@directus/api 31.0.0 → 32.0.0

package/dist/utils/sanitize-schema.js

@@ -6,8 +6,6 @@ import { pick } from 'lodash-es';
  * @returns sanitized collection
  */
 export function sanitizeCollection(collection) {
-    if (!collection)
-        return collection;
     return pick(collection, ['collection', 'fields', 'meta', 'schema.name']);
 }
 /**
@@ -18,8 +16,6 @@ export function sanitizeCollection(collection) {
  * @returns sanitized field
  */
 export function sanitizeField(field, sanitizeAllSchema = false) {
-    if (!field)
-        return field;
     const defaultPaths = ['collection', 'field', 'type', 'meta', 'name', 'children'];
     const pickedPaths = sanitizeAllSchema
         ? defaultPaths
@@ -71,8 +67,6 @@ export function sanitizeColumn(column) {
  * @returns sanitized relation
  */
 export function sanitizeRelation(relation) {
-    if (!relation)
-        return relation;
     return pick(relation, [
         'collection',
         'field',
@@ -87,3 +81,12 @@ export function sanitizeRelation(relation) {
         'schema.on_delete',
     ]);
 }
+/**
+ * Pick certain specific system field properties that should be compared when performing diff
+ *
+ * @param field field to sanitize
+ * @returns sanitized system field
+ */
+export function sanitizeSystemField(field) {
+    return pick(field, ['collection', 'field', 'schema.is_indexed']);
+}

package/dist/utils/schedule.js

@@ -1,29 +1,25 @@
-import cron from 'cron-parser';
-import schedule from 'node-schedule';
+import { CronJob, validateCronExpression } from 'cron';
 import { SynchronizedClock } from '../synchronization.js';
 export function validateCron(rule) {
-    try {
-        cron.parseExpression(rule);
-    }
-    catch {
-        return false;
-    }
-    return true;
+    return validateCronExpression(rule).valid;
 }
 export function scheduleSynchronizedJob(id, rule, cb) {
     const clock = new SynchronizedClock(`${id}:${rule}`);
-    const job = schedule.scheduleJob(rule, async (fireDate) => {
-        const nextInvocation = job.nextInvocation();
-        if (!nextInvocation)
-            return;
-        const nextTimestamp = nextInvocation.getTime();
-        const wasSet = await clock.set(nextTimestamp);
-        if (wasSet) {
-            await cb(fireDate);
-        }
+    const job = CronJob.from({
+        cronTime: rule,
+        onTick: async (fireDate) => {
+            // Get next execution time for synchronization
+            const nextDate = job.nextDate();
+            const nextTimestamp = nextDate.toMillis();
+            const wasSet = await clock.set(nextTimestamp);
+            if (wasSet) {
+                await cb(fireDate);
+            }
+        },
+        start: true,
     });
     const stop = async () => {
-        job.cancel();
+        job.stop();
         await clock.reset();
     };
     return { stop };

package/dist/utils/validate-diff.js

@@ -31,6 +31,13 @@ const applyJoiSchema = Joi.object({
             diff: Joi.array().items(deepDiffSchema).required(),
         }))
             .required(),
+        systemFields: Joi.array()
+            .items(Joi.object({
+            collection: Joi.string().required(),
+            field: Joi.string().required(),
+            diff: Joi.array().items(deepDiffSchema).required(),
+        }))
+            .required(),
         relations: Joi.array()
             .items(Joi.object({
             collection: Joi.string().required(),
@@ -53,6 +60,7 @@ export function validateApplyDiff(applyDiff, currentSnapshotWithHash) {
     // No changes to apply
     if (applyDiff.diff.collections.length === 0 &&
         applyDiff.diff.fields.length === 0 &&
+        applyDiff.diff.systemFields.length === 0 &&
         applyDiff.diff.relations.length === 0) {
         return false;
     }
@@ -97,6 +105,29 @@ export function validateApplyDiff(applyDiff, currentSnapshotWithHash) {
             }
         }
     }
+    for (const diffSystemField of applyDiff.diff.systemFields) {
+        const systemField = `${diffSystemField.collection}.${diffSystemField.field}`;
+        if (!diffSystemField.diff[0])
+            continue;
+        if (diffSystemField.diff[0].kind !== DiffKind.EDIT) {
+            let action = 'update array'; // DiffKind.ARRAY
+            if (diffSystemField.diff[0].kind === DiffKind.NEW) {
+                action = 'create';
+            }
+            else if (diffSystemField.diff[0].kind === DiffKind.DELETE) {
+                action = 'delete';
+            }
+            throw new InvalidPayloadError({
+                reason: `Provided diff is trying to ${action} field "${systemField}" but this action is not supported. Please generate a new diff and try again`,
+            });
+        }
+        const pathString = diffSystemField.diff[0].path?.join('.') ?? '';
+        if (pathString.length === 0 || pathString !== 'schema.is_indexed') {
+            throw new InvalidPayloadError({
+                reason: `Provided diff is trying to alter property "${pathString}" on "${systemField}" but currently only "schema.is_indexed" is supported. Please generate a new diff and try again`,
+            });
+        }
+    }
     for (const diffRelation of applyDiff.diff.relations) {
         let relation = `${diffRelation.collection}.${diffRelation.field}`;
         if (diffRelation.related_collection)

package/dist/utils/validate-snapshot.js

@@ -33,6 +33,13 @@ const snapshotJoiSchema = Joi.object({
             .valid(...TYPES, ...ALIAS_TYPES)
             .allow(null),
     })),
+    systemFields: Joi.array().items(Joi.object({
+        collection: Joi.string(),
+        field: Joi.string(),
+        schema: Joi.object({
+            is_indexed: Joi.bool(),
+        }),
+    })),
     relations: Joi.array().items(Joi.object({
         collection: Joi.string(),
         field: Joi.string(),

package/dist/websocket/controllers/hooks.js

@@ -1,3 +1,4 @@
+import { systemCollectionNames } from '@directus/system-data';
 import { useBus } from '../../bus/index.js';
 import emitter from '../../emitter.js';
 let actionsRegistered = false;
@@ -7,26 +8,17 @@ export function registerWebSocketEvents() {
     actionsRegistered = true;
     registerActionHooks([
         'items',
-        'access',
-        'activity',
-        'collections',
-        'dashboards',
-        'flows',
-        'folders',
-        'notifications',
-        'operations',
-        'panels',
-        'permissions',
-        'policies',
-        'presets',
-        'revisions',
-        'roles',
-        'settings',
-        'shares',
-        'translations',
-        'users',
-        'versions',
-        'webhooks',
+        ...systemCollectionNames
+            .filter((collection) => ![
+            'directus_migrations',
+            // manually registered below
+            'directus_fields',
+            'directus_relations',
+            'directus_files',
+            // excluded for security reasons
+            'directus_sessions',
+        ].includes(collection))
+            .map((collection) => collection.replace('directus_', '')),
     ]);
     registerFieldsHooks();
     registerFilesHooks();

package/dist/websocket/messages.d.ts

@@ -12,7 +12,7 @@ export declare const WebSocketResponse: z.ZodDiscriminatedUnion<[z.ZodObject<{
         code: z.ZodString;
         message: z.ZodString;
     }, z.core.$loose>;
-}, z.core.$loose>]>;
+}, z.core.$loose>], "status">;
 export type WebSocketResponse = z.infer<typeof WebSocketResponse>;
 export declare const ConnectionParams: z.ZodObject<{
     access_token: z.ZodOptional<z.ZodString>;
@@ -49,7 +49,7 @@ export declare const WebSocketSubscribeMessage: z.ZodDiscriminatedUnion<[z.ZodOb
 }, z.core.$loose>, z.ZodObject<{
     uid: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
     type: z.ZodLiteral<"unsubscribe">;
-}, z.core.$loose>]>;
+}, z.core.$loose>], "type">;
 export type WebSocketSubscribeMessage = z.infer<typeof WebSocketSubscribeMessage>;
 export declare const WebSocketLogsMessage: z.ZodUnion<readonly [z.ZodObject<{
     type: z.ZodLiteral<"subscribe">;
@@ -108,7 +108,7 @@ export declare const WebSocketEvent: z.ZodDiscriminatedUnion<[z.ZodObject<{
     collection: z.ZodString;
     payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     keys: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-}, z.core.$strip>]>;
+}, z.core.$strip>], "action">;
 export type WebSocketEvent = z.infer<typeof WebSocketEvent>;
 export declare const AuthMode: z.ZodUnion<readonly [z.ZodLiteral<"public">, z.ZodLiteral<"handshake">, z.ZodLiteral<"strict">]>;
 export type AuthMode = z.infer<typeof AuthMode>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@directus/api",
-  "version": "31.0.0",
+  "version": "32.0.0",
   "description": "Directus is a real-time API and App dashboard for managing SQL database content",
   "keywords": [
     "directus",
@@ -59,48 +59,47 @@
   ],
   "dependencies": {
     "@authenio/samlify-node-xmllint": "2.0.0",
-    "@aws-sdk/client-sesv2": "3.864.0",
+    "@aws-sdk/client-sesv2": "3.918.0",
     "@godaddy/terminus": "4.12.1",
-    "@modelcontextprotocol/sdk": "1.17.1",
+    "@modelcontextprotocol/sdk": "1.20.2",
     "@rollup/plugin-alias": "5.1.1",
-    "@rollup/plugin-node-resolve": "16.0.1",
+    "@rollup/plugin-node-resolve": "16.0.3",
     "@rollup/plugin-virtual": "3.0.2",
-    "@tus/server": "1.10.2",
-    "@tus/utils": "0.5.1",
-    "argon2": "0.43.1",
+    "@tus/server": "2.3.0",
+    "@tus/utils": "0.6.0",
+    "argon2": "0.44.0",
     "async": "3.2.6",
     "async-mutex": "0.5.0",
-    "axios": "1.11.0",
+    "axios": "1.12.2",
     "busboy": "1.6.0",
     "bytes": "3.1.2",
     "camelcase": "8.0.0",
-    "chalk": "5.4.1",
+    "chalk": "5.6.2",
     "chokidar": "4.0.3",
-    "commander": "14.0.0",
+    "commander": "14.0.2",
     "content-disposition": "0.5.4",
     "cookie": "1.0.2",
     "cookie-parser": "1.4.7",
     "cors": "2.8.5",
-    "cron-parser": "4.9.0",
     "date-fns": "4.1.0",
     "deep-diff": "1.0.2",
     "destroy": "1.2.0",
-    "dotenv": "17.2.1",
+    "dotenv": "17.2.3",
     "encodeurl": "2.0.0",
     "eventemitter2": "6.4.9",
     "execa": "9.6.0",
     "exif-reader": "2.0.2",
     "express": "4.21.2",
     "flat": "6.0.1",
-    "fs-extra": "11.3.0",
+    "fs-extra": "11.3.2",
     "glob-to-regexp": "0.4.1",
     "graphql": "16.11.0",
     "graphql-compose": "9.1.0",
     "graphql-ws": "6.0.6",
     "helmet": "8.1.0",
     "icc": "3.0.0",
-    "inquirer": "12.9.0",
-    "ioredis": "5.7.0",
+    "inquirer": "12.10.0",
+    "ioredis": "5.8.2",
     "ip-matching": "2.1.2",
     "isolated-vm": "5.0.3",
     "joi": "18.0.1",
@@ -108,85 +107,85 @@
     "js2xmlparser": "5.0.0",
     "json2csv": "5.0.7",
     "jsonwebtoken": "9.0.2",
-    "keyv": "5.4.0",
+    "keyv": "5.5.3",
     "knex": "3.1.0",
     "ldapjs": "2.3.3",
-    "liquidjs": "10.21.1",
+    "liquidjs": "10.24.0",
     "lodash-es": "4.17.21",
-    "marked": "16.1.1",
+    "marked": "16.4.1",
     "micromustache": "8.0.3",
     "mime-types": "3.0.1",
-    "minimatch": "10.0.3",
+    "minimatch": "10.1.1",
     "mnemonist": "0.40.3",
     "ms": "2.1.3",
-    "nanoid": "5.1.5",
+    "nanoid": "5.1.6",
     "node-machine-id": "1.1.12",
-    "node-schedule": "2.1.1",
-    "nodemailer": "7.0.5",
+    "cron": "4.3.3",
+    "nodemailer": "7.0.10",
     "object-hash": "3.0.0",
     "openapi3-ts": "4.5.0",
     "openid-client": "5.7.1",
     "ora": "8.2.0",
     "otplib": "12.0.1",
-    "p-limit": "6.2.0",
+    "p-limit": "7.2.0",
     "p-queue": "8.1.0",
     "papaparse": "5.5.3",
     "pino": "9.7.0",
     "pino-http": "10.5.0",
     "pino-http-print": "3.1.0",
-    "pino-pretty": "13.1.1",
-    "pm2": "6.0.8",
+    "pino-pretty": "13.1.2",
+    "pm2": "6.0.13",
     "prom-client": "15.1.3",
     "proxy-addr": "2.0.7",
     "qs": "6.14.0",
     "rate-limiter-flexible": "7.2.0",
     "rolldown": "1.0.0-beta.31",
-    "rollup": "4.46.2",
+    "rollup": "4.52.5",
     "samlify": "2.10.1",
     "sanitize-html": "2.17.0",
-    "sharp": "0.34.3",
-    "snappy": "7.3.0",
+    "sharp": "0.34.4",
+    "snappy": "7.3.3",
     "stream-json": "1.9.1",
-    "tar": "7.4.3",
-    "tsx": "4.20.3",
+    "tar": "7.5.2",
+    "tsx": "4.20.6",
     "uuid": "11.1.0",
     "wellknown": "0.5.0",
     "ws": "8.18.3",
-    "zod": "4.0.14",
-    "zod-validation-error": "4.0.1",
-    "@directus/env": "5.2.0",
-    "@directus/app": "14.0.0",
-    "@directus/errors": "2.0.4",
-    "@directus/extensions": "3.0.11",
-    "@directus/constants": "13.0.3",
-    "@directus/extensions-registry": "3.0.11",
-    "@directus/extensions-sdk": "16.0.2",
-    "@directus/format-title": "12.1.0",
-    "@directus/memory": "3.0.9",
-    "@directus/pressure": "3.0.9",
-    "@directus/schema": "13.0.3",
-    "@directus/schema-builder": "0.0.6",
+    "zod": "4.1.12",
+    "zod-validation-error": "4.0.2",
+    "@directus/app": "14.1.0",
+    "@directus/constants": "14.0.0",
+    "@directus/errors": "2.0.5",
+    "@directus/extensions": "3.0.12",
+    "@directus/env": "5.3.0",
+    "@directus/extensions-sdk": "17.0.0",
+    "@directus/extensions-registry": "3.0.12",
+    "@directus/format-title": "12.1.1",
+    "@directus/memory": "3.0.10",
+    "@directus/pressure": "3.0.10",
+    "@directus/schema-builder": "0.0.7",
+    "@directus/schema": "13.0.4",
+    "@directus/storage": "12.0.3",
     "@directus/specs": "11.1.1",
-    "@directus/storage": "12.0.2",
-    "@directus/storage-driver-azure": "12.0.9",
-    "@directus/storage-driver-cloudinary": "12.0.9",
-    "@directus/storage-driver-gcs": "12.0.9",
-    "@directus/storage-driver-local": "12.0.2",
-    "@directus/storage-driver-s3": "12.0.9",
-    "@directus/storage-driver-supabase": "3.0.9",
-    "@directus/system-data": "3.3.0",
-    "@directus/utils": "13.0.10",
-    "directus": "11.12.0",
-    "@directus/validation": "2.0.9"
+    "@directus/storage-driver-azure": "12.0.10",
+    "@directus/storage-driver-cloudinary": "12.0.10",
+    "@directus/storage-driver-gcs": "12.0.10",
+    "@directus/storage-driver-s3": "12.0.10",
+    "@directus/system-data": "3.4.0",
+    "@directus/storage-driver-local": "12.0.3",
+    "@directus/utils": "13.0.11",
+    "@directus/storage-driver-supabase": "3.0.10",
+    "@directus/validation": "2.0.10",
+    "directus": "11.13.0"
   },
   "devDependencies": {
     "@directus/tsconfig": "3.0.0",
     "@ngneat/falso": "8.0.2",
-    "@types/async": "3.2.24",
+    "@types/async": "3.2.25",
     "@types/busboy": "1.5.4",
     "@types/bytes": "3.1.5",
     "@types/content-disposition": "0.5.9",
-    "@types/cookie-parser": "1.4.9",
+    "@types/cookie-parser": "1.4.10",
     "@types/cors": "2.8.19",
     "@types/deep-diff": "1.0.5",
     "@types/destroy": "1.0.3",
@@ -195,7 +194,7 @@
     "@types/express-serve-static-core": "4.19.6",
     "@types/fs-extra": "11.0.4",
     "@types/glob-to-regexp": "0.4.4",
-    "@types/inquirer": "9.0.8",
+    "@types/inquirer": "9.0.9",
     "@types/js-yaml": "4.0.9",
     "@types/json2csv": "5.0.7",
     "@types/jsonwebtoken": "9.0.10",
@@ -204,8 +203,7 @@
     "@types/mime-types": "3.0.1",
     "@types/ms": "2.1.0",
     "@types/node": "22.13.14",
-    "@types/node-schedule": "2.1.8",
-    "@types/nodemailer": "6.4.17",
+    "@types/nodemailer": "7.0.3",
     "@types/object-hash": "3.0.6",
     "@types/papaparse": "5.3.16",
     "@types/proxy-addr": "2.0.3",
@@ -219,16 +217,16 @@
     "form-data": "4.0.4",
     "get-port": "7.1.0",
     "knex-mock-client": "3.0.2",
-    "typescript": "5.8.3",
+    "typescript": "5.9.3",
     "vitest": "3.2.4",
-    "@directus/schema-builder": "0.0.6",
-    "@directus/types": "13.2.3"
+    "@directus/types": "13.3.0",
+    "@directus/schema-builder": "0.0.7"
   },
   "optionalDependencies": {
     "@keyv/redis": "3.0.1",
-    "mysql2": "3.14.3",
+    "mysql2": "3.15.3",
     "nodemailer-mailgun-transport": "2.1.5",
-    "oracledb": "6.9.0",
+    "oracledb": "6.10.0",
     "pg": "8.16.3",
     "sqlite3": "5.1.7",
     "tedious": "18.6.1"

package/dist/cli/utils/defaults.d.ts

@@ -1,4 +0,0 @@
-import type { Policy, Role, User } from '@directus/types';
-export declare const defaultAdminRole: Partial<Role>;
-export declare const defaultAdminUser: Partial<User>;
-export declare const defaultAdminPolicy: Partial<Policy>;

package/dist/cli/utils/defaults.js

@@ -1,17 +0,0 @@
-export const defaultAdminRole = {
-    name: 'Administrator',
-    icon: 'verified',
-    description: '$t:admin_description',
-};
-export const defaultAdminUser = {
-    status: 'active',
-    first_name: 'Admin',
-    last_name: 'User',
-};
-export const defaultAdminPolicy = {
-    name: 'Administrator',
-    icon: 'verified',
-    admin_access: true,
-    app_access: true,
-    description: '$t:admin_description',
-};

package/dist/telemetry/utils/get-project-id.d.ts

@@ -1,2 +0,0 @@
-import type { Knex } from 'knex';
-export declare const getProjectId: (db: Knex) => Promise<string>;

package/dist/telemetry/utils/get-project-id.js

@@ -1,4 +0,0 @@
-export const getProjectId = async (db) => {
-    const projectId = await db.select('project_id').from('directus_settings').first();
-    return projectId?.project_id || null;
-};