@directus/api 32.2.0 → 33.0.0

package/dist/database/migrations/20251224A-remove-webhooks.d.ts

@@ -0,0 +1,3 @@
+import type { Knex } from 'knex';
+export declare function up(knex: Knex): Promise<void>;
+export declare function down(knex: Knex): Promise<void>;

package/dist/database/migrations/20251224A-remove-webhooks.js

@@ -0,0 +1,19 @@
+export async function up(knex) {
+    await knex.schema.dropTable('directus_webhooks');
+}
+export async function down(knex) {
+    await knex.schema.createTable('directus_webhooks', (table) => {
+        table.increments('id');
+        table.string('name', 255).notNullable();
+        table.string('method', 10).notNullable().defaultTo('POST');
+        table.text('url').notNullable();
+        table.string('status', 10).notNullable().defaultTo('active');
+        table.boolean('data').notNullable().defaultTo(true);
+        table.string('actions', 100).notNullable();
+        table.text('collections').notNullable();
+        table.json('headers');
+        table.boolean('was_active_before_deprecation').notNullable().defaultTo(false);
+        table.uuid('migrated_flow');
+        table.foreign('migrated_flow').references('directus_flows.id').onDelete('SET NULL');
+    });
+}

package/dist/database/migrations/20260113A-add-revisions-index.d.ts

@@ -0,0 +1,3 @@
+import type { Knex } from 'knex';
+export declare function up(knex: Knex): Promise<void>;
+export declare function down(knex: Knex): Promise<void>;

package/dist/database/migrations/20260113A-add-revisions-index.js

@@ -0,0 +1,41 @@
+import { FieldsService } from '../../services/fields.js';
+import { getSchema } from '../../utils/get-schema.js';
+import { transaction } from '../../utils/transaction.js';
+import { getHelpers } from '../helpers/index.js';
+import { getDatabaseClient } from '../index.js';
+const RETENTION_INDEXES = [
+    // MySQL and MariaDB are ignored because they already have an index on revisions.activity
+    { collection: 'directus_revisions', field: 'activity', ignore: ['mysql', 'mariadb'] },
+];
+export async function up(knex) {
+    const client = getDatabaseClient(knex);
+    const helpers = getHelpers(knex);
+    const schema = await getSchema();
+    const service = new FieldsService({ knex, schema });
+    for (const { collection, field, ignore } of RETENTION_INDEXES) {
+        if (ignore.includes(client))
+            continue;
+        const existingColumn = await service.columnInfo(collection, field);
+        if (!existingColumn.is_indexed) {
+            await helpers.schema.createIndex(collection, field, { attemptConcurrentIndex: true });
+        }
+    }
+}
+export async function down(knex) {
+    const client = getDatabaseClient(knex);
+    const helpers = getHelpers(knex);
+    const schema = await getSchema();
+    const service = new FieldsService({ knex, schema });
+    for (const { collection, field, ignore } of RETENTION_INDEXES) {
+        if (ignore.includes(client))
+            continue;
+        const existingColumn = await service.columnInfo(collection, field);
+        if (existingColumn.is_indexed) {
+            await transaction(knex, async (trx) => {
+                await trx.schema.alterTable(collection, async (table) => {
+                    table.dropIndex([field], helpers.schema.generateIndexName('index', collection, field));
+                });
+            });
+        }
+    }
+}

package/dist/database/migrations/run.js

@@ -1,10 +1,10 @@
+import { dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import path from 'path';
 import { useEnv } from '@directus/env';
 import formatTitle from '@directus/format-title';
 import fse from 'fs-extra';
 import { orderBy } from 'lodash-es';
-import { dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import path from 'path';
 import { flushCaches } from '../../cache.js';
 import { useLogger } from '../../logger/index.js';
 import getModuleDefault from '../../utils/get-module-default.js';

package/dist/database/run-ast/lib/apply-query/filter/get-filter-type.d.ts

@@ -1,8 +1,8 @@
 import type { FieldOverview } from '@directus/types';
 export declare function getFilterType(fields: Record<string, FieldOverview>, key: string, collection?: string): {
-    type: "string" | "boolean" | "binary" | "time" | "text" | "integer" | "float" | "alias" | "uuid" | "dateTime" | "timestamp" | "bigInteger" | "date" | "decimal" | "json" | "hash" | "csv" | "geometry" | "geometry.Point" | "geometry.LineString" | "geometry.Polygon" | "geometry.MultiPoint" | "geometry.MultiLineString" | "geometry.MultiPolygon" | "unknown";
+    type: "string" | "boolean" | "binary" | "text" | "unknown" | "integer" | "date" | "float" | "alias" | "uuid" | "time" | "dateTime" | "timestamp" | "bigInteger" | "decimal" | "json" | "hash" | "csv" | "geometry" | "geometry.Point" | "geometry.LineString" | "geometry.Polygon" | "geometry.MultiPoint" | "geometry.MultiLineString" | "geometry.MultiPolygon";
     special?: never;
 } | {
-    type: "string" | "boolean" | "binary" | "time" | "text" | "integer" | "float" | "alias" | "uuid" | "dateTime" | "timestamp" | "bigInteger" | "date" | "decimal" | "json" | "hash" | "csv" | "geometry" | "geometry.Point" | "geometry.LineString" | "geometry.Polygon" | "geometry.MultiPoint" | "geometry.MultiLineString" | "geometry.MultiPolygon" | "unknown";
+    type: "string" | "boolean" | "binary" | "text" | "unknown" | "integer" | "date" | "float" | "alias" | "uuid" | "time" | "dateTime" | "timestamp" | "bigInteger" | "decimal" | "json" | "hash" | "csv" | "geometry" | "geometry.Point" | "geometry.LineString" | "geometry.Polygon" | "geometry.MultiPoint" | "geometry.MultiLineString" | "geometry.MultiPolygon";
     special: string[];
 };

package/dist/database/run-ast/lib/apply-query/filter/get-filter-type.js

@@ -1,6 +1,6 @@
-import { parseFilterKey } from '../../../../../utils/parse-filter-key.js';
 import { InvalidQueryError } from '@directus/errors';
 import { getFunctionsForType, getOutputTypeForFunction } from '@directus/utils';
+import { parseFilterKey } from '../../../../../utils/parse-filter-key.js';
 export function getFilterType(fields, key, collection = 'unknown') {
     const { fieldName, functionName } = parseFilterKey(key);
     const field = fields[fieldName];

package/dist/database/run-ast/lib/apply-query/filter/operator.js

@@ -1,6 +1,6 @@
-import { getColumn } from '../../../utils/get-column.js';
 import { getOutputTypeForFunction } from '@directus/utils';
 import { getHelpers } from '../../../../helpers/index.js';
+import { getColumn } from '../../../utils/get-column.js';
 export function applyOperator(knex, dbQuery, schema, key, operator, compareValue, logical = 'and', originalCollectionName) {
     const helpers = getHelpers(knex);
     const [table, column] = key.split('.');

package/dist/database/run-ast/lib/apply-query/sort.js

@@ -1,6 +1,6 @@
 import { getColumnPath } from '../../../../utils/get-column-path.js';
-import { getColumn } from '../../utils/get-column.js';
 import { getRelationInfo } from '../../../../utils/get-relation-info.js';
+import { getColumn } from '../../utils/get-column.js';
 import { addJoin } from './add-join.js';
 export function applySort(knex, schema, rootQuery, sort, aggregate, collection, aliasMap, returnRecords = false) {
     const relations = schema.relations;

package/dist/database/run-ast/utils/get-column-pre-processor.js

@@ -1,8 +1,8 @@
-import { joinFilterWithCases } from '../lib/apply-query/join-filter-with-cases.js';
-import { getColumn } from './get-column.js';
 import { parseFilterKey } from '../../../utils/parse-filter-key.js';
 import { getHelpers } from '../../helpers/index.js';
+import { joinFilterWithCases } from '../lib/apply-query/join-filter-with-cases.js';
 import { applyCaseWhen } from './apply-case-when.js';
+import { getColumn } from './get-column.js';
 import { getNodeAlias } from './get-field-alias.js';
 export function getColumnPreprocessor(knex, schema, table, cases, permissions, aliasMap, permissionsOnly) {
     const helpers = getHelpers(knex);

package/dist/database/run-ast/utils/get-column.js

@@ -1,7 +1,7 @@
 import { REGEX_BETWEEN_PARENS } from '@directus/constants';
+import { InvalidQueryError } from '@directus/errors';
 import { getFunctionsForType } from '@directus/utils';
 import { getFunctions } from '../../helpers/index.js';
-import { InvalidQueryError } from '@directus/errors';
 import { applyFunctionToColumnName } from './apply-function-to-column-name.js';
 /**
  * Return column prefixed by table. If column includes functions (like `year(date_created)`), the

package/dist/database/seeds/run.js

@@ -1,9 +1,9 @@
-import fse from 'fs-extra';
-import yaml from 'js-yaml';
-import { isObject } from 'lodash-es';
 import { dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import path from 'path';
+import fse from 'fs-extra';
+import yaml from 'js-yaml';
+import { isObject } from 'lodash-es';
 import { getHelpers } from '../helpers/index.js';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 export default async function runSeed(database) {

package/dist/extensions/lib/get-extensions-path.js

@@ -1,5 +1,5 @@
-import { useEnv } from '@directus/env';
 import { join } from 'path';
+import { useEnv } from '@directus/env';
 export const getExtensionsPath = () => {
     const env = useEnv();
     if (env['EXTENSIONS_LOCATION']) {

package/dist/extensions/lib/get-extensions-settings.js

@@ -1,8 +1,8 @@
 import { randomUUID } from 'node:crypto';
+import { list } from '@directus/extensions-registry';
 import getDatabase from '../../database/index.js';
 import { ExtensionsService } from '../../services/extensions.js';
 import { getSchema } from '../../utils/get-schema.js';
-import { list } from '@directus/extensions-registry';
 /**
  * Loads stored settings for all extensions. Creates empty new rows in extensions tables for
  * extensions that don't have settings yet, and remove any settings for extensions that are no

package/dist/extensions/lib/get-extensions.js

@@ -1,6 +1,6 @@
+import { join } from 'node:path';
 import { useEnv } from '@directus/env';
 import { resolveFsExtensions, resolveModuleExtensions } from '@directus/extensions/node';
-import { join } from 'node:path';
 import { getExtensionsPath } from './get-extensions-path.js';
 export const getExtensions = async () => {
     const env = useEnv();

package/dist/extensions/lib/get-shared-deps-mapping.js

@@ -1,10 +1,10 @@
-import { useEnv } from '@directus/env';
-import { resolvePackage } from '@directus/utils/node';
-import { escapeRegExp } from 'lodash-es';
 import { readdir } from 'node:fs/promises';
 import { dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import path from 'path';
+import { useEnv } from '@directus/env';
+import { resolvePackage } from '@directus/utils/node';
+import { escapeRegExp } from 'lodash-es';
 import { useLogger } from '../../logger/index.js';
 import { Url } from '../../utils/url.js';
 const __dirname = dirname(fileURLToPath(import.meta.url));

package/dist/extensions/lib/installation/manager.js

@@ -1,13 +1,13 @@
+import { mkdir, readFile, rm } from 'node:fs/promises';
+import { Readable } from 'node:stream';
+import { join } from 'path';
 import { useEnv } from '@directus/env';
 import { ErrorCode, isDirectusError, ServiceUnavailableError } from '@directus/errors';
 import { EXTENSION_PKG_KEY, ExtensionManifest } from '@directus/extensions';
 import { download } from '@directus/extensions-registry';
 import DriverLocal from '@directus/storage-driver-local';
 import { move, remove } from 'fs-extra';
-import { mkdir, readFile, rm } from 'node:fs/promises';
-import { Readable } from 'node:stream';
 import Queue from 'p-queue';
-import { join } from 'path';
 import { extract } from 'tar';
 import { useLogger } from '../../../logger/index.js';
 import { getStorage } from '../../../storage/index.js';

package/dist/extensions/lib/sandbox/register/route.d.ts

@@ -1,6 +1,6 @@
+import type { IncomingHttpHeaders } from 'node:http';
 import type { Router } from 'express';
 import type { Reference } from 'isolated-vm';
-import type { IncomingHttpHeaders } from 'node:http';
 export declare function registerRouteGenerator(endpointName: string, endpointRouter: Router): {
     register: (path: Reference<string>, method: Reference<"GET" | "POST" | "PUT" | "PATCH" | "DELETE">, cb: Reference<(req: {
         url: string;

package/dist/extensions/lib/sync/status.js

@@ -1,9 +1,9 @@
 /**
  * Utility functions to write a `.status` file on the filesystem to indicate active synchronization
  */
+import { rm, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { exists } from 'fs-extra';
-import { writeFile, rm } from 'node:fs/promises';
 import { getExtensionsPath } from '../get-extensions-path.js';
 export const SyncStatus = {
     SYNCING: 'SYNCING',

package/dist/extensions/lib/sync/sync.js

@@ -1,19 +1,19 @@
-import Queue from 'p-queue';
-import mid from 'node-machine-id';
-import { useEnv } from '@directus/env';
 import { createWriteStream } from 'node:fs';
 import { mkdir, rm } from 'node:fs/promises';
-import { pipeline } from 'node:stream/promises';
 import { dirname, join, relative, resolve, sep } from 'node:path';
-import { getSyncPaths, compareFileMetadata } from './utils.js';
+import { pipeline } from 'node:stream/promises';
+import { useEnv } from '@directus/env';
+import { normalizePath } from '@directus/utils';
+import mid from 'node-machine-id';
+import Queue from 'p-queue';
 import { useBus } from '../../../bus/index.js';
-import { SyncFileTracker } from './tracker.js';
 import { useLock } from '../../../lock/index.js';
 import { useLogger } from '../../../logger/index.js';
 import { getStorage } from '../../../storage/index.js';
 import { getExtensionsPath } from '../get-extensions-path.js';
 import { isSynchronizing, setSyncStatus, SyncStatus } from './status.js';
-import { normalizePath } from '@directus/utils';
+import { SyncFileTracker } from './tracker.js';
+import { compareFileMetadata, getSyncPaths } from './utils.js';
 export async function syncExtensions(options) {
     if (options?.skipSync === true)
         return;

package/dist/extensions/lib/sync/utils.js

@@ -1,8 +1,8 @@
-import { join, relative, resolve, sep } from 'node:path';
 import { stat } from 'node:fs/promises';
-import { getExtensionsPath } from '../get-extensions-path.js';
+import { join, relative, resolve, sep } from 'node:path';
 import { useEnv } from '@directus/env';
 import { normalizePath } from '@directus/utils';
+import { getExtensionsPath } from '../get-extensions-path.js';
 /**
  * Returns the directory depth of the provided path
  */

package/dist/extensions/manager.d.ts

@@ -1,6 +1,6 @@
+import type { ReadStream } from 'node:fs';
 import type { Extension, ExtensionManagerOptions } from '@directus/types';
 import { Router } from 'express';
-import type { ReadStream } from 'node:fs';
 import { type ExtensionSyncOptions } from './lib/sync/sync.js';
 export declare class ExtensionManager {
     private options;

package/dist/extensions/manager.js

@@ -1,7 +1,13 @@
+import { readdir, readFile } from 'node:fs/promises';
+import os from 'node:os';
+import { dirname, join, relative, resolve, sep } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import path from 'path';
+import { HYBRID_EXTENSION_TYPES } from '@directus/constants';
 import { useEnv } from '@directus/env';
 import { APP_SHARED_DEPS } from '@directus/extensions';
-import { HYBRID_EXTENSION_TYPES } from '@directus/constants';
 import { generateExtensionsEntrypoint } from '@directus/extensions/node';
+import DriverLocal from '@directus/storage-driver-local';
 import { isTypeIn, toBoolean } from '@directus/utils';
 import { pathToRelativeUrl, processId } from '@directus/utils/node';
 import aliasDefault from '@rollup/plugin-alias';
@@ -11,11 +17,6 @@ import chokidar, { FSWatcher } from 'chokidar';
 import express, { Router } from 'express';
 import ivm from 'isolated-vm';
 import { clone, debounce, isPlainObject } from 'lodash-es';
-import { readFile, readdir } from 'node:fs/promises';
-import os from 'node:os';
-import { dirname, join, relative, resolve, sep } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import path from 'path';
 import { rolldown } from 'rolldown';
 import { rollup } from 'rollup';
 import { useBus } from '../bus/index.js';
@@ -37,9 +38,8 @@ import { getSharedDepsMapping } from './lib/get-shared-deps-mapping.js';
 import { getInstallationManager } from './lib/installation/index.js';
 import { generateApiExtensionsSandboxEntrypoint } from './lib/sandbox/generate-api-extensions-sandbox-entrypoint.js';
 import { instantiateSandboxSdk } from './lib/sandbox/sdk/instantiate.js';
-import { wrapEmbeds } from './lib/wrap-embeds.js';
-import DriverLocal from '@directus/storage-driver-local';
 import { syncExtensions } from './lib/sync/sync.js';
+import { wrapEmbeds } from './lib/wrap-embeds.js';
 // Workaround for https://github.com/rollup/plugins/issues/1329
 const virtual = virtualDefault;
 const alias = aliasDefault;

package/dist/flows.d.ts

@@ -1,4 +1,4 @@
-import type { Accountability, SchemaOverview, OperationHandler } from '@directus/types';
+import type { Accountability, OperationHandler, SchemaOverview } from '@directus/types';
 export declare function getFlowManager(): FlowManager;
 declare class FlowManager {
     private isLoaded;

package/dist/logger/index.js

@@ -1,7 +1,7 @@
+import { URL } from 'node:url';
 import { useEnv } from '@directus/env';
 import { REDACTED_TEXT, toArray, toBoolean } from '@directus/utils';
 import { merge } from 'lodash-es';
-import { URL } from 'node:url';
 import { pino } from 'pino';
 import { pinoHttp, stdSerializers } from 'pino-http';
 import { httpPrintFactory } from 'pino-http-print';

package/dist/logger/logs-stream.d.ts

@@ -1,5 +1,5 @@
-import type { Bus } from '@directus/memory';
 import { Writable } from 'stream';
+import type { Bus } from '@directus/memory';
 type PrettyType = 'basic' | 'http' | false;
 export declare class LogsStream extends Writable {
     messenger: Bus;

package/dist/logger/logs-stream.js

@@ -1,5 +1,5 @@
-import { nanoid } from 'nanoid';
 import { Writable } from 'stream';
+import { nanoid } from 'nanoid';
 import { useBus } from '../bus/index.js';
 const nodeId = nanoid(8);
 export class LogsStream extends Writable {

package/dist/mailer.js

@@ -1,8 +1,8 @@
+import { createRequire } from 'node:module';
 import { useEnv } from '@directus/env';
 import nodemailer from 'nodemailer';
 import { useLogger } from './logger/index.js';
 import { getConfigFromEnv } from './utils/get-config-from-env.js';
-import { createRequire } from 'node:module';
 const require = createRequire(import.meta.url);
 let transporter;
 export default function getMailer() {

package/dist/metrics/lib/create-metrics.js

@@ -1,8 +1,8 @@
-import { useEnv } from '@directus/env';
-import { toArray } from '@directus/utils';
 import { randomUUID } from 'node:crypto';
 import { Readable } from 'node:stream';
 import { promisify } from 'node:util';
+import { useEnv } from '@directus/env';
+import { toArray } from '@directus/utils';
 import pm2 from 'pm2';
 import { AggregatorRegistry, Counter, Histogram, register } from 'prom-client';
 import { getCache } from '../../cache.js';

package/dist/middleware/authenticate.js

@@ -1,13 +1,13 @@
+import { useEnv } from '@directus/env';
+import { ErrorCode, isDirectusError } from '@directus/errors';
 import { isEqual } from 'lodash-es';
+import { SESSION_COOKIE_OPTIONS } from '../constants.js';
 import getDatabase from '../database/index.js';
 import emitter from '../emitter.js';
 import { createDefaultAccountability } from '../permissions/utils/create-default-accountability.js';
 import asyncHandler from '../utils/async-handler.js';
 import { getAccountabilityForToken } from '../utils/get-accountability-for-token.js';
 import { getIPFromReq } from '../utils/get-ip-from-req.js';
-import { ErrorCode, isDirectusError } from '@directus/errors';
-import { useEnv } from '@directus/env';
-import { SESSION_COOKIE_OPTIONS } from '../constants.js';
 /**
  * Verify the passed JWT and assign the user ID and role to `req`
  */

package/dist/middleware/collection-exists.js

@@ -2,8 +2,8 @@
  * Check if requested collection exists, and save it to req.collection
  */
 import { systemCollectionRows } from '@directus/system-data';
-import asyncHandler from '../utils/async-handler.js';
 import { createCollectionForbiddenError } from '../permissions/modules/process-ast/utils/validate-path/create-error.js';
+import asyncHandler from '../utils/async-handler.js';
 const collectionExists = asyncHandler(async (req, _res, next) => {
     if (!req.params['collection'])
         return next();

package/dist/middleware/extract-token.js

@@ -1,5 +1,5 @@
-import { InvalidPayloadError } from '@directus/errors';
 import { useEnv } from '@directus/env';
+import { InvalidPayloadError } from '@directus/errors';
 /**
  * Extract access token from
  *

package/dist/middleware/graphql.js

@@ -1,9 +1,9 @@
+import { useEnv } from '@directus/env';
+import { InvalidPayloadError, InvalidQueryError, MethodNotAllowedError } from '@directus/errors';
 import { parseJSON } from '@directus/utils';
 import { getOperationAST, parse, Source } from 'graphql';
-import { InvalidPayloadError, InvalidQueryError, MethodNotAllowedError } from '@directus/errors';
 import { GraphQLValidationError } from '../services/graphql/errors/validation.js';
 import asyncHandler from '../utils/async-handler.js';
-import { useEnv } from '@directus/env';
 export const parseGraphQL = asyncHandler(async (req, res, next) => {
     if (req.method !== 'GET' && req.method !== 'POST') {
         throw new MethodNotAllowedError({ allowed: ['GET', 'POST'], current: req.method });

package/dist/middleware/validate-batch.js

@@ -1,5 +1,5 @@
-import Joi from 'joi';
 import { InvalidPayloadError } from '@directus/errors';
+import Joi from 'joi';
 import asyncHandler from '../utils/async-handler.js';
 import { sanitizeQuery } from '../utils/sanitize-query.js';
 import { validateQuery } from '../utils/validate-query.js';

package/dist/operations/exec/index.js

@@ -1,5 +1,6 @@
-import { defineOperationApi } from '@directus/extensions';
 import { createRequire } from 'node:module';
+import { defineOperationApi } from '@directus/extensions';
+// eslint-disable-next-line import/order
 import { sieveFunctions } from '@directus/utils';
 const require = createRequire(import.meta.url);
 const ivm = require('isolated-vm');

package/dist/operations/mail/index.js

@@ -1,7 +1,7 @@
 import { defineOperationApi } from '@directus/extensions';
+import { useLogger } from '../../logger/index.js';
 import { MailService } from '../../services/mail/index.js';
 import { md } from '../../utils/md.js';
-import { useLogger } from '../../logger/index.js';
 import { useFlowsEmailRateLimiter } from './rate-limiter.js';
 const logger = useLogger();
 export default defineOperationApi({

package/dist/operations/mail/rate-limiter.js

@@ -1,8 +1,8 @@
 import { useEnv } from '@directus/env';
+import { EmailLimitExceededError } from '@directus/errors';
+import { toBoolean } from '@directus/utils';
 import { RateLimiterMemory, RateLimiterRedis, RateLimiterRes } from 'rate-limiter-flexible';
 import { createRateLimiter } from '../../rate-limiter.js';
-import { toBoolean } from '@directus/utils';
-import { EmailLimitExceededError } from '@directus/errors';
 let emailRateLimiter;
 const env = useEnv();
 if (toBoolean(env['RATE_LIMITER_EMAIL_FLOWS_ENABLED']) === true) {

package/dist/permissions/cache.js

@@ -1,6 +1,10 @@
+import { useEnv } from '@directus/env';
 import { defineCache } from '@directus/memory';
 import { redisConfigAvailable, useRedis } from '../redis/index.js';
+import { getMilliseconds } from '../utils/get-milliseconds.js';
 const localOnly = redisConfigAvailable() === false;
+const env = useEnv();
+const ttl = getMilliseconds(env['CACHE_SYSTEM_TTL']);
 const config = localOnly
     ? {
         type: 'local',
@@ -11,6 +15,7 @@ const config = localOnly
         redis: {
             namespace: 'permissions',
             redis: useRedis(),
+            ...(ttl !== undefined ? { ttl } : {}),
         },
         local: {
             maxKeys: 100,

package/dist/permissions/modules/fetch-allowed-collections/fetch-allowed-collections.js

@@ -1,6 +1,6 @@
 import { uniq } from 'lodash-es';
-import { fetchPolicies } from '../../lib/fetch-policies.js';
 import { fetchPermissions } from '../../lib/fetch-permissions.js';
+import { fetchPolicies } from '../../lib/fetch-policies.js';
 export async function fetchAllowedCollections({ action, accountability }, { knex, schema }) {
     if (accountability.admin) {
         return Object.keys(schema.collections);

package/dist/permissions/modules/fetch-allowed-field-map/fetch-allowed-field-map.js

@@ -1,6 +1,6 @@
 import { uniq } from 'lodash-es';
-import { fetchPolicies } from '../../lib/fetch-policies.js';
 import { fetchPermissions } from '../../lib/fetch-permissions.js';
+import { fetchPolicies } from '../../lib/fetch-policies.js';
 export async function fetchAllowedFieldMap({ accountability, action }, { knex, schema }) {
     const fieldMap = {};
     if (accountability.admin) {

package/dist/permissions/modules/fetch-inconsistent-field-map/fetch-inconsistent-field-map.js

@@ -1,6 +1,6 @@
-import { uniq, intersection, difference } from 'lodash-es';
-import { fetchPolicies } from '../../lib/fetch-policies.js';
+import { difference, intersection, uniq } from 'lodash-es';
 import { fetchPermissions } from '../../lib/fetch-permissions.js';
+import { fetchPolicies } from '../../lib/fetch-policies.js';
 /**
  * Fetch a field map for fields that may or may not be null based on item-by-item permissions.
  */

package/dist/permissions/modules/process-ast/lib/inject-cases.js

@@ -1,5 +1,5 @@
-import { getUnaliasedFieldKey } from '../../../utils/get-unaliased-field-key.js';
 import { uniq } from 'lodash-es';
+import { getUnaliasedFieldKey } from '../../../utils/get-unaliased-field-key.js';
 import { getCases } from './get-cases.js';
 /**
  * Mutates passed AST

package/dist/permissions/modules/process-ast/process-ast.js

@@ -3,8 +3,8 @@ import { fetchPolicies } from '../../lib/fetch-policies.js';
 import { fieldMapFromAst } from './lib/field-map-from-ast.js';
 import { injectCases } from './lib/inject-cases.js';
 import { collectionsInFieldMap } from './utils/collections-in-field-map.js';
-import { validatePathPermissions } from './utils/validate-path/validate-path-permissions.js';
 import { validatePathExistence } from './utils/validate-path/validate-path-existence.js';
+import { validatePathPermissions } from './utils/validate-path/validate-path-permissions.js';
 export async function processAst(options, context) {
     // FieldMap is a Map of paths in the AST, with each path containing the collection and fields in
     // that collection that the AST path tries to access

package/dist/permissions/modules/process-payload/process-payload.js

@@ -6,8 +6,8 @@ import { fetchPolicies } from '../../lib/fetch-policies.js';
 import { extractRequiredDynamicVariableContext } from '../../utils/extract-required-dynamic-variable-context.js';
 import { fetchDynamicVariableData } from '../../utils/fetch-dynamic-variable-data.js';
 import { contextHasDynamicVariables } from '../process-ast/utils/context-has-dynamic-variables.js';
-import { isFieldNullable } from './lib/is-field-nullable.js';
 import { createCollectionForbiddenError, createFieldsForbiddenError, } from '../process-ast/utils/validate-path/create-error.js';
+import { isFieldNullable } from './lib/is-field-nullable.js';
 /**
  * @note this only validates the top-level fields. The expectation is that this function is called
  * for each level of nested insert separately

package/dist/permissions/modules/validate-access/lib/validate-item-access.d.ts

@@ -6,5 +6,17 @@ export interface ValidateItemAccessOptions {
     collection: string;
     primaryKeys: PrimaryKey[];
     fields?: string[];
+    returnAllowedRootFields?: boolean;
 }
-export declare function validateItemAccess(options: ValidateItemAccessOptions, context: Context): Promise<any>;
+export interface ValidateItemAccessOptionsWithRootFields extends ValidateItemAccessOptions {
+    returnAllowedRootFields: true;
+}
+export interface ValidateItemAccessResult {
+    accessAllowed: boolean;
+    allowedRootFields?: string[];
+}
+export interface ValidateItemAccessResultWithRootFields extends ValidateItemAccessResult {
+    allowedRootFields: string[];
+}
+export declare function validateItemAccess(options: ValidateItemAccessOptionsWithRootFields, context: Context): Promise<ValidateItemAccessResultWithRootFields>;
+export declare function validateItemAccess(options: ValidateItemAccessOptions, context: Context): Promise<ValidateItemAccessResult>;