@easy-cms/core 1.11.0 → 1.12.0

package/dist/{chunk-TMO4JTGJ.js → chunk-244WCY6S.js}

@@ -59,6 +59,7 @@ var JOB_RUNS = "job-runs";
 var ROLES = "user-roles";
 var USER_IDENTITIES = "user-identities";
 var AUDIT_LOGS = "audit-logs";
+var OUTBOX = "outbox";
 var INTERNAL_COLLECTIONS = /* @__PURE__ */ new Set([
   SESSIONS,
   LOGIN_ATTEMPTS,
@@ -70,7 +71,8 @@ var INTERNAL_COLLECTIONS = /* @__PURE__ */ new Set([
   JOB_RUNS,
   ROLES,
   USER_IDENTITIES,
-  AUDIT_LOGS
+  AUDIT_LOGS,
+  OUTBOX
 ]);
 var DEFAULT_ROLES = ["admin", "editor"];
 var CREATED_BY_FIELD = {
@@ -519,6 +521,31 @@ var jobRunsCollection = {
     { name: "changedAt", type: "text" }
   ]
 };
+var outboxCollection = {
+  slug: OUTBOX,
+  access: { read: nobody, create: nobody, update: nobody, delete: nobody },
+  fields: [
+    // create | update | draft | delete, as the webhook event.
+    { name: "event", type: "text", required: true },
+    // The collection's or the global's slug.
+    { name: "target", type: "text", required: true },
+    { name: "global", type: "boolean" },
+    { name: "docId", type: "text" },
+    // The stored status before the save, for publish and unpublish events.
+    { name: "before", type: "text" },
+    // JSON: the document as saved (as deleted), the one before, and the user who saved.
+    { name: "doc", type: "textarea", required: true },
+    { name: "previousDoc", type: "textarea" },
+    { name: "user", type: "textarea" },
+    // Steps already done (hooks, webhooks, purge), so a retry runs only the rest.
+    { name: "done", type: "text" },
+    { name: "attempts", type: "number", required: true },
+    { name: "nextAttemptAt", type: "text", required: true, index: true },
+    // pending | running | failed
+    { name: "state", type: "text", required: true, index: true },
+    { name: "error", type: "text" }
+  ]
+};
 var emailDeliveriesCollection = {
   slug: EMAIL_DELIVERIES,
   access: { read: nobody, create: nobody, update: nobody, delete: nobody },
@@ -572,8 +599,8 @@ function cut(value) {
   if (typeof value === "string")
     return value.length > MAX_VALUE ? `${value.slice(0, MAX_VALUE)}\u2026` : value;
   if (value !== null && typeof value === "object") {
-    const json = JSON.stringify(value);
-    return json.length > MAX_VALUE ? "\u2026" : value;
+    const json2 = JSON.stringify(value);
+    return json2.length > MAX_VALUE ? "\u2026" : value;
   }
   return value;
 }
@@ -3797,7 +3824,8 @@ var VersionStore = class {
         snapshot: args.snapshot,
         createdAt: now,
         updatedAt: now
-      }
+      },
+      outbox: args.outbox
     });
     await this.prune(parent, doc, args.max);
     return toSummary(created);
@@ -4187,6 +4215,189 @@ function localizeSort(fields, sort, locale, locales = []) {
   );
 }
 
+// src/outbox.ts
+var DELAYS = [6e4, 5 * 6e4, 30 * 6e4, 2 * 36e5, 12 * 36e5];
+var LEASE = 5 * 6e4;
+var BATCH2 = 50;
+var later2 = (from, ms) => new Date(from.getTime() + ms).toISOString();
+var json = (value) => value === void 0 ? null : JSON.stringify(value);
+var parse2 = (value) => typeof value === "string" ? JSON.parse(value) : void 0;
+function withoutHash(value) {
+  if (!value || !("passwordHash" in value)) return value;
+  const { passwordHash: _, ...rest } = value;
+  return rest;
+}
+var Outbox = class {
+  constructor(db, logger, runner) {
+    this.db = db;
+    this.logger = logger;
+    this.runner = runner;
+  }
+  db;
+  logger;
+  runner;
+  draining;
+  again = false;
+  /** The row a save writes. For a create, `doc` has no id yet: it gets the written one. */
+  row(entry) {
+    return {
+      collection: OUTBOX,
+      data: (id) => {
+        const docId = entry.global ? null : String(entry.docId ?? id);
+        const doc = entry.event === "create" ? { ...entry.doc, id } : entry.doc;
+        const now = (/* @__PURE__ */ new Date()).toISOString();
+        return {
+          event: entry.event,
+          target: entry.target,
+          global: entry.global,
+          docId,
+          before: entry.before,
+          doc: JSON.stringify(withoutHash(doc)),
+          previousDoc: json(withoutHash(entry.previousDoc)),
+          user: json(withoutHash(entry.user)),
+          done: null,
+          attempts: 0,
+          nextAttemptAt: now,
+          state: "pending",
+          error: null,
+          createdAt: now,
+          updatedAt: now
+        };
+      }
+    };
+  }
+  /** Runs what is due in the background, e.g. right after a save commits. */
+  kick() {
+    if (this.draining) {
+      this.again = true;
+      return;
+    }
+    this.draining = (async () => {
+      do {
+        this.again = false;
+        await this.run();
+      } while (this.again);
+    })().catch((error) => this.logger.error(`Outbox: ${error.message}`, { error })).finally(() => {
+      this.draining = void 0;
+    });
+  }
+  /** Waits until the background run started by `kick` is over. */
+  async flush() {
+    while (this.draining) await this.draining;
+  }
+  /**
+   * Runs entries that are due: new ones, retries whose time came, and those a stopped worker
+   * left claimed. Runs with scheduled jobs too, which catches what `kick` missed.
+   */
+  async run(now = /* @__PURE__ */ new Date()) {
+    let ran = 0;
+    let failed = 0;
+    for (; ; ) {
+      const { docs } = await this.db.find({
+        collection: OUTBOX,
+        where: {
+          and: [
+            { state: { in: ["pending", "running"] } },
+            { nextAttemptAt: { lte: now.toISOString() } }
+          ]
+        },
+        sort: ["nextAttemptAt", "id"],
+        limit: BATCH2,
+        page: 1
+      });
+      let claimed = 0;
+      for (const row of docs) {
+        const result = await this.runRow(row, now);
+        if (result === void 0) continue;
+        claimed++;
+        if (result) ran++;
+        else failed++;
+      }
+      if (docs.length < BATCH2 || claimed === 0) return { ran, failed };
+    }
+  }
+  /** Puts a failed entry back in line, e.g. from the admin. */
+  async retry(id) {
+    const row = await this.db.findById({ collection: OUTBOX, id });
+    if (!row || row.state !== "failed") return false;
+    const { id: _, ...data } = row;
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const updated = await this.db.update({
+      collection: OUTBOX,
+      id,
+      data: { ...data, state: "pending", attempts: 0, nextAttemptAt: now, updatedAt: now },
+      where: { state: { equals: "failed" } }
+    });
+    if (updated) this.kick();
+    return updated !== null;
+  }
+  /** `true` when it ran, `false` when it failed, `undefined` when another worker has it. */
+  async runRow(row, now) {
+    const { id, ...data } = row;
+    const attempts = Number(data.attempts ?? 0) + 1;
+    let current = {
+      ...data,
+      state: "running",
+      attempts,
+      nextAttemptAt: later2(now, LEASE),
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    const claimed = await this.db.update({
+      collection: OUTBOX,
+      id,
+      data: current,
+      where: {
+        and: [{ state: { equals: data.state } }, { nextAttemptAt: { equals: data.nextAttemptAt } }]
+      }
+    });
+    if (!claimed) return void 0;
+    const done = new Set(
+      String(data.done ?? "").split(",").filter(Boolean)
+    );
+    const mark = async (step) => {
+      done.add(step);
+      current = { ...current, done: [...done].join(","), updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
+      await this.db.update({ collection: OUTBOX, id, data: current });
+    };
+    try {
+      await this.runner(entryOf(data), done, mark);
+      await this.db.delete({ collection: OUTBOX, id });
+      return true;
+    } catch (error) {
+      const message2 = error instanceof Error ? error.message : String(error);
+      const delay = DELAYS[attempts - 1];
+      await this.db.update({
+        collection: OUTBOX,
+        id,
+        data: {
+          ...current,
+          state: delay === void 0 ? "failed" : "pending",
+          nextAttemptAt: later2(now, delay ?? 0),
+          error: message2,
+          updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+        }
+      });
+      const what = `${data.event} of ${data.global ? "global " : ""}"${data.target}"`;
+      if (delay === void 0)
+        this.logger.error(`Outbox gave up on ${what} after ${attempts} attempts: ${message2}`);
+      else this.logger.warn(`Outbox: ${what} failed (${message2}); will retry`);
+      return false;
+    }
+  }
+};
+function entryOf(row) {
+  return {
+    event: row.event,
+    target: String(row.target),
+    global: row.global === true,
+    docId: typeof row.docId === "string" ? row.docId : null,
+    before: typeof row.before === "string" ? row.before : null,
+    doc: parse2(row.doc) ?? {},
+    previousDoc: parse2(row.previousDoc),
+    user: parse2(row.user) ?? null
+  };
+}
+
 // src/remote-file.ts
 import { lookup as dnsLookup } from "dns";
 import { request as httpRequest } from "http";
@@ -4426,7 +4637,7 @@ function read(response, maxBytes, deadline) {
 var keys = (list) => new Set(list.split(/\s+/).filter(Boolean));
 var CONFIG = keys(`secret db serverURL cors cronSecret timeZone webhooks events jobs localization routes admin
   upload auth collections globals endpoints cliCommands onRequest fieldTypes apiKeys email backups
-  audit logs countCacheSeconds maxPage httpCache plugins`);
+  audit logs countCacheSeconds maxPage httpCache outbox plugins`);
 var ADMIN = keys("path locale brand siteURL nav commands modules pages dashboard switcher");
 var AUTH = keys(`roles rbac tokenExpiration maxLoginAttempts lockWindow trustedOrigins
   resetPasswordExpiration inviteExpiration providers providerSignUp password setupCode members emails`);
@@ -4694,6 +4905,23 @@ var Webhooks = class {
       this.track(this.deliver(hook, payload));
     }
   }
+  /**
+   * `emit` for the outbox: resolves once each delivery is saved in the queue (sent, without a
+   * queue), so the event can count as done. Throws when saving fails; nothing is sent then.
+   */
+  async emitSaved(event, target, doc) {
+    const payload = { event, ...target, doc, timestamp: (/* @__PURE__ */ new Date()).toISOString() };
+    for (const hook of this.hooks) {
+      if (!matches(hook, payload)) continue;
+      if (!this.queue) {
+        await this.deliver(hook, payload);
+        continue;
+      }
+      await new Promise(
+        (saved, failed) => this.track(this.deliver(hook, payload, { saved: () => saved(), failed }))
+      );
+    }
+  }
   /** Waits for deliveries in progress, e.g. before a serverless function returns. */
   async flush() {
     while (this.pending.size > 0) await Promise.allSettled([...this.pending]);
@@ -4717,7 +4945,7 @@ var Webhooks = class {
       const claimed = await this.queue.claim(id, queued, {
         ...queued,
         attempts,
-        nextAttemptAt: later2(now, CLAIM2)
+        nextAttemptAt: later3(now, CLAIM2)
       });
       if (!claimed) continue;
       const result = await this.attempt(hook, queued.event, queued.body, queued.delivery);
@@ -4731,7 +4959,7 @@ var Webhooks = class {
       await this.queue.update(id, {
         ...queued,
         attempts,
-        nextAttemptAt: later2(now, delay ?? 0),
+        nextAttemptAt: later3(now, delay ?? 0),
         state: delay === void 0 ? "failed" : "pending",
         error: result.error
       });
@@ -4754,7 +4982,7 @@ var Webhooks = class {
     ).finally(() => this.pending.delete(tracked));
     this.pending.add(tracked);
   }
-  async deliver(hook, payload) {
+  async deliver(hook, payload, saving) {
     const delivery = randomUUID2();
     const body = JSON.stringify(payload);
     const { event } = payload;
@@ -4769,13 +4997,15 @@ var Webhooks = class {
       error
     });
     const { queue } = this;
-    const saved = queue ? this.saving.then(() => queue.add(entry(0, later2(/* @__PURE__ */ new Date(), CLAIM2), null))) : Promise.resolve(void 0);
+    const saved = queue ? this.saving.then(() => queue.add(entry(0, later3(/* @__PURE__ */ new Date(), CLAIM2), null))) : Promise.resolve(void 0);
     this.saving = saved.catch(() => {
     });
     let queued;
     try {
       queued = await saved;
+      saving?.saved();
     } catch (error) {
+      if (saving) return saving.failed(error);
       this.logger.error(`Could not save webhook delivery: ${error.message}`, { error });
     }
     for (let attempt = 0; ; attempt++) {
@@ -4788,7 +5018,7 @@ var Webhooks = class {
       if (delay === void 0) {
         if (queued === void 0 || !this.queue)
           return this.giveUp(hook, event, result.error, attempt + 1);
-        const next = later2(/* @__PURE__ */ new Date(), QUEUE_DELAYS2[0]);
+        const next = later3(/* @__PURE__ */ new Date(), QUEUE_DELAYS2[0]);
         await this.queue.update(queued, entry(attempt + 1, next, result.error));
         this.logger.warn(
           `Webhook ${hook.url} failed for ${event} (${result.error}); will retry later`
@@ -4833,7 +5063,7 @@ var Webhooks = class {
     );
   }
 };
-var later2 = (from, ms) => new Date(from.getTime() + ms).toISOString();
+var later3 = (from, ms) => new Date(from.getTime() + ms).toISOString();
 var isContentEvent = (event) => WEBHOOK_EVENTS.includes(event);
 function matches(hook, payload) {
   if (!isContentEvent(payload.event)) return hook.events?.includes(payload.event) === true;
@@ -4861,6 +5091,7 @@ var RESERVED_SLUGS = /* @__PURE__ */ new Set([
   "audit-logs",
   "api-keys",
   "jobs",
+  "outbox",
   "auth",
   "migrations",
   "access",
@@ -4892,6 +5123,7 @@ function validateConfig(config) {
   validateAudit(config, add);
   validateLogs(config, add);
   validateCountCache(config, add);
+  validateOutbox(config, add);
   validateMaxPage(config, add);
   validateHttpCache(config, add);
   validateAuth(config, add);
@@ -5541,6 +5773,10 @@ function validateMaxPage(config, add) {
   if (max !== void 0 && !(Number.isInteger(max) && max >= 1))
     add("maxPage", "must be a whole number, 1 or more");
 }
+function validateOutbox(config, add) {
+  if (config.outbox !== void 0 && typeof config.outbox !== "boolean")
+    add("outbox", "must be true or false");
+}
 function validateCountCache(config, add) {
   const seconds = config.countCacheSeconds;
   if (seconds !== void 0 && !(typeof seconds === "number" && Number.isFinite(seconds) && seconds >= 0))
@@ -6402,6 +6638,7 @@ async function resolveConfig(input) {
       ...config.apiKeys ? [apiKeysCollection] : [],
       ...config.email ? [emailDeliveriesCollection] : [],
       ...(config.jobs?.length ?? 0) > 0 ? [jobRunsCollection] : [],
+      ...config.outbox ? [outboxCollection] : [],
       databaseBackupsCollection,
       ...config.auth?.rbac ? [rolesCollection] : [],
       ...(config.auth?.providers?.length ?? 0) > 0 ? [userIdentitiesCollection] : [],
@@ -6490,8 +6727,18 @@ async function createEasyCMS(config, options = {}) {
     logger,
     interactive: options.interactive ?? false
   });
+  if (resolved3.outbox && db.outbox !== true) {
+    await db.destroy();
+    throw new ConfigError([
+      {
+        path: "outbox",
+        message: `needs a database adapter that writes outbox rows; "${resolved3.db.name}" doesn't`,
+        hint: "use @easy-cms/db-sqlite or @easy-cms/db-postgres 1.12 or later"
+      }
+    ]);
+  }
   const cms = new EasyCMS(resolved3, db, logger, storage, cwd);
-  const scheduling = [...resolved3.collections, ...resolved3.globals].some((c) => c.schedule) || (resolved3.webhooks?.length ?? 0) > 0 || resolved3.email !== void 0 || resolved3.jobs.length > 0;
+  const scheduling = [...resolved3.collections, ...resolved3.globals].some((c) => c.schedule) || (resolved3.webhooks?.length ?? 0) > 0 || resolved3.email !== void 0 || resolved3.jobs.length > 0 || resolved3.outbox === true;
   if (scheduling && options.scheduler !== false) cms.startScheduler();
   if (process.env.NODE_ENV === "production" && !resolved3.auth.setupCode && await cms.auth.hasUsers().catch(() => true) === false)
     logger.warn(
@@ -6531,6 +6778,8 @@ var EasyCMS = class {
   versions;
   webhooks;
   mailer;
+  /** With `outbox: true`: runs after hooks and events from rows saves write. */
+  outbox;
   /** @internal */
   constructor(config, db, logger = consoleLogger, storage = diskStorage({ dir: config.upload.dir }), cwd = process.cwd(), privateStorage) {
     this.config = config;
@@ -6558,6 +6807,7 @@ var EasyCMS = class {
       logger,
       config.collections.some((c) => c.slug === EMAIL_DELIVERIES) ? this.emailQueue() : void 0
     );
+    this.outbox = config.collections.some((c) => c.slug === OUTBOX) ? new Outbox(db, logger, (entry, done, mark) => this.runOutbox(entry, done, mark)) : void 0;
     this.auth = new Auth(this);
   }
   /**
@@ -7427,14 +7677,21 @@ var EasyCMS = class {
         ]);
       }
       const draft = { ...prepared, id: parsed, createdAt: existing.createdAt, updatedAt: now };
-      await this.saveVersion(config, collectionParent(collection2), parsed, draft, guard);
-      await this.notify(config.hooks?.afterChange, "afterChange", config.slug, {
-        ...base,
-        doc: draft,
-        previousDoc: current,
-        operation: "update"
+      const outbox2 = this.outboxRow(config, "draft", guard, draft, {
+        docId: parsed,
+        previousDoc: current
       });
-      this.emitChange(config, "draft", draft);
+      await this.saveVersion(config, collectionParent(collection2), parsed, draft, guard, outbox2);
+      if (outbox2) this.outbox?.kick();
+      else {
+        await this.notify(config.hooks?.afterChange, "afterChange", config.slug, {
+          ...base,
+          doc: draft,
+          previousDoc: current,
+          operation: "update"
+        });
+        this.emitChange(config, "draft", draft);
+      }
       await this.audited(config, "draft", draft, current, guard, mode);
       const [out2] = await this.output(config, [draft], guard, {
         ...options,
@@ -7463,7 +7720,18 @@ var EasyCMS = class {
       }
     }
     const data = { ...prepared, createdAt: existing.createdAt, updatedAt: now };
-    const doc = options.where ? await this.db.update({ collection: collection2, id: parsed, data, where: options.where }) : await this.db.update({ collection: collection2, id: parsed, data });
+    const outbox = this.outboxRow(
+      config,
+      "update",
+      guard,
+      { ...data, id: parsed },
+      {
+        docId: parsed,
+        previousDoc: current,
+        before: existing.status
+      }
+    );
+    const doc = options.where ? await this.db.update({ collection: collection2, id: parsed, data, where: options.where, outbox }) : await this.db.update({ collection: collection2, id: parsed, data, outbox });
     if (!doc) return null;
     if (moved) await moved.cleanUp();
     if (collection2 === MEDIA_FOLDERS) {
@@ -7473,13 +7741,16 @@ var EasyCMS = class {
     }
     if (!live) await this.saveVersion(config, collectionParent(collection2), parsed, doc, guard);
     if (password !== void 0) await this.auth.revokeSessions(parsed);
-    await this.notify(config.hooks?.afterChange, "afterChange", config.slug, {
-      ...base,
-      doc,
-      previousDoc: current,
-      operation: "update"
-    });
-    this.emitChange(config, "update", doc, existing.status);
+    if (outbox) this.outbox?.kick();
+    else {
+      await this.notify(config.hooks?.afterChange, "afterChange", config.slug, {
+        ...base,
+        doc,
+        previousDoc: current,
+        operation: "update"
+      });
+      this.emitChange(config, "update", doc, existing.status);
+    }
     await this.audited(config, "update", doc, current, guard, mode);
     const [out] = await this.output(config, [doc], guard, { ...options, draft: true });
     return out;
@@ -7517,7 +7788,8 @@ var EasyCMS = class {
       await this.checkMoveLimit(await this.folders.privacyAfter(parsed, { private: false }));
       await this.folders.release(existing);
     }
-    await this.db.delete({ collection: collection2, id: parsed });
+    const outbox = this.outboxRow(config, "delete", guard, existing, { docId: parsed });
+    await this.db.delete({ collection: collection2, id: parsed, outbox });
     if (collection2 === MEDIA_FOLDERS) {
       this.folders.invalidate();
       const parent = existing.parent ?? null;
@@ -7529,12 +7801,15 @@ var EasyCMS = class {
       for (const job of await this.pendingJobs(collection2, parsed))
         await this.db.delete({ collection: SCHEDULED_JOBS, id: job.id });
     }
-    await this.notify(config.hooks?.afterDelete, "afterDelete", config.slug, {
-      ...base,
-      id: parsed,
-      doc: existing
-    });
-    this.emitChange(config, "delete", existing);
+    if (outbox) this.outbox?.kick();
+    else {
+      await this.notify(config.hooks?.afterDelete, "afterDelete", config.slug, {
+        ...base,
+        id: parsed,
+        doc: existing
+      });
+      this.emitChange(config, "delete", existing);
+    }
     await this.audited(config, "delete", existing, existing, guard);
     const [out] = await this.output(config, [existing], guard, { depth: 0, draft: true });
     return out;
@@ -7691,26 +7966,38 @@ var EasyCMS = class {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     if (mode !== "unpublish" && this.separateDrafts(config) && existing.status === "published" && prepared.status === "draft") {
       const draft = { ...prepared, updatedAt: now };
-      await this.saveVersion(config, globalParent(key), 0, draft, guard);
+      const outbox2 = this.outboxRow(config, "draft", guard, draft, { previousDoc: current });
+      await this.saveVersion(config, globalParent(key), 0, draft, guard, outbox2);
+      if (outbox2) this.outbox?.kick();
+      else {
+        await this.notify(config.hooks?.afterChange, "afterChange", slug2, {
+          ...base,
+          doc: draft,
+          previousDoc: current,
+          operation: "update"
+        });
+        this.emitChange(config, "draft", draft);
+      }
+      await this.audited(config, "draft", draft, current, guard, mode);
+      return this.readGlobal(config, key, guard, { ...options, draft: true });
+    }
+    const data = { ...prepared, updatedAt: now };
+    const outbox = this.outboxRow(config, "update", guard, data, {
+      previousDoc: current,
+      before: existing.status
+    });
+    const doc = await this.db.updateGlobal({ slug: key, data, outbox });
+    await this.saveVersion(config, globalParent(key), 0, doc, guard);
+    if (outbox) this.outbox?.kick();
+    else {
       await this.notify(config.hooks?.afterChange, "afterChange", slug2, {
         ...base,
-        doc: draft,
+        doc,
         previousDoc: current,
         operation: "update"
       });
-      this.emitChange(config, "draft", draft);
-      await this.audited(config, "draft", draft, current, guard, mode);
-      return this.readGlobal(config, key, guard, { ...options, draft: true });
+      this.emitChange(config, "update", doc, existing.status);
     }
-    const doc = await this.db.updateGlobal({ slug: key, data: { ...prepared, updatedAt: now } });
-    await this.saveVersion(config, globalParent(key), 0, doc, guard);
-    await this.notify(config.hooks?.afterChange, "afterChange", slug2, {
-      ...base,
-      doc,
-      previousDoc: current,
-      operation: "update"
-    });
-    this.emitChange(config, "update", doc, existing.status);
     await this.audited(config, "update", doc, current, guard, mode);
     return this.readGlobal(config, key, guard, { ...options, draft: true });
   }
@@ -7824,9 +8111,21 @@ var EasyCMS = class {
       }
     };
   }
+  /**
+   * Waits until the outbox (`outbox: true`) ran what saves left so far, e.g. before a serverless
+   * function returns. What fails stays queued for its retry.
+   */
+  flushOutbox() {
+    return this.outbox?.flush() ?? Promise.resolve();
+  }
+  /** @internal Puts a failed outbox entry back in line (Settings → Jobs). */
+  retryOutbox(id) {
+    return this.outbox?.retry(id) ?? Promise.resolve(false);
+  }
   async destroy() {
     if (this.schedulerTimer) clearInterval(this.schedulerTimer);
     await this.running;
+    await this.outbox?.flush();
     await this.webhooks.flush();
     await this.mailer.flush();
     await this.db.destroy();
@@ -7873,7 +8172,8 @@ var EasyCMS = class {
         scheduled,
         webhooks: await this.retryWebhooks(now),
         emails: await this.mailer.retry(now),
-        jobs: await this.runConfigJobs(now)
+        jobs: await this.runConfigJobs(now),
+        outbox: await this.outbox?.run(now) ?? { ran: 0, failed: 0 }
       };
       const ranAt = (/* @__PURE__ */ new Date()).toISOString();
       await this.db.updateGlobal({ slug: JOBS_RAN, data: { at: ranAt, updatedAt: ranAt } }).catch((error) => this.logger.error(`Jobs: ${error.message}`, { error }));
@@ -8605,18 +8905,20 @@ var EasyCMS = class {
     if (password !== void 0) prepared.passwordHash = await hashPassword(password);
     if (collection2 === MEDIA_FOLDERS) await this.validateFolder(prepared, void 0);
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const doc = await this.db.create({
-      collection: collection2,
-      data: { ...prepared, createdAt: now, updatedAt: now }
-    });
+    const row = { ...prepared, createdAt: now, updatedAt: now };
+    const outbox = this.outboxRow(config, "create", hookGuard ?? guard, row);
+    const doc = await this.db.create({ collection: collection2, data: row, outbox });
     if (collection2 === MEDIA_FOLDERS) this.folders.invalidate();
     await this.saveVersion(config, collectionParent(collection2), doc.id, doc, guard);
-    await this.notify(config.hooks?.afterChange, "afterChange", collection2, {
-      ...base,
-      doc,
-      operation: "create"
-    });
-    this.emitChange(config, "create", doc);
+    if (outbox) this.outbox?.kick();
+    else {
+      await this.notify(config.hooks?.afterChange, "afterChange", collection2, {
+        ...base,
+        doc,
+        operation: "create"
+      });
+      this.emitChange(config, "create", doc);
+    }
     await this.audited(config, "create", doc, void 0, hookGuard ?? guard);
     const [out] = await this.output(config, [doc], hookGuard ?? guard, { ...options, draft: true });
     return out;
@@ -8674,23 +8976,21 @@ var EasyCMS = class {
     });
   }
   /**
-   * `httpCache.purge`: what readers see changed (anything, without drafts; with drafts, a
-   * published document saved, published, unpublished or deleted). Not awaited; failures are
-   * logged.
+   * The tags `httpCache.purge` gets for a change: what readers see changed (anything, without
+   * drafts; with drafts, a published document saved, published, unpublished or deleted).
    */
-  purgePublic(config, isGlobal, event, doc, before) {
-    const purge = this.config.httpCache?.purge;
-    if (!purge || config.httpCache === false || event === "draft") return;
+  purgeTags(config, event, doc, before) {
+    if (!this.config.httpCache?.purge || config.httpCache === false || event === "draft") return;
     if (config.drafts && doc.status !== "published" && before !== "published") return;
-    const tags = isGlobal ? cacheTags.global(config.slug) : cacheTags.document(config.slug, doc.id);
-    void Promise.resolve().then(() => purge(tags)).catch(
-      (error) => this.logger.error(`httpCache.purge failed: ${error.message}`, { error })
-    );
+    return this.isGlobal(config) ? cacheTags.global(config.slug) : cacheTags.document(config.slug, doc.id);
   }
-  /** Sends webhook events for a change; `before` is the stored status before it, if any. */
-  emitChange(config, event, doc, before) {
-    const isGlobal = !this.config.collections.includes(config);
-    if (!isGlobal && INTERNAL_COLLECTIONS.has(config.slug)) return;
+  isGlobal(config) {
+    return !this.config.collections.includes(config);
+  }
+  /** The webhook events of a change; `before` is the stored status before it, if any. */
+  changeEvents(config, event, doc, before) {
+    const isGlobal = this.isGlobal(config);
+    if (!isGlobal && INTERNAL_COLLECTIONS.has(config.slug)) return [];
     const body = isGlobal ? { ...snapshotOf(config.fields, doc), updatedAt: doc.updatedAt } : {
       id: doc.id,
       ...snapshotOf(config.fields, doc),
@@ -8698,13 +8998,77 @@ var EasyCMS = class {
       updatedAt: doc.updatedAt
     };
     const target = isGlobal ? { global: config.slug } : { collection: config.slug, id: doc.id };
-    this.webhooks.emit(event, target, body);
-    this.purgePublic(config, isGlobal, event, doc, before);
-    if (event === "draft" || event === "delete" || !config.drafts) return;
+    const events = [{ event, target, body }];
+    if (event === "draft" || event === "delete" || !config.drafts) return events;
     const after = doc.status;
-    if (after === "published" && before !== "published") this.webhooks.emit("publish", target, body);
+    if (after === "published" && before !== "published")
+      events.push({ event: "publish", target, body });
     if (after !== "published" && before === "published")
-      this.webhooks.emit("unpublish", target, body);
+      events.push({ event: "unpublish", target, body });
+    return events;
+  }
+  /**
+   * Sends webhook events for a change and purges the HTTP cache. Not awaited; purge failures
+   * are logged.
+   */
+  emitChange(config, event, doc, before) {
+    for (const change of this.changeEvents(config, event, doc, before))
+      this.webhooks.emit(change.event, change.target, change.body);
+    const purge = this.config.httpCache?.purge;
+    const tags = this.purgeTags(config, event, doc, before);
+    if (!purge || !tags) return;
+    void Promise.resolve().then(() => purge(tags)).catch(
+      (error) => this.logger.error(`httpCache.purge failed: ${error.message}`, { error })
+    );
+  }
+  /**
+   * The outbox row of a save (`outbox: true`): written in its transaction, then run by the outbox
+   * in place of its after hooks and events. `undefined` without the outbox, or with nothing to run.
+   */
+  outboxRow(config, event, guard, doc, extra = {}) {
+    if (!this.outbox) return void 0;
+    const hooks = event === "delete" ? config.hooks?.afterDelete : config.hooks?.afterChange;
+    const isGlobal = this.isGlobal(config);
+    const effects = (isGlobal || !INTERNAL_COLLECTIONS.has(config.slug)) && ((this.config.webhooks?.length ?? 0) > 0 || this.config.httpCache?.purge !== void 0);
+    if (!hooks?.length && !effects) return void 0;
+    return this.outbox.row({
+      event,
+      target: config.slug,
+      global: isGlobal,
+      docId: extra.docId,
+      before: typeof extra.before === "string" ? extra.before : null,
+      doc,
+      previousDoc: extra.previousDoc,
+      user: guard.user
+    });
+  }
+  /** Runs an outbox entry: what its save would have run right after it, without the outbox. */
+  async runOutbox(entry, done, mark) {
+    const config = entry.global ? this.config.globals.find((g) => g.slug === entry.target) : this.config.collections.find((c) => c.slug === entry.target);
+    if (!config) return;
+    const { doc, event } = entry;
+    if (!done.has("hooks")) {
+      const base = this.hookArgs(config, { enforce: false, user: entry.user, context: {} });
+      const hooks = event === "delete" ? config.hooks?.afterDelete : config.hooks?.afterChange;
+      const args = event === "delete" ? { ...base, id: parseId(entry.docId ?? void 0), doc } : {
+        ...base,
+        doc,
+        ...entry.previousDoc ? { previousDoc: entry.previousDoc } : {},
+        operation: event === "create" ? "create" : "update"
+      };
+      for (const hook of hooks ?? [])
+        await hook(args);
+      if (hooks?.length) await mark("hooks");
+    }
+    if (!done.has("webhooks")) {
+      const changes = this.changeEvents(config, event, doc, entry.before);
+      for (const change of changes)
+        await this.webhooks.emitSaved(change.event, change.target, change.body);
+      if (changes.length > 0 && (this.config.webhooks?.length ?? 0) > 0) await mark("webhooks");
+    }
+    const purge = this.config.httpCache?.purge;
+    const tags = this.purgeTags(config, event, doc, entry.before);
+    if (purge && tags) await purge(tags);
   }
   /**
    * Writes the audit log entry for a change (`audit`): publishing, unpublishing and restoring
@@ -8735,7 +9099,7 @@ var EasyCMS = class {
     );
   }
   /** Records a version after a save, when the collection or global keeps versions. */
-  async saveVersion(config, parent, id, doc, guard) {
+  async saveVersion(config, parent, id, doc, guard, outbox) {
     const max = versionLimit(config);
     if (max === void 0) return;
     await this.versions.save({
@@ -8744,7 +9108,8 @@ var EasyCMS = class {
       status: config.drafts ? doc.status ?? "draft" : null,
       snapshot: snapshotOf(config.fields, doc),
       author: guard.user?.id ?? null,
-      max
+      max,
+      outbox
     });
   }
   hookArgs(config, guard) {
@@ -9173,7 +9538,7 @@ function readCursor(cursor, query) {
 // src/rest/admin-jobs.ts
 var has = (config, slug2) => config.collections.some((c) => c.slug === slug2);
 function hasJobsPage(config) {
-  return config.jobs.length > 0 || has(config, SCHEDULED_JOBS);
+  return config.jobs.length > 0 || has(config, SCHEDULED_JOBS) || has(config, OUTBOX);
 }
 var text2 = (value) => typeof value === "string" && value !== "" ? value : null;
 async function adminJobs(cms, user) {
@@ -9206,6 +9571,7 @@ async function adminJobs(cms, user) {
     ...has(config, SCHEDULED_JOBS) ? ["scheduled"] : [],
     ...has(config, WEBHOOK_DELIVERIES) ? ["webhooks"] : [],
     ...has(config, EMAIL_DELIVERIES) ? ["emails"] : [],
+    ...has(config, OUTBOX) ? ["outbox"] : [],
     ...config.backups?.frequency ? ["backups"] : [],
     ...config.audit ? ["audit"] : []
   ];
@@ -9214,7 +9580,8 @@ async function adminJobs(cms, user) {
     lastRanAt: await cms.jobsLastRan(),
     builtIn,
     timeZone: config.timeZone ?? null,
-    canChange: isSystemAdmin(user)
+    canChange: isSystemAdmin(user),
+    outbox: has(config, OUTBOX) ? await adminOutbox(cms) : null
   };
   if (!has(config, SCHEDULED_JOBS)) return { ...head, scheduled: null };
   const { docs } = await cms.db.find({
@@ -9239,6 +9606,38 @@ async function adminJobs(cms, user) {
   });
   return { ...head, scheduled };
 }
+async function adminOutbox(cms) {
+  const count = (state) => cms.db.count({ collection: OUTBOX, where: { state: { in: state } } });
+  const { docs } = await cms.db.find({
+    collection: OUTBOX,
+    where: { attempts: { gt: 0 } },
+    sort: ["-updatedAt"],
+    limit: 100,
+    page: 1
+  });
+  return {
+    waiting: await count(["pending", "running"]),
+    failed: await count(["failed"]),
+    entries: docs.filter((row) => text2(row.error) !== null).map((row) => ({
+      id: row.id,
+      event: row.event,
+      ...row.global === true ? { global: String(row.target) } : { collection: String(row.target) },
+      doc: text2(row.docId),
+      attempts: Number(row.attempts ?? 0),
+      state: row.state === "failed" || row.state === "running" ? row.state : "pending",
+      error: text2(row.error),
+      nextAttemptAt: String(row.nextAttemptAt)
+    }))
+  };
+}
+async function retryOutbox(cms, user, id) {
+  if (!isSystemAdmin(user)) throw new ForbiddenError();
+  if (!has(cms.config, OUTBOX)) throw new NotFoundError(OUTBOX, id);
+  const row = await cms.db.findById({ collection: OUTBOX, id: parseId(id) ?? 0 });
+  if (!row) throw new NotFoundError(OUTBOX, id);
+  if (!await cms.retryOutbox(row.id))
+    throw new EasyCMSError("Only failed entries can be retried", 409);
+}
 var TIME_OF_DAY2 = /^([01]\d|2[0-3]):[0-5]\d$/;
 async function updateJob(cms, user, name, body) {
   if (!isSystemAdmin(user)) throw new ForbiddenError();
@@ -9945,7 +10344,7 @@ async function readAdminModule(cms, index) {
 }
 
 // src/version.ts
-var VERSION = true ? "1.11.0" : "0.0.0-dev";
+var VERSION = true ? "1.12.0" : "0.0.0-dev";
 
 // src/rest/handler.ts
 import { randomUUID as randomUUID4 } from "crypto";
@@ -9955,7 +10354,7 @@ var PER_PAGE = 50;
 var collectionOf = (kind) => kind === "webhook" ? WEBHOOK_DELIVERIES : EMAIL_DELIVERIES;
 var exists = (cms, kind) => cms.config.collections.some((c) => c.slug === collectionOf(kind));
 var isDeliveryKind = (value) => value === "webhook" || value === "email";
-function parse2(text3) {
+function parse3(text3) {
   try {
     const value = JSON.parse(String(text3 ?? ""));
     return typeof value === "object" && value !== null ? value : {};
@@ -9974,7 +10373,7 @@ function toAdmin2(kind, row) {
     nextAttemptAt: String(row.nextAttemptAt ?? "")
   };
   if (kind === "webhook") {
-    const payload = parse2(row.body);
+    const payload = parse3(row.body);
     return {
       ...base,
       kind,
@@ -9986,7 +10385,7 @@ function toAdmin2(kind, row) {
       body: String(row.body ?? "")
     };
   }
-  const message2 = parse2(row.message);
+  const message2 = parse3(row.message);
   const to = message2.to;
   return {
     ...base,
@@ -11503,6 +11902,13 @@ async function route(cms, ctx, method, path, options) {
       await cms.audit.record({ action: "jobs.run", target: "jobs", detail: result });
       return { body: result };
     }
+    if (third === "outbox" && segments.length === 4) {
+      if (method !== "POST") throw methodNotAllowed(ctx, "POST");
+      const id2 = segments[3];
+      await retryOutbox(cms, ctx.user, id2);
+      await cms.audit.record({ action: "jobs.outbox.retry", target: "jobs", detail: { id: id2 } });
+      return { body: await adminJobs(cms, ctx.user) };
+    }
     if (third !== void 0 && segments.length === 3) {
       if (method !== "PATCH") throw methodNotAllowed(ctx, "PATCH");
       const { action, detail } = await updateJob(

package/dist/{config-n7PtGl4V.d.ts → config-CHEEPk1d.d.ts}

@@ -201,6 +201,17 @@ interface CreateMigrationResult {
     readonly file: string;
     readonly statements: readonly string[];
 }
+/**
+ * A row written with a document, in the same transaction (`outbox: true` in the config): a write
+ * that commits leaves it, one that doesn't leaves nothing. Not written when an `update` with
+ * `where` doesn't match.
+ */
+interface OutboxRow {
+    /** The collection the row goes to. */
+    readonly collection: string;
+    /** The row's fields, given the written document's id (`null` for a global). */
+    data(id: ID | null): Record<string, unknown>;
+}
 /** A connected database bound to one config. Returned by `DatabaseAdapter.init`. */
 interface Database {
     find(args: FindArgs): Promise<PaginatedDocs<RawDocument>>;
@@ -231,6 +242,7 @@ interface Database {
     create(args: {
         collection: string;
         data: Record<string, unknown>;
+        outbox?: OutboxRow | undefined;
     }): Promise<RawDocument>;
     /**
      * `data` holds the whole document after merging. Runs in one transaction. With `where`, only
@@ -241,12 +253,14 @@ interface Database {
         collection: string;
         id: ID;
         data: Record<string, unknown>;
+        outbox?: OutboxRow | undefined;
     }): Promise<RawDocument>;
     update(args: {
         collection: string;
         id: ID;
         data: Record<string, unknown>;
         where: Where;
+        outbox?: OutboxRow | undefined;
     }): Promise<RawDocument | null>;
     /**
      * Adds `by` to a top-level number field in one statement, safe against concurrent calls; an
@@ -264,6 +278,7 @@ interface Database {
     delete(args: {
         collection: string;
         id: ID;
+        outbox?: OutboxRow | undefined;
     }): Promise<void>;
     findGlobal(args: {
         slug: string;
@@ -271,7 +286,13 @@ interface Database {
     updateGlobal(args: {
         slug: string;
         data: Record<string, unknown>;
+        outbox?: OutboxRow | undefined;
     }): Promise<Record<string, unknown>>;
+    /**
+     * True when `create`, `update`, `delete` and `updateGlobal` take `outbox`, a row written in
+     * the same transaction. Required by `outbox: true` in the config.
+     */
+    readonly outbox?: boolean | undefined;
     /** Writes a migration file for the difference between the config and the latest migration. `null` when nothing changed. */
     createMigration(args: {
         name: string;
@@ -1778,6 +1799,8 @@ declare class EasyCMS<C extends Config = Config> {
     private readonly versions;
     private readonly webhooks;
     private readonly mailer;
+    /** With `outbox: true`: runs after hooks and events from rows saves write. */
+    private readonly outbox;
     /**
      * The user and context of a request, as the REST API works them out: its session cookie or
      * Bearer token, then `onRequest`. For framework routes and server code that act for a visitor;
@@ -2038,6 +2061,11 @@ declare class EasyCMS<C extends Config = Config> {
     flushEmails(): Promise<void>;
     /** Emails queued until sent, stored in `email-deliveries`. */
     private emailQueue;
+    /**
+     * Waits until the outbox (`outbox: true`) ran what saves left so far, e.g. before a serverless
+     * function returns. What fails stays queued for its retry.
+     */
+    flushOutbox(): Promise<void>;
     destroy(): Promise<void>;
     private schedulerTimer;
     private running;
@@ -2065,6 +2093,11 @@ declare class EasyCMS<C extends Config = Config> {
             ran: number;
             failed: number;
         };
+        /** Outbox entries (`outbox: true`) run, and those that failed (to be retried). */
+        outbox: {
+            ran: number;
+            failed: number;
+        };
     }>;
     private runJobsNow;
     /**
@@ -2184,13 +2217,25 @@ declare class EasyCMS<C extends Config = Config> {
     /** Replaces published documents that have a newer draft with that draft. */
     private withDrafts;
     /**
-     * `httpCache.purge`: what readers see changed (anything, without drafts; with drafts, a
-     * published document saved, published, unpublished or deleted). Not awaited; failures are
-     * logged.
+     * The tags `httpCache.purge` gets for a change: what readers see changed (anything, without
+     * drafts; with drafts, a published document saved, published, unpublished or deleted).
+     */
+    private purgeTags;
+    private isGlobal;
+    /** The webhook events of a change; `before` is the stored status before it, if any. */
+    private changeEvents;
+    /**
+     * Sends webhook events for a change and purges the HTTP cache. Not awaited; purge failures
+     * are logged.
      */
-    private purgePublic;
-    /** Sends webhook events for a change; `before` is the stored status before it, if any. */
     private emitChange;
+    /**
+     * The outbox row of a save (`outbox: true`): written in its transaction, then run by the outbox
+     * in place of its after hooks and events. `undefined` without the outbox, or with nothing to run.
+     */
+    private outboxRow;
+    /** Runs an outbox entry: what its save would have run right after it, without the outbox. */
+    private runOutbox;
     /**
      * Writes the audit log entry for a change (`audit`): publishing, unpublishing and restoring
      * are told apart from other saves.
@@ -3420,6 +3465,15 @@ interface Config {
      * requests get `400`, pointing to `cursor`. Deep pages are read row by row. Default: no limit.
      */
     readonly maxPage?: number;
+    /**
+     * Runs `afterChange` and `afterDelete` hooks, webhooks and `httpCache.purge` from an outbox:
+     * saving a document also queues them, in the same database transaction, and a worker runs them
+     * after it commits, retrying what fails. A save that succeeds always gets its side effects (at
+     * least once; hooks must be safe to run again), and the response doesn't wait for them. Hooks
+     * then get the user who saved but no `context`. Needs a migration for the `outbox` table.
+     * Default `false`: hooks run in the request, after the save.
+     */
+    readonly outbox?: boolean;
     readonly plugins?: readonly Plugin[];
 }
 /** The config after plugins ran, validation passed and defaults were applied. */
@@ -3451,5 +3505,5 @@ interface ResolvedConfig extends Omit<Config, 'cors' | 'localization' | 'routes'
  */
 declare function defineConfig<const TConfig extends Config>(config: TConfig): TConfig;
 
-export { ADAPTER_API_VERSION as A, AuditLog as J, Auth as M, ADMIN_ICONS as a, FIELD_TYPES as aD, ForbiddenError as a_, ConfigError as ac, EasyCMS as av, EasyCMSError as aw, PayloadTooLargeError as bC, QueryError as bI, ROLE_OPERATIONS as bJ, Roles as bU, SchemaError as bX, NotFoundError as bs, PLUGIN_API_VERSION as bx, logFormat as c$, SingleSignOn as c3, defineConfig as cA, defineFieldType as cB, definePlugin as cC, diskStorage as cD, hasRows as cE, isAdmin as cF, isHasMany as cG, isSignedIn as cH, isStaff as cI, isSystemAdmin as cJ, jsonLogger as cK, mimeAllowedBy as cL, rowFields as cM, silentLogger as cN, uniqueWithinOf as cO, API_KEYS as cP, API_KEY_GLOBAL_OPERATIONS as cQ, API_KEY_OPERATIONS as cR, DEFAULT_MAX_VERSIONS as cS, DEFAULT_PASSWORD_EMAILS as cT, FIELD_TYPE_BASES as cU, FOLDER_LEVELS as cV, MediaFolders as cW, SSO_COOKIE as cX, codeOfStatus as cY, isJsonLogger as cZ, keyAllows as c_, TooManyRequestsError as cc, UnauthorizedError as ce, ValidationError as cm, WEBHOOK_EVENTS as cq, anyone as cw, consoleEmail as cx, consoleLogger as cy, createEasyCMS as cz };
-export type { BuiltinMediaCollection as $, ApiKeyOperation as B, ApiKeyPermissions as C, ArrayField as D, EmailSetting as E, AuditChange as F, AuditConfig as G, AuditEntry as H, ID as I, AuditPage as K, AuditVerification as L, AuthConfig as N, AuthProvider as O, PaginatedDocs as P, AuthProviderProfile as Q, AuthProviderRequest as R, AuthUser as S, BackupsConfig as T, BeforeChangeHook as U, BeforeDeleteHook as V, BeforeValidateHook as W, Block as X, BlocksField as Y, BooleanField as Z, BuiltinApiKeysCollection as _, GlobalAccess as a$, BuiltinMediaFoldersCollection as a0, BuiltinUsersCollection as a1, BundleHints as a2, CliCommand as a3, CollectionAccess as a4, CollectionAdmin as a5, CollectionConfig as a6, CollectionDocument as a7, CollectionHooks as a8, CollectionListAdmin as a9, Endpoint as aA, EndpointRequest as aB, ErrorCode as aC, Field as aE, FieldAccess as aF, FieldAccessFn as aG, FieldAdmin as aH, FieldError as aI, FieldRule as aJ, FieldType as aK, FieldTypeBase as aL, FieldTypeDefinition as aM, FieldTypeValidateContext as aN, FieldValidate as aO, FieldValidateContext as aP, FieldValue as aQ, FieldsInput as aR, FieldsValue as aS, FilterOptions as aT, FilterOptionsArgs as aU, FindAfterArgs as aV, FindArgs as aW, FindOptions as aX, FolderLevel as aY, FolderPermissions as aZ, CollectionSlug as aa, Config as ab, ConfigIssue as ad, ContainerAdmin as ae, CreateEasyCMSOptions as af, CreateInput as ag, CreateMigrationResult as ah, CursorDocs as ai, CustomField as aj, CustomFieldTypes as ak, DashboardWidget as al, Database as am, DatabaseAdapter as an, DatabaseInitArgs as ao, DatabaseTransfer as ap, DateField as aq, DepthOptions as ar, DirectUpload as as, DiskStorageOptions as at, DocumentOf as au, EmailAdapter as ax, EmailField as ay, EmailMessage as az, Access as b, Session as b$, GlobalConfig as b0, GlobalDocument as b1, GlobalHooks as b2, GlobalInput as b3, GlobalSlug as b4, GroupField as b5, ImageSize as b6, IncrementOptions as b7, InferCollection as b8, InferGlobal as b9, PasswordEmailFn as bA, PasswordLinkOptions as bB, Plugin as bD, PluginInfo as bE, PluginTypes as bF, PreviewTarget as bG, PreviewURL as bH, RawDocument as bK, ReadOptions as bL, RelationshipField as bM, RequestContext as bN, ResolvedConfig as bO, RichTextDocument as bP, RichTextField as bQ, Role as bR, RoleOperation as bS, RolePermissions as bT, RoutesConfig as bV, ScheduledPublish as bW, SchemaMode as bY, SelectField as bZ, SelectOption as b_, JobConfig as ba, JsonField as bb, KeysetPage as bc, Label as bd, LayoutNode as be, LivePreview as bf, LocaleOf as bg, LocalizationConfig as bh, LogDetails as bi, Logger as bj, LoginArgs as bk, LogsConfig as bl, MediaDocument as bm, MediaSize as bn, MembersConfig as bo, MembersSignup as bp, MigrationInfo as bq, NavGroup as br, NumberField as bt, OnRequest as bu, OnRequestArgs as bv, Operation as bw, PasswordEmail as by, PasswordEmailArgs as bz, AccessArgs as c, SidebarPanel as c0, SignupArgs as c1, SignupResult as c2, SlugField as c4, SlugOf as c5, SsoOutcome as c6, SsoProviderRef as c7, StorageAdapter as c8, StoredFile as c9, TextField as ca, TextareaField as cb, TypedPlugin as cd, UncountedDocs as cf, UpdateInput as cg, UpdateOptions as ch, UploadConfig as ci, UploadField as cj, UploadFromURLConfig as ck, UserIdentity as cl, Version as cn, VersionSummary as co, VersionsConfig as cp, WebhookConfig as cr, WebhookEvent as cs, WebhookPayload as ct, Where as cu, WhereOperators as cv, AccessOptions as d, AdminBrand as e, AdminCommand as f, AdminComponent as g, AdminConfig as h, AdminFieldArgs as i, AdminIcon as j, AdminLocale as k, AdminPage as l, AdminRole as m, AdminRoleChange as n, AdminRoleField as o, AdminRoleTarget as p, AdminRoleView as q, AdminRoles as r, AdminSso as s, AdminSwitcher as t, AdminViewAccess as u, AfterChangeHook as v, AfterDeleteHook as w, AfterReadHook as x, ApiKeyContext as y, ApiKeyGlobalOperation as z };
+export { ADAPTER_API_VERSION as A, AuditLog as J, Auth as M, ADMIN_ICONS as a, FIELD_TYPES as aD, ForbiddenError as a_, ConfigError as ac, EasyCMS as av, EasyCMSError as aw, PayloadTooLargeError as bD, QueryError as bJ, ROLE_OPERATIONS as bK, Roles as bV, SchemaError as bY, NotFoundError as bs, PLUGIN_API_VERSION as by, keyAllows as c$, SingleSignOn as c4, createEasyCMS as cA, defineConfig as cB, defineFieldType as cC, definePlugin as cD, diskStorage as cE, hasRows as cF, isAdmin as cG, isHasMany as cH, isSignedIn as cI, isStaff as cJ, isSystemAdmin as cK, jsonLogger as cL, mimeAllowedBy as cM, rowFields as cN, silentLogger as cO, uniqueWithinOf as cP, API_KEYS as cQ, API_KEY_GLOBAL_OPERATIONS as cR, API_KEY_OPERATIONS as cS, DEFAULT_MAX_VERSIONS as cT, DEFAULT_PASSWORD_EMAILS as cU, FIELD_TYPE_BASES as cV, FOLDER_LEVELS as cW, MediaFolders as cX, SSO_COOKIE as cY, codeOfStatus as cZ, isJsonLogger as c_, TooManyRequestsError as cd, UnauthorizedError as cf, ValidationError as cn, WEBHOOK_EVENTS as cr, anyone as cx, consoleEmail as cy, consoleLogger as cz, logFormat as d0 };
+export type { BuiltinMediaCollection as $, ApiKeyOperation as B, ApiKeyPermissions as C, ArrayField as D, EmailSetting as E, AuditChange as F, AuditConfig as G, AuditEntry as H, ID as I, AuditPage as K, AuditVerification as L, AuthConfig as N, AuthProvider as O, PaginatedDocs as P, AuthProviderProfile as Q, AuthProviderRequest as R, AuthUser as S, BackupsConfig as T, BeforeChangeHook as U, BeforeDeleteHook as V, BeforeValidateHook as W, Block as X, BlocksField as Y, BooleanField as Z, BuiltinApiKeysCollection as _, GlobalAccess as a$, BuiltinMediaFoldersCollection as a0, BuiltinUsersCollection as a1, BundleHints as a2, CliCommand as a3, CollectionAccess as a4, CollectionAdmin as a5, CollectionConfig as a6, CollectionDocument as a7, CollectionHooks as a8, CollectionListAdmin as a9, Endpoint as aA, EndpointRequest as aB, ErrorCode as aC, Field as aE, FieldAccess as aF, FieldAccessFn as aG, FieldAdmin as aH, FieldError as aI, FieldRule as aJ, FieldType as aK, FieldTypeBase as aL, FieldTypeDefinition as aM, FieldTypeValidateContext as aN, FieldValidate as aO, FieldValidateContext as aP, FieldValue as aQ, FieldsInput as aR, FieldsValue as aS, FilterOptions as aT, FilterOptionsArgs as aU, FindAfterArgs as aV, FindArgs as aW, FindOptions as aX, FolderLevel as aY, FolderPermissions as aZ, CollectionSlug as aa, Config as ab, ConfigIssue as ad, ContainerAdmin as ae, CreateEasyCMSOptions as af, CreateInput as ag, CreateMigrationResult as ah, CursorDocs as ai, CustomField as aj, CustomFieldTypes as ak, DashboardWidget as al, Database as am, DatabaseAdapter as an, DatabaseInitArgs as ao, DatabaseTransfer as ap, DateField as aq, DepthOptions as ar, DirectUpload as as, DiskStorageOptions as at, DocumentOf as au, EmailAdapter as ax, EmailField as ay, EmailMessage as az, Access as b, SelectOption as b$, GlobalConfig as b0, GlobalDocument as b1, GlobalHooks as b2, GlobalInput as b3, GlobalSlug as b4, GroupField as b5, ImageSize as b6, IncrementOptions as b7, InferCollection as b8, InferGlobal as b9, PasswordEmailArgs as bA, PasswordEmailFn as bB, PasswordLinkOptions as bC, Plugin as bE, PluginInfo as bF, PluginTypes as bG, PreviewTarget as bH, PreviewURL as bI, RawDocument as bL, ReadOptions as bM, RelationshipField as bN, RequestContext as bO, ResolvedConfig as bP, RichTextDocument as bQ, RichTextField as bR, Role as bS, RoleOperation as bT, RolePermissions as bU, RoutesConfig as bW, ScheduledPublish as bX, SchemaMode as bZ, SelectField as b_, JobConfig as ba, JsonField as bb, KeysetPage as bc, Label as bd, LayoutNode as be, LivePreview as bf, LocaleOf as bg, LocalizationConfig as bh, LogDetails as bi, Logger as bj, LoginArgs as bk, LogsConfig as bl, MediaDocument as bm, MediaSize as bn, MembersConfig as bo, MembersSignup as bp, MigrationInfo as bq, NavGroup as br, NumberField as bt, OnRequest as bu, OnRequestArgs as bv, Operation as bw, OutboxRow as bx, PasswordEmail as bz, AccessArgs as c, Session as c0, SidebarPanel as c1, SignupArgs as c2, SignupResult as c3, SlugField as c5, SlugOf as c6, SsoOutcome as c7, SsoProviderRef as c8, StorageAdapter as c9, StoredFile as ca, TextField as cb, TextareaField as cc, TypedPlugin as ce, UncountedDocs as cg, UpdateInput as ch, UpdateOptions as ci, UploadConfig as cj, UploadField as ck, UploadFromURLConfig as cl, UserIdentity as cm, Version as co, VersionSummary as cp, VersionsConfig as cq, WebhookConfig as cs, WebhookEvent as ct, WebhookPayload as cu, Where as cv, WhereOperators as cw, AccessOptions as d, AdminBrand as e, AdminCommand as f, AdminComponent as g, AdminConfig as h, AdminFieldArgs as i, AdminIcon as j, AdminLocale as k, AdminPage as l, AdminRole as m, AdminRoleChange as n, AdminRoleField as o, AdminRoleTarget as p, AdminRoleView as q, AdminRoles as r, AdminSso as s, AdminSwitcher as t, AdminViewAccess as u, AfterChangeHook as v, AfterDeleteHook as w, AfterReadHook as x, ApiKeyContext as y, ApiKeyGlobalOperation as z };

package/dist/{handler-DV-1ICVz.d.ts → handler-adKUq8-U.d.ts}

@@ -1,4 +1,4 @@
-import { I as ID, ab as Config, av as EasyCMS, bh as LocalizationConfig, aE as Field, aI as FieldError, aT as FilterOptions, af as CreateEasyCMSOptions, bO as ResolvedConfig } from './config-n7PtGl4V.js';
+import { I as ID, ab as Config, av as EasyCMS, bh as LocalizationConfig, aE as Field, aI as FieldError, aT as FilterOptions, af as CreateEasyCMSOptions, bP as ResolvedConfig } from './config-CHEEPk1d.js';
 
 /** Decrypts a file from `encryptBackup`; throws for another key or a changed file. */
 declare function decryptBackup(data: Uint8Array, encryptionKey: string): Uint8Array;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { P as PaginatedDocs, I as ID, E as EmailSetting } from './config-n7PtGl4V.js';
-export { A as ADAPTER_API_VERSION, a as ADMIN_ICONS, b as Access, c as AccessArgs, d as AccessOptions, e as AdminBrand, f as AdminCommand, g as AdminComponent, h as AdminConfig, i as AdminFieldArgs, j as AdminIcon, k as AdminLocale, l as AdminPage, m as AdminRole, n as AdminRoleChange, o as AdminRoleField, p as AdminRoleTarget, q as AdminRoleView, r as AdminRoles, s as AdminSso, t as AdminSwitcher, u as AdminViewAccess, v as AfterChangeHook, w as AfterDeleteHook, x as AfterReadHook, y as ApiKeyContext, z as ApiKeyGlobalOperation, B as ApiKeyOperation, C as ApiKeyPermissions, D as ArrayField, F as AuditChange, G as AuditConfig, H as AuditEntry, J as AuditLog, K as AuditPage, L as AuditVerification, M as Auth, N as AuthConfig, O as AuthProvider, Q as AuthProviderProfile, R as AuthProviderRequest, S as AuthUser, T as BackupsConfig, U as BeforeChangeHook, V as BeforeDeleteHook, W as BeforeValidateHook, X as Block, Y as BlocksField, Z as BooleanField, _ as BuiltinApiKeysCollection, $ as BuiltinMediaCollection, a0 as BuiltinMediaFoldersCollection, a1 as BuiltinUsersCollection, a2 as BundleHints, a3 as CliCommand, a4 as CollectionAccess, a5 as CollectionAdmin, a6 as CollectionConfig, a7 as CollectionDocument, a8 as CollectionHooks, a9 as CollectionListAdmin, aa as CollectionSlug, ab as Config, ac as ConfigError, ad as ConfigIssue, ae as ContainerAdmin, af as CreateEasyCMSOptions, ag as CreateInput, ah as CreateMigrationResult, ai as CursorDocs, aj as CustomField, ak as CustomFieldTypes, al as DashboardWidget, am as Database, an as DatabaseAdapter, ao as DatabaseInitArgs, ap as DatabaseTransfer, aq as DateField, ar as DepthOptions, as as DirectUpload, at as DiskStorageOptions, au as DocumentOf, av as EasyCMS, aw as EasyCMSError, ax as EmailAdapter, ay as EmailField, az as EmailMessage, aA as Endpoint, aB as EndpointRequest, aC as ErrorCode, aD as FIELD_TYPES, aE as Field, aF as FieldAccess, aG as FieldAccessFn, aH as FieldAdmin, aI as FieldError, aJ as FieldRule, aK as FieldType, aL as FieldTypeBase, aM as FieldTypeDefinition, aN as FieldTypeValidateContext, aO as FieldValidate, aP as FieldValidateContext, aQ as FieldValue, aR as FieldsInput, aS as FieldsValue, aT as FilterOptions, aU as FilterOptionsArgs, aV as FindAfterArgs, aW as FindArgs, aX as FindOptions, aY as FolderLevel, aZ as FolderPermissions, a_ as ForbiddenError, a$ as GlobalAccess, b0 as GlobalConfig, b1 as GlobalDocument, b2 as GlobalHooks, b3 as GlobalInput, b4 as GlobalSlug, b5 as GroupField, b6 as ImageSize, b7 as IncrementOptions, b8 as InferCollection, b9 as InferGlobal, ba as JobConfig, bb as JsonField, bc as KeysetPage, bd as Label, be as LayoutNode, bf as LivePreview, bg as LocaleOf, bh as LocalizationConfig, bi as LogDetails, bj as Logger, bk as LoginArgs, bl as LogsConfig, bm as MediaDocument, bn as MediaSize, bo as MembersConfig, bp as MembersSignup, bq as MigrationInfo, br as NavGroup, bs as NotFoundError, bt as NumberField, bu as OnRequest, bv as OnRequestArgs, bw as Operation, bx as PLUGIN_API_VERSION, by as PasswordEmail, bz as PasswordEmailArgs, bA as PasswordEmailFn, bB as PasswordLinkOptions, bC as PayloadTooLargeError, bD as Plugin, bE as PluginInfo, bF as PluginTypes, bG as PreviewTarget, bH as PreviewURL, bI as QueryError, bJ as ROLE_OPERATIONS, bK as RawDocument, bL as ReadOptions, bM as RelationshipField, bN as RequestContext, bO as ResolvedConfig, bP as RichTextDocument, bQ as RichTextField, bR as Role, bS as RoleOperation, bT as RolePermissions, bU as Roles, bV as RoutesConfig, bW as ScheduledPublish, bX as SchemaError, bY as SchemaMode, bZ as SelectField, b_ as SelectOption, b$ as Session, c0 as SidebarPanel, c1 as SignupArgs, c2 as SignupResult, c3 as SingleSignOn, c4 as SlugField, c5 as SlugOf, c6 as SsoOutcome, c7 as SsoProviderRef, c8 as StorageAdapter, c9 as StoredFile, ca as TextField, cb as TextareaField, cc as TooManyRequestsError, cd as TypedPlugin, ce as UnauthorizedError, cf as UncountedDocs, cg as UpdateInput, ch as UpdateOptions, ci as UploadConfig, cj as UploadField, ck as UploadFromURLConfig, cl as UserIdentity, cm as ValidationError, cn as Version, co as VersionSummary, cp as VersionsConfig, cq as WEBHOOK_EVENTS, cr as WebhookConfig, cs as WebhookEvent, ct as WebhookPayload, cu as Where, cv as WhereOperators, cw as anyone, cx as consoleEmail, cy as consoleLogger, cz as createEasyCMS, cA as defineConfig, cB as defineFieldType, cC as definePlugin, cD as diskStorage, cE as hasRows, cF as isAdmin, cG as isHasMany, cH as isSignedIn, cI as isStaff, cJ as isSystemAdmin, cK as jsonLogger, cL as mimeAllowedBy, cM as rowFields, cN as silentLogger, cO as uniqueWithinOf } from './config-n7PtGl4V.js';
-export { A as ADMIN_API_VERSION, a as AdminCollection, b as AdminComponentRef, c as AdminElementProps, d as AdminField, e as AdminGlobal, f as AdminLayoutNode, g as AdminNavGroup, h as AdminNavItem, i as AdminNavNode, j as AdminPageRef, k as AdminPageRoute, l as AdminSchema, m as AdminWidgetRef, S as SetFieldDetail, w as warnDeprecated } from './plugin-C_vknKa2.js';
-export { A as AdminBackup, a as AdminBackups, b as ApiHandlerOptions, B as BackupState, L as LoadConfigOptions, R as RestHandler, c as RestHandlerOptions, d as createApiHandler, e as createRestHandler, l as loadConfig, r as resolveConfig, s as sharedEasyCMS, f as slugify } from './handler-DV-1ICVz.js';
+import { P as PaginatedDocs, I as ID, E as EmailSetting } from './config-CHEEPk1d.js';
+export { A as ADAPTER_API_VERSION, a as ADMIN_ICONS, b as Access, c as AccessArgs, d as AccessOptions, e as AdminBrand, f as AdminCommand, g as AdminComponent, h as AdminConfig, i as AdminFieldArgs, j as AdminIcon, k as AdminLocale, l as AdminPage, m as AdminRole, n as AdminRoleChange, o as AdminRoleField, p as AdminRoleTarget, q as AdminRoleView, r as AdminRoles, s as AdminSso, t as AdminSwitcher, u as AdminViewAccess, v as AfterChangeHook, w as AfterDeleteHook, x as AfterReadHook, y as ApiKeyContext, z as ApiKeyGlobalOperation, B as ApiKeyOperation, C as ApiKeyPermissions, D as ArrayField, F as AuditChange, G as AuditConfig, H as AuditEntry, J as AuditLog, K as AuditPage, L as AuditVerification, M as Auth, N as AuthConfig, O as AuthProvider, Q as AuthProviderProfile, R as AuthProviderRequest, S as AuthUser, T as BackupsConfig, U as BeforeChangeHook, V as BeforeDeleteHook, W as BeforeValidateHook, X as Block, Y as BlocksField, Z as BooleanField, _ as BuiltinApiKeysCollection, $ as BuiltinMediaCollection, a0 as BuiltinMediaFoldersCollection, a1 as BuiltinUsersCollection, a2 as BundleHints, a3 as CliCommand, a4 as CollectionAccess, a5 as CollectionAdmin, a6 as CollectionConfig, a7 as CollectionDocument, a8 as CollectionHooks, a9 as CollectionListAdmin, aa as CollectionSlug, ab as Config, ac as ConfigError, ad as ConfigIssue, ae as ContainerAdmin, af as CreateEasyCMSOptions, ag as CreateInput, ah as CreateMigrationResult, ai as CursorDocs, aj as CustomField, ak as CustomFieldTypes, al as DashboardWidget, am as Database, an as DatabaseAdapter, ao as DatabaseInitArgs, ap as DatabaseTransfer, aq as DateField, ar as DepthOptions, as as DirectUpload, at as DiskStorageOptions, au as DocumentOf, av as EasyCMS, aw as EasyCMSError, ax as EmailAdapter, ay as EmailField, az as EmailMessage, aA as Endpoint, aB as EndpointRequest, aC as ErrorCode, aD as FIELD_TYPES, aE as Field, aF as FieldAccess, aG as FieldAccessFn, aH as FieldAdmin, aI as FieldError, aJ as FieldRule, aK as FieldType, aL as FieldTypeBase, aM as FieldTypeDefinition, aN as FieldTypeValidateContext, aO as FieldValidate, aP as FieldValidateContext, aQ as FieldValue, aR as FieldsInput, aS as FieldsValue, aT as FilterOptions, aU as FilterOptionsArgs, aV as FindAfterArgs, aW as FindArgs, aX as FindOptions, aY as FolderLevel, aZ as FolderPermissions, a_ as ForbiddenError, a$ as GlobalAccess, b0 as GlobalConfig, b1 as GlobalDocument, b2 as GlobalHooks, b3 as GlobalInput, b4 as GlobalSlug, b5 as GroupField, b6 as ImageSize, b7 as IncrementOptions, b8 as InferCollection, b9 as InferGlobal, ba as JobConfig, bb as JsonField, bc as KeysetPage, bd as Label, be as LayoutNode, bf as LivePreview, bg as LocaleOf, bh as LocalizationConfig, bi as LogDetails, bj as Logger, bk as LoginArgs, bl as LogsConfig, bm as MediaDocument, bn as MediaSize, bo as MembersConfig, bp as MembersSignup, bq as MigrationInfo, br as NavGroup, bs as NotFoundError, bt as NumberField, bu as OnRequest, bv as OnRequestArgs, bw as Operation, bx as OutboxRow, by as PLUGIN_API_VERSION, bz as PasswordEmail, bA as PasswordEmailArgs, bB as PasswordEmailFn, bC as PasswordLinkOptions, bD as PayloadTooLargeError, bE as Plugin, bF as PluginInfo, bG as PluginTypes, bH as PreviewTarget, bI as PreviewURL, bJ as QueryError, bK as ROLE_OPERATIONS, bL as RawDocument, bM as ReadOptions, bN as RelationshipField, bO as RequestContext, bP as ResolvedConfig, bQ as RichTextDocument, bR as RichTextField, bS as Role, bT as RoleOperation, bU as RolePermissions, bV as Roles, bW as RoutesConfig, bX as ScheduledPublish, bY as SchemaError, bZ as SchemaMode, b_ as SelectField, b$ as SelectOption, c0 as Session, c1 as SidebarPanel, c2 as SignupArgs, c3 as SignupResult, c4 as SingleSignOn, c5 as SlugField, c6 as SlugOf, c7 as SsoOutcome, c8 as SsoProviderRef, c9 as StorageAdapter, ca as StoredFile, cb as TextField, cc as TextareaField, cd as TooManyRequestsError, ce as TypedPlugin, cf as UnauthorizedError, cg as UncountedDocs, ch as UpdateInput, ci as UpdateOptions, cj as UploadConfig, ck as UploadField, cl as UploadFromURLConfig, cm as UserIdentity, cn as ValidationError, co as Version, cp as VersionSummary, cq as VersionsConfig, cr as WEBHOOK_EVENTS, cs as WebhookConfig, ct as WebhookEvent, cu as WebhookPayload, cv as Where, cw as WhereOperators, cx as anyone, cy as consoleEmail, cz as consoleLogger, cA as createEasyCMS, cB as defineConfig, cC as defineFieldType, cD as definePlugin, cE as diskStorage, cF as hasRows, cG as isAdmin, cH as isHasMany, cI as isSignedIn, cJ as isStaff, cK as isSystemAdmin, cL as jsonLogger, cM as mimeAllowedBy, cN as rowFields, cO as silentLogger, cP as uniqueWithinOf } from './config-CHEEPk1d.js';
+export { A as ADMIN_API_VERSION, a as AdminCollection, b as AdminComponentRef, c as AdminElementProps, d as AdminField, e as AdminGlobal, f as AdminLayoutNode, g as AdminNavGroup, h as AdminNavItem, i as AdminNavNode, j as AdminPageRef, k as AdminPageRoute, l as AdminSchema, m as AdminWidgetRef, S as SetFieldDetail, w as warnDeprecated } from './plugin-B8xypoWd.js';
+export { A as AdminBackup, a as AdminBackups, b as ApiHandlerOptions, B as BackupState, L as LoadConfigOptions, R as RestHandler, c as RestHandlerOptions, d as createApiHandler, e as createRestHandler, l as loadConfig, r as resolveConfig, s as sharedEasyCMS, f as slugify } from './handler-adKUq8-U.js';
 export { FieldCondition, matchesCondition } from './conditions.js';
 
 type DeliveryKind = 'webhook' | 'email';
@@ -112,9 +112,30 @@ interface AdminScheduledJob {
     global?: string;
     doc: ID;
 }
+/** An outbox entry (`outbox: true`) that failed: being retried, or given up on. */
+interface AdminOutboxEntry {
+    id: ID;
+    event: 'create' | 'update' | 'draft' | 'delete';
+    /** The document's collection, or the global (`global`), and the document's id. */
+    collection?: string;
+    global?: string;
+    doc: string | null;
+    attempts: number;
+    /** `pending`: retried at `nextAttemptAt`; `failed`: given up, until someone retries it. */
+    state: 'pending' | 'running' | 'failed';
+    error: string | null;
+    nextAttemptAt: string;
+}
+interface AdminOutbox {
+    /** Entries waiting to run (new, or to be retried). */
+    waiting: number;
+    failed: number;
+    /** Entries that failed at least once, latest first (at most 100). */
+    entries: AdminOutboxEntry[];
+}
 /** What Settings → Jobs shows (`GET <api>/admin/jobs`). */
 /** Work Easy CMS itself does with every run of the jobs, when it is set up. */
-type BuiltInJob = 'scheduled' | 'webhooks' | 'emails' | 'backups' | 'audit';
+type BuiltInJob = 'scheduled' | 'webhooks' | 'emails' | 'outbox' | 'backups' | 'audit';
 interface AdminJobs {
     jobs: AdminJob[];
     /** When jobs last ran (the scheduler, the cron endpoint), `null` if never. */
@@ -127,6 +148,8 @@ interface AdminJobs {
     canChange: boolean;
     /** `null` when nothing uses `schedule`. */
     scheduled: AdminScheduledJob[] | null;
+    /** `null` without `outbox: true`. */
+    outbox: AdminOutbox | null;
 }
 
 interface SearchHit {
@@ -233,4 +256,4 @@ declare const cacheTags: {
 declare const VERSION: string;
 
 export { EmailSetting, ID, PaginatedDocs, VERSION, cacheTags };
-export type { AdminAttention, AdminDeliveries, AdminDelivery, AdminEmail, AdminEmailDelivery, AdminJob, AdminJobs, AdminScheduledJob, AdminStatus, AdminWebhookDelivery, BuiltInJob, DeliveryKind, DeliveryState, EmailCheck, SearchHit };
+export type { AdminAttention, AdminDeliveries, AdminDelivery, AdminEmail, AdminEmailDelivery, AdminJob, AdminJobs, AdminOutbox, AdminOutboxEntry, AdminScheduledJob, AdminStatus, AdminWebhookDelivery, BuiltInJob, DeliveryKind, DeliveryState, EmailCheck, SearchHit };

package/dist/index.js

@@ -25,7 +25,7 @@ import {
   sharedEasyCMS,
   silentLogger,
   slugify
-} from "./chunk-TMO4JTGJ.js";
+} from "./chunk-244WCY6S.js";
 import {
   matchesCondition
 } from "./chunk-U266LV4M.js";

package/dist/internal.d.ts

@@ -1,6 +1,6 @@
 import { Config, Database, EasyCMS, NavGroup, CollectionConfig, ID, RawDocument, Field, ResolvedConfig, ConfigIssue } from './index.js';
-export { cP as API_KEYS, cQ as API_KEY_GLOBAL_OPERATIONS, cR as API_KEY_OPERATIONS, cS as DEFAULT_MAX_VERSIONS, cT as DEFAULT_PASSWORD_EMAILS, cU as FIELD_TYPE_BASES, cV as FOLDER_LEVELS, cW as MediaFolders, cX as SSO_COOKIE, cY as codeOfStatus, cE as hasRows, cG as isHasMany, cZ as isJsonLogger, c_ as keyAllows, c$ as logFormat, cL as mimeAllowedBy, cM as rowFields, cO as uniqueWithinOf } from './config-n7PtGl4V.js';
-export { C as CONFIG_FILE_NAMES, g as CSRF_COOKIE, h as CSRF_HEADER, D as DEFAULT_ADMIN_PATH, i as DEFAULT_API_PATH, j as DEFAULT_MAX_FILE_SIZE, k as DEFAULT_TOKEN_EXPIRATION, m as applyDefaults, n as applyPlugins, o as createRootEndpointHandler, p as decryptBackup, q as fillMissing, t as findConfigFile, u as forwardedClientIp, v as generateSlugs, w as importConfig, x as mergeForUpdate, y as parseId, z as platformClientIp, E as readCookie, F as validateFields, G as writeBackupFile } from './handler-DV-1ICVz.js';
+export { cQ as API_KEYS, cR as API_KEY_GLOBAL_OPERATIONS, cS as API_KEY_OPERATIONS, cT as DEFAULT_MAX_VERSIONS, cU as DEFAULT_PASSWORD_EMAILS, cV as FIELD_TYPE_BASES, cW as FOLDER_LEVELS, cX as MediaFolders, cY as SSO_COOKIE, cZ as codeOfStatus, cF as hasRows, cH as isHasMany, c_ as isJsonLogger, c$ as keyAllows, d0 as logFormat, cM as mimeAllowedBy, cN as rowFields, cP as uniqueWithinOf } from './config-CHEEPk1d.js';
+export { C as CONFIG_FILE_NAMES, g as CSRF_COOKIE, h as CSRF_HEADER, D as DEFAULT_ADMIN_PATH, i as DEFAULT_API_PATH, j as DEFAULT_MAX_FILE_SIZE, k as DEFAULT_TOKEN_EXPIRATION, m as applyDefaults, n as applyPlugins, o as createRootEndpointHandler, p as decryptBackup, q as fillMissing, t as findConfigFile, u as forwardedClientIp, v as generateSlugs, w as importConfig, x as mergeForUpdate, y as parseId, z as platformClientIp, E as readCookie, F as validateFields, G as writeBackupFile } from './handler-adKUq8-U.js';
 export { conditionIssues } from './conditions.js';
 
 /** The session cookie the REST API sets at login. */

package/dist/internal.js

@@ -56,7 +56,7 @@ import {
   verifyPassword,
   verifyTurnstile,
   writeBackupFile
-} from "./chunk-TMO4JTGJ.js";
+} from "./chunk-244WCY6S.js";
 import {
   conditionIssues
 } from "./chunk-U266LV4M.js";

package/dist/{plugin-C_vknKa2.d.ts → plugin-B8xypoWd.d.ts}

@@ -1,4 +1,4 @@
-import { bd as Label, aE as Field, I as ID, k as AdminLocale, t as AdminSwitcher, c7 as SsoProviderRef } from './config-n7PtGl4V.js';
+import { bd as Label, aE as Field, I as ID, k as AdminLocale, t as AdminSwitcher, c8 as SsoProviderRef } from './config-CHEEPk1d.js';
 import { FieldCondition } from './conditions.js';
 
 /** A Web Component from an admin module, with its `props` (plain JSON). */

package/dist/plugin.d.ts

@@ -1,3 +1,3 @@
-export { a as ADMIN_ICONS, g as AdminComponent, j as AdminIcon, S as AuthUser, a3 as CliCommand, a4 as CollectionAccess, a6 as CollectionConfig, ab as Config, ac as ConfigError, al as DashboardWidget, aw as EasyCMSError, aA as Endpoint, aB as EndpointRequest, aC as ErrorCode, aE as Field, aF as FieldAccess, aI as FieldError, aL as FieldTypeBase, aM as FieldTypeDefinition, aN as FieldTypeValidateContext, a_ as ForbiddenError, b0 as GlobalConfig, I as ID, ba as JobConfig, bd as Label, br as NavGroup, bs as NotFoundError, bu as OnRequest, bv as OnRequestArgs, bx as PLUGIN_API_VERSION, bC as PayloadTooLargeError, bD as Plugin, bE as PluginInfo, bF as PluginTypes, bI as QueryError, bN as RequestContext, cc as TooManyRequestsError, cd as TypedPlugin, ce as UnauthorizedError, cm as ValidationError, cu as Where, cB as defineFieldType, cC as definePlugin } from './config-n7PtGl4V.js';
-export { A as ADMIN_API_VERSION, c as AdminElementProps, k as AdminPageRoute, S as SetFieldDetail, w as warnDeprecated } from './plugin-C_vknKa2.js';
+export { a as ADMIN_ICONS, g as AdminComponent, j as AdminIcon, S as AuthUser, a3 as CliCommand, a4 as CollectionAccess, a6 as CollectionConfig, ab as Config, ac as ConfigError, al as DashboardWidget, aw as EasyCMSError, aA as Endpoint, aB as EndpointRequest, aC as ErrorCode, aE as Field, aF as FieldAccess, aI as FieldError, aL as FieldTypeBase, aM as FieldTypeDefinition, aN as FieldTypeValidateContext, a_ as ForbiddenError, b0 as GlobalConfig, I as ID, ba as JobConfig, bd as Label, br as NavGroup, bs as NotFoundError, bu as OnRequest, bv as OnRequestArgs, by as PLUGIN_API_VERSION, bD as PayloadTooLargeError, bE as Plugin, bF as PluginInfo, bG as PluginTypes, bJ as QueryError, bO as RequestContext, cd as TooManyRequestsError, ce as TypedPlugin, cf as UnauthorizedError, cn as ValidationError, cv as Where, cC as defineFieldType, cD as definePlugin } from './config-CHEEPk1d.js';
+export { A as ADMIN_API_VERSION, c as AdminElementProps, k as AdminPageRoute, S as SetFieldDetail, w as warnDeprecated } from './plugin-B8xypoWd.js';
 import './conditions.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easy-cms/core",
-  "version": "1.11.0",
+  "version": "1.12.0",
   "description": "Embedded, code-first headless CMS for Nuxt and Next.js",
   "license": "MIT",
   "type": "module",