nextly 0.0.1 → 0.0.2-alpha.1

package/dist/migrations/postgresql/0014_image_sizes_and_focal_point.sql

@@ -0,0 +1,33 @@
+-- Migration: Add image_sizes table and focal point / sizes columns to media
+-- Supports named image sizes (like Payload/WordPress) and crop point for smart cropping.
+-- Image sizes can be configured via code (nextly.config.ts) or admin UI (Settings).
+
+-- UP
+
+CREATE TABLE IF NOT EXISTS "image_sizes" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" varchar(50) NOT NULL,
+	"width" integer,
+	"height" integer,
+	"fit" varchar(20) NOT NULL DEFAULT 'inside',
+	"quality" integer NOT NULL DEFAULT 80,
+	"format" varchar(10) NOT NULL DEFAULT 'auto',
+	"is_default" boolean NOT NULL DEFAULT true,
+	"sort_order" integer NOT NULL DEFAULT 0,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "image_sizes_name_unique" ON "image_sizes" USING btree ("name");
+
+ALTER TABLE "media" ADD COLUMN IF NOT EXISTS "focal_x" integer;
+ALTER TABLE "media" ADD COLUMN IF NOT EXISTS "focal_y" integer;
+ALTER TABLE "media" ADD COLUMN IF NOT EXISTS "sizes" jsonb;
+
+-- DOWN
+
+ALTER TABLE "media" DROP COLUMN IF EXISTS "sizes";
+ALTER TABLE "media" DROP COLUMN IF EXISTS "focal_y";
+ALTER TABLE "media" DROP COLUMN IF EXISTS "focal_x";
+DROP INDEX IF EXISTS "image_sizes_name_unique";
+DROP TABLE IF EXISTS "image_sizes";

package/dist/migrations/postgresql/0014_site_settings_sidebar.sql

@@ -0,0 +1,13 @@
+-- Migration: Add sidebar customization columns to site_settings
+
+-- UP
+
+ALTER TABLE "site_settings" ADD COLUMN IF NOT EXISTS "logo_url_dark" varchar(2048);
+ALTER TABLE "site_settings" ADD COLUMN IF NOT EXISTS "custom_sidebar_groups" text;
+ALTER TABLE "site_settings" ADD COLUMN IF NOT EXISTS "plugin_placements" text;
+
+-- DOWN
+
+ALTER TABLE "site_settings" DROP COLUMN IF EXISTS "plugin_placements";
+ALTER TABLE "site_settings" DROP COLUMN IF EXISTS "custom_sidebar_groups";
+ALTER TABLE "site_settings" DROP COLUMN IF EXISTS "logo_url_dark";

package/dist/migrations/postgresql/0015_user_brute_force_protection.sql

@@ -0,0 +1,29 @@
+-- Migration: Custom auth schema additions
+-- Adds brute-force protection columns to users and creates refresh_tokens table.
+-- These were added to the Drizzle schema when custom JWT auth replaced Auth.js
+-- but never got corresponding migration SQL.
+
+-- UP
+
+ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "failed_login_attempts" integer NOT NULL DEFAULT 0;
+ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "locked_until" timestamp;
+
+CREATE TABLE IF NOT EXISTS "refresh_tokens" (
+  "id" text PRIMARY KEY NOT NULL,
+  "user_id" text NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
+  "token_hash" varchar(64) NOT NULL,
+  "user_agent" text,
+  "ip_address" varchar(45),
+  "expires_at" timestamp NOT NULL,
+  "created_at" timestamp NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS "refresh_tokens_token_hash_idx" ON "refresh_tokens" ("token_hash");
+CREATE INDEX IF NOT EXISTS "refresh_tokens_user_id_idx" ON "refresh_tokens" ("user_id");
+CREATE INDEX IF NOT EXISTS "refresh_tokens_expires_at_idx" ON "refresh_tokens" ("expires_at");
+
+-- DOWN
+
+DROP TABLE IF EXISTS "refresh_tokens";
+ALTER TABLE "users" DROP COLUMN IF EXISTS "locked_until";
+ALTER TABLE "users" DROP COLUMN IF EXISTS "failed_login_attempts";

package/dist/migrations/postgresql/0016_email_template_attachments.sql

@@ -0,0 +1,12 @@
+-- Migration: Email template default attachments
+-- Adds a nullable `attachments` JSONB column to email_templates so that
+-- templates can carry default media-library attachments that are merged
+-- with per-send attachments at send time.
+
+-- UP
+
+ALTER TABLE "email_templates" ADD COLUMN IF NOT EXISTS "attachments" jsonb;
+
+-- DOWN
+
+ALTER TABLE "email_templates" DROP COLUMN IF EXISTS "attachments";

package/dist/migrations/postgresql/0017_media_uploaded_by_nullable.sql

@@ -0,0 +1,15 @@
+-- Migration: Make media.uploaded_by nullable
+-- CLI seeds, data imports, and other system-context uploads may not have a
+-- user to attribute the upload to. Dropping NOT NULL lets these operations
+-- record media without a synthetic "anonymous" user sentinel (which doesn't
+-- exist as a row and broke the foreign-key constraint).
+
+-- UP
+
+ALTER TABLE "media" ALTER COLUMN "uploaded_by" DROP NOT NULL;
+
+-- DOWN
+-- Restore NOT NULL. Rows with NULL uploaded_by must be backfilled before
+-- running DOWN; ALTER ... SET NOT NULL fails if any nulls exist.
+
+ALTER TABLE "media" ALTER COLUMN "uploaded_by" SET NOT NULL;

package/dist/migrations/postgresql/20260429_000000_000_initial_journal.sql

@@ -0,0 +1,24 @@
+-- Migration: initial_journal
+-- Generated at: 2026-04-29T00:00:00.000Z
+-- Dialect: PostgreSQL
+-- Source: F11 (file-based migration ledger). Bundled with the nextly package
+-- so fresh production databases get the table on first `nextly migrate`.
+-- Synthetic 000000_000 time component so this bundled file sorts BEFORE
+-- any user-generated migration created on the same date.
+
+-- UP
+
+CREATE TABLE IF NOT EXISTS "nextly_migrations" (
+  "id"           UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  "filename"     TEXT NOT NULL UNIQUE,
+  "sha256"       CHAR(64) NOT NULL,
+  "applied_at"   TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  "applied_by"   TEXT,
+  "duration_ms"  INTEGER,
+  "status"       TEXT NOT NULL CHECK ("status" IN ('applied', 'failed')),
+  "error_json"   JSONB,
+  "rollback_sql" TEXT
+);
+
+CREATE INDEX IF NOT EXISTS "nextly_migrations_applied_at_idx"
+  ON "nextly_migrations" ("applied_at");

package/dist/migrations/postgresql/20260501_000000_journal_batch.sql

@@ -0,0 +1,17 @@
+-- Migration: journal_batch
+-- Generated at: 2026-05-01T00:00:00.000Z
+-- Dialect: PostgreSQL
+-- Source: Phase 5 (Task 24). Adds the `batch` sentinel column to
+-- nextly_migration_journal so audit queries can distinguish HMR/dev
+-- pushes (batch < 0) from production migrations (batch >= 0). The
+-- pipeline sets -1 for source="code" and leaves the default 0 for
+-- everything else. Synthetic 000000_000 time component sorts this
+-- file before any user-generated migration on the same date.
+
+-- UP
+
+ALTER TABLE "nextly_migration_journal" ADD COLUMN "batch" integer NOT NULL DEFAULT 0;
+
+-- DOWN
+
+ALTER TABLE "nextly_migration_journal" DROP COLUMN IF EXISTS "batch";

package/dist/migrations/postgresql/20260501_000001_audit_log.sql

@@ -0,0 +1,24 @@
+-- Append-only event store for security-sensitive auth events.
+-- See packages/nextly/src/domains/audit/ for the writer service.
+
+-- UP
+
+CREATE TABLE IF NOT EXISTS "audit_log" (
+  "id" text PRIMARY KEY NOT NULL,
+  "kind" varchar(64) NOT NULL,
+  "actor_user_id" text,
+  "target_user_id" text,
+  "ip_address" varchar(45),
+  "user_agent" text,
+  "metadata" jsonb,
+  "created_at" timestamp NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS "audit_log_kind_idx" ON "audit_log" ("kind");
+CREATE INDEX IF NOT EXISTS "audit_log_actor_user_id_idx" ON "audit_log" ("actor_user_id");
+CREATE INDEX IF NOT EXISTS "audit_log_target_user_id_idx" ON "audit_log" ("target_user_id");
+CREATE INDEX IF NOT EXISTS "audit_log_created_at_idx" ON "audit_log" ("created_at");
+
+-- DOWN
+
+DROP TABLE IF EXISTS "audit_log";

package/dist/migrations/postgresql/20260504_000000_nextly_meta.sql

@@ -0,0 +1,22 @@
+-- Migration: nextly_meta runtime flags table
+-- Generated at: 2026-05-04T00:00:00.000Z
+-- Dialect: PostgreSQL
+-- Source: Sub-task 2A — dashboard seeding card.
+-- A small key/value/timestamp store for runtime state that doesn't belong
+-- in collection schemas (first consumer: seed.completedAt / seed.skippedAt
+-- flags read by the admin dashboard's SeedDemoContentCard).
+
+-- UP
+
+CREATE TABLE IF NOT EXISTS "nextly_meta" (
+  "key"        TEXT PRIMARY KEY NOT NULL,
+  "value"      JSONB,
+  "updated_at" TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS "nextly_meta_updated_at_idx"
+  ON "nextly_meta" ("updated_at");
+
+-- DOWN
+
+DROP TABLE IF EXISTS "nextly_meta";