@basedigital/base-cms-payload-core 0.1.30

package/dist/cms/access/sync-cms-access.d.ts

@@ -0,0 +1,8 @@
+import { type CollectionPermissionDefinition } from './with-collection-access.js';
+import type { CollectionConfig, GlobalConfig, Payload } from 'payload';
+export declare function getExpectedCmsPermissionDefinitions({ collections, globals, }: {
+    collections: CollectionConfig[];
+    globals: GlobalConfig[];
+}): CollectionPermissionDefinition[];
+export declare function syncCmsAccess(payload: Payload): Promise<void>;
+//# sourceMappingURL=sync-cms-access.d.ts.map

package/dist/cms/access/sync-cms-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-cms-access.d.ts","sourceRoot":"","sources":["../../../src/cms/access/sync-cms-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwC,KAAK,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAEpI,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAmCvE,wBAAgB,mCAAmC,CAAC,EAClD,WAAW,EACX,OAAO,GACR,EAAE;IACD,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB,GAAG,8BAA8B,EAAE,CASnC;AAwHD,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CASnE"}

package/dist/cms/access/sync-cms-access.js

@@ -0,0 +1,137 @@
+import { getGeneratedCollectionAccessMetadata } from './with-collection-access.js';
+import { getGeneratedGlobalAccessMetadata } from './with-global-access.js';
+const defaultRoleDefinitions = [
+    { description: 'Usuário Super Administrador', name: 'SUPER ADMIN', shouldReceiveAllPermissions: true },
+    { description: 'Usuário administrador', name: 'ADMIN', shouldReceiveAllPermissions: true },
+    { description: 'Usuário padrão', name: 'USER', shouldReceiveAllPermissions: false },
+];
+function dedupePermissions(permissions) {
+    const permissionMap = new Map();
+    permissions.forEach((permission) => {
+        permissionMap.set(permission.name, permission);
+    });
+    return [...permissionMap.values()];
+}
+function resolveRolePermissionIds(role) {
+    return (role.permissions || []).map((permission) => {
+        return typeof permission === 'number' || typeof permission === 'string' ? permission : permission.id;
+    });
+}
+export function getExpectedCmsPermissionDefinitions({ collections, globals, }) {
+    const generatedCollectionPermissions = collections.flatMap((collection) => {
+        return getGeneratedCollectionAccessMetadata(collection)?.permissions || [];
+    });
+    const generatedGlobalPermissions = globals.flatMap((global) => {
+        return getGeneratedGlobalAccessMetadata(global)?.permissions || [];
+    });
+    return dedupePermissions([...generatedCollectionPermissions, ...generatedGlobalPermissions]);
+}
+async function getExistingPermissions(payload) {
+    const response = await payload.find({
+        collection: 'cms-permissions',
+        depth: 0,
+        limit: 0,
+        overrideAccess: true,
+        select: {
+            id: true,
+            name: true,
+        },
+    });
+    return response.docs;
+}
+async function getExistingRoles(payload) {
+    const response = await payload.find({
+        collection: 'cms-roles',
+        depth: 0,
+        limit: 0,
+        overrideAccess: true,
+        select: {
+            id: true,
+            name: true,
+            permissions: true,
+        },
+    });
+    return response.docs;
+}
+async function createMissingPermissions(payload, expectedPermissions) {
+    const existingPermissions = await getExistingPermissions(payload);
+    const permissionMap = new Map(existingPermissions.map((permission) => [permission.name, permission]));
+    let createdPermissionsCount = 0;
+    for (const permission of expectedPermissions) {
+        if (permissionMap.has(permission.name)) {
+            continue;
+        }
+        const createdPermission = await payload.create({
+            collection: 'cms-permissions',
+            data: {
+                description: permission.description,
+                name: permission.name,
+            },
+            overrideAccess: true,
+        });
+        permissionMap.set(createdPermission.name, {
+            id: createdPermission.id,
+            name: createdPermission.name,
+        });
+        createdPermissionsCount += 1;
+    }
+    if (createdPermissionsCount > 0) {
+        payload.logger.info(`${createdPermissionsCount} permissões CMS criadas automaticamente.`);
+    }
+    return [...permissionMap.values()];
+}
+async function syncDefaultRoles(payload, permissionIds) {
+    const roles = await getExistingRoles(payload);
+    const roleMap = new Map(roles.map((role) => [role.name, role]));
+    let createdRolesCount = 0;
+    let updatedRolesCount = 0;
+    for (const roleDefinition of defaultRoleDefinitions) {
+        const existingRole = roleMap.get(roleDefinition.name);
+        if (!existingRole) {
+            await payload.create({
+                collection: 'cms-roles',
+                data: {
+                    description: roleDefinition.description,
+                    name: roleDefinition.name,
+                    permissions: roleDefinition.shouldReceiveAllPermissions ? permissionIds : [],
+                },
+                overrideAccess: true,
+            });
+            createdRolesCount += 1;
+            continue;
+        }
+        if (!roleDefinition.shouldReceiveAllPermissions) {
+            continue;
+        }
+        const existingPermissionIds = resolveRolePermissionIds(existingRole);
+        const nextPermissionIds = [...new Set([...existingPermissionIds, ...permissionIds])];
+        if (nextPermissionIds.length === existingPermissionIds.length) {
+            continue;
+        }
+        await payload.update({
+            collection: 'cms-roles',
+            data: {
+                permissions: nextPermissionIds,
+            },
+            id: existingRole.id,
+            overrideAccess: true,
+        });
+        updatedRolesCount += 1;
+    }
+    if (createdRolesCount > 0) {
+        payload.logger.info(`${createdRolesCount} roles CMS criadas automaticamente.`);
+    }
+    if (updatedRolesCount > 0) {
+        payload.logger.info(`${updatedRolesCount} roles CMS atualizadas com permissões faltantes.`);
+    }
+}
+export async function syncCmsAccess(payload) {
+    const expectedPermissions = getExpectedCmsPermissionDefinitions({
+        collections: payload.config.collections,
+        globals: payload.config.globals,
+    });
+    const permissions = await createMissingPermissions(payload, expectedPermissions);
+    const permissionIds = permissions.map((permission) => permission.id);
+    await syncDefaultRoles(payload, permissionIds);
+}
+//# sourceMappingURL=sync-cms-access.js.map

package/dist/cms/access/sync-cms-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-cms-access.js","sourceRoot":"","sources":["../../../src/cms/access/sync-cms-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAuC,MAAM,yCAAyC,CAAC;AACpI,OAAO,EAAE,gCAAgC,EAAmC,MAAM,qCAAqC,CAAC;AAGxH,MAAM,sBAAsB,GAAG;IAC7B,EAAE,WAAW,EAAE,6BAA6B,EAAE,IAAI,EAAE,aAAa,EAAE,2BAA2B,EAAE,IAAI,EAAE;IACtG,EAAE,WAAW,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,IAAI,EAAE;IAC1F,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,KAAK,EAAE;CAC3E,CAAC;AAaX,SAAS,iBAAiB,CAAC,WAA4E;IACrG,MAAM,aAAa,GAAG,IAAI,GAAG,EAA0C,CAAC;IAExE,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QACjC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAA4C,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAkB;IAClD,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACjD,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,EAClD,WAAW,EACX,OAAO,GAIR;IACC,MAAM,8BAA8B,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QACxE,OAAO,oCAAoC,CAAC,UAAU,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,MAAM,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5D,OAAO,gCAAgC,CAAC,MAAM,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,OAAO,iBAAiB,CAAC,CAAC,GAAG,8BAA8B,EAAE,GAAG,0BAA0B,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,OAAgB;IACpD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QAClC,UAAU,EAAE,iBAAiB;QAC7B,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,CAAC;QACR,cAAc,EAAE,IAAI;QACpB,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,IAAI;SACX;KACF,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,IAA4B,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAAgB;IAC9C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QAClC,UAAU,EAAE,WAAW;QACvB,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,CAAC;QACR,cAAc,EAAE,IAAI;QACpB,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,IAAI;YACV,WAAW,EAAE,IAAI;SAClB;KACF,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,IAAsB,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,OAAgB,EAAE,mBAAqD;IAC7G,MAAM,mBAAmB,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACtG,IAAI,uBAAuB,GAAG,CAAC,CAAC;IAEhC,KAAK,MAAM,UAAU,IAAI,mBAAmB,EAAE,CAAC;QAC7C,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,SAAS;QACX,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;YAC7C,UAAU,EAAE,iBAAiB;YAC7B,IAAI,EAAE;gBACJ,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,IAAI,EAAE,UAAU,CAAC,IAAI;aACtB;YACD,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QAEH,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE;YACxC,EAAE,EAAE,iBAAiB,CAAC,EAAE;YACxB,IAAI,EAAE,iBAAiB,CAAC,IAAI;SAC7B,CAAC,CAAC;QACH,uBAAuB,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,uBAAuB,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,uBAAuB,0CAA0C,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAAgB,EAAE,aAAkC;IAClF,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,KAAK,MAAM,cAAc,IAAI,sBAAsB,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAEtD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnB,UAAU,EAAE,WAAW;gBACvB,IAAI,EAAE;oBACJ,WAAW,EAAE,cAAc,CAAC,WAAW;oBACvC,IAAI,EAAE,cAAc,CAAC,IAAI;oBACzB,WAAW,EAAE,cAAc,CAAC,2BAA2B,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;iBAC7E;gBACD,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;YACH,iBAAiB,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,2BAA2B,EAAE,CAAC;YAChD,SAAS;QACX,CAAC;QAED,MAAM,qBAAqB,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACrE,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,qBAAqB,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAErF,IAAI,iBAAiB,CAAC,MAAM,KAAK,qBAAqB,CAAC,MAAM,EAAE,CAAC;YAC9D,SAAS;QACX,CAAC;QAED,MAAM,OAAO,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,WAAW;YACvB,IAAI,EAAE;gBACJ,WAAW,EAAE,iBAAiB;aAC/B;YACD,EAAE,EAAE,YAAY,CAAC,EAAE;YACnB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,iBAAiB,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,qCAAqC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,kDAAkD,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB;IAClD,MAAM,mBAAmB,GAAG,mCAAmC,CAAC;QAC9D,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;QACvC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;KAChC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACjF,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAErE,MAAM,gBAAgB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AACjD,CAAC"}

package/dist/cms/access/with-collection-access.d.ts

@@ -0,0 +1,37 @@
+import type { CollectionConfig } from 'payload';
+declare const permissionSuffixByOperation: {
+    readonly create: "create";
+    readonly delete: "delete";
+    readonly read: "read";
+    readonly update: "update";
+};
+type CollectionAccessOperation = keyof typeof permissionSuffixByOperation;
+export type CollectionPermissionDefinition = {
+    description: string;
+    name: string;
+    operation: CollectionAccessOperation | string;
+};
+type CollectionAccessMetadata = {
+    permissions: CollectionPermissionDefinition[];
+};
+type ExtendAccessArgs = {
+    collection: CollectionConfig;
+    defaultAccess: NonNullable<CollectionConfig['access']>;
+    permissions: CollectionPermissionDefinition[];
+};
+type ExtendPermissionsArgs = {
+    collection: CollectionConfig;
+    defaultPermissions: CollectionPermissionDefinition[];
+};
+export type WithCollectionAccessOptions = {
+    extendAccess?: (args: ExtendAccessArgs) => Partial<NonNullable<CollectionConfig['access']>>;
+    extendPermissions?: (args: ExtendPermissionsArgs) => CollectionPermissionDefinition[];
+};
+export declare function buildCollectionPermissionDefinitions({ collection }: {
+    collection: CollectionConfig;
+}): CollectionPermissionDefinition[];
+export declare function getGeneratedCollectionAccessMetadata(collection: Pick<CollectionConfig, 'custom'>): CollectionAccessMetadata | null;
+export declare function withCollectionAccess(collection: CollectionConfig, options: WithCollectionAccessOptions): CollectionConfig;
+export declare function createCollectionAccessOverride(collection: Pick<CollectionConfig, 'custom' | 'labels' | 'slug'>, options: WithCollectionAccessOptions): Pick<CollectionConfig, 'access' | 'custom'>;
+export {};
+//# sourceMappingURL=with-collection-access.d.ts.map

package/dist/cms/access/with-collection-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-collection-access.d.ts","sourceRoot":"","sources":["../../../src/cms/access/with-collection-access.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAIhD,QAAA,MAAM,2BAA2B;;;;;CAKvB,CAAC;AASX,KAAK,yBAAyB,GAAG,MAAM,OAAO,2BAA2B,CAAC;AAE1E,MAAM,MAAM,8BAA8B,GAAG;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,yBAAyB,GAAG,MAAM,CAAC;CAC/C,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,WAAW,EAAE,8BAA8B,EAAE,CAAC;CAC/C,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,WAAW,EAAE,8BAA8B,EAAE,CAAC;CAC/C,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,kBAAkB,EAAE,8BAA8B,EAAE,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5F,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,8BAA8B,EAAE,CAAC;CACvF,CAAC;AA+BF,wBAAgB,oCAAoC,CAAC,EAAE,UAAU,EAAE,EAAE;IAAE,UAAU,EAAE,gBAAgB,CAAA;CAAE,GAAG,8BAA8B,EAAE,CAcvI;AAqDD,wBAAgB,oCAAoC,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,wBAAwB,GAAG,IAAI,CAQlI;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,2BAA2B,GAAG,gBAAgB,CAWzH;AAED,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC,EAChE,OAAO,EAAE,2BAA2B,GACnC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,QAAQ,CAAC,CAQ7C"}

package/dist/cms/access/with-collection-access.js

@@ -0,0 +1,117 @@
+import { AccessControl } from '../auth/access-control.js';
+const GENERATED_COLLECTION_ACCESS_METADATA_KEY = 'generatedCollectionAccess';
+const permissionSuffixByOperation = {
+    create: 'create',
+    delete: 'delete',
+    read: 'read',
+    update: 'update',
+};
+const permissionVerbByOperation = {
+    create: 'Criar',
+    delete: 'Excluir',
+    read: 'Visualizar',
+    update: 'Atualizar',
+};
+function dedupePermissions(permissions) {
+    const permissionMap = new Map();
+    permissions.forEach((permission) => {
+        permissionMap.set(permission.name, permission);
+    });
+    return [...permissionMap.values()];
+}
+function resolveCollectionLabel(collection, variant) {
+    const label = collection.labels?.[variant];
+    if (typeof label === 'string') {
+        return label;
+    }
+    return collection.slug;
+}
+function buildPermissionDescription({ collection, operation }) {
+    const label = resolveCollectionLabel(collection, operation === 'read' ? 'plural' : 'singular');
+    return `${permissionVerbByOperation[operation]} ${label.toLocaleLowerCase('pt-BR')}`;
+}
+function buildPermissionName({ operation, slug }) {
+    return `${slug}.${permissionSuffixByOperation[operation]}`;
+}
+export function buildCollectionPermissionDefinitions({ collection }) {
+    return Object.keys(permissionSuffixByOperation).map((operation) => {
+        return {
+            description: buildPermissionDescription({
+                collection,
+                operation,
+            }),
+            name: buildPermissionName({
+                operation,
+                slug: collection.slug,
+            }),
+            operation,
+        };
+    });
+}
+function buildDefaultCollectionAccess(permissions) {
+    const createPermission = permissions.find((permission) => permission.operation === 'create');
+    const deletePermission = permissions.find((permission) => permission.operation === 'delete');
+    const readPermission = permissions.find((permission) => permission.operation === 'read');
+    const updatePermission = permissions.find((permission) => permission.operation === 'update');
+    if (!createPermission || !deletePermission || !readPermission || !updatePermission) {
+        throw new Error('Não foi possível criar o access default da collection sem as permissões padrão.');
+    }
+    return {
+        create: AccessControl.hasPermission(createPermission.name),
+        delete: AccessControl.hasPermission(deletePermission.name),
+        read: AccessControl.hasPermission(readPermission.name),
+        update: AccessControl.hasPermission(updatePermission.name),
+    };
+}
+function createGeneratedCollectionAccessConfig(collection, options) {
+    const defaultPermissions = buildCollectionPermissionDefinitions({
+        collection,
+    });
+    const extendedPermissions = options.extendPermissions?.({
+        collection,
+        defaultPermissions,
+    });
+    const permissions = dedupePermissions([...defaultPermissions, ...(extendedPermissions || [])]);
+    const defaultAccess = buildDefaultCollectionAccess(permissions);
+    const extendedAccess = options.extendAccess?.({
+        collection,
+        defaultAccess,
+        permissions,
+    });
+    return {
+        access: {
+            ...defaultAccess,
+            ...(extendedAccess || {}),
+        },
+        custom: {
+            ...(collection.custom || {}),
+            [GENERATED_COLLECTION_ACCESS_METADATA_KEY]: {
+                permissions,
+            },
+        },
+    };
+}
+export function getGeneratedCollectionAccessMetadata(collection) {
+    const metadata = collection.custom?.[GENERATED_COLLECTION_ACCESS_METADATA_KEY];
+    if (!metadata || typeof metadata !== 'object') {
+        return null;
+    }
+    return metadata;
+}
+export function withCollectionAccess(collection, options) {
+    if (collection.access) {
+        console.warn(`[withCollectionAccess] Access already exists for collection "${collection.slug}". Skipping automatic access injection.`);
+        return collection;
+    }
+    return {
+        ...collection,
+        ...createGeneratedCollectionAccessConfig(collection, options),
+    };
+}
+export function createCollectionAccessOverride(collection, options) {
+    return createGeneratedCollectionAccessConfig({
+        fields: [],
+        ...collection,
+    }, options);
+}
+//# sourceMappingURL=with-collection-access.js.map

package/dist/cms/access/with-collection-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-collection-access.js","sourceRoot":"","sources":["../../../src/cms/access/with-collection-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAG9D,MAAM,wCAAwC,GAAG,2BAA2B,CAAC;AAE7E,MAAM,2BAA2B,GAAG;IAClC,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;CACR,CAAC;AAEX,MAAM,yBAAyB,GAAG;IAChC,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,WAAW;CACX,CAAC;AA8BX,SAAS,iBAAiB,CAAC,WAA6C;IACtE,MAAM,aAAa,GAAG,IAAI,GAAG,EAA0C,CAAC;IAExE,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QACjC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,sBAAsB,CAAC,UAA4B,EAAE,OAA8B;IAC1F,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAE3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CAAC;AACzB,CAAC;AAED,SAAS,0BAA0B,CAAC,EAAE,UAAU,EAAE,SAAS,EAA0E;IACnI,MAAM,KAAK,GAAG,sBAAsB,CAAC,UAAU,EAAE,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/F,OAAO,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAE,SAAS,EAAE,IAAI,EAA0D;IACtG,OAAO,GAAG,IAAI,IAAI,2BAA2B,CAAC,SAAS,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,EAAE,UAAU,EAAoC;IACnG,OAAQ,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAiC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACjG,OAAO;YACL,WAAW,EAAE,0BAA0B,CAAC;gBACtC,UAAU;gBACV,SAAS;aACV,CAAC;YACF,IAAI,EAAE,mBAAmB,CAAC;gBACxB,SAAS;gBACT,IAAI,EAAE,UAAU,CAAC,IAAI;aACtB,CAAC;YACF,SAAS;SACV,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,4BAA4B,CAAC,WAA6C;IACjF,MAAM,gBAAgB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IAC7F,MAAM,gBAAgB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IAC7F,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;IACzF,MAAM,gBAAgB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IAE7F,IAAI,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,IAAI,CAAC,cAAc,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IAED,OAAO;QACL,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAC1D,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAC1D,IAAI,EAAE,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC;QACtD,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,UAA4B,EAC5B,OAAoC;IAEpC,MAAM,kBAAkB,GAAG,oCAAoC,CAAC;QAC9D,UAAU;KACX,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACtD,UAAU;QACV,kBAAkB;KACnB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,iBAAiB,CAAC,CAAC,GAAG,kBAAkB,EAAE,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,aAAa,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QAC5C,UAAU;QACV,aAAa;QACb,WAAW;KACZ,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE;YACN,GAAG,aAAa;YAChB,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;SAC1B;QACD,MAAM,EAAE;YACN,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;YAC5B,CAAC,wCAAwC,CAAC,EAAE;gBAC1C,WAAW;aACuB;SACrC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,UAA4C;IAC/F,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,wCAAwC,CAAC,CAAC;IAE/E,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,QAAoC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAA4B,EAAE,OAAoC;IACrG,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,gEAAgE,UAAU,CAAC,IAAI,yCAAyC,CAAC,CAAC;QAEvI,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO;QACL,GAAG,UAAU;QACb,GAAG,qCAAqC,CAAC,UAAU,EAAE,OAAO,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,UAAgE,EAChE,OAAoC;IAEpC,OAAO,qCAAqC,CAC1C;QACE,MAAM,EAAE,EAAE;QACV,GAAG,UAAU;KACd,EACD,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/cms/access/with-global-access.d.ts

@@ -0,0 +1,34 @@
+import type { GlobalConfig } from 'payload';
+declare const permissionSuffixByOperation: {
+    readonly read: "read";
+    readonly update: "update";
+};
+type GlobalAccessOperation = keyof typeof permissionSuffixByOperation;
+export type GlobalPermissionDefinition = {
+    description: string;
+    name: string;
+    operation: GlobalAccessOperation | string;
+};
+type GlobalAccessMetadata = {
+    permissions: GlobalPermissionDefinition[];
+};
+type ExtendAccessArgs = {
+    defaultAccess: NonNullable<GlobalConfig['access']>;
+    global: GlobalConfig;
+    permissions: GlobalPermissionDefinition[];
+};
+type ExtendPermissionsArgs = {
+    defaultPermissions: GlobalPermissionDefinition[];
+    global: GlobalConfig;
+};
+export type WithGlobalAccessOptions = {
+    extendAccess?: (args: ExtendAccessArgs) => Partial<NonNullable<GlobalConfig['access']>>;
+    extendPermissions?: (args: ExtendPermissionsArgs) => GlobalPermissionDefinition[];
+};
+export declare function buildGlobalPermissionDefinitions({ global }: {
+    global: GlobalConfig;
+}): GlobalPermissionDefinition[];
+export declare function getGeneratedGlobalAccessMetadata(global: Pick<GlobalConfig, 'custom'>): GlobalAccessMetadata | null;
+export declare function withGlobalAccess(global: GlobalConfig, options: WithGlobalAccessOptions): GlobalConfig;
+export {};
+//# sourceMappingURL=with-global-access.d.ts.map

package/dist/cms/access/with-global-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-global-access.d.ts","sourceRoot":"","sources":["../../../src/cms/access/with-global-access.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAI5C,QAAA,MAAM,2BAA2B;;;CAGvB,CAAC;AAOX,KAAK,qBAAqB,GAAG,MAAM,OAAO,2BAA2B,CAAC;AAEtE,MAAM,MAAM,0BAA0B,GAAG;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,qBAAqB,GAAG,MAAM,CAAC;CAC3C,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,WAAW,EAAE,0BAA0B,EAAE,CAAC;CAC3C,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,aAAa,EAAE,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnD,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,0BAA0B,EAAE,CAAC;CAC3C,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,kBAAkB,EAAE,0BAA0B,EAAE,CAAC;IACjD,MAAM,EAAE,YAAY,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxF,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,0BAA0B,EAAE,CAAC;CACnF,CAAC;AA4BF,wBAAgB,gCAAgC,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,GAAG,0BAA0B,EAAE,CAcnH;AA8CD,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,oBAAoB,GAAG,IAAI,CAQlH;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,uBAAuB,GAAG,YAAY,CAWrG"}

package/dist/cms/access/with-global-access.js

@@ -0,0 +1,101 @@
+import { AccessControl } from '../auth/access-control.js';
+const GENERATED_GLOBAL_ACCESS_METADATA_KEY = 'generatedGlobalAccess';
+const permissionSuffixByOperation = {
+    read: 'read',
+    update: 'update',
+};
+const permissionVerbByOperation = {
+    read: 'Visualizar',
+    update: 'Atualizar',
+};
+function dedupePermissions(permissions) {
+    const permissionMap = new Map();
+    permissions.forEach((permission) => {
+        permissionMap.set(permission.name, permission);
+    });
+    return [...permissionMap.values()];
+}
+function resolveGlobalLabel(global) {
+    if (typeof global.label === 'string') {
+        return global.label;
+    }
+    return global.slug;
+}
+function buildPermissionDescription({ global, operation }) {
+    return `${permissionVerbByOperation[operation]} ${resolveGlobalLabel(global).toLocaleLowerCase('pt-BR')}`;
+}
+function buildPermissionName({ global, operation }) {
+    return `${global.slug}.${permissionSuffixByOperation[operation]}`;
+}
+export function buildGlobalPermissionDefinitions({ global }) {
+    return Object.keys(permissionSuffixByOperation).map((operation) => {
+        return {
+            description: buildPermissionDescription({
+                global,
+                operation,
+            }),
+            name: buildPermissionName({
+                global,
+                operation,
+            }),
+            operation,
+        };
+    });
+}
+function buildDefaultGlobalAccess(permissions) {
+    const readPermission = permissions.find((permission) => permission.operation === 'read');
+    const updatePermission = permissions.find((permission) => permission.operation === 'update');
+    if (!readPermission || !updatePermission) {
+        throw new Error('Não foi possível criar o access default do global sem as permissões padrão.');
+    }
+    return {
+        read: AccessControl.hasPermission(readPermission.name),
+        update: AccessControl.hasPermission(updatePermission.name),
+    };
+}
+function createGeneratedGlobalAccessConfig(global, options) {
+    const defaultPermissions = buildGlobalPermissionDefinitions({
+        global,
+    });
+    const extendedPermissions = options.extendPermissions?.({
+        defaultPermissions,
+        global,
+    });
+    const permissions = dedupePermissions([...defaultPermissions, ...(extendedPermissions || [])]);
+    const defaultAccess = buildDefaultGlobalAccess(permissions);
+    const extendedAccess = options.extendAccess?.({
+        defaultAccess,
+        global,
+        permissions,
+    });
+    return {
+        access: {
+            ...defaultAccess,
+            ...(extendedAccess || {}),
+        },
+        custom: {
+            ...(global.custom || {}),
+            [GENERATED_GLOBAL_ACCESS_METADATA_KEY]: {
+                permissions,
+            },
+        },
+    };
+}
+export function getGeneratedGlobalAccessMetadata(global) {
+    const metadata = global.custom?.[GENERATED_GLOBAL_ACCESS_METADATA_KEY];
+    if (!metadata || typeof metadata !== 'object') {
+        return null;
+    }
+    return metadata;
+}
+export function withGlobalAccess(global, options) {
+    if (global.access) {
+        console.warn(`[withGlobalAccess] Access already exists for global "${global.slug}". Skipping automatic access injection.`);
+        return global;
+    }
+    return {
+        ...global,
+        ...createGeneratedGlobalAccessConfig(global, options),
+    };
+}
+//# sourceMappingURL=with-global-access.js.map

package/dist/cms/access/with-global-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-global-access.js","sourceRoot":"","sources":["../../../src/cms/access/with-global-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAG9D,MAAM,oCAAoC,GAAG,uBAAuB,CAAC;AAErE,MAAM,2BAA2B,GAAG;IAClC,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;CACR,CAAC;AAEX,MAAM,yBAAyB,GAAG;IAChC,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,WAAW;CACX,CAAC;AA8BX,SAAS,iBAAiB,CAAC,WAAyC;IAClE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsC,CAAC;IAEpE,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QACjC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAoB;IAC9C,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,0BAA0B,CAAC,EAAE,MAAM,EAAE,SAAS,EAA8D;IACnH,OAAO,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5G,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAE,MAAM,EAAE,SAAS,EAA8D;IAC5G,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,2BAA2B,CAAC,SAAS,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,EAAE,MAAM,EAA4B;IACnF,OAAQ,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAA6B,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC7F,OAAO;YACL,WAAW,EAAE,0BAA0B,CAAC;gBACtC,MAAM;gBACN,SAAS;aACV,CAAC;YACF,IAAI,EAAE,mBAAmB,CAAC;gBACxB,MAAM;gBACN,SAAS;aACV,CAAC;YACF,SAAS;SACV,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,WAAyC;IACzE,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;IACzF,MAAM,gBAAgB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IAE7F,IAAI,CAAC,cAAc,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IAED,OAAO;QACL,IAAI,EAAE,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC;QACtD,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CAAC,MAAoB,EAAE,OAAgC;IAC/F,MAAM,kBAAkB,GAAG,gCAAgC,CAAC;QAC1D,MAAM;KACP,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACtD,kBAAkB;QAClB,MAAM;KACP,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,iBAAiB,CAAC,CAAC,GAAG,kBAAkB,EAAE,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,aAAa,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QAC5C,aAAa;QACb,MAAM;QACN,WAAW;KACZ,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE;YACN,GAAG,aAAa;YAChB,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;SAC1B;QACD,MAAM,EAAE;YACN,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YACxB,CAAC,oCAAoC,CAAC,EAAE;gBACtC,WAAW;aACmB;SACjC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAoC;IACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,oCAAoC,CAAC,CAAC;IAEvE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,QAAgC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAoB,EAAE,OAAgC;IACrF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,wDAAwD,MAAM,CAAC,IAAI,yCAAyC,CAAC,CAAC;QAE3H,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO;QACL,GAAG,MAAM;QACT,GAAG,iCAAiC,CAAC,MAAM,EAAE,OAAO,CAAC;KACtD,CAAC;AACJ,CAAC"}

package/dist/cms/auth/access-control.d.ts

@@ -0,0 +1,14 @@
+import { Access, DataFromCollectionSlug, PayloadRequest } from 'payload';
+type CmsUser = DataFromCollectionSlug<'cms-users'>;
+type PermissionFunc = ({ req }: {
+    req: PayloadRequest;
+}) => boolean | Promise<boolean>;
+export declare const AccessControl: {
+    anyone: Access;
+    hasPermission: (permission: string) => PermissionFunc;
+    hasRole: (role: string) => PermissionFunc;
+    isCmsUser: (user: CmsUser | number) => PermissionFunc;
+    oneOf: (chain: PermissionFunc[]) => PermissionFunc;
+};
+export {};
+//# sourceMappingURL=access-control.d.ts.map

package/dist/cms/auth/access-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.d.ts","sourceRoot":"","sources":["../../../src/cms/auth/access-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAW,cAAc,EAAa,MAAM,SAAS,CAAC;AAG7F,KAAK,OAAO,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;AACnD,KAAK,cAAc,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE;IAAE,GAAG,EAAE,cAAc,CAAA;CAAE,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAqHvF,eAAO,MAAM,aAAa;;gCA9FS,MAAM,KAAG,cAAc;oBAenC,MAAM,KAAG,cAAc;sBAerB,OAAO,GAAG,MAAM,KAAG,cAAc;mBAcpC,cAAc,EAAE,KAAG,cAAc;CAwDtD,CAAC"}

package/dist/cms/auth/access-control.js

@@ -0,0 +1,100 @@
+const userPermissionsByReq = new WeakMap();
+const userRolesByReq = new WeakMap();
+function getUserPermissionsForReq(req, user) {
+    let cached = userPermissionsByReq.get(req);
+    if (!cached) {
+        cached = getUserPermissions(user, req.payload);
+        userPermissionsByReq.set(req, cached);
+    }
+    return cached;
+}
+function getUserRolesForReq(req, user) {
+    let cached = userRolesByReq.get(req);
+    if (!cached) {
+        cached = getUserRoles(user, req.payload);
+        userRolesByReq.set(req, cached);
+    }
+    return cached;
+}
+const hasPermission = (permission) => {
+    const permissionFunc = async ({ req }) => {
+        const user = req.user;
+        if (user && user.collection === 'cms-users') {
+            const permissions = await getUserPermissionsForReq(req, user);
+            return permissions.some((p) => p === permission);
+        }
+        return false;
+    };
+    return permissionFunc;
+};
+const hasRole = (role) => {
+    const permissionFunc = async ({ req }) => {
+        const user = req.user;
+        if (user && user.collection === 'cms-users') {
+            const roles = await getUserRolesForReq(req, user);
+            return roles.some((p) => p === role);
+        }
+        return false;
+    };
+    return permissionFunc;
+};
+const isCmsUser = (user) => {
+    const permissionFunc = async ({ req }) => {
+        const reqUser = req.user;
+        if (reqUser && reqUser.collection === 'cms-users') {
+            return reqUser.id === (typeof user === 'number' ? user : user.id);
+        }
+        return false;
+    };
+    return permissionFunc;
+};
+const oneOf = (chain) => {
+    const permissionFunc = async (args) => {
+        for (const func of chain) {
+            if (await func(args)) {
+                return true;
+            }
+        }
+        return false;
+    };
+    return permissionFunc;
+};
+const anyone = () => true;
+async function getUserPermissions(user, payload) {
+    if (user.collection === 'cms-users') {
+        // Cast explícito porque no build isolado do pacote os tipos do payload-types (do projeto) caem no
+        // fallback permissivo; no boilerplate os tipos são precisos e o cast é no-op. (some depois de generate:types.)
+        let roles = (user.roles ?? []);
+        if (roles.length === 0) {
+            return [];
+        }
+        if (!roles.some((r) => typeof r === 'number')) {
+            roles = roles.map((r) => r.id);
+        }
+        const permissionsObjs = await payload.find({ collection: 'cms-permissions', where: { roles: { in: roles } }, select: { name: true }, limit: 0 });
+        return permissionsObjs.docs.map((permission) => permission.name);
+    }
+    return [];
+}
+async function getUserRoles(user, payload) {
+    if (user.collection === 'cms-users') {
+        const roles = (user.roles ?? []);
+        if (roles.length === 0) {
+            return [];
+        }
+        if (!roles.some((r) => typeof r === 'number' || typeof r === 'string')) {
+            return roles.map((r) => r.name);
+        }
+        const rolesObjs = await payload.find({ collection: 'cms-roles', where: { id: { in: roles } }, select: { name: true }, limit: 0 });
+        return rolesObjs.docs.map((role) => role.name);
+    }
+    return [];
+}
+export const AccessControl = {
+    anyone,
+    hasPermission,
+    hasRole,
+    isCmsUser,
+    oneOf,
+};
+//# sourceMappingURL=access-control.js.map

package/dist/cms/auth/access-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.js","sourceRoot":"","sources":["../../../src/cms/auth/access-control.ts"],"names":[],"mappings":"AAMA,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAAqC,CAAC;AAC9E,MAAM,cAAc,GAAG,IAAI,OAAO,EAAqC,CAAC;AAExE,SAAS,wBAAwB,CAAC,GAAmB,EAAE,IAAe;IACpE,IAAI,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAmB,EAAE,IAAe;IAC9D,IAAI,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAkB,EAAE;IAC3D,MAAM,cAAc,GAAmB,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtB,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9D,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAkB,EAAE;IAC/C,MAAM,cAAc,GAAmB,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtB,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,IAAsB,EAAkB,EAAE;IAC3D,MAAM,cAAc,GAAmB,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACvD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC;QAEzB,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;YAClD,OAAO,OAAO,CAAC,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,KAAuB,EAAkB,EAAE;IACxD,MAAM,cAAc,GAAmB,KAAK,EAAE,IAAI,EAAE,EAAE;QACpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,MAAM,GAAW,GAAG,EAAE,CAAC,IAAI,CAAC;AAElC,KAAK,UAAU,kBAAkB,CAAC,IAAe,EAAE,OAAgB;IACjE,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;QACpC,kGAAkG;QAClG,+GAA+G;QAC/G,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAqC,CAAC;QACnE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC9C,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAa,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAc,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1J,OAAQ,eAAe,CAAC,IAAgC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAChG,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAe,EAAE,OAAgB;IAC3D,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAqC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAa,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAClI,OAAQ,SAAS,CAAC,IAAgC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,MAAM;IACN,aAAa;IACb,OAAO;IACP,SAAS;IACT,KAAK;CACN,CAAC"}

package/dist/cms/blocks/page-template-extra-blocks.block.d.ts

@@ -0,0 +1,3 @@
+import type { Block } from 'payload';
+export declare const PageTemplateExtraBlocksBlock: Block;
+//# sourceMappingURL=page-template-extra-blocks.block.d.ts.map

package/dist/cms/blocks/page-template-extra-blocks.block.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-template-extra-blocks.block.d.ts","sourceRoot":"","sources":["../../../src/cms/blocks/page-template-extra-blocks.block.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAMrC,eAAO,MAAM,4BAA4B,EAAE,KAQ1C,CAAC"}

package/dist/cms/blocks/page-template-extra-blocks.block.js

@@ -0,0 +1,15 @@
+import { createPayloadAdminText } from '../config/payload-admin-i18n.config.js';
+// Marcador sem configuração, exclusivo de page-templates. Não renderiza nada por si só:
+// serve apenas para marcar, dentro do layout do template, onde os `extraBlocks` (montados em
+// código no page.tsx e passados para <PageTemplateBlocks>) devem ser inseridos. A expansão
+// acontece no PageTemplateBlocks, que substitui este marcador pelos itens de `extraBlocks`.
+export const PageTemplateExtraBlocksBlock = {
+    slug: 'page-template-extra-blocks',
+    interfaceName: 'PageTemplateExtraBlocksBlock',
+    labels: {
+        singular: createPayloadAdminText('Blocks extras da página'),
+        plural: createPayloadAdminText('Blocks extras da página'),
+    },
+    fields: [],
+};
+//# sourceMappingURL=page-template-extra-blocks.block.js.map

package/dist/cms/blocks/page-template-extra-blocks.block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-template-extra-blocks.block.js","sourceRoot":"","sources":["../../../src/cms/blocks/page-template-extra-blocks.block.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAGpF,wFAAwF;AACxF,6FAA6F;AAC7F,2FAA2F;AAC3F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,4BAA4B,GAAU;IACjD,IAAI,EAAE,4BAA4B;IAClC,aAAa,EAAE,8BAA8B;IAC7C,MAAM,EAAE;QACN,QAAQ,EAAE,sBAAsB,CAAC,yBAAyB,CAAC;QAC3D,MAAM,EAAE,sBAAsB,CAAC,yBAAyB,CAAC;KAC1D;IACD,MAAM,EAAE,EAAE;CACX,CAAC"}

package/dist/cms/blocks/reusable.block.d.ts

@@ -0,0 +1,3 @@
+import type { Block } from 'payload';
+export declare const ReusableBlock: Block;
+//# sourceMappingURL=reusable.block.d.ts.map

package/dist/cms/blocks/reusable.block.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reusable.block.d.ts","sourceRoot":"","sources":["../../../src/cms/blocks/reusable.block.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,aAAa,EAAE,KAuB3B,CAAC"}