@micelio/strapi-plugin-core 0.1.0 → 0.2.0

package/dist/server/src/constants/preview.d.ts

@@ -10,6 +10,8 @@ export declare const PREVIEW_GRANT_HEADER = "x-micelio-preview-grant";
 export declare const PREVIEW_TOKEN_TTL_SECONDS = 60;
 /** How long a preview grant is valid, in seconds. */
 export declare const PREVIEW_GRANT_TTL_SECONDS: number;
+/** How long a system grant is valid, in seconds (ADR-0019, amendment of 2026-10-25). */
+export declare const PREVIEW_SYSTEM_GRANT_TTL_SECONDS = 60;
 /** How long an expired credential stays in the store before the next token request removes it. */
 export declare const PREVIEW_CREDENTIAL_RETENTION_SECONDS: number;
 /** The window of the rate limits, in seconds. */

package/dist/server/src/constants/taxonomy.d.ts

@@ -0,0 +1,13 @@
+/** UID of the `category` content type: the topics an entry is filed under. */
+export declare const CATEGORY_UID = "plugin::micelio.category";
+/** UID of the `tag` content type: the labels an entry carries. */
+export declare const TAG_UID = "plugin::micelio.tag";
+/**
+ * Content API actions a read-only token needs for the taxonomy types.
+ *
+ * @remarks
+ * A distribution spreads them into its token lists, so this plugin stays the source of truth for
+ * its own UIDs. Role and token grants stay in the host: a plugin's `bootstrap` has no order
+ * relative to the other plugins' (ADR-0017, amendment of 2026-10-23).
+ */
+export declare const READ_ACTIONS: readonly ["plugin::micelio.category.find", "plugin::micelio.tag.find"];

package/dist/server/src/content-types/category/schema.json.d.ts

@@ -0,0 +1,78 @@
+declare const _default: {
+  "kind": "collectionType",
+  "collectionName": "categories",
+  "info": {
+    "singularName": "category",
+    "pluralName": "categories",
+    "displayName": "Category",
+    "description": "Organize your content into categories"
+  },
+  "options": {
+    "draftAndPublish": false
+  },
+  "pluginOptions": {
+    "content-manager": {
+      "visible": true
+    },
+    "i18n": {
+      "localized": true
+    }
+  },
+  "attributes": {
+    "name": {
+      "type": "string",
+      "pluginOptions": {
+        "i18n": {
+          "localized": true
+        }
+      }
+    },
+    "slug": {
+      "type": "uid",
+      "regex": "^(?!\\.{1,2}$)[A-Za-z0-9-_.~]*$",
+      "pluginOptions": {
+        "i18n": {
+          "localized": false
+        }
+      }
+    },
+    "description": {
+      "type": "text",
+      "pluginOptions": {
+        "i18n": {
+          "localized": true
+        }
+      }
+    },
+    "order": {
+      "type": "integer",
+      "pluginOptions": {
+        "i18n": {
+          "localized": false
+        }
+      }
+    },
+    "featured": {
+      "type": "boolean",
+      "default": false,
+      "pluginOptions": {
+        "i18n": {
+          "localized": false
+        }
+      }
+    },
+    "color": {
+      "type": "integer",
+      "min": 1,
+      "max": 5,
+      "pluginOptions": {
+        "i18n": {
+          "localized": false
+        }
+      }
+    }
+  }
+}
+;
+
+export default _default;

package/dist/server/src/content-types/index.d.ts

@@ -259,6 +259,128 @@ declare const _default: {
             };
         };
     };
+    category: {
+        schema: {
+            kind: string;
+            collectionName: string;
+            info: {
+                singularName: string;
+                pluralName: string;
+                displayName: string;
+                description: string;
+            };
+            options: {
+                draftAndPublish: boolean;
+            };
+            pluginOptions: {
+                "content-manager": {
+                    visible: boolean;
+                };
+                i18n: {
+                    localized: boolean;
+                };
+            };
+            attributes: {
+                name: {
+                    type: string;
+                    pluginOptions: {
+                        i18n: {
+                            localized: boolean;
+                        };
+                    };
+                };
+                slug: {
+                    type: string;
+                    regex: string;
+                    pluginOptions: {
+                        i18n: {
+                            localized: boolean;
+                        };
+                    };
+                };
+                description: {
+                    type: string;
+                    pluginOptions: {
+                        i18n: {
+                            localized: boolean;
+                        };
+                    };
+                };
+                order: {
+                    type: string;
+                    pluginOptions: {
+                        i18n: {
+                            localized: boolean;
+                        };
+                    };
+                };
+                featured: {
+                    type: string;
+                    default: boolean;
+                    pluginOptions: {
+                        i18n: {
+                            localized: boolean;
+                        };
+                    };
+                };
+                color: {
+                    type: string;
+                    min: number;
+                    max: number;
+                    pluginOptions: {
+                        i18n: {
+                            localized: boolean;
+                        };
+                    };
+                };
+            };
+        };
+    };
+    tag: {
+        schema: {
+            kind: string;
+            collectionName: string;
+            info: {
+                singularName: string;
+                pluralName: string;
+                displayName: string;
+                description: string;
+            };
+            options: {
+                draftAndPublish: boolean;
+            };
+            pluginOptions: {
+                "content-manager": {
+                    visible: boolean;
+                };
+                i18n: {
+                    localized: boolean;
+                };
+            };
+            attributes: {
+                name: {
+                    type: string;
+                    required: boolean;
+                    pluginOptions: {
+                        i18n: {
+                            localized: boolean;
+                        };
+                    };
+                };
+                slug: {
+                    type: string;
+                    regex: string;
+                    targetField: string;
+                    required: boolean;
+                    pluginOptions: {
+                        i18n: {
+                            localized: boolean;
+                        };
+                    };
+                };
+            };
+        };
+    };
     'preview-credential': {
         schema: {
             kind: string;
@@ -300,11 +422,12 @@ declare const _default: {
                 };
                 adminUser: {
                     type: string;
-                    required: boolean;
                 };
                 adminOrigin: {
                     type: string;
-                    required: boolean;
+                };
+                entryVersion: {
+                    type: string;
                 };
                 siteDocumentId: {
                     type: string;

package/dist/server/src/content-types/preview-credential/schema.json.d.ts

@@ -5,7 +5,7 @@ declare const _default: {
     "singularName": "preview-credential",
     "pluralName": "preview-credentials",
     "displayName": "Preview credential",
-    "description": "A preview token or grant of ADR-0019, stored as the hash of its value and bound to one admin user and one draft"
+    "description": "A preview token, grant or system grant of ADR-0019, stored as the hash of its value and bound to one draft (and, but for a system grant, to one admin user)"
   },
   "options": {
     "draftAndPublish": false
@@ -27,7 +27,7 @@ declare const _default: {
   "attributes": {
     "kind": {
       "type": "enumeration",
-      "enum": ["token", "grant"],
+      "enum": ["token", "grant", "system"],
       "required": true
     },
     "hash": {
@@ -37,12 +37,13 @@ declare const _default: {
       "private": true
     },
     "adminUser": {
-      "type": "integer",
-      "required": true
+      "type": "integer"
     },
     "adminOrigin": {
-      "type": "string",
-      "required": true
+      "type": "string"
+    },
+    "entryVersion": {
+      "type": "string"
     },
     "siteDocumentId": {
       "type": "string",

package/dist/server/src/content-types/tag/schema.json.d.ts

@@ -0,0 +1,46 @@
+declare const _default: {
+  "kind": "collectionType",
+  "collectionName": "tags",
+  "info": {
+    "singularName": "tag",
+    "pluralName": "tags",
+    "displayName": "Tag",
+    "description": "Topics an article covers, used to filter the blog"
+  },
+  "options": {
+    "draftAndPublish": false
+  },
+  "pluginOptions": {
+    "content-manager": {
+      "visible": true
+    },
+    "i18n": {
+      "localized": true
+    }
+  },
+  "attributes": {
+    "name": {
+      "type": "string",
+      "required": true,
+      "pluginOptions": {
+        "i18n": {
+          "localized": true
+        }
+      }
+    },
+    "slug": {
+      "type": "uid",
+      "regex": "^(?!\\.{1,2}$)[A-Za-z0-9-_.~]*$",
+      "targetField": "name",
+      "required": true,
+      "pluginOptions": {
+        "i18n": {
+          "localized": false
+        }
+      }
+    }
+  }
+}
+;
+
+export default _default;

package/dist/server/src/controllers/index.d.ts

@@ -2,6 +2,12 @@ declare const _default: {
     site: ({ strapi, }: {
         strapi: import('@strapi/types/dist/core').Strapi;
     }) => Partial<import('@strapi/types/dist/core/core-api/controller').Base> & import('@strapi/types/dist/core/core-api/controller').Generic & import('@strapi/types/dist/core/core-api/controller').Base;
+    category: ({ strapi, }: {
+        strapi: import('@strapi/types/dist/core').Strapi;
+    }) => Partial<import('@strapi/types/dist/core/core-api/controller').Base> & import('@strapi/types/dist/core/core-api/controller').Generic & import('@strapi/types/dist/core/core-api/controller').Base;
+    tag: ({ strapi, }: {
+        strapi: import('@strapi/types/dist/core').Strapi;
+    }) => Partial<import('@strapi/types/dist/core/core-api/controller').Base> & import('@strapi/types/dist/core/core-api/controller').Generic & import('@strapi/types/dist/core/core-api/controller').Base;
     blocks: () => {
         find(ctx: import('koa').Context): void;
     };

package/dist/server/src/editorial/transitions.d.ts

@@ -44,12 +44,15 @@ export declare class TransitionError extends Error {
  * The transition must exist in the state machine, the actor must be allowed by the policy of the
  * entry's site, and `isPermitted` must agree. Moving to `published` is the one call that publishes
  * the entry in Strapi, and moving from `published` to `draft` the one that unpublishes it: the
- * editorial state never contradicts `publishedAt`. `reviewedBy` records the user who moved the
+ * editorial state never contradicts `publishedAt`. `published -> published` (republish) puts the
+ * entry's current draft live over the published version with one `publish`, never unpublishing
+ * first, so a reader of the content API always gets a published version; it sets `publishedBy` to
+ * the republisher and leaves `reviewedBy` alone. `reviewedBy` records the user who moved the
  * entry out of `in_review`, and `publishedBy` the one who published it (empty for the scheduler).
  *
  * It runs the hooks of the transition (`docs/hooks.md`): `beforeTransition` once every check has
  * passed and before anything is written, then `afterTransition` and, when the entry was published
- * or unpublished, `afterPublish` or `afterUnpublish`. Every caller, the scheduler included, fires
+ * (a republish included) or unpublished, `afterPublish` or `afterUnpublish`. Every caller, the scheduler included, fires
  * them by calling this function.
  *
  * @throws {@link TransitionError} when the transition is refused, with its status and code.

package/dist/server/src/index.d.ts

@@ -1,5 +1,6 @@
 export { SITE_ATTRIBUTE, SITE_SCOPE_MIDDLEWARE, withSiteScope } from './site-scope';
 export { SITE_UID } from './constants/site';
+export { CATEGORY_UID, READ_ACTIONS, TAG_UID } from './constants/taxonomy';
 export { withEditorial } from './editorial';
 export { EDITORIAL_STATES, type EditorialState } from './constants/editorial';
 export { missingLocales } from './extensions';
@@ -23,6 +24,12 @@ declare const _default: {
         site: ({ strapi, }: {
             strapi: import('@strapi/types/dist/core').Strapi;
         }) => Partial<import('@strapi/types/dist/core/core-api/controller').Base> & import('@strapi/types/dist/core/core-api/controller').Generic & import('@strapi/types/dist/core/core-api/controller').Base;
+        category: ({ strapi, }: {
+            strapi: import('@strapi/types/dist/core').Strapi;
+        }) => Partial<import('@strapi/types/dist/core/core-api/controller').Base> & import('@strapi/types/dist/core/core-api/controller').Generic & import('@strapi/types/dist/core/core-api/controller').Base;
+        tag: ({ strapi, }: {
+            strapi: import('@strapi/types/dist/core').Strapi;
+        }) => Partial<import('@strapi/types/dist/core/core-api/controller').Base> & import('@strapi/types/dist/core/core-api/controller').Generic & import('@strapi/types/dist/core/core-api/controller').Base;
         blocks: () => {
             find(ctx: import('koa').Context): void;
         };
@@ -45,11 +52,19 @@ declare const _default: {
         'content-api': () => import('@strapi/types/dist/core').RouterInput;
         admin: () => import('@strapi/types/dist/core').RouterInput;
         site: import('@strapi/types/dist/core/core-api/router').Router;
+        category: import('@strapi/types/dist/core/core-api/router').Router;
+        tag: import('@strapi/types/dist/core/core-api/router').Router;
     };
     services: {
         site: ({ strapi, }: {
             strapi: import('@strapi/types/dist/core').Strapi;
         }) => Partial<import('@strapi/types/dist/core/core-api/service').Base> & import('@strapi/types/dist/core/core-api/service').Generic & import('@strapi/types/dist/core/core-api/service').Base;
+        category: ({ strapi, }: {
+            strapi: import('@strapi/types/dist/core').Strapi;
+        }) => Partial<import('@strapi/types/dist/core/core-api/service').Base> & import('@strapi/types/dist/core/core-api/service').Generic & import('@strapi/types/dist/core/core-api/service').Base;
+        tag: ({ strapi, }: {
+            strapi: import('@strapi/types/dist/core').Strapi;
+        }) => Partial<import('@strapi/types/dist/core/core-api/service').Base> & import('@strapi/types/dist/core/core-api/service').Generic & import('@strapi/types/dist/core/core-api/service').Base;
         transitions: ({ strapi }: {
             strapi: import('@strapi/types/dist/core').Strapi;
         }) => import('./services/transitions').TransitionsService;
@@ -333,6 +348,128 @@ declare const _default: {
                 };
             };
         };
+        category: {
+            schema: {
+                kind: string;
+                collectionName: string;
+                info: {
+                    singularName: string;
+                    pluralName: string;
+                    displayName: string;
+                    description: string;
+                };
+                options: {
+                    draftAndPublish: boolean;
+                };
+                pluginOptions: {
+                    "content-manager": {
+                        visible: boolean;
+                    };
+                    i18n: {
+                        localized: boolean;
+                    };
+                };
+                attributes: {
+                    name: {
+                        type: string;
+                        pluginOptions: {
+                            i18n: {
+                                localized: boolean;
+                            };
+                        };
+                    };
+                    slug: {
+                        type: string;
+                        regex: string;
+                        pluginOptions: {
+                            i18n: {
+                                localized: boolean;
+                            };
+                        };
+                    };
+                    description: {
+                        type: string;
+                        pluginOptions: {
+                            i18n: {
+                                localized: boolean;
+                            };
+                        };
+                    };
+                    order: {
+                        type: string;
+                        pluginOptions: {
+                            i18n: {
+                                localized: boolean;
+                            };
+                        };
+                    };
+                    featured: {
+                        type: string;
+                        default: boolean;
+                        pluginOptions: {
+                            i18n: {
+                                localized: boolean;
+                            };
+                        };
+                    };
+                    color: {
+                        type: string;
+                        min: number;
+                        max: number;
+                        pluginOptions: {
+                            i18n: {
+                                localized: boolean;
+                            };
+                        };
+                    };
+                };
+            };
+        };
+        tag: {
+            schema: {
+                kind: string;
+                collectionName: string;
+                info: {
+                    singularName: string;
+                    pluralName: string;
+                    displayName: string;
+                    description: string;
+                };
+                options: {
+                    draftAndPublish: boolean;
+                };
+                pluginOptions: {
+                    "content-manager": {
+                        visible: boolean;
+                    };
+                    i18n: {
+                        localized: boolean;
+                    };
+                };
+                attributes: {
+                    name: {
+                        type: string;
+                        required: boolean;
+                        pluginOptions: {
+                            i18n: {
+                                localized: boolean;
+                            };
+                        };
+                    };
+                    slug: {
+                        type: string;
+                        regex: string;
+                        targetField: string;
+                        required: boolean;
+                        pluginOptions: {
+                            i18n: {
+                                localized: boolean;
+                            };
+                        };
+                    };
+                };
+            };
+        };
         'preview-credential': {
             schema: {
                 kind: string;
@@ -374,11 +511,12 @@ declare const _default: {
                     };
                     adminUser: {
                         type: string;
-                        required: boolean;
                     };
                     adminOrigin: {
                         type: string;
-                        required: boolean;
+                    };
+                    entryVersion: {
+                        type: string;
                     };
                     siteDocumentId: {
                         type: string;

package/dist/server/src/migrations/rename-legacy-uids.d.ts

@@ -0,0 +1,26 @@
+import { Core } from '@strapi/strapi';
+/** How many rows each place changed. */
+export interface RenameReport {
+    /** Role and API token permissions (`api::category.category.find` to `plugin::micelio.category.find`). */
+    actions: number;
+    /** Admin role permissions whose subject is the content type. */
+    subjects: number;
+    /** Content manager layouts stored under the old UID. */
+    layouts: number;
+}
+/**
+ * Moves what Strapi stored under the UIDs `api::category.category` and `api::tag.tag` to the
+ * UIDs of the plugin: permissions of roles and API tokens, admin role subjects and content
+ * manager layouts. Idempotent: a second run finds nothing, and a row that already exists under
+ * the new UID wins over its old twin, which is deleted.
+ *
+ * @remarks
+ * Must run before `users-permissions` bootstraps: its `syncPermissions()` deletes every
+ * permission whose action no longer exists, which would silently take category and tag read
+ * access away from the public role. It is registered on `strapi::content-types.beforeSync`,
+ * which runs before every plugin's `bootstrap`, whatever the plugin order. A table that does not
+ * exist yet (a fresh database) has nothing to migrate. A UID that is still a registered content
+ * type (a host with its own `api::category.category`) is skipped and logged: its rows are the
+ * host's.
+ */
+export declare function renameLegacyUids(strapi: Core.Strapi): Promise<RenameReport>;

package/dist/server/src/migrations/site-backfill.d.ts

@@ -0,0 +1,13 @@
+import { Core } from '@strapi/strapi';
+/**
+ * Gives every category and tag with no site the default site.
+ *
+ * @remarks
+ * The rows `micelio-cms` 0.5 wrote have no `site`, because that version had no sites. Every locale
+ * of an entry is a row of its own, and each one is linked. Idempotent: a row that has a site is
+ * never touched, so a second run changes nothing, and a site the admin panel chose is kept. Run it
+ * after the default site exists; without a default site there is nothing to give.
+ *
+ * @returns How many rows got the default site.
+ */
+export declare function backfillSite(strapi: Core.Strapi): Promise<number>;

package/dist/server/src/preview/credentials.d.ts

@@ -1,18 +1,20 @@
-import { PreviewBinding, PreviewCredentialKind, PreviewCredentialRecord, PreviewExpectation } from '../types/preview';
+import { PreviewBinding, PreviewCredentialKind, PreviewCredentialRecord, PreviewExpectation, PreviewSystemBinding } from '../types/preview';
 /** The hash a credential is stored and looked up by: SHA-256 of its value, in hex. */
 export declare function hashCredential(value: string): string;
 /**
- * Makes a preview token or grant: a random, opaque value and the record to store for it.
+ * Makes a preview token, grant or system grant: a random, opaque value and the record to store for it.
  *
  * @remarks
  * The value is 256 random bits, not a JWT and not derived from the binding. The record holds only
  * its hash, so a read of the store cannot replay a credential. The caller hands out `value` once
  * and never logs it.
  *
- * @param now - The moment of issue; the credential expires 60 s later for a token and 15 min
- * later for a grant.
+ * @param binding - An admin user's binding for a token or grant; a system grant's for `system`,
+ * which has no admin user and holds the draft's version instead.
+ * @param now - The moment of issue; the credential expires 60 s later for a token or a system
+ * grant and 15 min later for a grant.
  */
-export declare function issueCredential(kind: PreviewCredentialKind, binding: PreviewBinding, now?: Date): {
+export declare function issueCredential(kind: PreviewCredentialKind, binding: PreviewBinding | PreviewSystemBinding, now?: Date): {
     value: string;
     record: PreviewCredentialRecord;
 };

package/dist/server/src/preview/draft-query.d.ts

@@ -0,0 +1,62 @@
+import { Core, Schema, UID } from '@strapi/strapi';
+type Entry = Record<string, unknown>;
+/** A `populate` the draft read accepts: the names it asks for, or every first-level relation (`*`). */
+export interface PopulateSpec {
+    /** The `*` populate: no names, the first level of every relation, component and media. */
+    all: boolean;
+    children: Map<string, PopulateNode>;
+}
+/** What is asked of one populated attribute. */
+export interface PopulateNode {
+    /** The fields of the attribute's entry, or all of its scalar fields when absent. */
+    fields?: string[];
+    /** Under a component, its own populate; under a relation, only media attributes of the related entry. */
+    populate?: PopulateSpec;
+    /** For a dynamic zone, the options of each component fragment, by component UID. */
+    on?: Map<string, PopulateNode>;
+}
+/** The answer of {@link readDraftQuery}: why the query cannot be served, or what it asks for. */
+export type DraftQuery = {
+    problem: string;
+} | {
+    populate: PopulateSpec;
+};
+/**
+ * Reads the query of the draft route against the draft's schema, and answers what it may populate or why it is refused.
+ *
+ * @remarks
+ * The route serves one document its grant names (ADR-0019, section 3), so the query is an allowlist
+ * and not Strapi's whole query language: only `populate` (and `site`, which the site-scope
+ * middleware has already read) is accepted; `filters`, `sort`, `fields`, `pagination` and any other
+ * key are refused, because a filter that follows a relation tells whether an entry the answer leaves
+ * out matches. A `populate` may name the attributes of the draft and, inside its components and
+ * dynamic zones, of those, at any depth. Through a relation it goes one level: the `fields` of the
+ * related entry and, as `populate`, its media attributes with `fields` only. Through a media
+ * attribute it is `fields` only, so the file's `related` relation is never reached. A name that is
+ * not an attribute, a private attribute and a relation to an admin user or to no type are refused.
+ *
+ * @returns The reason when the query is refused, else the populate to serve.
+ */
+export declare function readDraftQuery(strapi: Core.Strapi, query: Record<string, unknown>, schema: Schema.ContentType): DraftQuery;
+/**
+ * Reads the draft of a document with the populate {@link readDraftQuery} accepted, and answers `null` when there is none.
+ *
+ * @remarks
+ * The draft itself is read as the grant says. Every entry it populates through a relation is then
+ * read again as its **published** version, with the fields the client asked for: a grant serves the
+ * draft of the one document it names and never the draft of another. A related entry that has no
+ * published version, one of another site and a polymorphic relation are left out. The API token's
+ * abilities still decide which relations the answer keeps (`sanitize.query` and `sanitize.output`).
+ *
+ * @param auth - The content API's authentication of the request, for the token's abilities.
+ * @throws `ValidationError` or `PaginationError` when Strapi refuses the query after all; the caller answers `400`.
+ */
+export declare function readDraft(strapi: Core.Strapi, options: {
+    uid: UID.ContentType;
+    documentId: string;
+    locale: string | undefined;
+    populate: PopulateSpec;
+    siteDocumentId: string;
+    auth: unknown;
+}): Promise<Entry | null>;
+export {};