@bobbykim/manguito-cms-cli 0.11.3 → 0.12.0

package/dist/{chunk-N75KN2YC.js → chunk-EVB2E4A5.js}

@@ -9270,7 +9270,7 @@ var require_bcryptjs = __commonJS({
   }
 });
 
-// ../api/dist/chunk-GUZZQZSN.mjs
+// ../api/dist/chunk-EFTMAG7N.mjs
 init_esm_shims();
 import crypto from "crypto";
 
@@ -26681,7 +26681,7 @@ function describeSchemaChange(input) {
   return { from: from?.version ?? null, to: to.version, types, identical };
 }
 
-// ../api/dist/chunk-GUZZQZSN.mjs
+// ../api/dist/chunk-EFTMAG7N.mjs
 function isColumnBacked2(field) {
   const col = field.db_column;
   if (col === null) return false;
@@ -26788,10 +26788,131 @@ function createFieldKeyMapFromProjection(projectionType, allFields) {
     droppedLabels
   );
 }
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isUuid(v) {
+  return typeof v === "string" && UUID_RE.test(v);
+}
+function isPlainObject2(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function checkRelationInput(fields, body, registry2, path4 = "") {
+  const errors = [];
+  for (const field of fields) {
+    if (!Object.hasOwn(body, field.name)) continue;
+    const cardinality = relationCardinality(field);
+    if (cardinality === null) continue;
+    const value = body[field.name];
+    const name = `${path4}${field.name}`;
+    if (field.field_type === "reference") {
+      const ok = cardinality === "one" ? value === null || isUuid(value) : Array.isArray(value) && value.every(isUuid);
+      if (!ok) {
+        errors.push({
+          field: name,
+          message: cardinality === "one" ? `${name} holds one item: send a UUID string or null.` : `${name} holds a list: send an array of UUID strings.`
+        });
+      }
+      continue;
+    }
+    const items = cardinality === "one" ? value === null ? [] : isPlainObject2(value) ? [value] : void 0 : Array.isArray(value) && value.every(isPlainObject2) ? value : void 0;
+    if (items === void 0) {
+      errors.push({
+        field: name,
+        message: cardinality === "one" ? `${name} holds one item: send an object or null.` : `${name} holds a list: send an array of objects.`
+      });
+      continue;
+    }
+    const pType = paragraphTypeOf(field, registry2);
+    if (!pType) continue;
+    items.forEach((item, i) => {
+      const prefix = cardinality === "one" ? `${name}.` : `${name}[${i}].`;
+      errors.push(...checkRelationInput(pType.fields, item, registry2, prefix));
+    });
+  }
+  return errors;
+}
+function paragraphTypeOf(field, registry2) {
+  const comp = field.ui_component;
+  return comp.component === "paragraph-embed" ? registry2.paragraph_types[comp.ref] : void 0;
+}
+function paragraphItemsIn(fields, body, registry2, path4) {
+  const out = [];
+  for (const field of fields) {
+    if (field.field_type !== "paragraph" || !Object.hasOwn(body, field.name)) continue;
+    const pType = paragraphTypeOf(field, registry2);
+    if (!pType) continue;
+    const value = body[field.name];
+    const name = `${path4}${field.name}`;
+    if (relationCardinality(field) === "one") {
+      if (isPlainObject2(value)) out.push({ item: value, fields: pType.fields, prefix: `${name}.` });
+    } else if (Array.isArray(value)) {
+      value.forEach((item, i) => {
+        if (isPlainObject2(item)) out.push({ item, fields: pType.fields, prefix: `${name}[${i}].` });
+      });
+    }
+  }
+  return out;
+}
+function isMissing(value) {
+  if (value === null || value === void 0) return true;
+  if (typeof value === "string" && value.trim() === "") return true;
+  if (Array.isArray(value) && value.length === 0) return true;
+  return false;
+}
+function checkRequiredInParagraphItems(fields, body, registry2, path4 = "") {
+  const errors = [];
+  for (const { item, fields: itemFields, prefix } of paragraphItemsIn(fields, body, registry2, path4)) {
+    for (const f of itemFields) {
+      if (!f.required || f.removed === true || !f.db_column || f.db_column.junction) continue;
+      if (isMissing(item[f.name])) {
+        errors.push({ field: `${prefix}${f.name}`, message: `${prefix}${f.name} is required.` });
+      }
+    }
+    errors.push(...checkRequiredInParagraphItems(itemFields, item, registry2, prefix));
+  }
+  return errors;
+}
 function quoteIdent(name) {
   if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
   return `"${name}"`;
 }
+function collectReferences(fields, body, registry2, path4, out) {
+  for (const f of fields) {
+    if (!Object.hasOwn(body, f.name) || !f.db_column) continue;
+    const table = f.db_column.junction ? f.db_column.junction.right_table : f.db_column.foreign_key?.table;
+    if (!table) continue;
+    const value = body[f.name];
+    const name = `${path4}${f.name}`;
+    if (typeof value === "string") {
+      out.push({ table, id: value, field: name });
+    } else if (Array.isArray(value)) {
+      value.forEach((v, i) => {
+        if (typeof v === "string") out.push({ table, id: v, field: `${name}[${i}]` });
+      });
+    }
+  }
+  for (const { item, fields: itemFields, prefix } of paragraphItemsIn(fields, body, registry2, path4)) {
+    collectReferences(itemFields, item, registry2, prefix, out);
+  }
+}
+async function findMissingReferences(db, fields, body, registry2) {
+  const uses = [];
+  collectReferences(fields, body, registry2, "", uses);
+  if (uses.length === 0) return [];
+  const lookups = [...new Set(uses.map((u) => u.table))].map(async (table) => {
+    const ids = [...new Set(uses.filter((u) => u.table === table && isUuid(u.id)).map((u) => u.id.toLowerCase()))];
+    if (ids.length === 0) return [table, /* @__PURE__ */ new Set()];
+    const result = await db.execute(
+      sql`SELECT id FROM ${sql.raw(quoteIdent(table))} WHERE id IN (${sql.join(ids.map((id) => sql`${id}`), sql`, `)})`
+    );
+    return [table, new Set(result.rows.map((r) => String(r.id).toLowerCase()))];
+  });
+  const found = new Map(await Promise.all(lookups));
+  return uses.filter((u) => !found.get(u.table).has(u.id.toLowerCase())).map((u) => ({ field: u.field, message: `${u.field} refers to an item that does not exist.` }));
+}
+function quoteIdent2(name) {
+  if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
+  return `"${name}"`;
+}
 function paragraphMediaFieldNames(pType) {
   return new Set(
     pType.fields.filter((f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file").map((f) => f.name)
@@ -26800,8 +26921,8 @@ function paragraphMediaFieldNames(pType) {
 async function fetchParagraphMediaIds(db, pType, itemId, fieldName) {
   const mediaColumns = pType.fields.filter((f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file").map((f) => f.db_column.column_name);
   if (mediaColumns.length === 0) return [];
-  const tbl = sql.raw(quoteIdent(pType.db.table_name));
-  const cols = sql.join(mediaColumns.map((c) => sql.raw(quoteIdent(c))), sql`, `);
+  const tbl = sql.raw(quoteIdent2(pType.db.table_name));
+  const cols = sql.join(mediaColumns.map((c) => sql.raw(quoteIdent2(c))), sql`, `);
   const result = await db.execute(
     sql`SELECT ${cols} FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`
   );
@@ -26819,20 +26940,37 @@ function nestedParagraphFields(pType, registry2) {
   const out = [];
   for (const f of pType.fields) {
     if (f.db_column !== null) continue;
-    const comp = f.ui_component;
-    if (comp.component !== "paragraph-embed" || !comp.ref) continue;
-    const nType = registry2.paragraph_types[comp.ref];
+    const nType = paragraphTypeOf(f, registry2);
     if (nType) out.push({ fieldName: f.name, nType, field: f });
   }
   return out;
 }
 async function fetchParagraphRowIds(db, pType, itemId, fieldName) {
-  const tbl = sql.raw(quoteIdent(pType.db.table_name));
+  const tbl = sql.raw(quoteIdent2(pType.db.table_name));
   const result = await db.execute(
     sql`SELECT id FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`
   );
   return result.rows.map((r) => r["id"]).filter((id) => typeof id === "string");
 }
+async function ownParagraphRowIds(db, registry2, fields, itemId) {
+  const ids = [];
+  for (const f of fields) {
+    const pType = paragraphTypeOf(f, registry2);
+    if (!pType) continue;
+    const rowIds = await fetchParagraphRowIds(db, pType, itemId, f.name);
+    ids.push(...rowIds);
+    if (rowIds.length === 0) continue;
+    for (const n of nestedParagraphFields(pType, registry2)) {
+      const result = await db.execute(
+        sql`SELECT id FROM ${sql.raw(quoteIdent2(n.nType.db.table_name))} WHERE parent_id = ANY(${sql.param(rowIds)}::uuid[]) AND parent_field = ${n.fieldName}`
+      );
+      for (const r of result.rows) {
+        if (typeof r["id"] === "string") ids.push(r["id"]);
+      }
+    }
+  }
+  return ids;
+}
 async function persistParagraphField(db, itemId, parentType, fieldName, pType, items, registry2) {
   const removed = await fetchParagraphMediaIds(db, pType, itemId, fieldName);
   const nested = nestedParagraphFields(pType, registry2);
@@ -26845,7 +26983,7 @@ async function persistParagraphField(db, itemId, parentType, fieldName, pType, i
       }
     }
   }
-  const tbl = sql.raw(quoteIdent(pType.db.table_name));
+  const tbl = sql.raw(quoteIdent2(pType.db.table_name));
   await db.execute(sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
   const mediaFieldNames = paragraphMediaFieldNames(pType);
   const added = [];
@@ -26865,7 +27003,7 @@ async function persistParagraphField(db, itemId, parentType, fieldName, pType, i
       if (!pf.db_column || pf.db_column.junction) continue;
       data[pf.db_column.column_name] = pItem[pf.name] ?? null;
     }
-    const cols = sql.join(Object.keys(data).map((k) => sql.raw(quoteIdent(k))), sql`, `);
+    const cols = sql.join(Object.keys(data).map((k) => sql.raw(quoteIdent2(k))), sql`, `);
     const vals = sql.join(Object.values(data).map((v) => sql`${v}`), sql`, `);
     await db.execute(sql`INSERT INTO ${tbl} (${cols}) VALUES (${vals})`);
     for (const name of mediaFieldNames) {
@@ -26901,14 +27039,14 @@ async function deleteParagraphField(db, itemId, fieldName, pType, registry2) {
       }
     }
   }
-  const tbl = sql.raw(quoteIdent(pType.db.table_name));
+  const tbl = sql.raw(quoteIdent2(pType.db.table_name));
   await db.execute(sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
   return { added: [], removed };
 }
 async function persistJunctionField(db, itemId, junction, relatedIds) {
-  const tbl = sql.raw(quoteIdent(junction.table_name));
-  const left = sql.raw(quoteIdent(junction.left_column));
-  const right = sql.raw(quoteIdent(junction.right_column));
+  const tbl = sql.raw(quoteIdent2(junction.table_name));
+  const left = sql.raw(quoteIdent2(junction.left_column));
+  const right = sql.raw(quoteIdent2(junction.right_column));
   const seen = /* @__PURE__ */ new Set();
   const ids = relatedIds.filter((id) => {
     const key = id.toLowerCase();
@@ -26925,13 +27063,22 @@ async function persistJunctionField(db, itemId, junction, relatedIds) {
     sql`, `
   );
   await db.execute(
-    junction.order_column ? sql`INSERT INTO ${tbl} (${left}, ${right}, "order") VALUES ${rows}` : sql`INSERT INTO ${tbl} (${left}, ${right}) VALUES ${rows}`
+    junction.order_column ? sql`INSERT INTO ${tbl} (${left}, ${right}, "order") VALUES ${rows} ON CONFLICT DO NOTHING` : sql`INSERT INTO ${tbl} (${left}, ${right}) VALUES ${rows} ON CONFLICT DO NOTHING`
   );
 }
 function junctionOrderBy(junction) {
-  const right = sql.raw(quoteIdent(junction.right_column));
+  const right = sql.raw(quoteIdent2(junction.right_column));
   return junction.order_column ? sql` ORDER BY "order" ASC, ${right} ASC` : sql` ORDER BY ${right} ASC`;
 }
+function firstOfEach(items, key) {
+  const seen = /* @__PURE__ */ new Set();
+  return items.filter((item) => {
+    const k = key(item);
+    if (seen.has(k)) return false;
+    seen.add(k);
+    return true;
+  });
+}
 function oneOrMany(cardinality, list) {
   return cardinality === "one" ? list[0] ?? null : list;
 }
@@ -26999,7 +27146,7 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
     const parentIds = batch.map((r) => r["id"]);
     const inList = sql.join(parentIds.map((id) => sql`${id}`), sql`, `);
     const result = await db.execute(
-      sql`SELECT * FROM ${sql.raw(quoteIdent(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC`
+      sql`SELECT * FROM ${sql.raw(quoteIdent2(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC, id ASC`
     );
     const byParent = groupBy(result.rows, "parent_id");
     for (const row of batch) {
@@ -27019,7 +27166,7 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
       const inList = sql.join(uncached.map((id) => sql`${id}`), sql`, `);
       const publishedCond = publishedOnly ? sql` AND published = true` : sql``;
       const result = await db.execute(
-        sql`SELECT * FROM ${sql.raw(quoteIdent(rel.table))} WHERE id IN (${inList})${publishedCond}`
+        sql`SELECT * FROM ${sql.raw(quoteIdent2(rel.table))} WHERE id IN (${inList})${publishedCond}`
       );
       for (const item of result.rows) {
         cache.set(`${rel.table}:${item["id"]}`, item);
@@ -27033,7 +27180,7 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
     const parentIds = batch.map((r) => r["id"]);
     const inList = sql.join(parentIds.map((id) => sql`${id}`), sql`, `);
     const junctionResult = await db.execute(
-      sql`SELECT * FROM ${sql.raw(quoteIdent(rel.junction_table))} WHERE ${sql.raw(quoteIdent(rel.left_column))} IN (${inList})${junctionOrderBy(rel)}`
+      sql`SELECT * FROM ${sql.raw(quoteIdent2(rel.junction_table))} WHERE ${sql.raw(quoteIdent2(rel.left_column))} IN (${inList})${junctionOrderBy(rel)}`
     );
     const jRows = junctionResult.rows;
     const rightIds = [...new Set(jRows.map((r) => r[rel.right_column]))];
@@ -27042,7 +27189,7 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
       const rightInList = sql.join(uncached.map((id) => sql`${id}`), sql`, `);
       const publishedCond = publishedOnly ? sql` AND published = true` : sql``;
       const entitiesResult = await db.execute(
-        sql`SELECT * FROM ${sql.raw(quoteIdent(rel.table))} WHERE id IN (${rightInList})${publishedCond}`
+        sql`SELECT * FROM ${sql.raw(quoteIdent2(rel.table))} WHERE id IN (${rightInList})${publishedCond}`
       );
       for (const item of entitiesResult.rows) {
         cache.set(`${rel.table}:${item["id"]}`, item);
@@ -27050,7 +27197,7 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
     }
     const byLeft = groupBy(jRows, rel.left_column);
     for (const row of batch) {
-      const jEntries = byLeft[row["id"]] ?? [];
+      const jEntries = firstOfEach(byLeft[row["id"]] ?? [], (jr) => jr[rel.right_column]);
       row[fieldName] = jEntries.map((jr) => cache.get(`${rel.table}:${jr[rel.right_column]}`)).filter(Boolean);
     }
   } else if (rel.type === "media") {
@@ -27082,7 +27229,7 @@ async function resolveRelationBareIds(db, rows, fieldName, rel) {
     const parentIds = rows.map((r) => r["id"]);
     const inList = sql.join(parentIds.map((id) => sql`${id}`), sql`, `);
     const result = await db.execute(
-      sql`SELECT id, parent_id FROM ${sql.raw(quoteIdent(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC`
+      sql`SELECT id, parent_id FROM ${sql.raw(quoteIdent2(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC, id ASC`
     );
     const byParent = groupBy(result.rows, "parent_id");
     for (const row of rows) {
@@ -27092,11 +27239,11 @@ async function resolveRelationBareIds(db, rows, fieldName, rel) {
     const parentIds = rows.map((r) => r["id"]);
     const inList = sql.join(parentIds.map((id) => sql`${id}`), sql`, `);
     const result = await db.execute(
-      sql`SELECT ${sql.raw(quoteIdent(rel.left_column))} AS left_id, ${sql.raw(quoteIdent(rel.right_column))} AS right_id FROM ${sql.raw(quoteIdent(rel.junction_table))} WHERE ${sql.raw(quoteIdent(rel.left_column))} IN (${inList})${junctionOrderBy(rel)}`
+      sql`SELECT ${sql.raw(quoteIdent2(rel.left_column))} AS left_id, ${sql.raw(quoteIdent2(rel.right_column))} AS right_id FROM ${sql.raw(quoteIdent2(rel.junction_table))} WHERE ${sql.raw(quoteIdent2(rel.left_column))} IN (${inList})${junctionOrderBy(rel)}`
     );
     const byLeft = groupBy(result.rows, "left_id");
     for (const row of rows) {
-      row[fieldName] = (byLeft[row["id"]] ?? []).map((r) => r["right_id"]);
+      row[fieldName] = firstOfEach(byLeft[row["id"]] ?? [], (r) => r["right_id"]).map((r) => r["right_id"]);
     }
   }
 }
@@ -27149,6 +27296,14 @@ export {
   isColumnBacked2 as isColumnBacked,
   createFieldKeyMap,
   createFieldKeyMapFromProjection,
+  isPlainObject2 as isPlainObject,
+  checkRelationInput,
+  paragraphTypeOf,
+  paragraphItemsIn,
+  isMissing,
+  checkRequiredInParagraphItems,
+  findMissingReferences,
+  ownParagraphRowIds,
   persistParagraphField,
   deleteParagraphField,
   persistJunctionField,

package/dist/{handler-MFF32JB4-NUVEJZXC.js → handler-5OTVPIAF-JVSJWO2S.js}

@@ -12,7 +12,7 @@ import {
   isColumnBacked,
   relationCardinality,
   resolveRelationField
-} from "./chunk-N75KN2YC.js";
+} from "./chunk-EVB2E4A5.js";
 
 // ../../node_modules/.pnpm/@whatwg-node+fetch@0.10.13/node_modules/@whatwg-node/fetch/dist/shouldSkipPonyfill.js
 var require_shouldSkipPonyfill = __commonJS({
@@ -10787,10 +10787,10 @@ var require_parser = __commonJS({
   }
 });
 
-// ../api/dist/handler-MFF32JB4.mjs
+// ../api/dist/handler-5OTVPIAF.mjs
 init_esm_shims();
 
-// ../api/dist/chunk-ITOSMGDT.mjs
+// ../api/dist/chunk-DHOVO42E.mjs
 init_esm_shims();
 
 // ../../node_modules/.pnpm/graphql-yoga@5.21.2_graphql@16.14.2/node_modules/graphql-yoga/esm/index.js
@@ -30123,7 +30123,7 @@ function createYoga(options) {
   });
 }
 
-// ../api/dist/chunk-ITOSMGDT.mjs
+// ../api/dist/chunk-DHOVO42E.mjs
 var import_dataloader = __toESM(require_dataloader(), 1);
 
 // ../../node_modules/.pnpm/@escape.tech+graphql-armor@3.2.0_@envelop+core@5.5.1_@escape.tech+graphql-armor-types@0.7.0/node_modules/@escape.tech/graphql-armor/dist/graphql-armor.esm.js
@@ -30881,7 +30881,7 @@ var EnvelopArmor = class {
   }
 };
 
-// ../api/dist/chunk-ITOSMGDT.mjs
+// ../api/dist/chunk-DHOVO42E.mjs
 var DateTimeScalar = new GraphQLScalarType({
   name: "DateTime",
   description: "ISO-8601 date-time string",