@orthacms/content-server 0.4.3 → 0.5.0

package/dist/lib/public-api/http/controllers/public-entry-writes.controller.js

@@ -9,6 +9,8 @@ const workspaces_server_1 = require("@orthacms/workspaces-server");
 const content_tokens_1 = require("../../../content.tokens");
 const workspace_grants_query_1 = require("../../../content-types/queries/workspace-grants.query");
 const public_entry_writes_service_1 = require("../../infrastructure/public-entry-writes.service");
+const token_actor_1 = require("../../infrastructure/token-actor");
+const current_api_token_decorator_1 = require("../decorators/current-api-token.decorator");
 const api_token_guard_1 = require("../guards/api-token.guard");
 const api_token_workspace_guard_1 = require("../guards/api-token-workspace.guard");
 const public_save_entry_dto_1 = require("../dto/public-save-entry.dto");
@@ -54,9 +56,9 @@ let PublicEntryWritesController = class PublicEntryWritesController {
         this.writes = writes;
     }
     /** `POST /api/v1/content/:typeName` — create a draft entry. */
-    async create(typeName, body, workspaceId) {
+    async create(typeName, body, workspaceId, token) {
         const { type, granted } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.create(type, body, workspaceId, granted);
+        return this.writes.create(type, body, workspaceId, granted, (0, token_actor_1.toTokenActor)(token));
     }
     // ---- batches -----------------------------------------------------------
     //
@@ -66,24 +68,24 @@ let PublicEntryWritesController = class PublicEntryWritesController {
     // that turns a mis-ordered match into a 400, not a substitute for the order.
     // Same arrangement, same reason, as the admin's `BulkEntriesController`.
     /** `POST /api/v1/content/:typeName/bulk` — create and/or update many entries. */
-    async bulkSave(typeName, body, workspaceId) {
+    async bulkSave(typeName, body, workspaceId, token) {
         const { type, granted } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.bulkSave(type, body.items, workspaceId, granted);
+        return this.writes.bulkSave(type, body.items, workspaceId, granted, (0, token_actor_1.toTokenActor)(token));
     }
     /** `POST /api/v1/content/:typeName/bulk/publish` — take many entries live. */
-    async bulkPublish(typeName, body, workspaceId) {
+    async bulkPublish(typeName, body, workspaceId, token) {
         const { type } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.bulkPublish(type, body.ids, workspaceId);
+        return this.writes.bulkPublish(type, body.ids, workspaceId, (0, token_actor_1.toTokenActor)(token));
     }
     /** `POST /api/v1/content/:typeName/bulk/unpublish` — take many off the air. */
-    async bulkUnpublish(typeName, body, workspaceId) {
+    async bulkUnpublish(typeName, body, workspaceId, token) {
         const { type } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.bulkUnpublish(type, body.ids, workspaceId);
+        return this.writes.bulkUnpublish(type, body.ids, workspaceId, (0, token_actor_1.toTokenActor)(token));
     }
     /** `POST /api/v1/content/:typeName/bulk/delete` — remove many entries. */
-    async bulkRemove(typeName, body, workspaceId) {
+    async bulkRemove(typeName, body, workspaceId, token) {
         const { type } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.bulkRemove(type, body.ids, workspaceId);
+        return this.writes.bulkRemove(type, body.ids, workspaceId, (0, token_actor_1.toTokenActor)(token));
     }
     // ---- addressed by translation group -----------------------------------
     //
@@ -91,60 +93,61 @@ let PublicEntryWritesController = class PublicEntryWritesController {
     // cannot collide on segment count, but Express matches in declaration order
     // and literal-prefixed routes belong ahead of wildcards.
     /** `PATCH /api/v1/content/:typeName/group/:localeGroupId` */
-    updateByGroup(typeName, localeGroupId, body, query, workspaceId) {
-        return this.applyUpdate(typeName, { localeGroupId }, body, workspaceId, query.locale);
+    updateByGroup(typeName, localeGroupId, body, query, workspaceId, token) {
+        return this.applyUpdate(typeName, { localeGroupId }, body, workspaceId, query.locale, token);
     }
     /** `POST /api/v1/content/:typeName/group/:localeGroupId/publish` */
-    publishByGroup(typeName, localeGroupId, query, workspaceId) {
-        return this.applyPublish(typeName, { localeGroupId }, workspaceId, query.locale, true);
+    publishByGroup(typeName, localeGroupId, query, workspaceId, token) {
+        return this.applyPublish(typeName, { localeGroupId }, workspaceId, query.locale, true, token);
     }
     /** `POST /api/v1/content/:typeName/group/:localeGroupId/unpublish` */
-    unpublishByGroup(typeName, localeGroupId, query, workspaceId) {
-        return this.applyPublish(typeName, { localeGroupId }, workspaceId, query.locale, false);
+    unpublishByGroup(typeName, localeGroupId, query, workspaceId, token) {
+        return this.applyPublish(typeName, { localeGroupId }, workspaceId, query.locale, false, token);
     }
     /** `DELETE /api/v1/content/:typeName/group/:localeGroupId` */
-    removeByGroup(typeName, localeGroupId, query, workspaceId) {
-        return this.applyRemove(typeName, { localeGroupId }, workspaceId, query.locale);
+    removeByGroup(typeName, localeGroupId, query, workspaceId, token) {
+        return this.applyRemove(typeName, { localeGroupId }, workspaceId, query.locale, token);
     }
     // ---- addressed by entry id ---------------------------------------------
     /** `PATCH /api/v1/content/:typeName/:id` — replace an entry's values. */
-    update(typeName, id, body, workspaceId) {
+    update(typeName, id, body, workspaceId, token) {
         // No locale: an entry id already names exactly one row, in whatever
         // locale it happens to be.
-        return this.applyUpdate(typeName, { id }, body, workspaceId, undefined);
+        return this.applyUpdate(typeName, { id }, body, workspaceId, undefined, token);
     }
     /** `POST /api/v1/content/:typeName/:id/publish` — take an entry live. */
-    publish(typeName, id, workspaceId) {
-        return this.applyPublish(typeName, { id }, workspaceId, undefined, true);
+    publish(typeName, id, workspaceId, token) {
+        return this.applyPublish(typeName, { id }, workspaceId, undefined, true, token);
     }
     /** `POST /api/v1/content/:typeName/:id/unpublish` — take it off the air. */
-    unpublish(typeName, id, workspaceId) {
-        return this.applyPublish(typeName, { id }, workspaceId, undefined, false);
+    unpublish(typeName, id, workspaceId, token) {
+        return this.applyPublish(typeName, { id }, workspaceId, undefined, false, token);
     }
     /** `DELETE /api/v1/content/:typeName/:id` — remove an entry. */
-    remove(typeName, id, workspaceId) {
-        return this.applyRemove(typeName, { id }, workspaceId, undefined);
+    remove(typeName, id, workspaceId, token) {
+        return this.applyRemove(typeName, { id }, workspaceId, undefined, token);
     }
     // ---- the shared handlers, one per write --------------------------------
     //
     // Each is called by both addressing forms, so the pair stays a routing
     // detail and never a behavioural fork — the same arrangement as the reads.
     /** @see update */
-    async applyUpdate(typeName, locator, body, workspaceId, locale) {
+    async applyUpdate(typeName, locator, body, workspaceId, locale, token) {
         const { type, granted } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        return this.writes.update(type, locator, body, workspaceId, granted, locale);
+        return this.writes.update(type, locator, body, workspaceId, granted, locale, (0, token_actor_1.toTokenActor)(token));
     }
     /** @see publish */
-    async applyPublish(typeName, locator, workspaceId, locale, live) {
+    async applyPublish(typeName, locator, workspaceId, locale, live, token) {
         const { type, granted } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
+        const actor = (0, token_actor_1.toTokenActor)(token);
         return live
-            ? this.writes.publish(type, locator, workspaceId, granted, locale)
-            : this.writes.unpublish(type, locator, workspaceId, granted, locale);
+            ? this.writes.publish(type, locator, workspaceId, granted, locale, actor)
+            : this.writes.unpublish(type, locator, workspaceId, granted, locale, actor);
     }
     /** @see remove */
-    async applyRemove(typeName, locator, workspaceId, locale) {
+    async applyRemove(typeName, locator, workspaceId, locale, token) {
         const { type } = await (0, resolve_granted_type_1.resolveGrantedType)(this.registry, this.grants, typeName, workspaceId);
-        await this.writes.remove(type, locator, workspaceId, locale);
+        await this.writes.remove(type, locator, workspaceId, locale, (0, token_actor_1.toTokenActor)(token));
     }
 };
 exports.PublicEntryWritesController = PublicEntryWritesController;
@@ -158,8 +161,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, public_save_entry_dto_1.PublicSaveEntryDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, public_save_entry_dto_1.PublicSaveEntryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "create", null);
 tslib_1.__decorate([
@@ -173,8 +177,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkSaveDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkSaveDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "bulkSave", null);
 tslib_1.__decorate([
@@ -188,8 +193,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "bulkPublish", null);
 tslib_1.__decorate([
@@ -203,8 +209,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "bulkUnpublish", null);
 tslib_1.__decorate([
@@ -218,8 +225,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Body)()),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, public_bulk_dto_1.PublicBulkIdsDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "bulkRemove", null);
 tslib_1.__decorate([
@@ -234,9 +242,10 @@ tslib_1.__decorate([
     tslib_1.__param(2, (0, common_1.Body)()),
     tslib_1.__param(3, (0, common_1.Query)()),
     tslib_1.__param(4, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(5, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
     tslib_1.__metadata("design:paramtypes", [String, String, public_save_entry_dto_1.PublicSaveEntryDto,
-        public_list_entries_query_dto_1.PublicEntryQueryDto, String]),
+        public_list_entries_query_dto_1.PublicEntryQueryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "updateByGroup", null);
 tslib_1.__decorate([
@@ -247,8 +256,9 @@ tslib_1.__decorate([
     tslib_1.__param(1, (0, common_1.Param)('localeGroupId', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, common_1.Query)()),
     tslib_1.__param(3, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(4, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "publishByGroup", null);
 tslib_1.__decorate([
@@ -259,8 +269,9 @@ tslib_1.__decorate([
     tslib_1.__param(1, (0, common_1.Param)('localeGroupId', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, common_1.Query)()),
     tslib_1.__param(3, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(4, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "unpublishByGroup", null);
 tslib_1.__decorate([
@@ -275,8 +286,9 @@ tslib_1.__decorate([
     tslib_1.__param(1, (0, common_1.Param)('localeGroupId', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, common_1.Query)()),
     tslib_1.__param(3, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(4, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, public_list_entries_query_dto_1.PublicEntryQueryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "removeByGroup", null);
 tslib_1.__decorate([
@@ -290,8 +302,9 @@ tslib_1.__decorate([
     tslib_1.__param(1, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, common_1.Body)()),
     tslib_1.__param(3, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(4, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, public_save_entry_dto_1.PublicSaveEntryDto, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, public_save_entry_dto_1.PublicSaveEntryDto, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "update", null);
 tslib_1.__decorate([
@@ -304,8 +317,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "publish", null);
 tslib_1.__decorate([
@@ -318,8 +332,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "unpublish", null);
 tslib_1.__decorate([
@@ -333,8 +348,9 @@ tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Param)('typeName')),
     tslib_1.__param(1, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
     tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, current_api_token_decorator_1.CurrentApiToken)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, String, String]),
+    tslib_1.__metadata("design:paramtypes", [String, String, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], PublicEntryWritesController.prototype, "remove", null);
 exports.PublicEntryWritesController = PublicEntryWritesController = tslib_1.__decorate([

package/dist/lib/public-api/http/guards/api-token-workspace.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-token-workspace.guard.d.ts","sourceRoot":"","sources":["../../../../../src/lib/public-api/http/guards/api-token-workspace.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,WAAW,EACX,gBAAgB,EAInB,MAAM,gBAAgB,CAAC;AAOxB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBACa,sBAAuB,YAAW,WAAW;IACtD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CAmClD"}
+{"version":3,"file":"api-token-workspace.guard.d.ts","sourceRoot":"","sources":["../../../../../src/lib/public-api/http/guards/api-token-workspace.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,WAAW,EACX,gBAAgB,EAInB,MAAM,gBAAgB,CAAC;AAOxB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBACa,sBAAuB,YAAW,WAAW;IACtD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CA6ClD"}

package/dist/lib/public-api/http/guards/api-token-workspace.guard.js

@@ -38,6 +38,14 @@ let ApiTokenWorkspaceGuard = class ApiTokenWorkspaceGuard {
                 request.workspaceId = token.workspaceIds[0];
                 return true;
             }
+            // A token can end up covering *nothing*: deleting a workspace
+            // narrows every token's bucket and deliberately stops short of
+            // revoking the credential, which is not the purger's call to make.
+            // Asking that caller to name one of zero workspaces is advice they
+            // cannot follow, so say what is actually true instead.
+            if (token.workspaceIds.length === 0) {
+                throw new common_1.ForbiddenException('This token has no workspaces left — every workspace it covered has been deleted. Issue a new token.');
+            }
             throw new common_1.BadRequestException(`This token covers ${token.workspaceIds.length} workspaces — name the one you want with the X-Workspace-Id header.`);
         }
         if (!workspaces_server_1.WORKSPACE_ID_PATTERN.test(requested)) {

package/dist/lib/public-api/infrastructure/public-entry-writes.service.d.ts

@@ -1,3 +1,4 @@
+import type { EventActor } from '@orthacms/database';
 import type { AnyContentType } from '../../types/content-type';
 import { EntryWriterService } from '../../entries/infrastructure/persistence/entry-writer.service';
 import { PublishEntryUseCase } from '../../entries/application/use-cases/publish-entry.use-case';
@@ -56,7 +57,7 @@ export declare class PublicEntryWritesService {
      * of starting one, which is how a new locale of an existing record is
      * written.
      */
-    create(type: AnyContentType, body: PublicSaveEntryDto, workspaceId: string, grantedTypes: ReadonlySet<string>): Promise<PublicEntry>;
+    create(type: AnyContentType, body: PublicSaveEntryDto, workspaceId: string, grantedTypes: ReadonlySet<string>, actor?: EventActor): Promise<PublicEntry>;
     /**
      * Update an entry's values and apply its relation deltas. On a publishable
      * type this moves a published row back to `draft` while its published
@@ -82,7 +83,7 @@ export declare class PublicEntryWritesService {
      * group write at the default-locale row. Which is exactly what it did, until
      * a live check caught a German update rewriting the English article.
      */
-    update(type: AnyContentType, locator: EntryLocator, body: PublicSaveEntryDto, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string): Promise<PublicEntry>;
+    update(type: AnyContentType, locator: EntryLocator, body: PublicSaveEntryDto, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string, actor?: EventActor): Promise<PublicEntry>;
     /**
      * Save many entries of one type in a single request — the batch form of
      * {@link create} and {@link update}, and the reason it is one method rather
@@ -112,7 +113,7 @@ export declare class PublicEntryWritesService {
      * would spend a fan-out contending with itself; sequential also makes the
      * per-item results deterministic, which a caller diffing two runs relies on.
      */
-    bulkSave(type: AnyContentType, items: readonly PublicBulkSaveItemDto[], workspaceId: string, grantedTypes: ReadonlySet<string>): Promise<PublicBulkSaveResult>;
+    bulkSave(type: AnyContentType, items: readonly PublicBulkSaveItemDto[], workspaceId: string, grantedTypes: ReadonlySet<string>, actor?: EventActor): Promise<PublicBulkSaveResult>;
     /**
      * The values bag an update submits: the stored values with the caller's
      * merged over them (see {@link update}), minus any single relation the
@@ -141,7 +142,7 @@ export declare class PublicEntryWritesService {
      * workspace-scoped, so an id from another workspace is reported as
      * `not-found` — the same answer an id that never existed gets.
      */
-    bulkPublish(type: AnyContentType, ids: string[], workspaceId: string): Promise<BulkPublishResult>;
+    bulkPublish(type: AnyContentType, ids: string[], workspaceId: string, actor?: EventActor): Promise<BulkPublishResult>;
     /**
      * Take many entries off the air, reverting each to a draft.
      *
@@ -151,7 +152,7 @@ export declare class PublicEntryWritesService {
      * actually transitioned, and one `entry.unpublished` event is emitted per
      * transition — never per submitted id.
      */
-    bulkUnpublish(type: AnyContentType, ids: string[], workspaceId: string): Promise<BulkActionResult>;
+    bulkUnpublish(type: AnyContentType, ids: string[], workspaceId: string, actor?: EventActor): Promise<BulkActionResult>;
     /**
      * Remove many entries — soft-deleting on a `paranoid` type (recoverable
      * from the admin's trash) and hard-deleting otherwise, exactly as
@@ -160,11 +161,11 @@ export declare class PublicEntryWritesService {
      * Rows, not records: on a localized type this deletes the listed locales
      * and leaves their siblings live.
      */
-    bulkRemove(type: AnyContentType, ids: string[], workspaceId: string): Promise<BulkActionResult>;
+    bulkRemove(type: AnyContentType, ids: string[], workspaceId: string, actor?: EventActor): Promise<BulkActionResult>;
     /** Take an entry live. 422 when the stored draft no longer validates. */
-    publish(type: AnyContentType, locator: EntryLocator, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string): Promise<PublicEntry>;
+    publish(type: AnyContentType, locator: EntryLocator, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string, actor?: EventActor): Promise<PublicEntry>;
     /** Take an entry back off the air, reverting it to a draft. */
-    unpublish(type: AnyContentType, locator: EntryLocator, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string): Promise<PublicEntry>;
+    unpublish(type: AnyContentType, locator: EntryLocator, workspaceId: string, grantedTypes: ReadonlySet<string>, locale?: string, actor?: EventActor): Promise<PublicEntry>;
     /**
      * Remove an entry — soft delete on a `paranoid` type (recoverable from the
      * admin's trash), a hard delete otherwise. Either way it leaves the public
@@ -174,7 +175,7 @@ export declare class PublicEntryWritesService {
      * German article leaves the English one live. Deleting a whole group means
      * deleting each locale.
      */
-    remove(type: AnyContentType, locator: EntryLocator, workspaceId: string, locale?: string): Promise<void>;
+    remove(type: AnyContentType, locator: EntryLocator, workspaceId: string, locale?: string, actor?: EventActor): Promise<void>;
     /**
      * Re-read a just-written row through the public projection.
      *

package/dist/lib/public-api/infrastructure/public-entry-writes.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-entry-writes.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/public-api/infrastructure/public-entry-writes.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+DAA+D,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8DAA8D,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,MAAM,mEAAmE,CAAC;AAC9G,OAAO,EAAE,2BAA2B,EAAE,MAAM,qEAAqE,CAAC;AAClH,OAAO,KAAK,EACR,gBAAgB,EAChB,iBAAiB,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAKH,KAAK,oBAAoB,EAC5B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBACa,wBAAwB;IAE7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBALpB,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,kBAAkB,EAC3B,YAAY,EAAE,mBAAmB,EACjC,cAAc,EAAE,qBAAqB,EACrC,kBAAkB,EAAE,yBAAyB,EAC7C,oBAAoB,EAAE,2BAA2B;IAGtE;;;;;;;;OAQG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,kBAAkB,EACxB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAClC,OAAO,CAAC,WAAW,CAAC;IAkBvB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,kBAAkB,EACxB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC;IAwBvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,QAAQ,CACV,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,SAAS,qBAAqB,EAAE,EACvC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAClC,OAAO,CAAC,oBAAoB,CAAC;IAoDhC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,YAAY;IAqBpB;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CACP,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,CAAC;IAI7B;;;;;;;;OAQG;IACH,aAAa,CACT,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAI5B;;;;;;;OAOG;IACH,UAAU,CACN,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAI5B,yEAAyE;IACnE,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC;IAYvB,+DAA+D;IACzD,SAAS,CACX,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC;IAYvB;;;;;;;;OAQG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC;IAUhB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ;CAenB"}
+{"version":3,"file":"public-entry-writes.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/public-api/infrastructure/public-entry-writes.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+DAA+D,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8DAA8D,CAAC;AACrG,OAAO,EAAE,yBAAyB,EAAE,MAAM,mEAAmE,CAAC;AAC9G,OAAO,EAAE,2BAA2B,EAAE,MAAM,qEAAqE,CAAC;AAClH,OAAO,KAAK,EACR,gBAAgB,EAChB,iBAAiB,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAKH,KAAK,oBAAoB,EAC5B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBACa,wBAAwB;IAE7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBALpB,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,kBAAkB,EAC3B,YAAY,EAAE,mBAAmB,EACjC,cAAc,EAAE,qBAAqB,EACrC,kBAAkB,EAAE,yBAAyB,EAC7C,oBAAoB,EAAE,2BAA2B;IAGtE;;;;;;;;OAQG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,kBAAkB,EACxB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,WAAW,CAAC;IAiBvB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,kBAAkB,EACxB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,WAAW,CAAC;IAwBvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,QAAQ,CACV,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,SAAS,qBAAqB,EAAE,EACvC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,oBAAoB,CAAC;IAsDhC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,YAAY;IAqBpB;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CACP,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,iBAAiB,CAAC;IAI7B;;;;;;;;OAQG;IACH,aAAa,CACT,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,gBAAgB,CAAC;IAI5B;;;;;;;OAOG;IACH,UAAU,CACN,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EAAE,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,gBAAgB,CAAC;IAI5B,yEAAyE;IACnE,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,WAAW,CAAC;IAYvB,+DAA+D;IACzD,SAAS,CACX,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,WAAW,CAAC;IAYvB;;;;;;;;OAQG;IACG,MAAM,CACR,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,IAAI,CAAC;IAehB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ;CAenB"}

package/dist/lib/public-api/infrastructure/public-entry-writes.service.js

@@ -65,14 +65,13 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * of starting one, which is how a new locale of an existing record is
      * written.
      */
-    async create(type, body, workspaceId, grantedTypes) {
+    async create(type, body, workspaceId, grantedTypes, actor) {
         const record = await this.writer.create(type, body.values, workspaceId, body.relations, body.locale, body.localeGroupId, 
-        // Revisions record a *user* id, and a token is not a user. Writing
-        // the token id into that column would make the history resolve it to
-        // a nonexistent person; null is the honest answer for "not a user".
-        // Attributing a token's writes is a real gap — it wants its own
-        // column, not a misused one.
-        null);
+        // The **token** is the actor. Its id never reaches the revision's
+        // `created_by` — that column really is a `users` FK, and the writer's
+        // `revisionActorId` is what keeps the two apart — but it does reach
+        // the audit row, which carries an `actor_type` saying what it names.
+        actor ?? null);
         return this.readBack(type, record.id, workspaceId, grantedTypes, body);
     }
     /**
@@ -100,7 +99,7 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * group write at the default-locale row. Which is exactly what it did, until
      * a live check caught a German update rewriting the English article.
      */
-    async update(type, locator, body, workspaceId, grantedTypes, locale) {
+    async update(type, locator, body, workspaceId, grantedTypes, locale, actor) {
         const row = await this.entries.resolveWritableRow(type, locator, workspaceId, locale);
         const id = row['id'];
         await this.writer.update(type, id, 
@@ -109,7 +108,7 @@ let PublicEntryWritesService = class PublicEntryWritesService {
         // column and are absent from it, which is correct: those move only
         // through `relations` deltas, and a delta left unsent changes
         // nothing by construction.
-        this.mergedValues(type, row, body), workspaceId, body.relations, null);
+        this.mergedValues(type, row, body), workspaceId, body.relations, actor ?? null);
         return this.readBack(type, id, workspaceId, grantedTypes, { locale });
     }
     /**
@@ -141,7 +140,7 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * would spend a fan-out contending with itself; sequential also makes the
      * per-item results deterministic, which a caller diffing two runs relies on.
      */
-    async bulkSave(type, items, workspaceId, grantedTypes) {
+    async bulkSave(type, items, workspaceId, grantedTypes, actor) {
         const results = [];
         for (const [index, item] of items.entries()) {
             // Resolved inside the loop, and inside the try: a malformed
@@ -154,8 +153,8 @@ let PublicEntryWritesService = class PublicEntryWritesService {
                 const resolved = (0, bulk_save_op_1.resolveBulkSaveOp)(item);
                 op = resolved.op;
                 const entry = resolved.op === public_bulk_1.BULK_SAVE_OP.Create
-                    ? await this.create(type, item, workspaceId, grantedTypes)
-                    : await this.update(type, resolved.locator, item, workspaceId, grantedTypes, resolved.locale);
+                    ? await this.create(type, item, workspaceId, grantedTypes, actor)
+                    : await this.update(type, resolved.locator, item, workspaceId, grantedTypes, resolved.locale, actor);
                 results.push({ index, op: resolved.op, ok: true, entry });
             }
             catch (error) {
@@ -215,8 +214,8 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * workspace-scoped, so an id from another workspace is reported as
      * `not-found` — the same answer an id that never existed gets.
      */
-    bulkPublish(type, ids, workspaceId) {
-        return this.bulkPublishEntries.execute(type, ids, workspaceId);
+    bulkPublish(type, ids, workspaceId, actor) {
+        return this.bulkPublishEntries.execute(type, ids, workspaceId, actor);
     }
     /**
      * Take many entries off the air, reverting each to a draft.
@@ -227,8 +226,8 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * actually transitioned, and one `entry.unpublished` event is emitted per
      * transition — never per submitted id.
      */
-    bulkUnpublish(type, ids, workspaceId) {
-        return this.bulkUnpublishEntries.execute(type, ids, workspaceId);
+    bulkUnpublish(type, ids, workspaceId, actor) {
+        return this.bulkUnpublishEntries.execute(type, ids, workspaceId, actor);
     }
     /**
      * Remove many entries — soft-deleting on a `paranoid` type (recoverable
@@ -238,21 +237,21 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * Rows, not records: on a localized type this deletes the listed locales
      * and leaves their siblings live.
      */
-    bulkRemove(type, ids, workspaceId) {
-        return this.writer.bulkRemove(type, ids, workspaceId);
+    bulkRemove(type, ids, workspaceId, actor) {
+        return this.writer.bulkRemove(type, ids, workspaceId, actor);
     }
     /** Take an entry live. 422 when the stored draft no longer validates. */
-    async publish(type, locator, workspaceId, grantedTypes, locale) {
+    async publish(type, locator, workspaceId, grantedTypes, locale, actor) {
         const row = await this.entries.resolveWritableRow(type, locator, workspaceId, locale);
         const id = row['id'];
-        await this.publishEntry.execute(type, id, workspaceId);
+        await this.publishEntry.execute(type, id, workspaceId, actor);
         return this.readBack(type, id, workspaceId, grantedTypes, { locale });
     }
     /** Take an entry back off the air, reverting it to a draft. */
-    async unpublish(type, locator, workspaceId, grantedTypes, locale) {
+    async unpublish(type, locator, workspaceId, grantedTypes, locale, actor) {
         const row = await this.entries.resolveWritableRow(type, locator, workspaceId, locale);
         const id = row['id'];
-        await this.unpublishEntry.execute(type, id, workspaceId);
+        await this.unpublishEntry.execute(type, id, workspaceId, actor);
         return this.readBack(type, id, workspaceId, grantedTypes, { locale });
     }
     /**
@@ -264,9 +263,9 @@ let PublicEntryWritesService = class PublicEntryWritesService {
      * German article leaves the English one live. Deleting a whole group means
      * deleting each locale.
      */
-    async remove(type, locator, workspaceId, locale) {
+    async remove(type, locator, workspaceId, locale, actor) {
         const row = await this.entries.resolveWritableRow(type, locator, workspaceId, locale);
-        await this.writer.remove(type, row['id'], workspaceId);
+        await this.writer.remove(type, row['id'], workspaceId, actor);
     }
     /**
      * Re-read a just-written row through the public projection.

package/dist/lib/public-api/infrastructure/token-actor.d.ts

@@ -0,0 +1,37 @@
+import { type EventActor } from '@orthacms/database';
+import type { ToolActor } from '@orthacms/tools-server';
+import type { PublicApiToken } from '../http/api-token-request';
+/**
+ * The API token as the {@link EventActor} a public-API write stamps onto its
+ * domain events.
+ *
+ * Every write over the public REST API, GraphQL and MCP used to reach the audit
+ * log with no actor at all and render as "System" — not an oversight but the
+ * only honest option at the time, since `actor_id` meant "a `users` row" and a
+ * token is not one. `activity_events.actor_type` is what makes naming the
+ * credential possible, so this is the seam that fills it.
+ *
+ * `email` carries the token's **label**, because that is the readable name a
+ * row needs and a token has no address; `actor_type` is what tells a client not
+ * to read it as one. The token id goes in `id` — the same handle the API Tokens
+ * page lists and the revoke button acts on, so a row leads straight to the
+ * credential it names.
+ *
+ * A revision's `created_by` still gets `null` for a token: that column really is
+ * a `users` FK. The split lives in `EntryWriterService`'s `revisionActorId`.
+ */
+export declare function toTokenActor(token: PublicApiToken): EventActor;
+/**
+ * The {@link EventActor} for a write made through the shared **tool registry** —
+ * an MCP client, or the copilot's own run loop.
+ *
+ * `ToolActor` already carries the distinction this needs (`kind`, `id`,
+ * `displayName`), which is the point of it being transport-neutral: one
+ * conversion covers both surfaces, and neither had any actor on its writes
+ * before. A token acts as itself here exactly as it does over REST — the
+ * minting user in `actor.userId` is attribution for a revision's `created_by`,
+ * not the principal that performed the call, and conflating them would name a
+ * person for every request an integration makes.
+ */
+export declare function toToolEventActor(actor: ToolActor): EventActor;
+//# sourceMappingURL=token-actor.d.ts.map

package/dist/lib/public-api/infrastructure/token-actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-actor.d.ts","sourceRoot":"","sources":["../../../../src/lib/public-api/infrastructure/token-actor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,cAAc,GAAG,UAAU,CAO9D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,GAAG,UAAU,CAa7D"}

package/dist/lib/public-api/infrastructure/token-actor.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toTokenActor = toTokenActor;
+exports.toToolEventActor = toToolEventActor;
+const database_1 = require("@orthacms/database");
+/**
+ * The API token as the {@link EventActor} a public-API write stamps onto its
+ * domain events.
+ *
+ * Every write over the public REST API, GraphQL and MCP used to reach the audit
+ * log with no actor at all and render as "System" — not an oversight but the
+ * only honest option at the time, since `actor_id` meant "a `users` row" and a
+ * token is not one. `activity_events.actor_type` is what makes naming the
+ * credential possible, so this is the seam that fills it.
+ *
+ * `email` carries the token's **label**, because that is the readable name a
+ * row needs and a token has no address; `actor_type` is what tells a client not
+ * to read it as one. The token id goes in `id` — the same handle the API Tokens
+ * page lists and the revoke button acts on, so a row leads straight to the
+ * credential it names.
+ *
+ * A revision's `created_by` still gets `null` for a token: that column really is
+ * a `users` FK. The split lives in `EntryWriterService`'s `revisionActorId`.
+ */
+function toTokenActor(token) {
+    return {
+        id: token.id,
+        email: token.name,
+        type: database_1.EVENT_ACTOR_TYPE.ApiToken,
+        label: token.name
+    };
+}
+/**
+ * The {@link EventActor} for a write made through the shared **tool registry** —
+ * an MCP client, or the copilot's own run loop.
+ *
+ * `ToolActor` already carries the distinction this needs (`kind`, `id`,
+ * `displayName`), which is the point of it being transport-neutral: one
+ * conversion covers both surfaces, and neither had any actor on its writes
+ * before. A token acts as itself here exactly as it does over REST — the
+ * minting user in `actor.userId` is attribution for a revision's `created_by`,
+ * not the principal that performed the call, and conflating them would name a
+ * person for every request an integration makes.
+ */
+function toToolEventActor(actor) {
+    return actor.kind === 'token'
+        ? {
+            id: actor.id,
+            email: actor.displayName,
+            type: database_1.EVENT_ACTOR_TYPE.ApiToken,
+            label: actor.displayName
+        }
+        : {
+            id: actor.id,
+            email: actor.displayName,
+            type: database_1.EVENT_ACTOR_TYPE.User
+        };
+}

package/dist/lib/revisions/application/use-cases/restore-revision.use-case.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"restore-revision.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/revisions/application/use-cases/restore-revision.use-case.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kEAAkE,CAAC;AACtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAEH,KAAK,aAAa,EACrB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;GASG;AACH,qBACa,sBAAsB;IAE3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACA,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAD5B,MAAM,EAAE,kBAAkB,EACH,KAAK,EAAE,aAAa;IAG1D,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM;IACnB;;;;OAIG;IACH,KAAK,EAAE,UAAU,GAAG,IAAI,EACxB,OAAO,CAAC,EAAE;QACN;;;;;WAKG;QACH,cAAc,CAAC,EAAE,OAAO,CAAC;KAC5B,GACF,OAAO,CAAC,WAAW,CAAC;CA0C1B"}
+{"version":3,"file":"restore-revision.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/revisions/application/use-cases/restore-revision.use-case.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kEAAkE,CAAC;AACtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAEH,KAAK,aAAa,EACrB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;GASG;AACH,qBACa,sBAAsB;IAE3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACA,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAD5B,MAAM,EAAE,kBAAkB,EACH,KAAK,EAAE,aAAa;IAG1D,OAAO,CACT,IAAI,EAAE,cAAc,EACpB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM;IACnB;;;;OAIG;IACH,KAAK,EAAE,UAAU,GAAG,IAAI,EACxB,OAAO,CAAC,EAAE;QACN;;;;;WAKG;QACH,cAAc,CAAC,EAAE,OAAO,CAAC;KAC5B,GACF,OAAO,CAAC,WAAW,CAAC;CAoD1B"}