@oneentry/mcp-platform-server 0.1.0 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +135 -92
- package/data/permissions.json +411 -0
- package/dist/api/audit.d.ts +0 -11
- package/dist/api/audit.js +0 -10
- package/dist/api/auth.d.ts +0 -18
- package/dist/api/auth.js +0 -20
- package/dist/api/build-catalog.d.ts +10 -0
- package/dist/api/build-catalog.js +187 -0
- package/dist/api/catalog.d.ts +8 -15
- package/dist/api/catalog.js +54 -16
- package/dist/api/client.d.ts +0 -24
- package/dist/api/client.js +6 -28
- package/dist/api/normalize-schema.d.ts +3 -0
- package/dist/api/normalize-schema.js +133 -0
- package/dist/api/policy.d.ts +0 -23
- package/dist/api/policy.js +0 -0
- package/dist/api/shape.d.ts +0 -13
- package/dist/api/shape.js +0 -21
- package/dist/api/swagger-source.d.ts +11 -0
- package/dist/api/swagger-source.js +58 -0
- package/dist/api/types.d.ts +0 -34
- package/dist/api/types.js +0 -1
- package/dist/bin/cli.d.ts +0 -1
- package/dist/bin/cli.js +11 -7
- package/dist/config/config.d.ts +66 -46
- package/dist/config/config.js +47 -44
- package/dist/index.d.ts +9 -7
- package/dist/index.js +5 -6
- package/dist/knowledge/chunk.d.ts +0 -15
- package/dist/knowledge/chunk.js +0 -16
- package/dist/knowledge/github.d.ts +21 -0
- package/dist/knowledge/github.js +174 -0
- package/dist/knowledge/loader.d.ts +23 -24
- package/dist/knowledge/loader.js +69 -108
- package/dist/knowledge/search.d.ts +1 -12
- package/dist/knowledge/search.js +19 -20
- package/dist/knowledge/tar.d.ts +7 -0
- package/dist/knowledge/tar.js +87 -0
- package/dist/knowledge/types.d.ts +8 -22
- package/dist/knowledge/types.js +0 -1
- package/dist/server.d.ts +1 -12
- package/dist/server.js +21 -18
- package/dist/session.d.ts +1 -18
- package/dist/session.js +3 -13
- package/dist/tools/api-call.d.ts +0 -2
- package/dist/tools/api-call.js +0 -23
- package/dist/tools/api-discovery.d.ts +0 -2
- package/dist/tools/api-discovery.js +2 -5
- package/dist/tools/docs.d.ts +0 -2
- package/dist/tools/docs.js +1 -5
- package/dist/tools/guide.d.ts +0 -7
- package/dist/tools/guide.js +11 -11
- package/dist/tools/result.d.ts +0 -8
- package/dist/tools/result.js +0 -7
- package/dist/tools/whoami.d.ts +0 -2
- package/dist/tools/whoami.js +5 -3
- package/dist/transports/http.d.ts +0 -6
- package/dist/transports/http.js +17 -18
- package/dist/transports/stdio.d.ts +0 -6
- package/dist/transports/stdio.js +1 -7
- package/knowledge/operating-rules.md +121 -0
- package/package.json +20 -7
- package/data/catalog.json +0 -1
- package/data/knowledge.json +0 -1
- package/dist/api/audit.d.ts.map +0 -1
- package/dist/api/audit.js.map +0 -1
- package/dist/api/auth.d.ts.map +0 -1
- package/dist/api/auth.js.map +0 -1
- package/dist/api/catalog.d.ts.map +0 -1
- package/dist/api/catalog.js.map +0 -1
- package/dist/api/client.d.ts.map +0 -1
- package/dist/api/client.js.map +0 -1
- package/dist/api/policy.d.ts.map +0 -1
- package/dist/api/policy.js.map +0 -1
- package/dist/api/shape.d.ts.map +0 -1
- package/dist/api/shape.js.map +0 -1
- package/dist/api/types.d.ts.map +0 -1
- package/dist/api/types.js.map +0 -1
- package/dist/bin/cli.d.ts.map +0 -1
- package/dist/bin/cli.js.map +0 -1
- package/dist/config/config.d.ts.map +0 -1
- package/dist/config/config.js.map +0 -1
- package/dist/index.d.ts.map +0 -1
- package/dist/index.js.map +0 -1
- package/dist/knowledge/chunk.d.ts.map +0 -1
- package/dist/knowledge/chunk.js.map +0 -1
- package/dist/knowledge/loader.d.ts.map +0 -1
- package/dist/knowledge/loader.js.map +0 -1
- package/dist/knowledge/search.d.ts.map +0 -1
- package/dist/knowledge/search.js.map +0 -1
- package/dist/knowledge/types.d.ts.map +0 -1
- package/dist/knowledge/types.js.map +0 -1
- package/dist/server.d.ts.map +0 -1
- package/dist/server.js.map +0 -1
- package/dist/session.d.ts.map +0 -1
- package/dist/session.js.map +0 -1
- package/dist/tools/api-call.d.ts.map +0 -1
- package/dist/tools/api-call.js.map +0 -1
- package/dist/tools/api-discovery.d.ts.map +0 -1
- package/dist/tools/api-discovery.js.map +0 -1
- package/dist/tools/docs.d.ts.map +0 -1
- package/dist/tools/docs.js.map +0 -1
- package/dist/tools/guide.d.ts.map +0 -1
- package/dist/tools/guide.js.map +0 -1
- package/dist/tools/result.d.ts.map +0 -1
- package/dist/tools/result.js.map +0 -1
- package/dist/tools/whoami.d.ts.map +0 -1
- package/dist/tools/whoami.js.map +0 -1
- package/dist/transports/http.d.ts.map +0 -1
- package/dist/transports/http.js.map +0 -1
- package/dist/transports/stdio.d.ts.map +0 -1
- package/dist/transports/stdio.js.map +0 -1
|
@@ -0,0 +1,411 @@
|
|
|
1
|
+
{
|
|
2
|
+
"version": 1,
|
|
3
|
+
"source": "dnk-back src/**/*.controller.ts (@GrantByPermission) + AdminPermissionsEnum",
|
|
4
|
+
"byOpId": {
|
|
5
|
+
"WorkflowsController_getFlows": "workflows.get",
|
|
6
|
+
"WorkflowsController_saveFlows": "workflows.update",
|
|
7
|
+
"WorkflowsController_getNodes": "workflows.get",
|
|
8
|
+
"WorkflowsController_getCmsEventsOutputExample": "workflows.get",
|
|
9
|
+
"WorkflowsController_getNodeCredentials": "workflows.get",
|
|
10
|
+
"WorkflowsController_getSwaggerDocs": "workflows.get",
|
|
11
|
+
"WorkflowsController_executeToNode": "workflows.update",
|
|
12
|
+
"AdminAnalyticsController_getFunnel": "analytics.read",
|
|
13
|
+
"AdminAnalyticsController_getSearchNoResults": "analytics.read",
|
|
14
|
+
"AdminAnalyticsController_getSearchTop": "analytics.read",
|
|
15
|
+
"AdminAnalyticsController_getTopNotBuying": "analytics.read",
|
|
16
|
+
"AdminAnalyticsController_getSegmentsDistribution": "analytics.read",
|
|
17
|
+
"AdminAnalyticsController_getBlockPerformance": "analytics.read",
|
|
18
|
+
"AdminAttributesSetsController_create": "settings.attributesSets.create",
|
|
19
|
+
"AdminAttributesSetsController_update": "settings.attributesSets.update",
|
|
20
|
+
"AdminAttributesSetsController_updateSchema": "settings.attributes.changePositions",
|
|
21
|
+
"AdminAttributesSetsController_remove": "settings.attributesSets.delete",
|
|
22
|
+
"AdminAttributesSetsController_updateAttributeSetPosition": "settings.attributesSets.changePositions",
|
|
23
|
+
"AdminAttributesSetsController_setAdminVisibility": "settings.attributesSets.switching",
|
|
24
|
+
"AdminAttributesSetsController_getCopyValuesStatus": "settings.attributesSets.update",
|
|
25
|
+
"AdminAttributesSetsController_getLocalizeInfoSchema": "settings.attributesSets.update",
|
|
26
|
+
"AdminAttributesSetsController_getUsage": "settings.attributesSets.delete",
|
|
27
|
+
"AdminAttributesSetsController_logCopyEntity": "settings.attributesSets.update",
|
|
28
|
+
"AdminAttributesSetsController_copyValues": "settings.attributesSets.update",
|
|
29
|
+
"AdminBlocksController_previewBlock": "blocks.preview",
|
|
30
|
+
"AdminBlocksController_create": "blocks.create",
|
|
31
|
+
"AdminBlocksController_update": "blocks.update",
|
|
32
|
+
"AdminBlocksController_remove": "blocks.delete",
|
|
33
|
+
"AdminCollectionsController_create": "collections.collection.create",
|
|
34
|
+
"AdminCollectionsController_removeRow": "collections.row.delete",
|
|
35
|
+
"AdminCollectionsController_update": "collections.collection.update",
|
|
36
|
+
"AdminCollectionsController_remove": "collections.collection.delete",
|
|
37
|
+
"AdminCollectionsController_removeAllRows": "collections.collection.delete",
|
|
38
|
+
"AdminDiscountsController_updateSettings": "discounts.update",
|
|
39
|
+
"AdminDiscountsController_adjustBonusBalance": "discounts.update",
|
|
40
|
+
"AdminDiscountsController_create": "discounts.create",
|
|
41
|
+
"AdminDiscountsController_update": "discounts.update",
|
|
42
|
+
"AdminDiscountsController_remove": "discounts.delete",
|
|
43
|
+
"AdminDiscountsController_updatePosition": "discounts.update",
|
|
44
|
+
"AdminDiscountsController_createCoupon": "discounts.update",
|
|
45
|
+
"AdminDiscountsController_generateCouponsByMask": "discounts.update",
|
|
46
|
+
"AdminDiscountsController_removeCoupon": "discounts.delete",
|
|
47
|
+
"AdminDiscountsController_removeCoupons": "discounts.delete",
|
|
48
|
+
"AdminEventsController_create": "events.create",
|
|
49
|
+
"AdminEventsController_update": "events.update",
|
|
50
|
+
"AdminEventsController_delete": "events.delete",
|
|
51
|
+
"SettingsController_updateSenderEmail": "events.emailSettings",
|
|
52
|
+
"AdminExportController_exportUsersFromAuthProvider": "users.export",
|
|
53
|
+
"AdminExportController_exporAllUsers": "users.export",
|
|
54
|
+
"AdminExportController_exportOrdersByStorage": "orders.export",
|
|
55
|
+
"AdminExportController_exporAllOrders": "orders.export",
|
|
56
|
+
"AdminExportController_exportPaymentsByAccount": "payments.export",
|
|
57
|
+
"AdminExportController_exporAllPayments": "payments.export",
|
|
58
|
+
"AdminFiltersController_create": "filter.create",
|
|
59
|
+
"AdminFiltersController_update": "filter.update",
|
|
60
|
+
"AdminFiltersController_remove": "filter.delete",
|
|
61
|
+
"AdminFiltersController_addItems": "filter.items.add",
|
|
62
|
+
"AdminFiltersController_replaceAttributeItems": "filter.items.add",
|
|
63
|
+
"AdminFiltersController_upsertAttributeConfig": "filter.items.add",
|
|
64
|
+
"AdminFiltersController_deleteAttributeConfig": "filter.items.add",
|
|
65
|
+
"AdminFiltersController_selectAllItems": "filter.items.add",
|
|
66
|
+
"AdminFiltersController_deselectAllItems": "filter.items.remove",
|
|
67
|
+
"AdminFiltersController_removeItem": "filter.items.remove",
|
|
68
|
+
"AdminFiltersController_updateItemPosition": "filter.items.changePositions",
|
|
69
|
+
"AdminFiltersController_reparentItems": "filter.items.changePositions",
|
|
70
|
+
"AdminFiltersController_createCustomItem": "filter.items.add",
|
|
71
|
+
"AdminFiltersController_updateCustomItem": "filter.update",
|
|
72
|
+
"AdminFiltersController_removeCustomItem": "filter.items.remove",
|
|
73
|
+
"AdminFiltersController_updateCustomItemPosition": "filter.items.changePositions",
|
|
74
|
+
"AdminFormDataController_updateStatus": "forms.data.update",
|
|
75
|
+
"AdminFormDataController_remove": "forms.data.delete",
|
|
76
|
+
"AdminFormDataController_removeSelected": "forms.data.delete",
|
|
77
|
+
"AdminFormsController_create": "forms.create",
|
|
78
|
+
"AdminFormsController_update": "forms.update",
|
|
79
|
+
"AdminFormsController_remove": "forms.delete",
|
|
80
|
+
"AdminImportController_importFromBlueprint": "import.data",
|
|
81
|
+
"AdminImportController_importAttributeSet": "import.data",
|
|
82
|
+
"AdminImportController_importPages": "import.data",
|
|
83
|
+
"AdminImportController_checkPages": "import.data",
|
|
84
|
+
"AdminImportController_createProducts": "import.data",
|
|
85
|
+
"AdminImportController_updateProducts": "import.data",
|
|
86
|
+
"AdminImportController_getHistoryRecords": "import.data",
|
|
87
|
+
"AdminImportController_removeHistoryRecord": "import.data",
|
|
88
|
+
"CatalogImportTemplateController_updateOne": "import.data.createTemplate",
|
|
89
|
+
"CatalogImportTemplateController_create": "import.data.createTemplate",
|
|
90
|
+
"CatalogImportTemplateController_deleteOne": "import.data.deleteTemplate",
|
|
91
|
+
"AdminContentApiErrorsController_getList": "journal.viewContentApiErrors",
|
|
92
|
+
"AdminContentApiErrorsController_getById": "journal.viewContentApiErrors",
|
|
93
|
+
"AdminContentApiErrorsController_clearAll": "journal.viewContentApiErrors",
|
|
94
|
+
"AdminContentApiStatsController_getStats": "journal.viewContentApiStats",
|
|
95
|
+
"AdminLocalesController_create": "settings.locales.create",
|
|
96
|
+
"AdminLocalesController_setActive": "settings.locales.switching",
|
|
97
|
+
"AdminLocalesController_update": "settings.locales.update",
|
|
98
|
+
"AdminLocalesController_remove": "settings.locales.delete",
|
|
99
|
+
"AdminLocalesController_updateAttributeSetPosition": "settings.locales.changePositions",
|
|
100
|
+
"AdminMarkersController_create": "markers.create",
|
|
101
|
+
"AdminMarkersController_update": "markers.update",
|
|
102
|
+
"AdminMarkersController_remove": "markers.delete",
|
|
103
|
+
"AdminMenusController_create": "menu.create",
|
|
104
|
+
"AdminMenusController_update": "menu.update",
|
|
105
|
+
"AdminMenusController_updatePosition": "menu.items.changePositions",
|
|
106
|
+
"AdminMenusController_createCustomItem": "menu.items.add",
|
|
107
|
+
"AdminMenusController_updateCustomItem": "menu.update",
|
|
108
|
+
"AdminMenusController_removeCustomItem": "menu.items.remove",
|
|
109
|
+
"AdminMenusController_updateCustomItemPosition": "menu.items.changePositions",
|
|
110
|
+
"AdminModulesController_create": "settings.modules.create",
|
|
111
|
+
"AdminModulesController_update": "settings.modules.update",
|
|
112
|
+
"AdminModulesController_updateConfig": "settings.modules.update",
|
|
113
|
+
"AdminModulesController_remove": "settings.modules.delete",
|
|
114
|
+
"AdminModulesController_setAdminVisibility": "settings.modules.switching",
|
|
115
|
+
"AdminModulesController_updateModulePosition": "settings.modules.changePositions",
|
|
116
|
+
"AdminModulesController_createCustomModule": "settings.modules.upload",
|
|
117
|
+
"AdminOrdersStorageController_updateOrderStatusPosition": "orders.storage.order-status.changePositions",
|
|
118
|
+
"AdminOrdersStorageController_create": "orders.storage.create",
|
|
119
|
+
"AdminOrdersStorageController_update": "orders.storage.update",
|
|
120
|
+
"AdminOrdersStorageController_updateOrderStatus": "orders.storage.order-status.update",
|
|
121
|
+
"AdminOrdersStorageController_updateAxisStatusMap": "orders.storage.order-status.update",
|
|
122
|
+
"AdminOrdersStorageController_createStatusTrigger": "orders.storage.order-status.create",
|
|
123
|
+
"AdminOrdersStorageController_updateStatusTrigger": "orders.storage.order-status.update",
|
|
124
|
+
"AdminOrdersStorageController_removeStatusTrigger": "orders.storage.order-status.delete",
|
|
125
|
+
"AdminOrdersStorageController_fireStatusTrigger": "orders.storage.order-status.update",
|
|
126
|
+
"AdminOrdersStorageController_remove": "orders.storage.delete",
|
|
127
|
+
"AdminOrdersStorageController_createOrderStatus": "orders.storage.order-status.create",
|
|
128
|
+
"AdminOrdersStorageController_updateOneOrderStatus": "orders.storage.order-status.update",
|
|
129
|
+
"AdminOrdersStorageController_removeOrder": "orders.storage.order.delete",
|
|
130
|
+
"AdminOrdersStorageController_removeAllOrders": "orders.storage.order.delete",
|
|
131
|
+
"AdminOrdersStorageController_removeOrderStatus": "orders.storage.order-status.delete",
|
|
132
|
+
"AdminOrdersStorageController_previewRefund": "payments.refunds",
|
|
133
|
+
"AdminOrdersStorageController_refundOrder": "payments.refunds",
|
|
134
|
+
"AdminOrdersStorageController_findRefunds": "payments.refunds",
|
|
135
|
+
"PageErrorsController_create": "pages.errorStatus.create",
|
|
136
|
+
"PageErrorsController_remove": "pages.errorStatus.delete",
|
|
137
|
+
"PageErrorsController_setErrorPage": "pages.settings.update",
|
|
138
|
+
"AdminPagesController_create": "pages.create",
|
|
139
|
+
"AdminPagesController_updateConfig": "catalog.products.outputSettings",
|
|
140
|
+
"AdminPagesController_copy": "pages.copy",
|
|
141
|
+
"AdminPagesController_updatePosition": "pages.update",
|
|
142
|
+
"AdminPagesController_moveMany": "pages.move",
|
|
143
|
+
"AdminPagesController_update": "pages.update",
|
|
144
|
+
"AdminPagesController_remove": "pages.delete",
|
|
145
|
+
"AdminPagesController_updatePagePosition": "pages.changePositions",
|
|
146
|
+
"AdminPagesController_updatePageFormPosition": "pages.forms.changePositions",
|
|
147
|
+
"AdminPagesController_updatePageBlockPosition": "pages.blocks.changePositions",
|
|
148
|
+
"AdminPagesController_updatePageNestedBlockPosition": "pages.blocks.nested.changePositions",
|
|
149
|
+
"AdminPagesController_updateProductPosition": "catalog.products.changePositions",
|
|
150
|
+
"AdminPagesController_setVisibility": "pages.switching",
|
|
151
|
+
"AdminPagesController_deleteMany": "pages.delete",
|
|
152
|
+
"DeveloperPagesController_create": "pages.create",
|
|
153
|
+
"AdminPaymentsController_createStripeRedirectUrl": "payments.accounts.create",
|
|
154
|
+
"AdminPaymentsController_deleteStripe": "payments.accounts.delete",
|
|
155
|
+
"AdminPaymentsController_getStatusMap": "payments.settings.get",
|
|
156
|
+
"AdminPaymentsController_updateStatusMap": "payments.settings.update",
|
|
157
|
+
"AdminPaymentsController_createAccount": "payments.accounts.create",
|
|
158
|
+
"AdminPaymentsController_updateAccount": "payments.accounts.update",
|
|
159
|
+
"AdminPaymentsController_deleteAccount": "payments.accounts.delete",
|
|
160
|
+
"AdminPaymentsController_updatePaymentParamItems": "payments.settings.update",
|
|
161
|
+
"AdminPaymentsController_addPaymentParamItems": "payments.settings.update",
|
|
162
|
+
"AdminPaymentsController_removePaymentParamItem": "payments.settings.update",
|
|
163
|
+
"AdminPaymentsController_getPaymentParamItems": "payments.settings.get",
|
|
164
|
+
"AdminPaymentsController_getPaymentParamItemById": "payments.settings.get",
|
|
165
|
+
"AdminPaymentsController_updateRefund": "payments.refunds",
|
|
166
|
+
"AdminProductStatusController_create": "catalog.status.create",
|
|
167
|
+
"AdminProductStatusController_update": "catalog.status.update",
|
|
168
|
+
"AdminProductStatusController_remove": "catalog.status.delete",
|
|
169
|
+
"AdminProductStatusController_updateModulePosition": "catalog.status.changePositions",
|
|
170
|
+
"AdminProductsController_update": "catalog.products.update",
|
|
171
|
+
"AdminProductsController_create": "catalog.products.create",
|
|
172
|
+
"AdminProductsController_copy": "catalog.products.copy",
|
|
173
|
+
"AdminProductsController_lockSorting": "catalog.products.lockPositions",
|
|
174
|
+
"AdminProductsController_updatePageNestedBlockPosition": "catalog.products.blocks.changePositions",
|
|
175
|
+
"AdminProductsController_copyInCategory": "catalog.products.updateCategories",
|
|
176
|
+
"AdminProductsController_moveInCategory": "catalog.products.updateCategories",
|
|
177
|
+
"AdminProductsController_setStatusForProducts": "catalog.products.editStatus",
|
|
178
|
+
"AdminProductsController_setTemplate": "catalog.products.setTemplate",
|
|
179
|
+
"AdminProductsController_productsMultiDeletion": "catalog.products.deleteMany",
|
|
180
|
+
"AdminProductsController_removeMany": "catalog.products.deleteMany",
|
|
181
|
+
"AdminProductsController_removeManyFromCategory": "catalog.products.deleteMany",
|
|
182
|
+
"AdminProductsController_removeAllInCategory": "catalog.products.deleteMany",
|
|
183
|
+
"AdminProductsController_remove": "catalog.products.delete",
|
|
184
|
+
"AdminProductsController_removeFromCategory": "catalog.products.delete",
|
|
185
|
+
"AdminProductsController_setVisibility": "catalog.products.switching",
|
|
186
|
+
"DeveloperProductsController_update": "catalog.products.update",
|
|
187
|
+
"ProductRelationTemplateController_updateOne": "catalog.products.updateRelationTemplate",
|
|
188
|
+
"ProductRelationTemplateController_deleteOne": "catalog.products.deleteRelationTemplate",
|
|
189
|
+
"ProductRelationTemplateController_activateOne": "catalog.products.updateRelationTemplate",
|
|
190
|
+
"ProductRelationTemplateController_create": "catalog.products.createRelationTemplate",
|
|
191
|
+
"AdminSettingsGeneralController_update": "settings.general.update",
|
|
192
|
+
"AdminSlidesController_create": "slides.create",
|
|
193
|
+
"AdminSlidesController_update": "slides.update",
|
|
194
|
+
"AdminSlidesController_remove": "slides.delete",
|
|
195
|
+
"AdminSlidesController_setVisibility": "slides.switching",
|
|
196
|
+
"AdminSlidesController_reorder": "slides.changePositions",
|
|
197
|
+
"AdminSubscriptionsController_renew": "subscriptions.manage",
|
|
198
|
+
"AdminSubscriptionsController_cancel": "subscriptions.manage",
|
|
199
|
+
"AdminSubscriptionsController_deleteUserSubscription": "subscriptions.manage",
|
|
200
|
+
"AdminSubscriptionsController_create": "subscriptions.create",
|
|
201
|
+
"AdminSubscriptionsController_update": "subscriptions.update",
|
|
202
|
+
"AdminSubscriptionsController_delete": "subscriptions.delete",
|
|
203
|
+
"AdminSystemController_generateUserCert": "settings.certs.create",
|
|
204
|
+
"AdminSystemController_generateUserToken": "settings.tokens.create",
|
|
205
|
+
"AdminSystemController_deleteOneCert": "settings.certs.delete",
|
|
206
|
+
"AdminSystemController_deleteOneToken": "settings.tokens.delete",
|
|
207
|
+
"AdminSystemController_downloadCert": "settings.certs.download",
|
|
208
|
+
"AdminSystemController_getGeneratedCaptchaKeys": "settings.general.update",
|
|
209
|
+
"AdminSystemController_generateCaptchaKey": "settings.general.update",
|
|
210
|
+
"AdminSystemController_updateCaptchaKey": "settings.general.update",
|
|
211
|
+
"AdminSystemController_deleteCaptchaKey": "settings.general.update",
|
|
212
|
+
"AdminTemplatePreviewsController_create": "settings.templatePreview.create",
|
|
213
|
+
"AdminTemplatePreviewsController_update": "settings.templatePreview.update",
|
|
214
|
+
"AdminTemplatePreviewsController_remove": "settings.templatePreview.delete",
|
|
215
|
+
"AdminTemplatePreviewsController_updateAttributeSetPosition": "settings.templatePreview.changePositions",
|
|
216
|
+
"AdminTemplatesController_create": "settings.templates.create",
|
|
217
|
+
"AdminTemplatesController_update": "settings.templates.update",
|
|
218
|
+
"AdminTemplatesController_remove": "settings.templates.delete",
|
|
219
|
+
"AdminTemplatesController_updateAttributeSetPosition": "settings.templates.changePositions",
|
|
220
|
+
"AdminUserGroupsController_create": "userGroups.create",
|
|
221
|
+
"AdminUserGroupsController_update": "userGroups.update",
|
|
222
|
+
"AdminUserGroupsController_remove": "userGroups.delete",
|
|
223
|
+
"AdminUserGroupsController_setVisibility": "userGroups.update",
|
|
224
|
+
"AdminUserGroupsController_updateGroupPermission": "userPermissions.update",
|
|
225
|
+
"AdminUserGroupsController_copyGroupPermissions": "userPermissions.update",
|
|
226
|
+
"AdminUserGroupsController_grantAllPermissions": "userPermissions.update",
|
|
227
|
+
"AdminUserGroupsController_revertLastBulkPermissionsOp": "userPermissions.update",
|
|
228
|
+
"AdminUserPermissionsController_flushCache": "userPermissions.update",
|
|
229
|
+
"AdminUserPermissionsController_linkToGuest": "userPermissions.update",
|
|
230
|
+
"AdminUserPermissionsController_create": "userPermissions.create",
|
|
231
|
+
"AdminUserPermissionsController_update": "userPermissions.update",
|
|
232
|
+
"AdminUserPermissionsController_remove": "userPermissions.delete",
|
|
233
|
+
"AdminUsersController_update": "users.update",
|
|
234
|
+
"AdminUsersController_remove": "users.delete",
|
|
235
|
+
"AdminUsersAuthProviderController_createProvider": "usersAuthProvider.create",
|
|
236
|
+
"AdminUsersAuthProviderController_updateProvider": "usersAuthProvider.update",
|
|
237
|
+
"AdminUsersAuthProviderController_remove": "usersAuthProvider.delete",
|
|
238
|
+
"AdminUsersAuthProviderController_register": "users.create"
|
|
239
|
+
},
|
|
240
|
+
"permissions": [
|
|
241
|
+
"menu.create",
|
|
242
|
+
"menu.update",
|
|
243
|
+
"menu.delete",
|
|
244
|
+
"menu.items.add",
|
|
245
|
+
"menu.items.remove",
|
|
246
|
+
"menu.items.changePositions",
|
|
247
|
+
"filter.create",
|
|
248
|
+
"filter.update",
|
|
249
|
+
"filter.delete",
|
|
250
|
+
"filter.items.add",
|
|
251
|
+
"filter.items.remove",
|
|
252
|
+
"filter.items.changePositions",
|
|
253
|
+
"settings.modules.create",
|
|
254
|
+
"settings.modules.update",
|
|
255
|
+
"settings.modules.switching",
|
|
256
|
+
"settings.modules.delete",
|
|
257
|
+
"settings.modules.changePositions",
|
|
258
|
+
"settings.modules.upload",
|
|
259
|
+
"settings.attributesSets.create",
|
|
260
|
+
"settings.attributesSets.update",
|
|
261
|
+
"settings.attributesSets.delete",
|
|
262
|
+
"settings.attributesSets.switching",
|
|
263
|
+
"settings.attributesSets.changePositions",
|
|
264
|
+
"settings.attributes.create",
|
|
265
|
+
"settings.attributes.update",
|
|
266
|
+
"settings.attributes.delete",
|
|
267
|
+
"settings.attributes.changePositions",
|
|
268
|
+
"settings.templates.create",
|
|
269
|
+
"settings.templates.update",
|
|
270
|
+
"settings.templates.delete",
|
|
271
|
+
"settings.templates.changePositions",
|
|
272
|
+
"settings.templatePreview.create",
|
|
273
|
+
"settings.templatePreview.update",
|
|
274
|
+
"settings.templatePreview.delete",
|
|
275
|
+
"settings.templatePreview.changePositions",
|
|
276
|
+
"settings.certs.create",
|
|
277
|
+
"settings.certs.download",
|
|
278
|
+
"settings.certs.delete",
|
|
279
|
+
"settings.tokens.create",
|
|
280
|
+
"settings.tokens.delete",
|
|
281
|
+
"settings.locales.create",
|
|
282
|
+
"settings.locales.update",
|
|
283
|
+
"settings.locales.delete",
|
|
284
|
+
"settings.locales.switching",
|
|
285
|
+
"settings.locales.changePositions",
|
|
286
|
+
"settings.general.update",
|
|
287
|
+
"admins.create",
|
|
288
|
+
"admins.update",
|
|
289
|
+
"admins.updatePermissions",
|
|
290
|
+
"admins.modules",
|
|
291
|
+
"admins.delete",
|
|
292
|
+
"admins.get",
|
|
293
|
+
"admins.changePositions",
|
|
294
|
+
"admins.totalLogout",
|
|
295
|
+
"forms.create",
|
|
296
|
+
"forms.update",
|
|
297
|
+
"forms.delete",
|
|
298
|
+
"forms.data.delete",
|
|
299
|
+
"forms.data.update",
|
|
300
|
+
"blocks.create",
|
|
301
|
+
"blocks.update",
|
|
302
|
+
"blocks.delete",
|
|
303
|
+
"blocks.preview",
|
|
304
|
+
"markers.create",
|
|
305
|
+
"markers.update",
|
|
306
|
+
"markers.delete",
|
|
307
|
+
"pages.create",
|
|
308
|
+
"pages.update",
|
|
309
|
+
"pages.updateBlockAndForms",
|
|
310
|
+
"pages.delete",
|
|
311
|
+
"pages.settings.update",
|
|
312
|
+
"pages.copy",
|
|
313
|
+
"pages.errorStatus.create",
|
|
314
|
+
"pages.errorStatus.delete",
|
|
315
|
+
"pages.changePositions",
|
|
316
|
+
"pages.forms.changePositions",
|
|
317
|
+
"pages.blocks.changePositions",
|
|
318
|
+
"pages.blocks.nested.changePositions",
|
|
319
|
+
"pages.switching",
|
|
320
|
+
"pages.move",
|
|
321
|
+
"catalog.products.create",
|
|
322
|
+
"catalog.products.update",
|
|
323
|
+
"catalog.products.delete",
|
|
324
|
+
"catalog.products.switching",
|
|
325
|
+
"catalog.products.copy",
|
|
326
|
+
"catalog.products.deleteMany",
|
|
327
|
+
"catalog.products.updateCategories",
|
|
328
|
+
"catalog.products.lockPositions",
|
|
329
|
+
"catalog.products.changePositions",
|
|
330
|
+
"catalog.products.outputSettings",
|
|
331
|
+
"catalog.products.filterSearch",
|
|
332
|
+
"catalog.products.editStatus",
|
|
333
|
+
"catalog.products.setTemplate",
|
|
334
|
+
"catalog.products.createRelationTemplate",
|
|
335
|
+
"catalog.products.updateRelationTemplate",
|
|
336
|
+
"catalog.products.deleteRelationTemplate",
|
|
337
|
+
"catalog.status.update",
|
|
338
|
+
"catalog.status.delete",
|
|
339
|
+
"catalog.status.create",
|
|
340
|
+
"catalog.status.changePositions",
|
|
341
|
+
"catalog.products.blocks.changePositions",
|
|
342
|
+
"users.get",
|
|
343
|
+
"users.create",
|
|
344
|
+
"users.update",
|
|
345
|
+
"users.delete",
|
|
346
|
+
"usersAuthProvider.create",
|
|
347
|
+
"usersAuthProvider.update",
|
|
348
|
+
"usersAuthProvider.delete",
|
|
349
|
+
"userGroups.get",
|
|
350
|
+
"userGroups.create",
|
|
351
|
+
"userGroups.update",
|
|
352
|
+
"userGroups.delete",
|
|
353
|
+
"userPermissions.create",
|
|
354
|
+
"userPermissions.update",
|
|
355
|
+
"userPermissions.delete",
|
|
356
|
+
"events.get",
|
|
357
|
+
"events.create",
|
|
358
|
+
"events.update",
|
|
359
|
+
"events.delete",
|
|
360
|
+
"events.setupFirebase",
|
|
361
|
+
"events.emailSettings",
|
|
362
|
+
"orders.storage.create",
|
|
363
|
+
"orders.storage.update",
|
|
364
|
+
"orders.storage.delete",
|
|
365
|
+
"orders.storage.order.update",
|
|
366
|
+
"orders.storage.order.delete",
|
|
367
|
+
"orders.storage.order-status.create",
|
|
368
|
+
"orders.storage.order-status.update",
|
|
369
|
+
"orders.storage.order-status.delete",
|
|
370
|
+
"orders.storage.order-status.changePositions",
|
|
371
|
+
"payments.settings.get",
|
|
372
|
+
"payments.settings.update",
|
|
373
|
+
"payments.accounts.get",
|
|
374
|
+
"payments.accounts.create",
|
|
375
|
+
"payments.accounts.update",
|
|
376
|
+
"payments.accounts.delete",
|
|
377
|
+
"payments.refunds",
|
|
378
|
+
"workflows.get",
|
|
379
|
+
"workflows.update",
|
|
380
|
+
"collections.collection.get",
|
|
381
|
+
"collections.collection.create",
|
|
382
|
+
"collections.collection.update",
|
|
383
|
+
"collections.collection.delete",
|
|
384
|
+
"collections.row.get",
|
|
385
|
+
"collections.row.create",
|
|
386
|
+
"collections.row.update",
|
|
387
|
+
"collections.row.delete",
|
|
388
|
+
"users.export",
|
|
389
|
+
"orders.export",
|
|
390
|
+
"payments.export",
|
|
391
|
+
"discounts.create",
|
|
392
|
+
"discounts.update",
|
|
393
|
+
"discounts.delete",
|
|
394
|
+
"discounts.updatePriority",
|
|
395
|
+
"import.data",
|
|
396
|
+
"import.data.createTemplate",
|
|
397
|
+
"import.data.deleteTemplate",
|
|
398
|
+
"subscriptions.create",
|
|
399
|
+
"subscriptions.update",
|
|
400
|
+
"subscriptions.delete",
|
|
401
|
+
"subscriptions.manage",
|
|
402
|
+
"analytics.read",
|
|
403
|
+
"slides.create",
|
|
404
|
+
"slides.update",
|
|
405
|
+
"slides.delete",
|
|
406
|
+
"slides.switching",
|
|
407
|
+
"slides.changePositions",
|
|
408
|
+
"journal.viewContentApiStats",
|
|
409
|
+
"journal.viewContentApiErrors"
|
|
410
|
+
]
|
|
411
|
+
}
|
package/dist/api/audit.d.ts
CHANGED
|
@@ -1,4 +1,3 @@
|
|
|
1
|
-
/** Одна запись аудита изменяющего вызова. */
|
|
2
1
|
export interface AuditEntry {
|
|
3
2
|
at: string;
|
|
4
3
|
mode: string;
|
|
@@ -10,11 +9,6 @@ export interface AuditEntry {
|
|
|
10
9
|
outcome: 'denied' | 'needs-confirm' | 'sent';
|
|
11
10
|
status?: number;
|
|
12
11
|
}
|
|
13
|
-
/**
|
|
14
|
-
* Журнал изменяющих вызовов в формате JSONL.
|
|
15
|
-
* Пишем хэш аргументов, а не сами аргументы: тела запросов содержат
|
|
16
|
-
* пользовательские данные, а для разбора инцидента достаточно связать вызовы между собой.
|
|
17
|
-
*/
|
|
18
12
|
export declare class AuditLog {
|
|
19
13
|
private readonly path;
|
|
20
14
|
private readonly mode;
|
|
@@ -23,10 +17,5 @@ export declare class AuditLog {
|
|
|
23
17
|
mode: string;
|
|
24
18
|
});
|
|
25
19
|
static hashArgs(args: unknown): string;
|
|
26
|
-
/**
|
|
27
|
-
* Пишет запись, не роняя вызов при недоступности файла: аудит важен,
|
|
28
|
-
* но потеря строки лога — не причина провалить операцию, о которой уже отчитались.
|
|
29
|
-
*/
|
|
30
20
|
record(entry: Omit<AuditEntry, 'at' | 'mode'>): void;
|
|
31
21
|
}
|
|
32
|
-
//# sourceMappingURL=audit.d.ts.map
|
package/dist/api/audit.js
CHANGED
|
@@ -1,10 +1,5 @@
|
|
|
1
1
|
import { appendFileSync } from 'node:fs';
|
|
2
2
|
import { createHash } from 'node:crypto';
|
|
3
|
-
/**
|
|
4
|
-
* Журнал изменяющих вызовов в формате JSONL.
|
|
5
|
-
* Пишем хэш аргументов, а не сами аргументы: тела запросов содержат
|
|
6
|
-
* пользовательские данные, а для разбора инцидента достаточно связать вызовы между собой.
|
|
7
|
-
*/
|
|
8
3
|
export class AuditLog {
|
|
9
4
|
path;
|
|
10
5
|
mode;
|
|
@@ -15,10 +10,6 @@ export class AuditLog {
|
|
|
15
10
|
static hashArgs(args) {
|
|
16
11
|
return createHash('sha256').update(JSON.stringify(args ?? null)).digest('hex').slice(0, 16);
|
|
17
12
|
}
|
|
18
|
-
/**
|
|
19
|
-
* Пишет запись, не роняя вызов при недоступности файла: аудит важен,
|
|
20
|
-
* но потеря строки лога — не причина провалить операцию, о которой уже отчитались.
|
|
21
|
-
*/
|
|
22
13
|
record(entry) {
|
|
23
14
|
if (!this.path) {
|
|
24
15
|
return;
|
|
@@ -32,4 +23,3 @@ export class AuditLog {
|
|
|
32
23
|
}
|
|
33
24
|
}
|
|
34
25
|
}
|
|
35
|
-
//# sourceMappingURL=audit.js.map
|
package/dist/api/auth.d.ts
CHANGED
|
@@ -1,31 +1,21 @@
|
|
|
1
1
|
import type { Config } from '../config/config.js';
|
|
2
|
-
/** Пара токенов Admin API, как её отдаёт `POST /auth/login`. */
|
|
3
2
|
export interface TokenPair {
|
|
4
3
|
accessToken: string;
|
|
5
4
|
refreshToken: string;
|
|
6
5
|
}
|
|
7
|
-
/** Данные аутентифицированного админа, восстановленные из токена и API. */
|
|
8
6
|
export interface AdminIdentity {
|
|
9
7
|
id: number;
|
|
10
8
|
login?: string;
|
|
11
9
|
permissions: string[];
|
|
12
10
|
}
|
|
13
|
-
/** Учётные данные одной сессии. В remote-режиме у каждой сессии свои. */
|
|
14
11
|
export interface Credentials {
|
|
15
12
|
login?: string;
|
|
16
13
|
password?: string;
|
|
17
14
|
token?: string;
|
|
18
15
|
}
|
|
19
|
-
/** Ошибка аутентификации с текстом, пригодным для показа модели. */
|
|
20
16
|
export declare class AuthError extends Error {
|
|
21
17
|
}
|
|
22
|
-
/** Достаёт идентификатор админа из payload access-токена. */
|
|
23
18
|
export declare const adminIdFromToken: (token: string) => number;
|
|
24
|
-
/**
|
|
25
|
-
* Держит пару токенов для одного набора учётных данных.
|
|
26
|
-
* Токены живут только в памяти и только внутри сессии: в remote-режиме
|
|
27
|
-
* это то, что не даёт токену одной сессии утечь в другую.
|
|
28
|
-
*/
|
|
29
19
|
export declare class TokenStore {
|
|
30
20
|
private pair;
|
|
31
21
|
private readonly baseUrl;
|
|
@@ -36,18 +26,10 @@ export declare class TokenStore {
|
|
|
36
26
|
timeoutMs: number;
|
|
37
27
|
credentials: Credentials;
|
|
38
28
|
});
|
|
39
|
-
/** Есть ли чем аутентифицироваться вообще. */
|
|
40
29
|
get isConfigured(): boolean;
|
|
41
30
|
private post;
|
|
42
31
|
private static readPair;
|
|
43
|
-
/** Возвращает access-токен, логинясь при первом обращении. */
|
|
44
32
|
accessToken(): Promise<string>;
|
|
45
|
-
/**
|
|
46
|
-
* Обновляет пару после 401. Если refresh невозможен (передан готовый токен
|
|
47
|
-
* или refresh отвергнут) — пробует полный логин, и только потом сдаётся.
|
|
48
|
-
*/
|
|
49
33
|
refresh(): Promise<string>;
|
|
50
34
|
}
|
|
51
|
-
/** Учётные данные из конфигурации — источник по умолчанию для local-режима. */
|
|
52
35
|
export declare const credentialsFromConfig: (config: Config) => Credentials;
|
|
53
|
-
//# sourceMappingURL=auth.d.ts.map
|
package/dist/api/auth.js
CHANGED
|
@@ -1,4 +1,3 @@
|
|
|
1
|
-
/** Ошибка аутентификации с текстом, пригодным для показа модели. */
|
|
2
1
|
export class AuthError extends Error {
|
|
3
2
|
}
|
|
4
3
|
const decodeJwtPayload = (token) => {
|
|
@@ -13,7 +12,6 @@ const decodeJwtPayload = (token) => {
|
|
|
13
12
|
}
|
|
14
13
|
return parsed;
|
|
15
14
|
};
|
|
16
|
-
/** Достаёт идентификатор админа из payload access-токена. */
|
|
17
15
|
export const adminIdFromToken = (token) => {
|
|
18
16
|
const payload = decodeJwtPayload(token);
|
|
19
17
|
const id = payload['id'] ?? payload['sub'] ?? payload['userId'];
|
|
@@ -23,11 +21,6 @@ export const adminIdFromToken = (token) => {
|
|
|
23
21
|
}
|
|
24
22
|
return numeric;
|
|
25
23
|
};
|
|
26
|
-
/**
|
|
27
|
-
* Держит пару токенов для одного набора учётных данных.
|
|
28
|
-
* Токены живут только в памяти и только внутри сессии: в remote-режиме
|
|
29
|
-
* это то, что не даёт токену одной сессии утечь в другую.
|
|
30
|
-
*/
|
|
31
24
|
export class TokenStore {
|
|
32
25
|
pair;
|
|
33
26
|
baseUrl;
|
|
@@ -41,7 +34,6 @@ export class TokenStore {
|
|
|
41
34
|
this.pair = { accessToken: params.credentials.token, refreshToken: '' };
|
|
42
35
|
}
|
|
43
36
|
}
|
|
44
|
-
/** Есть ли чем аутентифицироваться вообще. */
|
|
45
37
|
get isConfigured() {
|
|
46
38
|
return Boolean(this.credentials.token || (this.credentials.login && this.credentials.password));
|
|
47
39
|
}
|
|
@@ -54,11 +46,6 @@ export class TokenStore {
|
|
|
54
46
|
});
|
|
55
47
|
const text = await response.text();
|
|
56
48
|
if (!response.ok) {
|
|
57
|
-
/**
|
|
58
|
-
* Admin API отвечает 401 «Login or password incorrect» и на developer-аккаунт:
|
|
59
|
-
* контроллер отбрасывает админов с isDeveloper. Без этой подсказки агент
|
|
60
|
-
* будет бесконечно перепроверять пароль.
|
|
61
|
-
*/
|
|
62
49
|
const hint = response.status === 401
|
|
63
50
|
? ' The Admin API also returns 401 for accounts flagged isDeveloper — those belong to the Developer API, which this server does not expose.'
|
|
64
51
|
: '';
|
|
@@ -81,7 +68,6 @@ export class TokenStore {
|
|
|
81
68
|
refreshToken: typeof refreshToken === 'string' ? refreshToken : '',
|
|
82
69
|
};
|
|
83
70
|
}
|
|
84
|
-
/** Возвращает access-токен, логинясь при первом обращении. */
|
|
85
71
|
async accessToken() {
|
|
86
72
|
if (this.pair) {
|
|
87
73
|
return this.pair.accessToken;
|
|
@@ -95,10 +81,6 @@ export class TokenStore {
|
|
|
95
81
|
}));
|
|
96
82
|
return this.pair.accessToken;
|
|
97
83
|
}
|
|
98
|
-
/**
|
|
99
|
-
* Обновляет пару после 401. Если refresh невозможен (передан готовый токен
|
|
100
|
-
* или refresh отвергнут) — пробует полный логин, и только потом сдаётся.
|
|
101
|
-
*/
|
|
102
84
|
async refresh() {
|
|
103
85
|
const refreshToken = this.pair?.refreshToken;
|
|
104
86
|
this.pair = undefined;
|
|
@@ -117,10 +99,8 @@ export class TokenStore {
|
|
|
117
99
|
return this.accessToken();
|
|
118
100
|
}
|
|
119
101
|
}
|
|
120
|
-
/** Учётные данные из конфигурации — источник по умолчанию для local-режима. */
|
|
121
102
|
export const credentialsFromConfig = (config) => ({
|
|
122
103
|
...(config.login ? { login: config.login } : {}),
|
|
123
104
|
...(config.password ? { password: config.password } : {}),
|
|
124
105
|
...(config.token ? { token: config.token } : {}),
|
|
125
106
|
});
|
|
126
|
-
//# sourceMappingURL=auth.js.map
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import type { Catalog } from './types.js';
|
|
2
|
+
export interface PermissionMap {
|
|
3
|
+
byOpId: Record<string, string>;
|
|
4
|
+
permissions: string[];
|
|
5
|
+
}
|
|
6
|
+
export declare const buildCatalog: (params: {
|
|
7
|
+
rawSwagger: string;
|
|
8
|
+
permissions: PermissionMap;
|
|
9
|
+
builtAt: string;
|
|
10
|
+
}) => Catalog;
|