasItemsSection.js';
+import { filesRouter } from './routers/files.js';
+import { authRouter } from './routers/auth.js';
+import { configRouter } from './routers/config.js';
+import { navRouter } from './routers/navigation.js';
+import { simpleSectionRouter } from './routers/simpleSection.js';
+import { categorySectionRouter } from './routers/categorySection.js';
+import { accountSettings } from './routers/accountSettings.js';
+import { galleryRouter } from './routers/gallery.js';
+import { logsRouter } from './routers/logs.js';
+import { fieldsRouter } from './routers/fields.js';
+import { getPluginRoutes } from '../../plugins/loader.js';
+import { z } from 'zod';
+import { getAdminPrivileges } from '../actions/privileges.js';
+const pluginsRouter = router({
+    checkRoute: privateProcedure
+        .input(z.object({
+        path: z.string(),
+    }))
+        .query(async ({ ctx, input }) => {
+        const routes = await getPluginRoutes();
+        const privilegeSet = await getAdminPrivileges(ctx.session.user.id);
+        const filteredRoutes = routes.filter(({ pluginName }) => privilegeSet.has(pluginName));
+        const plugin = filteredRoutes.find(({ path }) => path === input.path);
+        if (!plugin) {
+            return null;
+        }
+        return plugin;
+    }),
+});
+export const coreRouters = {
+    auth: authRouter,
+    admins: adminsRouter,
+    config: configRouter,
+    hasItemsSections: hasItemsSectionRouter,
+    simpleSections: simpleSectionRouter,
+    categorySections: categorySectionRouter,
+    files: filesRouter,
+    gallery: galleryRouter,
+    navigation: navRouter,
+    accountSettings: accountSettings,
+    fields: fieldsRouter,
+    logs: logsRouter,
+    plugins: pluginsRouter,
+};

package/dist/api/trpc/routers/accountSettings.d.ts

@@ -0,0 +1,66 @@
+import * as z from 'zod';
+export declare const accountSettings: import("@trpc/server").TRPCBuiltRouter<{
+    ctx: {
+        headers: Headers;
+        db: import("drizzle-orm/mysql2").MySql2Database<typeof import("../../../db/schema.js")> & {
+            $client: import("mysql2/promise").Pool;
+        };
+        session: import("../../../index.js").Session | null;
+    };
+    meta: object;
+    errorShape: {
+        data: {
+            zodError: z.core.$ZodFlattenedError<unknown, string> | null;
+            code: import("@trpc/server").TRPC_ERROR_CODE_KEY;
+            httpStatus: number;
+            path?: string;
+            stack?: string;
+        };
+        message: string;
+        code: import("@trpc/server").TRPC_ERROR_CODE_NUMBER;
+    };
+    transformer: true;
+}, import("@trpc/server").TRPCDecorateCreateRouterOptions<{
+    get: import("@trpc/server").TRPCQueryProcedure<{
+        input: void;
+        output: {
+            id: string;
+            username: string;
+            emailAddress: string | null;
+            fullName: string | null;
+            avatar: string | null;
+            phoneNumber: string | null;
+        } | undefined;
+        meta: object;
+    }>;
+    /**
+     * No avatar for now, if you want to include it, you have to use the api route,
+     *  because trpc doesn't support file uploads.
+     */
+    save: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            emailAddress: string;
+            fullName: string;
+            phoneNumber: string;
+        };
+        output: boolean;
+        meta: object;
+    }>;
+    changePassword: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            oldPassword: string;
+            newPassword: string;
+            confirmPassword: string;
+        };
+        output: boolean;
+        meta: object;
+    }>;
+    updateLanguage: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            language: string;
+        };
+        output: boolean;
+        meta: object;
+    }>;
+}>>;
+//# sourceMappingURL=accountSettings.d.ts.map

package/dist/api/trpc/routers/accountSettings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountSettings.d.ts","sourceRoot":"","sources":["../../../../src/api/trpc/routers/accountSettings.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAA;AAOxB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAkBxB;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;GAsML,CAAA"}

package/dist/api/trpc/routers/accountSettings.js

@@ -0,0 +1,200 @@
+import { privateProcedure, router } from '../trpc.js';
+import { db } from '../../../db/client.js';
+import { AdminsTable } from '../../../db/schema.js';
+import { eq } from 'drizzle-orm';
+import * as z from 'zod';
+import bcrypt from 'bcrypt';
+import { TRPCError } from '@trpc/server';
+import { getRequestMetadataFromHeaders, recordLog } from '../../../logging/index.js';
+import { getCMSConfig } from '../../../core/config/index.js';
+import getString from '../../../translations/index.js';
+export const accountSettings = router({
+    get: privateProcedure.query(async ({ ctx }) => {
+        const admin = await db
+            .select({
+            id: AdminsTable.id,
+            username: AdminsTable.user,
+            emailAddress: AdminsTable.emailAddress,
+            fullName: AdminsTable.fullName,
+            avatar: AdminsTable.coverphoto,
+            phoneNumber: AdminsTable.phoneNumber,
+        })
+            .from(AdminsTable)
+            .where(eq(AdminsTable.id, ctx.session.user.id))
+            .limit(1);
+        return admin[0];
+    }),
+    /**
+     * No avatar for now, if you want to include it, you have to use the api route,
+     *  because trpc doesn't support file uploads.
+     */
+    save: privateProcedure
+        .input(z.object({
+        emailAddress: z.string(),
+        fullName: z.string(),
+        phoneNumber: z.string(),
+    }))
+        .mutation(async ({ ctx, input }) => {
+        const requestMetadata = getRequestMetadataFromHeaders(ctx.headers);
+        const existing = await db
+            .select({
+            emailAddress: AdminsTable.emailAddress,
+            fullName: AdminsTable.fullName,
+            phoneNumber: AdminsTable.phoneNumber,
+            username: AdminsTable.user,
+        })
+            .from(AdminsTable)
+            .where(eq(AdminsTable.id, ctx.session.user.id))
+            .limit(1);
+        const admin = existing[0];
+        if (!admin) {
+            throw new TRPCError({
+                code: 'NOT_FOUND',
+                message: getString('adminNotFound', ctx.session.user.language),
+            });
+        }
+        const updates = {};
+        const changedFields = [];
+        if (admin.emailAddress !== input.emailAddress) {
+            updates.emailAddress = input.emailAddress;
+            changedFields.push('emailAddress');
+        }
+        if (admin.fullName !== input.fullName) {
+            updates.fullName = input.fullName;
+            changedFields.push('fullName');
+        }
+        if (admin.phoneNumber !== input.phoneNumber) {
+            updates.phoneNumber = input.phoneNumber;
+            changedFields.push('phoneNumber');
+        }
+        if (changedFields.length === 0) {
+            return true;
+        }
+        await db
+            .update(AdminsTable)
+            .set({
+            ...updates,
+        })
+            .where(eq(AdminsTable.id, ctx.session.user.id))
+            .execute();
+        await recordLog({
+            eventType: 'admin.settings.change',
+            actorId: ctx.session.user.id,
+            actorUsername: ctx.session.user.name ?? admin.username ?? null,
+            entityType: 'admin',
+            entityId: ctx.session.user.id,
+            entityLabel: admin.username ?? null,
+            sectionName: 'settings',
+            metadata: {
+                fields: changedFields,
+            },
+            requestMetadata,
+        });
+        return true;
+    }),
+    changePassword: privateProcedure
+        .input(z.object({
+        oldPassword: z.string(),
+        newPassword: z.string(),
+        confirmPassword: z.string(),
+    }))
+        .mutation(async ({ ctx, input }) => {
+        const requestMetadata = getRequestMetadataFromHeaders(ctx.headers);
+        /**
+         * Check if old password is correct
+         */
+        const result = await db
+            .select({
+            password: AdminsTable.pass,
+            username: AdminsTable.user,
+        })
+            .from(AdminsTable)
+            .where(eq(AdminsTable.id, ctx.session.user.id))
+            .limit(1);
+        const admin = result[0];
+        /**
+         * Check if admin exists
+         */
+        if (!admin) {
+            throw new TRPCError({
+                code: 'NOT_FOUND',
+                message: getString('adminNotFound', ctx.session.user.language),
+            });
+        }
+        /**
+         * Check password with bcrypt
+         */
+        const match = await bcrypt.compare(input.oldPassword, admin.password);
+        if (!match) {
+            throw new TRPCError({
+                code: 'UNAUTHORIZED',
+                message: getString('oldPasswordIncorrect', ctx.session.user.language),
+            });
+        }
+        /**
+         * Check if new password and confirm password are the same
+         */
+        if (input.newPassword !== input.confirmPassword) {
+            throw new TRPCError({
+                code: 'BAD_REQUEST',
+                message: getString('passwordsDoNotMatch', ctx.session.user.language),
+            });
+        }
+        /**
+         * Hash new password
+         */
+        const hashedPassword = await bcrypt.hash(input.newPassword, 10);
+        /**
+         * Update password
+         */
+        await db
+            .update(AdminsTable)
+            .set({
+            pass: hashedPassword,
+        })
+            .where(eq(AdminsTable.id, ctx.session.user.id))
+            .execute();
+        await recordLog({
+            eventType: 'admin.settings.change',
+            actorId: ctx.session.user.id,
+            actorUsername: ctx.session.user.name ?? admin.username ?? null,
+            entityType: 'admin',
+            entityId: ctx.session.user.id,
+            entityLabel: admin.username ?? null,
+            sectionName: 'settings',
+            metadata: {
+                fields: ['password'],
+            },
+            requestMetadata,
+        });
+        return true;
+    }),
+    updateLanguage: privateProcedure.input(z.object({ language: z.string() })).mutation(async ({ ctx, input }) => {
+        const requestMetadata = getRequestMetadataFromHeaders(ctx.headers);
+        const config = await getCMSConfig();
+        const supported = new Set(config.i18n.supportedLanguages);
+        if (!supported.has(input.language)) {
+            throw new TRPCError({
+                code: 'BAD_REQUEST',
+                message: getString('languageNotSupported', ctx.session.user.language),
+            });
+        }
+        await db
+            .update(AdminsTable)
+            .set({ language: input.language })
+            .where(eq(AdminsTable.id, ctx.session.user.id))
+            .execute();
+        await recordLog({
+            eventType: 'admin.settings.change',
+            actorId: ctx.session.user.id,
+            actorUsername: ctx.session.user.name ?? null,
+            entityType: 'admin',
+            entityId: ctx.session.user.id,
+            entityLabel: ctx.session.user.name ?? null,
+            sectionName: 'settings',
+            metadata: { fields: ['language'], language: input.language },
+            requestMetadata,
+        });
+        return true;
+    }),
+});

package/dist/api/trpc/routers/admins.d.ts

@@ -0,0 +1,112 @@
+import * as z from 'zod';
+export declare const adminsRouter: import("@trpc/server").TRPCBuiltRouter<{
+    ctx: {
+        headers: Headers;
+        db: import("drizzle-orm/mysql2").MySql2Database<typeof import("../../../db/schema.js")> & {
+            $client: import("mysql2/promise").Pool;
+        };
+        session: import("../../../index.js").Session | null;
+    };
+    meta: object;
+    errorShape: {
+        data: {
+            zodError: z.core.$ZodFlattenedError<unknown, string> | null;
+            code: import("@trpc/server").TRPC_ERROR_CODE_KEY;
+            httpStatus: number;
+            path?: string;
+            stack?: string;
+        };
+        message: string;
+        code: import("@trpc/server").TRPC_ERROR_CODE_NUMBER;
+    };
+    transformer: true;
+}, import("@trpc/server").TRPCDecorateCreateRouterOptions<{
+    list: import("@trpc/server").TRPCQueryProcedure<{
+        input: void;
+        output: {
+            error: {
+                message: string;
+            };
+            admins?: undefined;
+            privileges?: undefined;
+        } | {
+            admins: {
+                id: string;
+                username: string;
+                avatar: string | null;
+                roles: {
+                    operations: "C" | "U" | "D" | "CU" | "CD" | "UD" | "CUD";
+                    publisher: boolean | null;
+                    sectionName: string;
+                }[];
+            }[];
+            privileges: {
+                title: string;
+                order: number;
+                sectionType: string;
+                sectionName: string;
+            }[];
+            error?: undefined;
+        };
+        meta: object;
+    }>;
+    get: import("@trpc/server").TRPCQueryProcedure<{
+        input: string;
+        output: {
+            admin: {
+                id: string;
+                user: string;
+            };
+            adminRoles: {
+                sectionName: string;
+                operations: "C" | "U" | "D" | "CU" | "CD" | "UD" | "CUD";
+                publisher: boolean | null;
+            }[];
+            allRoles: {
+                title: string;
+                order: number;
+                sectionType: string;
+                sectionName: string;
+            }[];
+        };
+        meta: object;
+    }>;
+    create: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            username: string;
+            password: string;
+            privileges: {
+                sectionName: string;
+                publisher: boolean | null;
+                operations: string;
+            }[];
+        };
+        output: {
+            status: string;
+            id: string;
+        };
+        meta: object;
+    }>;
+    update: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            id: string;
+            privileges: {
+                sectionName: string;
+                publisher: boolean | null;
+                operations: string;
+            }[];
+        };
+        output: {
+            status: string;
+        };
+        meta: object;
+    }>;
+    remove: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            id: string;
+        };
+        output: boolean;
+        meta: object;
+    }>;
+}>>;
+//# sourceMappingURL=admins.d.ts.map

package/dist/api/trpc/routers/admins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admins.d.ts","sourceRoot":"","sources":["../../../../src/api/trpc/routers/admins.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAA;AAcxB,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmWvB,CAAA"}