@easy-cms/core 1.10.0 → 1.11.0

package/dist/{chunk-54UFTH6S.js → chunk-TMO4JTGJ.js}

@@ -3874,7 +3874,7 @@ var VersionStore = class {
 };
 
 // src/local-api.ts
-import { createHash as createHash4, createHmac as createHmac6, randomBytes as randomBytes6, randomUUID as randomUUID3, timingSafeEqual as timingSafeEqual5 } from "crypto";
+import { createHash as createHash5, createHmac as createHmac6, randomBytes as randomBytes6, randomUUID as randomUUID3, timingSafeEqual as timingSafeEqual5 } from "crypto";
 
 // src/auth/common-passwords.ts
 var LIST = `
@@ -4426,7 +4426,7 @@ function read(response, maxBytes, deadline) {
 var keys = (list) => new Set(list.split(/\s+/).filter(Boolean));
 var CONFIG = keys(`secret db serverURL cors cronSecret timeZone webhooks events jobs localization routes admin
   upload auth collections globals endpoints cliCommands onRequest fieldTypes apiKeys email backups
-  audit logs countCacheSeconds maxPage plugins`);
+  audit logs countCacheSeconds maxPage httpCache plugins`);
 var ADMIN = keys("path locale brand siteURL nav commands modules pages dashboard switcher");
 var AUTH = keys(`roles rbac tokenExpiration maxLoginAttempts lockWindow trustedOrigins
   resetPasswordExpiration inviteExpiration providers providerSignUp password setupCode members emails`);
@@ -4436,8 +4436,10 @@ var BACKUPS = keys("frequency at keep dir storage sqlite encryptionKey");
 var AUDIT = keys("keepDays values failedLogins scope");
 var LOGS = keys("format requests");
 var COLLECTION = keys(`slug labels fields useAsTitle drafts versions schedule preview access hooks
-  admin`);
-var GLOBAL = keys("slug label fields drafts versions schedule preview access hooks scope admin");
+  admin httpCache`);
+var GLOBAL = keys(
+  "slug label fields drafts versions schedule preview access hooks scope admin httpCache"
+);
 var CONTAINER_ADMIN = keys("icon order sidebar layout group");
 var COLLECTION_ADMIN = keys(
   "icon order sidebar layout group editIn badge count empty list ownerField confirmDelete"
@@ -4891,6 +4893,7 @@ function validateConfig(config) {
   validateLogs(config, add);
   validateCountCache(config, add);
   validateMaxPage(config, add);
+  validateHttpCache(config, add);
   validateAuth(config, add);
   validateCors(config.cors, add);
   validateLocalization(config, add);
@@ -5513,6 +5516,26 @@ function validateUpload(config, add) {
 var FOLDER_KEY = /^[a-z0-9][a-z0-9_-]{0,59}$/;
 var MIME_PATTERN = /^([\w.+-]+\/(\*|[\w.+-]+)|documents|office|archives)$/i;
 var HOST_PATTERN = /^(\*|(\*\.)?[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*)$/i;
+function validateHttpCache(config, add) {
+  const times = (value, path, purge) => {
+    if (value === void 0) return;
+    if (value === false && !purge) return;
+    if (typeof value !== "object" || value === null) {
+      add(path, purge ? "must be an object" : "must be false or an object");
+      return;
+    }
+    const v = value;
+    for (const key of ["sMaxAge", "staleWhileRevalidate"])
+      if (v[key] !== void 0 && !(Number.isInteger(v[key]) && v[key] >= 0))
+        add(`${path}.${key}`, "must be a whole number of seconds, 0 or more");
+    if (purge && v.purge !== void 0 && typeof v.purge !== "function")
+      add(`${path}.purge`, "must be a function");
+  };
+  times(config.httpCache, "httpCache", true);
+  for (const c of config.collections ?? [])
+    times(c?.httpCache, `collections.${c?.slug}.httpCache`, false);
+  for (const g of config.globals ?? []) times(g?.httpCache, `globals.${g?.slug}.httpCache`, false);
+}
 function validateMaxPage(config, add) {
   const max = config.maxPage;
   if (max !== void 0 && !(Number.isInteger(max) && max >= 1))
@@ -6413,6 +6436,41 @@ function resolveAudit(audit) {
   };
 }
 
+// src/rest/http-cache.ts
+import { createHash as createHash4 } from "crypto";
+var cacheTags = {
+  collection: (slug2) => ["ecms", `ecms:${slug2}`],
+  document: (slug2, id) => ["ecms", `ecms:${slug2}`, `ecms:${slug2}:${id}`],
+  global: (slug2) => ["ecms", `ecms:global:${slug2}`]
+};
+function cacheTimes(config, container) {
+  const own = container.httpCache;
+  if (own === false || own === void 0 && config.httpCache === void 0) return null;
+  return {
+    sMaxAge: own?.sMaxAge ?? config.httpCache?.sMaxAge ?? 60,
+    staleWhileRevalidate: own?.staleWhileRevalidate ?? config.httpCache?.staleWhileRevalidate ?? 300
+  };
+}
+function matches2(header, etag) {
+  if (!header) return false;
+  if (header.trim() === "*") return true;
+  const bare = (tag) => tag.trim().replace(/^W\//, "");
+  return header.split(",").some((tag) => bare(tag) === bare(etag));
+}
+function cacheableResponse(request, body, status, headers, times, tags) {
+  headers.set(
+    "cache-control",
+    `public, max-age=0, s-maxage=${times.sMaxAge}, stale-while-revalidate=${times.staleWhileRevalidate}`
+  );
+  headers.set("cache-tag", tags.join(","));
+  headers.set("surrogate-key", tags.join(" "));
+  const etag = `W/"${createHash4("sha1").update(body).digest("base64url")}"`;
+  headers.set("etag", etag);
+  if (matches2(request.headers.get("if-none-match"), etag))
+    return new Response(null, { status: 304, headers });
+  return new Response(request.method.toUpperCase() === "HEAD" ? null : body, { status, headers });
+}
+
 // src/local-api.ts
 async function createEasyCMS(config, options = {}) {
   const resolved3 = await resolveConfig(config);
@@ -8391,11 +8449,11 @@ var EasyCMS = class {
     const access = allowed2 === false ? false : andWhere(own === true ? void 0 : own, allowed2) ?? true;
     if (access === true) return;
     if (access !== false) {
-      const matches2 = await this.db.count({
+      const matches3 = await this.db.count({
         collection: config.slug,
         where: andWhere(access, { id: { equals: id } })
       });
-      if (matches2 > 0) return;
+      if (matches3 > 0) return;
     }
     throw deny(guard.user);
   }
@@ -8449,11 +8507,11 @@ var EasyCMS = class {
     await this.hidingDenied(collection2, guard, id, async () => {
       const own = await this.checkGrant(guard, { collection: collection2 }, operation);
       if (own === true) return;
-      const matches2 = await this.db.count({
+      const matches3 = await this.db.count({
         collection: collection2,
         where: andWhere(own, { id: { equals: id } })
       });
-      if (matches2 === 0) throw deny(guard.user);
+      if (matches3 === 0) throw deny(guard.user);
     });
   }
   /** Runs afterRead hooks, populates relationships and removes what the caller may not see. */
@@ -8615,6 +8673,20 @@ var EasyCMS = class {
       return version && doc.status === "published" && version.status === "draft" ? draftOf(doc, version) : doc;
     });
   }
+  /**
+   * `httpCache.purge`: what readers see changed (anything, without drafts; with drafts, a
+   * published document saved, published, unpublished or deleted). Not awaited; failures are
+   * logged.
+   */
+  purgePublic(config, isGlobal, event, doc, before) {
+    const purge = this.config.httpCache?.purge;
+    if (!purge || config.httpCache === false || event === "draft") return;
+    if (config.drafts && doc.status !== "published" && before !== "published") return;
+    const tags = isGlobal ? cacheTags.global(config.slug) : cacheTags.document(config.slug, doc.id);
+    void Promise.resolve().then(() => purge(tags)).catch(
+      (error) => this.logger.error(`httpCache.purge failed: ${error.message}`, { error })
+    );
+  }
   /** Sends webhook events for a change; `before` is the stored status before it, if any. */
   emitChange(config, event, doc, before) {
     const isGlobal = !this.config.collections.includes(config);
@@ -8627,6 +8699,7 @@ var EasyCMS = class {
     };
     const target = isGlobal ? { global: config.slug } : { collection: config.slug, id: doc.id };
     this.webhooks.emit(event, target, body);
+    this.purgePublic(config, isGlobal, event, doc, before);
     if (event === "draft" || event === "delete" || !config.drafts) return;
     const after = doc.status;
     if (after === "published" && before !== "published") this.webhooks.emit("publish", target, body);
@@ -9076,7 +9149,7 @@ function durationSeconds(value) {
 }
 function cursorQuery(collection2, where, sort, locale, draft) {
   const key = JSON.stringify([collection2, where ?? null, sort, locale ?? null, draft]);
-  return createHash4("sha256").update(key).digest("base64url").slice(0, 16);
+  return createHash5("sha256").update(key).digest("base64url").slice(0, 16);
 }
 function writeCursor(keys2, query) {
   return Buffer.from(JSON.stringify({ k: keys2, q: query })).toString("base64url");
@@ -9827,7 +9900,7 @@ function rank(role, config) {
 }
 
 // src/rest/admin-modules.ts
-import { createHash as createHash5 } from "crypto";
+import { createHash as createHash6 } from "crypto";
 import { readFile as readFile3 } from "fs/promises";
 import { createRequire } from "module";
 import { join as join3 } from "path";
@@ -9868,11 +9941,11 @@ async function readAdminModule(cms, index) {
   if (!file) return void 0;
   const body = await readFile3(file, "utf8").catch(() => void 0);
   if (body === void 0) return void 0;
-  return { body, etag: `"${createHash5("sha1").update(body).digest("base64url")}"` };
+  return { body, etag: `"${createHash6("sha1").update(body).digest("base64url")}"` };
 }
 
 // src/version.ts
-var VERSION = true ? "1.10.0" : "0.0.0-dev";
+var VERSION = true ? "1.11.0" : "0.0.0-dev";
 
 // src/rest/handler.ts
 import { randomUUID as randomUUID4 } from "crypto";
@@ -10917,7 +10990,18 @@ async function respondNow(cms, request, url, path, root, options, production, re
     );
     if (!result) throw new HttpError("Not found", 404);
     if (result.body instanceof Response) return result.body;
-    return new Response(JSON.stringify(result.body), { status: result.status ?? 200, headers });
+    const body = JSON.stringify(result.body);
+    const times = result.cache && !user && !ctx.via && !ctx.token && !url.searchParams.has("draft") ? cacheTimes(cms.config, result.cache.container) : null;
+    if (times && result.cache)
+      return cacheableResponse(
+        request,
+        body,
+        result.status ?? 200,
+        headers,
+        times,
+        result.cache.tags
+      );
+    return new Response(body, { status: result.status ?? 200, headers });
   } catch (error) {
     return errorResponse(cms, error, headers, production);
   }
@@ -11501,7 +11585,11 @@ async function route(cms, ctx, method, path, options) {
           })
         };
       }
-      return { body: await cms.findGlobal(second, { ...access, ...parseDepth(ctx.url), draft }) };
+      const global2 = cms.config.globals.find((g) => g.slug === second);
+      return {
+        body: await cms.findGlobal(second, { ...access, ...parseDepth(ctx.url), draft }),
+        cache: { container: global2, tags: cacheTags.global(second) }
+      };
     }
     if (method === "PATCH" || method === "POST") {
       if (method === "POST")
@@ -11598,7 +11686,8 @@ async function route(cms, ctx, method, path, options) {
         body: await cms.find(
           collection2,
           query.cursor === void 0 ? { ...options2, page } : options2
-        )
+        ),
+        cache: { container: cms.collection(collection2), tags: cacheTags.collection(collection2) }
       };
     }
     if (method === "POST") {
@@ -11625,7 +11714,13 @@ async function route(cms, ctx, method, path, options) {
   if (method === "GET") {
     const doc = await cms.findById(collection2, id, { ...access, ...parseDepth(ctx.url), draft });
     if (!doc) throw new NotFoundError(collection2, id);
-    return { body: doc };
+    return {
+      body: doc,
+      cache: {
+        container: cms.collection(collection2),
+        tags: cacheTags.document(collection2, doc.id)
+      }
+    };
   }
   if (method === "PATCH") {
     const body = await readJson(ctx.request);
@@ -11784,8 +11879,8 @@ function withPreviewToken(url, token) {
 }
 async function requirePreview(cms, ctx, target) {
   const opened = cms.verifyPreviewToken(ctx.url.searchParams.get("preview"));
-  const matches2 = opened !== null && ("global" in target ? "global" in opened && opened.global === target.global : "collection" in opened && opened.collection === target.collection && opened.id === target.id);
-  if (!matches2) throw new UnauthorizedError("Invalid or expired preview token");
+  const matches3 = opened !== null && ("global" in target ? "global" in opened && opened.global === target.global : "collection" in opened && opened.collection === target.collection && opened.id === target.id);
+  if (!matches3) throw new UnauthorizedError("Invalid or expired preview token");
   if (opened.user === void 0) return {};
   const id = parseId(opened.user);
   const issuer = id === void 0 ? null : await cms.auth.activeUser(id);
@@ -12293,6 +12388,7 @@ export {
   DEFAULT_TOKEN_EXPIRATION,
   applyPlugins,
   resolveConfig,
+  cacheTags,
   createEasyCMS,
   EasyCMS,
   resolveAdminModule,

package/dist/{config-DL4beesW.d.ts → config-n7PtGl4V.d.ts}

@@ -2183,6 +2183,12 @@ declare class EasyCMS<C extends Config = Config> {
     private separateDrafts;
     /** Replaces published documents that have a newer draft with that draft. */
     private withDrafts;
+    /**
+     * `httpCache.purge`: what readers see changed (anything, without drafts; with drafts, a
+     * published document saved, published, unpublished or deleted). Not awaited; failures are
+     * logged.
+     */
+    private purgePublic;
     /** Sends webhook events for a change; `before` is the stored status before it, if any. */
     private emitChange;
     /**
@@ -2786,6 +2792,11 @@ interface CollectionConfig {
     readonly versions?: boolean | VersionsConfig;
     /** Allow scheduling publish/unpublish for a later time (needs `drafts`). */
     readonly schedule?: boolean;
+    /**
+     * HTTP caching of public reads of this content (no login, published only), for a CDN in front.
+     * Overrides the config's `httpCache` for this one; `false` keeps every read `no-store`.
+     */
+    readonly httpCache?: false | HttpCacheTimes;
     /** Live preview: the page that shows a document, e.g. `({ doc }) => \`/posts/${doc.slug}\``. */
     readonly preview?: PreviewURL;
     readonly access?: CollectionAccess;
@@ -2793,6 +2804,20 @@ interface CollectionConfig {
     /** How the collection looks in the admin: its menu item, list, edit page and components. */
     readonly admin?: CollectionAdmin;
 }
+/** How long a CDN may keep a public read. */
+interface HttpCacheTimes {
+    /** Seconds a CDN serves it without asking again (`s-maxage`). Default 60. */
+    readonly sMaxAge?: number;
+    /** Seconds after that it may still serve it while it fetches a fresh one. Default 300. */
+    readonly staleWhileRevalidate?: number;
+}
+interface HttpCacheConfig extends HttpCacheTimes {
+    /**
+     * Called after public content changes, with the cache tags of what changed: purge them from
+     * your CDN, or call Next's `revalidateTag` for each. Not awaited; a failure is logged.
+     */
+    readonly purge?: (tags: string[]) => void | Promise<void>;
+}
 interface GlobalConfig {
     readonly slug: string;
     readonly label?: Label;
@@ -2802,6 +2827,11 @@ interface GlobalConfig {
     readonly versions?: boolean | VersionsConfig;
     /** Allow scheduling publish/unpublish for a later time (needs `drafts`). */
     readonly schedule?: boolean;
+    /**
+     * HTTP caching of public reads of this content (no login, published only), for a CDN in front.
+     * Overrides the config's `httpCache` for this one; `false` keeps every read `no-store`.
+     */
+    readonly httpCache?: false | HttpCacheTimes;
     /** Live preview: the page that shows the global. See `CollectionConfig.preview`. */
     readonly preview?: PreviewURL;
     readonly access?: GlobalAccess;
@@ -3379,6 +3409,12 @@ interface Config {
      * Default 5.
      */
     readonly countCacheSeconds?: number;
+    /**
+     * HTTP caching of public reads (no login, no API key, published content) by a CDN or proxy in
+     * front: `Cache-Control` with `s-maxage`, an `ETag`, and cache tags to purge by. Off by default:
+     * every response is `no-store`. Collections and globals can override it.
+     */
+    readonly httpCache?: HttpCacheConfig;
     /**
      * The deepest `page` the REST API serves to API clients (not to the signed-in admin); deeper
      * requests get `400`, pointing to `cursor`. Deep pages are read row by row. Default: no limit.

package/dist/{handler--JrVIdYW.d.ts → handler-DV-1ICVz.d.ts}

@@ -1,4 +1,4 @@
-import { I as ID, ab as Config, av as EasyCMS, bh as LocalizationConfig, aE as Field, aI as FieldError, aT as FilterOptions, af as CreateEasyCMSOptions, bO as ResolvedConfig } from './config-DL4beesW.js';
+import { I as ID, ab as Config, av as EasyCMS, bh as LocalizationConfig, aE as Field, aI as FieldError, aT as FilterOptions, af as CreateEasyCMSOptions, bO as ResolvedConfig } from './config-n7PtGl4V.js';
 
 /** Decrypts a file from `encryptBackup`; throws for another key or a changed file. */
 declare function decryptBackup(data: Uint8Array, encryptionKey: string): Uint8Array;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { P as PaginatedDocs, I as ID, E as EmailSetting } from './config-DL4beesW.js';
-export { A as ADAPTER_API_VERSION, a as ADMIN_ICONS, b as Access, c as AccessArgs, d as AccessOptions, e as AdminBrand, f as AdminCommand, g as AdminComponent, h as AdminConfig, i as AdminFieldArgs, j as AdminIcon, k as AdminLocale, l as AdminPage, m as AdminRole, n as AdminRoleChange, o as AdminRoleField, p as AdminRoleTarget, q as AdminRoleView, r as AdminRoles, s as AdminSso, t as AdminSwitcher, u as AdminViewAccess, v as AfterChangeHook, w as AfterDeleteHook, x as AfterReadHook, y as ApiKeyContext, z as ApiKeyGlobalOperation, B as ApiKeyOperation, C as ApiKeyPermissions, D as ArrayField, F as AuditChange, G as AuditConfig, H as AuditEntry, J as AuditLog, K as AuditPage, L as AuditVerification, M as Auth, N as AuthConfig, O as AuthProvider, Q as AuthProviderProfile, R as AuthProviderRequest, S as AuthUser, T as BackupsConfig, U as BeforeChangeHook, V as BeforeDeleteHook, W as BeforeValidateHook, X as Block, Y as BlocksField, Z as BooleanField, _ as BuiltinApiKeysCollection, $ as BuiltinMediaCollection, a0 as BuiltinMediaFoldersCollection, a1 as BuiltinUsersCollection, a2 as BundleHints, a3 as CliCommand, a4 as CollectionAccess, a5 as CollectionAdmin, a6 as CollectionConfig, a7 as CollectionDocument, a8 as CollectionHooks, a9 as CollectionListAdmin, aa as CollectionSlug, ab as Config, ac as ConfigError, ad as ConfigIssue, ae as ContainerAdmin, af as CreateEasyCMSOptions, ag as CreateInput, ah as CreateMigrationResult, ai as CursorDocs, aj as CustomField, ak as CustomFieldTypes, al as DashboardWidget, am as Database, an as DatabaseAdapter, ao as DatabaseInitArgs, ap as DatabaseTransfer, aq as DateField, ar as DepthOptions, as as DirectUpload, at as DiskStorageOptions, au as DocumentOf, av as EasyCMS, aw as EasyCMSError, ax as EmailAdapter, ay as EmailField, az as EmailMessage, aA as Endpoint, aB as EndpointRequest, aC as ErrorCode, aD as FIELD_TYPES, aE as Field, aF as FieldAccess, aG as FieldAccessFn, aH as FieldAdmin, aI as FieldError, aJ as FieldRule, aK as FieldType, aL as FieldTypeBase, aM as FieldTypeDefinition, aN as FieldTypeValidateContext, aO as FieldValidate, aP as FieldValidateContext, aQ as FieldValue, aR as FieldsInput, aS as FieldsValue, aT as FilterOptions, aU as FilterOptionsArgs, aV as FindAfterArgs, aW as FindArgs, aX as FindOptions, aY as FolderLevel, aZ as FolderPermissions, a_ as ForbiddenError, a$ as GlobalAccess, b0 as GlobalConfig, b1 as GlobalDocument, b2 as GlobalHooks, b3 as GlobalInput, b4 as GlobalSlug, b5 as GroupField, b6 as ImageSize, b7 as IncrementOptions, b8 as InferCollection, b9 as InferGlobal, ba as JobConfig, bb as JsonField, bc as KeysetPage, bd as Label, be as LayoutNode, bf as LivePreview, bg as LocaleOf, bh as LocalizationConfig, bi as LogDetails, bj as Logger, bk as LoginArgs, bl as LogsConfig, bm as MediaDocument, bn as MediaSize, bo as MembersConfig, bp as MembersSignup, bq as MigrationInfo, br as NavGroup, bs as NotFoundError, bt as NumberField, bu as OnRequest, bv as OnRequestArgs, bw as Operation, bx as PLUGIN_API_VERSION, by as PasswordEmail, bz as PasswordEmailArgs, bA as PasswordEmailFn, bB as PasswordLinkOptions, bC as PayloadTooLargeError, bD as Plugin, bE as PluginInfo, bF as PluginTypes, bG as PreviewTarget, bH as PreviewURL, bI as QueryError, bJ as ROLE_OPERATIONS, bK as RawDocument, bL as ReadOptions, bM as RelationshipField, bN as RequestContext, bO as ResolvedConfig, bP as RichTextDocument, bQ as RichTextField, bR as Role, bS as RoleOperation, bT as RolePermissions, bU as Roles, bV as RoutesConfig, bW as ScheduledPublish, bX as SchemaError, bY as SchemaMode, bZ as SelectField, b_ as SelectOption, b$ as Session, c0 as SidebarPanel, c1 as SignupArgs, c2 as SignupResult, c3 as SingleSignOn, c4 as SlugField, c5 as SlugOf, c6 as SsoOutcome, c7 as SsoProviderRef, c8 as StorageAdapter, c9 as StoredFile, ca as TextField, cb as TextareaField, cc as TooManyRequestsError, cd as TypedPlugin, ce as UnauthorizedError, cf as UncountedDocs, cg as UpdateInput, ch as UpdateOptions, ci as UploadConfig, cj as UploadField, ck as UploadFromURLConfig, cl as UserIdentity, cm as ValidationError, cn as Version, co as VersionSummary, cp as VersionsConfig, cq as WEBHOOK_EVENTS, cr as WebhookConfig, cs as WebhookEvent, ct as WebhookPayload, cu as Where, cv as WhereOperators, cw as anyone, cx as consoleEmail, cy as consoleLogger, cz as createEasyCMS, cA as defineConfig, cB as defineFieldType, cC as definePlugin, cD as diskStorage, cE as hasRows, cF as isAdmin, cG as isHasMany, cH as isSignedIn, cI as isStaff, cJ as isSystemAdmin, cK as jsonLogger, cL as mimeAllowedBy, cM as rowFields, cN as silentLogger, cO as uniqueWithinOf } from './config-DL4beesW.js';
-export { A as ADMIN_API_VERSION, a as AdminCollection, b as AdminComponentRef, c as AdminElementProps, d as AdminField, e as AdminGlobal, f as AdminLayoutNode, g as AdminNavGroup, h as AdminNavItem, i as AdminNavNode, j as AdminPageRef, k as AdminPageRoute, l as AdminSchema, m as AdminWidgetRef, S as SetFieldDetail, w as warnDeprecated } from './plugin-BXHlV5IZ.js';
-export { A as AdminBackup, a as AdminBackups, b as ApiHandlerOptions, B as BackupState, L as LoadConfigOptions, R as RestHandler, c as RestHandlerOptions, d as createApiHandler, e as createRestHandler, l as loadConfig, r as resolveConfig, s as sharedEasyCMS, f as slugify } from './handler--JrVIdYW.js';
+import { P as PaginatedDocs, I as ID, E as EmailSetting } from './config-n7PtGl4V.js';
+export { A as ADAPTER_API_VERSION, a as ADMIN_ICONS, b as Access, c as AccessArgs, d as AccessOptions, e as AdminBrand, f as AdminCommand, g as AdminComponent, h as AdminConfig, i as AdminFieldArgs, j as AdminIcon, k as AdminLocale, l as AdminPage, m as AdminRole, n as AdminRoleChange, o as AdminRoleField, p as AdminRoleTarget, q as AdminRoleView, r as AdminRoles, s as AdminSso, t as AdminSwitcher, u as AdminViewAccess, v as AfterChangeHook, w as AfterDeleteHook, x as AfterReadHook, y as ApiKeyContext, z as ApiKeyGlobalOperation, B as ApiKeyOperation, C as ApiKeyPermissions, D as ArrayField, F as AuditChange, G as AuditConfig, H as AuditEntry, J as AuditLog, K as AuditPage, L as AuditVerification, M as Auth, N as AuthConfig, O as AuthProvider, Q as AuthProviderProfile, R as AuthProviderRequest, S as AuthUser, T as BackupsConfig, U as BeforeChangeHook, V as BeforeDeleteHook, W as BeforeValidateHook, X as Block, Y as BlocksField, Z as BooleanField, _ as BuiltinApiKeysCollection, $ as BuiltinMediaCollection, a0 as BuiltinMediaFoldersCollection, a1 as BuiltinUsersCollection, a2 as BundleHints, a3 as CliCommand, a4 as CollectionAccess, a5 as CollectionAdmin, a6 as CollectionConfig, a7 as CollectionDocument, a8 as CollectionHooks, a9 as CollectionListAdmin, aa as CollectionSlug, ab as Config, ac as ConfigError, ad as ConfigIssue, ae as ContainerAdmin, af as CreateEasyCMSOptions, ag as CreateInput, ah as CreateMigrationResult, ai as CursorDocs, aj as CustomField, ak as CustomFieldTypes, al as DashboardWidget, am as Database, an as DatabaseAdapter, ao as DatabaseInitArgs, ap as DatabaseTransfer, aq as DateField, ar as DepthOptions, as as DirectUpload, at as DiskStorageOptions, au as DocumentOf, av as EasyCMS, aw as EasyCMSError, ax as EmailAdapter, ay as EmailField, az as EmailMessage, aA as Endpoint, aB as EndpointRequest, aC as ErrorCode, aD as FIELD_TYPES, aE as Field, aF as FieldAccess, aG as FieldAccessFn, aH as FieldAdmin, aI as FieldError, aJ as FieldRule, aK as FieldType, aL as FieldTypeBase, aM as FieldTypeDefinition, aN as FieldTypeValidateContext, aO as FieldValidate, aP as FieldValidateContext, aQ as FieldValue, aR as FieldsInput, aS as FieldsValue, aT as FilterOptions, aU as FilterOptionsArgs, aV as FindAfterArgs, aW as FindArgs, aX as FindOptions, aY as FolderLevel, aZ as FolderPermissions, a_ as ForbiddenError, a$ as GlobalAccess, b0 as GlobalConfig, b1 as GlobalDocument, b2 as GlobalHooks, b3 as GlobalInput, b4 as GlobalSlug, b5 as GroupField, b6 as ImageSize, b7 as IncrementOptions, b8 as InferCollection, b9 as InferGlobal, ba as JobConfig, bb as JsonField, bc as KeysetPage, bd as Label, be as LayoutNode, bf as LivePreview, bg as LocaleOf, bh as LocalizationConfig, bi as LogDetails, bj as Logger, bk as LoginArgs, bl as LogsConfig, bm as MediaDocument, bn as MediaSize, bo as MembersConfig, bp as MembersSignup, bq as MigrationInfo, br as NavGroup, bs as NotFoundError, bt as NumberField, bu as OnRequest, bv as OnRequestArgs, bw as Operation, bx as PLUGIN_API_VERSION, by as PasswordEmail, bz as PasswordEmailArgs, bA as PasswordEmailFn, bB as PasswordLinkOptions, bC as PayloadTooLargeError, bD as Plugin, bE as PluginInfo, bF as PluginTypes, bG as PreviewTarget, bH as PreviewURL, bI as QueryError, bJ as ROLE_OPERATIONS, bK as RawDocument, bL as ReadOptions, bM as RelationshipField, bN as RequestContext, bO as ResolvedConfig, bP as RichTextDocument, bQ as RichTextField, bR as Role, bS as RoleOperation, bT as RolePermissions, bU as Roles, bV as RoutesConfig, bW as ScheduledPublish, bX as SchemaError, bY as SchemaMode, bZ as SelectField, b_ as SelectOption, b$ as Session, c0 as SidebarPanel, c1 as SignupArgs, c2 as SignupResult, c3 as SingleSignOn, c4 as SlugField, c5 as SlugOf, c6 as SsoOutcome, c7 as SsoProviderRef, c8 as StorageAdapter, c9 as StoredFile, ca as TextField, cb as TextareaField, cc as TooManyRequestsError, cd as TypedPlugin, ce as UnauthorizedError, cf as UncountedDocs, cg as UpdateInput, ch as UpdateOptions, ci as UploadConfig, cj as UploadField, ck as UploadFromURLConfig, cl as UserIdentity, cm as ValidationError, cn as Version, co as VersionSummary, cp as VersionsConfig, cq as WEBHOOK_EVENTS, cr as WebhookConfig, cs as WebhookEvent, ct as WebhookPayload, cu as Where, cv as WhereOperators, cw as anyone, cx as consoleEmail, cy as consoleLogger, cz as createEasyCMS, cA as defineConfig, cB as defineFieldType, cC as definePlugin, cD as diskStorage, cE as hasRows, cF as isAdmin, cG as isHasMany, cH as isSignedIn, cI as isStaff, cJ as isSystemAdmin, cK as jsonLogger, cL as mimeAllowedBy, cM as rowFields, cN as silentLogger, cO as uniqueWithinOf } from './config-n7PtGl4V.js';
+export { A as ADMIN_API_VERSION, a as AdminCollection, b as AdminComponentRef, c as AdminElementProps, d as AdminField, e as AdminGlobal, f as AdminLayoutNode, g as AdminNavGroup, h as AdminNavItem, i as AdminNavNode, j as AdminPageRef, k as AdminPageRoute, l as AdminSchema, m as AdminWidgetRef, S as SetFieldDetail, w as warnDeprecated } from './plugin-C_vknKa2.js';
+export { A as AdminBackup, a as AdminBackups, b as ApiHandlerOptions, B as BackupState, L as LoadConfigOptions, R as RestHandler, c as RestHandlerOptions, d as createApiHandler, e as createRestHandler, l as loadConfig, r as resolveConfig, s as sharedEasyCMS, f as slugify } from './handler-DV-1ICVz.js';
 export { FieldCondition, matchesCondition } from './conditions.js';
 
 type DeliveryKind = 'webhook' | 'email';
@@ -218,8 +218,19 @@ interface AdminStatus {
     attention: AdminAttention[];
 }
 
+/**
+ * The cache tags public reads carry and `httpCache.purge` receives: `ecms` for all content,
+ * `ecms:posts` for a collection's lists, `ecms:posts:42` for a document, `ecms:global:site` for
+ * a global. Use them to tag your own fetches, e.g. Next's `fetch(url, { next: { tags } })`.
+ */
+declare const cacheTags: {
+    collection: (slug: string) => string[];
+    document: (slug: string, id: unknown) => string[];
+    global: (slug: string) => string[];
+};
+
 /** The version of `@easy-cms/core`, set when the package is built. */
 declare const VERSION: string;
 
-export { EmailSetting, ID, PaginatedDocs, VERSION };
+export { EmailSetting, ID, PaginatedDocs, VERSION, cacheTags };
 export type { AdminAttention, AdminDeliveries, AdminDelivery, AdminEmail, AdminEmailDelivery, AdminJob, AdminJobs, AdminScheduledJob, AdminStatus, AdminWebhookDelivery, BuiltInJob, DeliveryKind, DeliveryState, EmailCheck, SearchHit };

package/dist/index.js

@@ -8,6 +8,7 @@ import {
   VERSION,
   WEBHOOK_EVENTS,
   anyone,
+  cacheTags,
   consoleEmail,
   consoleLogger,
   createApiHandler,
@@ -24,7 +25,7 @@ import {
   sharedEasyCMS,
   silentLogger,
   slugify
-} from "./chunk-54UFTH6S.js";
+} from "./chunk-TMO4JTGJ.js";
 import {
   matchesCondition
 } from "./chunk-U266LV4M.js";
@@ -74,6 +75,7 @@ export {
   ValidationError,
   WEBHOOK_EVENTS,
   anyone,
+  cacheTags,
   consoleEmail,
   consoleLogger,
   createApiHandler,

package/dist/internal.d.ts

@@ -1,6 +1,6 @@
 import { Config, Database, EasyCMS, NavGroup, CollectionConfig, ID, RawDocument, Field, ResolvedConfig, ConfigIssue } from './index.js';
-export { cP as API_KEYS, cQ as API_KEY_GLOBAL_OPERATIONS, cR as API_KEY_OPERATIONS, cS as DEFAULT_MAX_VERSIONS, cT as DEFAULT_PASSWORD_EMAILS, cU as FIELD_TYPE_BASES, cV as FOLDER_LEVELS, cW as MediaFolders, cX as SSO_COOKIE, cY as codeOfStatus, cE as hasRows, cG as isHasMany, cZ as isJsonLogger, c_ as keyAllows, c$ as logFormat, cL as mimeAllowedBy, cM as rowFields, cO as uniqueWithinOf } from './config-DL4beesW.js';
-export { C as CONFIG_FILE_NAMES, g as CSRF_COOKIE, h as CSRF_HEADER, D as DEFAULT_ADMIN_PATH, i as DEFAULT_API_PATH, j as DEFAULT_MAX_FILE_SIZE, k as DEFAULT_TOKEN_EXPIRATION, m as applyDefaults, n as applyPlugins, o as createRootEndpointHandler, p as decryptBackup, q as fillMissing, t as findConfigFile, u as forwardedClientIp, v as generateSlugs, w as importConfig, x as mergeForUpdate, y as parseId, z as platformClientIp, E as readCookie, F as validateFields, G as writeBackupFile } from './handler--JrVIdYW.js';
+export { cP as API_KEYS, cQ as API_KEY_GLOBAL_OPERATIONS, cR as API_KEY_OPERATIONS, cS as DEFAULT_MAX_VERSIONS, cT as DEFAULT_PASSWORD_EMAILS, cU as FIELD_TYPE_BASES, cV as FOLDER_LEVELS, cW as MediaFolders, cX as SSO_COOKIE, cY as codeOfStatus, cE as hasRows, cG as isHasMany, cZ as isJsonLogger, c_ as keyAllows, c$ as logFormat, cL as mimeAllowedBy, cM as rowFields, cO as uniqueWithinOf } from './config-n7PtGl4V.js';
+export { C as CONFIG_FILE_NAMES, g as CSRF_COOKIE, h as CSRF_HEADER, D as DEFAULT_ADMIN_PATH, i as DEFAULT_API_PATH, j as DEFAULT_MAX_FILE_SIZE, k as DEFAULT_TOKEN_EXPIRATION, m as applyDefaults, n as applyPlugins, o as createRootEndpointHandler, p as decryptBackup, q as fillMissing, t as findConfigFile, u as forwardedClientIp, v as generateSlugs, w as importConfig, x as mergeForUpdate, y as parseId, z as platformClientIp, E as readCookie, F as validateFields, G as writeBackupFile } from './handler-DV-1ICVz.js';
 export { conditionIssues } from './conditions.js';
 
 /** The session cookie the REST API sets at login. */

package/dist/internal.js

@@ -56,7 +56,7 @@ import {
   verifyPassword,
   verifyTurnstile,
   writeBackupFile
-} from "./chunk-54UFTH6S.js";
+} from "./chunk-TMO4JTGJ.js";
 import {
   conditionIssues
 } from "./chunk-U266LV4M.js";

package/dist/{plugin-BXHlV5IZ.d.ts → plugin-C_vknKa2.d.ts}

@@ -1,4 +1,4 @@
-import { bd as Label, aE as Field, I as ID, k as AdminLocale, t as AdminSwitcher, c7 as SsoProviderRef } from './config-DL4beesW.js';
+import { bd as Label, aE as Field, I as ID, k as AdminLocale, t as AdminSwitcher, c7 as SsoProviderRef } from './config-n7PtGl4V.js';
 import { FieldCondition } from './conditions.js';
 
 /** A Web Component from an admin module, with its `props` (plain JSON). */

package/dist/plugin.d.ts

@@ -1,3 +1,3 @@
-export { a as ADMIN_ICONS, g as AdminComponent, j as AdminIcon, S as AuthUser, a3 as CliCommand, a4 as CollectionAccess, a6 as CollectionConfig, ab as Config, ac as ConfigError, al as DashboardWidget, aw as EasyCMSError, aA as Endpoint, aB as EndpointRequest, aC as ErrorCode, aE as Field, aF as FieldAccess, aI as FieldError, aL as FieldTypeBase, aM as FieldTypeDefinition, aN as FieldTypeValidateContext, a_ as ForbiddenError, b0 as GlobalConfig, I as ID, ba as JobConfig, bd as Label, br as NavGroup, bs as NotFoundError, bu as OnRequest, bv as OnRequestArgs, bx as PLUGIN_API_VERSION, bC as PayloadTooLargeError, bD as Plugin, bE as PluginInfo, bF as PluginTypes, bI as QueryError, bN as RequestContext, cc as TooManyRequestsError, cd as TypedPlugin, ce as UnauthorizedError, cm as ValidationError, cu as Where, cB as defineFieldType, cC as definePlugin } from './config-DL4beesW.js';
-export { A as ADMIN_API_VERSION, c as AdminElementProps, k as AdminPageRoute, S as SetFieldDetail, w as warnDeprecated } from './plugin-BXHlV5IZ.js';
+export { a as ADMIN_ICONS, g as AdminComponent, j as AdminIcon, S as AuthUser, a3 as CliCommand, a4 as CollectionAccess, a6 as CollectionConfig, ab as Config, ac as ConfigError, al as DashboardWidget, aw as EasyCMSError, aA as Endpoint, aB as EndpointRequest, aC as ErrorCode, aE as Field, aF as FieldAccess, aI as FieldError, aL as FieldTypeBase, aM as FieldTypeDefinition, aN as FieldTypeValidateContext, a_ as ForbiddenError, b0 as GlobalConfig, I as ID, ba as JobConfig, bd as Label, br as NavGroup, bs as NotFoundError, bu as OnRequest, bv as OnRequestArgs, bx as PLUGIN_API_VERSION, bC as PayloadTooLargeError, bD as Plugin, bE as PluginInfo, bF as PluginTypes, bI as QueryError, bN as RequestContext, cc as TooManyRequestsError, cd as TypedPlugin, ce as UnauthorizedError, cm as ValidationError, cu as Where, cB as defineFieldType, cC as definePlugin } from './config-n7PtGl4V.js';
+export { A as ADMIN_API_VERSION, c as AdminElementProps, k as AdminPageRoute, S as SetFieldDetail, w as warnDeprecated } from './plugin-C_vknKa2.js';
 import './conditions.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easy-cms/core",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "Embedded, code-first headless CMS for Nuxt and Next.js",
   "license": "MIT",
   "type": "module",