@orthacms/content-server 0.4.2 → 0.5.0

package/dist/lib/public-api/http/controllers/public-entry-writes.controller.js

@@ -9,6 +9,8 @@ const workspaces_server_1 = require("@orthacms/workspaces-server");
 const content_tokens_1 = require("../../../content.tokens");
 const workspace_grants_query_1 = require("../../../content-types/queries/workspace-grants.query");
 const public_entry_writes_service_1 = require("../../infrastructure/public-entry-writes.service");
+const token_actor_1 = require("../../infrastructure/token-actor");
+const current_api_token_decorator_1 = require("../decorators/current-api-token.decorator");
 const api_token_guard_1 = require("../guards/api-token.guard");
 const api_token_workspace_guard_1 = require("../guards/api-token-workspace.guard");
 const public_save_entry_dto_1 = require("../dto/public-save-entry.dto");
@@ -54,9 +56,9 @@ let PublicEntryWritesController = class PublicEntryWritesController {
         this.writes = writes;
     }
     /** `POST /api/v1/content/:typeName` — create a draft entry. */
-    async create(typeName, body, workspaceId) {
+    async create(typeName, body, workspaceId, token) {
         const { type, granted } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.create(type, body, workspaceId, granted);
+        return this.writes.create(type, body, workspaceId, granted, (0, token_actor_1.toTokenActor)(token));
     }
     // ---- batches -----------------------------------------------------------
     //
@@ -66,24 +68,24 @@ let PublicEntryWritesController = class PublicEntryWritesController {
     // that turns a mis-ordered match into a 400, not a substitute for the order.
     // Same arrangement, same reason, as the admin's `BulkEntriesController`.
     /** `POST /api/v1/content/:typeName/bulk` — create and/or update many entries. */
-    async bulkSave(typeName, body, workspaceId) {
+    async bulkSave(typeName, body, workspaceId, token) {
         const { type, granted } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.bulkSave(type, body.items, workspaceId, granted);
+        return this.writes.bulkSave(type, body.items, workspaceId, granted, (0, token_actor_1.toTokenActor)(token));
     }
     /** `POST /api/v1/content/:typeName/bulk/publish` — take many entries live. */
-    async bulkPublish(typeName, body, workspaceId) {
+    async bulkPublish(typeName, body, workspaceId, token) {
         const { type } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.bulkPublish(type, body.ids, workspaceId);
+        return this.writes.bulkPublish(type, body.ids, workspaceId, (0, token_actor_1.toTokenActor)(token));
     }
     /** `POST /api/v1/content/:typeName/bulk/unpublish` — take many off the air. */
-    async bulkUnpublish(typeName, body, workspaceId) {
+    async bulkUnpublish(typeName, body, workspaceId, token) {
         const { type } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.bulkUnpublish(type, body.ids, workspaceId);
+        return this.writes.bulkUnpublish(type, body.ids, workspaceId, (0, token_actor_1.toTokenActor)(token));
     }
     /** `POST /api/v1/content/:typeName/bulk/delete` — remove many entries. */
-    async bulkRemove(typeName, body, workspaceId) {
+    async bulkRemove(typeName, body, workspaceId, token) {
         const { type } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.bulkRemove(type, body.ids, workspaceId);
+        return this.writes.bulkRemove(type, body.ids, workspaceId, (0, token_actor_1.toTokenActor)(token));
     }
     // ---- addressed by translation group -----------------------------------
     //
@@ -91,60 +93,61 @@ let PublicEntryWritesController = class PublicEntryWritesController {
     // cannot collide on segment count, but Express matches in declaration order
     // and literal-prefixed routes belong ahead of wildcards.
     /** `PATCH /api/v1/content/:typeName/group/:localeGroupId` */
-    updateByGroup(typeName, localeGroupId, body, query, workspaceId) {
-        return this.applyUpdate(typeName, { localeGroupId }, body, workspaceId, query.locale);
+    updateByGroup(typeName, localeGroupId, body, query, workspaceId, token) {
+        return this.applyUpdate(typeName, { localeGroupId }, body, workspaceId, query.locale, token);
     }
     /** `POST /api/v1/content/:typeName/group/:localeGroupId/publish` */
-    publishByGroup(typeName, localeGroupId, query, workspaceId) {
-        return this.applyPublish(typeName, { localeGroupId }, workspaceId, query.locale, true);
+    publishByGroup(typeName, localeGroupId, query, workspaceId, token) {
+        return this.applyPublish(typeName, { localeGroupId }, workspaceId, query.locale, true, token);
     }
     /** `POST /api/v1/content/:typeName/group/:localeGroupId/unpublish` */
-    unpublishByGroup(typeName, localeGroupId, query, workspaceId) {
-        return this.applyPublish(typeName, { localeGroupId }, workspaceId, query.locale, false);
+    unpublishByGroup(typeName, localeGroupId, query, workspaceId, token) {
+        return this.applyPublish(typeName, { localeGroupId }, workspaceId, query.locale, false, token);
     }
     /** `DELETE /api/v1/content/:typeName/group/:localeGroupId` */
-    removeByGroup(typeName, localeGroupId, query, workspaceId) {
-        return this.applyRemove(typeName, { localeGroupId }, workspaceId, query.locale);
+    removeByGroup(typeName, localeGroupId, query, workspaceId, token) {
+        return this.applyRemove(typeName, { localeGroupId }, workspaceId, query.locale, token);
     }
     // ---- addressed by entry id ---------------------------------------------
     /** `PATCH /api/v1/content/:typeName/:id` — replace an entry's values. */
-    update(typeName, id, body, workspaceId) {
+    update(typeName, id, body, workspaceId, token) {
         // No locale: an entry id already names exactly one row, in whatever
         // locale it happens to be.
-        return this.applyUpdate(typeName, { id }, body, workspaceId, undefined);
+        return this.applyUpdate(typeName, { id }, body, workspaceId, undefined, token);
     }
     /** `POST /api/v1/content/:typeName/:id/publish` — take an entry live. */
-    publish(typeName, id, workspaceId) {
-        return this.applyPublish(typeName, { id }, workspaceId, undefined, true);
+    publish(typeName, id, workspaceId, token) {
+        return this.applyPublish(typeName, { id }, workspaceId, undefined, true, token);
     }
     /** `POST /api/v1/content/:typeName/:id/unpublish` — take it off the air. */
-    unpublish(typeName, id, workspaceId) {
-        return this.applyPublish(typeName, { id }, workspaceId, undefined, false);
+    unpublish(typeName, id, workspaceId, token) {
+        return this.applyPublish(typeName, { id }, workspaceId, undefined, false, token);
     }
     /** `DELETE /api/v1/content/:typeName/:id` — remove an entry. */
-    remove(typeName, id, workspaceId) {
-        return this.applyRemove(typeName, { id }, workspaceId, undefined);
+    remove(typeName, id, workspaceId, token) {
+        return this.applyRemove(typeName, { id }, workspaceId, undefined, token);
     }
     // ---- the shared handlers, one per write --------------------------------
     //
     // Each is called by both addressing forms, so the pair stays a routing
     // detail and never a behavioural fork — the same arrangement as the reads.
     /** @see update */
-    async applyUpdate(typeName, locator, body, workspaceId, locale) {
+    async applyUpdate(typeName, locator, body, workspaceId, locale, token) {
         const { type, granted } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.update(type, locator, body, workspaceId, granted, locale);
+        return this.writes.update(type, locator, body, workspaceId, granted, locale, (0, token_actor_1.toTokenActor)(token));
     }
     /** @see publish */
-    async applyPublish(typeName, locator, workspaceId, locale, live) {
+    async applyPublish(typeName, locator, workspaceId, locale, live, token) {
         const { type, granted } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
+        const actor = (0, token_actor_1.toTokenActor)(token);
         return live
-            ? this.writes.publish(type, locator, workspaceId, granted, locale)
-            : this.writes.unpublish(type, locator, workspaceId, granted, locale);
+            ? this.writes.publish(type, locator, workspaceId, granted, locale, actor)
+            : this.writes.unpublish(type, locator, workspaceId, granted, locale, actor);
     }
     /** @see remove */
-    async applyRemove(typeName, locator, workspaceId, locale) {
+    async applyRemove(typeName, locator, workspaceId, locale, token) {
         const { type } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        await this.writes.remove(type, locator, workspaceId, locale);
+        await this.writes.remove(type, locator, workspaceId, locale, (0, token_actor_1.toTokenActor)(token));
     }
 };
 exports.PublicEntryWritesController = PublicEntryWritesController;
@@ -158,8 +161,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, public_save_entry_dto_1.PublicSaveEntryDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, public_save_entry_dto_1.PublicSaveEntryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "create", null);
 tslib_1.__decorate([
@@ -173,8 +177,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkSaveDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkSaveDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "bulkSave", null);
 tslib_1.__decorate([
@@ -188,8 +193,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "bulkPublish", null);
 tslib_1.__decorate([
@@ -203,8 +209,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "bulkUnpublish", null);
 tslib_1.__decorate([
@@ -218,8 +225,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "bulkRemove", null);
 tslib_1.__decorate([
@@ -234,9 +242,10 @@ tslib_1.__decorate([
     tslib_1.__param(2, (0, common_1.Body)()),
     tslib_1.__param(3, (0, common_1.Query)()),
     tslib_1.__param(4, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(5, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
     tslib_1.__metadata("design:paramtypes", [String, String, public_save_entry_dto_1.PublicSaveEntryDto,
-        public_list_entries_query_dto_1.PublicEntryQueryDto, String]),
+        public_list_entries_query_dto_1.PublicEntryQueryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "updateByGroup", null);
 tslib_1.__decorate([
@@ -247,8 +256,9 @@ tslib_1.__decorate([
     tslib_1.__param(1, (0, common_1.Param)('localeGroupId', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, common_1.Query)()),
     tslib_1.__param(3, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(4, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "publishByGroup", null);
 tslib_1.__decorate([
@@ -259,8 +269,9 @@ tslib_1.__decorate([
     tslib_1.__param(1, (0, common_1.Param)('localeGroupId', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, common_1.Query)()),
     tslib_1.__param(3, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(4, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "unpublishByGroup", null);
 tslib_1.__decorate([
@@ -275,8 +286,9 @@ tslib_1.__decorate([
     tslib_1.__param(1, (0, common_1.Param)('localeGroupId', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, common_1.Query)()),
     tslib_1.__param(3, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(4, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "removeByGroup", null);
 tslib_1.__decorate([
@@ -290,8 +302,9 @@ tslib_1.__decorate([
     tslib_1.__param(1, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, common_1.Body)()),
     tslib_1.__param(3, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(4, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, public_save_entry_dto_1.PublicSaveEntryDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, public_save_entry_dto_1.PublicSaveEntryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "update", null);
 tslib_1.__decorate([
@@ -304,8 +317,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "publish", null);
 tslib_1.__decorate([
@@ -318,8 +332,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "unpublish", null);
 tslib_1.__decorate([
@@ -333,8 +348,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "remove", null);
 exports.PublicEntryWritesController = PublicEntryWritesController = tslib_1.__decorate([

package/dist/lib/public-api/http/guards/api-token-workspace.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-token-workspace.guard.d.ts","sourceRoot":"","sources":["../../../../../src/lib/public-api/http/guards/api-token-workspace.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,WAAW,EACX,gBAAgB,EAInB,MAAM,gBAAgB,CAAC;AAOxB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBACa,sBAAuB,YAAW,WAAW;IACtD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CAmClD"}
+{"version":3,"file":"api-token-workspace.guard.d.ts","sourceRoot":"","sources":["../../../../../src/lib/public-api/http/guards/api-token-workspace.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,WAAW,EACX,gBAAgB,EAInB,MAAM,gBAAgB,CAAC;AAOxB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBACa,sBAAuB,YAAW,WAAW;IACtD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CA6ClD"}

package/dist/lib/public-api/http/guards/api-token-workspace.guard.js

@@ -38,6 +38,14 @@ let ApiTokenWorkspaceGuard = class ApiTokenWorkspaceGuard {
                 request.workspaceId = token.workspaceIds[0];
                 return true;
             }
+            // A token can end up covering *nothing*: deleting a workspace
+            // narrows every token's bucket and deliberately stops short of
+            // revoking the credential, which is not the purger's call to make.
+            // Asking that caller to name one of zero workspaces is advice they
+            // cannot follow, so say what is actually true instead.
+            if (token.workspaceIds.length === 0) {
+                throw new common_1.ForbiddenException('This token has no workspaces left — every workspace it covered has been deleted. Issue a new token.');
+            }
             throw new common_1.BadRequestException(`This token covers ${token.workspaceIds.length} workspaces — name the one you want with the X-Workspace-Id header.`);
         }
         if (!workspaces_server_1.WORKSPACE_ID_PATTERN.test(requested)) {

package/dist/lib/public-api/infrastructure/public-entries.query.d.ts

@@ -1,5 +1,6 @@
 import { type Database } from '@orthacms/database';
 import { type ContentEntryExtension } from '../../extension/entry-extension';
+import { ContentReadScopeRegistry } from '../../extension/read-scope';
 import { type AnyContentType } from '../../types/content-type';
 import { RelationLinkService } from '../../entries/infrastructure/persistence/relation-link.service';
 import type { PublicMediaFieldView, PublicRelationFieldView } from '../types/public-expansion';
@@ -49,7 +50,8 @@ export declare class PublicEntriesQuery {
     private readonly expansion;
     private readonly relationLinks;
     private readonly extension?;
-    constructor(db: Database, expansion: PublicExpansionQuery, relationLinks: RelationLinkService, extension?: ContentEntryExtension | undefined);
+    private readonly readScopes?;
+    constructor(db: Database, expansion: PublicExpansionQuery, relationLinks: RelationLinkService, extension?: ContentEntryExtension | undefined, readScopes?: ContentReadScopeRegistry | undefined);
     /**
      * One page of a type's publicly readable entries. Count and page share the
      * WHERE and run concurrently, so the request pays the slower of the two.
@@ -225,6 +227,17 @@ export declare class PublicEntriesQuery {
      * visibility rule in exactly one respect and inherits the rest verbatim.
      */
     private liveWhere;
+    /**
+     * The fragments contributed by the bound `CONTENT_READ_SCOPE` providers.
+     *
+     * Applied here, in {@link liveWhere}, rather than in `readableWhere`: this
+     * is the clause every public read shares — the list, the single-entry read
+     * and the translation lookup that deliberately steps around the locale
+     * scope all pass through it — so a scope cannot be missed by a read that
+     * chose the narrower helper. AND-ed like everything else around them, which
+     * is what makes a scope structurally incapable of widening a read.
+     */
+    private readScopeWhere;
     /**
      * The publish-state clause. `published` — the default and everything a
      * read-only token can ask for — is the API's headline rule; the other two

package/dist/lib/public-api/infrastructure/public-entries.query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-entries.query.d.ts","sourceRoot":"","sources":["../../../../src/lib/public-api/infrastructure/public-entries.query.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnE,OAAO,EAEH,KAAK,qBAAqB,EAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gEAAgE,CAAC;AACrG,OAAO,KAAK,EACR,oBAAoB,EACpB,uBAAuB,EAC1B,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAGH,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EACjC,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAc9E;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAClB;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACvB;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBACa,kBAAkB;IAEL,OAAO,CAAC,QAAQ,CAAC,EAAE;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAK9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAPQ,EAAE,EAAE,QAAQ,EAC9B,SAAS,EAAE,oBAAoB,EAC/B,aAAa,EAAE,mBAAmB,EAKlC,SAAS,CAAC,EAAE,qBAAqB,YAAA;IAGtD;;;OAGG;IACG,IAAI,CACN,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,yBAAyB,EAChC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAClC,OAAO,CAAC,mBAAmB,CAAC;IAiE/B;;;;;OAKG;YACW,gBAAgB;IAqE9B;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAWzB,0EAA0E;IAC1E,OAAO,CAAC,eAAe;IAQvB;;;;;;;;;;;;;;OAcG;YACW,sBAAsB;IAqDpC;;;;;OAKG;IACG,cAAc,CAChB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,mBAAmB,GAC3B,OAAO,CAAC,WAAW,EAAE,CAAC;IAoBzB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,UAAU;IAyClB;;;;;;;;;;;;;;;;OAgBG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,mBAAmB,EAC1B,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAClC,OAAO,CAAC,WAAW,CAAC;IA0DvB;;;;;;;;;;;;;;OAcG;IACG,kBAAkB,CACpB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAQnC;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,OAAO,CAAC,UAAU;IA6BlB,mEAAmE;IACnE,OAAO,CAAC,WAAW;IAMnB;;;;OAIG;IACG,aAAa,CACf,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,eAAe,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IAyCnC,yEAAyE;IACnE,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,SAA0B,EAC/B,UAAU,CAAC,EAAE,eAAe,GAC7B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAyBhD;;;;;OAKG;YACW,WAAW;IAoBzB;;;;;;;;;;;;;;;;;;;;OAoBG;YACW,eAAe;IAoB7B;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAcrB;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;IAajB;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAcnB;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO;CAmBlB"}
+{"version":3,"file":"public-entries.query.d.ts","sourceRoot":"","sources":["../../../../src/lib/public-api/infrastructure/public-entries.query.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnE,OAAO,EAEH,KAAK,qBAAqB,EAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gEAAgE,CAAC;AACrG,OAAO,KAAK,EACR,oBAAoB,EACpB,uBAAuB,EAC1B,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAGH,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EACjC,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAc9E;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAClB;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACvB;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBACa,kBAAkB;IAEL,OAAO,CAAC,QAAQ,CAAC,EAAE;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAK9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAK3B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAZO,EAAE,EAAE,QAAQ,EAC9B,SAAS,EAAE,oBAAoB,EAC/B,aAAa,EAAE,mBAAmB,EAKlC,SAAS,CAAC,EAAE,qBAAqB,YAAA,EAKjC,UAAU,CAAC,EAAE,wBAAwB,YAAA;IAG1D;;;OAGG;IACG,IAAI,CACN,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,yBAAyB,EAChC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAClC,OAAO,CAAC,mBAAmB,CAAC;IAiE/B;;;;;OAKG;YACW,gBAAgB;IAqE9B;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAWzB,0EAA0E;IAC1E,OAAO,CAAC,eAAe;IAQvB;;;;;;;;;;;;;;OAcG;YACW,sBAAsB;IAqDpC;;;;;OAKG;IACG,cAAc,CAChB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,mBAAmB,GAC3B,OAAO,CAAC,WAAW,EAAE,CAAC;IAoBzB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,UAAU;IAyClB;;;;;;;;;;;;;;;;OAgBG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,mBAAmB,EAC1B,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAClC,OAAO,CAAC,WAAW,CAAC;IA0DvB;;;;;;;;;;;;;;OAcG;IACG,kBAAkB,CACpB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAQnC;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,OAAO,CAAC,UAAU;IA6BlB,mEAAmE;IACnE,OAAO,CAAC,WAAW;IAMnB;;;;OAIG;IACG,aAAa,CACf,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,eAAe,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IAyCnC,yEAAyE;IACnE,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,SAA0B,EAC/B,UAAU,CAAC,EAAE,eAAe,GAC7B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAyBhD;;;;;OAKG;YACW,WAAW;IAoBzB;;;;;;;;;;;;;;;;;;;;OAoBG;YACW,eAAe;IAoB7B;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAcrB;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;IAcjB;;;;;;;;;OASG;IACH,OAAO,CAAC,cAAc;IAOtB;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAcnB;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO;CAmBlB"}

package/dist/lib/public-api/infrastructure/public-entries.query.js

@@ -7,6 +7,7 @@ const drizzle_orm_1 = require("drizzle-orm");
 const database_1 = require("@orthacms/database");
 const utils_server_1 = require("@orthacms/utils-server");
 const entry_extension_1 = require("../../extension/entry-extension");
+const read_scope_1 = require("../../extension/read-scope");
 const content_type_1 = require("../../types/content-type");
 const fields_1 = require("../../types/fields");
 const relation_link_service_1 = require("../../entries/infrastructure/persistence/relation-link.service");
@@ -48,11 +49,13 @@ let PublicEntriesQuery = class PublicEntriesQuery {
     expansion;
     relationLinks;
     extension;
-    constructor(db, expansion, relationLinks, extension) {
+    readScopes;
+    constructor(db, expansion, relationLinks, extension, readScopes) {
         this.db = db;
         this.expansion = expansion;
         this.relationLinks = relationLinks;
         this.extension = extension;
+        this.readScopes = readScopes;
     }
     /**
      * One page of a type's publicly readable entries. Count and page share the
@@ -500,7 +503,20 @@ let PublicEntriesQuery = class PublicEntriesQuery {
      */
     liveWhere(type, workspaceId, visibility = 'published') {
         const table = type.table;
-        return (0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(table['workspaceId'], workspaceId), this.statusWhere(type, visibility), type.paranoid ? (0, drizzle_orm_1.isNull)(table['deletedAt']) : undefined);
+        return (0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(table['workspaceId'], workspaceId), this.statusWhere(type, visibility), type.paranoid ? (0, drizzle_orm_1.isNull)(table['deletedAt']) : undefined, ...this.readScopeWhere(type, workspaceId));
+    }
+    /**
+     * The fragments contributed by the bound `CONTENT_READ_SCOPE` providers.
+     *
+     * Applied here, in {@link liveWhere}, rather than in `readableWhere`: this
+     * is the clause every public read shares — the list, the single-entry read
+     * and the translation lookup that deliberately steps around the locale
+     * scope all pass through it — so a scope cannot be missed by a read that
+     * chose the narrower helper. AND-ed like everything else around them, which
+     * is what makes a scope structurally incapable of widening a read.
+     */
+    readScopeWhere(type, workspaceId) {
+        return this.readScopes?.fragments({ type, workspaceId }) ?? [];
     }
     /**
      * The publish-state clause. `published` — the default and everything a
@@ -552,6 +568,7 @@ exports.PublicEntriesQuery = PublicEntriesQuery = tslib_1.__decorate([
     tslib_1.__param(0, (0, database_1.InjectDatabase)()),
     tslib_1.__param(3, (0, common_1.Optional)()),
     tslib_1.__param(3, (0, common_1.Inject)(entry_extension_1.CONTENT_ENTRY_EXTENSION)),
+    tslib_1.__param(4, (0, common_1.Optional)()),
     tslib_1.__metadata("design:paramtypes", [Object, public_expansion_query_1.PublicExpansionQuery,
-        relation_link_service_1.RelationLinkService, Object])
+        relation_link_service_1.RelationLinkService, Object, read_scope_1.ContentReadScopeRegistry])
 ], PublicEntriesQuery);

package/dist/lib/public-api/infrastructure/public-entry-writes.service.d.ts

@@ -1,3 +1,4 @@
+import type { EventActor } from '@orthacms/database';
 import type { AnyContentType } from '../../types/content-type';
 import { EntryWriterService } from '../../entries/infrastructure/persistence/entry-writer.service';
 import { PublishEntryUseCase } from '../../entries/application/use-cases/publish-entry.use-case';
@@ -56,7 +57,7 @@ export declare class PublicEntryWritesService {
      * of starting one, which is how a new locale of an existing record is
      * written.
      */
-    create(type: AnyContentType, body: PublicSaveEntryDto, workspaceId: string, grantedTypes: ReadonlySet<string>): Promise<PublicEntry>;
+    create(type: AnyContentType, body: PublicSaveEntryDto, workspaceId: string, grantedTypes: ReadonlySet<string>, actor?: EventActor): Promise<PublicEntry>;
     /**
      * Update an entry's values and apply its relation deltas. On a publishable
      * type this moves a published row back to `draft` while its published
@@ -82,7 +83,7 @@ export declare class PublicEntryWritesService {
      * group write at the default-locale row. Which is exactly what it did, until
      * a live check caught a German update rewriting the English article.
      */
-    update(type: AnyContentType, locator: EntryLocator, body: PublicSaveEntryDto, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string): Promise<PublicEntry>;
+    update(type: AnyContentType, locator: EntryLocator, body: PublicSaveEntryDto, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string, actor?: EventActor): Promise<PublicEntry>;
     /**
      * Save many entries of one type in a single request — the batch form of
      * {@link create} and {@link update}, and the reason it is one method rather
@@ -112,7 +113,7 @@ export declare class PublicEntryWritesService {
      * would spend a fan-out contending with itself; sequential also makes the
      * per-item results deterministic, which a caller diffing two runs relies on.
      */
-    bulkSave(type: AnyContentType, items: readonly PublicBulkSaveItemDto[], workspaceId: string, grantedTypes: ReadonlySet<string>): Promise<PublicBulkSaveResult>;
+    bulkSave(type: AnyContentType, items: readonly PublicBulkSaveItemDto[], workspaceId: string, grantedTypes: ReadonlySet<string>, actor?: EventActor): Promise<PublicBulkSaveResult>;
     /**
      * The values bag an update submits: the stored values with the caller's
      * merged over them (see {@link update}), minus any single relation the
@@ -141,7 +142,7 @@ export declare class PublicEntryWritesService {
      * workspace-scoped, so an id from another workspace is reported as
      * `not-found` — the same answer an id that never existed gets.
      */
-    bulkPublish(type: AnyContentType, ids: string[], workspaceId: string): Promise<BulkPublishResult>;
+    bulkPublish(type: AnyContentType, ids: string[], workspaceId: string, actor?: EventActor): Promise<BulkPublishResult>;
     /**
      * Take many entries off the air, reverting each to a draft.
      *
@@ -151,7 +152,7 @@ export declare class PublicEntryWritesService {
      * actually transitioned, and one `entry.unpublished` event is emitted per
      * transition — never per submitted id.
      */
-    bulkUnpublish(type: AnyContentType, ids: string[], workspaceId: string): Promise<BulkActionResult>;
+    bulkUnpublish(type: AnyContentType, ids: string[], workspaceId: string, actor?: EventActor): Promise<BulkActionResult>;
     /**
      * Remove many entries — soft-deleting on a `paranoid` type (recoverable
      * from the admin's trash) and hard-deleting otherwise, exactly as
@@ -160,11 +161,11 @@ export declare class PublicEntryWritesService {
      * Rows, not records: on a localized type this deletes the listed locales
      * and leaves their siblings live.
      */
-    bulkRemove(type: AnyContentType, ids: string[], workspaceId: string): Promise<BulkActionResult>;
+    bulkRemove(type: AnyContentType, ids: string[], workspaceId: string, actor?: EventActor): Promise<BulkActionResult>;
     /** Take an entry live. 422 when the stored draft no longer validates. */
-    publish(type: AnyContentType, locator: EntryLocator, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string): Promise<PublicEntry>;
+    publish(type: AnyContentType, locator: EntryLocator, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string, actor?: EventActor): Promise<PublicEntry>;
     /** Take an entry back off the air, reverting it to a draft. */
-    unpublish(type: AnyContentType, locator: EntryLocator, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string): Promise<PublicEntry>;
+    unpublish(type: AnyContentType, locator: EntryLocator, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string, actor?: EventActor): Promise<PublicEntry>;
     /**
      * Remove an entry — soft delete on a `paranoid` type (recoverable from the
      * admin's trash), a hard delete otherwise. Either way it leaves the public
@@ -174,7 +175,7 @@ export declare class PublicEntryWritesService {
      * German article leaves the English one live. Deleting a whole group means
      * deleting each locale.
      */
-    remove(type: AnyContentType, locator: EntryLocator, workspaceId: string, locale?: string): Promise<void>;
+    remove(type: AnyContentType, locator: EntryLocator, workspaceId: string, locale?: string, actor?: EventActor): Promise<void>;
     /**
      * Re-read a just-written row through the public projection.
      *

package/dist/lib/public-api/infrastructure/public-entry-writes.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-entry-writes.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/public-api/infrastructure/public-entry-writes.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+DAA+D,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8DAA8D,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,MAAM,mEAAmE,CAAC;AAC9G,OAAO,EAAE,2BAA2B,EAAE,MAAM,qEAAqE,CAAC;AAClH,OAAO,KAAK,EACR,gBAAgB,EAChB,iBAAiB,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAKH,KAAK,oBAAoB,EAC5B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBACa,wBAAwB;IAE7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBALpB,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,kBAAkB,EAC3B,YAAY,EAAE,mBAAmB,EACjC,cAAc,EAAE,qBAAqB,EACrC,kBAAkB,EAAE,yBAAyB,EAC7C,oBAAoB,EAAE,2BAA2B;IAGtE;;;;;;;;OAQG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,kBAAkB,EACxB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAClC,OAAO,CAAC,WAAW,CAAC;IAkBvB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,kBAAkB,EACxB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC;IAwBvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,QAAQ,CACV,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,SAAS,qBAAqB,EAAE,EACvC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAClC,OAAO,CAAC,oBAAoB,CAAC;IAoDhC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,YAAY;IAqBpB;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CACP,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,CAAC;IAI7B;;;;;;;;OAQG;IACH,aAAa,CACT,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAI5B;;;;;;;OAOG;IACH,UAAU,CACN,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAI5B,yEAAyE;IACnE,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC;IAYvB,+DAA+D;IACzD,SAAS,CACX,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC;IAYvB;;;;;;;;OAQG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC;IAUhB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ;CAenB"}
+{"version":3,"file":"public-entry-writes.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/public-api/infrastructure/public-entry-writes.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+DAA+D,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8DAA8D,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,MAAM,mEAAmE,CAAC;AAC9G,OAAO,EAAE,2BAA2B,EAAE,MAAM,qEAAqE,CAAC;AAClH,OAAO,KAAK,EACR,gBAAgB,EAChB,iBAAiB,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAKH,KAAK,oBAAoB,EAC5B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBACa,wBAAwB;IAE7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBALpB,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,kBAAkB,EAC3B,YAAY,EAAE,mBAAmB,EACjC,cAAc,EAAE,qBAAqB,EACrC,kBAAkB,EAAE,yBAAyB,EAC7C,oBAAoB,EAAE,2BAA2B;IAGtE;;;;;;;;OAQG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,kBAAkB,EACxB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,WAAW,CAAC;IAiBvB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,kBAAkB,EACxB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,WAAW,CAAC;IAwBvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,QAAQ,CACV,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,SAAS,qBAAqB,EAAE,EACvC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,oBAAoB,CAAC;IAsDhC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,YAAY;IAqBpB;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CACP,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,iBAAiB,CAAC;IAI7B;;;;;;;;OAQG;IACH,aAAa,CACT,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,gBAAgB,CAAC;IAI5B;;;;;;;OAOG;IACH,UAAU,CACN,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,gBAAgB,CAAC;IAI5B,yEAAyE;IACnE,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,WAAW,CAAC;IAYvB,+DAA+D;IACzD,SAAS,CACX,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,WAAW,CAAC;IAYvB;;;;;;;;OAQG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,IAAI,CAAC;IAehB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ;CAenB"}

package/dist/lib/public-api/infrastructure/public-entry-writes.service.js

@@ -65,14 +65,13 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * of starting one, which is how a new locale of an existing record is
      * written.
      */
-    async create(type, body, workspaceId, grantedTypes) {
+    async create(type, body, workspaceId, grantedTypes, actor) {
         const record = await this.writer.create(type, body.values, workspaceId, body.relations, body.locale, body.localeGroupId, 
-        // Revisions record a *user* id, and a token is not a user. Writing
-        // the token id into that column would make the history resolve it to
-        // a nonexistent person; null is the honest answer for "not a user".
-        // Attributing a token's writes is a real gap — it wants its own
-        // column, not a misused one.
-        null);
+        // The **token** is the actor. Its id never reaches the revision's
+        // `created_by` — that column really is a `users` FK, and the writer's
+        // `revisionActorId` is what keeps the two apart — but it does reach
+        // the audit row, which carries an `actor_type` saying what it names.
+        actor ?? null);
         return this.readBack(type, record.id, workspaceId, grantedTypes, body);
     }
     /**
@@ -100,7 +99,7 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * group write at the default-locale row. Which is exactly what it did, until
      * a live check caught a German update rewriting the English article.
      */
-    async update(type, locator, body, workspaceId, grantedTypes, locale) {
+    async update(type, locator, body, workspaceId, grantedTypes, locale, actor) {
         const row = await this.entries.resolveWritableRow(type, locator, workspaceId, locale);
         const id = row['id'];
         await this.writer.update(type, id, 
@@ -109,7 +108,7 @@ let PublicEntryWritesService = class PublicEntryWritesService {
         // column and are absent from it, which is correct: those move only
         // through `relations` deltas, and a delta left unsent changes
         // nothing by construction.
-        this.mergedValues(type, row, body), workspaceId, body.relations, null);
+        this.mergedValues(type, row, body), workspaceId, body.relations, actor ?? null);
         return this.readBack(type, id, workspaceId, grantedTypes, { locale });
     }
     /**
@@ -141,7 +140,7 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * would spend a fan-out contending with itself; sequential also makes the
      * per-item results deterministic, which a caller diffing two runs relies on.
      */
-    async bulkSave(type, items, workspaceId, grantedTypes) {
+    async bulkSave(type, items, workspaceId, grantedTypes, actor) {
         const results = [];
         for (const [index, item] of items.entries()) {
             // Resolved inside the loop, and inside the try: a malformed
@@ -154,8 +153,8 @@ let PublicEntryWritesService = class PublicEntryWritesService {
                 const resolved = (0, bulk_save_op_1.resolveBulkSaveOp)(item);
                 op = resolved.op;
                 const entry = resolved.op === public_bulk_1.BULK_SAVE_OP.Create
-                    ? await this.create(type, item, workspaceId, grantedTypes)
-                    : await this.update(type, resolved.locator, item, workspaceId, grantedTypes, resolved.locale);
+                    ? await this.create(type, item, workspaceId, grantedTypes, actor)
+                    : await this.update(type, resolved.locator, item, workspaceId, grantedTypes, resolved.locale, actor);
                 results.push({ index, op: resolved.op, ok: true, entry });
             }
             catch (error) {
@@ -215,8 +214,8 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * workspace-scoped, so an id from another workspace is reported as
      * `not-found` — the same answer an id that never existed gets.
      */
-    bulkPublish(type, ids, workspaceId) {
-        return this.bulkPublishEntries.execute(type, ids, workspaceId);
+    bulkPublish(type, ids, workspaceId, actor) {
+        return this.bulkPublishEntries.execute(type, ids, workspaceId, actor);
     }
     /**
      * Take many entries off the air, reverting each to a draft.
@@ -227,8 +226,8 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * actually transitioned, and one `entry.unpublished` event is emitted per
      * transition — never per submitted id.
      */
-    bulkUnpublish(type, ids, workspaceId) {
-        return this.bulkUnpublishEntries.execute(type, ids, workspaceId);
+    bulkUnpublish(type, ids, workspaceId, actor) {
+        return this.bulkUnpublishEntries.execute(type, ids, workspaceId, actor);
     }
     /**
      * Remove many entries — soft-deleting on a `paranoid` type (recoverable
@@ -238,21 +237,21 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * Rows, not records: on a localized type this deletes the listed locales
      * and leaves their siblings live.
      */
-    bulkRemove(type, ids, workspaceId) {
-        return this.writer.bulkRemove(type, ids, workspaceId);
+    bulkRemove(type, ids, workspaceId, actor) {
+        return this.writer.bulkRemove(type, ids, workspaceId, actor);
     }
     /** Take an entry live. 422 when the stored draft no longer validates. */
-    async publish(type, locator, workspaceId, grantedTypes, locale) {
+    async publish(type, locator, workspaceId, grantedTypes, locale, actor) {
         const row = await this.entries.resolveWritableRow(type, locator, workspaceId, locale);
         const id = row['id'];
-        await this.publishEntry.execute(type, id, workspaceId);
+        await this.publishEntry.execute(type, id, workspaceId, actor);
         return this.readBack(type, id, workspaceId, grantedTypes, { locale });
     }
     /** Take an entry back off the air, reverting it to a draft. */
-    async unpublish(type, locator, workspaceId, grantedTypes, locale) {
+    async unpublish(type, locator, workspaceId, grantedTypes, locale, actor) {
         const row = await this.entries.resolveWritableRow(type, locator, workspaceId, locale);
         const id = row['id'];
-        await this.unpublishEntry.execute(type, id, workspaceId);
+        await this.unpublishEntry.execute(type, id, workspaceId, actor);
         return this.readBack(type, id, workspaceId, grantedTypes, { locale });
     }
     /**
@@ -264,9 +263,9 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * German article leaves the English one live. Deleting a whole group means
      * deleting each locale.
      */
-    async remove(type, locator, workspaceId, locale) {
+    async remove(type, locator, workspaceId, locale, actor) {
         const row = await this.entries.resolveWritableRow(type, locator, workspaceId, locale);
-        await this.writer.remove(type, row['id'], workspaceId);
+        await this.writer.remove(type, row['id'], workspaceId, actor);
     }
     /**
      * Re-read a just-written row through the public projection.