@orthacms/content-server 0.4.2 → 0.5.0

package/dist/lib/entries/application/use-cases/bulk-unpublish-entries.use-case.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bulk-unpublish-entries.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/application/use-cases/bulk-unpublish-entries.use-case.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE;;;;;;;;;;GAUG;AACH,qBACa,2BAA2B;IAEhC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,kBAAkB;IAGzC,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC;CA+C/B"}
+{"version":3,"file":"bulk-unpublish-entries.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/application/use-cases/bulk-unpublish-entries.use-case.ts"],"names":[],"mappings":"AACA,OAAO,EAEH,KAAK,UAAU,EACf,YAAY,EACZ,UAAU,EACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAIjE;;;;;;;;;;GAUG;AACH,qBACa,2BAA2B;IAEhC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,kBAAkB;IAGzC,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,gBAAgB,CAAC;CA6D/B"}

package/dist/lib/entries/application/use-cases/bulk-unpublish-entries.use-case.js

@@ -7,6 +7,7 @@ const database_1 = require("@orthacms/database");
 const content_domain_1 = require("@orthacms/content-domain");
 const entry_writer_service_1 = require("../../infrastructure/persistence/entry-writer.service");
 const entry_1 = require("../../domain/entry");
+const entry_row_1 = require("../../infrastructure/persistence/entry-row");
 /**
  * Revert a set of live entries to draft. Runs inside one {@link UnitOfWork}, and
  * **one set of ids runs through all three effects**: the `{ count }` reported,
@@ -27,7 +28,7 @@ let BulkUnpublishEntriesUseCase = class BulkUnpublishEntriesUseCase {
         this.outbox = outbox;
         this.writer = writer;
     }
-    async execute(type, ids, workspaceId) {
+    async execute(type, ids, workspaceId, actor) {
         if (!type.publishable) {
             throw new common_1.BadRequestException(`Content type "${type.name}" is not publishable.`);
         }
@@ -38,21 +39,30 @@ let BulkUnpublishEntriesUseCase = class BulkUnpublishEntriesUseCase {
             // The set that actually transitions (published → draft), captured
             // before the write so we emit one event per real change.
             const publishedIds = await this.writer.publishedIdsAmong(exec, type, ids, workspaceId);
+            // Read the labels **before** the write: an audit row carries a
+            // frozen title, and after `markDraftBulk` the rows are still there
+            // but a later kind (a purge) would have taken them, so reading them
+            // up front is the habit that keeps every bulk path the same shape.
+            const byId = await this.writer.loadLiveByIds(type, publishedIds, workspaceId, exec);
             const count = await this.writer.markDraftBulk(exec, type, ids, workspaceId);
             // Revert each really-transitioned entry's published revision back to
             // draft — the same set the outbox emits an event for.
             for (const id of publishedIds) {
                 await this.writer.markRevisionUnpublished(exec, id, workspaceId);
             }
-            await this.outbox.append(publishedIds.flatMap((id) => {
+            const events = publishedIds.flatMap((id) => {
+                const row = byId.get(id);
                 const entry = entry_1.Entry.rehydrate({
                     id,
                     contentType: type.name,
-                    status: content_domain_1.ENTRY_STATUS.Published
+                    status: content_domain_1.ENTRY_STATUS.Published,
+                    workspaceId,
+                    title: row ? (0, entry_row_1.entryTitle)(type, row) : null
                 });
                 entry.unpublish();
                 return entry.pullEvents();
-            }));
+            });
+            await this.outbox.append(actor ? (0, database_1.attachActor)(events, actor) : events);
             return { count };
         });
     }

package/dist/lib/entries/application/use-cases/publish-entry.use-case.d.ts

@@ -1,4 +1,4 @@
-import { OutboxWriter, UnitOfWork } from '@orthacms/database';
+import { type EventActor, OutboxWriter, UnitOfWork } from '@orthacms/database';
 import type { AnyContentType } from '../../../types/content-type';
 import { EntryValidationService } from '../../../validation/services/entry-validation.service';
 import { EntryWriterService } from '../../infrastructure/persistence/entry-writer.service';
@@ -23,14 +23,12 @@ export declare class PublishEntryUseCase {
     constructor(uow: UnitOfWork, outbox: OutboxWriter, writer: EntryWriterService, validation: EntryValidationService);
     execute(type: AnyContentType, id: string, workspaceId: string, 
     /**
-     * The acting user, merged onto the outbox events so the audit log can
-     * name who did this. Without it every content row in the activity log
-     * read "System".
+     * The acting principal, merged onto the outbox events so the audit log
+     * can name who did this. Without it every content row in the activity
+     * log read "System" — which is also what a token-authenticated publish
+     * read as until `actor_type` let a credential be named.
      */
-    actor?: {
-        id: string;
-        email: string | null;
-    }, 
+    actor?: EventActor, 
     /**
      * The version to mark live, when publishing a **specific** earlier one
      * whose content the caller already re-applied to the live row. Omitted

package/dist/lib/entries/application/use-cases/publish-entry.use-case.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish-entry.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/application/use-cases/publish-entry.use-case.ts"],"names":[],"mappings":"AAMA,OAAO,EAAe,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uDAAuD,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAE3F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAI/D;;;;;;;;;;;GAWG;AACH,qBACa,mBAAmB;IAExB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAHV,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,sBAAsB;IAGjD,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM;IACnB;;;;OAIG;IACH,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;IAC5C;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,WAAW,CAAC;IA2EvB,OAAO,CAAC,QAAQ;CAKnB"}
+{"version":3,"file":"publish-entry.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/application/use-cases/publish-entry.use-case.ts"],"names":[],"mappings":"AAMA,OAAO,EAEH,KAAK,UAAU,EACf,YAAY,EACZ,UAAU,EACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uDAAuD,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAE3F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAK/D;;;;;;;;;;;GAWG;AACH,qBACa,mBAAmB;IAExB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAHV,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,sBAAsB;IAGjD,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,UAAU;IAClB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,WAAW,CAAC;IA+EvB,OAAO,CAAC,QAAQ;CAKnB"}

package/dist/lib/entries/application/use-cases/publish-entry.use-case.js

@@ -7,6 +7,7 @@ const database_1 = require("@orthacms/database");
 const entry_validation_service_1 = require("../../../validation/services/entry-validation.service");
 const entry_writer_service_1 = require("../../infrastructure/persistence/entry-writer.service");
 const entry_row_1 = require("../../infrastructure/persistence/entry-row");
+const entry_row_2 = require("../../infrastructure/persistence/entry-row");
 const entry_1 = require("../../domain/entry");
 const entry_publish_blocked_error_1 = require("../../domain/entry-publish-blocked.error");
 /**
@@ -34,9 +35,10 @@ let PublishEntryUseCase = class PublishEntryUseCase {
     }
     async execute(type, id, workspaceId, 
     /**
-     * The acting user, merged onto the outbox events so the audit log can
-     * name who did this. Without it every content row in the activity log
-     * read "System".
+     * The acting principal, merged onto the outbox events so the audit log
+     * can name who did this. Without it every content row in the activity
+     * log read "System" — which is also what a token-authenticated publish
+     * read as until `actor_type` let a credential be named.
      */
     actor, 
     /**
@@ -63,7 +65,11 @@ let PublishEntryUseCase = class PublishEntryUseCase {
             const entry = entry_1.Entry.rehydrate({
                 id,
                 contentType: type.name,
-                status: current['status']
+                status: current['status'],
+                workspaceId,
+                // The stored row is already loaded, so the audit row gets a
+                // readable name for free rather than a bare uuid.
+                title: (0, entry_row_2.entryTitle)(type, current)
             });
             try {
                 entry.publish({ valid: issues.length === 0, issues });

package/dist/lib/entries/application/use-cases/unpublish-entry.use-case.d.ts

@@ -1,4 +1,4 @@
-import { OutboxWriter, UnitOfWork } from '@orthacms/database';
+import { type EventActor, OutboxWriter, UnitOfWork } from '@orthacms/database';
 import type { AnyContentType } from '../../../types/content-type';
 import { EntryWriterService } from '../../infrastructure/persistence/entry-writer.service';
 import type { EntryRecord } from '../../types/entry-list-view';
@@ -21,10 +21,7 @@ export declare class UnpublishEntryUseCase {
      * name who did this. Without it every content row in the activity log
      * read "System".
      */
-    actor?: {
-        id: string;
-        email: string | null;
-    }): Promise<EntryRecord>;
+    actor?: EventActor): Promise<EntryRecord>;
     private notFound;
 }
 //# sourceMappingURL=unpublish-entry.use-case.d.ts.map

package/dist/lib/entries/application/use-cases/unpublish-entry.use-case.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unpublish-entry.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/application/use-cases/unpublish-entry.use-case.ts"],"names":[],"mappings":"AAKA,OAAO,EAAe,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAE3F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAG/D;;;;;;;GAOG;AACH,qBACa,qBAAqB;IAE1B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,kBAAkB;IAGzC,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM;IACnB;;;;OAIG;IACH,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAC7C,OAAO,CAAC,WAAW,CAAC;IA0CvB,OAAO,CAAC,QAAQ;CAKnB"}
+{"version":3,"file":"unpublish-entry.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/application/use-cases/unpublish-entry.use-case.ts"],"names":[],"mappings":"AAKA,OAAO,EAEH,KAAK,UAAU,EACf,YAAY,EACZ,UAAU,EACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAE3F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAI/D;;;;;;;GAOG;AACH,qBACa,qBAAqB;IAE1B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,kBAAkB;IAGzC,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM;IACnB;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,WAAW,CAAC;IA8CvB,OAAO,CAAC,QAAQ;CAKnB"}

package/dist/lib/entries/application/use-cases/unpublish-entry.use-case.js

@@ -6,6 +6,7 @@ const common_1 = require("@nestjs/common");
 const database_1 = require("@orthacms/database");
 const entry_writer_service_1 = require("../../infrastructure/persistence/entry-writer.service");
 const entry_row_1 = require("../../infrastructure/persistence/entry-row");
+const entry_row_2 = require("../../infrastructure/persistence/entry-row");
 const entry_1 = require("../../domain/entry");
 /**
  * Revert one entry to draft. Runs inside a {@link UnitOfWork} so the status
@@ -42,7 +43,11 @@ let UnpublishEntryUseCase = class UnpublishEntryUseCase {
             const entry = entry_1.Entry.rehydrate({
                 id,
                 contentType: type.name,
-                status: current['status']
+                status: current['status'],
+                workspaceId,
+                // The stored row is already loaded, so the audit row gets a
+                // readable name for free rather than a bare uuid.
+                title: (0, entry_row_2.entryTitle)(type, current)
             });
             entry.unpublish();
             const updated = await this.writer.markDraft(exec, type, id, workspaceId);

package/dist/lib/entries/domain/entry.d.ts

@@ -8,6 +8,13 @@ export interface EntryState {
     contentType: string;
     /** Current publish status of the stored row. */
     status: EntryStatus;
+    /** The workspace the row lives in — carried only for the event payload. */
+    workspaceId?: string | null;
+    /**
+     * A human label for the entry, carried only for the event payload so the
+     * audit row names something a reader recognises instead of a uuid.
+     */
+    title?: string | null;
 }
 /**
  * The outcome of the publish precondition, computed by the use-case from the
@@ -37,7 +44,7 @@ export interface PublishGate {
  */
 export declare class Entry {
     private readonly _id;
-    private readonly _contentType;
+    private readonly _subject;
     private _status;
     private readonly events;
     private constructor();

package/dist/lib/entries/domain/entry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entry.d.ts","sourceRoot":"","sources":["../../../../src/lib/entries/domain/entry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAGH,KAAK,WAAW,EAChB,KAAK,eAAe,EACvB,MAAM,0BAA0B,CAAC;AAIlC,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACvB,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,MAAM,EAAE,WAAW,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IACxB,qCAAqC;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,iDAAiD;IACjD,MAAM,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,KAAK;IAIV,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,OAAO;IALnB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAE5C,OAAO;IAMP,gEAAgE;IAChE,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK;IAI1C;;;;;;;;OAQG;IACH,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAchC;;;;;OAKG;IACH,SAAS,IAAI,IAAI;IAWjB,oBAAoB;IACpB,IAAI,EAAE,IAAI,MAAM,CAEf;IAED,kCAAkC;IAClC,IAAI,MAAM,IAAI,WAAW,CAExB;IAED,gEAAgE;IAChE,UAAU,IAAI,WAAW,EAAE;IAI3B,OAAO,CAAC,KAAK;CAGhB"}
+{"version":3,"file":"entry.d.ts","sourceRoot":"","sources":["../../../../src/lib/entries/domain/entry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAGH,KAAK,WAAW,EAChB,KAAK,eAAe,EACvB,MAAM,0BAA0B,CAAC;AASlC,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACvB,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,MAAM,EAAE,WAAW,CAAC;IACpB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IACxB,qCAAqC;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,iDAAiD;IACjD,MAAM,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,KAAK;IAIV,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,OAAO;IALnB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAE5C,OAAO;IAMP,gEAAgE;IAChE,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK;IAY1C;;;;;;;;OAQG;IACH,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAYhC;;;;;OAKG;IACH,SAAS,IAAI,IAAI;IASjB,oBAAoB;IACpB,IAAI,EAAE,IAAI,MAAM,CAEf;IAED,kCAAkC;IAClC,IAAI,MAAM,IAAI,WAAW,CAExB;IAED,gEAAgE;IAChE,UAAU,IAAI,WAAW,EAAE;IAI3B,OAAO,CAAC,KAAK;CAKhB"}

package/dist/lib/entries/domain/entry.js

@@ -21,17 +21,21 @@ const entry_publish_blocked_error_1 = require("./entry-publish-blocked.error");
  */
 class Entry {
     _id;
-    _contentType;
+    _subject;
     _status;
     events = [];
-    constructor(_id, _contentType, _status) {
+    constructor(_id, _subject, _status) {
         this._id = _id;
-        this._contentType = _contentType;
+        this._subject = _subject;
         this._status = _status;
     }
     /** Reconstructs an entry from its persisted lifecycle state. */
     static rehydrate(state) {
-        return new Entry(state.id, state.contentType, state.status);
+        return new Entry(state.id, {
+            contentType: state.contentType,
+            workspaceId: state.workspaceId ?? null,
+            title: state.title ?? null
+        }, state.status);
     }
     /**
      * Publish the entry. Rejects with {@link EntryPublishBlockedError} when the
@@ -51,9 +55,7 @@ class Entry {
         }
         (0, content_domain_1.assertTransition)(this._status, content_domain_1.ENTRY_STATUS.Published);
         this._status = content_domain_1.ENTRY_STATUS.Published;
-        this.raise(entry_events_1.ENTRY_EVENT_KINDS.PUBLISHED, {
-            contentType: this._contentType
-        });
+        this.raise(entry_events_1.ENTRY_EVENT_KINDS.PUBLISHED);
     }
     /**
      * Revert the entry to draft. A `published` row transitions to `draft` via
@@ -67,9 +69,7 @@ class Entry {
         }
         (0, content_domain_1.assertTransition)(this._status, content_domain_1.ENTRY_STATUS.Draft);
         this._status = content_domain_1.ENTRY_STATUS.Draft;
-        this.raise(entry_events_1.ENTRY_EVENT_KINDS.UNPUBLISHED, {
-            contentType: this._contentType
-        });
+        this.raise(entry_events_1.ENTRY_EVENT_KINDS.UNPUBLISHED);
     }
     /** The entry id. */
     get id() {
@@ -83,8 +83,8 @@ class Entry {
     pullEvents() {
         return this.events.splice(0, this.events.length);
     }
-    raise(kind, payload) {
-        this.events.push((0, entry_events_1.entryEvent)(kind, this._id, payload));
+    raise(kind) {
+        this.events.push((0, entry_events_1.entryEvent)(kind, this._id, (0, entry_events_1.entrySubjectPayload)(this._subject)));
     }
 }
 exports.Entry = Entry;

package/dist/lib/entries/domain/events/entry-events.d.ts

@@ -26,6 +26,48 @@ export declare const ENTRY_EVENT_KINDS: {
     readonly RESTORED: "entry.restored";
     readonly PURGED: "entry.purged";
 };
+/**
+ * What an entry event says about **which entry** it is about, beyond the id.
+ *
+ * Both extra fields exist because of what an audit row can and cannot recover
+ * afterwards:
+ *
+ * - `workspaceId` is the only way the trail can answer a workspace-shaped
+ *   question. `activity_events` grew a nullable `workspace_id` for it, filled
+ *   from the event payload, and an entry is the most-produced audited fact in
+ *   the product — so an entry event that omitted it would leave the column
+ *   mostly empty and the question mostly unanswerable.
+ * - `title` is what makes the row **readable**. An audit row keeps no FK and no
+ *   denormalised name; its whole handle on the subject is `subject_id`. That is
+ *   survivable for an entry that still exists and unrecoverable for one that
+ *   does not — and `entry.purged` is precisely the case where this row is the
+ *   only remaining record of the thing. A uuid is not an answer to "what did
+ *   they delete".
+ *
+ * Both are optional so a caller that genuinely has neither (a unit test, an
+ * event minted outside the write path) is not forced to invent them.
+ */
+export interface EntrySubject {
+    /** The content type's machine name. */
+    contentType: string;
+    /** The workspace the entry lives in. */
+    workspaceId?: string | null;
+    /**
+     * A human label for the entry **at the time of the event** — a frozen
+     * snapshot, like `actor_email`, not a lookup. The point is to survive the
+     * subject.
+     */
+    title?: string | null;
+}
+/**
+ * The subject fields every entry event's payload carries.
+ *
+ * Exported because the {@link Entry} model raises its two events through the
+ * envelope builder directly rather than the per-kind helpers — those two are
+ * status transitions the model owns, and it must produce the same payload shape
+ * as the five the write path mints.
+ */
+export declare function entrySubjectPayload(subject: EntrySubject): Record<string, unknown>;
 /**
  * Builds an entry {@link DomainEvent} of `kind` for `entryId`, carrying
  * `payload`. Keeps the domain model free of the event envelope's plumbing — the
@@ -33,7 +75,7 @@ export declare const ENTRY_EVENT_KINDS: {
  */
 export declare function entryEvent(kind: string, entryId: string, payload: Record<string, unknown>): DomainEvent;
 /** A new entry exists. `contentType` is what lets the log name *what* was made. */
-export declare function entryCreated(entryId: string, contentType: string): DomainEvent;
+export declare function entryCreated(entryId: string, subject: EntrySubject): DomainEvent;
 /**
  * An entry's stored values changed, naming **which fields** did.
  *
@@ -46,16 +88,16 @@ export declare function entryCreated(entryId: string, contentType: string): Doma
  * and therefore no event at all, so the log records editorial changes rather
  * than round trips.
  */
-export declare function entryUpdated(entryId: string, contentType: string, fields: readonly string[]): DomainEvent;
+export declare function entryUpdated(entryId: string, subject: EntrySubject, fields: readonly string[]): DomainEvent;
 /**
  * An entry was deleted. `soft` distinguishes the two very different facts the
  * one route produces: a **paranoid** type is tombstoned and can be restored,
  * while any other type is gone from the table the moment this commits, and a
  * reviewer reading the log needs to know which happened.
  */
-export declare function entryDeleted(entryId: string, contentType: string, soft: boolean): DomainEvent;
+export declare function entryDeleted(entryId: string, subject: EntrySubject, soft: boolean): DomainEvent;
 /** A soft-deleted entry's tombstone was cleared. */
-export declare function entryRestored(entryId: string, contentType: string): DomainEvent;
+export declare function entryRestored(entryId: string, subject: EntrySubject): DomainEvent;
 /**
  * A tombstoned entry was destroyed permanently.
  *
@@ -63,5 +105,5 @@ export declare function entryRestored(entryId: string, contentType: string): Dom
  * action with nothing left behind to inspect afterwards, so it is exactly the
  * one an audit trail has to record distinctly.
  */
-export declare function entryPurged(entryId: string, contentType: string): DomainEvent;
+export declare function entryPurged(entryId: string, subject: EntrySubject): DomainEvent;
 //# sourceMappingURL=entry-events.d.ts.map

package/dist/lib/entries/domain/events/entry-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entry-events.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/domain/events/entry-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEzE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;CAQpB,CAAC;AAKX;;;;GAIG;AACH,wBAAgB,UAAU,CACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,WAAW,CAOb;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CACxB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GACpB,WAAW,CAEb;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CACxB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,SAAS,MAAM,EAAE,GAC1B,WAAW,CAKb;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CACxB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,OAAO,GACd,WAAW,CAKb;AAED,oDAAoD;AACpD,wBAAgB,aAAa,CACzB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GACpB,WAAW,CAEb;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,CAE7E"}
+{"version":3,"file":"entry-events.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/domain/events/entry-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEzE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;CAQpB,CAAC;AAKX;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,YAAY;IACzB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAC/B,OAAO,EAAE,YAAY,GACtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,WAAW,CAOb;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,YAAY,GACtB,WAAW,CAMb;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,SAAS,MAAM,EAAE,GAC1B,WAAW,CAKb;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,OAAO,GACd,WAAW,CAKb;AAED,oDAAoD;AACpD,wBAAgB,aAAa,CACzB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,YAAY,GACtB,WAAW,CAMb;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACvB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,YAAY,GACtB,WAAW,CAMb"}

package/dist/lib/entries/domain/events/entry-events.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ENTRY_EVENT_KINDS = void 0;
+exports.entrySubjectPayload = entrySubjectPayload;
 exports.entryEvent = entryEvent;
 exports.entryCreated = entryCreated;
 exports.entryUpdated = entryUpdated;
@@ -37,6 +38,21 @@ exports.ENTRY_EVENT_KINDS = {
 };
 /** The aggregate type stamped on every entry domain event. */
 const AGGREGATE_TYPE = 'content_entry';
+/**
+ * The subject fields every entry event's payload carries.
+ *
+ * Exported because the {@link Entry} model raises its two events through the
+ * envelope builder directly rather than the per-kind helpers — those two are
+ * status transitions the model owns, and it must produce the same payload shape
+ * as the five the write path mints.
+ */
+function entrySubjectPayload(subject) {
+    return {
+        contentType: subject.contentType,
+        workspaceId: subject.workspaceId ?? null,
+        title: subject.title ?? null
+    };
+}
 /**
  * Builds an entry {@link DomainEvent} of `kind` for `entryId`, carrying
  * `payload`. Keeps the domain model free of the event envelope's plumbing — the
@@ -51,8 +67,8 @@ function entryEvent(kind, entryId, payload) {
     });
 }
 /** A new entry exists. `contentType` is what lets the log name *what* was made. */
-function entryCreated(entryId, contentType) {
-    return entryEvent(exports.ENTRY_EVENT_KINDS.CREATED, entryId, { contentType });
+function entryCreated(entryId, subject) {
+    return entryEvent(exports.ENTRY_EVENT_KINDS.CREATED, entryId, entrySubjectPayload(subject));
 }
 /**
  * An entry's stored values changed, naming **which fields** did.
@@ -66,9 +82,9 @@ function entryCreated(entryId, contentType) {
  * and therefore no event at all, so the log records editorial changes rather
  * than round trips.
  */
-function entryUpdated(entryId, contentType, fields) {
+function entryUpdated(entryId, subject, fields) {
     return entryEvent(exports.ENTRY_EVENT_KINDS.UPDATED, entryId, {
-        contentType,
+        ...entrySubjectPayload(subject),
         fields: [...fields]
     });
 }
@@ -78,15 +94,15 @@ function entryUpdated(entryId, contentType, fields) {
  * while any other type is gone from the table the moment this commits, and a
  * reviewer reading the log needs to know which happened.
  */
-function entryDeleted(entryId, contentType, soft) {
+function entryDeleted(entryId, subject, soft) {
     return entryEvent(exports.ENTRY_EVENT_KINDS.DELETED, entryId, {
-        contentType,
+        ...entrySubjectPayload(subject),
         soft
     });
 }
 /** A soft-deleted entry's tombstone was cleared. */
-function entryRestored(entryId, contentType) {
-    return entryEvent(exports.ENTRY_EVENT_KINDS.RESTORED, entryId, { contentType });
+function entryRestored(entryId, subject) {
+    return entryEvent(exports.ENTRY_EVENT_KINDS.RESTORED, entryId, entrySubjectPayload(subject));
 }
 /**
  * A tombstoned entry was destroyed permanently.
@@ -95,6 +111,6 @@ function entryRestored(entryId, contentType) {
  * action with nothing left behind to inspect afterwards, so it is exactly the
  * one an audit trail has to record distinctly.
  */
-function entryPurged(entryId, contentType) {
-    return entryEvent(exports.ENTRY_EVENT_KINDS.PURGED, entryId, { contentType });
+function entryPurged(entryId, subject) {
+    return entryEvent(exports.ENTRY_EVENT_KINDS.PURGED, entryId, entrySubjectPayload(subject));
 }

package/dist/lib/entries/entries.constants.d.ts

@@ -3,8 +3,16 @@
 export declare const DEFAULT_PAGE_SIZE = 25;
 /** Hard cap on rows per page — bounds a single query's cost. */
 export declare const MAX_PAGE_SIZE = 100;
-/** Max length of the raw `?filter=` JSON (first line of defence before parsing). */
-export declare const FILTER_MAX_LENGTH = 4096;
+/**
+ * Max length of the raw `?filter=` JSON string — a coarse first guard against
+ * oversized payloads, ahead of the filter engine's own budgets.
+ *
+ * Re-exported rather than declared: the number belongs to the engine that
+ * enforces the rest of the filter's limits, and four packages each declaring
+ * their own copy is how one of them (`alarms`) came to say 8192 while the other
+ * three said 4096. See `filters/budgets.ts` in `@orthacms/utils-server`.
+ */
+export { FILTER_MAX_LENGTH } from '@orthacms/utils-server';
 /** Max ids a single bulk action (`{ ids }`) may target — bounds the statement. */
 export declare const BULK_MAX_IDS = 100;
 /**

package/dist/lib/entries/entries.constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entries.constants.d.ts","sourceRoot":"","sources":["../../../src/lib/entries/entries.constants.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE,8DAA8D;AAC9D,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,gEAAgE;AAChE,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC,oFAAoF;AACpF,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC,kFAAkF;AAClF,eAAO,MAAM,YAAY,MAAM,CAAC;AAEhC;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAC"}
+{"version":3,"file":"entries.constants.d.ts","sourceRoot":"","sources":["../../../src/lib/entries/entries.constants.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE,8DAA8D;AAC9D,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,gEAAgE;AAChE,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC;;;;;;;;GAQG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,kFAAkF;AAClF,eAAO,MAAM,YAAY,MAAM,CAAC;AAEhC;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAC"}

package/dist/lib/entries/entries.constants.js

@@ -6,8 +6,17 @@ exports.BULK_MAX_SAVE_ITEMS = exports.BULK_MAX_IDS = exports.FILTER_MAX_LENGTH =
 exports.DEFAULT_PAGE_SIZE = 25;
 /** Hard cap on rows per page — bounds a single query's cost. */
 exports.MAX_PAGE_SIZE = 100;
-/** Max length of the raw `?filter=` JSON (first line of defence before parsing). */
-exports.FILTER_MAX_LENGTH = 4096;
+/**
+ * Max length of the raw `?filter=` JSON string — a coarse first guard against
+ * oversized payloads, ahead of the filter engine's own budgets.
+ *
+ * Re-exported rather than declared: the number belongs to the engine that
+ * enforces the rest of the filter's limits, and four packages each declaring
+ * their own copy is how one of them (`alarms`) came to say 8192 while the other
+ * three said 4096. See `filters/budgets.ts` in `@orthacms/utils-server`.
+ */
+var utils_server_1 = require("@orthacms/utils-server");
+Object.defineProperty(exports, "FILTER_MAX_LENGTH", { enumerable: true, get: function () { return utils_server_1.FILTER_MAX_LENGTH; } });
 /** Max ids a single bulk action (`{ ids }`) may target — bounds the statement. */
 exports.BULK_MAX_IDS = 100;
 /**

package/dist/lib/entries/http/controllers/bulk-entries.controller.d.ts

@@ -24,8 +24,8 @@ export declare class BulkEntriesController {
     constructor(registry: ContentTypeRegistry, writer: EntryWriterService, bulkPublishPreview: BulkPublishPreviewQuery, bulkPublishEntries: BulkPublishEntriesUseCase, bulkUnpublishEntries: BulkUnpublishEntriesUseCase);
     /** Dry run: validate each id and report a per-entry verdict. Writes nothing. */
     previewPublish(typeName: string, body: BulkIdsDto, workspaceId: string): Promise<BulkPublishPreview>;
-    publish(typeName: string, body: BulkIdsDto, workspaceId: string): Promise<BulkPublishResult>;
-    unpublish(typeName: string, body: BulkIdsDto, workspaceId: string): Promise<BulkActionResult>;
+    publish(typeName: string, body: BulkIdsDto, workspaceId: string, user?: PublicUser): Promise<BulkPublishResult>;
+    unpublish(typeName: string, body: BulkIdsDto, workspaceId: string, user?: PublicUser): Promise<BulkActionResult>;
     remove(typeName: string, body: BulkIdsDto, workspaceId: string, user?: PublicUser): Promise<BulkActionResult>;
     restore(typeName: string, body: BulkIdsDto, workspaceId: string, user?: PublicUser): Promise<BulkActionResult>;
     purge(typeName: string, body: BulkIdsDto, workspaceId: string, user?: PublicUser): Promise<BulkActionResult>;

package/dist/lib/entries/http/controllers/bulk-entries.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bulk-entries.controller.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/http/controllers/bulk-entries.controller.ts"],"names":[],"mappings":"AASA,OAAO,EAKH,KAAK,UAAU,EAElB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,2BAA2B,EAAE,MAAM,6DAA6D,CAAC;AAC1G,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EACR,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACpB,MAAM,0BAA0B,CAAC;AAIlC;;;;;;;;GAQG;AACH,qBAEa,qBAAqB;IAG1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBAJpB,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,kBAAkB,EAC1B,kBAAkB,EAAE,uBAAuB,EAC3C,kBAAkB,EAAE,yBAAyB,EAC7C,oBAAoB,EAAE,2BAA2B;IAGtE,gFAAgF;IAIhF,cAAc,CACS,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,kBAAkB,CAAC;IAQ9B,OAAO,CACgB,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,iBAAiB,CAAC;IAQ7B,SAAS,CACc,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,gBAAgB,CAAC;IAQ5B,MAAM,CACiB,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,gBAAgB,CAAC;IAa5B,OAAO,CACgB,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,gBAAgB,CAAC;IAa5B,KAAK,CACkB,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,gBAAgB,CAAC;CAS/B"}
+{"version":3,"file":"bulk-entries.controller.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/http/controllers/bulk-entries.controller.ts"],"names":[],"mappings":"AASA,OAAO,EAKH,KAAK,UAAU,EAElB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,2BAA2B,EAAE,MAAM,6DAA6D,CAAC;AAC1G,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EACR,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACpB,MAAM,0BAA0B,CAAC;AAIlC;;;;;;;;GAQG;AACH,qBAEa,qBAAqB;IAG1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBAJpB,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,kBAAkB,EAC1B,kBAAkB,EAAE,uBAAuB,EAC3C,kBAAkB,EAAE,yBAAyB,EAC7C,oBAAoB,EAAE,2BAA2B;IAGtE,gFAAgF;IAIhF,cAAc,CACS,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,kBAAkB,CAAC;IAQ9B,OAAO,CACgB,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,iBAAiB,CAAC;IAa7B,SAAS,CACc,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,gBAAgB,CAAC;IAa5B,MAAM,CACiB,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,gBAAgB,CAAC;IAa5B,OAAO,CACgB,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,gBAAgB,CAAC;IAa5B,KAAK,CACkB,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,UAAU,EACJ,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,gBAAgB,CAAC;CAS/B"}

package/dist/lib/entries/http/controllers/bulk-entries.controller.js

@@ -41,13 +41,13 @@ let BulkEntriesController = class BulkEntriesController {
         const type = (0, resolve_type_1.resolveType)(this.registry, typeName);
         return this.bulkPublishPreview.preview(type, body.ids, workspaceId);
     }
-    publish(typeName, body, workspaceId) {
+    publish(typeName, body, workspaceId, user) {
         const type = (0, resolve_type_1.resolveType)(this.registry, typeName);
-        return this.bulkPublishEntries.execute(type, body.ids, workspaceId);
+        return this.bulkPublishEntries.execute(type, body.ids, workspaceId, (0, to_actor_1.toActor)(user));
     }
-    unpublish(typeName, body, workspaceId) {
+    unpublish(typeName, body, workspaceId, user) {
         const type = (0, resolve_type_1.resolveType)(this.registry, typeName);
-        return this.bulkUnpublishEntries.execute(type, body.ids, workspaceId);
+        return this.bulkUnpublishEntries.execute(type, body.ids, workspaceId, (0, to_actor_1.toActor)(user));
     }
     remove(typeName, body, workspaceId, user) {
         const type = (0, resolve_type_1.resolveType)(this.registry, typeName);
@@ -81,8 +81,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, identity_server_1.CurrentUser)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, bulk_ids_dto_1.BulkIdsDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, bulk_ids_dto_1.BulkIdsDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], BulkEntriesController.prototype, "publish", null);
 tslib_1.__decorate([
@@ -92,8 +93,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, identity_server_1.CurrentUser)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, bulk_ids_dto_1.BulkIdsDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, bulk_ids_dto_1.BulkIdsDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], BulkEntriesController.prototype, "unpublish", null);
 tslib_1.__decorate([

package/dist/lib/entries/http/controllers/create-entry.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-entry.controller.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/http/controllers/create-entry.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAKH,KAAK,UAAU,EAElB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAI/D;;;;;;;;GAQG;AACH,qBAGa,qBAAqB;IAG1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,kBAAkB;IAI/C,MAAM,CACiB,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,YAAY,EACN,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,WAAW,CAAC;CAY1B"}
+{"version":3,"file":"create-entry.controller.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/http/controllers/create-entry.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAKH,KAAK,UAAU,EAElB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAI/D;;;;;;;;GAQG;AACH,qBAGa,qBAAqB;IAG1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,kBAAkB;IAI/C,MAAM,CACiB,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,YAAY,EACN,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,WAAW,CAAC;CAa1B"}

package/dist/lib/entries/http/controllers/create-entry.controller.js

@@ -29,7 +29,7 @@ let CreateEntryController = class CreateEntryController {
     }
     create(typeName, body, workspaceId, user) {
         const type = (0, resolve_type_1.resolveType)(this.registry, typeName);
-        return this.writer.create(type, body.values, workspaceId, body.relations, body.locale, body.localeGroupId, (0, to_actor_1.toActor)(user));
+        return this.writer.create(type, body.values, workspaceId, body.relations, body.locale, body.localeGroupId, (0, to_actor_1.toActor)(user), body.extensions);
     }
 };
 exports.CreateEntryController = CreateEntryController;

package/dist/lib/entries/http/controllers/update-entry.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-entry.controller.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/http/controllers/update-entry.controller.ts"],"names":[],"mappings":"AAQA,OAAO,EAKH,KAAK,UAAU,EAElB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAI/D;;;;;;GAMG;AACH,qBAGa,qBAAqB;IAG1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,kBAAkB;IAI/C,MAAM,CACiB,QAAQ,EAAE,MAAM,EACP,EAAE,EAAE,MAAM,EAC9B,IAAI,EAAE,YAAY,EACN,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,WAAW,CAAC;CAW1B"}
+{"version":3,"file":"update-entry.controller.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/http/controllers/update-entry.controller.ts"],"names":[],"mappings":"AAQA,OAAO,EAKH,KAAK,UAAU,EAElB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAI/D;;;;;;GAMG;AACH,qBAGa,qBAAqB;IAG1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,kBAAkB;IAI/C,MAAM,CACiB,QAAQ,EAAE,MAAM,EACP,EAAE,EAAE,MAAM,EAC9B,IAAI,EAAE,YAAY,EACN,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,WAAW,CAAC;CAY1B"}

package/dist/lib/entries/http/controllers/update-entry.controller.js

@@ -27,7 +27,7 @@ let UpdateEntryController = class UpdateEntryController {
     }
     update(typeName, id, body, workspaceId, user) {
         const type = (0, resolve_type_1.resolveType)(this.registry, typeName);
-        return this.writer.update(type, id, body.values, workspaceId, body.relations, (0, to_actor_1.toActor)(user));
+        return this.writer.update(type, id, body.values, workspaceId, body.relations, (0, to_actor_1.toActor)(user), { extensions: body.extensions });
     }
 };
 exports.UpdateEntryController = UpdateEntryController;

package/dist/lib/entries/http/dto/extension-bag.validator.d.ts

@@ -0,0 +1,14 @@
+import { type ValidationOptions } from 'class-validator';
+/**
+ * Most extension keys one save may carry.
+ *
+ * A key names an installed plugin, so the real ceiling is single digits; this is
+ * a guard against a client posting an object with thousands of keys, each of
+ * which the registry would otherwise walk on every write. Deliberately not a
+ * bound on the *values* — those are the extensions' own contracts, and
+ * content-server declares the bag opaque.
+ */
+export declare const MAX_EXTENSION_KEYS = 16;
+/** Rejects an extension bag with more keys than {@link MAX_EXTENSION_KEYS}. */
+export declare function MaxExtensionKeys(options?: ValidationOptions): (target: object, propertyName: string) => void;
+//# sourceMappingURL=extension-bag.validator.d.ts.map

package/dist/lib/entries/http/dto/extension-bag.validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-bag.validator.d.ts","sourceRoot":"","sources":["../../../../../src/lib/entries/http/dto/extension-bag.validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE5E;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,iBAAiB,IACvC,QAAQ,MAAM,EAAE,cAAc,MAAM,KAAG,IAAI,CAyB/D"}