@easy-cms/core 0.43.0 → 0.45.0

package/dist/index.d.ts

@@ -6,8 +6,19 @@ interface AuthUser {
     readonly id: ID;
     readonly email: string;
     readonly role: Role;
+    /**
+     * Set by `onRequest` (e.g. a multi-tenant plugin) when `role` holds only in part of the site,
+     * such as one tenant: an `admin` there administers that part, not the whole system (Settings,
+     * backups, roles, other users' API keys).
+     */
+    readonly scoped?: boolean;
     readonly [field: string]: unknown;
 }
+/**
+ * An admin of the whole system: role `admin`, signed in (not an API key), and not an admin of a
+ * part only (`scoped`).
+ */
+declare const isSystemAdmin: (user: AuthUser | null | undefined) => boolean;
 interface WhereOperators {
     readonly equals?: unknown;
     readonly not_equals?: unknown;
@@ -26,9 +37,16 @@ type Where = {
 } & {
     readonly [field: string]: WhereOperators | readonly Where[] | undefined;
 };
+/**
+ * What a request is about besides its user, e.g. the site or tenant it works in: set by
+ * `onRequest` in the config (usually a plugin's), or passed to the Local API as `context`.
+ */
+type RequestContext = Readonly<Record<string, unknown>>;
 interface AccessArgs {
     /** `null` when the request is not logged in. */
     readonly user: AuthUser | null;
+    /** The request's context (`onRequest`), `{}` when there is none. */
+    readonly context?: RequestContext;
     readonly id?: ID;
     readonly data?: Readonly<Record<string, unknown>>;
 }
@@ -1069,9 +1087,15 @@ declare class MediaFolders {
      * The folder with this key (`folder: 'banners'` on upload fields), made at the top level when
      * there is none yet.
      */
-    keyed(key: string): Promise<ID>;
+    /**
+     * The folder with this key, made when first needed. `scope`: the values the key is unique
+     * within (`uniqueWithin` of the `key` field, e.g. the tenant), given to a new folder too.
+     * `null` when there is none and `create` is false.
+     */
+    keyed(key: string, scope?: Readonly<Record<string, unknown>>): Promise<ID>;
+    keyed(key: string, scope: Readonly<Record<string, unknown>>, create: boolean): Promise<ID | null>;
     /** Whether a file in `folder` is in the folder with this key, or below it. */
-    inKeyed(key: string, folder: ID | null): Promise<boolean>;
+    inKeyed(key: string, folder: ID | null, scope?: Readonly<Record<string, unknown>>): Promise<boolean>;
     /** The user's level in a folder (`null`: the top level). */
     level(user: AuthUser | null, id: ID | null): Promise<FolderLevel | 'none'>;
     /**
@@ -1191,6 +1215,11 @@ interface AccessOptions {
     readonly overrideAccess?: boolean;
     /** The user to check access for. `null` = not logged in. */
     readonly user?: AuthUser | null;
+    /**
+     * What the call is about besides its user, e.g. the tenant (see `onRequest`): given to access
+     * functions, hooks and `filterOptions`.
+     */
+    readonly context?: RequestContext;
 }
 interface DepthOptions extends AccessOptions {
     /** How many levels of relationships to populate. Default 1, maximum 3. */
@@ -1278,6 +1307,20 @@ declare class EasyCMS<C extends Config = Config> {
     private readonly webhooks;
     private readonly mailer;
     constructor(config: ResolvedConfig, db: Database, logger?: Logger, storage?: StorageAdapter, cwd?: string, privateStorage?: StorageAdapter | null);
+    /**
+     * The user and context of a request, as the REST API works them out: its session cookie or
+     * Bearer token, then `onRequest`. For framework routes and server code that act for a visitor;
+     * pass both to the Local API with `overrideAccess: false`.
+     */
+    forRequest(request: Request | Headers): Promise<{
+        user: AuthUser | null;
+        context: RequestContext;
+    }>;
+    /** @internal `onRequest` of the config, for a request whose user is known. */
+    applyOnRequest(headers: Headers, url: URL | undefined, user: AuthUser | null): Promise<{
+        user: AuthUser | null;
+        context: RequestContext;
+    }>;
     find<S extends Slug<C>>(collection: S, options?: FindOptions): Promise<PaginatedDocs<Doc<C, S>>>;
     findById<S extends Slug<C>>(collection: S, id: ID, options?: ReadOptions): Promise<Doc<C, S> | null>;
     count<S extends Slug<C>>(collection: S, options?: {
@@ -1442,6 +1485,16 @@ declare class EasyCMS<C extends Config = Config> {
         transferTo?: ID | null;
     }): Promise<Doc<C, S>>;
     findGlobal<S extends GSlug<C>>(slug: S, options?: ReadOptions): Promise<GDoc<C, S>>;
+    /** A global as stored under `key` (see `globalKey`); empty when there is no key. */
+    private readGlobal;
+    /**
+     * Where a global is kept: its slug, or `<slug>@<scope>` for globals with `scope` (e.g. one per
+     * tenant). `null` when the call has no scope: reads give the global empty. `scope` is given by
+     * scheduled jobs, which have no request.
+     */
+    private globalKey;
+    /** `globalKey` for changes, which need a scope. */
+    private writeKey;
     updateGlobal<S extends GSlug<C>>(slug: S, data: GInput<C, S>, options?: DepthOptions): Promise<GDoc<C, S>>;
     /** Takes a global off the site (`status: 'draft'`). See `unpublish`. */
     unpublishGlobal<S extends GSlug<C>>(slug: S, options?: DepthOptions): Promise<GDoc<C, S>>;
@@ -1463,7 +1516,7 @@ declare class EasyCMS<C extends Config = Config> {
      * What `user` may do with one document. Resolves `where`-style access
      * against the document, so the admin UI can hide actions precisely.
      */
-    documentPermissions(collection: Slug<C>, id: ID, user: AuthUser | null): Promise<{
+    documentPermissions(collection: Slug<C>, id: ID, user: AuthUser | null, context?: RequestContext): Promise<{
         update: boolean;
         delete: boolean;
     }>;
@@ -1626,6 +1679,23 @@ declare class EasyCMS<C extends Config = Config> {
     private makeSlugsUnique;
     private checkUnique;
     private isTaken;
+    /**
+     * What folder keys are unique within for a call (`uniqueWithin` of the `key` field of media
+     * folders, e.g. the tenant): the value a folder made by this call would get from its hooks.
+     */
+    private folderScope;
+    /**
+     * Where a unique field's values must differ for a call (`uniqueWithin`, e.g. the tenant): the
+     * value a document created by this call would get there from its hooks, as `{ [field]: value }`;
+     * `{}` when the field is unique everywhere. For finding documents by such a field, e.g. a page
+     * by its path in the current tenant.
+     */
+    uniqueScope(collection: string, field: string, options?: Pick<AccessOptions, 'user' | 'context'>): Promise<Record<string, unknown>>;
+    /**
+     * @internal The id of the media folder with this key (`folder` of upload fields), made when
+     * needed; `null` when the call has no scope to make it in (e.g. all tenants) and none exists.
+     */
+    keyedFolder(key: string, options?: AccessOptions): Promise<ID | null>;
     /** Each reference is one its relationship's `filterOptions` allow. */
     private checkFilterOptions;
     private checkReferences;
@@ -1664,6 +1734,23 @@ interface FieldAdmin {
     readonly after?: readonly AdminComponent[];
     /** Shows the value in the admin's lists (e.g. a color swatch). Default: the plain value. */
     readonly cell?: AdminComponent;
+    /**
+     * A column of the list at first (each user can change it): `true`, or per request, e.g.
+     * only when the admin shows every tenant.
+     */
+    readonly column?: boolean | ((args: AdminFieldArgs) => boolean | Promise<boolean>);
+    /** Relationships: offer to create the related document in place. Default true. */
+    readonly allowCreate?: boolean;
+    /**
+     * The value a new document's form starts with, worked out for each user, e.g. from the
+     * request's context. The server's own default (`defaultValue`, hooks) still applies.
+     */
+    readonly defaultValue?: (args: AdminFieldArgs) => unknown;
+}
+/** What per-request admin options of a field receive. */
+interface AdminFieldArgs {
+    readonly user: AuthUser;
+    readonly context: RequestContext;
 }
 /**
  * Field types that packages add (`fieldTypes` in the config), for the types inferred from the
@@ -1693,6 +1780,12 @@ interface BaseField<TType extends string, TValue> {
     readonly label?: Label;
     readonly required?: boolean;
     readonly unique?: boolean;
+    /**
+     * With `unique` (or on a slug field): a sibling field (e.g. `parent` or `tenant`), or several,
+     * whose documents only need to differ among themselves, so `/about/team` and `/careers/team`
+     * can both be `team`. Single, unlocalized relationship, select, text or number fields.
+     */
+    readonly uniqueWithin?: string | readonly string[];
     readonly index?: boolean;
     readonly defaultValue?: TValue;
     readonly validate?: FieldValidate<TValue>;
@@ -1743,11 +1836,6 @@ interface SelectField extends BaseField<'select', string | readonly string[]> {
 interface SlugField extends BaseField<'slug', string> {
     /** Name of a sibling `text` field to generate the slug from. */
     readonly from?: string;
-    /**
-     * Name of a sibling field (e.g. `parent`): slugs then only need to differ among documents
-     * with the same value there, so `/about/team` and `/careers/team` can both be `team`.
-     */
-    readonly uniqueWithin?: string;
 }
 /** Tiptap / ProseMirror JSON document. */
 interface RichTextDocument {
@@ -1777,12 +1865,16 @@ interface UploadField extends BaseField<'upload', never> {
     readonly folder?: string;
     /** With `folder`: only files in that folder (and its subfolders) may be chosen. */
     readonly folderOnly?: boolean;
+    /** Which media documents may be chosen, as for relationships: offered and checked on save. */
+    readonly filterOptions?: FilterOptions;
 }
 interface FilterOptionsArgs {
     /** The document being edited; `undefined` while it is being created. */
     readonly id: ID | undefined;
     readonly user: AuthUser | null;
     readonly cms: EasyCMS;
+    /** The request's context (`onRequest`), `{}` when there is none. */
+    readonly context: RequestContext;
 }
 /**
  * Which documents a relationship may point to: a `where` on the target collection, or `true`
@@ -1826,6 +1918,8 @@ interface BlocksField extends BaseField<'blocks', never> {
     readonly minRows?: number;
     readonly maxRows?: number;
 }
+/** The fields `uniqueWithin` names, as a list. */
+declare const uniqueWithinOf: (field: Field) => readonly string[];
 /** Fields with `hasMany`: their value is a list of options, documents or files. */
 declare const isHasMany: (field: Field) => boolean;
 /** Whether a MIME type is one of `patterns` (`image/*` matches every image). */
@@ -1846,6 +1940,12 @@ interface AuditConfig {
     readonly values?: boolean;
     /** Failed logins within an hour that the dashboard warns about. Default 20. */
     readonly failedLogins?: number;
+    /**
+     * The part of the site an entry belongs to, from the request's context, e.g. its tenant
+     * (usually set by a plugin). Users whose role holds in a part only (`scoped`) see that part's
+     * entries; others see the chosen part's, or all.
+     */
+    readonly scope?: ((context: RequestContext) => string | null | undefined) | null;
 }
 /** A field that changed: values before and after, unless they are not kept. */
 interface AuditChange {
@@ -1893,6 +1993,8 @@ interface AuditFilter {
     /** ISO dates. */
     from?: string | null;
     to?: string | null;
+    /** Only entries of this part of the site (`scope`). */
+    scope?: string | null;
 }
 /** `POST <api>/admin/audit/verify`. */
 interface AuditVerification {
@@ -1929,12 +2031,14 @@ declare class AuditLog {
         email?: string | null;
         changes?: AuditChange[] | null;
         detail?: Record<string, unknown> | null;
+        /** The call's context, when it is not the request's. */
+        context?: RequestContext;
     }): Promise<void>;
     /**
      * A change to a document or global: what changed between `before` and `after`. Internal
      * collections (sessions, versions…) are not logged.
      */
-    content(config: CollectionConfig | GlobalConfig, global: boolean, action: string, after: Record<string, unknown> | undefined, before: Record<string, unknown> | undefined, user: AuthUser | null): Promise<void>;
+    content(config: CollectionConfig | GlobalConfig, global: boolean, action: string, after: Record<string, unknown> | undefined, before: Record<string, unknown> | undefined, user: AuthUser | null, context?: RequestContext): Promise<void>;
     /** Fields whose stored value changed. Hidden ones never (the password only as "changed"). */
     diff(fields: readonly Field[], before: Record<string, unknown>, after: Record<string, unknown>): AuditChange[];
     list(filter: AuditFilter, page?: number): Promise<AuditPage>;
@@ -1959,6 +2063,8 @@ declare class AuditLog {
         invalid: number;
         at: string;
     })[]>;
+    /** The part of the site a context is in (`scope`), or `null`. */
+    scopeOf(context: RequestContext | undefined): string | null;
     private sign;
     private lastVerification;
     private where;
@@ -2170,6 +2276,8 @@ interface HookBase {
     readonly cms: EasyCMS;
     /** Slug of the collection or global. */
     readonly slug: string;
+    /** The request's context (`onRequest`, or `context` of a Local API call); `{}` when there is none. */
+    readonly context: RequestContext;
 }
 type BeforeValidateHook = (args: HookBase & {
     data: Data$1;
@@ -2247,6 +2355,16 @@ interface CollectionAdmin extends ContainerAdmin {
      * `author`, for roles given "own documents only". Default: who created it (`createdBy`).
      */
     readonly ownerField?: string;
+    /**
+     * Deleting asks more than "Are you sure?", for documents that take much with them (e.g. a
+     * tenant): `typeTitle` has the user type the document's title; `impact` is a path under the
+     * API, called with `?id=`, that returns `{ message }` (a label) saying what will be lost.
+     * Documents are then deleted one at a time, not from a selection.
+     */
+    readonly confirmDelete?: {
+        readonly typeTitle?: boolean;
+        readonly impact?: string;
+    };
 }
 interface CollectionListAdmin {
     /**
@@ -2307,6 +2425,15 @@ interface GlobalConfig {
     readonly preview?: PreviewURL;
     readonly access?: GlobalAccess;
     readonly hooks?: GlobalHooks;
+    /**
+     * One value per scope, e.g. per tenant (usually set by a plugin): the scope of a call, from its
+     * context (`onRequest`). A string keeps a value of its own; `undefined` the shared value; `null`
+     * means the call has none, so reads give the global empty and changes are refused.
+     */
+    readonly scope?: (args: {
+        readonly context: RequestContext;
+        readonly user: AuthUser | null;
+    }) => string | null | undefined;
     /** Custom admin components. */
     readonly admin?: ContainerAdmin;
 }
@@ -2382,6 +2509,23 @@ interface AdminConfig {
     readonly pages?: readonly AdminPage[];
     /** Panels on the dashboard, after the built-in ones. */
     readonly dashboard?: readonly DashboardWidget[];
+    /**
+     * A choice at the top of the menu that applies to everything in the admin, e.g. the tenant
+     * (usually set by a plugin). The choice is kept in a cookie, which every request of the admin
+     * sends; `onRequest` reads it.
+     */
+    readonly switcher?: AdminSwitcher | null;
+}
+/** See `AdminConfig.switcher`. */
+interface AdminSwitcher {
+    /** Cookie that keeps the choice, e.g. `ecms-tenant`. */
+    readonly cookie: string;
+    readonly label: Label;
+    /**
+     * Path under the API that lists the choices for the logged-in user:
+     * `{ options: [{ value, label }], all?: Label }`, with `all` to offer "all of them" (value `*`).
+     */
+    readonly options: string;
 }
 interface ImageSize {
     /** Key in `media.sizes`, e.g. `thumbnail`. */
@@ -2497,6 +2641,24 @@ interface AuthConfig {
         readonly passwordChanged?: PasswordEmailFn;
     };
 }
+/** What `onRequest` receives. */
+interface OnRequestArgs {
+    readonly headers: Headers;
+    /** The request's URL; `undefined` when only headers are known (`cms.forRequest(headers)`). */
+    readonly url: URL | undefined;
+    /** The user of the session or API key, before `onRequest` changes it; `null` when anonymous. */
+    readonly user: AuthUser | null;
+    readonly cms: EasyCMS;
+}
+/**
+ * Runs on each API request (REST, plugin endpoints, `cms.forRequest`) after the user is known:
+ * returns the request's `context` (e.g. the tenant it works in, from a header) and may change the
+ * user (e.g. their role in that tenant, `scoped`). Plugins that set it call the one before.
+ */
+type OnRequest = (args: OnRequestArgs) => MaybePromise<{
+    readonly user?: AuthUser | null;
+    readonly context?: RequestContext;
+} | undefined>;
 /** What an endpoint's handler receives. */
 interface EndpointRequest {
     readonly request: Request;
@@ -2505,6 +2667,8 @@ interface EndpointRequest {
     readonly params: Readonly<Record<string, string>>;
     /** The logged-in user (session cookie or Bearer token), or `null`. */
     readonly user: AuthUser | null;
+    /** The request's context (`onRequest`): pass it to the Local API with `user`. */
+    readonly context: RequestContext;
     /** The client's IP address, when the adapter knows it (e.g. to rate-limit a public form). */
     readonly ip: string | undefined;
     /** The Local API. Pass `{ user, overrideAccess: false }` to apply the user's access rules. */
@@ -2656,6 +2820,8 @@ interface Config {
     readonly endpoints?: readonly Endpoint[];
     /** Extra `easy-cms <name>` CLI commands, e.g. from plugins. */
     readonly commands?: readonly CliCommand[];
+    /** The request's context and user, worked out on each API request (usually by a plugin). */
+    readonly onRequest?: OnRequest;
     /**
      * Field types from packages, e.g. `color` from `@easy-cms/fields`: fields then use
      * `type: 'color'`. See `defineFieldType`.
@@ -2725,6 +2891,11 @@ interface ApiKeyPermissions {
      * or missing: every folder.
      */
     readonly folders?: readonly (string | number)[];
+    /**
+     * The context the key was created in (`onRequest`, e.g. its tenant), kept for good: requests
+     * with the key get it as `user.apiKey.permissions.context`. Set by Easy CMS, not by input.
+     */
+    readonly context?: RequestContext;
 }
 /** Set on `AuthUser.apiKey` when a request authenticated with an API key. */
 interface ApiKeyContext {
@@ -3094,6 +3265,10 @@ interface AdminField {
         after?: AdminComponentRef[];
         cell?: AdminComponentRef;
     };
+    /** A column of the list at first (`admin.column`). */
+    column?: boolean;
+    /** A relationship that offers no "Create" in place (`admin.allowCreate: false`). */
+    noCreate?: boolean;
     /** A field of an added type (`fieldTypes`), e.g. `color`; `type` is the base it's stored as. */
     customType?: string;
 }
@@ -3131,6 +3306,11 @@ interface AdminCollection {
     };
     /** With `auth.rbac`: the field naming a document's owner (`createdBy` or `admin.ownerField`). */
     owner?: string;
+    /** Deleting asks to type the title, and says what goes too (`admin.confirmDelete`). */
+    confirmDelete?: {
+        typeTitle?: boolean;
+        impact?: string;
+    };
 }
 interface AdminGlobal {
     slug: string;
@@ -3167,6 +3347,8 @@ interface AdminWidgetRef {
 }
 interface AdminSchema {
     locale: AdminLocale;
+    /** A choice for the whole admin, e.g. the tenant (`admin.switcher`). */
+    switcher: AdminSwitcher | null;
     /** Admins can email users links to set their password (needs `email` and `serverURL`). */
     passwordLinks: boolean;
     /** Menu order of collections (`admin.menu`); unlisted ones follow. */
@@ -3330,4 +3512,4 @@ declare function validateConfig(config: Config): ConfigIssue[];
 /** The version of `@easy-cms/core`, set when the package is built. */
 declare const VERSION: string;
 
-export { ADMIN_ICONS, API_KEYS, API_KEY_GLOBAL_OPERATIONS, API_KEY_OPERATIONS, type Access, type AccessArgs, type AccessOptions, type AdminAttention, type AdminBackup, type AdminBackups, type AdminBrand, type AdminCollection, type AdminComponent, type AdminComponentRef, type AdminConfig, type AdminDeliveries, type AdminDelivery, type AdminEmail, type AdminEmailDelivery, type AdminField, type AdminGlobal, type AdminIcon, type AdminLocale, type AdminPage, type AdminPageRef, type AdminRole, type AdminRoleChange, type AdminRoleField, type AdminRoleTarget, type AdminRoleView, type AdminRoles, type AdminSchema, type AdminSso, type AdminStatus, type AdminViewAccess, type AdminWebhookDelivery, type AdminWidgetRef, type AfterChangeHook, type AfterDeleteHook, type AfterReadHook, type ApiHandlerOptions, type ApiKeyContext, type ApiKeyGlobalOperation, type ApiKeyOperation, type ApiKeyPermissions, type ArrayField, type AuditChange, type AuditConfig, type AuditEntry, AuditLog, type AuditPage, type AuditVerification, Auth, type AuthConfig, type AuthProvider, type AuthProviderProfile, type AuthProviderRequest, type AuthUser, BUILTIN_COLLECTIONS, type BackupState, type BackupsConfig, type BeforeChangeHook, type BeforeDeleteHook, type BeforeValidateHook, type Block, type BlocksField, type BooleanField, type BuiltinApiKeysCollection, type BuiltinMediaCollection, type BuiltinMediaFoldersCollection, type BuiltinUsersCollection, type BundleHints, CONFIG_FILE_NAMES, CSRF_COOKIE, CSRF_HEADER, type CliCommand, type CollectionAccess, type CollectionAdmin, type CollectionConfig, type CollectionDocument, type CollectionHooks, type CollectionListAdmin, type CollectionSlug, type Config, ConfigError, type ConfigIssue, type ContainerAdmin, type CopyProgress, type CopyResult, type CreateEasyCMSOptions, type CreateInput, type CreateMigrationResult, type CustomField, type CustomFieldTypes, DEFAULT_ADMIN_PATH, DEFAULT_API_PATH, DEFAULT_DEPTH, DEFAULT_MAX_FILE_SIZE, DEFAULT_MAX_VERSIONS, DEFAULT_PASSWORD_EMAILS, DEFAULT_TOKEN_EXPIRATION, type DashboardWidget, type Database, type DatabaseAdapter, type DatabaseInitArgs, type DatabaseTransfer, type DateField, type DeliveryKind, type DeliveryState, type DepthOptions, type DirectUpload, type DocumentOf, EXTENSIONS, EasyCMS, EasyCMSError, type EmailAdapter, type EmailCheck, type EmailField, type EmailMessage, type EmailSetting, type Endpoint, type EndpointRequest, FIELD_TYPES, FIELD_TYPE_BASES, FOLDER_LEVELS, type Field, type FieldAccess, type FieldAccessFn, type FieldAdmin, type FieldError, type FieldRule, type FieldType, type FieldTypeBase, type FieldTypeDefinition, type FieldTypeValidateContext, type FieldValidate, type FieldValidateContext, type FieldValue, type FieldsInput, type FieldsValue, type FilterOptions, type FilterOptionsArgs, type FindArgs, type FindOptions, type FolderLevel, type FolderPermissions, ForbiddenError, type GlobalAccess, type GlobalConfig, type GlobalDocument, type GlobalHooks, type GlobalInput, type GlobalSlug, type GroupField, type ID, INTERNAL_COLLECTIONS, type ImageSize, type InferCollection, type InferGlobal, type JsonField, type Label, type LivePreview, type LoadConfigOptions, type LocalStorageOptions, type LocalizationConfig, type Logger, type LoginArgs, MAX_DEPTH, MEDIA, MEDIA_FOLDERS, MIME_GROUPS, MIN_PASSWORD_LENGTH, MIN_SECRET_LENGTH, type MediaDocument, MediaFolders, type MediaSize, type MigrationInfo, NotFoundError, type NumberField, type Operation, type PaginatedDocs, type PasswordEmail, type PasswordEmailArgs, type PasswordEmailFn, type PasswordLinkOptions, PayloadTooLargeError, type Plugin, type PluginInfo, type PluginTypes, type PreviewTarget, type PreviewURL, QueryError, ROLE_OPERATIONS, type RawDocument, type ReadOptions, type RelationshipField, type ResolvedConfig, type RestHandler, type RestHandlerOptions, type RichTextDocument, type RichTextField, type Role, type RoleOperation, type RolePermissions, Roles, type RoutesConfig, SESSION_COOKIE, SSO_COOKIE, type ScheduledJob, SchemaError, type SchemaMode, type SelectField, type SelectOption, type Session, type SlugField, type SlugOf, type SsoOutcome, type SsoProviderRef, type StorageAdapter, type StoredFile, type TextField, type TextareaField, TooManyRequestsError, type TypedPlugin, UnauthorizedError, type UpdateInput, type UpdateOptions, type UploadConfig, type UploadField, type UploadFromURLConfig, type UserIdentity, VERSION, ValidationError, type Version, type VersionSummary, type VersionsConfig, WEBHOOK_EVENTS, type WebhookConfig, type WebhookEvent, type WebhookPayload, type Where, type WhereOperators, anyone, applyDefaults, applyPlugins, configSignature, consoleEmail, consoleLogger, copyDatabase, createApiHandler, createEasyCMS, createRestHandler, createRootEndpointHandler, defineConfig, defineFieldType, definePlugin, expandMimeTypes, fillMissing, findConfigFile, generateSlugs, generateTypes, hasRows, hashPassword, imageDimensions, importConfig, isAdmin, isHasMany, isLoggedIn, keyAllows, loadConfig, localStorage, mergeForUpdate, mimeAllowed, mimeAllowedBy, parseId, populate, readCookie, resolveAdminModule, resolveConfig, rowFields, sharedEasyCMS, silentLogger, singularize, slugify, sniffMimeType, validateConfig, validateFields, verifyPassword, writeBackupFile };
+export { ADMIN_ICONS, API_KEYS, API_KEY_GLOBAL_OPERATIONS, API_KEY_OPERATIONS, type Access, type AccessArgs, type AccessOptions, type AdminAttention, type AdminBackup, type AdminBackups, type AdminBrand, type AdminCollection, type AdminComponent, type AdminComponentRef, type AdminConfig, type AdminDeliveries, type AdminDelivery, type AdminEmail, type AdminEmailDelivery, type AdminField, type AdminFieldArgs, type AdminGlobal, type AdminIcon, type AdminLocale, type AdminPage, type AdminPageRef, type AdminRole, type AdminRoleChange, type AdminRoleField, type AdminRoleTarget, type AdminRoleView, type AdminRoles, type AdminSchema, type AdminSso, type AdminStatus, type AdminSwitcher, type AdminViewAccess, type AdminWebhookDelivery, type AdminWidgetRef, type AfterChangeHook, type AfterDeleteHook, type AfterReadHook, type ApiHandlerOptions, type ApiKeyContext, type ApiKeyGlobalOperation, type ApiKeyOperation, type ApiKeyPermissions, type ArrayField, type AuditChange, type AuditConfig, type AuditEntry, AuditLog, type AuditPage, type AuditVerification, Auth, type AuthConfig, type AuthProvider, type AuthProviderProfile, type AuthProviderRequest, type AuthUser, BUILTIN_COLLECTIONS, type BackupState, type BackupsConfig, type BeforeChangeHook, type BeforeDeleteHook, type BeforeValidateHook, type Block, type BlocksField, type BooleanField, type BuiltinApiKeysCollection, type BuiltinMediaCollection, type BuiltinMediaFoldersCollection, type BuiltinUsersCollection, type BundleHints, CONFIG_FILE_NAMES, CSRF_COOKIE, CSRF_HEADER, type CliCommand, type CollectionAccess, type CollectionAdmin, type CollectionConfig, type CollectionDocument, type CollectionHooks, type CollectionListAdmin, type CollectionSlug, type Config, ConfigError, type ConfigIssue, type ContainerAdmin, type CopyProgress, type CopyResult, type CreateEasyCMSOptions, type CreateInput, type CreateMigrationResult, type CustomField, type CustomFieldTypes, DEFAULT_ADMIN_PATH, DEFAULT_API_PATH, DEFAULT_DEPTH, DEFAULT_MAX_FILE_SIZE, DEFAULT_MAX_VERSIONS, DEFAULT_PASSWORD_EMAILS, DEFAULT_TOKEN_EXPIRATION, type DashboardWidget, type Database, type DatabaseAdapter, type DatabaseInitArgs, type DatabaseTransfer, type DateField, type DeliveryKind, type DeliveryState, type DepthOptions, type DirectUpload, type DocumentOf, EXTENSIONS, EasyCMS, EasyCMSError, type EmailAdapter, type EmailCheck, type EmailField, type EmailMessage, type EmailSetting, type Endpoint, type EndpointRequest, FIELD_TYPES, FIELD_TYPE_BASES, FOLDER_LEVELS, type Field, type FieldAccess, type FieldAccessFn, type FieldAdmin, type FieldError, type FieldRule, type FieldType, type FieldTypeBase, type FieldTypeDefinition, type FieldTypeValidateContext, type FieldValidate, type FieldValidateContext, type FieldValue, type FieldsInput, type FieldsValue, type FilterOptions, type FilterOptionsArgs, type FindArgs, type FindOptions, type FolderLevel, type FolderPermissions, ForbiddenError, type GlobalAccess, type GlobalConfig, type GlobalDocument, type GlobalHooks, type GlobalInput, type GlobalSlug, type GroupField, type ID, INTERNAL_COLLECTIONS, type ImageSize, type InferCollection, type InferGlobal, type JsonField, type Label, type LivePreview, type LoadConfigOptions, type LocalStorageOptions, type LocalizationConfig, type Logger, type LoginArgs, MAX_DEPTH, MEDIA, MEDIA_FOLDERS, MIME_GROUPS, MIN_PASSWORD_LENGTH, MIN_SECRET_LENGTH, type MediaDocument, MediaFolders, type MediaSize, type MigrationInfo, NotFoundError, type NumberField, type OnRequest, type OnRequestArgs, type Operation, type PaginatedDocs, type PasswordEmail, type PasswordEmailArgs, type PasswordEmailFn, type PasswordLinkOptions, PayloadTooLargeError, type Plugin, type PluginInfo, type PluginTypes, type PreviewTarget, type PreviewURL, QueryError, ROLE_OPERATIONS, type RawDocument, type ReadOptions, type RelationshipField, type RequestContext, type ResolvedConfig, type RestHandler, type RestHandlerOptions, type RichTextDocument, type RichTextField, type Role, type RoleOperation, type RolePermissions, Roles, type RoutesConfig, SESSION_COOKIE, SSO_COOKIE, type ScheduledJob, SchemaError, type SchemaMode, type SelectField, type SelectOption, type Session, type SlugField, type SlugOf, type SsoOutcome, type SsoProviderRef, type StorageAdapter, type StoredFile, type TextField, type TextareaField, TooManyRequestsError, type TypedPlugin, UnauthorizedError, type UpdateInput, type UpdateOptions, type UploadConfig, type UploadField, type UploadFromURLConfig, type UserIdentity, VERSION, ValidationError, type Version, type VersionSummary, type VersionsConfig, WEBHOOK_EVENTS, type WebhookConfig, type WebhookEvent, type WebhookPayload, type Where, type WhereOperators, anyone, applyDefaults, applyPlugins, configSignature, consoleEmail, consoleLogger, copyDatabase, createApiHandler, createEasyCMS, createRestHandler, createRootEndpointHandler, defineConfig, defineFieldType, definePlugin, expandMimeTypes, fillMissing, findConfigFile, generateSlugs, generateTypes, hasRows, hashPassword, imageDimensions, importConfig, isAdmin, isHasMany, isLoggedIn, isSystemAdmin, keyAllows, loadConfig, localStorage, mergeForUpdate, mimeAllowed, mimeAllowedBy, parseId, populate, readCookie, resolveAdminModule, resolveConfig, rowFields, sharedEasyCMS, silentLogger, singularize, slugify, sniffMimeType, uniqueWithinOf, validateConfig, validateFields, verifyPassword, writeBackupFile };