nextly 0.0.1 → 0.0.2-alpha.0

package/dist/migrations/mysql/0010_site_settings_sidebar.sql

@@ -0,0 +1,13 @@
+-- Migration: Add sidebar customization columns to site_settings
+
+-- UP
+
+ALTER TABLE `site_settings` ADD COLUMN `logo_url_dark` varchar(2048);
+ALTER TABLE `site_settings` ADD COLUMN `custom_sidebar_groups` text;
+ALTER TABLE `site_settings` ADD COLUMN `plugin_placements` text;
+
+-- DOWN
+
+ALTER TABLE `site_settings` DROP COLUMN `plugin_placements`;
+ALTER TABLE `site_settings` DROP COLUMN `custom_sidebar_groups`;
+ALTER TABLE `site_settings` DROP COLUMN `logo_url_dark`;

package/dist/migrations/mysql/0011_missing_tables_and_columns.sql

@@ -0,0 +1,54 @@
+-- Migration 0011: Add missing tables and columns to bring MySQL schema up to date.
+--
+-- This migration fills gaps that existed because the MySQL base migration
+-- (0000_eager_sentry.sql) was generated from an older Drizzle schema snapshot
+-- that predated dynamic_collections and the users.is_active/created_at/updated_at
+-- columns. PostgreSQL didn't have this gap because pushSchema() worked there
+-- and created all tables from the live schema definition.
+--
+-- See findings/task-2-mysql-code-first-migration-gaps.md for the investigation.
+
+-- 1. Add missing columns to `users` table
+ALTER TABLE `users` ADD COLUMN `is_active` boolean NOT NULL DEFAULT false;
+ALTER TABLE `users` ADD COLUMN `created_at` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP;
+ALTER TABLE `users` ADD COLUMN `updated_at` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP;
+
+-- 2. Create `dynamic_collections` table (matches the Drizzle schema in mysql.ts)
+CREATE TABLE IF NOT EXISTS `dynamic_collections` (
+  `id` varchar(191) NOT NULL,
+  `slug` varchar(100) NOT NULL,
+  `table_name` varchar(255) NOT NULL,
+  `description` text,
+  `labels` json NOT NULL,
+  `fields` json NOT NULL,
+  `timestamps` boolean NOT NULL DEFAULT true,
+  `admin` json,
+  `source` varchar(20) NOT NULL DEFAULT 'ui',
+  `locked` boolean NOT NULL DEFAULT false,
+  `config_path` varchar(500),
+  `schema_hash` varchar(64) NOT NULL,
+  `schema_version` int NOT NULL DEFAULT 1,
+  `migration_status` varchar(20) NOT NULL DEFAULT 'pending',
+  `last_migration_id` varchar(100),
+  `access_rules` json,
+  `hooks` json,
+  `created_by` varchar(191),
+  `created_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  CONSTRAINT `dynamic_collections_id` PRIMARY KEY(`id`),
+  CONSTRAINT `dynamic_collections_slug_unique` UNIQUE(`slug`),
+  CONSTRAINT `dynamic_collections_table_name_unique` UNIQUE(`table_name`)
+);
+
+CREATE INDEX `dynamic_collections_source_idx` ON `dynamic_collections` (`source`);
+CREATE INDEX `dynamic_collections_created_at_idx` ON `dynamic_collections` (`created_at`);
+CREATE INDEX `dynamic_collections_updated_at_idx` ON `dynamic_collections` (`updated_at`);
+
+-- 3. Create `system_migrations` tracking table if it doesn't exist
+-- (this table tracks which migrations have been applied)
+CREATE TABLE IF NOT EXISTS `system_migrations` (
+  `id` int NOT NULL AUTO_INCREMENT,
+  `name` varchar(255) NOT NULL,
+  `run_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT `system_migrations_id` PRIMARY KEY(`id`)
+);

package/dist/migrations/mysql/0012_image_sizes_and_focal_point.sql

@@ -0,0 +1,30 @@
+-- Migration: Add image_sizes table and focal point / sizes columns to media (MySQL)
+
+-- UP
+
+CREATE TABLE IF NOT EXISTS `image_sizes` (
+	`id` varchar(36) NOT NULL,
+	`name` varchar(50) NOT NULL,
+	`width` int,
+	`height` int,
+	`fit` varchar(20) NOT NULL DEFAULT 'inside',
+	`quality` int NOT NULL DEFAULT 80,
+	`format` varchar(10) NOT NULL DEFAULT 'auto',
+	`is_default` boolean NOT NULL DEFAULT true,
+	`sort_order` int NOT NULL DEFAULT 0,
+	`created_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,
+	`updated_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,
+	PRIMARY KEY (`id`),
+	UNIQUE KEY `image_sizes_name_unique` (`name`)
+);
+
+ALTER TABLE `media` ADD COLUMN `focal_x` int;
+ALTER TABLE `media` ADD COLUMN `focal_y` int;
+ALTER TABLE `media` ADD COLUMN `sizes` json;
+
+-- DOWN
+
+ALTER TABLE `media` DROP COLUMN `sizes`;
+ALTER TABLE `media` DROP COLUMN `focal_y`;
+ALTER TABLE `media` DROP COLUMN `focal_x`;
+DROP TABLE IF EXISTS `image_sizes`;

package/dist/migrations/mysql/0012_media_folders.sql

@@ -0,0 +1,43 @@
+-- Migration 0012: Add media folder support for MySQL.
+--
+-- Adds media_folders hierarchy and media.folder_id linkage so folder APIs
+-- work consistently across PostgreSQL/MySQL/SQLite.
+
+CREATE TABLE IF NOT EXISTS `media_folders` (
+  `id` varchar(255) NOT NULL,
+  `name` varchar(255) NOT NULL,
+  `description` text,
+  `parent_id` varchar(255),
+  `created_by` varchar(191) NOT NULL,
+  `created_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  CONSTRAINT `media_folders_id` PRIMARY KEY(`id`)
+);
+--> statement-breakpoint
+
+ALTER TABLE `media_folders`
+  ADD CONSTRAINT `media_folders_parent_id_media_folders_id_fk`
+  FOREIGN KEY (`parent_id`) REFERENCES `media_folders`(`id`) ON DELETE cascade ON UPDATE no action;
+--> statement-breakpoint
+
+ALTER TABLE `media_folders`
+  ADD CONSTRAINT `media_folders_created_by_users_id_fk`
+  FOREIGN KEY (`created_by`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;
+--> statement-breakpoint
+
+CREATE INDEX `media_folders_parent_id_idx` ON `media_folders` (`parent_id`);
+--> statement-breakpoint
+CREATE INDEX `media_folders_created_by_idx` ON `media_folders` (`created_by`);
+--> statement-breakpoint
+CREATE INDEX `media_folders_created_at_idx` ON `media_folders` (`created_at`);
+--> statement-breakpoint
+
+ALTER TABLE `media` ADD COLUMN `folder_id` varchar(255);
+--> statement-breakpoint
+
+ALTER TABLE `media`
+  ADD CONSTRAINT `media_folder_id_media_folders_id_fk`
+  FOREIGN KEY (`folder_id`) REFERENCES `media_folders`(`id`) ON DELETE set null ON UPDATE no action;
+--> statement-breakpoint
+
+CREATE INDEX `media_folder_id_idx` ON `media` (`folder_id`);

package/dist/migrations/mysql/0013_user_brute_force_protection.sql

@@ -0,0 +1,31 @@
+-- Migration: Custom auth schema additions
+-- Adds brute-force protection columns to users and creates refresh_tokens table.
+-- These were added to the Drizzle schema when custom JWT auth replaced Auth.js
+-- but never got corresponding migration SQL.
+
+-- UP
+
+ALTER TABLE `users` ADD COLUMN `failed_login_attempts` int NOT NULL DEFAULT 0;
+ALTER TABLE `users` ADD COLUMN `locked_until` datetime;
+
+CREATE TABLE IF NOT EXISTS `refresh_tokens` (
+  `id` varchar(191) NOT NULL,
+  `user_id` varchar(191) NOT NULL,
+  `token_hash` varchar(64) NOT NULL,
+  `user_agent` text,
+  `ip_address` varchar(45),
+  `expires_at` datetime NOT NULL,
+  `created_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT `refresh_tokens_id` PRIMARY KEY(`id`),
+  CONSTRAINT `refresh_tokens_user_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE CASCADE
+);
+
+CREATE INDEX `refresh_tokens_token_hash_idx` ON `refresh_tokens` (`token_hash`);
+CREATE INDEX `refresh_tokens_user_id_idx` ON `refresh_tokens` (`user_id`);
+CREATE INDEX `refresh_tokens_expires_at_idx` ON `refresh_tokens` (`expires_at`);
+
+-- DOWN
+
+DROP TABLE IF EXISTS `refresh_tokens`;
+ALTER TABLE `users` DROP COLUMN `locked_until`;
+ALTER TABLE `users` DROP COLUMN `failed_login_attempts`;

package/dist/migrations/mysql/0014_email_template_attachments.sql

@@ -0,0 +1,12 @@
+-- Migration: Email template default attachments
+-- Adds a nullable `attachments` JSON column to email_templates so that
+-- templates can carry default media-library attachments that are merged
+-- with per-send attachments at send time.
+
+-- UP
+
+ALTER TABLE `email_templates` ADD COLUMN `attachments` json;
+
+-- DOWN
+
+ALTER TABLE `email_templates` DROP COLUMN `attachments`;

package/dist/migrations/mysql/0015_media_uploaded_by_nullable.sql

@@ -0,0 +1,15 @@
+-- Migration: Make media.uploaded_by nullable
+-- CLI seeds, data imports, and other system-context uploads may not have a
+-- user to attribute the upload to. Dropping NOT NULL lets these operations
+-- record media without a synthetic "anonymous" user sentinel (which doesn't
+-- exist as a row and broke the foreign-key constraint).
+
+-- UP
+
+ALTER TABLE `media` MODIFY COLUMN `uploaded_by` varchar(255) NULL;
+
+-- DOWN
+-- Restore NOT NULL. Rows with NULL uploaded_by must be backfilled before
+-- running DOWN.
+
+ALTER TABLE `media` MODIFY COLUMN `uploaded_by` varchar(255) NOT NULL;

package/dist/migrations/mysql/20260429_000000_000_initial_journal.sql

@@ -0,0 +1,22 @@
+-- Migration: initial_journal
+-- Generated at: 2026-04-29T00:00:00.000Z
+-- Dialect: MySQL
+-- Source: F11 (file-based migration ledger). Bundled with the nextly package
+-- so fresh production databases get the table on first `nextly migrate`.
+-- Synthetic 000000_000 time component so this bundled file sorts BEFORE
+-- any user-generated migration created on the same date.
+
+-- UP
+
+CREATE TABLE IF NOT EXISTS `nextly_migrations` (
+  `id`           VARCHAR(36) PRIMARY KEY,
+  `filename`     VARCHAR(512) NOT NULL UNIQUE,
+  `sha256`       CHAR(64) NOT NULL,
+  `applied_at`   DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `applied_by`   VARCHAR(255),
+  `duration_ms`  INTEGER,
+  `status`       VARCHAR(20) NOT NULL CHECK (`status` IN ('applied', 'failed')),
+  `error_json`   JSON,
+  `rollback_sql` TEXT,
+  INDEX `nextly_migrations_applied_at_idx` (`applied_at`)
+);

package/dist/migrations/mysql/20260501_000000_journal_batch.sql

@@ -0,0 +1,17 @@
+-- Migration: journal_batch
+-- Generated at: 2026-05-01T00:00:00.000Z
+-- Dialect: MySQL
+-- Source: Phase 5 (Task 24). Adds the `batch` sentinel column to
+-- nextly_migration_journal so audit queries can distinguish HMR/dev
+-- pushes (batch < 0) from production migrations (batch >= 0). The
+-- pipeline sets -1 for source="code" and leaves the default 0 for
+-- everything else. Synthetic 000000_000 time component sorts this
+-- file before any user-generated migration on the same date.
+
+-- UP
+
+ALTER TABLE `nextly_migration_journal` ADD COLUMN `batch` INT NOT NULL DEFAULT 0;
+
+-- DOWN
+
+ALTER TABLE `nextly_migration_journal` DROP COLUMN `batch`;

package/dist/migrations/mysql/20260501_000001_audit_log.sql

@@ -0,0 +1,24 @@
+-- Append-only event store for security-sensitive auth events.
+-- See packages/nextly/src/domains/audit/ for the writer service.
+
+-- UP
+
+CREATE TABLE IF NOT EXISTS `audit_log` (
+  `id` varchar(191) PRIMARY KEY NOT NULL,
+  `kind` varchar(64) NOT NULL,
+  `actor_user_id` varchar(191),
+  `target_user_id` varchar(191),
+  `ip_address` varchar(45),
+  `user_agent` text,
+  `metadata` json,
+  `created_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX `audit_log_kind_idx` ON `audit_log` (`kind`);
+CREATE INDEX `audit_log_actor_user_id_idx` ON `audit_log` (`actor_user_id`);
+CREATE INDEX `audit_log_target_user_id_idx` ON `audit_log` (`target_user_id`);
+CREATE INDEX `audit_log_created_at_idx` ON `audit_log` (`created_at`);
+
+-- DOWN
+
+DROP TABLE IF EXISTS `audit_log`;

package/dist/migrations/mysql/20260504_000000_nextly_meta.sql

@@ -0,0 +1,21 @@
+-- Migration: nextly_meta runtime flags table
+-- Generated at: 2026-05-04T00:00:00.000Z
+-- Dialect: MySQL
+-- Source: Sub-task 2A — dashboard seeding card.
+-- A small key/value/timestamp store for runtime state that doesn't belong
+-- in collection schemas (first consumer: seed.completedAt / seed.skippedAt
+-- flags read by the admin dashboard's SeedDemoContentCard).
+
+-- UP
+
+CREATE TABLE IF NOT EXISTS `nextly_meta` (
+  `key`        varchar(191) PRIMARY KEY NOT NULL,
+  `value`      json,
+  `updated_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX `nextly_meta_updated_at_idx` ON `nextly_meta` (`updated_at`);
+
+-- DOWN
+
+DROP TABLE IF EXISTS `nextly_meta`;