@datawheel/bespoke 0.3.13 → 0.3.15-noauth.0

package/dist/server.js

@@ -1,5 +1,3 @@
-import { initAuth0 } from '@auth0/nextjs-auth0';
-import auth0 from 'auth0';
 import * as pg from 'pg';
 import { Sequelize, Error as Error$1, fn, col, Op, DataTypes, QueryTypes, Model } from 'sequelize';
 import yn2 from 'yn';
@@ -43,316 +41,6 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
-var getAuth_default = initAuth0({
-  secret: process.env.AUTH0_SECRET,
-  issuerBaseURL: process.env.AUTH0_ISSUER_BASE_URL,
-  baseURL: process.env.REPORTS_BASE_URL || process.env.AUTH0_BASE_URL,
-  clientID: process.env.AUTH0_CLIENT_ID,
-  clientSecret: process.env.AUTH0_CLIENT_SECRET
-});
-
-// api/auth/getSession.ts
-var getSession_default = getAuth_default.getSession;
-
-// api/auth/handleAuth.ts
-var afterRefetch = async (req, res, session) => {
-  return session;
-};
-var fetchMe = async (req, res, refetch) => {
-  return await getAuth_default.handleProfile(req, res, { afterRefetch, refetch });
-};
-var handleAuth_default = getAuth_default.handleAuth({
-  // Override "/me" url which is grabbed by useUser
-  profile: async (req, res) => {
-    try {
-      await fetchMe(req, res, false);
-    } catch (error) {
-      console.error(error);
-    }
-  }
-});
-
-// api/lib.ts
-var BackendError = class extends Error {
-  constructor(code, message) {
-    super(message);
-    this.code = code;
-  }
-  toJSON() {
-    return failureResult(this);
-  }
-  static is(obj) {
-    return Object.prototype.hasOwnProperty.call(obj, "code") && typeof obj.code === "number";
-  }
-};
-function successResult(result) {
-  return { ok: true, status: 200, data: result };
-}
-function failureResult(err) {
-  return { ok: false, status: BackendError.is(err) ? err.code : 500, error: err.message };
-}
-function resultWrapper(method) {
-  return (param) => method(param).then(successResult, failureResult);
-}
-function pickMethod(api, operation, entity) {
-  const name = `${operation}${capitalize(entity)}`;
-  return api[name];
-}
-function capitalize(str) {
-  return str[0].toUpperCase() + str.slice(1);
-}
-
-// types/auth.ts
-var CMS_ROLES = {
-  ADMIN: "Admin",
-  EDITOR: "Editor",
-  WRITER: "Writer"
-};
-var CMS_ROLES_TYPES = {
-  APP: "App",
-  USER: "User"
-};
-var addRoleTypes = (roles) => {
-  const systemRoles = Object.values(CMS_ROLES);
-  return roles ? roles.map((r) => {
-    return {
-      ...r,
-      type: systemRoles.includes(r.name) ? CMS_ROLES_TYPES.APP : CMS_ROLES_TYPES.USER
-    };
-  }) : [];
-};
-
-// api/db/users/auth0.ts
-var auth0ConfigObject = {
-  domain: new URL(process.env.AUTH0_ISSUER_BASE_URL || "").host,
-  clientId: process.env.AUTH0_CLIENT_ID,
-  clientSecret: process.env.AUTH0_CLIENT_SECRET
-};
-var managementClient = new auth0.ManagementClient(auth0ConfigObject);
-function dbSearchRole() {
-  return async () => {
-    try {
-      const roles = await managementClient.roles.getAll({
-        include_totals: true,
-        per_page: 100
-      });
-      return {
-        roles: addRoleTypes(roles.roles)
-      };
-    } catch (err) {
-      console.error("AuthZeroError", err);
-      throw new BackendError(err.response?.status || 500, err.message);
-    }
-  };
-}
-function dbSearchUser() {
-  return async (filters) => {
-    try {
-      let users;
-      if (filters) {
-        const pagination = {
-          include_totals: true,
-          per_page: 10,
-          page: filters.page || 0
-        };
-        if (filters.role_id && filters.role_id !== "") {
-          const paramsByRole = {
-            ...pagination,
-            id: filters.role_id
-          };
-          users = await managementClient.roles.getUsers(paramsByRole);
-        } else {
-          const paramsSearch = {
-            ...pagination,
-            q: filters.query
-          };
-          users = await managementClient.users.getAll(paramsSearch);
-        }
-      }
-      return users;
-    } catch (err) {
-      console.error("AuthZeroError", err);
-      throw new BackendError(err.response?.status || 500, err.message);
-    }
-  };
-}
-function dbReadUser() {
-  return async (userId) => {
-    try {
-      if (userId) {
-        const userData = await Promise.all([
-          managementClient.users.get({ id: userId }),
-          managementClient.users.getRoles({ id: userId })
-        ]);
-        return {
-          ...userData[0],
-          roles: userData[1]
-        };
-      } else {
-        throw new BackendError(404, "User ID required");
-      }
-    } catch (err) {
-      console.error("AuthZeroError", err);
-      throw new BackendError(err.response?.status || 500, err.message);
-    }
-  };
-}
-function dbUpdateUser() {
-  return async (user) => {
-    try {
-      if (user.user_id) {
-        if (user.app_metadata) {
-          await updateUserMetadata(user.user_id, user.app_metadata);
-        }
-        if (user.roles) {
-          const currentRoles = await managementClient.users.getRoles({ id: user.user_id });
-          const oldRoles = currentRoles.map((r) => r.id);
-          const newRoles = user.roles.map((r) => r.id);
-          const rolesToAssign = newRoles.filter((role) => !oldRoles.includes(role));
-          const rolesToDelete = oldRoles.filter((role) => !newRoles.includes(role));
-          if (rolesToAssign.length > 0) {
-            await managementClient.users.assignRoles({ id: user.user_id }, { roles: rolesToAssign });
-          }
-          if (rolesToDelete.length > 0) {
-            await managementClient.users.removeRoles({ id: user.user_id }, { roles: rolesToDelete });
-          }
-        }
-        return "User updated!";
-      } else {
-        throw new BackendError(404, "user_id is required");
-      }
-    } catch (err) {
-      console.error("AuthZeroError", err);
-      throw new BackendError(err.response?.status || 500, err.message);
-    }
-  };
-}
-function dbAddNewReportToCurrentUser() {
-  return async (params) => {
-    try {
-      return "NOT USED SERVICE";
-    } catch (err) {
-      console.error("AuthZeroError", err);
-      throw new BackendError(err.response?.status || 500, err.message);
-    }
-  };
-}
-async function updateUserMetadata(userId, newMetadata) {
-  return await managementClient.users.updateAppMetadata({ id: userId }, newMetadata);
-}
-async function searchUsersByMetadata(key, value) {
-  try {
-    const users = await managementClient.getUsers({
-      search_engine: "v3",
-      q: `app_metadata.${key}:"${value}"`
-    });
-    for (let index = 0; index < users.length; index++) {
-      const u = users[index];
-      u.bespoke_app_metadata = u.app_metadata || {};
-      delete u.app_metadata;
-      u.bespoke_roles = (await managementClient.users.getRoles({ id: u.user_id })).map((r) => r.name);
-    }
-    return users;
-  } catch (error) {
-    console.error(error);
-  }
-}
-
-// api/auth/updateCurrentUserMetadata.tsx
-var updateCurrentUserMetadata = (req, res, newMetadata) => {
-  return new Promise((resolve, reject) => {
-    const updateMetadata = async () => {
-      try {
-        const session = await getAuth_default.getSession(req, res);
-        if (!session || !session.user) {
-          throw new Error("not_authenticated");
-        } else {
-          const { user } = session;
-          const oldMetadata = session.user.bespoke_app_metadata || {};
-          const latestMetadata = {
-            ...oldMetadata,
-            ...newMetadata
-          };
-          await updateUserMetadata(session.user.sub, latestMetadata);
-          await getAuth_default.updateSession(req, res, {
-            ...session,
-            user: {
-              ...user,
-              bespoke_app_metadata: latestMetadata
-            }
-          });
-          resolve({
-            error: "",
-            description: `Settings updated for user ${session.user.email}`
-          });
-        }
-      } catch (error) {
-        reject({
-          error: error.message,
-          description: "The user does not have an active session or is not authenticated"
-        });
-      }
-    };
-    updateMetadata();
-  });
-};
-var updateCurrentUserMetadata_default = updateCurrentUserMetadata;
-
-// libs/js/arrayUtils.ts
-var keyDiver = (obj, str) => !str ? obj : typeof str === "string" ? str.split(".").reduce((o, i) => o[i], obj) : obj;
-function arrContainsAnyItem(arr1, arr2) {
-  return arr1.some((item) => arr2.includes(item));
-}
-
-// api/auth/withApiRoleAuthRequired.tsx
-var withApiRoleAuthRequired = (apiRoute, allowedRoles) => {
-  return async function(req, res) {
-    const session = await getAuth_default.getSession(req, res);
-    if (!session || !session.user) {
-      res.status(401).json({
-        error: "not_authenticated",
-        description: "The user does not have an active session or is not authenticated"
-      });
-      return;
-    }
-    const usersRoles = session.user.bespoke_roles;
-    if (allowedRoles.length > 0 && !arrContainsAnyItem(usersRoles, allowedRoles)) {
-      res.status(402).json({
-        error: "unauthorize",
-        description: "The user requires some specific roles"
-      });
-      return;
-    }
-    await apiRoute(req, res);
-  };
-};
-var withApiRoleAuthRequired_default = withApiRoleAuthRequired;
-
-// api/auth/searchUsersByMetadata.tsx
-var searchUsersByMetadata2 = (key, value) => {
-  return new Promise((resolve, reject) => {
-    const searchUsers = async () => {
-      try {
-        if (key && value && key !== "" && value !== "") {
-          const users = await searchUsersByMetadata(key, value);
-          resolve(users);
-        } else {
-          reject({
-            error: "empty_params",
-            description: "key or value params are empty"
-          });
-        }
-      } catch (error) {
-        reject({
-          error: error.message,
-          description: "Error "
-        });
-      }
-    };
-    searchUsers();
-  });
-};
-var searchUsersByMetadata_default = searchUsersByMetadata2;
 var getLogging_default = (env = process.env) => yn2(env.REPORTS_LOGGING);
 var BlockModel = class extends Model {
   getContent(locale) {
@@ -1334,15 +1022,48 @@ var getDB = () => {
   return global.sequelize;
 };
 
+// api/lib.ts
+var BackendError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+  }
+  toJSON() {
+    return failureResult(this);
+  }
+  static is(obj) {
+    return Object.prototype.hasOwnProperty.call(obj, "code") && typeof obj.code === "number";
+  }
+};
+function successResult(result) {
+  return { ok: true, status: 200, data: result };
+}
+function failureResult(err) {
+  return { ok: false, status: BackendError.is(err) ? err.code : 500, error: err.message };
+}
+function resultWrapper(method) {
+  return (param) => method(param).then(successResult, failureResult);
+}
+function pickMethod(api, operation, entity) {
+  const name = `${operation}${capitalize(entity)}`;
+  return api[name];
+}
+function capitalize(str) {
+  return str[0].toUpperCase() + str.slice(1);
+}
+
 // libs/configs/getLocales.ts
 var getLocales_default = () => {
-  const localeDefault11 = process.env.NEXT_PUBLIC_REPORTS_LOCALE_DEFAULT || "en";
-  const locales9 = process.env.NEXT_PUBLIC_REPORTS_LOCALES?.split(",") || [localeDefault11];
-  if (!locales9.includes(localeDefault11))
-    locales9.push(localeDefault11);
-  return { localeDefault: localeDefault11, locales: locales9 };
+  const localeDefault10 = process.env.NEXT_PUBLIC_REPORTS_LOCALE_DEFAULT || "en";
+  const locales9 = process.env.NEXT_PUBLIC_REPORTS_LOCALES?.split(",") || [localeDefault10];
+  if (!locales9.includes(localeDefault10))
+    locales9.push(localeDefault10);
+  return { localeDefault: localeDefault10, locales: locales9 };
 };
 
+// libs/js/arrayUtils.ts
+var keyDiver = (obj, str) => !str ? obj : typeof str === "string" ? str.split(".").reduce((o, i) => o[i], obj) : obj;
+
 // libs/js/stripHTML.ts
 function stripHTML(n) {
   const entities = {
@@ -2727,7 +2448,7 @@ function endpointMemberFactory(operations) {
     endpoint("POST", "update/member", (req) => {
       const { body } = req;
       return updateMember(body);
-    }, [CMS_ROLES.EDITOR]),
+    }, []),
     /*
      *  Get image file itself
      *  Example queries:
@@ -3250,96 +2971,6 @@ function dbRevalidateUrlFactory() {
     }
   };
 }
-
-// libs/blocks/crawlDown.ts
-function crawlDown(rootBlockIds, blockList) {
-  let consumersBlocksIds = [];
-  const crawlDownIndividual = (privateBlockId) => {
-    const downIds = Object.values(blockList).reduce((acc, block) => {
-      if ("inputs" in block && block.inputs.includes(privateBlockId)) {
-        acc.push(block.id);
-        acc = acc.concat(crawlDownIndividual(block.id));
-      }
-      return acc;
-    }, []);
-    return downIds;
-  };
-  rootBlockIds.forEach((rootBlockId) => {
-    consumersBlocksIds = consumersBlocksIds.concat(crawlDownIndividual(rootBlockId));
-  });
-  const uniqueConsumerBlocksIds = [];
-  consumersBlocksIds.forEach((id) => {
-    if (!uniqueConsumerBlocksIds.includes(id)) {
-      uniqueConsumerBlocksIds.push(id);
-    }
-  });
-  return uniqueConsumerBlocksIds;
-}
-
-// api/db/readPrivateBlocks.ts
-function accessContainsRole(arr1, arr2) {
-  return arr1.some((item) => arr2.includes(`role.${item}`));
-}
-function dbReadPrivateBlocksFactory(db) {
-  const { report: Report } = db;
-  return dbReadPrivateBlocks;
-  async function dbReadPrivateBlocks(params) {
-    const allBlocks = await Report.findByPk(
-      params.report_id,
-      {
-        include: {
-          association: "sections",
-          separate: true,
-          include: [
-            {
-              association: "blocks",
-              separate: true,
-              include: [
-                {
-                  association: "contentByLocale",
-                  separate: true,
-                  where: {
-                    locale: params.locale
-                  }
-                },
-                {
-                  association: "inputs"
-                },
-                {
-                  association: "consumers"
-                }
-              ]
-            }
-          ]
-        }
-      }
-    ).then((report) => {
-      if (report && report.sections && Array.isArray(report.sections)) {
-        return report.sections.reduce((acc, section) => {
-          const nestedBlocks = section.blocks.map((entity) => {
-            const normalized = entity.toJSON();
-            normalized.inputs = normalized.inputs.map((b) => b.id);
-            normalized.consumers = normalized.consumers.map((b) => b.id);
-            return normalized;
-          });
-          return acc.concat(nestedBlocks);
-        }, []);
-      } else {
-        return [];
-      }
-    });
-    let privateBlockIds = allBlocks.filter((block) => {
-      return block.settings && block.settings.access && Array.isArray(block.settings.access) && Array.isArray(params.roles) && (block.settings.access.includes("private") || accessContainsRole(params.roles, block.settings.access));
-    }).map((block) => block.id);
-    privateBlockIds = privateBlockIds.concat(crawlDown(privateBlockIds, allBlocks));
-    return {
-      params: {
-        ...params
-      },
-      data: allBlocks.filter((block) => privateBlockIds.includes(block.id))
-    };
-  }
-}
 var iconsList = Object.keys(allIcons).filter((iconName) => iconName.indexOf("Icon") === 0);
 async function listTablerProvider() {
   return {
@@ -3400,14 +3031,8 @@ function apiFactory(dbModels) {
     imageUnsplashSave: dbImageSaveFactory(dbModels, "unsplash"),
     imageUploadSave: dbImageSaveFactory(dbModels, "upload"),
     urlProxy: dbUrlProxyFactory(),
-    searchRole: resultWrapper(dbSearchRole()),
-    searchUser: resultWrapper(dbSearchUser()),
-    readUser: resultWrapper(dbReadUser()),
-    updateUser: resultWrapper(dbUpdateUser()),
-    addNewReportToCurrentUser: resultWrapper(dbAddNewReportToCurrentUser()),
     revalidateReport: resultWrapper(dbRevalidateReportFactory(dbModels)),
     revalidateUrl: resultWrapper(dbRevalidateUrlFactory()),
-    readPrivateBlocks: resultWrapper(dbReadPrivateBlocksFactory(dbModels)),
     listTablerIcons: dbListIconsFactory("tabler"),
     readTablerIcon: dbReadIconFactory("tabler")
   };
@@ -3444,7 +3069,7 @@ function endpointCRUDFactory(api, entity) {
     endpoint("POST", `create/${entity}`, (req) => {
       const { body } = req;
       return crudCreate(body);
-    }, [CMS_ROLES.EDITOR]),
+    }, []),
     endpoint("GET", `read/${entity}`, (req) => {
       const params = req.query;
       const id = normalizeList(params.id).map(parseFiniteNumber);
@@ -3453,11 +3078,11 @@ function endpointCRUDFactory(api, entity) {
     endpoint("POST", `update/${entity}`, (req) => {
       const { body } = req;
       return crudUpdate(body);
-    }, [CMS_ROLES.EDITOR]),
+    }, []),
     endpoint("DELETE", `delete/${entity}`, (req) => {
       const id = parseFiniteNumber(req.query.id);
       return crudDelete(id);
-    }, [CMS_ROLES.EDITOR])
+    }, [])
   ];
 }
 function endpointVariantCRUDFactory(api) {
@@ -3468,7 +3093,7 @@ function endpointVariantCRUDFactory(api) {
       const params = req.query;
       const dimension = parseFiniteNumber(params.dimension);
       return validateVariantSlug({ dimension, slug: slugify_default(params.slug) });
-    }, [CMS_ROLES.EDITOR])
+    }, [])
   ];
 }
 
@@ -3485,7 +3110,7 @@ function endpointImageSaveFactory(operations, provider) {
       throw new BackendError(400, "Missing 'image_id' parameter.");
     }
     return saveMethod(params);
-  }, [CMS_ROLES.EDITOR]);
+  }, []);
 }
 
 // api/endpoints/image/imageSearch.ts
@@ -3498,7 +3123,7 @@ function endpointImageSearchFactory(operations, provider) {
       throw new BackendError(400, "Empty 'prompt' param.");
     }
     return searchMethod({ prompt });
-  }, [CMS_ROLES.EDITOR]);
+  }, []);
 }
 
 // api/endpoints/readMetadata.ts
@@ -3510,7 +3135,7 @@ function endpointReadMetadataFactory(operations) {
 // api/endpoints/regenerateSearch.ts
 function endpointRegenerateSearchFactory(operations) {
   const { regenerateSearch } = operations;
-  return endpoint("POST", "search/regenerate", () => regenerateSearch(void 0), [CMS_ROLES.EDITOR]);
+  return endpoint("POST", "search/regenerate", () => regenerateSearch(void 0), []);
 }
 
 // api/endpoints/searchReport.ts
@@ -3603,7 +3228,7 @@ function endpointRevalidateReportFactory(operations) {
       console.log(err);
       throw new BackendError(500, "Error revalidating");
     }
-  }, [CMS_ROLES.EDITOR]);
+  }, []);
 }
 
 // api/endpoints/revalidateUrl.ts
@@ -3627,122 +3252,16 @@ function endpointRevalidateUrlFactory() {
         throw new BackendError(500, "Error revalidating");
       }
     }
-  }, [CMS_ROLES.ADMIN, CMS_ROLES.EDITOR, CMS_ROLES.WRITER]);
-}
-
-// api/endpoints/readPrivateBlocks.ts
-var { localeDefault: localeDefault5 } = getLocales_default();
-function endpointReadPrivateBlocksFactory(operations) {
-  const { readPrivateBlocks: readPrivateBlocks2 } = operations;
-  return endpoint("POST", "read/blocks/private", (req, res, session) => {
-    const params = {
-      report_id: parseInt(req.body.report_id, 10),
-      locale: req.body.locale || localeDefault5,
-      roles: session && session.user ? session.user.bespoke_roles : []
-    };
-    return readPrivateBlocks2(params);
   }, []);
 }
 
-// api/endpoints/users/auth0.ts
-function endpointGetRolesFactory(operations) {
-  const { searchRole: searchRole2 } = operations;
-  return endpoint("GET", "auth/search/roles", () => {
-    return searchRole2("");
-  }, [CMS_ROLES.EDITOR]);
-}
-function endpointGetUsersFactory(operations) {
-  const { searchUser: searchUser2 } = operations;
-  return endpoint("GET", "auth/search/users", (req) => {
-    return searchUser2({
-      query: req.query.query,
-      role_id: req.query.role_id,
-      page: req.query.page || 0
-    });
-  }, [CMS_ROLES.ADMIN]);
-}
-function endpointGetUserDataFactory(operations) {
-  const { readUser: readUser2 } = operations;
-  return endpoint("GET", "auth/read/user", (req) => {
-    return readUser2(req.query.user_id);
-  }, [CMS_ROLES.ADMIN]);
-}
-function endpointUpdateUserDataFactory(operations) {
-  const { updateUser: updateUser2, readUser: readUser2 } = operations;
-  return endpoint("POST", "auth/update/user", async (req, res, session) => {
-    const userData = req.body;
-    const response = await updateUser2(userData);
-    if (session && session.user && userData.user_id === session.user.sub) {
-      const latestUserData = await readUser2(session.user.sub);
-      if (latestUserData.ok) {
-        await getAuth_default.updateSession(req, res, {
-          ...session,
-          user: {
-            ...session.user,
-            bespoke_app_metadata: latestUserData.data.app_metadata,
-            bespoke_roles: latestUserData.data.roles.map((r) => r.name)
-          }
-        });
-      }
-    }
-    return response;
-  }, [CMS_ROLES.ADMIN]);
-}
-function endpointAddNewReportToCurrentUserFactory(operations) {
-  const { updateUser: updateUser2, readUser: readUser2 } = operations;
-  return endpoint("POST", "auth/update/me", async (req, res, session) => {
-    const reportId = req.body.report_id;
-    try {
-      if (session && session.user && reportId) {
-        const updateObject = {
-          user_id: session.user.sub,
-          app_metadata: {}
-        };
-        const { user } = session;
-        if (user.bespoke_app_metadata && user.bespoke_app_metadata.reports && Array.isArray(user.bespoke_app_metadata.reports)) {
-          updateObject.app_metadata = {
-            ...user.bespoke_app_metadata
-          };
-        } else {
-          updateObject.app_metadata = { reports: [] };
-        }
-        updateObject.app_metadata.reports.push({
-          reportId
-        });
-        await updateUser2(updateObject);
-        const latestUserData = await readUser2(updateObject.user_id);
-        if (latestUserData.ok) {
-          await getAuth_default.updateSession(req, res, {
-            ...session,
-            user: {
-              ...user,
-              bespoke_app_metadata: latestUserData.data.app_metadata
-            }
-          });
-        }
-      }
-      return {
-        ok: true,
-        status: 200,
-        data: "User & session updated"
-      };
-    } catch (error) {
-      return {
-        ok: false,
-        status: 500,
-        error: error.message
-      };
-    }
-  }, [CMS_ROLES.EDITOR]);
-}
-
 // api/endpoints/icon/listIcons.ts
 function endpointListIconsFactory(operations, provider) {
   const listMethodKey = `list${capitalize(provider)}Icons`;
   const listMethod = operations[listMethodKey];
   return endpoint("GET", `list/icons/${provider}`, async () => {
     return listMethod({});
-  }, [CMS_ROLES.EDITOR]);
+  }, []);
 }
 
 // api/endpoints/icon/readIcon.ts
@@ -3816,14 +3335,8 @@ function getEndpointMap(db) {
     endpointImageSearchFactory(api, "local"),
     endpointImageSearchFactory(api, "unsplash"),
     endpointUrlProxyFactory(api),
-    endpointGetRolesFactory(api),
-    endpointGetUsersFactory(api),
-    endpointGetUserDataFactory(api),
-    endpointUpdateUserDataFactory(api),
-    endpointAddNewReportToCurrentUserFactory(api),
     endpointRevalidateReportFactory(api),
     endpointRevalidateUrlFactory(),
-    endpointReadPrivateBlocksFactory(api),
     endpointListIconsFactory(api, "tabler"),
     endpointReadIconFactory(api, "tabler"),
     endpointReportVariables()
@@ -3844,21 +3357,11 @@ async function endpointNextJsHandlerFactory(req, res) {
       return map[key];
     });
     if (handlerObj) {
-      const session = await getAuth_default.getSession(req, res);
-      if (handlerObj.roleRequired) {
-        if (!session) {
-          return res.status(401).json({ error: "Unauthorized. Must be logged in." });
-        }
-        const userRoles = session && session.user && session.user.bespoke_roles && Array.isArray(session.user.bespoke_roles) ? session.user.bespoke_roles : [];
-        if (Array.isArray(handlerObj.roleRequired) && handlerObj.roleRequired.length > 0 && !arrContainsAnyItem(userRoles, handlerObj.roleRequired)) {
-          return res.status(402).json({ error: "Forbidden. Not enough roles." });
-        }
-      }
       if (handlerObj.handler) {
         if (["POST", "DELETE"].includes(method)) {
           req.body = await parseBody(req);
         }
-        return Promise.resolve(req).then((req2) => handlerObj.handler(req2, res, session ? session : void 0)).then((result) => {
+        return Promise.resolve(req).then((req2) => handlerObj.handler(req2, res, void 0)).then((result) => {
           if (result && "error" in result) {
             throw new BackendError(result.status, result.error);
           }
@@ -3900,15 +3403,12 @@ var crosswalk_default = reportsCrosswalkEntrypointFn;
 var actions_exports = {};
 __export(actions_exports, {
   addBlockToState: () => addBlockToState,
-  addNewReportToCurrentUser: () => addNewReportToCurrentUser,
   createEntity: () => createEntity,
   deleteEntity: () => deleteEntity,
   deleteQueryParam: () => deleteQueryParam,
   readEntity: () => readEntity,
   readMember: () => readMember,
   readMetadata: () => readMetadata,
-  readPrivateBlocks: () => readPrivateBlocks,
-  readUser: () => readUser,
   recalculateVariables: () => recalculateVariables,
   removeBlocksFromState: () => removeBlocksFromState,
   reportSearch: () => reportSearch,
@@ -3917,15 +3417,12 @@ __export(actions_exports, {
   revalidateUrl: () => revalidateUrl,
   searchMember: () => searchMember,
   searchRegenerate: () => searchRegenerate,
-  searchRole: () => searchRole,
-  searchUser: () => searchUser,
   setCurrentLocale: () => setCurrentLocale,
   setPreviews: () => setPreviews,
   setQueryParam: () => setQueryParam,
   setSectionState: () => setSectionState,
   setStatus: () => setStatus,
   updateEntity: () => updateEntity,
-  updateUser: () => updateUser,
   urlProxy: () => urlProxy2,
   variantValidateSlug: () => variantValidateSlug
 });
@@ -4068,26 +3565,20 @@ function apiFactory2(baseURL) {
     readMetadata: httpGET(axios6, "read/metadata"),
     regenerateSearch: httpPOST(axios6, "search/regenerate"),
     urlProxy: httpGET(axios6, "url/proxy"),
-    searchRole: httpGET(axios6, "auth/search/roles"),
-    searchUser: httpGET(axios6, "auth/search/users"),
-    readUser: httpGET(axios6, "auth/read/user"),
-    updateUser: httpPOST(axios6, "auth/update/user"),
-    addNewReportToCurrentUser: httpPOST(axios6, "auth/update/me"),
     revalidateReport: httpGET(axios6, "revalidate/report"),
     revalidateUrl: httpGET(axios6, "revalidate/url"),
-    readPrivateBlocks: httpPOST(axios6, "read/blocks/private"),
     listTablerIcons: httpListIconsFactory(axios6, "tabler"),
     readTablerIcon: httpReadIconFactory(axios6, "tabler")
   };
 }
 
 // models/block.ts
-var { localeDefault: localeDefault6 } = getLocales_default();
+var { localeDefault: localeDefault5 } = getLocales_default();
 function parseBlockContext(context) {
   return {
     variables: context.variables || {},
     query: context.query || {},
-    locale: context.locale || localeDefault6
+    locale: context.locale || localeDefault5
   };
 }
 var verbose4 = yn2(process.env.REPORTS_LOGGING);
@@ -4291,10 +3782,10 @@ var selectorQueryToVariable = (id, query, config) => {
 var selectorQueryToVariable_default = selectorQueryToVariable;
 
 // libs/blocks/getBlockContent.ts
-var { localeDefault: localeDefault7, locales: locales6 } = getLocales_default();
+var { localeDefault: localeDefault6, locales: locales6 } = getLocales_default();
 var logicTypes = Object.values(BLOCK_LOGIC_TYPES);
-var getLocaleDerived = (block, locale = localeDefault7) => block && logicTypes.includes(block.type) ? { locale: BLOCK_LOGIC_LOCALE, locales: [BLOCK_LOGIC_LOCALE] } : { locale, locales: locales6 };
-var getBlockContent = (block, _locale = localeDefault7) => {
+var getLocaleDerived = (block, locale = localeDefault6) => block && logicTypes.includes(block.type) ? { locale: BLOCK_LOGIC_LOCALE, locales: [BLOCK_LOGIC_LOCALE] } : { locale, locales: locales6 };
+var getBlockContent = (block, _locale = localeDefault6) => {
   if (!block)
     return {};
   const { locale } = getLocaleDerived(block, _locale);
@@ -4641,7 +4132,7 @@ async function runSingleBlock(block, formatterFunctions, blockContext, readMembe
     }
   };
 }
-var getDependencies = (bid, blocks, acc = [], crawlUp = true, crawlDown2 = true, withinSection = true, visited = []) => {
+var getDependencies = (bid, blocks, acc = [], crawlUp = true, crawlDown = true, withinSection = true, visited = []) => {
   if (visited.includes(bid))
     return [];
   visited.push(bid);
@@ -4655,13 +4146,13 @@ var getDependencies = (bid, blocks, acc = [], crawlUp = true, crawlDown2 = true,
       rootBlock.inputs.forEach((iid2) => getDependencies(iid2, blocks, acc, crawlUp, false, withinSection, visited));
     });
   }
-  if (rootBlock.consumers.length && crawlDown2) {
+  if (rootBlock.consumers.length && crawlDown) {
     rootBlock.consumers.forEach((cid) => {
       const rel = `${bid}-${cid}`;
       if (!acc.includes(rel) && (blocks[cid].section_id === blocks[bid].section_id || !withinSection)) {
         acc.push(rel);
       }
-      rootBlock.consumers.filter((cid2) => blocks[cid2].section_id === blocks[bid].section_id || !withinSection).forEach((cid2) => getDependencies(cid2, blocks, acc, false, crawlDown2, withinSection, visited));
+      rootBlock.consumers.filter((cid2) => blocks[cid2].section_id === blocks[bid].section_id || !withinSection).forEach((cid2) => getDependencies(cid2, blocks, acc, false, crawlDown, withinSection, visited));
     });
   }
   return acc;
@@ -4882,7 +4373,7 @@ var parse = (config, formatters = {}, locale = "en", actions = {}, extraGlobals
 };
 
 // store/lib.ts
-var { localeDefault: localeDefault8 } = getLocales_default();
+var { localeDefault: localeDefault7 } = getLocales_default();
 var blockSchema = new schema.Entity("block" /* BLOCKS */, {}, {
   mergeStrategy(a, b) {
     if (b.block_input)
@@ -4981,23 +4472,23 @@ var parseVariableUpdateParams = (status, params = void 0) => {
     statusPayload
   };
 };
-var funcifyFormattersByLocale = (formatters = [], locale = localeDefault8) => formatters.reduce((acc, f) => {
+var funcifyFormattersByLocale = (formatters = [], locale = localeDefault7) => formatters.reduce((acc, f) => {
   const formatterFn = parse({ vars: ["n"], logic: f.content.logic }, {}, locale, {});
   acc[f.name] = formatterFn;
   return acc;
 }, {});
 
 // store/envvars.ts
-var localeDefault9 = process.env.NEXT_PUBLIC_REPORTS_LOCALE_DEFAULT || "en";
-var locales7 = process.env.NEXT_PUBLIC_REPORTS_LOCALES?.split(",") || [localeDefault9];
-if (!locales7.includes(localeDefault9))
-  locales7.push(localeDefault9);
+var localeDefault8 = process.env.NEXT_PUBLIC_REPORTS_LOCALE_DEFAULT || "en";
+var locales7 = process.env.NEXT_PUBLIC_REPORTS_LOCALES?.split(",") || [localeDefault8];
+if (!locales7.includes(localeDefault8))
+  locales7.push(localeDefault8);
 
 // store/statusSlice.ts
 var initialState = {
-  localeDefault: localeDefault9,
+  localeDefault: localeDefault8,
   locales: locales7,
-  currentLocale: localeDefault9,
+  currentLocale: localeDefault8,
   showToolbar: false,
   activeSection: null,
   previews: [],
@@ -5640,51 +5131,6 @@ function urlProxy2(url) {
     return result.data;
   };
 }
-function searchRole() {
-  return async (_, __, api) => {
-    const result = await api.searchRole("");
-    if ("error" in result) {
-      throw new Error(result.error);
-    }
-    return result.data;
-  };
-}
-function searchUser(filters) {
-  return async (_, __, api) => {
-    const result = await api.searchUser(filters);
-    if ("error" in result) {
-      throw new Error(result.error);
-    }
-    return result.data;
-  };
-}
-function readUser(userId) {
-  return async (_, __, api) => {
-    const result = await api.readUser({ user_id: userId });
-    if ("error" in result) {
-      throw new Error(result.error);
-    }
-    return result.data;
-  };
-}
-function updateUser({ user }) {
-  return async (_, __, api) => {
-    const result = await api.updateUser(user);
-    if ("error" in result) {
-      throw new Error(result.error);
-    }
-    return result.data;
-  };
-}
-function addNewReportToCurrentUser(params) {
-  return async (_, __, api) => {
-    const result = await api.addNewReportToCurrentUser(params);
-    if ("error" in result) {
-      throw new Error(result.error);
-    }
-    return result.data;
-  };
-}
 function removeBlocksFromState(privateBlockIds) {
   const { removeBlocks } = recordsSlice.actions;
   return async (dispatch) => {
@@ -5697,15 +5143,6 @@ function addBlockToState(newBlocks) {
     await dispatch(addBlocks(newBlocks));
   };
 }
-function readPrivateBlocks(params) {
-  return async (_, __, api) => {
-    const result = await api.readPrivateBlocks({ ...params, roles: [] });
-    if ("error" in result) {
-      throw new Error(result.error);
-    }
-    return result.data;
-  };
-}
 function revalidateUrl(params) {
   return async (_, __, api) => {
     const result = await api.revalidateUrl({ target: params.target });
@@ -5751,32 +5188,30 @@ function BespokeManagerServerSideProps(options) {
     preResolve = noop,
     postResolve = noop
   } = options || {};
-  return getAuth_default.withPageAuthRequired({
-    getServerSideProps: storeWrapper.getServerSideProps((store) => {
-      const { dispatch } = store;
-      return async (ctx) => {
-        await dispatch(useDatabaseApi);
-        const preResult = await preResolve(store, ctx);
-        if ("redirect" in preResult)
-          return { props: preResult };
-        await Promise.all([
-          dispatch(readEntity("formatter", {})),
-          dispatch(readEntity("report", {
-            id: parseReportId(ctx.query[pathSegmentsKey]),
-            include: true
-          })),
-          // Mark the status as CMS environment
-          dispatch(statusActions.setStatus({ isCMS: true }))
-        ]);
-        const postResult = await postResolve(store, ctx);
-        return {
-          props: {
-            ...preResult,
-            ...postResult
-          }
-        };
+  return storeWrapper.getServerSideProps((store) => {
+    const { dispatch } = store;
+    return async (ctx) => {
+      await dispatch(useDatabaseApi);
+      const preResult = await preResolve(store, ctx);
+      if ("redirect" in preResult)
+        return { props: preResult };
+      await Promise.all([
+        dispatch(readEntity("formatter", {})),
+        dispatch(readEntity("report", {
+          id: parseReportId(ctx.query[pathSegmentsKey]),
+          include: true
+        })),
+        // Mark the status as CMS environment
+        dispatch(statusActions.setStatus({ isCMS: true }))
+      ]);
+      const postResult = await postResolve(store, ctx);
+      return {
+        props: {
+          ...preResult,
+          ...postResult
+        }
       };
-    })
+    };
   });
 }
 function parseReportId(value) {
@@ -5812,7 +5247,7 @@ function BespokeRendererStaticPaths(options) {
   } = options || {};
   return async (context) => {
     const {
-      defaultLocale = localeDefault9,
+      defaultLocale = localeDefault8,
       locales: locales9 = []
     } = context;
     let paths = [];
@@ -5824,7 +5259,7 @@ function BespokeRendererStaticPaths(options) {
         // gets top {limit} ranked per profile type.
         limit,
         format: "plain",
-        locale: locale || localeDefault9,
+        locale: locale || localeDefault8,
         noImage: false,
         visible: true,
         report: [],
@@ -5856,10 +5291,11 @@ function BespokeRendererStaticProps(options) {
     return storeWrapper.getStaticProps((store) => {
       const { dispatch } = store;
       return async (context) => {
+        console.log("loading store");
         await dispatch(useDatabaseApi);
         const buildTime = (/* @__PURE__ */ new Date()).toISOString();
         const {
-          locale = localeDefault9,
+          locale = localeDefault8,
           // TODO: detect or use app default
           params = {}
         } = context;
@@ -5893,23 +5329,13 @@ function BespokeRendererStaticProps(options) {
         const sectionList = selectSectionList(state);
         const blockRecords = selectBlockRecords(state);
         const publicBlockRecords = { ...blockRecords };
-        let privateBlockIds = Object.values(blockRecords).reduce((acc, block) => {
-          if ("access" in block.settings && !["public", "guest"].some((grant) => !block.settings.access || block.settings.access.includes(grant))) {
-            acc.push(block.id);
-          }
-          return acc;
-        }, []);
-        privateBlockIds = privateBlockIds.concat(crawlDown(privateBlockIds, Object.values(publicBlockRecords)));
-        privateBlockIds.forEach((privateBlockId) => {
-          delete publicBlockRecords[privateBlockId];
-        });
-        await dispatch(removeBlocksFromState(privateBlockIds));
         const attributes = {
           ...previewsToAttributes_default(members.results),
           locale,
           ...publicEnvVarsToAttributes_default()
         };
         const readMemberFn = async (innerParams) => await dispatch(readMember(innerParams));
+        console.log("runConsumers");
         await runConsumersV2(
           publicBlockRecords,
           sectionList,
@@ -5924,6 +5350,7 @@ function BespokeRendererStaticProps(options) {
           readMemberFn,
           "report"
         ).then((data) => {
+          console.log("Done run consumers");
           dispatch(variablesActions.setVariableChange({ ...data, attributes }));
         });
         return {
@@ -5951,4 +5378,4 @@ function getSlugSegments(slugs = []) {
   };
 }
 
-export { getSession_default as BespokeGetSession, handleAuth_default as BespokeHandleAuth, BespokeManagerServerSideProps, BespokeRendererStaticPaths, BespokeRendererStaticProps, searchUsersByMetadata_default as BespokeSearchUsersByMetadata, updateCurrentUserMetadata_default as BespokeUpdateCurrentUserMetadata, withApiRoleAuthRequired_default as BespokeWithApiRoleAuthRequired, crosswalk_default as ReportCrosswalkHandler, apiFactory as dbApiFactory, endpointKey, endpointNextJsHandlerFactory, getDB, useDatabaseApi };
+export { BespokeManagerServerSideProps, BespokeRendererStaticPaths, BespokeRendererStaticProps, crosswalk_default as ReportCrosswalkHandler, apiFactory as dbApiFactory, endpointKey, endpointNextJsHandlerFactory, getDB, useDatabaseApi };