@easy-cms/core 0.39.0 → 0.41.0

package/dist/index.d.ts

@@ -538,6 +538,40 @@ interface BuiltinApiKeysCollection {
         }
     ];
 }
+/** The built-in media folders (`upload.folders: true`). */
+interface BuiltinMediaFoldersCollection {
+    readonly slug: 'media-folders';
+    readonly fields: readonly [
+        {
+            readonly name: 'name';
+            readonly type: 'text';
+            readonly required: true;
+        },
+        {
+            readonly name: 'parent';
+            readonly type: 'relationship';
+            readonly to: 'media-folders';
+        },
+        {
+            readonly name: 'key';
+            readonly type: 'text';
+        },
+        {
+            readonly name: 'private';
+            readonly type: 'boolean';
+        },
+        {
+            readonly name: 'permissions';
+            readonly type: 'json';
+        }
+    ];
+}
+/** `media-folders` when the config turns folders on. */
+type FoldersOf<C extends Config> = C extends {
+    readonly upload: {
+        readonly folders: true;
+    };
+} ? BuiltinMediaFoldersCollection : never;
 /** `api-keys` when the config turns API keys on. */
 type ApiKeysOf<C extends Config> = C extends {
     readonly apiKeys: true;
@@ -565,7 +599,7 @@ type WithPluginFields<C extends Config, T extends {
     readonly fields: readonly (T['fields'][number] | PluginFields<C, T['slug'], Key>)[];
 };
 /** Every collection of a config, including the built-in ones and those plugins add. */
-type AllCollections<C extends Config> = NonNullable<C['collections']>[number] | BuiltinUsersCollection | BuiltinMediaCollection | ApiKeysOf<C> | PluginCollections<C>;
+type AllCollections<C extends Config> = NonNullable<C['collections']>[number] | BuiltinUsersCollection | BuiltinMediaCollection | ApiKeysOf<C> | FoldersOf<C> | PluginCollections<C>;
 /** The built-in media collection; its documents are typed as `MediaDocument`. */
 interface BuiltinMediaCollection {
     readonly slug: 'media';
@@ -596,7 +630,11 @@ interface MediaDocument {
     width?: number | null;
     height?: number | null;
     alt?: string | null;
-    /** Public URL of the file. */
+    /** Its media folder (`upload.folders`), when it is in one. */
+    folder?: ID | null;
+    /** In a private folder: `url` needs a signed-in user who may see it, or `cms.signedMediaURL()`. */
+    private?: boolean | null;
+    /** URL of the file: public, or for private files the API's, which checks who asks. */
     url: string;
     /** Resized copies, when `upload.imageSizes` is set and sharp is installed. */
     sizes: Record<string, MediaSize>;
@@ -703,7 +741,7 @@ type InferGlobal<T extends FieldsOwner, C extends Config = Config> = Simplify<
 } ? {
     status: 'draft' | 'published';
 } : unknown) & FieldsValue<T['fields'], C>>;
-type CollectionSlug<C extends Config> = NonNullable<C['collections']>[number]['slug'] | 'users' | 'media' | ApiKeysOf<C>['slug'] | PluginCollections<C>['slug'];
+type CollectionSlug<C extends Config> = NonNullable<C['collections']>[number]['slug'] | 'users' | 'media' | ApiKeysOf<C>['slug'] | FoldersOf<C>['slug'] | PluginCollections<C>['slug'];
 type GlobalSlug<C extends Config> = NonNullable<C['globals']>[number]['slug'];
 /** Document type of a collection, e.g. `CollectionDocument<typeof config, 'posts'>`. */
 type CollectionDocument<C extends Config, S extends CollectionSlug<C>> = S extends 'media' ? MediaDocument : InferCollection<CollectionBySlug<C, S>, C>;
@@ -998,6 +1036,35 @@ declare class MediaFolders {
     private rows;
     /** A role's level in a folder (`null`: the top level): the nearest permissions up the tree. */
     private levelIn;
+    /** Whether files in a folder (`null`: the top level) are private: it or a folder above is. */
+    private privateIn;
+    /** Whether files put in this folder are private. */
+    isPrivate(id: ID | null): Promise<boolean>;
+    /** The folder and every folder inside it. */
+    private within;
+    /** Folders whose privacy follows this one: it and those inside, with their privacy now. */
+    subtree(id: ID): Promise<{
+        id: ID;
+        private: boolean;
+    }[]>;
+    /**
+     * The privacy each folder of a subtree would have after a change to its top folder: made
+     * private or public, moved, or (as `private: false`) deleted with its contents moving up.
+     */
+    privacyAfter(id: ID, change: {
+        private?: boolean;
+        parent?: ID | null;
+    }): Promise<{
+        id: ID;
+        private: boolean;
+    }[]>;
+    /**
+     * The folder with this key (`folder: 'banners'` on upload fields), made at the top level when
+     * there is none yet.
+     */
+    keyed(key: string): Promise<ID>;
+    /** Whether a file in `folder` is in the folder with this key, or below it. */
+    inKeyed(key: string, folder: ID | null): Promise<boolean>;
     /** The user's level in a folder (`null`: the top level). */
     level(user: AuthUser | null, id: ID | null): Promise<FolderLevel | 'none'>;
     /**
@@ -1047,6 +1114,28 @@ interface StorageAdapter {
      * (`<api>/media/file/<key>`), as the local adapter does.
      */
     url?(key: string): string | undefined;
+    /**
+     * Lets a browser send a file straight to the storage (large files, past a host's request
+     * limit): where to send it and how. The URL must work for `expiresIn` seconds and accept at
+     * most `size` bytes. Without it, files are uploaded through the server.
+     */
+    uploadURL?(key: string, options: {
+        contentType: string;
+        size: number;
+        expiresIn: number;
+    }): Promise<DirectUpload>;
+    /**
+     * The first `bytes` of a file and its whole size, without reading it all (to check a file
+     * uploaded straight to the storage); `null` when there is no such file. Default: `get`.
+     */
+    getStart?(key: string, bytes: number): Promise<StoredFile | null>;
+}
+/** Where and how a browser sends a file straight to the storage (`StorageAdapter.uploadURL`). */
+interface DirectUpload {
+    readonly url: string;
+    readonly method: 'PUT' | 'POST';
+    /** Headers to send with the file. */
+    readonly headers: Readonly<Record<string, string>>;
 }
 interface LocalStorageOptions {
     /** Directory, relative to the project root. Default `uploads`. */
@@ -1165,6 +1254,11 @@ declare class EasyCMS<C extends Config = Config> {
     readonly auth: Auth;
     /** Where uploaded files are stored. */
     readonly storage: StorageAdapter;
+    /**
+     * Where files in private folders are stored (`upload.privateStorage`, else `storage` when it has
+     * no public URLs); `null` when private folders can't be used.
+     */
+    readonly privateStorage: StorageAdapter | null;
     /** Project root: relative paths in the config (e.g. `admin.modules`) start here. */
     readonly cwd: string;
     /** Roles and their permissions (`auth.rbac`, Settings → Roles). */
@@ -1176,7 +1270,7 @@ declare class EasyCMS<C extends Config = Config> {
     private readonly versions;
     private readonly webhooks;
     private readonly mailer;
-    constructor(config: ResolvedConfig, db: Database, logger?: Logger, storage?: StorageAdapter, cwd?: string);
+    constructor(config: ResolvedConfig, db: Database, logger?: Logger, storage?: StorageAdapter, cwd?: string, privateStorage?: StorageAdapter | null);
     find<S extends Slug<C>>(collection: S, options?: FindOptions): Promise<PaginatedDocs<Doc<C, S>>>;
     findById<S extends Slug<C>>(collection: S, id: ID, options?: ReadOptions): Promise<Doc<C, S> | null>;
     count<S extends Slug<C>>(collection: S, options?: {
@@ -1193,6 +1287,32 @@ declare class EasyCMS<C extends Config = Config> {
         data: Uint8Array;
         name: string;
     }, data?: Record<string, unknown>, options?: DepthOptions): Promise<MediaDocument>;
+    /**
+     * Starts an upload straight to the storage, for files too large to send through the server
+     * (`POST <api>/media/uploads`): checks who uploads what where, as `upload()` does, and returns
+     * a signed ticket and where to send the file. `upload` is `null` when the storage can't take
+     * files directly: send it to `upload()` instead. Then `completeUpload(ticket)`.
+     */
+    createUpload(file: {
+        name: string;
+        size: number;
+        type?: string;
+    }, data?: Record<string, unknown>, options?: AccessOptions): Promise<{
+        ticket: string;
+        upload: DirectUpload | null;
+    }>;
+    /**
+     * Finishes an upload made with `createUpload()` (`POST <api>/media/uploads/complete`): checks
+     * the file in the storage like any upload (its size, and its type from its contents), then
+     * makes its media document. A file that fails is deleted.
+     */
+    completeUpload(ticket: string, options?: DepthOptions): Promise<MediaDocument>;
+    /** Who may upload, and into which folder: `upload()` and direct uploads. */
+    private checkUpload;
+    /** A value with its HMAC (`secret`), for `purpose` only: `<base64url JSON>.<signature>`. */
+    private sign;
+    /** The value of a token made by `sign`, or `undefined` when it isn't genuine. */
+    private verify;
     /**
      * Downloads a file from an `http(s)` link and uploads it like `upload()`. Private network
      * addresses are refused unless `upload.fromURL.allowPrivate`. Calls on behalf of a user (the
@@ -1214,6 +1334,48 @@ declare class EasyCMS<C extends Config = Config> {
     }>;
     /** Public URL of a stored file. */
     mediaURL(key: string): string;
+    /**
+     * A link to a private file that works without signing in until it expires: `expiresIn` in
+     * seconds or as `'30m'`, `'1h'` (the default), `'7d'` (the most). Public files get their usual
+     * URL. `size`: one of the file's resized copies. Links stop working when `secret` changes or
+     * the file stops being private.
+     */
+    signedMediaURL(doc: {
+        filename?: unknown;
+        private?: unknown;
+        sizes?: unknown;
+    }, options?: {
+        expiresIn?: number | string;
+        size?: string;
+    }): string;
+    /** Whether a signed link to a private file is genuine and not expired. */
+    verifyMediaSignature(key: string, expires: string | null, signature: string | null): boolean;
+    private mediaSignature;
+    /**
+     * How many documents use any of these files in a top-level upload field (rich text and fields
+     * inside groups, arrays and blocks are not counted). Drafts count too.
+     */
+    mediaUsage(ids: readonly ID[]): Promise<number>;
+    /** The storage for public files, or for private ones. */
+    storageFor(isPrivate: boolean): StorageAdapter;
+    /**
+     * Copies a file and its resized copies to the other storage under their new names (`.private`
+     * added or removed). Returns the fields to save, and `cleanUp` to delete the old copies once
+     * the document points to the new ones.
+     */
+    private relocate;
+    /** A folder's name, parent and permissions; private only with somewhere private to keep files. */
+    private validateFolder;
+    /**
+     * Refuses a change that would move more than 200 files between storages in one request: they
+     * are copied one by one, which could outlast a serverless function.
+     */
+    private checkMoveLimit;
+    /** After a folder became private or public (or moved): its files follow, in every subfolder. */
+    private settlePrivacy;
+    /** Files at the top level are public. */
+    private settleTopLevel;
+    private settleFiles;
     update<S extends Slug<C>>(collection: S, id: ID, data: Update<C, S>, options?: UpdateOptions): Promise<Doc<C, S>>;
     /**
      * Takes a document off the site: its status becomes `draft`. With versions and drafts, a plain
@@ -1600,6 +1762,14 @@ interface UploadField extends BaseField<'upload', never> {
      * offers only these, and saving refuses others.
      */
     readonly mimeTypes?: readonly string[];
+    /**
+     * With `upload.folders`: the `key` of the media folder this field's files go in, e.g.
+     * `'banners'`. Its picker opens there and its uploads land there; the folder is made when it
+     * is first needed.
+     */
+    readonly folder?: string;
+    /** With `folder`: only files in that folder (and its subfolders) may be chosen. */
+    readonly folderOnly?: boolean;
 }
 interface FilterOptionsArgs {
     /** The document being edited; `undefined` while it is being created. */
@@ -2248,6 +2418,13 @@ interface UploadConfig {
      * `auth.rbac`, admins can also choose which roles see and change each folder. Off by default.
      */
     readonly folders?: boolean;
+    /**
+     * Where files in private folders are kept: never served publicly, only through the API to
+     * users who may see them or with `cms.signedMediaURL()`. Default: `storage`, when it has no
+     * public URL (the local disk, Netlify Blobs); a storage with public URLs (S3 with `publicUrl`,
+     * a public Vercel Blob store) needs one, e.g. `vercelBlobStorage({ access: 'private' })`.
+     */
+    readonly privateStorage?: StorageAdapter;
 }
 interface RoutesConfig {
     /** Where the REST API is served. Default `/api/cms`. */
@@ -2507,7 +2684,7 @@ interface ResolvedConfig extends Omit<Config, 'cors' | 'localization' | 'routes'
     readonly localization: Required<LocalizationConfig> | null;
     readonly routes: Required<RoutesConfig>;
     readonly admin: Required<AdminConfig>;
-    readonly upload: Required<Omit<UploadConfig, 'storage' | 'fromURL'>> & Pick<UploadConfig, 'storage' | 'fromURL'>;
+    readonly upload: Required<Omit<UploadConfig, 'storage' | 'fromURL' | 'privateStorage'>> & Pick<UploadConfig, 'storage' | 'fromURL' | 'privateStorage'>;
     readonly auth: Required<AuthConfig>;
     /** `false` without an audit log. */
     readonly audit: Required<AuditConfig> | false;
@@ -2536,6 +2713,11 @@ type ApiKeyGlobalOperation = (typeof API_KEY_GLOBAL_OPERATIONS)[number];
 interface ApiKeyPermissions {
     readonly collections?: Readonly<Record<string, readonly ApiKeyOperation[]>>;
     readonly globals?: Readonly<Record<string, readonly ApiKeyGlobalOperation[]>>;
+    /**
+     * With `upload.folders`: the media folders (ids) the key may use, with their subfolders. Empty
+     * or missing: every folder.
+     */
+    readonly folders?: readonly (string | number)[];
 }
 /** Set on `AuthUser.apiKey` when a request authenticated with an API key. */
 interface ApiKeyContext {
@@ -2662,6 +2844,8 @@ interface Reference {
     readonly filterOptions?: FilterOptions;
     /** The upload's `mimeTypes`, checked when saving. */
     readonly mimeTypes?: readonly string[];
+    /** The upload's `folder` with `folderOnly`: the file must be in it, checked when saving. */
+    readonly folderOnly?: string;
 }
 interface ValidateOptions {
     readonly operation: 'create' | 'update';
@@ -2845,6 +3029,11 @@ interface AdminField {
     to?: string;
     /** An upload's allowed file types, e.g. `image/*`. */
     mimeTypes?: string[];
+    /** An upload's media folder (`folder`): where its picker opens; `only`: nowhere else. */
+    folder?: {
+        id: ID;
+        only: boolean;
+    };
     /** A relationship with `filterOptions`: the picker asks the server which documents fit. */
     filtered?: boolean;
     from?: string;
@@ -2971,6 +3160,7 @@ interface AdminSchema {
      */
     folders?: {
         permissions: boolean;
+        private: boolean;
     };
     /** Which saved deliveries the admin can show (webhooks, emails), for users who may see them. */
     deliveries?: {
@@ -3105,4 +3295,4 @@ declare function validateConfig(config: Config): ConfigIssue[];
 /** The version of `@easy-cms/core`, set when the package is built. */
 declare const VERSION: string;
 
-export { ADMIN_ICONS, API_KEYS, API_KEY_GLOBAL_OPERATIONS, API_KEY_OPERATIONS, type Access, type AccessArgs, type AccessOptions, type AdminAttention, type AdminBackup, type AdminBackups, type AdminBrand, type AdminCollection, type AdminComponent, type AdminComponentRef, type AdminConfig, type AdminDeliveries, type AdminDelivery, type AdminEmail, type AdminEmailDelivery, type AdminField, type AdminGlobal, type AdminIcon, type AdminLocale, type AdminPage, type AdminPageRef, type AdminRole, type AdminRoleChange, type AdminRoleField, type AdminRoleTarget, type AdminRoleView, type AdminRoles, type AdminSchema, type AdminSso, type AdminStatus, type AdminViewAccess, type AdminWebhookDelivery, type AdminWidgetRef, type AfterChangeHook, type AfterDeleteHook, type AfterReadHook, type ApiKeyContext, type ApiKeyGlobalOperation, type ApiKeyOperation, type ApiKeyPermissions, type ArrayField, type AuditChange, type AuditConfig, type AuditEntry, AuditLog, type AuditPage, type AuditVerification, Auth, type AuthConfig, type AuthProvider, type AuthProviderProfile, type AuthProviderRequest, type AuthUser, BUILTIN_COLLECTIONS, type BackupState, type BackupsConfig, type BeforeChangeHook, type BeforeDeleteHook, type BeforeValidateHook, type Block, type BlocksField, type BooleanField, type BuiltinApiKeysCollection, type BuiltinMediaCollection, type BuiltinUsersCollection, type BundleHints, CONFIG_FILE_NAMES, CSRF_COOKIE, CSRF_HEADER, type CliCommand, type CollectionAccess, type CollectionAdmin, type CollectionConfig, type CollectionDocument, type CollectionHooks, type CollectionListAdmin, type CollectionSlug, type Config, ConfigError, type ConfigIssue, type ContainerAdmin, type CopyProgress, type CopyResult, type CreateEasyCMSOptions, type CreateInput, type CreateMigrationResult, type CustomField, type CustomFieldTypes, DEFAULT_ADMIN_PATH, DEFAULT_API_PATH, DEFAULT_DEPTH, DEFAULT_MAX_FILE_SIZE, DEFAULT_MAX_VERSIONS, DEFAULT_PASSWORD_EMAILS, DEFAULT_TOKEN_EXPIRATION, type DashboardWidget, type Database, type DatabaseAdapter, type DatabaseInitArgs, type DatabaseTransfer, type DateField, type DeliveryKind, type DeliveryState, type DepthOptions, type DocumentOf, EXTENSIONS, EasyCMS, EasyCMSError, type EmailAdapter, type EmailCheck, type EmailField, type EmailMessage, type EmailSetting, type Endpoint, type EndpointRequest, FIELD_TYPES, FIELD_TYPE_BASES, FOLDER_LEVELS, type Field, type FieldAccess, type FieldAccessFn, type FieldAdmin, type FieldError, type FieldRule, type FieldType, type FieldTypeBase, type FieldTypeDefinition, type FieldTypeValidateContext, type FieldValidate, type FieldValidateContext, type FieldValue, type FieldsInput, type FieldsValue, type FilterOptions, type FilterOptionsArgs, type FindArgs, type FindOptions, type FolderLevel, type FolderPermissions, ForbiddenError, type GlobalAccess, type GlobalConfig, type GlobalDocument, type GlobalHooks, type GlobalInput, type GlobalSlug, type GroupField, type ID, INTERNAL_COLLECTIONS, type ImageSize, type InferCollection, type InferGlobal, type JsonField, type Label, type LivePreview, type LoadConfigOptions, type LocalStorageOptions, type LocalizationConfig, type Logger, type LoginArgs, MAX_DEPTH, MEDIA, MEDIA_FOLDERS, MIME_GROUPS, MIN_PASSWORD_LENGTH, MIN_SECRET_LENGTH, type MediaDocument, MediaFolders, type MediaSize, type MigrationInfo, NotFoundError, type NumberField, type Operation, type PaginatedDocs, type PasswordEmail, type PasswordEmailArgs, type PasswordEmailFn, type PasswordLinkOptions, PayloadTooLargeError, type Plugin, type PluginInfo, type PluginTypes, type PreviewTarget, type PreviewURL, QueryError, ROLE_OPERATIONS, type RawDocument, type ReadOptions, type RelationshipField, type ResolvedConfig, type RestHandler, type RestHandlerOptions, type RichTextDocument, type RichTextField, type Role, type RoleOperation, type RolePermissions, Roles, type RoutesConfig, SESSION_COOKIE, SSO_COOKIE, type ScheduledJob, SchemaError, type SchemaMode, type SelectField, type SelectOption, type Session, type SlugField, type SlugOf, type SsoOutcome, type SsoProviderRef, type StorageAdapter, type StoredFile, type TextField, type TextareaField, TooManyRequestsError, type TypedPlugin, UnauthorizedError, type UpdateInput, type UpdateOptions, type UploadConfig, type UploadField, type UploadFromURLConfig, type UserIdentity, VERSION, ValidationError, type Version, type VersionSummary, type VersionsConfig, WEBHOOK_EVENTS, type WebhookConfig, type WebhookEvent, type WebhookPayload, type Where, type WhereOperators, anyone, applyDefaults, applyPlugins, configSignature, consoleEmail, consoleLogger, copyDatabase, createEasyCMS, createRestHandler, createRootEndpointHandler, defineConfig, defineFieldType, definePlugin, expandMimeTypes, fillMissing, findConfigFile, generateSlugs, generateTypes, hasRows, hashPassword, imageDimensions, importConfig, isAdmin, isHasMany, isLoggedIn, keyAllows, loadConfig, localStorage, mergeForUpdate, mimeAllowed, mimeAllowedBy, parseId, populate, readCookie, resolveAdminModule, resolveConfig, rowFields, silentLogger, singularize, slugify, sniffMimeType, validateConfig, validateFields, verifyPassword, writeBackupFile };
+export { ADMIN_ICONS, API_KEYS, API_KEY_GLOBAL_OPERATIONS, API_KEY_OPERATIONS, type Access, type AccessArgs, type AccessOptions, type AdminAttention, type AdminBackup, type AdminBackups, type AdminBrand, type AdminCollection, type AdminComponent, type AdminComponentRef, type AdminConfig, type AdminDeliveries, type AdminDelivery, type AdminEmail, type AdminEmailDelivery, type AdminField, type AdminGlobal, type AdminIcon, type AdminLocale, type AdminPage, type AdminPageRef, type AdminRole, type AdminRoleChange, type AdminRoleField, type AdminRoleTarget, type AdminRoleView, type AdminRoles, type AdminSchema, type AdminSso, type AdminStatus, type AdminViewAccess, type AdminWebhookDelivery, type AdminWidgetRef, type AfterChangeHook, type AfterDeleteHook, type AfterReadHook, type ApiKeyContext, type ApiKeyGlobalOperation, type ApiKeyOperation, type ApiKeyPermissions, type ArrayField, type AuditChange, type AuditConfig, type AuditEntry, AuditLog, type AuditPage, type AuditVerification, Auth, type AuthConfig, type AuthProvider, type AuthProviderProfile, type AuthProviderRequest, type AuthUser, BUILTIN_COLLECTIONS, type BackupState, type BackupsConfig, type BeforeChangeHook, type BeforeDeleteHook, type BeforeValidateHook, type Block, type BlocksField, type BooleanField, type BuiltinApiKeysCollection, type BuiltinMediaCollection, type BuiltinMediaFoldersCollection, type BuiltinUsersCollection, type BundleHints, CONFIG_FILE_NAMES, CSRF_COOKIE, CSRF_HEADER, type CliCommand, type CollectionAccess, type CollectionAdmin, type CollectionConfig, type CollectionDocument, type CollectionHooks, type CollectionListAdmin, type CollectionSlug, type Config, ConfigError, type ConfigIssue, type ContainerAdmin, type CopyProgress, type CopyResult, type CreateEasyCMSOptions, type CreateInput, type CreateMigrationResult, type CustomField, type CustomFieldTypes, DEFAULT_ADMIN_PATH, DEFAULT_API_PATH, DEFAULT_DEPTH, DEFAULT_MAX_FILE_SIZE, DEFAULT_MAX_VERSIONS, DEFAULT_PASSWORD_EMAILS, DEFAULT_TOKEN_EXPIRATION, type DashboardWidget, type Database, type DatabaseAdapter, type DatabaseInitArgs, type DatabaseTransfer, type DateField, type DeliveryKind, type DeliveryState, type DepthOptions, type DirectUpload, type DocumentOf, EXTENSIONS, EasyCMS, EasyCMSError, type EmailAdapter, type EmailCheck, type EmailField, type EmailMessage, type EmailSetting, type Endpoint, type EndpointRequest, FIELD_TYPES, FIELD_TYPE_BASES, FOLDER_LEVELS, type Field, type FieldAccess, type FieldAccessFn, type FieldAdmin, type FieldError, type FieldRule, type FieldType, type FieldTypeBase, type FieldTypeDefinition, type FieldTypeValidateContext, type FieldValidate, type FieldValidateContext, type FieldValue, type FieldsInput, type FieldsValue, type FilterOptions, type FilterOptionsArgs, type FindArgs, type FindOptions, type FolderLevel, type FolderPermissions, ForbiddenError, type GlobalAccess, type GlobalConfig, type GlobalDocument, type GlobalHooks, type GlobalInput, type GlobalSlug, type GroupField, type ID, INTERNAL_COLLECTIONS, type ImageSize, type InferCollection, type InferGlobal, type JsonField, type Label, type LivePreview, type LoadConfigOptions, type LocalStorageOptions, type LocalizationConfig, type Logger, type LoginArgs, MAX_DEPTH, MEDIA, MEDIA_FOLDERS, MIME_GROUPS, MIN_PASSWORD_LENGTH, MIN_SECRET_LENGTH, type MediaDocument, MediaFolders, type MediaSize, type MigrationInfo, NotFoundError, type NumberField, type Operation, type PaginatedDocs, type PasswordEmail, type PasswordEmailArgs, type PasswordEmailFn, type PasswordLinkOptions, PayloadTooLargeError, type Plugin, type PluginInfo, type PluginTypes, type PreviewTarget, type PreviewURL, QueryError, ROLE_OPERATIONS, type RawDocument, type ReadOptions, type RelationshipField, type ResolvedConfig, type RestHandler, type RestHandlerOptions, type RichTextDocument, type RichTextField, type Role, type RoleOperation, type RolePermissions, Roles, type RoutesConfig, SESSION_COOKIE, SSO_COOKIE, type ScheduledJob, SchemaError, type SchemaMode, type SelectField, type SelectOption, type Session, type SlugField, type SlugOf, type SsoOutcome, type SsoProviderRef, type StorageAdapter, type StoredFile, type TextField, type TextareaField, TooManyRequestsError, type TypedPlugin, UnauthorizedError, type UpdateInput, type UpdateOptions, type UploadConfig, type UploadField, type UploadFromURLConfig, type UserIdentity, VERSION, ValidationError, type Version, type VersionSummary, type VersionsConfig, WEBHOOK_EVENTS, type WebhookConfig, type WebhookEvent, type WebhookPayload, type Where, type WhereOperators, anyone, applyDefaults, applyPlugins, configSignature, consoleEmail, consoleLogger, copyDatabase, createEasyCMS, createRestHandler, createRootEndpointHandler, defineConfig, defineFieldType, definePlugin, expandMimeTypes, fillMissing, findConfigFile, generateSlugs, generateTypes, hasRows, hashPassword, imageDimensions, importConfig, isAdmin, isHasMany, isLoggedIn, keyAllows, loadConfig, localStorage, mergeForUpdate, mimeAllowed, mimeAllowedBy, parseId, populate, readCookie, resolveAdminModule, resolveConfig, rowFields, silentLogger, singularize, slugify, sniffMimeType, validateConfig, validateFields, verifyPassword, writeBackupFile };