@easy-cms/core 0.65.0 → 0.66.1

package/dist/{chunk-BGGQ36LR.js → chunk-DGYJC6WS.js}

@@ -4709,6 +4709,7 @@ function validateConfig(config) {
   validateCors(config.cors, add);
   validateLocalization(config, add);
   validateWebhooks(config, add);
+  warnNestedUnique(config, (issue) => issues.push(issue));
   const collections = asArray(config.collections, "collections", add);
   const globals = asArray(config.globals, "globals", add);
   const collectionSlugs = /* @__PURE__ */ new Set([...BUILTIN_COLLECTIONS]);
@@ -4791,6 +4792,31 @@ function validateCronSecret(value, push) {
       severity: "warning"
     });
 }
+function warnNestedUnique(config, push) {
+  const walk = (fields, path, nested) => {
+    for (const field of Array.isArray(fields) ? fields : []) {
+      if (typeof field !== "object" || field === null) continue;
+      const at = `${path}.${String(field.name)}`;
+      if (nested && field.unique === true)
+        push({
+          path: `${at}.unique`,
+          message: "only works on top-level fields; inside a group, array or block it is ignored",
+          hint: "move the field to the top level, or check uniqueness in a beforeValidate hook",
+          severity: "warning"
+        });
+      if (field.type === "group" || field.type === "array") walk(field.fields, `${at}.fields`, true);
+      if (field.type === "blocks")
+        for (const block of Array.isArray(field.blocks) ? field.blocks : [])
+          walk(block?.fields, `${at}.blocks.${String(block?.slug)}`, true);
+    }
+  };
+  for (const [kind, list] of [
+    ["collections", config.collections],
+    ["globals", config.globals]
+  ])
+    for (const container of Array.isArray(list) ? list : [])
+      walk(container?.fields, `${kind}.${String(container?.slug)}.fields`, false);
+}
 function publicURLs(storage) {
   const url = storage.url;
   try {
@@ -9182,7 +9208,7 @@ async function readAdminModule(cms, index) {
 }
 
 // src/version.ts
-var VERSION = true ? "0.65.0" : "0.0.0-dev";
+var VERSION = true ? "0.66.1" : "0.0.0-dev";
 
 // src/rest/admin-deliveries.ts
 var PER_PAGE = 50;
@@ -10530,6 +10556,7 @@ async function route(cms, ctx, method, path, options) {
     }
     if (second === "audit" && third === "verify" && segments.length === 3) {
       if (method !== "POST") throw methodNotAllowed(ctx, "POST");
+      if (!isSystemAdmin(ctx.user)) throw new ForbiddenError();
       return { body: await cms.audit.verify() };
     }
     if (second !== "audit" || third !== void 0) throw new HttpError("Not found", 404);

package/dist/index.js

@@ -23,7 +23,7 @@ import {
   sharedEasyCMS,
   silentLogger,
   slugify
-} from "./chunk-BGGQ36LR.js";
+} from "./chunk-DGYJC6WS.js";
 import {
   matchesCondition
 } from "./chunk-U266LV4M.js";

package/dist/internal.js

@@ -53,7 +53,7 @@ import {
   verifyPassword,
   verifyTurnstile,
   writeBackupFile
-} from "./chunk-BGGQ36LR.js";
+} from "./chunk-DGYJC6WS.js";
 import {
   conditionIssues
 } from "./chunk-U266LV4M.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easy-cms/core",
-  "version": "0.65.0",
+  "version": "0.66.1",
   "description": "Embedded, code-first headless CMS for Nuxt and Next.js",
   "license": "MIT",
   "type": "module",