@orthacms/content-server 0.4.2 → 0.5.0

package/dist/lib/extension/read-scope.js

@@ -0,0 +1,131 @@
+"use strict";
+/**
+ * The **read scope port** — the seam a downstream plugin uses to narrow what
+ * the public content API returns, without this package knowing why.
+ *
+ * Content-server declares the port and consults it from `PublicEntriesQuery`
+ * and `PublicExpansionQuery`; an implementing plugin
+ * (`@orthacms/segments-server`, for reader entitlements) registers a scope
+ * through {@link contentReadScopeRegistrar}. Every fragment returned is AND-ed
+ * onto the visibility predicate the public read already states, so a scope can
+ * only ever *subtract* rows — there is no shape of return value that widens a
+ * read.
+ *
+ * ## Why a registry rather than a DI token
+ *
+ * The port takes any number of independent narrowings, and Nest has **no
+ * multi-provider**: two dynamic modules binding the same token do not merge,
+ * the second silently replaces the first. A second scoping plugin would
+ * therefore switch the first one off, with nothing to notice it — which for a
+ * visibility rule means content quietly becoming visible. So registration is a
+ * runtime `register(...)` call against a registry this module owns, the same
+ * shape and the same reason as `copilotToolsRegistrar`.
+ *
+ * ## Why not `CONTENT_ENTRY_EXTENSION`
+ *
+ * That port is documented as a **single binding**: one provider per app, and
+ * i18n already holds it. Its own note suggests binding a composite when a
+ * second extension appears, and for a write-pipeline extension that composes
+ * cleanly — but "narrow a read" and "extend a write" are different
+ * responsibilities with different failure modes. A composite would fuse i18n
+ * and entitlements into one provider, where a fault in either silently drops
+ * the other's clause.
+ *
+ * ## Two constraints on an implementation
+ *
+ * **Synchronous.** The predicate is assembled inside the query builder, and
+ * making that path async would ripple through every public read for the benefit
+ * of one provider. A scope that needs I/O — resolving who the caller is, say —
+ * must do it earlier in the request (a guard, an interceptor, middleware) and
+ * read the result from its own request-scoped state here.
+ *
+ * **Public reads only.** These fragments are not applied to the admin's own
+ * entries list. An admin caller is a member of the workspace looking at their
+ * own CMS, while a reader entitlement is about who may *consume* published
+ * content, and scoping the editor's list by it would hide from an author the
+ * very rows they are responsible for. The same split content grants already
+ * make.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContentReadScopeRegistry = void 0;
+exports.contentReadScopeRegistrar = contentReadScopeRegistrar;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+/**
+ * Every registered narrowing, in registration order.
+ *
+ * Order does not affect the result — the fragments are AND-ed — but it is kept
+ * stable so a query log reads the same way twice.
+ */
+let ContentReadScopeRegistry = class ContentReadScopeRegistry {
+    scopes = [];
+    /** Adds a scope. Registering the same instance twice is a no-op. */
+    register(scope) {
+        if (!this.scopes.includes(scope)) {
+            this.scopes.push(scope);
+        }
+    }
+    /** Every registered scope. Empty on an installation with none. */
+    all() {
+        return this.scopes;
+    }
+    /**
+     * The fragments for one read, ready to be spread into `and(...)`.
+     *
+     * Returns an empty array — not a fragment matching everything — when
+     * nothing is registered, which is the state every installation without a
+     * scoping plugin stays in.
+     */
+    fragments(context) {
+        if (!this.scopes.length) {
+            return [];
+        }
+        return this.scopes.map((scope) => scope.scope(context));
+    }
+};
+exports.ContentReadScopeRegistry = ContentReadScopeRegistry;
+exports.ContentReadScopeRegistry = ContentReadScopeRegistry = tslib_1.__decorate([
+    (0, common_1.Injectable)()
+], ContentReadScopeRegistry);
+/** Registers a plugin's read scopes with content at bootstrap. */
+class ReadScopeBootstrapper {
+    label;
+    registry;
+    scopes;
+    logger = new common_1.Logger(ReadScopeBootstrapper.name);
+    constructor(label, registry, scopes) {
+        this.label = label;
+        this.registry = registry;
+        this.scopes = scopes;
+    }
+    onApplicationBootstrap() {
+        // A deployment that does not register `ContentPlugin` is not a real
+        // configuration, but a binding plugin should still boot rather than
+        // fail on an injection it cannot influence.
+        if (!this.registry) {
+            return;
+        }
+        for (const scope of this.scopes) {
+            this.registry.register(scope);
+        }
+        this.logger.log(`Registered the ${this.label} read scope with the content API.`);
+    }
+}
+/**
+ * Builds the DI provider that registers `scopes` with content's read-scope
+ * registry at bootstrap.
+ *
+ * A factory with an explicit `inject` list rather than a class with reflected
+ * parameters, for the reason `copilotToolsRegistrar` documents: an optional
+ * dependency typed as `Foo | null` emits `Object` for `design:paramtypes`, Nest
+ * injects `undefined` with no error, and the plugin ends up registering
+ * nothing. Here that failure would mean a visibility rule that silently stopped
+ * being applied.
+ */
+function contentReadScopeRegistrar(label, ...scopes) {
+    return {
+        provide: `CONTENT_READ_SCOPE_REGISTRAR_${label.toUpperCase()}`,
+        useFactory: (registry, ...resolved) => new ReadScopeBootstrapper(label, registry, resolved),
+        inject: [{ token: ContentReadScopeRegistry, optional: true }, ...scopes]
+    };
+}

package/dist/lib/insights/docs/describe-content-insights-api.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The content-insights pass over the host's OpenAPI document.
+ *
+ * Six widgets, six **unlike** payloads. They share a prefix and nothing else:
+ * one is a stat tile with two sparklines, one a sparse 7×24 grid, one a fixed
+ * set of age buckets, one a time series with a self-describing bucket width.
+ * Reading a family resemblance into them and describing them from one schema is
+ * how a document ends up confidently wrong, so each is written out.
+ *
+ * Separate from `docs/describe-content-api.ts` because it describes a separate
+ * surface: `/insights/*` is grouped under its own `insights` tag in the
+ * reference (the host tags by first route segment), and the widgets are read by
+ * the Insights page rather than by anything reading content.
+ *
+ * Pure: it takes the document and mutates only these six operations.
+ */
+import type { OpenApiDocument } from '@orthacms/bootstrap-server';
+import type { OpenApiSchema } from '../../docs/field-schema';
+/** The schemas this pass adds, keyed by component name. */
+export declare function buildContentInsightsSchemas(): Record<string, OpenApiSchema>;
+/** Adds the content-insights schemas and describes the six widget routes. */
+export declare function describeContentInsightsApi(document: OpenApiDocument): void;
+//# sourceMappingURL=describe-content-insights-api.d.ts.map

package/dist/lib/insights/docs/describe-content-insights-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe-content-insights-api.d.ts","sourceRoot":"","sources":["../../../../src/lib/insights/docs/describe-content-insights-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAyP7D,2DAA2D;AAC3D,wBAAgB,2BAA2B,IAAI,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAS3E;AA6DD,6EAA6E;AAC7E,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CA2B1E"}

package/dist/lib/insights/docs/describe-content-insights-api.js

@@ -0,0 +1,329 @@
+"use strict";
+/**
+ * The content-insights pass over the host's OpenAPI document.
+ *
+ * Six widgets, six **unlike** payloads. They share a prefix and nothing else:
+ * one is a stat tile with two sparklines, one a sparse 7×24 grid, one a fixed
+ * set of age buckets, one a time series with a self-describing bucket width.
+ * Reading a family resemblance into them and describing them from one schema is
+ * how a document ends up confidently wrong, so each is written out.
+ *
+ * Separate from `docs/describe-content-api.ts` because it describes a separate
+ * surface: `/insights/*` is grouped under its own `insights` tag in the
+ * reference (the host tags by first route segment), and the widgets are read by
+ * the Insights page rather than by anything reading content.
+ *
+ * Pure: it takes the document and mutates only these six operations.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildContentInsightsSchemas = buildContentInsightsSchemas;
+exports.describeContentInsightsApi = describeContentInsightsApi;
+const content_schemas_1 = require("../../docs/content-schemas");
+/** The bucket widths a series picks from, by window length. */
+const GRANULARITY = {
+    type: 'string',
+    enum: ['day', 'week', 'month'],
+    description: 'Chosen from the window, not requested: up to 31 days is `day`, up to 120 is `week`, longer is `month`. A year grouped by day would be 365 points for a sparkline 64 pixels wide.'
+};
+/** One point on a time series. */
+const SERIES_POINT = {
+    type: 'object',
+    required: ['bucket', 'value'],
+    properties: {
+        bucket: {
+            type: 'string',
+            description: 'Bucket start, `YYYY-MM-DD`. The client formats it.',
+            example: '2026-09-04'
+        },
+        value: { type: 'integer' }
+    }
+};
+/**
+ * The headline counts.
+ *
+ * There is deliberately no `draftsDelta` beside the other two: a draft's count
+ * changes when a row is *published*, and a row that moved back to draft leaves
+ * no trace on the collection table. Reporting one would mean inventing it.
+ */
+const TOTALS = {
+    type: 'object',
+    required: [
+        'entries',
+        'published',
+        'drafts',
+        'entriesDelta',
+        'publishedDelta',
+        'entriesHistory',
+        'publishedHistory'
+    ],
+    properties: {
+        entries: {
+            type: 'integer',
+            description: 'Every non-deleted entry in the workspace.'
+        },
+        published: { type: 'integer', description: 'Entries currently live.' },
+        drafts: { type: 'integer', description: 'Entries currently in draft.' },
+        entriesDelta: {
+            type: 'integer',
+            description: 'Entries created within the window.'
+        },
+        publishedDelta: {
+            type: 'integer',
+            description: 'Entries first published within the window.'
+        },
+        entriesHistory: {
+            type: 'array',
+            items: { type: 'integer' },
+            description: 'Cumulative entry count across the window, oldest bucket first — the sparkline.'
+        },
+        publishedHistory: {
+            type: 'array',
+            items: { type: 'integer' },
+            description: 'Cumulative published count, oldest bucket first.'
+        }
+    }
+};
+/** Draft/published split per content type. */
+const PIPELINE = {
+    type: 'object',
+    required: ['types'],
+    properties: {
+        types: {
+            type: 'array',
+            description: 'One row per type that has at least one entry, biggest first. A type the workspace has never used is omitted, not listed at zero.',
+            items: {
+                type: 'object',
+                required: ['name', 'label', 'published', 'drafts'],
+                properties: {
+                    name: { type: 'string' },
+                    label: { type: 'string' },
+                    published: { type: 'integer' },
+                    drafts: { type: 'integer' }
+                }
+            }
+        }
+    }
+};
+/** Entries published per bucket. */
+const VELOCITY = {
+    type: 'object',
+    required: ['points', 'granularity'],
+    properties: {
+        points: {
+            type: 'array',
+            items: SERIES_POINT,
+            description: 'Oldest bucket first.'
+        },
+        granularity: GRANULARITY
+    }
+};
+/**
+ * Editing activity by weekday and hour.
+ *
+ * Only non-empty cells come back — a full grid is 168 of them and most are
+ * zero — so `max` travels with them: recomputing the busiest value from a
+ * sparse list gives the wrong denominator whenever the grid is empty.
+ */
+const PUNCHCARD = {
+    type: 'object',
+    required: ['cells', 'max', 'total'],
+    properties: {
+        cells: {
+            type: 'array',
+            description: 'The non-empty slots only; the client fills the gaps.',
+            items: {
+                type: 'object',
+                required: ['weekday', 'hour', 'count'],
+                properties: {
+                    weekday: {
+                        type: 'integer',
+                        minimum: 1,
+                        maximum: 7,
+                        description: 'ISO weekday: 1 = Monday … 7 = Sunday.'
+                    },
+                    hour: {
+                        type: 'integer',
+                        minimum: 0,
+                        maximum: 23,
+                        description: 'Hour of day in the database session’s timezone (UTC).'
+                    },
+                    count: {
+                        type: 'integer',
+                        description: 'Revisions written in that slot.'
+                    }
+                }
+            }
+        },
+        max: {
+            type: 'integer',
+            description: 'The busiest cell’s count, or 0 when there is no activity.'
+        },
+        total: { type: 'integer', description: 'Revisions across the window.' }
+    }
+};
+/**
+ * Published entries by how long ago they were last edited.
+ *
+ * The five buckets are fixed and always all present, in this order, zeros
+ * included — the query builds them from a constant table rather than from what
+ * it found — so they are an enum rather than a free string.
+ */
+const STALE = {
+    type: 'object',
+    required: ['buckets', 'total'],
+    properties: {
+        buckets: {
+            type: 'array',
+            description: 'Always these five, freshest first, whether or not they hold anything. Only live content is counted: an untouched draft is a draft, not a neglected page.',
+            items: {
+                type: 'object',
+                required: ['id', 'count'],
+                properties: {
+                    id: {
+                        type: 'string',
+                        enum: ['d30', 'd90', 'd180', 'd365', 'older'],
+                        description: 'Age band of the last edit, in days: up to 30, up to 90, up to 180, up to 365, then everything older.'
+                    },
+                    count: { type: 'integer' }
+                }
+            }
+        },
+        total: {
+            type: 'integer',
+            description: 'Across all buckets, so the client needn’t re-add them.'
+        }
+    }
+};
+/**
+ * Live content with unpublished edits on top.
+ *
+ * `status` alone cannot separate "never published" from "published, then
+ * edited" — `publishedAt` is stamped on the first publish and cleared only by
+ * an unpublish, so draft + a timestamp is the admin's **Modified** badge and
+ * draft + no timestamp is a draft nobody ever shipped. That is the whole reason
+ * this endpoint exists, and why the three totals are not derivable from the
+ * pipeline's.
+ */
+const UNSHIPPED = {
+    type: 'object',
+    required: ['types', 'modified', 'live', 'neverPublished'],
+    properties: {
+        types: {
+            type: 'array',
+            description: 'One row per publishable type holding at least one modified entry. A type with nothing pending is omitted.',
+            items: {
+                type: 'object',
+                required: ['name', 'label', 'modified', 'published'],
+                properties: {
+                    name: { type: 'string' },
+                    label: { type: 'string' },
+                    modified: {
+                        type: 'integer',
+                        description: 'Live entries with unpublished edits.'
+                    },
+                    published: {
+                        type: 'integer',
+                        description: 'Live entries with nothing pending.'
+                    }
+                }
+            }
+        },
+        modified: {
+            type: 'integer',
+            description: 'Modified entries across the workspace.'
+        },
+        live: {
+            type: 'integer',
+            description: 'Entries with a live version at all (`modified` + fully published).'
+        },
+        neverPublished: {
+            type: 'integer',
+            description: 'Drafts that have never gone live.'
+        }
+    }
+};
+/** The schemas this pass adds, keyed by component name. */
+function buildContentInsightsSchemas() {
+    return {
+        InsightsContentTotals: TOTALS,
+        InsightsContentPipeline: PIPELINE,
+        InsightsContentVelocity: VELOCITY,
+        InsightsContentPunchcard: PUNCHCARD,
+        InsightsContentStale: STALE,
+        InsightsContentUnshipped: UNSHIPPED
+    };
+}
+/** The routes, keyed by what follows `/insights/content`. */
+const ROUTES = {
+    '/totals': {
+        schema: 'InsightsContentTotals',
+        description: 'Headline counts, their deltas over the window, and the sparklines.'
+    },
+    '/pipeline': {
+        schema: 'InsightsContentPipeline',
+        description: 'Draft/published split per content type.'
+    },
+    '/velocity': {
+        schema: 'InsightsContentVelocity',
+        description: 'Entries published per bucket, oldest first.'
+    },
+    '/punchcard': {
+        schema: 'InsightsContentPunchcard',
+        description: 'Editing activity by weekday and hour.'
+    },
+    '/stale': {
+        schema: 'InsightsContentStale',
+        description: 'Published entries by how long ago they were last edited.'
+    },
+    '/unshipped': {
+        schema: 'InsightsContentUnshipped',
+        description: 'Live entries with unpublished edits, and what has never shipped.'
+    }
+};
+/**
+ * Matches `<prefix>/insights/content<rest>`.
+ *
+ * The prefix is matched as segments carrying no `{`, so a nested route that
+ * merely ends the same way is not described with these shapes.
+ */
+const ROUTE_RE = /^(?:\/[^/{}]+)*\/insights\/content(\/.*)?$/;
+/**
+ * Writes the schema onto whichever 2xx key the scanner emitted, never inventing
+ * one. These are all `@Get`s, so it is a 200 in practice.
+ */
+function setSuccessResponse(operation, schema, description) {
+    const responses = operation.responses ?? {};
+    const key = Object.keys(responses).find((code) => /^2\d\d$/.test(code));
+    if (!key || key === '204') {
+        return;
+    }
+    responses[key] = {
+        description,
+        content: { 'application/json': { schema } }
+    };
+    operation.responses = responses;
+}
+/** Adds the content-insights schemas and describes the six widget routes. */
+function describeContentInsightsApi(document) {
+    document.components ??= {};
+    document.components.schemas ??= {};
+    Object.assign(document.components.schemas, buildContentInsightsSchemas());
+    for (const [route, item] of Object.entries(document.paths)) {
+        const match = ROUTE_RE.exec(route);
+        if (!match) {
+            continue;
+        }
+        const spec = ROUTES[match[1] ?? ''];
+        if (!spec) {
+            continue;
+        }
+        for (const [method, operation] of Object.entries(item)) {
+            if (method !== 'get' ||
+                !operation ||
+                typeof operation !== 'object') {
+                continue;
+            }
+            setSuccessResponse(operation, (0, content_schemas_1.ref)(spec.schema), spec.description);
+        }
+    }
+}

package/dist/lib/mcp/content-tools.provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"content-tools.provider.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/content-tools.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,YAAY,EAEf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACH,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,YAAY,EACpB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EACR,mBAAmB,EAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAEvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AAoCpG;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBACa,mBAAoB,YAAW,YAAY,EAAE,YAAY;IAG9D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACX,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAJzB,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,wBAAwB,EACpB,YAAY,CAAC,EAAE,YAAY,YAAA;IAG5D;;;;OAIG;IACH,YAAY,IAAI,IAAI;IAIpB;;;;;;;;;OASG;IACH,KAAK,IAAI,SAAS,cAAc,EAAE;IAOlC,iEAAiE;IACjE,OAAO,CAAC,QAAQ;IA6ZhB;;;;OAIG;IACG,SAAS,CACX,OAAO,EAAE,WAAW,GACrB,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC;IAUzC,qCAAqC;IAC/B,YAAY,CACd,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,WAAW,GACrB,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAgBxC,8CAA8C;YAChC,gBAAgB;IAO9B,+DAA+D;IAC/D,OAAO,CAAC,OAAO;IASf;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;CA6BvB"}
+{"version":3,"file":"content-tools.provider.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/content-tools.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,YAAY,EAEf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACH,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,YAAY,EACpB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,KAAK,EACR,mBAAmB,EAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAEvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AAoCpG;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBACa,mBAAoB,YAAW,YAAY,EAAE,YAAY;IAG9D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACX,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAJzB,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,wBAAwB,EACpB,YAAY,CAAC,EAAE,YAAY,YAAA;IAG5D;;;;OAIG;IACH,YAAY,IAAI,IAAI;IAIpB;;;;;;;;;OASG;IACH,KAAK,IAAI,SAAS,cAAc,EAAE;IAOlC,iEAAiE;IACjE,OAAO,CAAC,QAAQ;IAsahB;;;;OAIG;IACG,SAAS,CACX,OAAO,EAAE,WAAW,GACrB,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC;IAUzC,qCAAqC;IAC/B,YAAY,CACd,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,WAAW,GACrB,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAgBxC,8CAA8C;YAChC,gBAAgB;IAO9B,+DAA+D;IAC/D,OAAO,CAAC,OAAO;IASf;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;CA6BvB"}

package/dist/lib/mcp/content-tools.provider.js

@@ -6,6 +6,7 @@ const common_1 = require("@nestjs/common");
 const identity_server_1 = require("@orthacms/identity-server");
 const tools_server_1 = require("@orthacms/tools-server");
 const content_tokens_1 = require("../content.tokens");
+const token_actor_1 = require("../public-api/infrastructure/token-actor");
 const workspace_grants_query_1 = require("../content-types/queries/workspace-grants.query");
 const resolve_granted_type_1 = require("../public-api/http/controllers/resolve-granted-type");
 const public_entries_query_1 = require("../public-api/infrastructure/public-entries.query");
@@ -201,7 +202,7 @@ let ContentToolProvider = class ContentToolProvider {
                 handler: async (input, context) => {
                     const { type, granted } = await this.resolve((0, tool_input_1.requireTypeName)(input), context);
                     const body = await (0, tool_input_1.validateToolInput)(public_save_entry_dto_1.PublicSaveEntryDto, input);
-                    return this.writes.create(type, body, context.workspaceId, granted);
+                    return this.writes.create(type, body, context.workspaceId, granted, (0, token_actor_1.toToolEventActor)(context.actor));
                 }
             },
             {
@@ -224,7 +225,7 @@ let ContentToolProvider = class ContentToolProvider {
                             ? {}
                             : { relations: input['relations'] })
                     });
-                    return this.writes.update(type, (0, tool_input_1.requireLocator)(input), body, context.workspaceId, granted, localeArg(input));
+                    return this.writes.update(type, (0, tool_input_1.requireLocator)(input), body, context.workspaceId, granted, localeArg(input), (0, token_actor_1.toToolEventActor)(context.actor));
                 }
             },
             {
@@ -236,7 +237,7 @@ let ContentToolProvider = class ContentToolProvider {
                 readOnly: false,
                 handler: async (input, context) => {
                     const { type, granted } = await this.resolve((0, tool_input_1.requireTypeName)(input), context);
-                    return this.writes.publish(type, (0, tool_input_1.requireLocator)(input), context.workspaceId, granted, localeArg(input));
+                    return this.writes.publish(type, (0, tool_input_1.requireLocator)(input), context.workspaceId, granted, localeArg(input), (0, token_actor_1.toToolEventActor)(context.actor));
                 }
             },
             {
@@ -248,7 +249,7 @@ let ContentToolProvider = class ContentToolProvider {
                 readOnly: false,
                 handler: async (input, context) => {
                     const { type, granted } = await this.resolve((0, tool_input_1.requireTypeName)(input), context);
-                    return this.writes.unpublish(type, (0, tool_input_1.requireLocator)(input), context.workspaceId, granted, localeArg(input));
+                    return this.writes.unpublish(type, (0, tool_input_1.requireLocator)(input), context.workspaceId, granted, localeArg(input), (0, token_actor_1.toToolEventActor)(context.actor));
                 }
             },
             {
@@ -261,7 +262,7 @@ let ContentToolProvider = class ContentToolProvider {
                 destructive: true,
                 handler: async (input, context) => {
                     const { type } = await this.resolve((0, tool_input_1.requireTypeName)(input), context);
-                    await this.writes.remove(type, (0, tool_input_1.requireLocator)(input), context.workspaceId, localeArg(input));
+                    await this.writes.remove(type, (0, tool_input_1.requireLocator)(input), context.workspaceId, localeArg(input), (0, token_actor_1.toToolEventActor)(context.actor));
                     return { deleted: true };
                 }
             },
@@ -288,7 +289,7 @@ let ContentToolProvider = class ContentToolProvider {
                     const body = await (0, tool_input_1.validateToolInput)(public_bulk_dto_1.PublicBulkSaveDto, {
                         items: input['items']
                     });
-                    return this.writes.bulkSave(type, body.items, context.workspaceId, granted);
+                    return this.writes.bulkSave(type, body.items, context.workspaceId, granted, (0, token_actor_1.toToolEventActor)(context.actor));
                 }
             },
             {
@@ -303,7 +304,7 @@ let ContentToolProvider = class ContentToolProvider {
                     const body = await (0, tool_input_1.validateToolInput)(public_bulk_dto_1.PublicBulkIdsDto, {
                         ids: input['ids']
                     });
-                    return this.writes.bulkPublish(type, body.ids, context.workspaceId);
+                    return this.writes.bulkPublish(type, body.ids, context.workspaceId, (0, token_actor_1.toToolEventActor)(context.actor));
                 }
             },
             {
@@ -318,7 +319,7 @@ let ContentToolProvider = class ContentToolProvider {
                     const body = await (0, tool_input_1.validateToolInput)(public_bulk_dto_1.PublicBulkIdsDto, {
                         ids: input['ids']
                     });
-                    return this.writes.bulkUnpublish(type, body.ids, context.workspaceId);
+                    return this.writes.bulkUnpublish(type, body.ids, context.workspaceId, (0, token_actor_1.toToolEventActor)(context.actor));
                 }
             },
             {
@@ -334,7 +335,7 @@ let ContentToolProvider = class ContentToolProvider {
                     const body = await (0, tool_input_1.validateToolInput)(public_bulk_dto_1.PublicBulkIdsDto, {
                         ids: input['ids']
                     });
-                    return this.writes.bulkRemove(type, body.ids, context.workspaceId);
+                    return this.writes.bulkRemove(type, body.ids, context.workspaceId, (0, token_actor_1.toToolEventActor)(context.actor));
                 }
             }
         ];

package/dist/lib/public-api/http/controllers/public-entry-writes.controller.d.ts

@@ -1,6 +1,7 @@
 import type { ContentTypeRegistry } from '../../../registry/content-type-registry';
 import { WorkspaceGrantsQuery } from '../../../content-types/queries/workspace-grants.query';
 import { PublicEntryWritesService } from '../../infrastructure/public-entry-writes.service';
+import type { PublicApiToken } from '../api-token-request';
 import type { PublicEntry } from '../../types/public-entry';
 import { PublicSaveEntryDto } from '../dto/public-save-entry.dto';
 import { PublicBulkIdsDto, PublicBulkSaveDto } from '../dto/public-bulk.dto';
@@ -41,31 +42,31 @@ export declare class PublicEntryWritesController {
     private readonly writes;
     constructor(registry: ContentTypeRegistry, grants: WorkspaceGrantsQuery, writes: PublicEntryWritesService);
     /** `POST /api/v1/content/:typeName` — create a draft entry. */
-    create(typeName: string, body: PublicSaveEntryDto, workspaceId: string): Promise<PublicEntry>;
+    create(typeName: string, body: PublicSaveEntryDto, workspaceId: string, token: PublicApiToken): Promise<PublicEntry>;
     /** `POST /api/v1/content/:typeName/bulk` — create and/or update many entries. */
-    bulkSave(typeName: string, body: PublicBulkSaveDto, workspaceId: string): Promise<PublicBulkSaveResult>;
+    bulkSave(typeName: string, body: PublicBulkSaveDto, workspaceId: string, token: PublicApiToken): Promise<PublicBulkSaveResult>;
     /** `POST /api/v1/content/:typeName/bulk/publish` — take many entries live. */
-    bulkPublish(typeName: string, body: PublicBulkIdsDto, workspaceId: string): Promise<BulkPublishResult>;
+    bulkPublish(typeName: string, body: PublicBulkIdsDto, workspaceId: string, token: PublicApiToken): Promise<BulkPublishResult>;
     /** `POST /api/v1/content/:typeName/bulk/unpublish` — take many off the air. */
-    bulkUnpublish(typeName: string, body: PublicBulkIdsDto, workspaceId: string): Promise<BulkActionResult>;
+    bulkUnpublish(typeName: string, body: PublicBulkIdsDto, workspaceId: string, token: PublicApiToken): Promise<BulkActionResult>;
     /** `POST /api/v1/content/:typeName/bulk/delete` — remove many entries. */
-    bulkRemove(typeName: string, body: PublicBulkIdsDto, workspaceId: string): Promise<BulkActionResult>;
+    bulkRemove(typeName: string, body: PublicBulkIdsDto, workspaceId: string, token: PublicApiToken): Promise<BulkActionResult>;
     /** `PATCH /api/v1/content/:typeName/group/:localeGroupId` */
-    updateByGroup(typeName: string, localeGroupId: string, body: PublicSaveEntryDto, query: PublicEntryQueryDto, workspaceId: string): Promise<PublicEntry>;
+    updateByGroup(typeName: string, localeGroupId: string, body: PublicSaveEntryDto, query: PublicEntryQueryDto, workspaceId: string, token: PublicApiToken): Promise<PublicEntry>;
     /** `POST /api/v1/content/:typeName/group/:localeGroupId/publish` */
-    publishByGroup(typeName: string, localeGroupId: string, query: PublicEntryQueryDto, workspaceId: string): Promise<PublicEntry>;
+    publishByGroup(typeName: string, localeGroupId: string, query: PublicEntryQueryDto, workspaceId: string, token: PublicApiToken): Promise<PublicEntry>;
     /** `POST /api/v1/content/:typeName/group/:localeGroupId/unpublish` */
-    unpublishByGroup(typeName: string, localeGroupId: string, query: PublicEntryQueryDto, workspaceId: string): Promise<PublicEntry>;
+    unpublishByGroup(typeName: string, localeGroupId: string, query: PublicEntryQueryDto, workspaceId: string, token: PublicApiToken): Promise<PublicEntry>;
     /** `DELETE /api/v1/content/:typeName/group/:localeGroupId` */
-    removeByGroup(typeName: string, localeGroupId: string, query: PublicEntryQueryDto, workspaceId: string): Promise<void>;
+    removeByGroup(typeName: string, localeGroupId: string, query: PublicEntryQueryDto, workspaceId: string, token: PublicApiToken): Promise<void>;
     /** `PATCH /api/v1/content/:typeName/:id` — replace an entry's values. */
-    update(typeName: string, id: string, body: PublicSaveEntryDto, workspaceId: string): Promise<PublicEntry>;
+    update(typeName: string, id: string, body: PublicSaveEntryDto, workspaceId: string, token: PublicApiToken): Promise<PublicEntry>;
     /** `POST /api/v1/content/:typeName/:id/publish` — take an entry live. */
-    publish(typeName: string, id: string, workspaceId: string): Promise<PublicEntry>;
+    publish(typeName: string, id: string, workspaceId: string, token: PublicApiToken): Promise<PublicEntry>;
     /** `POST /api/v1/content/:typeName/:id/unpublish` — take it off the air. */
-    unpublish(typeName: string, id: string, workspaceId: string): Promise<PublicEntry>;
+    unpublish(typeName: string, id: string, workspaceId: string, token: PublicApiToken): Promise<PublicEntry>;
     /** `DELETE /api/v1/content/:typeName/:id` — remove an entry. */
-    remove(typeName: string, id: string, workspaceId: string): Promise<void>;
+    remove(typeName: string, id: string, workspaceId: string, token: PublicApiToken): Promise<void>;
     /** @see update */
     private applyUpdate;
     /** @see publish */

package/dist/lib/public-api/http/controllers/public-entry-writes.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-entry-writes.controller.d.ts","sourceRoot":"","sources":["../../../../../src/lib/public-api/http/controllers/public-entry-writes.controller.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAE5F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE7E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,EACR,gBAAgB,EAChB,iBAAiB,EACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAG3E;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBAUa,2BAA2B;IAGhC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,wBAAwB;IAGrD,+DAA+D;IAQzD,MAAM,CACW,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,kBAAkB,EACZ,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,WAAW,CAAC;IAkBvB,iFAAiF;IAQ3E,QAAQ,CACS,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,iBAAiB,EACX,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,oBAAoB,CAAC;IAUhC,8EAA8E;IASxE,WAAW,CACM,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,gBAAgB,EACV,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,iBAAiB,CAAC;IAU7B,+EAA+E;IASzE,aAAa,CACI,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,gBAAgB,EACV,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,gBAAgB,CAAC;IAU5B,0EAA0E;IASpE,UAAU,CACO,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,gBAAgB,EACV,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,gBAAgB,CAAC;IAgB5B,6DAA6D;IAQ7D,aAAa,CACU,QAAQ,EAAE,MAAM,EACI,aAAa,EAAE,MAAM,EACpD,IAAI,EAAE,kBAAkB,EACvB,KAAK,EAAE,mBAAmB,EACf,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,WAAW,CAAC;IAUvB,oEAAoE;IAIpE,cAAc,CACS,QAAQ,EAAE,MAAM,EACI,aAAa,EAAE,MAAM,EACnD,KAAK,EAAE,mBAAmB,EACf,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,WAAW,CAAC;IAUvB,sEAAsE;IAItE,gBAAgB,CACO,QAAQ,EAAE,MAAM,EACI,aAAa,EAAE,MAAM,EACnD,KAAK,EAAE,mBAAmB,EACf,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,WAAW,CAAC;IAUvB,8DAA8D;IAS9D,aAAa,CACU,QAAQ,EAAE,MAAM,EACI,aAAa,EAAE,MAAM,EACnD,KAAK,EAAE,mBAAmB,EACf,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,IAAI,CAAC;IAWhB,yEAAyE;IAQzE,MAAM,CACiB,QAAQ,EAAE,MAAM,EACP,EAAE,EAAE,MAAM,EAC9B,IAAI,EAAE,kBAAkB,EACZ,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,WAAW,CAAC;IAMvB,yEAAyE;IAQzE,OAAO,CACgB,QAAQ,EAAE,MAAM,EACP,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,WAAW,CAAC;IAUvB,4EAA4E;IAQ5E,SAAS,CACc,QAAQ,EAAE,MAAM,EACP,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,WAAW,CAAC;IAUvB,gEAAgE;IAShE,MAAM,CACiB,QAAQ,EAAE,MAAM,EACP,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,IAAI,CAAC;IAShB,kBAAkB;YACJ,WAAW;IAuBzB,mBAAmB;YACL,YAAY;IAwB1B,kBAAkB;YACJ,WAAW;CAc5B"}
+{"version":3,"file":"public-entry-writes.controller.d.ts","sourceRoot":"","sources":["../../../../../src/lib/public-api/http/controllers/public-entry-writes.controller.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAG5F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE7E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,EACR,gBAAgB,EAChB,iBAAiB,EACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAG3E;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBAUa,2BAA2B;IAGhC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,wBAAwB;IAGrD,+DAA+D;IAQzD,MAAM,CACW,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,kBAAkB,EACZ,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,WAAW,CAAC;IAwBvB,iFAAiF;IAQ3E,QAAQ,CACS,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,iBAAiB,EACX,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,oBAAoB,CAAC;IAgBhC,8EAA8E;IASxE,WAAW,CACM,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,gBAAgB,EACV,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,iBAAiB,CAAC;IAe7B,+EAA+E;IASzE,aAAa,CACI,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,gBAAgB,EACV,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,gBAAgB,CAAC;IAe5B,0EAA0E;IASpE,UAAU,CACO,QAAQ,EAAE,MAAM,EAC3B,IAAI,EAAE,gBAAgB,EACV,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,gBAAgB,CAAC;IAqB5B,6DAA6D;IAQ7D,aAAa,CACU,QAAQ,EAAE,MAAM,EACI,aAAa,EAAE,MAAM,EACpD,IAAI,EAAE,kBAAkB,EACvB,KAAK,EAAE,mBAAmB,EACf,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,WAAW,CAAC;IAWvB,oEAAoE;IAIpE,cAAc,CACS,QAAQ,EAAE,MAAM,EACI,aAAa,EAAE,MAAM,EACnD,KAAK,EAAE,mBAAmB,EACf,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,WAAW,CAAC;IAWvB,sEAAsE;IAItE,gBAAgB,CACO,QAAQ,EAAE,MAAM,EACI,aAAa,EAAE,MAAM,EACnD,KAAK,EAAE,mBAAmB,EACf,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,WAAW,CAAC;IAWvB,8DAA8D;IAS9D,aAAa,CACU,QAAQ,EAAE,MAAM,EACI,aAAa,EAAE,MAAM,EACnD,KAAK,EAAE,mBAAmB,EACf,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,IAAI,CAAC;IAYhB,yEAAyE;IAQzE,MAAM,CACiB,QAAQ,EAAE,MAAM,EACP,EAAE,EAAE,MAAM,EAC9B,IAAI,EAAE,kBAAkB,EACZ,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,WAAW,CAAC;IAavB,yEAAyE;IAQzE,OAAO,CACgB,QAAQ,EAAE,MAAM,EACP,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,WAAW,CAAC;IAWvB,4EAA4E;IAQ5E,SAAS,CACc,QAAQ,EAAE,MAAM,EACP,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,WAAW,CAAC;IAWvB,gEAAgE;IAShE,MAAM,CACiB,QAAQ,EAAE,MAAM,EACP,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACpB,KAAK,EAAE,cAAc,GACzC,OAAO,CAAC,IAAI,CAAC;IAehB,kBAAkB;YACJ,WAAW;IAyBzB,mBAAmB;YACL,YAAY;IAkC1B,kBAAkB;YACJ,WAAW;CAqB5B"}