@antelopejs/dms 0.11.1 → 0.12.0

package/dist/implementations/dms/page.js

@@ -1,1602 +1,35 @@
 "use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DMSController = exports.internal = exports.GetFrontendModules = exports.AddFrontendModule = void 0;
-exports.isPlatformPage = isPlatformPage;
-exports.userCanAccessPage = userCanAccessPage;
-exports.reportMissingCategories = reportMissingCategories;
-exports.cancelMissingCategoryCheck = cancelMissingCategoryCheck;
-exports.GetMenuOrder = GetMenuOrder;
-exports.GetCategoryPermissionIds = GetCategoryPermissionIds;
-exports.GetMenuEntryPermissionIds = GetMenuEntryPermissionIds;
-exports.NotifyMenuChanged = NotifyMenuChanged;
-exports.notifyMenuAccessChanged = notifyMenuAccessChanged;
-exports.cancelPendingMenuNotifications = cancelPendingMenuNotifications;
-exports.pageParamsOf = pageParamsOf;
-exports.buildPagePayload = buildPagePayload;
-exports.resolvePreviewPermissions = resolvePreviewPermissions;
-exports.resolvePermissionPreviewAccess = resolvePermissionPreviewAccess;
-exports.filterPermissionsForBypassedSurfaces = filterPermissionsForBypassedSurfaces;
-exports.resolveUserPermissions = resolveUserPermissions;
-exports.buildSiteLayoutPayload = buildSiteLayoutPayload;
-exports.buildNavBadges = buildNavBadges;
-exports.isPlatformOwner = isPlatformOwner;
-const interface_api_1 = require("@antelopejs/interface-api");
-const interface_api_util_1 = require("@antelopejs/interface-api-util");
-const interface_core_1 = require("@antelopejs/interface-core");
-const logging_1 = require("@antelopejs/interface-core/logging");
-const component_1 = require("@antelopejs/interface-dms/component");
-const db_1 = require("@antelopejs/interface-dms/db");
-const page_1 = require("@antelopejs/interface-dms/page");
-const categories_1 = require("@antelopejs/interface-dms/page/internal/categories");
-const registry_1 = require("@antelopejs/interface-dms/page/internal/registry");
-const permission_gate_1 = require("@antelopejs/interface-dms/internal/permission-gate");
-const permissions_1 = require("@antelopejs/interface-dms/permissions");
-const permissions_resolver_1 = require("@antelopejs/interface-dms/permissions-resolver");
-const request_tenant_1 = require("@antelopejs/interface-dms/request-tenant");
-const tenant_access_1 = require("@antelopejs/interface-dms/tenant-access");
-const tenant_access_2 = require("@antelopejs/interface-dms/internal/tenant-access");
-const tenant_scoped_model_1 = require("@antelopejs/interface-dms/tenant-scoped-model");
-const auth_1 = require("@antelopejs/interface-dms/auth");
-const component_target_1 = require("@antelopejs/interface-dms/page/internal/component-target");
-const realtime_1 = require("../../realtime");
-const fire_and_forget_1 = require("@antelopejs/interface-dms/utils/fire-and-forget");
-const dev_reload_1 = require("./dev-reload");
-const frontend_ready_1 = require("./frontend-ready");
-const stale_session_1 = require("./stale-session");
-const frontend_modules_1 = require("./frontend-modules");
-const frontend_bootstrap_1 = require("./frontend-bootstrap");
-const quick_actions_1 = require("./quick-actions");
-const layout_banners_1 = require("./layout-banners");
-const route_params_1 = require("./route-params");
-const nav_badges_1 = require("./nav-badges");
-const menu_categories_1 = require("./menu-categories");
-const resolver_timeout_1 = require("./resolver-timeout");
-const warn_once_1 = require("./warn-once");
-const permission_preview_1 = require("./permission-preview");
-const run_in_batches_1 = require("../../utils/run-in-batches");
-var frontend_modules_2 = require("./frontend-modules");
-Object.defineProperty(exports, "AddFrontendModule", { enumerable: true, get: function () { return frontend_modules_2.AddFrontendModule; } });
-Object.defineProperty(exports, "GetFrontendModules", { enumerable: true, get: function () { return frontend_modules_2.GetFrontendModules; } });
-const pagesBySlug = {};
-const categoriesByFullId = {};
-const navigationTree = {
-    displayName: "",
-    children: {},
-    childrenOrders: [],
-    id: "",
-    fullId: "",
-    fullSlug: "",
-    category: undefined,
-};
-const OMIT_SHARED_PAGE_QUERY_VALUE = "false";
-const PAGE_LAYOUT_SLUG_PARAMETER = "slug";
-const PAGE_REQUEST_PARAMETERS = ["path", "shared"];
-(0, dev_reload_1.setSlugProvider)(() => Object.keys(pagesBySlug));
-function resolvePagePermissionId(permission, fullId) {
-    if (permission instanceof component_1.Action) {
-        return permission.permissionId ?? fullId;
-    }
-    return permission?.id || fullId;
-}
-function warnOnSlugCollision(existing, incoming) {
-    if (!existing || existing.fullId === incoming.fullId)
-        return;
-    (0, warn_once_1.warnOnceFor)(incoming, "slug-collision", `[dms] "${incoming.fullId}" claims the slug "${incoming.fullSlug}", already served by "${existing.fullId}": the later registration wins.`);
-}
-function findNavigableCategoryBySlug(slug) {
-    return Object.values(categoriesByFullId).find((category) => !category.urlTransparent && category.fullSlug === slug);
-}
-function findEntryByFullId(registry, fullId) {
-    return Object.values(registry).find((entry) => entry.fullId === fullId);
-}
-function findPageByFullId(fullId) {
-    return findEntryByFullId(pagesBySlug, fullId);
-}
-function isPlatformPage(fullId) {
-    const info = findPageByFullId(fullId);
-    return info !== undefined && (0, page_1.isInsideModule)(info);
-}
-function findNavigationEntryByFullId(fullId) {
-    return categoriesByFullId[fullId] ?? findPageByFullId(fullId);
-}
-async function userCanAccessPage(user, fullId, memberModel, roleModel, tenantId) {
-    const info = findPageByFullId(fullId);
-    if (!info)
-        return false;
-    if (!user)
-        return !(0, page_1.isInsideModule)(info) && info.publicAccess === true;
-    const access = await (0, tenant_access_1.CheckTenantAccess)(user._id, tenantId);
-    if (!(0, tenant_access_2.gateAllowsSurface)(info, !access.allowed))
-        return false;
-    const roleIds = await getRoleIdsForUser(memberModel, user);
-    const permissions = await (0, permissions_1.GetEffectiveUserPermissions)(user, tenantId, roleIds, roleModel);
-    if (permissions.has(WILDCARD_PERMISSION))
-        return true;
-    if ((0, page_1.isInsideModule)(info))
-        return false;
-    if (info.authOnly)
-        return true;
-    return (0, permissions_1.HasPermission)(permissions, resolvePagePermissionId(info.permission, info.fullId));
-}
-const warnedMissingCategories = new Set();
-const suspectedMissingCategories = new Set();
-let missingCategoryCheck;
-const MISSING_CATEGORY_SETTLE_MS = 250;
-function suspectMissingCategory(categoryFullId) {
-    if (warnedMissingCategories.has(categoryFullId))
-        return;
-    suspectedMissingCategories.add(categoryFullId);
-    missingCategoryCheck ??= setTimeout(reportMissingCategories, MISSING_CATEGORY_SETTLE_MS);
-    missingCategoryCheck.unref();
-}
-function findTreeNode(fullId) {
-    let node = navigationTree;
-    for (const part of fullId.split(".")) {
-        node = node?.children[part];
-    }
-    return node;
-}
-function reportMissingCategories() {
-    clearTimeout(missingCategoryCheck);
-    missingCategoryCheck = undefined;
-    for (const categoryFullId of suspectedMissingCategories) {
-        const node = findTreeNode(categoryFullId);
-        const heldKeys = node ? Object.keys(node.children) : [];
-        if (categoryFullId in categoriesByFullId ||
-            !node ||
-            !isContainerWithoutEntry(node) ||
-            heldKeys.length === 0) {
-            continue;
-        }
-        warnedMissingCategories.add(categoryFullId);
-        const entries = heldKeys
-            .map((key) => `"${categoryFullId}.${key}"`)
-            .join(", ");
-        logging_1.Logging.Warn(`[dms] category "${categoryFullId}" is not registered but ${entries} hang under it: the menu shows them at its parent's level.`);
-    }
-    suspectedMissingCategories.clear();
-}
-function cancelMissingCategoryCheck() {
-    clearTimeout(missingCategoryCheck);
-    missingCategoryCheck = undefined;
-    suspectedMissingCategories.clear();
-}
-function ensureContainer(level, containerFullId) {
-    const key = containerFullId.slice(containerFullId.lastIndexOf(".") + 1);
-    const isRegistered = Boolean(level[key]?.fullId) || containerFullId in categoriesByFullId;
-    if (!isRegistered)
-        suspectMissingCategory(containerFullId);
-    level[key] ??= {
-        displayName: "none",
-        children: {},
-        childrenOrders: [],
-        id: "",
-        fullId: "",
-        fullSlug: "",
-        category: undefined,
-    };
-    return level[key];
-}
-function addToTree(newPageInfo) {
-    const parts = newPageInfo.fullId.split(".");
-    let currentLevel = navigationTree.children;
-    for (let i = 0; i < parts.length - 1; i++) {
-        const containerFullId = parts.slice(0, i + 1).join(".");
-        currentLevel = ensureContainer(currentLevel, containerFullId).children;
-    }
-    const lastPart = parts[parts.length - 1];
-    const existingChildren = currentLevel[lastPart]?.children || {};
-    const existingChildrenOrders = currentLevel[lastPart]?.childrenOrders || [];
-    currentLevel[lastPart] = {
-        ...newPageInfo,
-        children: existingChildren,
-        childrenOrders: existingChildrenOrders,
-    };
-    updateChildrenOrders(navigationTree);
-}
-function compareText(a, b) {
-    if (a === b)
-        return 0;
-    return a < b ? -1 : 1;
-}
-function compareMenuChildren(a, b) {
-    return ((a.order ?? 0) - (b.order ?? 0) ||
-        compareText(a.displayName, b.displayName) ||
-        compareText(a.id, b.id));
-}
-function sortChildIdsByOrder(children) {
-    return Object.keys(children).sort((a, b) => compareMenuChildren(children[a], children[b]));
-}
-function updateChildrenOrders(node) {
-    node.childrenOrders = sortChildIdsByOrder(node.children);
-    for (const child of node.childrenOrders) {
-        updateChildrenOrders(node.children[child]);
-    }
-}
-function GetMenuOrder() {
-    const positions = new Map();
-    let position = 0;
-    const visit = (node) => {
-        for (const key of node.childrenOrders) {
-            const child = node.children[key];
-            if (!child)
-                continue;
-            if (!isContainerWithoutEntry(child)) {
-                const permissionId = resolvePagePermissionId(child.permission, child.fullId);
-                if (!positions.has(permissionId))
-                    positions.set(permissionId, position);
-                if (!positions.has(child.fullId))
-                    positions.set(child.fullId, position);
-                position += 1;
-            }
-            visit(child);
-        }
-    };
-    visit(navigationTree);
-    return positions;
-}
-function GetCategoryPermissionIds() {
-    return new Set(Object.values(categoriesByFullId).map((category) => resolvePagePermissionId(category.permission, category.fullId)));
-}
-function GetMenuEntryPermissionIds() {
-    return new Set([...Object.values(pagesBySlug), ...Object.values(categoriesByFullId)].map((entry) => resolvePagePermissionId(entry.permission, entry.fullId)));
-}
-function removeFromTree(fullId) {
-    const parts = fullId.split(".");
-    const levels = [
-        navigationTree.children,
-    ];
-    let currentLevel = navigationTree.children;
-    for (let i = 0; i < parts.length - 1; i++) {
-        const node = currentLevel[parts[i]];
-        if (!node)
-            return;
-        currentLevel = node.children;
-        levels.push(currentLevel);
-    }
-    const key = parts[parts.length - 1];
-    const target = currentLevel[key];
-    if (!target)
-        return;
-    const heldKeys = Object.keys(target.children);
-    if (heldKeys.length > 0) {
-        suspectMissingCategory(fullId);
-        currentLevel[key] = {
-            ...target,
-            displayName: "none",
-            id: "",
-            fullId: "",
-            fullSlug: "",
-            category: undefined,
-        };
-        updateChildrenOrders(navigationTree);
-        return;
-    }
-    for (let i = parts.length - 1; i >= 0; i--) {
-        const level = levels[i];
-        const node = level[parts[i]];
-        if (!node)
-            return;
-        if (i < parts.length - 1 &&
-            (node.fullId || Object.keys(node.children).length > 0)) {
-            break;
-        }
-        delete level[parts[i]];
-    }
-    updateChildrenOrders(navigationTree);
-}
-const moduleRegistry = {};
-const dynamicMenuProviders = [];
-const nodeProviders = new WeakMap();
-const nodeTargets = new WeakMap();
-let previewStructureVersion = 0;
-const HTTP_FORBIDDEN = 403;
-const WILDCARD_PERMISSION = "*";
-const ERROR_UNAUTHORIZED = "error.unauthorized";
-function notifyStructureChanged() {
-    previewStructureVersion++;
-    (0, dev_reload_1.scheduleBroadcast)();
-    schedulePublishMenuChanged(realtime_1.MENU_BROADCAST_TOPIC);
-}
-function NotifyMenuChanged(tenantId) {
-    (0, dev_reload_1.scheduleBroadcast)();
-    schedulePublishMenuChanged(tenantId ? (0, realtime_1.buildMenuTopic)(tenantId) : realtime_1.MENU_BROADCAST_TOPIC);
-}
-function notifyMenuAccessChanged(tenantId, userIds) {
-    for (const userId of new Set(userIds)) {
-        schedulePublishMenuChanged((0, realtime_1.buildMemberMenuTopic)(tenantId, userId));
-    }
-}
-const MODULE_CONTEXT_GONE = "ERR_MODULE_CONTEXT_INVALIDATED";
-function isModuleContextGone(error) {
-    return (typeof error === "object" &&
-        error !== null &&
-        error.code === MODULE_CONTEXT_GONE);
-}
-function ignoreModuleContextGone(error) {
-    if (!isModuleContextGone(error))
-        throw error;
-}
-const MENU_NOTIFICATION_WINDOW_MS = 250;
-const lastMenuPublishAt = new Map();
-const pendingMenuNotifications = new Map();
-function schedulePublishMenuChanged(target) {
-    const publish = () => {
-        lastMenuPublishAt.set(target, Date.now());
-        try {
-            (0, fire_and_forget_1.fireAndForget)(publishMenuChanged(target).catch(ignoreModuleContextGone), "menu change notification");
-        }
-        catch (error) {
-            ignoreModuleContextGone(error);
-        }
-    };
-    if (pendingMenuNotifications.has(target))
-        return;
-    const sinceLast = Date.now() - (lastMenuPublishAt.get(target) ?? 0);
-    if (sinceLast >= MENU_NOTIFICATION_WINDOW_MS) {
-        publish();
-        return;
-    }
-    const timer = setTimeout(() => {
-        pendingMenuNotifications.delete(target);
-        publish();
-    }, MENU_NOTIFICATION_WINDOW_MS - sinceLast);
-    timer.unref?.();
-    pendingMenuNotifications.set(target, timer);
-}
-function cancelPendingMenuNotifications() {
-    for (const timer of pendingMenuNotifications.values()) {
-        clearTimeout(timer);
-    }
-    pendingMenuNotifications.clear();
-}
-async function publishMenuChanged(topic) {
-    await (0, realtime_1.getRealtimeBroker)().publish({
-        topic,
-        type: realtime_1.MENU_CHANGED_EVENT_TYPE,
-        ts: Date.now(),
-    });
-}
-var internal;
-(function (internal) {
-    internal.RegisterCategory = {
-        register: (categoryInfo) => {
-            if (!categoryInfo.urlTransparent) {
-                warnOnSlugCollision(findNavigableCategoryBySlug(categoryInfo.fullSlug), categoryInfo);
-            }
-            categoriesByFullId[categoryInfo.fullId] = categoryInfo;
-            if (!categoryInfo.hidden) {
-                addToTree(categoryInfo);
-                notifyStructureChanged();
-            }
-        },
-        unregister: (categoryInfo) => {
-            if (categoriesByFullId[categoryInfo.fullId] !== categoryInfo) {
-                return;
-            }
-            delete categoriesByFullId[categoryInfo.fullId];
-            if (!categoryInfo.hidden) {
-                removeFromTree(categoryInfo.fullId);
-                notifyStructureChanged();
-            }
-            if ((0, page_1.isInsideModule)(categoryInfo)) {
-                (0, permissions_1.UnmarkModuleScopedPermission)(resolvePagePermissionId(categoryInfo.permission, categoryInfo.fullId));
-            }
-        },
-    };
-    internal.RegisterPage = {
-        register: (pageInfo) => {
-            warnOnSlugCollision(pagesBySlug[pageInfo.fullSlug], pageInfo);
-            pagesBySlug[pageInfo.fullSlug] = pageInfo;
-            if (!pageInfo.hidden) {
-                addToTree(pageInfo);
-                notifyStructureChanged();
-            }
-        },
-        unregister: (pageInfo) => {
-            if (pagesBySlug[pageInfo.fullSlug] !== pageInfo) {
-                (0, categories_1.clearPageMetadata)(pageInfo.fullId, pageInfo);
-                return;
-            }
-            delete pagesBySlug[pageInfo.fullSlug];
-            if (!pageInfo.hidden) {
-                removeFromTree(pageInfo.fullId);
-                notifyStructureChanged();
-            }
-            if ((0, page_1.isInsideModule)(pageInfo)) {
-                (0, permissions_1.UnmarkModuleScopedPermission)(resolvePagePermissionId(pageInfo.permission, pageInfo.fullId));
-            }
-            (0, categories_1.clearPageMetadata)(pageInfo.fullId, pageInfo);
-            (0, page_1.ClearPageLayoutBySlug)(pageInfo.fullSlug);
-            (0, realtime_1.clearPageTopics)(pageInfo.fullId);
-        },
-    };
-    internal.RegisterModule = {
-        register: (info) => {
-            moduleRegistry[info.id] = info;
-            notifyStructureChanged();
-        },
-        unregister: (info) => {
-            delete moduleRegistry[info.id];
-            (0, categories_1.clearModuleResolution)(info.id);
-            notifyStructureChanged();
-        },
-    };
-    internal.RegisterDynamicMenuProvider = {
-        register: (info) => {
-            dynamicMenuProviders.push(info);
-            notifyStructureChanged();
-        },
-        unregister: (info) => {
-            const index = dynamicMenuProviders.indexOf(info);
-            if (index >= 0)
-                dynamicMenuProviders.splice(index, 1);
-            notifyStructureChanged();
-        },
-    };
-    internal.RegisterPageExtension = {
-        register: (info) => {
-            (0, categories_1.applyPageExtension)(info);
-            (0, dev_reload_1.scheduleBroadcast)();
-        },
-        unregister: (info) => {
-            (0, categories_1.revokePageExtension)(info);
-            (0, dev_reload_1.scheduleBroadcast)();
-        },
-    };
-})(internal || (exports.internal = internal = {}));
-class DMSController extends (0, interface_api_1.Controller)("/dms") {
-    async frontend(requestContext, clientUrl, renderer, rendererVersion) {
-        return (0, frontend_modules_1.buildFrontendManifest)(requestContext, clientUrl, renderer, rendererVersion, this.bootstrapHeader);
-    }
-    frontendReady(body) {
-        (0, frontend_ready_1.acknowledgeFrontendReady)(body, this.bootstrapHeader);
-    }
-    async userPermissions(requestContext, roleModel, memberModel, user) {
-        return resolveUserPermissions(user, memberModel, roleModel, (0, request_tenant_1.getRequestTenantId)(requestContext));
-    }
-    async siteLayout(requestContext, roleModel, memberModel, user) {
-        return buildSiteLayoutPayload(user, memberModel, roleModel, (0, request_tenant_1.getRequestTenantId)(requestContext));
-    }
-    async modulesListing(requestContext, roleModel, memberModel, user) {
-        const tenantId = (0, request_tenant_1.getRequestTenantId)(requestContext);
-        const accessContext = await buildAccessContext(user, memberModel, roleModel, tenantId);
-        (0, interface_api_util_1.assert)(accessContext.gated.isOwner, HTTP_FORBIDDEN, ERROR_UNAUTHORIZED);
-        const catalogContext = { user, tenantId };
-        return Promise.all(Object.values(moduleRegistry).map(async (info) => {
-            const [status, readout] = await Promise.all([
-                runModuleStatusHook(info, catalogContext),
-                runModuleReadoutHook(info, catalogContext),
-            ]);
-            return {
-                ...presentModuleInfo(info),
-                hasAccess: await computeModuleAccess(info.id, accessContext),
-                landingSlug: resolveModuleLandingSlug(info),
-                status,
-                readout,
-            };
-        }));
-    }
-    async pageLayout(requestContext, roleModel, memberModel, user, slug) {
-        (0, interface_api_util_1.assert)(slug, 400, "error.slug_required");
-        const normalizedSlug = slug.startsWith("/") ? slug : `/${slug}`;
-        const handler = (0, page_1.GetPageLayoutBySlug)(normalizedSlug);
-        (0, interface_api_util_1.assert)(handler, 404, "error.page_not_found");
-        return handler({
-            user,
-            memberModel,
-            roleModel,
-            tenantId: (0, request_tenant_1.getRequestTenantId)(requestContext),
-            query: pageQueryOf(requestContext),
-        });
-    }
-    async page(requestContext, roleModel, memberModel, user) {
-        (0, interface_api_util_1.assert)(this.pagePath, 400, "error.path_required");
-        const payload = await buildPagePayload(this.pagePath, user, memberModel, roleModel, (0, request_tenant_1.getRequestTenantId)(requestContext), this.sharedPage !== OMIT_SHARED_PAGE_QUERY_VALUE, requestContext);
-        await (0, stale_session_1.assertPageSessionAccepted)(payload, !!user, this.authorization);
-        return payload;
-    }
-}
-exports.DMSController = DMSController;
-__decorate([
-    (0, interface_api_1.Parameter)(frontend_bootstrap_1.BOOTSTRAP_HEADER, "header"),
-    __metadata("design:type", Object)
-], DMSController.prototype, "bootstrapHeader", void 0);
-__decorate([
-    (0, interface_api_1.Parameter)("path", "query"),
-    __metadata("design:type", String)
-], DMSController.prototype, "pagePath", void 0);
-__decorate([
-    (0, interface_api_1.Parameter)("shared", "query"),
-    __metadata("design:type", Object)
-], DMSController.prototype, "sharedPage", void 0);
-__decorate([
-    (0, interface_api_1.Parameter)("authorization", "header"),
-    __metadata("design:type", Object)
-], DMSController.prototype, "authorization", void 0);
-__decorate([
-    (0, interface_api_1.Get)("/frontend"),
-    __param(0, (0, interface_api_1.Context)()),
-    __param(1, (0, interface_api_1.Parameter)("clientUrl", "query")),
-    __param(2, (0, interface_api_1.Parameter)("renderer", "query")),
-    __param(3, (0, interface_api_1.Parameter)("rendererVersion", "query")),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object, Object, Object]),
-    __metadata("design:returntype", Promise)
-], DMSController.prototype, "frontend", null);
-__decorate([
-    (0, interface_api_1.Post)("/frontend/ready"),
-    __param(0, (0, interface_api_1.JSONBody)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", void 0)
-], DMSController.prototype, "frontendReady", null);
-__decorate([
-    (0, interface_api_1.Get)("/permissions"),
-    __param(0, (0, interface_api_1.Context)()),
-    __param(1, (0, tenant_scoped_model_1.TenantScopedModel)(db_1.RoleModel)),
-    __param(2, (0, tenant_scoped_model_1.TenantScopedModel)(db_1.TenantMemberModel)),
-    __param(3, (0, auth_1.IfAuthUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, db_1.RoleModel,
-        db_1.TenantMemberModel, Object]),
-    __metadata("design:returntype", Promise)
-], DMSController.prototype, "userPermissions", null);
-__decorate([
-    (0, interface_api_1.Get)("/sitelayout"),
-    __param(0, (0, interface_api_1.Context)()),
-    __param(1, (0, tenant_scoped_model_1.TenantScopedModel)(db_1.RoleModel)),
-    __param(2, (0, tenant_scoped_model_1.TenantScopedModel)(db_1.TenantMemberModel)),
-    __param(3, (0, auth_1.IfAuthUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, db_1.RoleModel,
-        db_1.TenantMemberModel, Object]),
-    __metadata("design:returntype", Promise)
-], DMSController.prototype, "siteLayout", null);
-__decorate([
-    (0, interface_api_1.Get)("/modules-listing"),
-    __param(0, (0, interface_api_1.Context)()),
-    __param(1, (0, tenant_scoped_model_1.TenantScopedModel)(db_1.RoleModel)),
-    __param(2, (0, tenant_scoped_model_1.TenantScopedModel)(db_1.TenantMemberModel)),
-    __param(3, (0, auth_1.IfAuthUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, db_1.RoleModel,
-        db_1.TenantMemberModel, Object]),
-    __metadata("design:returntype", Promise)
-], DMSController.prototype, "modulesListing", null);
-__decorate([
-    (0, interface_api_1.Get)("/pagelayout"),
-    __param(0, (0, interface_api_1.Context)()),
-    __param(1, (0, tenant_scoped_model_1.TenantScopedModel)(db_1.RoleModel)),
-    __param(2, (0, tenant_scoped_model_1.TenantScopedModel)(db_1.TenantMemberModel)),
-    __param(3, (0, auth_1.IfAuthUser)()),
-    __param(4, (0, interface_api_1.Parameter)(PAGE_LAYOUT_SLUG_PARAMETER, "query")),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, db_1.RoleModel,
-        db_1.TenantMemberModel, Object, String]),
-    __metadata("design:returntype", Promise)
-], DMSController.prototype, "pageLayout", null);
-__decorate([
-    (0, interface_api_1.Get)("/page"),
-    __param(0, (0, interface_api_1.Context)()),
-    __param(1, (0, tenant_scoped_model_1.TenantScopedModel)(db_1.RoleModel)),
-    __param(2, (0, tenant_scoped_model_1.TenantScopedModel)(db_1.TenantMemberModel)),
-    __param(3, (0, auth_1.IfAuthUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, db_1.RoleModel,
-        db_1.TenantMemberModel, Object]),
-    __metadata("design:returntype", Promise)
-], DMSController.prototype, "page", null);
-function pageQueryOf(requestContext, ownParameters = [PAGE_LAYOUT_SLUG_PARAMETER]) {
-    const query = Object.fromEntries(requestContext.url.searchParams);
-    for (const name of ownParameters)
-        delete query[name];
-    return query;
-}
-function matchesPagePattern(pattern, path) {
-    const patternSegments = pattern.split("/").filter(Boolean);
-    const pathSegments = path.split("/").filter(Boolean);
-    return (patternSegments.length === pathSegments.length &&
-        patternSegments.every((segment, index) => segment.startsWith(":") || segment === pathSegments[index]));
-}
-function pageParamsOf(pattern, path) {
-    if (!matchesPagePattern(pattern, path))
-        return {};
-    const pathSegments = path.split("/").filter(Boolean);
-    return Object.fromEntries(pattern
-        .split("/")
-        .filter(Boolean)
-        .flatMap((segment, index) => segment.startsWith(":")
-        ? [[segment.slice(1), pathSegments[index]]]
-        : []));
-}
-function resolveRegisteredPageSlug(path) {
-    if (pagesBySlug[path])
-        return path;
-    return Object.keys(pagesBySlug).find((pattern) => pattern.includes(":") && matchesPagePattern(pattern, path));
-}
-function resolveModuleAddressSlug(path) {
-    const prefix = `${page_1.MODULE_URL_PREFIX}/`;
-    if (!path.startsWith(prefix))
-        return undefined;
-    const info = moduleRegistry[path.slice(prefix.length)];
-    if (!info)
-        return undefined;
-    const landingSlug = resolveModuleLandingSlug(info);
-    return landingSlug === path ? undefined : landingSlug;
-}
-function resolveServedPageSlug(path) {
-    return resolveRegisteredPageSlug(path) ?? resolveModuleAddressSlug(path);
-}
-async function buildPagePayload(...arguments_) {
-    const [slug, user, memberModel, roleModel, tenantId, includeShared = true, requestContext,] = arguments_;
-    const normalizedSlug = `/${slug.replace(/^\/+|\/+$/g, "")}`;
-    const registeredSlug = resolveServedPageSlug(normalizedSlug);
-    (0, interface_api_util_1.assert)(registeredSlug, 404, "error.page_not_found");
-    const handler = (0, page_1.GetPageLayoutBySlug)(registeredSlug);
-    (0, interface_api_util_1.assert)(handler, 404, "error.page_not_found");
-    const route = pagesBySlug[registeredSlug];
-    (0, interface_api_util_1.assert)(route, 404, "error.page_not_found");
-    const context = await buildAccessContext(user, memberModel, roleModel, tenantId);
-    const [layout, navBadges] = await Promise.all([
-        handler({
-            user,
-            memberModel,
-            roleModel,
-            tenantId,
-            query: requestContext && pageQueryOf(requestContext, PAGE_REQUEST_PARAMETERS),
-            params: pageParamsOf(registeredSlug, normalizedSlug),
-        }),
-        resolvePageNavBadges(user, context, requestContext),
-    ]);
-    if (!includeShared) {
-        const routes = (0, menu_categories_1.withCategoryRefs)(await annotateRegistryAccess({ [registeredSlug]: route }, context));
-        return { route: routes[registeredSlug], layout, navBadges };
-    }
-    const shared = await buildSiteLayoutFor(user, tenantId, context);
-    return {
-        route: shared.siteLayout.pages[registeredSlug],
-        shared,
-        layout,
-        navBadges,
-    };
-}
-function buildPreviewAccessContext(previewPermissions, real) {
-    const preview = {
-        permissions: previewPermissions,
-        isOwner: previewPermissions.has(WILDCARD_PERMISSION),
-        isAuthenticated: true,
-    };
-    if (!real.gateDenied) {
-        return {
-            gated: preview,
-            ungated: preview,
-            client: preview,
-            gateDenied: false,
-            entryAccess: new Map(),
-        };
-    }
-    return buildDeniedAccessContext(preview);
-}
-async function findRegisteredEntriesHiddenByPreview(real, preview) {
-    const entries = [
-        ...Object.values(pagesBySlug),
-        ...Object.values(categoriesByFullId),
-    ];
-    const hidden = [];
-    for (const entry of entries) {
-        if (!(await listsEntry(entry, real)))
-            continue;
-        if (!(await listsEntry(entry, preview)))
-            hidden.push(entry.fullId);
-    }
-    return hidden;
-}
-function findDynamicEntriesHiddenByPreview(served, previewed) {
-    const kept = new Set(flattenDynamicNodes(previewed).map((node) => node.fullId));
-    return flattenDynamicNodes(served)
-        .map((node) => node.fullId)
-        .filter((fullId) => !kept.has(fullId));
-}
-function flattenDynamicNodes(served) {
-    const flatten = (node) => [
-        node,
-        ...Object.values(node.children).flatMap(flatten),
-    ];
-    return [...served.values()].flatMap((nodes) => nodes.flatMap(flatten));
-}
-function previewMemberModels(previewPermissions) {
-    const roleIds = [PREVIEW_ROLE_ID];
-    const roles = [
-        { _id: PREVIEW_ROLE_ID, permissions: [...previewPermissions] },
-    ];
-    return {
-        memberModel: {
-            getByUser: async () => ({ roleIds }),
-        },
-        roleModel: { getBy: async () => roles },
-    };
-}
-function memoizeViewerModels(memberModel, roleModel) {
-    const answers = new Map();
-    const remember = (key, read) => {
-        const known = answers.get(key);
-        if (known)
-            return known;
-        const pending = Promise.resolve(read());
-        answers.set(key, pending);
-        return pending;
-    };
-    return {
-        memberModel: {
-            getByUser: (userId) => remember(`member:${userId}`, () => memberModel.getByUser(userId)),
-        },
-        roleModel: {
-            getBy: (...args) => remember(`roles:${JSON.stringify(args)}`, () => roleModel.getBy(...args)),
-        },
-    };
-}
-const PREVIEW_LOSS_TTL_MS = 30_000;
-const PREVIEW_LOSS_MAX_SCOPES = 16;
-const PREVIEW_PAGE_CONCURRENCY = 4;
-const PREVIEW_ROLE_ID = "dms-permission-preview";
-function previewResolverContext(rolePermissions) {
-    return { preview: { rolePermissions } };
-}
-function resolvePreviewPermissions(viewerId, tenantId, rolePermissions) {
-    return (0, permissions_resolver_1.ApplyPermissionsResolvers)(viewerId, tenantId, rolePermissions, previewResolverContext(rolePermissions));
-}
-async function findPreviewHeaderActions(handler, layout, request, quickActions) {
-    const viewerActions = (0, permission_preview_1.readHeaderActions)(layout.layout);
-    if (viewerActions.length === 0)
-        return [];
-    const { memberModel, roleModel } = previewMemberModels(request.previewPermissions);
-    const previewUser = Object.assign(Object.create(request.user), {
-        owner: false,
-    });
-    const previewLayout = await handler({
-        user: previewUser,
-        memberModel,
-        roleModel,
-        tenantId: request.tenantId,
-        resolverContext: previewResolverContext(request.previewPermissions),
-    });
-    const viewer = {
-        headerActions: viewerActions,
-        quickActions: quickActions.real,
-    };
-    const preview = {
-        headerActions: (0, permission_preview_1.readHeaderActions)(previewLayout.layout),
-        quickActions: quickActions.preview,
-    };
-    return (0, permission_preview_1.findHeaderActionsHiddenByPreview)(viewer, preview);
-}
-function readViewerLayout(route, handler, { request, layouts }) {
-    const known = layouts.get(route.fullId);
-    if (known)
-        return known;
-    const { user, memberModel, roleModel, tenantId } = request;
-    const layout = handler({ user, memberModel, roleModel, tenantId });
-    layouts.set(route.fullId, layout);
-    layout.catch(() => layouts.delete(route.fullId));
-    return layout;
-}
-const viewerLayoutCache = new permission_preview_1.PreviewScopeCache(PREVIEW_LOSS_TTL_MS, PREVIEW_LOSS_MAX_SCOPES);
-function viewerLayoutsFor(request, real) {
-    return viewerLayoutCache.pagesFor((0, permission_preview_1.previewCacheKey)({
-        tenantId: request.tenantId,
-        userId: request.user._id,
-        structureVersion: previewStructureVersion,
-        real: real.ungated.permissions,
-        preview: [],
-    }));
-}
-async function readPreviewPage(route, handler, reading) {
-    const { request, hiddenInPreview, quickActions } = reading;
-    const layout = await readViewerLayout(route, handler, reading);
-    return {
-        fullId: route.fullId,
-        displayName: route.displayName,
-        pagePermissionId: resolvePagePermissionId(route.permission, route.fullId),
-        filtersComponents: route.publicAccess !== true &&
-            route.authOnly !== true &&
-            route.noComponentPermissions !== true,
-        hiddenInPreview,
-        components: layout.components,
-        hiddenHeaderActions: hiddenInPreview
-            ? (0, permission_preview_1.readHeaderActions)(layout.layout).map((action) => action.id)
-            : await findPreviewHeaderActions(handler, layout, request, quickActions),
-    };
-}
-async function resolvePreviewPage(path, request, contexts, quickActions) {
-    const normalizedSlug = `/${path.replace(/^\/+|\/+$/g, "")}`;
-    const registeredSlug = resolveRegisteredPageSlug(normalizedSlug);
-    const route = registeredSlug ? pagesBySlug[registeredSlug] : undefined;
-    const handler = registeredSlug
-        ? (0, page_1.GetPageLayoutBySlug)(registeredSlug)
-        : undefined;
-    if (!route || !handler)
-        return null;
-    if (!(await computeEntryAccess(route, contexts.real)))
-        return null;
-    const hiddenInPreview = !(await computeEntryAccess(route, contexts.preview));
-    return readPreviewPage(route, handler, {
-        request,
-        hiddenInPreview,
-        quickActions,
-        layouts: viewerLayoutsFor(request, contexts.real),
-    });
-}
-const previewLossCaches = new WeakMap();
-function previewLossCacheFor(check) {
-    let cache = previewLossCaches.get(check);
-    if (!cache) {
-        cache = new permission_preview_1.PreviewScopeCache(PREVIEW_LOSS_TTL_MS, PREVIEW_LOSS_MAX_SCOPES);
-        previewLossCaches.set(check, cache);
-    }
-    return cache;
-}
-function collectPreviewMenuNodes(node, pageIds) {
-    return Object.values(node.children).flatMap((child) => {
-        const children = collectPreviewMenuNodes(child, pageIds);
-        if (!child.hasAccess)
-            return children;
-        return [
-            {
-                fullId: child.fullId,
-                opensPage: pageIds.has(child.fullId) || nodeTargets.has(child),
-                children,
-            },
-        ];
-    });
-}
-function flattenPreviewMenuNodes(nodes) {
-    return nodes.flatMap((node) => [
-        node,
-        ...flattenPreviewMenuNodes(node.children),
-    ]);
-}
-async function findPagesLosingInPreview(pages, reading, check) {
-    const { request, contexts, quickActions } = reading;
-    const grants = {
-        real: contexts.real.ungated.permissions,
-        preview: request.previewPermissions,
-    };
-    const answers = previewLossCacheFor(check).pagesFor((0, permission_preview_1.previewCacheKey)({
-        tenantId: request.tenantId,
-        userId: request.user._id,
-        structureVersion: previewStructureVersion,
-        real: grants.real,
-        preview: grants.preview,
-    }));
-    const pageReading = {
-        request: {
-            ...request,
-            ...memoizeViewerModels(request.memberModel, request.roleModel),
-        },
-        hiddenInPreview: false,
-        quickActions,
-        layouts: viewerLayoutsFor(request, contexts.real),
-    };
-    const losing = new Set();
-    await (0, run_in_batches_1.runInBatches)(pages, PREVIEW_PAGE_CONCURRENCY, async (route) => {
-        let answer = answers.get(route.fullId);
-        if (!answer) {
-            const handler = (0, page_1.GetPageLayoutBySlug)(route.fullSlug);
-            answer = handler
-                ? readPreviewPage(route, handler, pageReading)
-                    .then((page) => check(page, grants))
-                    .catch(() => false)
-                : Promise.resolve(false);
-            answers.set(route.fullId, answer);
-        }
-        if (await answer)
-            losing.add(route.fullId);
-    });
-    return losing;
-}
-function listPreviewLossTargets(nodes, reading, pagesByFullId) {
-    const { served, denied } = reading;
-    const pages = new Map();
-    const entryTargets = new Map();
-    for (const node of flattenPreviewMenuNodes(nodes)) {
-        const page = pagesByFullId.get(node.fullId);
-        if (page && !denied.has(page.fullId))
-            pages.set(page.fullId, page);
-    }
-    for (const node of flattenDynamicNodes(served)) {
-        const target = nodeTargets.get(node);
-        if (!target || denied.has(node.fullId) || denied.has(target.fullId)) {
-            continue;
-        }
-        pages.set(target.fullId, target);
-        entryTargets.set(node.fullId, target.fullId);
-    }
-    return { pages: [...pages.values()], entryTargets };
-}
-async function aggregatePreviewMenuStates(reading) {
-    const { request, contexts, served, denied } = reading;
-    const tree = await addAccessToTree(navigationTree, contexts.real, true, served);
-    const pagesByFullId = new Map(Object.values(pagesBySlug).map((page) => [page.fullId, page]));
-    const nodes = collectPreviewMenuNodes(tree, new Set(pagesByFullId.keys()));
-    const losesInside = new Set();
-    if (request.pageLoses) {
-        const { pages, entryTargets } = listPreviewLossTargets(nodes, reading, pagesByFullId);
-        const losing = await findPagesLosingInPreview(pages, reading, request.pageLoses);
-        for (const fullId of losing)
-            losesInside.add(fullId);
-        for (const [entry, target] of entryTargets) {
-            if (losing.has(target))
-                losesInside.add(entry);
-        }
-    }
-    return (0, permission_preview_1.aggregatePreviewMenu)(nodes, denied, losesInside, await findUniversalPreviewPages(pagesByFullId, contexts.real));
-}
-async function findUniversalPreviewPages(pagesByFullId, real) {
-    const empty = buildPreviewAccessContext(new Set(), real);
-    const universal = new Set();
-    for (const [fullId, page] of pagesByFullId) {
-        if (await computeEntryAccess(page, empty))
-            universal.add(fullId);
-    }
-    return universal;
-}
-async function resolvePermissionPreviewAccess(request) {
-    const { path, user, memberModel, roleModel, tenantId } = request;
-    const real = await buildAccessContext(user, memberModel, roleModel, tenantId);
-    const preview = buildPreviewAccessContext(request.previewPermissions, real);
-    const contexts = { real, preview };
-    const [realQuickActions, previewQuickActions, served, previewed] = await Promise.all([
-        (0, quick_actions_1.getQuickActionsForUser)((target) => resolveQuickActionTarget(target, real)),
-        (0, quick_actions_1.getQuickActionsForUser)((target) => resolveQuickActionTarget(target, preview)),
-        resolveDynamicChildren(user, tenantId, real),
-        resolveDynamicChildren(user, tenantId, preview),
-    ]);
-    const quickActions = { real: realQuickActions, preview: previewQuickActions };
-    const [registeredHidden, page] = await Promise.all([
-        findRegisteredEntriesHiddenByPreview(real, preview),
-        path
-            ? resolvePreviewPage(path, request, contexts, quickActions)
-            : Promise.resolve(null),
-    ]);
-    const denied = new Set([
-        ...registeredHidden,
-        ...findDynamicEntriesHiddenByPreview(served, previewed),
-    ]);
-    const states = await aggregatePreviewMenuStates({
-        request,
-        contexts,
-        quickActions,
-        served,
-        denied,
-    });
-    return {
-        hiddenEntries: states.hidden,
-        partialEntries: states.partial,
-        hiddenQuickActions: (0, permission_preview_1.findQuickActionsHiddenByPreview)(realQuickActions, previewQuickActions),
-        page,
-    };
-}
-async function getRoleIdsForUser(memberModel, user) {
-    const member = await memberModel.getByUser(user._id);
-    return member?.roleIds ?? [];
-}
-function collectSurfaceBypassFlags() {
-    const flags = new Map();
-    const entries = [
-        ...Object.values(categoriesByFullId),
-        ...Object.values(pagesBySlug),
-    ];
-    for (const entry of entries) {
-        const id = resolvePagePermissionId(entry.permission, entry.fullId);
-        const bypassed = entry.bypassTenantAccessGate === true;
-        flags.set(id, (flags.get(id) ?? true) && bypassed);
-    }
-    return flags;
-}
-function isBypassedPermission(permissionId, surfaces) {
-    let current = permissionId;
-    for (;;) {
-        const bypassed = surfaces.get(current);
-        if (bypassed !== undefined)
-            return bypassed;
-        const separatorIndex = current.lastIndexOf(".");
-        if (separatorIndex <= 0)
-            return false;
-        current = current.slice(0, separatorIndex);
-    }
-}
-function filterPermissionsForBypassedSurfaces(permissions, surfaces) {
-    const hasBypassedSurface = [...surfaces.values()].some(Boolean);
-    if (!hasBypassedSurface) {
-        return new Set();
-    }
-    if (permissions.has(WILDCARD_PERMISSION)) {
-        return new Set([WILDCARD_PERMISSION]);
-    }
-    return new Set([...permissions].filter((id) => isBypassedPermission(id, surfaces)));
-}
-async function resolveUserPermissions(user, memberModel, roleModel, tenantId) {
-    const context = await buildAccessContext(user, memberModel, roleModel, tenantId);
-    return [...context.client.permissions];
-}
-function redactPresentation(entry) {
-    return {
-        ...entry,
-        displayName: "",
-        description: undefined,
-        icon: undefined,
-        permission: undefined,
-    };
-}
-async function annotateRegistryAccess(registry, context) {
-    const annotated = {};
-    for (const [slug, info] of Object.entries(registry)) {
-        const hasAccess = await computeEntryAccess(info, context);
-        annotated[slug] = hasAccess
-            ? { ...info, hasAccess }
-            : { ...redactPresentation(info), hasAccess };
-    }
-    return annotated;
-}
-async function annotateSiteLayoutAccess(context, banners) {
-    return {
-        pages: (0, menu_categories_1.withCategoryRefs)(await annotateRegistryAccess(pagesBySlug, context)),
-        categories: (0, menu_categories_1.withCategoryRefs)(await annotateRegistryAccess(categoriesByFullId, context)),
-        banners: await banners,
-    };
-}
-function buildLayoutBannerContext(user, tenantId, context) {
-    return {
-        user,
-        tenantId,
-        permissions: new Set(context.ungated.permissions),
-        isOwner: context.ungated.isOwner,
-        isTenantAccessDenied: context.gateDenied,
-    };
-}
-async function buildSiteLayoutPayload(user, memberModel, roleModel, tenantId) {
-    const accessContext = await buildAccessContext(user, memberModel, roleModel, tenantId);
-    return buildSiteLayoutFor(user, tenantId, accessContext);
-}
-async function resolvePageNavBadges(user, context, requestContext) {
-    if (!user || !requestContext)
-        return {};
-    const entries = await Promise.all(Object.values(pagesBySlug)
-        .filter((page) => page.badge === undefined)
-        .map(async (page) => ({
-        fullId: page.fullId,
-        hasAccess: await computeEntryAccess(page, context),
-    })));
-    return (0, nav_badges_1.resolveMenuNavBadges)(requestContext, user, entries);
-}
-async function buildNavBadges(user, memberModel, roleModel, tenantId, requestContext) {
-    const context = await buildAccessContext(user, memberModel, roleModel, tenantId);
-    return resolvePageNavBadges(user, context, requestContext);
-}
-async function buildSiteLayoutFor(user, tenantId, accessContext) {
-    const banners = (0, layout_banners_1.resolveLayoutBanners)(buildLayoutBannerContext(user, tenantId, accessContext));
-    const dynamicChildren = await resolveDynamicChildren(user, tenantId, accessContext);
-    return {
-        siteLayout: await annotateSiteLayoutAccess(accessContext, banners),
-        siteLayoutTree: (0, menu_categories_1.treeWithCategoryRefs)(await addAccessToTree(navigationTree, accessContext, true, dynamicChildren)),
-        quickActions: await (0, quick_actions_1.getQuickActionsForUser)((target) => resolveQuickActionTarget(target, accessContext)),
-        modules: await buildModuleAccessMap(accessContext),
-        isOwner: accessContext.gated.isOwner,
-    };
-}
-async function isPlatformOwner(user, memberModel, roleModel, tenantId) {
-    const context = await buildAccessContext(user, memberModel, roleModel, tenantId);
-    return context.gated.isOwner;
-}
-async function buildAccessContext(user, memberModel, roleModel, tenantId) {
-    const isAuthenticated = !!user;
-    if (!user) {
-        const anonymous = {
-            permissions: new Set(),
-            isOwner: false,
-            isAuthenticated,
-        };
-        return {
-            gated: anonymous,
-            ungated: anonymous,
-            client: anonymous,
-            gateDenied: false,
-            entryAccess: new Map(),
-        };
-    }
-    const roleIds = await getRoleIdsForUser(memberModel, user);
-    const permissions = await (0, permissions_1.GetEffectiveUserPermissions)(user, tenantId, roleIds, roleModel);
-    const ungated = {
-        permissions,
-        isOwner: permissions.has(WILDCARD_PERMISSION),
-        isAuthenticated,
-    };
-    const access = await (0, tenant_access_1.CheckTenantAccess)(user._id, tenantId);
-    if (access.allowed) {
-        return {
-            gated: ungated,
-            ungated,
-            client: ungated,
-            gateDenied: false,
-            entryAccess: new Map(),
-        };
-    }
-    return buildDeniedAccessContext(ungated);
-}
-function buildDeniedAccessContext(ungated) {
-    const { isAuthenticated } = ungated;
-    const clientPermissions = filterPermissionsForBypassedSurfaces(ungated.permissions, collectSurfaceBypassFlags());
-    return {
-        gated: { permissions: new Set(), isOwner: false, isAuthenticated },
-        ungated,
-        client: {
-            permissions: clientPermissions,
-            isOwner: clientPermissions.has(WILDCARD_PERMISSION),
-            isAuthenticated,
-        },
-        gateDenied: true,
-        entryAccess: new Map(),
-    };
-}
-function selectEntryContext(entry, context) {
-    return entry.bypassTenantAccessGate === true
-        ? context.ungated
-        : context.gated;
-}
-async function computeEntryAccess(entry, context) {
-    const cacheKey = entry.fullId;
-    const cached = context.entryAccess.get(cacheKey);
-    if (cached)
-        return cached;
-    const result = computeEntryAccessUncached(entry, context);
-    context.entryAccess.set(cacheKey, result);
-    return result;
-}
-async function computeEntryAccessUncached(entry, context) {
-    if (!(0, tenant_access_2.gateAllowsSurface)(entry, context.gateDenied))
-        return false;
-    const effective = selectEntryContext(entry, context);
-    if (effective.isOwner)
-        return true;
-    if ((0, page_1.isInsideModule)(entry))
-        return false;
-    if (entry.authOnly === true)
-        return effective.isAuthenticated;
-    if (effective.isAuthenticated) {
-        if (context.gateDenied && entry.bypassTenantAccessGate !== true) {
-            return entry.publicAccess === true;
-        }
-        return (0, permissions_1.HasPermission)(effective.permissions, resolvePagePermissionId(entry.permission, entry.fullId));
-    }
-    return entry.publicAccess === true;
-}
-async function addAccessToTree(node, context, isRoot, dynamic) {
-    const isGranted = isRoot ? true : await computeEntryAccess(node, context);
-    const childrenWithAccess = await buildChildrenWithAccess(node, context, dynamic);
-    const visible = isGranted ? node : redactPresentation(node);
-    const dynamicChildren = dynamic.get(node.fullId);
-    const children = dynamicChildren
-        ? mergeDynamicChildren(node.fullId, childrenWithAccess, dynamicChildren)
-        : childrenWithAccess;
-    const hasAccess = isGranted &&
-        (isRoot ||
-            (leadsSomewhere(node, children) &&
-                !(await hidesEveryBlock(node, context))));
-    if (!dynamicChildren && !holdsContainerWithoutEntry(node)) {
-        return { ...visible, hasAccess, children };
-    }
-    return {
-        ...visible,
-        hasAccess,
-        children,
-        childrenOrders: sortChildIdsByOrder(children),
-    };
-}
-function leadsSomewhere(node, children) {
-    return !!node.layoutUrl || Object.values(children).some(reachesPage);
-}
-function reachesPage(node) {
-    return (node.hasAccess !== false || Object.values(node.children).some(reachesPage));
-}
-async function hidesEveryBlock(entry, context) {
-    if (!entry.layoutUrl)
-        return false;
-    const effective = selectEntryContext(entry, context);
-    if (effective.isOwner)
-        return false;
-    const page = registry_1.pageMetadataByFullId.get(entry.fullId);
-    return (await page?.HidesEveryComponent(effective.permissions)) ?? false;
-}
-async function listsEntry(entry, context) {
-    if (!(await computeEntryAccess(entry, context)))
-        return false;
-    return !(await hidesEveryBlock(entry, context));
-}
-function isContainerWithoutEntry(node) {
-    return node.fullId === "";
-}
-function holdsContainerWithoutEntry(node) {
-    return Object.values(node.children).some(isContainerWithoutEntry);
-}
-async function buildChildrenWithAccess(node, context, dynamic) {
-    const children = {};
-    const hoisted = [];
-    for (const [key, child] of Object.entries(node.children)) {
-        if (isContainerWithoutEntry(child)) {
-            const held = await buildChildrenWithAccess(child, context, dynamic);
-            hoisted.push(...Object.entries(held));
-            continue;
-        }
-        children[key] = await addAccessToTree(child, context, false, dynamic);
-    }
-    for (const [key, entry] of hoisted) {
-        if (children[key]) {
-            warnHoistedCollision(entry, children[key]);
-            continue;
-        }
-        children[key] = entry;
-    }
-    return children;
-}
-function warnHoistedCollision(hoisted, existing) {
-    const source = findNavigationEntryByFullId(hoisted.fullId);
-    if (!source)
-        return;
-    (0, warn_once_1.warnOnceFor)(source, "hoisted-collision", `[dms] "${hoisted.fullId}" hangs under an unregistered category and collides with "${existing.fullId}" at its parent's level: it was left out of the menu.`);
-}
-function mergeDynamicChildren(categoryFullId, children, dynamicChildren) {
-    const merged = { ...children };
-    const category = findNavigationEntryByFullId(categoryFullId);
-    for (const node of dynamicChildren) {
-        if (merged[node.id]) {
-            const source = nodeProviders.get(node) ?? category;
-            if (source) {
-                (0, warn_once_1.warnOnceFor)(source, "colliding-entry", `[dms] dynamic menu entry "${node.id}" of category "${categoryFullId}" collides with an existing entry and was skipped.`);
-            }
-            continue;
-        }
-        merged[node.id] = node;
-    }
-    return merged;
-}
-async function resolveDynamicChildren(user, tenantId, context) {
-    const resolved = new Map();
-    const providers = [...dynamicMenuProviders];
-    const perProvider = await Promise.all(providers.map((provider) => resolveProviderNodes(provider, user, tenantId, context)));
-    for (const [index, provider] of providers.entries()) {
-        const nodes = perProvider[index];
-        if (!nodes || nodes.length === 0)
-            continue;
-        const existing = resolved.get(provider.categoryFullId);
-        if (existing) {
-            existing.push(...nodes);
-            continue;
-        }
-        resolved.set(provider.categoryFullId, nodes);
-    }
-    return resolved;
-}
-async function resolveProviderNodes(provider, user, tenantId, context) {
-    const parent = findNavigationEntryByFullId(provider.categoryFullId);
-    if (!parent) {
-        (0, warn_once_1.warnOnceFor)(provider, "unknown-category", `[dms] dynamic menu provider targets unknown category "${provider.categoryFullId}" and was skipped.`);
-        return [];
-    }
-    if (!(await computeEntryAccess(parent, context))) {
-        return [];
-    }
-    const items = await runDynamicMenuResolver(provider, user, tenantId, selectEntryContext(parent, context).permissions);
-    return buildDynamicNodes(provider, items, context);
-}
-async function runDynamicMenuResolver(provider, user, tenantId, permissions) {
-    try {
-        return await (0, resolver_timeout_1.withResolverTimeout)(Promise.resolve(provider.resolver(user, tenantId, permissions)), `category "${provider.categoryFullId}"`);
-    }
-    catch (error) {
-        (0, warn_once_1.warnOnceFor)(provider, "resolver-failed", `[dms] dynamic menu provider of category "${provider.categoryFullId}" failed: ${String(error)}`);
-        return [];
-    }
-}
-const ID_SEPARATOR = ".";
-function resolveEntryTarget(provider, item) {
-    const entry = `[dms] dynamic menu entry "${item.id}" of category "${provider.categoryFullId}"`;
-    if (item.id.includes(ID_SEPARATOR)) {
-        (0, warn_once_1.warnOnceFor)(provider, "dotted-id", `${entry} has a dot in its id and was skipped.`);
-        return undefined;
-    }
-    const target = pagesBySlug[item.fullSlug];
-    if (!target) {
-        (0, warn_once_1.warnOnceFor)(provider, "unregistered-target", `${entry} targets unregistered page "${item.fullSlug}" and was skipped.`);
-        return undefined;
-    }
-    const link = (0, route_params_1.fillRouteParams)(item.fullSlug, item.params);
-    if (link === undefined) {
-        (0, warn_once_1.warnOnceFor)(provider, "unmatched-route-params", `${entry} does not fill exactly the route parameters of "${item.fullSlug}" and was skipped.`);
-        return undefined;
-    }
-    return { target, link };
-}
-const MAX_DYNAMIC_MENU_DEPTH = 3;
-function buildDynamicNodes(provider, items, context) {
-    return buildDynamicLevel({ provider, context, targetAccess: new Map() }, { parentFullId: provider.categoryFullId, depth: 1 }, items);
-}
-async function buildDynamicLevel(walk, level, items) {
-    const { provider, context, targetAccess } = walk;
-    const nodes = [];
-    for (const item of items) {
-        const resolved = resolveEntryTarget(provider, item);
-        if (!resolved)
-            continue;
-        const { target } = resolved;
-        if (!(await isTargetPageReachable(target, context, targetAccess))) {
-            continue;
-        }
-        if (item.permissionId &&
-            !clientHoldsPermission(context, item.permissionId)) {
-            continue;
-        }
-        const node = await buildDynamicNode(walk, level, item, resolved);
-        nodeProviders.set(node, provider);
-        nodeTargets.set(node, target);
-        nodes.push(node);
-    }
-    return nodes;
-}
-function clientHoldsPermission(context, permissionId) {
-    const { permissions } = context.client;
-    return permissions.has(WILDCARD_PERMISSION) || permissions.has(permissionId);
-}
-async function isTargetPageReachable(target, context, cache) {
-    const cached = cache.get(target.fullSlug);
-    if (cached !== undefined)
-        return cached;
-    const reachable = await computeEntryAccess(target, context);
-    cache.set(target.fullSlug, reachable);
-    return reachable;
-}
-async function buildDynamicNode(walk, level, item, resolved) {
-    const { id, permissionId: _permissionId, params: _params, children: _children, ...menuFields } = item;
-    const fullId = `${level.parentFullId}.${id}`;
-    const children = await buildDynamicChildRecord(walk, level, item, fullId);
-    return {
-        ...menuFields,
-        fullSlug: resolved.link,
-        id,
-        fullId,
-        layoutUrl: resolved.target.layoutUrl,
-        type: "link",
-        category: undefined,
-        children,
-        childrenOrders: sortChildIdsByOrder(children),
-        hasAccess: true,
-    };
-}
-async function buildDynamicChildRecord(walk, level, item, fullId) {
-    if (!item.children?.length)
-        return {};
-    if (level.depth >= MAX_DYNAMIC_MENU_DEPTH) {
-        (0, warn_once_1.warnOnceFor)(walk.provider, "too-deep", `[dms] dynamic menu entry "${fullId}" exceeds the maximum depth of ${MAX_DYNAMIC_MENU_DEPTH}: its children were skipped.`);
-        return {};
-    }
-    const nodes = await buildDynamicLevel(walk, { parentFullId: fullId, depth: level.depth + 1 }, item.children);
-    const children = new Map();
-    for (const node of nodes) {
-        if (children.has(node.id)) {
-            (0, warn_once_1.warnOnceFor)(walk.provider, "duplicate-child-id", `[dms] dynamic menu entry "${node.id}" under "${fullId}" duplicates a sibling and was skipped.`);
-            continue;
-        }
-        children.set(node.id, node);
-    }
-    return Object.fromEntries(children);
-}
-const quickActionTargetHandlers = {
-    event: async (target) => ({
-        type: "event",
-        name: target.name,
-        payload: target.payload,
-    }),
-    navigate: async (target, { pageInfo }) => ({
-        type: "navigate",
-        to: pageInfo.fullSlug,
-        query: target.query,
-    }),
-    openForm: resolveOpenFormTarget,
-    button: resolveButtonTarget,
-};
-async function resolveQuickActionTarget(target, context) {
-    const meta = (0, interface_core_1.GetMetadata)(target.page, page_1.PageMetadata);
-    const pageInfo = meta.pageInfo;
-    if (!pageInfo) {
-        (0, warn_once_1.warnOnceFor)(target, "unregistered-page", `[DMS] Quick action targets "${target.page.name}", which is not a registered page: the action is not served.`);
-        return undefined;
-    }
-    if (!(await computeEntryAccess(pageInfo, context)))
-        return undefined;
-    const handler = quickActionTargetHandlers[target.type];
-    return handler(target, { pageInfo, meta, context });
-}
-function holdsPagePermission(page, permissionId) {
-    return (0, permissions_1.HasPermission)(selectEntryContext(page.pageInfo, page.context).permissions, permissionId);
-}
-async function resolveOpenFormTarget(target, page) {
-    const resolved = resolveQuickActionComponent(page.meta, target, {
-        accepts: (component) => component.getAction("add") !== undefined,
-        description: "can create a row",
-    });
-    if (!resolved)
-        return undefined;
-    const [componentKey, component] = resolved;
-    const addPermission = component.getAction("add")?.permissionId;
-    if (addPermission && !(await holdsPagePermission(page, addPermission))) {
-        return undefined;
-    }
-    return {
-        type: "openForm",
-        to: page.pageInfo.fullSlug,
-        component: componentKey,
-    };
-}
-async function resolveButtonTarget(target, page) {
-    const resolved = resolveQuickActionComponent(page.meta, target, {
-        accepts: (component) => component.getButton(target.button) !== undefined,
-        description: `declare button "${target.button}"`,
-    });
-    if (!resolved)
-        return undefined;
-    const [componentKey, component] = resolved;
-    const button = component.getButton(target.button);
-    if (!button) {
-        (0, warn_once_1.warnOnceFor)(target, "unknown-button", `[DMS] Quick action presses button "${target.button}", which the targeted component of page "${page.meta.pageInfo?.fullId}" does not declare: the action is not served.`);
-        return undefined;
-    }
-    if (!(await holdsButtonPermission(page, component, button))) {
-        return undefined;
-    }
-    return {
-        type: "button",
-        to: page.pageInfo.fullSlug,
-        component: componentKey,
-        button: button.id,
-    };
-}
-async function holdsButtonPermission(page, component, button) {
-    if (!(0, permission_gate_1.isPermissionGated)(button))
-        return true;
-    const permissionId = button.permissionId ??
-        (button.permission === undefined
-            ? undefined
-            : component.resolveButtonPermissionId(button.permission));
-    return (permissionId !== undefined &&
-        (await holdsPagePermission(page, permissionId)));
-}
-function resolveQuickActionComponent(meta, target, filter) {
-    const requested = target.component;
-    const entries = Object.entries(meta.components);
-    if (requested) {
-        const resolved = (0, component_target_1.resolveComponentTarget)(requested, new Map(entries));
-        if (!resolved) {
-            (0, warn_once_1.warnOnceFor)(target, "unknown-component", `[DMS] Quick action targets a component that page "${meta.pageInfo?.fullId}" does not mount: the action is not served.`);
-            return undefined;
-        }
-        return [(0, component_target_1.componentTargetClientId)(resolved), resolved.component];
-    }
-    const candidates = entries.filter(([, candidate]) => filter.accepts(candidate));
-    if (candidates.length === 1)
-        return candidates[0];
-    (0, warn_once_1.warnOnceFor)(target, "ambiguous-component", `[DMS] Quick action targets page "${meta.pageInfo?.fullId}", which mounts ${candidates.length} components that ${filter.description}: name the one it means. The action is not served.`);
-    return undefined;
-}
-async function buildModuleAccessMap(context) {
-    const result = {};
-    for (const [moduleId, info] of Object.entries(moduleRegistry)) {
-        const hasAccess = await computeModuleAccess(moduleId, context);
-        const presented = presentModuleInfo(info);
-        result[moduleId] = hasAccess
-            ? { ...presented, hasAccess }
-            : {
-                ...presented,
-                title: "",
-                description: "",
-                icon: "",
-                version: undefined,
-                catalogCategory: undefined,
-                hasAccess,
-            };
-    }
-    return result;
-}
-const DEFAULT_MODULE_STATUS = "live";
-const MODULE_STATUSES = new Set([
-    "live",
-    "beta",
-    "update",
-    "attention",
-]);
-const MODULE_READOUT_TONES = new Set([
-    "success",
-    "info",
-    "warning",
-    "error",
-]);
-const MODULE_READOUT_MAX_LINES = 3;
-function presentModuleInfo(info) {
-    const { status: _status, readout: _readout, ...presented } = info;
-    return presented;
-}
-async function runModuleStatusHook(info, context) {
-    if (!info.status)
-        return DEFAULT_MODULE_STATUS;
-    try {
-        const status = await (0, resolver_timeout_1.withResolverTimeout)(Promise.resolve(info.status(context)), `status of module "${info.id}"`);
-        if (typeof status === "string" && MODULE_STATUSES.has(status)) {
-            return status;
-        }
-        (0, warn_once_1.warnOnceFor)(info, "status-invalid", `[dms] module "${info.id}" status() returned ${JSON.stringify(status)}; expected one of ${[...MODULE_STATUSES].join(", ")}.`);
-    }
-    catch (error) {
-        (0, warn_once_1.warnOnceFor)(info, "status-failed", `[dms] module "${info.id}" status() failed: ${String(error)}`);
-    }
-    return DEFAULT_MODULE_STATUS;
-}
-async function runModuleReadoutHook(info, context) {
-    if (!info.readout)
-        return [];
-    try {
-        const lines = await (0, resolver_timeout_1.withResolverTimeout)(Promise.resolve(info.readout(context)), `readout of module "${info.id}"`);
-        if (!Array.isArray(lines))
-            return [];
-        return lines
-            .filter((line) => !!line && typeof line.text === "string" && line.text.length > 0)
-            .slice(0, MODULE_READOUT_MAX_LINES)
-            .map((line) => {
-            const tone = line.tone;
-            return {
-                text: line.text,
-                tone: tone && MODULE_READOUT_TONES.has(tone)
-                    ? tone
-                    : "info",
-            };
-        });
-    }
-    catch (error) {
-        (0, warn_once_1.warnOnceFor)(info, "readout-failed", `[dms] module "${info.id}" readout() failed: ${String(error)}`);
-        return [];
-    }
-}
-async function computeModuleAccess(_moduleId, context) {
-    return context.gated.isOwner;
-}
-function resolveModuleLandingSlug(info) {
-    const modulePages = Object.values(pagesBySlug).filter((page) => page.module === info.id);
-    if (modulePages.length === 0) {
-        return `${page_1.MODULE_URL_PREFIX}/${info.id}`;
-    }
-    if (info.landingPage) {
-        const target = modulePages.find((page) => page.id === info.landingPage);
-        if (target)
-            return target.fullSlug;
-        logging_1.Logging.Warn(`[dms] module "${info.id}" declares landingPage "${info.landingPage}" but no page with that id exists in the module. Falling back to the first page by order.`);
-    }
-    const sorted = [...modulePages].sort(comparePagesForLanding);
-    return sorted[0].fullSlug;
-}
-function comparePagesForLanding(a, b) {
-    const orderDelta = (a.order ?? 0) - (b.order ?? 0);
-    if (orderDelta !== 0)
-        return orderDelta;
-    return a.id.localeCompare(b.id);
-}
+exports.isPlatformOwner = exports.buildNavBadges = exports.buildSiteLayoutPayload = exports.resolveUserPermissions = exports.filterPermissionsForBypassedSurfaces = exports.resolvePermissionPreviewAccess = exports.resolvePreviewPermissions = exports.buildPagePayload = exports.pageParamsOf = exports.cancelPendingMenuNotifications = exports.notifyMenuAccessChanged = exports.NotifyMenuChanged = exports.GetMenuEntryPermissionIds = exports.GetCategoryPermissionIds = exports.GetMenuOrder = exports.cancelMissingCategoryCheck = exports.reportMissingCategories = exports.userCanAccessPage = exports.isPlatformPage = exports.DMSController = exports.internal = exports.GetFrontendModules = exports.AddFrontendModule = void 0;
+const registry_1 = require("./page/registry");
+const controller_1 = require("./page/controller");
+const notifications_1 = require("./page/notifications");
+const payloads_1 = require("./page/payloads");
+const preview_models_1 = require("./page/preview-models");
+const preview_menu_1 = require("./page/preview-menu");
+const access_1 = require("./page/access");
+var frontend_1 = require("../../store/frontend");
+Object.defineProperty(exports, "AddFrontendModule", { enumerable: true, get: function () { return frontend_1.AddFrontendModule; } });
+Object.defineProperty(exports, "GetFrontendModules", { enumerable: true, get: function () { return frontend_1.GetFrontendModules; } });
+exports.internal = registry_1.internal;
+exports.DMSController = controller_1.DMSController;
+exports.isPlatformPage = access_1.isPlatformPage;
+exports.userCanAccessPage = access_1.userCanAccessPage;
+exports.reportMissingCategories = registry_1.reportMissingCategories;
+exports.cancelMissingCategoryCheck = registry_1.cancelMissingCategoryCheck;
+exports.GetMenuOrder = registry_1.GetMenuOrder;
+exports.GetCategoryPermissionIds = registry_1.GetCategoryPermissionIds;
+exports.GetMenuEntryPermissionIds = registry_1.GetMenuEntryPermissionIds;
+exports.NotifyMenuChanged = notifications_1.NotifyMenuChanged;
+exports.notifyMenuAccessChanged = notifications_1.notifyMenuAccessChanged;
+exports.cancelPendingMenuNotifications = notifications_1.cancelPendingMenuNotifications;
+exports.pageParamsOf = payloads_1.pageParamsOf;
+exports.buildPagePayload = payloads_1.buildPagePayload;
+exports.resolvePreviewPermissions = preview_models_1.resolvePreviewPermissions;
+exports.resolvePermissionPreviewAccess = preview_menu_1.resolvePermissionPreviewAccess;
+exports.filterPermissionsForBypassedSurfaces = access_1.filterPermissionsForBypassedSurfaces;
+exports.resolveUserPermissions = access_1.resolveUserPermissions;
+exports.buildSiteLayoutPayload = payloads_1.buildSiteLayoutPayload;
+exports.buildNavBadges = payloads_1.buildNavBadges;
+exports.isPlatformOwner = access_1.isPlatformOwner;
 //# sourceMappingURL=page.js.map