digitalafarin-cms 0.2.1__py3-none-any.whl

digitalafarin_cms/__init__.py

@@ -0,0 +1,20 @@
+"""DigitalAfarin Headless CMS + SEO for Django/DRF."""
+
+__version__ = "0.2.1"
+
+DJANGO_APPS = (
+    "digitalafarin_cms.apps.common",
+    "digitalafarin_cms.apps.sites",
+    "digitalafarin_cms.apps.content",
+    "digitalafarin_cms.apps.seo",
+    "digitalafarin_cms.apps.media_library",
+    "digitalafarin_cms.apps.audit",
+    "digitalafarin_cms.apps.integrations",
+)
+
+REQUIRED_DJANGO_APPS = (
+    "rest_framework",
+    "django_filters",
+)
+
+ALL_DJANGO_APPS = REQUIRED_DJANGO_APPS + DJANGO_APPS

digitalafarin_cms/apps/audit/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+from .models import AuditRun, AuditIssue
+admin.site.register([AuditRun,AuditIssue])

digitalafarin_cms/apps/audit/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+class AuditConfig(AppConfig):
+    default_auto_field="django.db.models.BigAutoField"
+    name="digitalafarin_cms.apps.audit"
+    label = "digitalafarin_cms_audit"

digitalafarin_cms/apps/audit/migrations/0001_initial.py

@@ -0,0 +1,11 @@
+import uuid
+from django.db import migrations, models
+import django.db.models.deletion
+
+class Migration(migrations.Migration):
+    initial=True
+    dependencies=[("digitalafarin_cms_sites","0001_initial")]
+    operations=[
+        migrations.CreateModel(name="AuditRun",fields=[("id",models.UUIDField(default=uuid.uuid4,editable=False,primary_key=True,serialize=False)),("created_at",models.DateTimeField(auto_now_add=True)),("updated_at",models.DateTimeField(auto_now=True)),("status",models.CharField(choices=[("queued","Queued"),("running","Running"),("done","Done"),("failed","Failed")],default="queued",max_length=20)),("started_at",models.DateTimeField(blank=True,null=True)),("finished_at",models.DateTimeField(blank=True,null=True)),("pages_crawled",models.PositiveIntegerField(default=0)),("health_score",models.PositiveSmallIntegerField(default=0)),("summary",models.JSONField(blank=True,default=dict)),("site",models.ForeignKey(on_delete=django.db.models.deletion.CASCADE,related_name="audit_runs",to="digitalafarin_cms_sites.site"))]),
+        migrations.CreateModel(name="AuditIssue",fields=[("id",models.UUIDField(default=uuid.uuid4,editable=False,primary_key=True,serialize=False)),("created_at",models.DateTimeField(auto_now_add=True)),("updated_at",models.DateTimeField(auto_now=True)),("url",models.URLField(max_length=1000)),("code",models.CharField(max_length=80)),("severity",models.CharField(choices=[("error","Error"),("warning","Warning"),("notice","Notice")],max_length=20)),("title",models.CharField(max_length=255)),("details",models.JSONField(blank=True,default=dict)),("is_resolved",models.BooleanField(default=False)),("run",models.ForeignKey(on_delete=django.db.models.deletion.CASCADE,related_name="issues",to="digitalafarin_cms_audit.auditrun"))])
+    ]

digitalafarin_cms/apps/audit/models.py

@@ -0,0 +1,23 @@
+from django.db import models
+from digitalafarin_cms.apps.common.models import UUIDTimeStampedModel
+from digitalafarin_cms.apps.sites.models import Site
+
+class AuditRun(UUIDTimeStampedModel):
+    class Status(models.TextChoices): QUEUED="queued","Queued"; RUNNING="running","Running"; DONE="done","Done"; FAILED="failed","Failed"
+    site=models.ForeignKey(Site,on_delete=models.CASCADE,related_name="audit_runs")
+    status=models.CharField(max_length=20,choices=Status.choices,default=Status.QUEUED)
+    started_at=models.DateTimeField(null=True,blank=True)
+    finished_at=models.DateTimeField(null=True,blank=True)
+    pages_crawled=models.PositiveIntegerField(default=0)
+    health_score=models.PositiveSmallIntegerField(default=0)
+    summary=models.JSONField(default=dict,blank=True)
+
+class AuditIssue(UUIDTimeStampedModel):
+    class Severity(models.TextChoices): ERROR="error","Error"; WARNING="warning","Warning"; NOTICE="notice","Notice"
+    run=models.ForeignKey(AuditRun,on_delete=models.CASCADE,related_name="issues")
+    url=models.URLField(max_length=1000)
+    code=models.CharField(max_length=80)
+    severity=models.CharField(max_length=20,choices=Severity.choices)
+    title=models.CharField(max_length=255)
+    details=models.JSONField(default=dict,blank=True)
+    is_resolved=models.BooleanField(default=False)

digitalafarin_cms/apps/audit/serializers.py

@@ -0,0 +1,7 @@
+from rest_framework import serializers
+from .models import AuditRun, AuditIssue
+class AuditRunSerializer(serializers.ModelSerializer):
+    issue_count=serializers.IntegerField(source="issues.count",read_only=True)
+    class Meta: model=AuditRun; fields="__all__"
+class AuditIssueSerializer(serializers.ModelSerializer):
+    class Meta: model=AuditIssue; fields="__all__"

digitalafarin_cms/apps/audit/tasks.py

@@ -0,0 +1,20 @@
+from celery import shared_task
+from django.utils import timezone
+from .models import AuditRun
+
+@shared_task
+def run_audit(audit_run_id):
+    run=AuditRun.objects.get(id=audit_run_id)
+    run.status=AuditRun.Status.RUNNING; run.started_at=timezone.now(); run.save(update_fields=["status","started_at","updated_at"])
+    # V1 worker foundation: advanced HTTP crawling is intentionally a separate expansion module.
+    entries=run.site.entries.filter(status="published")
+    issues=[]
+    for entry in entries:
+        if not hasattr(entry,"seo_meta"):
+            issues.append({"url":f"https://{run.site.domain}{entry.path}","code":"missing_seo_meta","severity":"warning","title":"Missing SEO metadata"})
+    from .models import AuditIssue
+    AuditIssue.objects.bulk_create([AuditIssue(run=run,**x) for x in issues])
+    count=entries.count(); score=max(0,100-min(100,len(issues)*10))
+    run.status=AuditRun.Status.DONE; run.finished_at=timezone.now(); run.pages_crawled=count; run.health_score=score; run.summary={"issues":len(issues)}
+    run.save(update_fields=["status","finished_at","pages_crawled","health_score","summary","updated_at"])
+    return {"pages":count,"issues":len(issues),"score":score}

digitalafarin_cms/apps/audit/urls.py

@@ -0,0 +1,3 @@
+from rest_framework.routers import DefaultRouter
+from .views import AuditRunViewSet, AuditIssueViewSet
+router=DefaultRouter(); router.register("runs",AuditRunViewSet); router.register("issues",AuditIssueViewSet); urlpatterns=router.urls

digitalafarin_cms/apps/audit/views.py

@@ -0,0 +1,32 @@
+from rest_framework import viewsets
+from rest_framework.decorators import action
+from rest_framework.permissions import IsAuthenticated
+from rest_framework.response import Response
+
+from digitalafarin_cms.apps.common.tenancy import TenantScopedViewSetMixin
+from .models import AuditIssue, AuditRun
+from .serializers import AuditIssueSerializer, AuditRunSerializer
+from .tasks import run_audit
+
+
+class AuditRunViewSet(TenantScopedViewSetMixin, viewsets.ModelViewSet):
+    permission_classes = [IsAuthenticated]
+    queryset = AuditRun.objects.select_related("site").all().order_by("-created_at")
+    serializer_class = AuditRunSerializer
+    filterset_fields = ["site", "status"]
+    tenant_filter = "site__organization_id"
+
+    @action(detail=True, methods=["post"])
+    def execute(self, request, pk=None):
+        run = self.get_object()
+        run_audit.delay(str(run.id))
+        return Response({"queued": True, "audit_run": str(run.id)})
+
+
+class AuditIssueViewSet(TenantScopedViewSetMixin, viewsets.ModelViewSet):
+    permission_classes = [IsAuthenticated]
+    queryset = AuditIssue.objects.select_related("run", "run__site").all()
+    serializer_class = AuditIssueSerializer
+    filterset_fields = ["run", "severity", "code", "is_resolved"]
+    search_fields = ["url", "title", "code"]
+    tenant_filter = "run__site__organization_id"

digitalafarin_cms/apps/common/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+class CommonConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "digitalafarin_cms.apps.common"
+    label = "digitalafarin_cms_common"

digitalafarin_cms/apps/common/models.py

@@ -0,0 +1,9 @@
+import uuid
+from django.db import models
+
+class UUIDTimeStampedModel(models.Model):
+    id = models.UUIDField(primary_key=True, default=uuid.uuid4, editable=False)
+    created_at = models.DateTimeField(auto_now_add=True)
+    updated_at = models.DateTimeField(auto_now=True)
+    class Meta:
+        abstract = True

digitalafarin_cms/apps/common/tenancy.py

@@ -0,0 +1,158 @@
+from __future__ import annotations
+
+from collections.abc import Iterable
+
+from django.core.exceptions import PermissionDenied
+from django.db.models import Model
+
+
+def allowed_organization_ids(user):
+    """Return None for superusers, otherwise the organization ids visible to the user."""
+    if not getattr(user, "is_authenticated", False):
+        return []
+    if getattr(user, "is_superuser", False):
+        return None
+
+    from digitalafarin_cms.apps.sites.models import Membership
+
+    return list(
+        Membership.objects.filter(user=user, organization__is_active=True).values_list(
+            "organization_id", flat=True
+        )
+    )
+
+
+def ensure_organization_access(user, organization_id) -> None:
+    if organization_id is None or getattr(user, "is_superuser", False):
+        return
+    allowed = allowed_organization_ids(user)
+    if organization_id not in allowed:
+        raise PermissionDenied("You do not have access to this organization.")
+
+
+def ensure_organization_write_access(user, organization_id, allowed_roles=None) -> None:
+    if organization_id is None or getattr(user, "is_superuser", False):
+        return
+
+    from digitalafarin_cms.apps.sites.models import Membership
+
+    roles = allowed_roles or (
+        Membership.Role.OWNER,
+        Membership.Role.ADMIN,
+        Membership.Role.SEO,
+        Membership.Role.EDITOR,
+        Membership.Role.WRITER,
+    )
+    if not Membership.objects.filter(
+        organization_id=organization_id, user=user, role__in=roles
+    ).exists():
+        raise PermissionDenied("Your role does not allow changes in this organization.")
+
+
+def organization_id_for_instance(value: Model | None, _seen: set[int] | None = None):
+    """Best-effort organization resolution for CMS model instances.
+
+    This intentionally follows only a small list of known CMS relationship names to avoid
+    surprising arbitrary ORM traversal.
+    """
+    if value is None or not isinstance(value, Model):
+        return None
+
+    seen = _seen or set()
+    marker = id(value)
+    if marker in seen:
+        return None
+    seen.add(marker)
+
+    model_name = value.__class__.__name__
+    if model_name == "Organization":
+        return value.pk
+
+    organization_id = getattr(value, "organization_id", None)
+    if organization_id is not None:
+        return organization_id
+
+    relationship_names = (
+        "site",
+        "entry",
+        "keyword",
+        "cluster",
+        "source_entry",
+        "target_entry",
+        "run",
+        "menu",
+        "content_type",
+        "parent",
+    )
+    for name in relationship_names:
+        try:
+            related = getattr(value, name, None)
+        except value.__class__.DoesNotExist:
+            related = None
+        organization_id = organization_id_for_instance(related, seen)
+        if organization_id is not None:
+            return organization_id
+    return None
+
+
+def _iter_model_values(value):
+    if isinstance(value, Model):
+        yield value
+        return
+    if isinstance(value, dict):
+        for nested in value.values():
+            yield from _iter_model_values(nested)
+        return
+    if isinstance(value, Iterable) and not isinstance(value, (str, bytes)):
+        for nested in value:
+            yield from _iter_model_values(nested)
+
+
+class TenantScopedViewSetMixin:
+    """Scope reads to memberships and protect unsafe writes by organization role."""
+
+    tenant_filter: str | None = None
+    write_roles = None
+
+    def get_queryset(self):
+        queryset = super().get_queryset()
+        user = self.request.user
+        allowed = allowed_organization_ids(user)
+        if allowed is None:
+            return queryset
+        if not self.tenant_filter or not allowed:
+            return queryset.none()
+        return queryset.filter(**{f"{self.tenant_filter}__in": allowed})
+
+    def get_object(self):
+        instance = super().get_object()
+        if self.request.method not in {"GET", "HEAD", "OPTIONS"}:
+            ensure_organization_write_access(
+                self.request.user,
+                organization_id_for_instance(instance),
+                self.write_roles,
+            )
+        return instance
+
+    def validate_tenant_serializer(self, serializer, *, require_write=False) -> None:
+        organization_ids = set()
+        for value in serializer.validated_data.values():
+            for instance in _iter_model_values(value):
+                organization_id = organization_id_for_instance(instance)
+                ensure_organization_access(self.request.user, organization_id)
+                if organization_id is not None:
+                    organization_ids.add(organization_id)
+
+        if require_write:
+            for organization_id in organization_ids:
+                ensure_organization_write_access(
+                    self.request.user, organization_id, self.write_roles
+                )
+
+    def perform_create(self, serializer):
+        self.validate_tenant_serializer(serializer, require_write=True)
+        serializer.save()
+
+    def perform_update(self, serializer):
+        self.validate_tenant_serializer(serializer, require_write=True)
+        serializer.save()

digitalafarin_cms/apps/content/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+from .models import ContentTypeDefinition, ContentEntry, ContentRevision, Category, Tag, ReusableBlock, Menu, MenuItem
+admin.site.register([ContentTypeDefinition,ContentEntry,ContentRevision,Category,Tag,ReusableBlock,Menu,MenuItem])

digitalafarin_cms/apps/content/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+class ContentConfig(AppConfig):
+    default_auto_field="django.db.models.BigAutoField"
+    name="digitalafarin_cms.apps.content"
+    label = "digitalafarin_cms_content"

digitalafarin_cms/apps/content/management/commands/seed_demo.py

@@ -0,0 +1,27 @@
+from django.core.management.base import BaseCommand
+from django.contrib.auth import get_user_model
+from digitalafarin_cms.apps.sites.models import Organization, Site, Membership
+from digitalafarin_cms.apps.content.models import ContentTypeDefinition, ContentEntry, Category, Menu, MenuItem
+from digitalafarin_cms.apps.seo.models import SeoMeta, SchemaMarkup, KeywordCluster, Keyword, KeywordMapping
+
+class Command(BaseCommand):
+    help="Create development demo data"
+    def handle(self,*args,**options):
+        User=get_user_model()
+        user,created=User.objects.get_or_create(username="admin",defaults={"email":"admin@example.com","is_staff":True,"is_superuser":True})
+        if created or not user.has_usable_password():
+            user.set_password("admin12345"); user.is_staff=True; user.is_superuser=True; user.save()
+        org,_=Organization.objects.get_or_create(slug="digitalafarin",defaults={"name":"DigitalAfarin"})
+        site,_=Site.objects.get_or_create(domain="demo.local",defaults={"organization":org,"name":"Demo SEO Site","default_language":"fa"})
+        Membership.objects.get_or_create(organization=org,user=user,defaults={"role":"owner"})
+        page_type,_=ContentTypeDefinition.objects.get_or_create(site=site,slug="page",defaults={"name":"Page","schema":{"fields":[]}})
+        post_type,_=ContentTypeDefinition.objects.get_or_create(site=site,slug="post",defaults={"name":"Post","schema":{"fields":[]}})
+        home,_=ContentEntry.objects.get_or_create(site=site,path="/",defaults={"content_type":page_type,"title":"DigitalAfarin SEO CMS","slug":"home","status":"published","author":user,"blocks":[{"id":"hero-1","type":"hero","data":{"title":"Headless SEO CMS","subtitle":"Django REST + Next.js"}},{"id":"p-1","type":"paragraph","data":{"text":"This page is served from the CMS resolver API."}}]})
+        SeoMeta.objects.get_or_create(entry=home,defaults={"title":"Headless SEO CMS | DigitalAfarin","description":"Multi-site content and SEO management platform for Next.js.","focus_keyword":"headless seo cms","seo_score":80})
+        SchemaMarkup.objects.get_or_create(entry=home,schema_type="WebPage",defaults={"data":{"@context":"https://schema.org","@type":"WebPage","name":home.title}})
+        cluster,_=KeywordCluster.objects.get_or_create(site=site,name="Headless CMS",defaults={"pillar_entry":home,"intent":"commercial"})
+        kw,_=Keyword.objects.get_or_create(site=site,phrase="headless seo cms",defaults={"cluster":cluster,"intent":"commercial","priority":90})
+        KeywordMapping.objects.get_or_create(keyword=kw,entry=home,defaults={"is_primary":True})
+        menu,_=Menu.objects.get_or_create(site=site,key="main",defaults={"name":"Main Menu"})
+        MenuItem.objects.get_or_create(menu=menu,label="Home",url="/",defaults={"sort_order":0})
+        self.stdout.write(self.style.SUCCESS("Demo data ready: admin / admin12345; site=demo.local"))

digitalafarin_cms/apps/content/migrations/0001_initial.py

@@ -0,0 +1,18 @@
+import uuid
+from django.conf import settings
+from django.db import migrations, models
+import django.db.models.deletion
+
+class Migration(migrations.Migration):
+    initial=True
+    dependencies=[("digitalafarin_cms_sites","0001_initial"),migrations.swappable_dependency(settings.AUTH_USER_MODEL)]
+    operations=[
+        migrations.CreateModel(name="Category",fields=[("id",models.UUIDField(default=uuid.uuid4,editable=False,primary_key=True,serialize=False)),("created_at",models.DateTimeField(auto_now_add=True)),("updated_at",models.DateTimeField(auto_now=True)),("name",models.CharField(max_length=160)),("slug",models.SlugField(max_length=160)),("parent",models.ForeignKey(blank=True,null=True,on_delete=django.db.models.deletion.SET_NULL,related_name="children",to="digitalafarin_cms_content.category")),("site",models.ForeignKey(on_delete=django.db.models.deletion.CASCADE,related_name="categories",to="digitalafarin_cms_sites.site"))],options={"constraints":[models.UniqueConstraint(fields=("site","slug"),name="unique_category_site_slug")]}),
+        migrations.CreateModel(name="ContentTypeDefinition",fields=[("id",models.UUIDField(default=uuid.uuid4,editable=False,primary_key=True,serialize=False)),("created_at",models.DateTimeField(auto_now_add=True)),("updated_at",models.DateTimeField(auto_now=True)),("name",models.CharField(max_length=120)),("slug",models.SlugField(max_length=120)),("schema",models.JSONField(blank=True,default=dict,help_text="Custom field definitions")),("icon",models.CharField(blank=True,max_length=50)),("is_public",models.BooleanField(default=True)),("site",models.ForeignKey(on_delete=django.db.models.deletion.CASCADE,related_name="content_types",to="digitalafarin_cms_sites.site"))],options={"constraints":[models.UniqueConstraint(fields=("site","slug"),name="unique_content_type_site_slug")]}),
+        migrations.CreateModel(name="Menu",fields=[("id",models.UUIDField(default=uuid.uuid4,editable=False,primary_key=True,serialize=False)),("created_at",models.DateTimeField(auto_now_add=True)),("updated_at",models.DateTimeField(auto_now=True)),("name",models.CharField(max_length=120)),("key",models.SlugField(max_length=120)),("site",models.ForeignKey(on_delete=django.db.models.deletion.CASCADE,related_name="menus",to="digitalafarin_cms_sites.site"))],options={"constraints":[models.UniqueConstraint(fields=("site","key"),name="unique_menu_site_key")]}),
+        migrations.CreateModel(name="ReusableBlock",fields=[("id",models.UUIDField(default=uuid.uuid4,editable=False,primary_key=True,serialize=False)),("created_at",models.DateTimeField(auto_now_add=True)),("updated_at",models.DateTimeField(auto_now=True)),("name",models.CharField(max_length=160)),("key",models.SlugField(max_length=160)),("block",models.JSONField(default=dict)),("site",models.ForeignKey(on_delete=django.db.models.deletion.CASCADE,related_name="reusable_blocks",to="digitalafarin_cms_sites.site"))],options={"constraints":[models.UniqueConstraint(fields=("site","key"),name="unique_reusable_block_key")]}),
+        migrations.CreateModel(name="Tag",fields=[("id",models.UUIDField(default=uuid.uuid4,editable=False,primary_key=True,serialize=False)),("created_at",models.DateTimeField(auto_now_add=True)),("updated_at",models.DateTimeField(auto_now=True)),("name",models.CharField(max_length=160)),("slug",models.SlugField(max_length=160)),("site",models.ForeignKey(on_delete=django.db.models.deletion.CASCADE,related_name="tags",to="digitalafarin_cms_sites.site"))],options={"constraints":[models.UniqueConstraint(fields=("site","slug"),name="unique_tag_site_slug")]}),
+        migrations.CreateModel(name="ContentEntry",fields=[("id",models.UUIDField(default=uuid.uuid4,editable=False,primary_key=True,serialize=False)),("created_at",models.DateTimeField(auto_now_add=True)),("updated_at",models.DateTimeField(auto_now=True)),("title",models.CharField(max_length=255)),("slug",models.SlugField(max_length=255)),("path",models.CharField(help_text="Canonical site path, e.g. /blog/example/",max_length=500)),("excerpt",models.TextField(blank=True)),("blocks",models.JSONField(blank=True,default=list)),("custom_fields",models.JSONField(blank=True,default=dict)),("status",models.CharField(choices=[("draft","Draft"),("review","Review"),("scheduled","Scheduled"),("published","Published"),("archived","Archived")],default="draft",max_length=20)),("published_at",models.DateTimeField(blank=True,null=True)),("scheduled_at",models.DateTimeField(blank=True,null=True)),("is_featured",models.BooleanField(default=False)),("author",models.ForeignKey(blank=True,null=True,on_delete=django.db.models.deletion.SET_NULL,related_name="cms_entries",to=settings.AUTH_USER_MODEL)),("categories",models.ManyToManyField(blank=True,related_name="entries",to="digitalafarin_cms_content.category")),("content_type",models.ForeignKey(on_delete=django.db.models.deletion.PROTECT,related_name="entries",to="digitalafarin_cms_content.contenttypedefinition")),("parent",models.ForeignKey(blank=True,null=True,on_delete=django.db.models.deletion.SET_NULL,related_name="children",to="digitalafarin_cms_content.contententry")),("site",models.ForeignKey(on_delete=django.db.models.deletion.CASCADE,related_name="entries",to="digitalafarin_cms_sites.site")),("tags",models.ManyToManyField(blank=True,related_name="entries",to="digitalafarin_cms_content.tag"))],options={"ordering":["-published_at","-created_at"],"constraints":[models.UniqueConstraint(fields=("site","path"),name="unique_entry_site_path")]}),
+        migrations.CreateModel(name="ContentRevision",fields=[("id",models.UUIDField(default=uuid.uuid4,editable=False,primary_key=True,serialize=False)),("created_at",models.DateTimeField(auto_now_add=True)),("updated_at",models.DateTimeField(auto_now=True)),("number",models.PositiveIntegerField()),("snapshot",models.JSONField(default=dict)),("note",models.CharField(blank=True,max_length=255)),("created_by",models.ForeignKey(blank=True,null=True,on_delete=django.db.models.deletion.SET_NULL,to=settings.AUTH_USER_MODEL)),("entry",models.ForeignKey(on_delete=django.db.models.deletion.CASCADE,related_name="revisions",to="digitalafarin_cms_content.contententry"))],options={"ordering":["-number"],"constraints":[models.UniqueConstraint(fields=("entry","number"),name="unique_revision_number")]}),
+        migrations.CreateModel(name="MenuItem",fields=[("id",models.UUIDField(default=uuid.uuid4,editable=False,primary_key=True,serialize=False)),("created_at",models.DateTimeField(auto_now_add=True)),("updated_at",models.DateTimeField(auto_now=True)),("label",models.CharField(max_length=160)),("url",models.CharField(max_length=500)),("sort_order",models.PositiveIntegerField(default=0)),("is_external",models.BooleanField(default=False)),("menu",models.ForeignKey(on_delete=django.db.models.deletion.CASCADE,related_name="items",to="digitalafarin_cms_content.menu")),("parent",models.ForeignKey(blank=True,null=True,on_delete=django.db.models.deletion.CASCADE,related_name="children",to="digitalafarin_cms_content.menuitem"))],options={"ordering":["sort_order","created_at"]})
+    ]

digitalafarin_cms/apps/content/models.py

@@ -0,0 +1,91 @@
+from django.conf import settings
+from django.db import models
+from django.utils import timezone
+from digitalafarin_cms.apps.common.models import UUIDTimeStampedModel
+from digitalafarin_cms.apps.sites.models import Site
+
+class ContentTypeDefinition(UUIDTimeStampedModel):
+    site=models.ForeignKey(Site,on_delete=models.CASCADE,related_name="content_types")
+    name=models.CharField(max_length=120)
+    slug=models.SlugField(max_length=120)
+    schema=models.JSONField(default=dict,blank=True, help_text="Custom field definitions")
+    icon=models.CharField(max_length=50,blank=True)
+    is_public=models.BooleanField(default=True)
+    class Meta: constraints=[models.UniqueConstraint(fields=["site","slug"],name="unique_content_type_site_slug")]
+    def __str__(self): return f"{self.site.domain}:{self.slug}"
+
+class Category(UUIDTimeStampedModel):
+    site=models.ForeignKey(Site,on_delete=models.CASCADE,related_name="categories")
+    name=models.CharField(max_length=160)
+    slug=models.SlugField(max_length=160)
+    parent=models.ForeignKey("self",null=True,blank=True,on_delete=models.SET_NULL,related_name="children")
+    class Meta: constraints=[models.UniqueConstraint(fields=["site","slug"],name="unique_category_site_slug")]
+    def __str__(self): return self.name
+
+class Tag(UUIDTimeStampedModel):
+    site=models.ForeignKey(Site,on_delete=models.CASCADE,related_name="tags")
+    name=models.CharField(max_length=160)
+    slug=models.SlugField(max_length=160)
+    class Meta: constraints=[models.UniqueConstraint(fields=["site","slug"],name="unique_tag_site_slug")]
+    def __str__(self): return self.name
+
+class ContentEntry(UUIDTimeStampedModel):
+    class Status(models.TextChoices):
+        DRAFT="draft","Draft"; REVIEW="review","Review"; SCHEDULED="scheduled","Scheduled"; PUBLISHED="published","Published"; ARCHIVED="archived","Archived"
+    site=models.ForeignKey(Site,on_delete=models.CASCADE,related_name="entries")
+    content_type=models.ForeignKey(ContentTypeDefinition,on_delete=models.PROTECT,related_name="entries")
+    title=models.CharField(max_length=255)
+    slug=models.SlugField(max_length=255)
+    path=models.CharField(max_length=500,help_text="Canonical site path, e.g. /blog/example/")
+    excerpt=models.TextField(blank=True)
+    blocks=models.JSONField(default=list,blank=True)
+    custom_fields=models.JSONField(default=dict,blank=True)
+    status=models.CharField(max_length=20,choices=Status.choices,default=Status.DRAFT)
+    author=models.ForeignKey(settings.AUTH_USER_MODEL,null=True,blank=True,on_delete=models.SET_NULL,related_name="cms_entries")
+    categories=models.ManyToManyField(Category,blank=True,related_name="entries")
+    tags=models.ManyToManyField(Tag,blank=True,related_name="entries")
+    parent=models.ForeignKey("self",null=True,blank=True,on_delete=models.SET_NULL,related_name="children")
+    published_at=models.DateTimeField(null=True,blank=True)
+    scheduled_at=models.DateTimeField(null=True,blank=True)
+    is_featured=models.BooleanField(default=False)
+    class Meta:
+        constraints=[models.UniqueConstraint(fields=["site","path"],name="unique_entry_site_path")]
+        ordering=["-published_at","-created_at"]
+    def __str__(self): return self.title
+    def publish(self):
+        self.status=self.Status.PUBLISHED
+        self.published_at=self.published_at or timezone.now()
+        self.save(update_fields=["status","published_at","updated_at"])
+
+class ContentRevision(UUIDTimeStampedModel):
+    entry=models.ForeignKey(ContentEntry,on_delete=models.CASCADE,related_name="revisions")
+    number=models.PositiveIntegerField()
+    snapshot=models.JSONField(default=dict)
+    created_by=models.ForeignKey(settings.AUTH_USER_MODEL,null=True,blank=True,on_delete=models.SET_NULL)
+    note=models.CharField(max_length=255,blank=True)
+    class Meta:
+        constraints=[models.UniqueConstraint(fields=["entry","number"],name="unique_revision_number")]
+        ordering=["-number"]
+
+class ReusableBlock(UUIDTimeStampedModel):
+    site=models.ForeignKey(Site,on_delete=models.CASCADE,related_name="reusable_blocks")
+    name=models.CharField(max_length=160)
+    key=models.SlugField(max_length=160)
+    block=models.JSONField(default=dict)
+    class Meta: constraints=[models.UniqueConstraint(fields=["site","key"],name="unique_reusable_block_key")]
+
+class Menu(UUIDTimeStampedModel):
+    site=models.ForeignKey(Site,on_delete=models.CASCADE,related_name="menus")
+    name=models.CharField(max_length=120)
+    key=models.SlugField(max_length=120)
+    class Meta: constraints=[models.UniqueConstraint(fields=["site","key"],name="unique_menu_site_key")]
+    def __str__(self): return self.name
+
+class MenuItem(UUIDTimeStampedModel):
+    menu=models.ForeignKey(Menu,on_delete=models.CASCADE,related_name="items")
+    label=models.CharField(max_length=160)
+    url=models.CharField(max_length=500)
+    parent=models.ForeignKey("self",null=True,blank=True,on_delete=models.CASCADE,related_name="children")
+    sort_order=models.PositiveIntegerField(default=0)
+    is_external=models.BooleanField(default=False)
+    class Meta: ordering=["sort_order","created_at"]

digitalafarin_cms/apps/content/serializers.py

@@ -0,0 +1,65 @@
+from rest_framework import serializers
+from .models import ContentTypeDefinition, ContentEntry, ContentRevision, Category, Tag, ReusableBlock, Menu, MenuItem
+
+class ContentTypeSerializer(serializers.ModelSerializer):
+    class Meta: model=ContentTypeDefinition; fields="__all__"
+class CategorySerializer(serializers.ModelSerializer):
+    class Meta: model=Category; fields="__all__"
+    def validate(self, attrs):
+        site = attrs.get("site") or getattr(self.instance, "site", None)
+        parent = attrs.get("parent", getattr(self.instance, "parent", None))
+        if site and parent and parent.site_id != site.id:
+            raise serializers.ValidationError({"parent": "Parent category must belong to the same site."})
+        return attrs
+class TagSerializer(serializers.ModelSerializer):
+    class Meta: model=Tag; fields="__all__"
+class ContentEntrySerializer(serializers.ModelSerializer):
+    content_type_slug=serializers.CharField(source="content_type.slug",read_only=True)
+    author=serializers.PrimaryKeyRelatedField(read_only=True)
+    author_name=serializers.CharField(source="author.username",read_only=True)
+    class Meta: model=ContentEntry; fields="__all__"
+    def validate_path(self,value):
+        if not value.startswith("/"): value="/"+value
+        if "?" in value or "#" in value: raise serializers.ValidationError("Path must not contain query strings or fragments.")
+        if value != "/" and not value.endswith("/"): value += "/"
+        return value
+    def validate_blocks(self,value):
+        if not isinstance(value,list): raise serializers.ValidationError("blocks must be a list")
+        for i,block in enumerate(value):
+            if not isinstance(block,dict) or not block.get("type") or not isinstance(block.get("data",{}),dict):
+                raise serializers.ValidationError(f"Invalid block at index {i}; each block requires type and data object")
+        return value
+    def validate(self,attrs):
+        site=attrs.get("site") or getattr(self.instance,"site",None)
+        ctype=attrs.get("content_type") or getattr(self.instance,"content_type",None)
+        parent=attrs.get("parent", getattr(self.instance,"parent",None))
+        categories=attrs.get("categories")
+        tags=attrs.get("tags")
+        custom=attrs.get("custom_fields", getattr(self.instance,"custom_fields",{})) or {}
+
+        if site and ctype and ctype.site_id != site.id:
+            raise serializers.ValidationError({"content_type":"Content type must belong to the same site."})
+        if site and parent and parent.site_id != site.id:
+            raise serializers.ValidationError({"parent":"Parent entry must belong to the same site."})
+        if site and categories is not None and any(item.site_id != site.id for item in categories):
+            raise serializers.ValidationError({"categories":"All categories must belong to the same site."})
+        if site and tags is not None and any(item.site_id != site.id for item in tags):
+            raise serializers.ValidationError({"tags":"All tags must belong to the same site."})
+
+        if ctype:
+            required=[x.get("key") for x in ctype.schema.get("fields",[]) if x.get("required")]
+            missing=[key for key in required if key and custom.get(key) in (None,"")]
+            if missing: raise serializers.ValidationError({"custom_fields":f"Missing required fields: {', '.join(missing)}"})
+        return attrs
+class ContentRevisionSerializer(serializers.ModelSerializer):
+    class Meta: model=ContentRevision; fields="__all__"
+class ReusableBlockSerializer(serializers.ModelSerializer):
+    class Meta: model=ReusableBlock; fields="__all__"
+class MenuItemSerializer(serializers.ModelSerializer):
+    children=serializers.SerializerMethodField()
+    class Meta: model=MenuItem; fields="__all__"
+    def get_children(self,obj): return MenuItemSerializer(obj.children.all(),many=True).data
+class MenuSerializer(serializers.ModelSerializer):
+    items=serializers.SerializerMethodField()
+    class Meta: model=Menu; fields="__all__"
+    def get_items(self,obj): return MenuItemSerializer(obj.items.filter(parent__isnull=True),many=True).data

digitalafarin_cms/apps/content/services.py

@@ -0,0 +1,10 @@
+from .models import ContentRevision
+
+def create_revision(entry, user=None, note=""):
+    latest=entry.revisions.first()
+    number=(latest.number+1) if latest else 1
+    snapshot={
+        "title":entry.title,"slug":entry.slug,"path":entry.path,"excerpt":entry.excerpt,
+        "blocks":entry.blocks,"custom_fields":entry.custom_fields,"status":entry.status,
+    }
+    return ContentRevision.objects.create(entry=entry,number=number,snapshot=snapshot,created_by=user,note=note)

digitalafarin_cms/apps/content/tasks.py

@@ -0,0 +1,12 @@
+from celery import shared_task
+from django.utils import timezone
+from .models import ContentEntry
+from .services import create_revision
+
+@shared_task
+def publish_due_entries():
+    due=ContentEntry.objects.filter(status=ContentEntry.Status.SCHEDULED,scheduled_at__isnull=False,scheduled_at__lte=timezone.now())
+    count=0
+    for entry in due.iterator():
+        entry.publish(); create_revision(entry,None,"Scheduled publication"); count += 1
+    return count

digitalafarin_cms/apps/content/urls.py

@@ -0,0 +1,5 @@
+from django.urls import path, include
+from rest_framework.routers import DefaultRouter
+from .views import ContentTypeViewSet, ContentEntryViewSet, ContentRevisionViewSet, CategoryViewSet, TagViewSet, ReusableBlockViewSet, MenuViewSet, resolve_path, sitemap, robots_txt
+router=DefaultRouter(); router.register("types",ContentTypeViewSet); router.register("entries",ContentEntryViewSet); router.register("revisions",ContentRevisionViewSet); router.register("categories",CategoryViewSet); router.register("tags",TagViewSet); router.register("reusable-blocks",ReusableBlockViewSet); router.register("menus",MenuViewSet)
+urlpatterns=[path("resolve/",resolve_path),path("sitemap/",sitemap),path("robots/",robots_txt),path("",include(router.urls))]