@antelopejs/dms 0.0.1

package/dist/implementations/dms/frontend-modules.js

@@ -0,0 +1,215 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createIgnoreFilter = createIgnoreFilter;
+exports.AddFrontendModule = AddFrontendModule;
+exports.GetFrontendModules = GetFrontendModules;
+exports.buildFrontendManifest = buildFrontendManifest;
+exports.writeFrontendModules = writeFrontendModules;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const consumers_1 = require("node:stream/consumers");
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const runtime_1 = require("@antelopejs/interface-core/runtime");
+const archiver_1 = __importDefault(require("archiver"));
+const ignore_1 = __importDefault(require("ignore"));
+const semver_1 = require("semver");
+const config_1 = require("../../config");
+const dev_reload_1 = require("./dev-reload");
+const frontend_bootstrap_1 = require("./frontend-bootstrap");
+const manifest_1 = require("./manifest");
+const warn_once_1 = require("./warn-once");
+const BUILD_ARTIFACT_PATTERNS = [
+    "node_modules/",
+    "dist/",
+    ".output/",
+    ".next/",
+    "*.log",
+    ".DS_Store",
+    "tsconfig.json",
+    "tsconfig.*.json",
+];
+const SECRET_BEARING_PATTERNS = [
+    ".git/",
+    ".env*",
+    "*.pem",
+    "*.key",
+    "*.crt",
+    "*.cer",
+    "*.der",
+    "*.p12",
+    "*.pfx",
+    "*.jks",
+    "*.keystore",
+    "id_rsa",
+    "id_dsa",
+    "id_ecdsa",
+    "id_ed25519",
+    "*.ppk",
+    "credentials*.json",
+    "secrets*",
+    "*.secret",
+    "*.secrets",
+    ".npmrc",
+    ".netrc",
+    ".pgpass",
+];
+const DEFAULT_RENDERER = "vue";
+const DEFAULT_RENDERER_VERSION = "3";
+const HTTP_BAD_REQUEST = 400;
+const HTTP_NOT_FOUND = 404;
+const cachedModulesArchives = new Map();
+const modules = {};
+function createIgnoreFilter(modulePath) {
+    const filter = (0, ignore_1.default)();
+    const gitignorePath = (0, node_path_1.join)(modulePath, ".gitignore");
+    if ((0, node_fs_1.existsSync)(gitignorePath)) {
+        filter.add((0, node_fs_1.readFileSync)(gitignorePath, "utf-8"));
+    }
+    filter.add([...BUILD_ARTIFACT_PATTERNS, ...SECRET_BEARING_PATTERNS]);
+    return (entryData) => {
+        if (filter.ignores(entryData.name))
+            return false;
+        return entryData;
+    };
+}
+function rendererMajor(version) {
+    const parsedVersion = (0, semver_1.coerce)(version);
+    return parsedVersion ? (0, semver_1.major)(parsedVersion) : null;
+}
+function moduleIdentity(config) {
+    const versionMajor = rendererMajor(config.renderer.version);
+    (0, interface_api_util_1.assert)(versionMajor !== null, HTTP_BAD_REQUEST, "error.frontend_renderer_version_invalid");
+    return [config.name, config.renderer.name, versionMajor].join("\0");
+}
+function resolveFrontendSelection(renderer, rendererVersion) {
+    const hasExplicitSelection = renderer !== undefined || rendererVersion !== undefined;
+    (0, interface_api_util_1.assert)(!hasExplicitSelection || Boolean(renderer && rendererVersion), HTTP_BAD_REQUEST, "error.frontend_renderer_selection_required");
+    const selectedVersion = rendererVersion ?? DEFAULT_RENDERER_VERSION;
+    const selectedMajor = rendererMajor(selectedVersion);
+    (0, interface_api_util_1.assert)(selectedMajor !== null, HTTP_BAD_REQUEST, "error.frontend_renderer_version_invalid");
+    return {
+        renderer: renderer ?? DEFAULT_RENDERER,
+        rendererVersion: selectedVersion,
+        rendererMajor: selectedMajor,
+    };
+}
+function sortedModules() {
+    return Object.values(modules).sort((left, right) => left.priority - right.priority || left.name.localeCompare(right.name));
+}
+function selectedModules(selection) {
+    const compatibleModules = sortedModules().filter((module) => {
+        return (module.renderer.name === selection.renderer &&
+            rendererMajor(module.renderer.version) === selection.rendererMajor);
+    });
+    (0, interface_api_util_1.assert)(compatibleModules.length > 0, HTTP_NOT_FOUND, "error.frontend_renderer_not_found");
+    return compatibleModules;
+}
+function selectionKey(selection) {
+    return `${selection.renderer}:${selection.rendererMajor}`;
+}
+async function createModuleArchive(selection) {
+    const archive = (0, archiver_1.default)("zip");
+    for (const module of selectedModules(selection)) {
+        archive.directory(module.path, module.archiveName, createIgnoreFilter(module.path));
+    }
+    const bufferPromise = (0, consumers_1.buffer)(archive);
+    await archive.finalize();
+    cachedModulesArchives.set(selectionKey(selection), bufferPromise);
+}
+function AddFrontendModule(config) {
+    cachedModulesArchives.clear();
+    const identity = moduleIdentity(config);
+    const registeredModule = modules[identity];
+    if (registeredModule && registeredModule.priority > (config.priority ?? 0)) {
+        return;
+    }
+    modules[identity] = {
+        name: config.name,
+        archiveName: config.name.replaceAll(/[/]/g, "-"),
+        path: config.sourcePath,
+        priority: config.priority ?? 0,
+        options: config.options || {},
+        privateOptions: config.privateOptions || {},
+        configKey: config.configKey,
+        renderer: config.renderer,
+    };
+    (0, dev_reload_1.scheduleBroadcast)();
+}
+function copyFrontendValue(value) {
+    if (value === null || typeof value !== "object")
+        return value;
+    if (Array.isArray(value))
+        return value.map(copyFrontendValue);
+    return copyFrontendOptions(value);
+}
+function copyFrontendOptions(options) {
+    return Object.fromEntries(Object.entries(options).map(([key, value]) => [
+        key,
+        copyFrontendValue(value),
+    ]));
+}
+function GetFrontendModules() {
+    return sortedModules().map((module) => ({
+        name: module.name,
+        sourcePath: module.path,
+        renderer: { name: module.renderer.name, version: module.renderer.version },
+        priority: module.priority,
+        options: copyFrontendOptions(module.options ?? {}),
+    }));
+}
+function enforceLayerAccess(outcome, route) {
+    if (outcome === "authenticated")
+        return;
+    if ((0, config_1.getFrontendConfig)().requireBootstrap === "enforce") {
+        (0, frontend_bootstrap_1.assertFrontendBootstrap)(outcome);
+    }
+    (0, warn_once_1.warnOnceFor)(modules, route, `[DMS] ${route} was served to a caller presenting no valid bootstrap credential. ` +
+        "Private layer options were withheld, so server-side HTML rendering and OAuth " +
+        "login will fail in a frontend built from this response. Set frontend.bootstrapSecret " +
+        "in the backend config and DMS_BOOTSTRAP_SECRET where the frontend is built. " +
+        "A future major version will refuse this request.");
+}
+function resolveManifestFieldPolicy(outcome, dev) {
+    const authenticated = outcome === "authenticated";
+    return { privateOptions: authenticated, path: authenticated && dev };
+}
+function applyDevManifestOverrides(manifest, requestContext, clientUrl, outcome) {
+    const config = (0, config_1.getConfig)();
+    const clientOrigin = (0, manifest_1.resolveClientOrigin)(clientUrl);
+    if (clientOrigin && outcome === "authenticated") {
+        (0, config_1.setDevClientBaseUrl)(clientOrigin);
+    }
+    return (0, manifest_1.applyDevManifestUrls)(manifest, { apiBaseUrl: config.apiBaseUrl, clientBaseUrl: config.clientBaseUrl }, {
+        apiBaseUrl: (0, manifest_1.resolveRequestOrigin)(requestContext.rawRequest),
+        clientBaseUrl: clientOrigin,
+    });
+}
+async function buildFrontendManifest(requestContext, clientUrl, renderer, rendererVersion, bootstrapHeader) {
+    const outcome = (0, frontend_bootstrap_1.resolveBootstrapOutcome)(bootstrapHeader);
+    enforceLayerAccess(outcome, "GET /dms/frontend");
+    const selection = resolveFrontendSelection(renderer, rendererVersion);
+    const { dev } = await (0, runtime_1.GetRuntimeInfo)();
+    let shaped = (0, manifest_1.stripPrivateManifestFields)({
+        pack: `/dms/frontend/modules?renderer=${encodeURIComponent(selection.renderer)}` +
+            `&rendererVersion=${encodeURIComponent(selection.rendererVersion)}`,
+        modules: selectedModules(selection),
+    }, resolveManifestFieldPolicy(outcome, dev));
+    if (dev) {
+        shaped = applyDevManifestOverrides(shaped, requestContext, clientUrl, outcome);
+    }
+    return { version: 1, archive: shaped.pack, modules: shaped.modules };
+}
+async function writeFrontendModules(out, renderer, rendererVersion, bootstrapHeader) {
+    enforceLayerAccess((0, frontend_bootstrap_1.resolveBootstrapOutcome)(bootstrapHeader), "GET /dms/frontend/modules");
+    const selection = resolveFrontendSelection(renderer, rendererVersion);
+    const key = selectionKey(selection);
+    if (!cachedModulesArchives.has(key) ||
+        process.env.NODE_ENV !== "production") {
+        await createModuleArchive(selection);
+    }
+    out.end(await cachedModulesArchives.get(key));
+}
+//# sourceMappingURL=frontend-modules.js.map

package/dist/implementations/dms/frontend-modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-modules.js","sourceRoot":"","sources":["../../../src/implementations/dms/frontend-modules.ts"],"names":[],"mappings":";;;;;AAoGA,gDAWC;AAoFD,8CAkBC;AAoBD,gDAQC;AA+CD,sDA6BC;AAED,oDAmBC;AAlVD,qCAAmD;AACnD,yCAAiC;AAEjC,qDAA+C;AAE/C,uEAAwD;AACxD,gEAAoE;AAOpE,wDAAgC;AAChC,oDAA4B;AAC5B,mCAAuC;AACvC,yCAIsB;AACtB,6CAAiD;AACjD,6DAI8B;AAC9B,yCASoB;AACpB,2CAA0C;AAqB1C,MAAM,uBAAuB,GAAG;IAC9B,eAAe;IACf,OAAO;IACP,UAAU;IACV,QAAQ;IACR,OAAO;IACP,WAAW;IACX,eAAe;IACf,iBAAiB;CAClB,CAAC;AACF,MAAM,uBAAuB,GAAG;IAC9B,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,YAAY;IACZ,OAAO;IACP,mBAAmB;IACnB,UAAU;IACV,UAAU;IACV,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,SAAS;CACV,CAAC;AACF,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAA2B,CAAC;AACjE,MAAM,OAAO,GAAmC,EAAE,CAAC;AAEnD,SAAgB,kBAAkB,CAAC,UAAkB;IACnD,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,aAAa,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,IAAA,oBAAU,EAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,IAAA,sBAAY,EAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,uBAAuB,EAAE,GAAG,uBAAuB,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,SAAc,EAAE,EAAE;QACxB,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,aAAa,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;IACtC,OAAO,aAAa,CAAC,CAAC,CAAC,IAAA,cAAK,EAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,MAAgC;IACtD,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAA,2BAAM,EACJ,YAAY,KAAK,IAAI,EACrB,gBAAgB,EAChB,yCAAyC,CAC1C,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAA4B,EAC5B,eAAmC;IAEnC,MAAM,oBAAoB,GACxB,QAAQ,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,CAAC;IAC1D,IAAA,2BAAM,EACJ,CAAC,oBAAoB,IAAI,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC,EAC7D,gBAAgB,EAChB,4CAA4C,CAC7C,CAAC;IACF,MAAM,eAAe,GAAG,eAAe,IAAI,wBAAwB,CAAC;IACpE,MAAM,aAAa,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IACrD,IAAA,2BAAM,EACJ,aAAa,KAAK,IAAI,EACtB,gBAAgB,EAChB,yCAAyC,CAC1C,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,QAAQ,IAAI,gBAAgB;QACtC,eAAe,EAAE,eAAe;QAChC,aAAa,EAAE,aAAa;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAChC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,SAA4B;IACnD,MAAM,iBAAiB,GAAG,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QAC1D,OAAO,CACL,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,QAAQ;YAC3C,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,aAAa,CACnE,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAA,2BAAM,EACJ,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAC5B,cAAc,EACd,mCAAmC,CACpC,CAAC;IACF,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,SAA4B;IAChD,OAAO,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,SAA4B;IAE5B,MAAM,OAAO,GAAG,IAAA,kBAAQ,EAAC,KAAK,CAAC,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,SAAS,CACf,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,WAAW,EAClB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,IAAA,kBAAM,EAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;IACzB,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAgC;IAChE,qBAAqB,CAAC,KAAK,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO;IACT,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,GAAG;QAClB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC;QAChD,IAAI,EAAE,MAAM,CAAC,UAAU;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;QAC9B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;QAC3C,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;IACF,IAAA,8BAAiB,GAAE,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA0B;IACnD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC9D,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAA8B;IAE9B,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC5C,GAAG;QACH,iBAAiB,CAAC,KAAK,CAAC;KACzB,CAAC,CACH,CAAC;AACJ,CAAC;AAGD,SAAgB,kBAAkB;IAChC,OAAO,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE;QAC1E,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;KACnD,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAyB,EAAE,KAAa;IAClE,IAAI,OAAO,KAAK,eAAe;QAAE,OAAO;IACxC,IAAI,IAAA,0BAAiB,GAAE,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACvD,IAAA,4CAAuB,EAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,IAAA,uBAAW,EACT,OAAO,EACP,KAAK,EACL,SAAS,KAAK,oEAAoE;QAChF,+EAA+E;QAC/E,uFAAuF;QACvF,8EAA8E;QAC9E,kDAAkD,CACrD,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,OAAyB,EACzB,GAAY;IAEZ,MAAM,aAAa,GAAG,OAAO,KAAK,eAAe,CAAC;IAClD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,GAAG,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,yBAAyB,CAChC,QAAgC,EAChC,cAA8B,EAC9B,SAA6B,EAC7B,OAAyB;IAEzB,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,IAAA,8BAAmB,EAAC,SAAS,CAAC,CAAC;IACpD,IAAI,YAAY,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QAChD,IAAA,4BAAmB,EAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,IAAA,+BAAoB,EACzB,QAAQ,EACR,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,EACtE;QACE,UAAU,EAAE,IAAA,+BAAoB,EAAC,cAAc,CAAC,UAAU,CAAC;QAC3D,aAAa,EAAE,YAAY;KAC5B,CACF,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,qBAAqB,CACzC,cAA8B,EAC9B,SAA6B,EAC7B,QAA4B,EAC5B,eAAmC,EACnC,eAAmC;IAEnC,MAAM,OAAO,GAAG,IAAA,4CAAuB,EAAC,eAAe,CAAC,CAAC;IACzD,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,wBAAwB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACtE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAA,wBAAc,GAAE,CAAC;IACvC,IAAI,MAAM,GAAsC,IAAA,qCAA0B,EACxE;QACE,IAAI,EACF,kCAAkC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;YAC1E,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE;QACrE,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC;KACpC,EACD,0BAA0B,CAAC,OAAO,EAAE,GAAG,CAAC,CACzC,CAAC;IACF,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,GAAG,yBAAyB,CAChC,MAAM,EACN,cAAc,EACd,SAAS,EACT,OAAO,CACR,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AACvE,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACxC,GAAgB,EAChB,QAA4B,EAC5B,eAAmC,EACnC,eAAmC;IAEnC,kBAAkB,CAChB,IAAA,4CAAuB,EAAC,eAAe,CAAC,EACxC,2BAA2B,CAC5B,CAAC;IACF,MAAM,SAAS,GAAG,wBAAwB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,IACE,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EACrC,CAAC;QACD,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,MAAM,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC"}

package/dist/implementations/dms/guards.d.ts

@@ -0,0 +1,7 @@
+import { type ControllerClass } from "@antelopejs/interface-api";
+import { Action, type ComponentTargetInput } from "@antelopejs/interface-dms/component";
+import type { TenantGuardOptions } from "@antelopejs/interface-dms/guards";
+import type { TenantTokenInput } from "@antelopejs/interface-dms/auth";
+export declare namespace internal {
+    const AuthUserWithPermissionValidator: (target: ComponentTargetInput | ControllerClass | Action, data: TenantTokenInput, options?: TenantGuardOptions) => Promise<false | import("@antelopejs/interface-dms/dist/auth/db").User>;
+}

package/dist/implementations/dms/guards.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.internal = void 0;
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const component_1 = require("@antelopejs/interface-dms/component");
+const db_1 = require("@antelopejs/interface-dms/db");
+const page_1 = require("@antelopejs/interface-dms/page");
+const permissions_1 = require("@antelopejs/interface-dms/permissions");
+const tenant_access_1 = require("@antelopejs/interface-dms/tenant-access");
+const dms_auth_1 = require("../dms-auth");
+const HTTP_FORBIDDEN_STATUS = 403;
+function forbiddenMissingPermission(permissionId) {
+    return new interface_api_1.HTTPResult(HTTP_FORBIDDEN_STATUS, `Forbidden: missing permission ${permissionId}`);
+}
+var internal;
+(function (internal) {
+    internal.AuthUserWithPermissionValidator = async (target, data, options) => {
+        const user = await dms_auth_1.internal.AuthUserValidator(data);
+        if (!user) {
+            return false;
+        }
+        if (data.tenantId && !options?.bypassTenantAccessGate) {
+            await (0, tenant_access_1.AssertTenantAccess)(user._id, data.tenantId);
+        }
+        const permissionId = target instanceof component_1.Action ? target.permissionId : (0, page_1.GetPermissionId)(target);
+        if (!permissionId) {
+            return user;
+        }
+        const { tenantId } = data;
+        if (!tenantId) {
+            throw forbiddenMissingPermission(permissionId);
+        }
+        const roleModel = (0, interface_database_decorators_1.GetModel)(db_1.RoleModel, tenantId);
+        const memberModel = (0, interface_database_decorators_1.GetModel)(db_1.TenantMemberModel, tenantId);
+        const member = await memberModel.getByUser(user._id);
+        const roleIds = member?.roleIds ?? [];
+        const permissions = await (0, permissions_1.GetEffectiveUserPermissions)(user, tenantId, roleIds, roleModel);
+        if (await (0, permissions_1.HasPermission)(permissions, permissionId)) {
+            return user;
+        }
+        throw forbiddenMissingPermission(permissionId);
+    };
+})(internal || (exports.internal = internal = {}));
+//# sourceMappingURL=guards.js.map

package/dist/implementations/dms/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../../src/implementations/dms/guards.ts"],"names":[],"mappings":";;;AAAA,6DAA6E;AAC7E,6FAAqE;AACrE,mEAG6C;AAC7C,qDAA4E;AAE5E,yDAAiE;AACjE,uEAG+C;AAC/C,2EAA6E;AAE7E,0CAAuD;AAEvD,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,SAAS,0BAA0B,CAAC,YAAoB;IACtD,OAAO,IAAI,0BAAU,CACnB,qBAAqB,EACrB,iCAAiC,YAAY,EAAE,CAChD,CAAC;AACJ,CAAC;AAED,IAAiB,QAAQ,CAkDxB;AAlDD,WAAiB,QAAQ;IACV,wCAA+B,GAAG,KAAK,EAClD,MAAuD,EACvD,IAAsB,EACtB,OAA4B,EAC5B,EAAE;QACF,MAAM,IAAI,GAAG,MAAM,mBAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;QAKD,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,CAAC;YACtD,MAAM,IAAA,kCAAkB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,YAAY,GAChB,MAAM,YAAY,kBAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAA,sBAAe,EAAC,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;YAGd,MAAM,0BAA0B,CAAC,YAAY,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,SAAS,GAAG,IAAA,wCAAQ,EAAC,cAAS,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,MAAM,IAAA,yCAA2B,EACnD,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,SAAS,CACV,CAAC;QACF,IAAI,MAAM,IAAA,2BAAa,EAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAMD,MAAM,0BAA0B,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC,CAAC;AACJ,CAAC,EAlDgB,QAAQ,wBAAR,QAAQ,QAkDxB"}

package/dist/implementations/dms/invite-extensions.d.ts

@@ -0,0 +1,7 @@
+import { type InviteExtensionInfo } from "@antelopejs/interface-dms/invite-extensions";
+export declare namespace internal {
+    const RegisterInviteExtension: {
+        register: (info: InviteExtensionInfo) => void;
+        unregister: (info: InviteExtensionInfo) => void;
+    };
+}

package/dist/implementations/dms/invite-extensions.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.internal = void 0;
+const invite_extensions_1 = require("@antelopejs/interface-dms/invite-extensions");
+const dev_reload_1 = require("./dev-reload");
+var internal;
+(function (internal) {
+    internal.RegisterInviteExtension = {
+        register: (info) => {
+            invite_extensions_1.internal.applyInviteExtension(info);
+            (0, dev_reload_1.scheduleBroadcast)();
+        },
+        unregister: (info) => {
+            invite_extensions_1.internal.revokeInviteExtension(info);
+            (0, dev_reload_1.scheduleBroadcast)();
+        },
+    };
+})(internal || (exports.internal = internal = {}));
+//# sourceMappingURL=invite-extensions.js.map

package/dist/implementations/dms/invite-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-extensions.js","sourceRoot":"","sources":["../../../src/implementations/dms/invite-extensions.ts"],"names":[],"mappings":";;;AAAA,mFAGqD;AACrD,6CAAiD;AAKjD,IAAiB,QAAQ,CAWxB;AAXD,WAAiB,QAAQ;IACV,gCAAuB,GAAG;QACrC,QAAQ,EAAE,CAAC,IAAyB,EAAE,EAAE;YACtC,4BAAgC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAA,8BAAiB,GAAE,CAAC;QACtB,CAAC;QACD,UAAU,EAAE,CAAC,IAAyB,EAAE,EAAE;YACxC,4BAAgC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAA,8BAAiB,GAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC,EAXgB,QAAQ,wBAAR,QAAQ,QAWxB"}

package/dist/implementations/dms/manifest.d.ts

@@ -0,0 +1,27 @@
+import type { IncomingMessage } from "node:http";
+export interface ManifestModuleEntry {
+    options?: Record<string, unknown>;
+    privateOptions?: Record<string, unknown>;
+    path?: string;
+}
+export interface ModuleManifestShape<T extends ManifestModuleEntry = ManifestModuleEntry> {
+    pack: string;
+    modules: T[];
+}
+export interface FrontendManifest<T extends ManifestModuleEntry> {
+    version: number;
+    archive: string;
+    modules: T[];
+}
+export interface ManifestUrls {
+    apiBaseUrl?: string;
+    clientBaseUrl?: string;
+}
+export declare function resolveRequestOrigin(request: IncomingMessage): string | undefined;
+export declare function resolveClientOrigin(clientUrl: string | undefined): string | undefined;
+export declare function applyDevManifestUrls<T extends ManifestModuleEntry>(manifest: ModuleManifestShape<T>, configured: ManifestUrls, overrides: ManifestUrls): ModuleManifestShape<T>;
+export interface ManifestFieldPolicy {
+    privateOptions: boolean;
+    path: boolean;
+}
+export declare function stripPrivateManifestFields<T extends ManifestModuleEntry>(manifest: ModuleManifestShape<T>, keep: ManifestFieldPolicy): ModuleManifestShape<T>;

package/dist/implementations/dms/manifest.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRequestOrigin = resolveRequestOrigin;
+exports.resolveClientOrigin = resolveClientOrigin;
+exports.applyDevManifestUrls = applyDevManifestUrls;
+exports.stripPrivateManifestFields = stripPrivateManifestFields;
+const HTTP_PROTOCOLS = new Set(["http:", "https:"]);
+function resolveRequestOrigin(request) {
+    const host = request.headers.host;
+    if (!host)
+        return undefined;
+    const socket = request.socket;
+    const protocol = socket.encrypted ? "https" : "http";
+    return `${protocol}://${host}`;
+}
+function resolveClientOrigin(clientUrl) {
+    if (!clientUrl)
+        return undefined;
+    try {
+        const url = new URL(clientUrl);
+        if (!HTTP_PROTOCOLS.has(url.protocol))
+            return undefined;
+        return url.origin;
+    }
+    catch {
+        return undefined;
+    }
+}
+const URL_BOUNDARY = "(?=[/?#]|$)";
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function buildOriginRewriter(configured, overrides) {
+    const replacements = new Map();
+    if (configured.apiBaseUrl && overrides.apiBaseUrl) {
+        replacements.set(configured.apiBaseUrl, overrides.apiBaseUrl);
+    }
+    if (configured.clientBaseUrl && overrides.clientBaseUrl) {
+        replacements.set(configured.clientBaseUrl, overrides.clientBaseUrl);
+    }
+    if (replacements.size === 0)
+        return undefined;
+    const alternation = [...replacements.keys()]
+        .sort((a, b) => b.length - a.length)
+        .map(escapeRegExp)
+        .join("|");
+    const pattern = new RegExp(`(?:${alternation})${URL_BOUNDARY}`, "g");
+    return (value) => value.replace(pattern, (match) => replacements.get(match) ?? match);
+}
+function rewriteValue(value, rewrite) {
+    if (typeof value === "string")
+        return rewrite(value);
+    if (Array.isArray(value))
+        return value.map((item) => rewriteValue(item, rewrite));
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+            key,
+            rewriteValue(item, rewrite),
+        ]));
+    }
+    return value;
+}
+function rewriteModuleOptions(module, rewrite) {
+    if (!module.options)
+        return module;
+    return {
+        ...module,
+        options: rewriteValue(module.options, rewrite),
+    };
+}
+function applyDevManifestUrls(manifest, configured, overrides) {
+    const rewrite = buildOriginRewriter(configured, overrides);
+    if (!rewrite)
+        return manifest;
+    return {
+        ...manifest,
+        modules: manifest.modules.map((module) => rewriteModuleOptions(module, rewrite)),
+    };
+}
+function applyFieldPolicy(module, keep) {
+    const shaped = { ...module };
+    if (!keep.privateOptions)
+        delete shaped.privateOptions;
+    if (!keep.path)
+        delete shaped.path;
+    return shaped;
+}
+function stripPrivateManifestFields(manifest, keep) {
+    if (keep.privateOptions && keep.path)
+        return manifest;
+    return {
+        ...manifest,
+        modules: manifest.modules.map((module) => applyFieldPolicy(module, keep)),
+    };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/implementations/dms/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/implementations/dms/manifest.ts"],"names":[],"mappings":";;AAgCA,oDAQC;AAED,kDAWC;AAwED,oDAaC;AAgCD,gEASC;AAzJD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAMpD,SAAgB,oBAAoB,CAClC,OAAwB;IAExB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAiC,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,GAAG,QAAQ,MAAM,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,SAAgB,mBAAmB,CACjC,SAA6B;IAE7B,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QACxD,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAOD,MAAM,YAAY,GAAG,aAAa,CAAC;AAEnC,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAAwB,EACxB,SAAuB;IAEvB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,IAAI,UAAU,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QAClD,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,UAAU,CAAC,aAAa,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QACxD,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAG9C,MAAM,WAAW,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;SACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;SACnC,GAAG,CAAC,YAAY,CAAC;SACjB,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,WAAW,IAAI,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,OAAuB;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YACzC,GAAG;YACH,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC;SAC5B,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAS,EACT,OAAuB;IAEvB,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IACnC,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAA4B;KAC1E,CAAC;AACJ,CAAC;AAYD,SAAgB,oBAAoB,CAClC,QAAgC,EAChC,UAAwB,EACxB,SAAuB;IAEvB,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACvC,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CACtC;KACF,CAAC;AACJ,CAAC;AAUD,SAAS,gBAAgB,CACvB,MAAS,EACT,IAAyB;IAEzB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,cAAc;QAAE,OAAO,MAAM,CAAC,cAAc,CAAC;IACvD,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAcD,SAAgB,0BAA0B,CACxC,QAAgC,EAChC,IAAyB;IAEzB,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IACtD,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;KAC1E,CAAC;AACJ,CAAC"}

package/dist/implementations/dms/page.d.ts

@@ -0,0 +1,93 @@
+import type { PassThrough } from "node:stream";
+import { type RequestContext } from "@antelopejs/interface-api";
+import { RoleModel, TenantMemberModel } from "@antelopejs/interface-dms/db";
+import { type CategoryInfo, type DynamicMenuProviderInfo, type ModuleInfo, type PageExtensionInfo, type PageInfo, type PageLayout } from "@antelopejs/interface-dms/page";
+import type { User } from "@antelopejs/interface-dms/auth/db";
+import type { FrontendManifest, ManifestModuleEntry } from "./manifest";
+import { type QuickActionsPayload } from "./quick-actions";
+export { AddFrontendModule, createIgnoreFilter, GetFrontendModules, } from "./frontend-modules";
+type SiteLayoutTree = Omit<PageInfo, "layoutUrl"> & {
+    children: Record<string, SiteLayoutTree>;
+    childrenOrders: string[];
+    layoutUrl?: string;
+    hasAccess?: boolean;
+};
+export declare function userCanAccessPage(user: User | undefined, fullId: string, memberModel: TenantMemberModel, roleModel: RoleModel, tenantId: string): Promise<boolean>;
+export declare function NotifyMenuChanged(tenantId?: string): void;
+export declare function cancelPendingMenuNotifications(): void;
+export declare namespace internal {
+    const RegisterCategory: {
+        register: (categoryInfo: CategoryInfo) => void;
+        unregister: (categoryInfo: CategoryInfo) => void;
+    };
+    const RegisterPage: {
+        register: (pageInfo: PageInfo) => void;
+        unregister: (pageInfo: PageInfo) => void;
+    };
+    const RegisterModule: {
+        register: (info: ModuleInfo) => void;
+        unregister: (info: ModuleInfo) => void;
+    };
+    const RegisterDynamicMenuProvider: {
+        register: (info: DynamicMenuProviderInfo) => void;
+        unregister: (info: DynamicMenuProviderInfo) => void;
+    };
+    const RegisterPageExtension: {
+        register: (info: PageExtensionInfo) => void;
+        unregister: (info: PageExtensionInfo) => void;
+    };
+}
+declare const DMSController_base: import("@antelopejs/interface-api").ControllerClass<object>;
+export declare class DMSController extends DMSController_base {
+    bootstrapHeader: string | undefined;
+    pagePath: string;
+    sharedPage: string | undefined;
+    frontend(requestContext: RequestContext, clientUrl: string | undefined, renderer: string | undefined, rendererVersion: string | undefined): Promise<FrontendManifest<ManifestModuleEntry>>;
+    frontendModules(out: PassThrough, renderer: string | undefined, rendererVersion: string | undefined): Promise<void>;
+    userPermissions(requestContext: RequestContext, roleModel: RoleModel, memberModel: TenantMemberModel, user: User | undefined): Promise<string[]>;
+    siteLayout(requestContext: RequestContext, roleModel: RoleModel, memberModel: TenantMemberModel, user: User | undefined): Promise<SiteLayoutPayload>;
+    modulesListing(requestContext: RequestContext, roleModel: RoleModel, memberModel: TenantMemberModel, user: User | undefined): Promise<Array<ModuleInfo & {
+        hasAccess: boolean;
+        landingSlug: string;
+    }>>;
+    pageLayout(requestContext: RequestContext, roleModel: RoleModel, memberModel: TenantMemberModel, user: User | undefined, slug: string): Promise<PageLayout<unknown>>;
+    page(requestContext: RequestContext, roleModel: RoleModel, memberModel: TenantMemberModel, user: User | undefined): Promise<PageResponsePayload>;
+}
+interface AccessFlag {
+    hasAccess: boolean;
+}
+interface SiteLayoutWithAccess {
+    pages: Record<string, PageInfo & AccessFlag>;
+    categories: Record<string, CategoryInfo & AccessFlag>;
+}
+export interface SiteLayoutPayload {
+    siteLayout: SiteLayoutWithAccess;
+    siteLayoutTree: SiteLayoutTree;
+    quickActions: QuickActionsPayload;
+    modules: Record<string, ModuleInfo & AccessFlag>;
+    isOwner: boolean;
+}
+export interface PagePayload {
+    route: PageInfo & AccessFlag;
+    shared: SiteLayoutPayload;
+    layout: PageLayout;
+}
+export interface PageResponsePayload extends Omit<PagePayload, "shared"> {
+    shared?: SiteLayoutPayload;
+}
+type SharedPagePayloadArguments = [
+    slug: string,
+    user: User | undefined,
+    memberModel: TenantMemberModel,
+    roleModel: RoleModel,
+    tenantId: string
+];
+type PageResponsePayloadArguments = [
+    ...SharedPagePayloadArguments,
+    includeShared: boolean
+];
+export declare function buildPagePayload(...arguments_: SharedPagePayloadArguments): Promise<PagePayload>;
+export declare function buildPagePayload(...arguments_: PageResponsePayloadArguments): Promise<PageResponsePayload>;
+export declare function filterPermissionsForBypassedSurfaces(permissions: Set<string>, surfaces: Map<string, boolean>): Set<string>;
+export declare function resolveUserPermissions(user: User | undefined, memberModel: TenantMemberModel, roleModel: RoleModel, tenantId: string): Promise<string[]>;
+export declare function buildSiteLayoutPayload(user: User | undefined, memberModel: TenantMemberModel, roleModel: RoleModel, tenantId: string): Promise<SiteLayoutPayload>;