@rakun-kit/core 1.0.0

package/dist/esm/api/routes/manager/auth/webauthn/webauthnAuthVerify.js

@@ -0,0 +1,83 @@
+import { verifyAuthenticationResponse, } from "@simplewebauthn/server";
+import { ORIGIN, RP_ID, toBase64URL } from "./share";
+import { MfaChallenge, WebAuthnCredential, ManagerUser, Session, } from "../../../../../internal-content-types";
+import { throwAppError } from "../../../../../lib/errors";
+import { getMongoService } from "../../../../../orm";
+export const webauthnAuthVerifyHandler = async ({ input, }) => {
+    const db = await getMongoService();
+    const ch = await db.find(MfaChallenge, { token: input.challengeToken });
+    if (!ch)
+        throw new Error("CHALLENGE_NOT_FOUND");
+    if (ch.method !== "webauthn")
+        throw new Error("WRONG_MFA_METHOD");
+    if (!ch.webAuthnChallenge)
+        throw new Error("MISSING_WEBAUTHN_CHALLENGE");
+    if (ch.consumedAt)
+        throw new Error("CHALLENGE_CONSUMED");
+    if (new Date(ch.expiresAt).getTime() <= Date.now())
+        throw new Error("CHALLENGE_EXPIRED");
+    const userId = ch.user._id;
+    const credIdB64 = Buffer.from(input.response.rawId, "base64url").toString("base64");
+    const legacyDoubleEncodedCredId = Buffer.from(input.response.rawId, "utf8").toString("base64");
+    let cred = await db.find(WebAuthnCredential, {
+        credentialId: input.response.rawId,
+        "user._id": userId,
+    });
+    if (!cred) {
+        cred = await db.find(WebAuthnCredential, {
+            credentialId: credIdB64,
+            "user._id": userId,
+        });
+    }
+    if (!cred) {
+        cred = await db.find(WebAuthnCredential, {
+            credentialId: legacyDoubleEncodedCredId,
+            "user._id": userId,
+        });
+    }
+    if (!cred) {
+        throwAppError("NOT_FOUND", {
+            id: input.response.rawId,
+            resource: "WebAuthnCredential",
+        });
+    }
+    const verification = await verifyAuthenticationResponse({
+        response: input.response,
+        expectedChallenge: ch.webAuthnChallenge,
+        expectedOrigin: ORIGIN,
+        expectedRPID: RP_ID,
+        credential: {
+            id: toBase64URL(cred.credentialId),
+            publicKey: Buffer.from(cred.publicKey, "base64"),
+            counter: Number(cred.counter ?? 0),
+        },
+        requireUserVerification: false,
+    });
+    if (!verification.verified) {
+        throwAppError("INTERNAL", {
+            message: "Authentication failed",
+        });
+    }
+    // actualiza counter
+    await db.update(WebAuthnCredential, cred._id, {
+        counter: verification.authenticationInfo.newCounter,
+    });
+    // consume challenge
+    await db.update(MfaChallenge, ch._id, { consumedAt: new Date() });
+    const token = crypto.randomUUID();
+    const expiresAt = new Date(Date.now() + 1000 * 60 * 60 * 24); // 1 day
+    await db.create(Session, {
+        token,
+        user: {
+            _id: userId,
+            contentType: ManagerUser.name,
+            type: "existing",
+        },
+        expiresAt,
+        _type: "Session",
+    });
+    return {
+        token,
+    };
+};
+//# sourceMappingURL=webauthnAuthVerify.js.map

package/dist/esm/api/routes/manager/auth/webauthn/webauthnAuthVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthnAuthVerify.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/webauthn/webauthnAuthVerify.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,OAAO,GACR,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAAE,EAC9C,KAAK,GAGN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAEnC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChD,IAAI,EAAE,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACzE,IAAI,EAAE,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACzD,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;QAChD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;IAE3B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CACvE,QAAQ,CACT,CAAC;IACF,MAAM,yBAAyB,GAAG,MAAM,CAAC,IAAI,CAC3C,KAAK,CAAC,QAAQ,CAAC,KAAK,EACpB,MAAM,CACP,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE;QAC3C,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;QAClC,UAAU,EAAE,MAAM;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACvC,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACvC,YAAY,EAAE,yBAAyB;YACvC,UAAU,EAAE,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,aAAa,CAAC,WAAW,EAAE;YACzB,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;YACxB,QAAQ,EAAE,oBAAoB;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,4BAA4B,CAAC;QACtD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;QACvC,cAAc,EAAE,MAAM;QACtB,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE;YACV,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;YAChD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;SACnC;QACD,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC3B,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,GAAG,EAAE;QAC5C,OAAO,EAAE,YAAY,CAAC,kBAAkB,CAAC,UAAU;KACpD,CAAC,CAAC;IAEH,oBAAoB;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAElE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ;IAEtE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;QACvB,KAAK;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,MAAM;YACX,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,IAAI,EAAE,UAAU;SACjB;QACD,SAAS;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;KACN,CAAC;AACJ,CAAC,CAAC"}

package/dist/esm/api/routes/manager/auth/webauthn/webauthnRegisterOptions.d.ts

@@ -0,0 +1,10 @@
+import { RakunRequestContext } from "../../../../context";
+import { WebauthnRegisterOptionsInput } from "../../../../../schemas/manager/auth/webauthn/webauthnRegisterOptions";
+export declare const webauthnRegisterOptionsHandler: ({ ctx, input, }: {
+    ctx: RakunRequestContext;
+    input: WebauthnRegisterOptionsInput;
+}) => Promise<{
+    token: string;
+    options: import("@simplewebauthn/server").PublicKeyCredentialCreationOptionsJSON;
+}>;
+//# sourceMappingURL=webauthnRegisterOptions.d.ts.map

package/dist/esm/api/routes/manager/auth/webauthn/webauthnRegisterOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthnRegisterOptions.d.ts","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/webauthn/webauthnRegisterOptions.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,sEAAsE,CAAC;AAIpH,eAAO,MAAM,8BAA8B,GAAU,iBAGlD;IACD,GAAG,EAAE,mBAAmB,CAAC;IACzB,KAAK,EAAE,4BAA4B,CAAC;CACrC;;;EAoDA,CAAC"}

package/dist/esm/api/routes/manager/auth/webauthn/webauthnRegisterOptions.js

@@ -0,0 +1,50 @@
+import { randomBytes } from "crypto";
+import { generateRegistrationOptions } from "@simplewebauthn/server";
+import { RP_ID, toBase64URL } from "./share";
+import { WebAuthnCredential, WebAuthnRegChallenge, ManagerUser, } from "../../../../../internal-content-types";
+import { getMongoService } from "../../../../../orm";
+const RP_NAME = "CMS";
+export const webauthnRegisterOptionsHandler = async ({ ctx, input, }) => {
+    const db = await getMongoService();
+    const user = ctx.getUser();
+    // Excluir credenciales ya registradas
+    const creds = (await db.list(WebAuthnCredential, {
+        filter: {
+            "user._id": user._id,
+        },
+    })).items ?? [];
+    const excludeCredentials = creds.map((c) => ({
+        id: toBase64URL(c.credentialId),
+    }));
+    await db.delete(WebAuthnRegChallenge, {
+        expiresAt: { $lte: new Date() },
+        consumedAt: null,
+    });
+    const options = await generateRegistrationOptions({
+        rpName: RP_NAME,
+        rpID: RP_ID,
+        userID: Uint8Array.from(Buffer.from(String(user._id))),
+        userName: user.email,
+        attestationType: "none",
+        excludeCredentials,
+        userDisplayName: input.deviceName,
+        authenticatorSelection: {
+            userVerification: "preferred",
+            residentKey: "preferred",
+        },
+    });
+    const token = randomBytes(32).toString("hex");
+    const expiresAt = new Date(Date.now() + 1000 * 60 * 5);
+    await db.create(WebAuthnRegChallenge, {
+        token,
+        user: { _id: user._id, contentType: ManagerUser.name, type: "existing" },
+        challenge: options.challenge,
+        expiresAt,
+        _type: "WebAuthnRegChallenge",
+    });
+    return {
+        token,
+        options,
+    };
+};
+//# sourceMappingURL=webauthnRegisterOptions.js.map

package/dist/esm/api/routes/manager/auth/webauthn/webauthnRegisterOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthnRegisterOptions.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/webauthn/webauthnRegisterOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAErE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,GACZ,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAIrD,MAAM,OAAO,GAAG,KAAK,CAAC;AAEtB,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,EAAE,EACnD,GAAG,EACH,KAAK,GAIN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAE3B,sCAAsC;IACtC,MAAM,KAAK,GACT,CACE,MAAM,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE;QAChC,MAAM,EAAE;YACN,UAAU,EAAE,IAAI,CAAC,GAAG;SACrB;KACF,CAAC,CACH,CAAC,KAAK,IAAI,EAAE,CAAC;IAEhB,MAAM,kBAAkB,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;KAChC,CAAC,CAAC,CAAC;IAEJ,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE;QACpC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE;QAC/B,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC;QAChD,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,QAAQ,EAAE,IAAI,CAAC,KAAK;QACpB,eAAe,EAAE,MAAM;QACvB,kBAAkB;QAClB,eAAe,EAAE,KAAK,CAAC,UAAU;QACjC,sBAAsB,EAAE;YACtB,gBAAgB,EAAE,WAAW;YAC7B,WAAW,EAAE,WAAW;SACzB;KACF,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAEvD,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE;QACpC,KAAK;QACL,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;QACxE,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS;QACT,KAAK,EAAE,sBAAsB;KAC9B,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC,CAAC"}

package/dist/esm/api/routes/manager/auth/webauthn/webauthnRegisterVerify.d.ts

@@ -0,0 +1,13 @@
+import { RegistrationResponseJSON } from "@simplewebauthn/server";
+import { RakunRequestContext } from "../../../../context";
+export declare const webauthnRegisterVerifyHandler: ({ ctx, input, }: {
+    ctx: RakunRequestContext;
+    input: {
+        token: string;
+        deviceName: string;
+        response: RegistrationResponseJSON;
+    };
+}) => Promise<{
+    ok: boolean;
+}>;
+//# sourceMappingURL=webauthnRegisterVerify.d.ts.map

package/dist/esm/api/routes/manager/auth/webauthn/webauthnRegisterVerify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthnRegisterVerify.d.ts","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/webauthn/webauthnRegisterVerify.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EAEzB,MAAM,wBAAwB,CAAC;AAWhC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAI1D,eAAO,MAAM,6BAA6B,GAAU,iBAGjD;IACD,GAAG,EAAE,mBAAmB,CAAC;IACzB,KAAK,EAAE;QACL,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,wBAAwB,CAAC;KACpC,CAAC;CACH;;EA+EA,CAAC"}

package/dist/esm/api/routes/manager/auth/webauthn/webauthnRegisterVerify.js

@@ -0,0 +1,76 @@
+import { verifyRegistrationResponse, } from "@simplewebauthn/server";
+import { ORIGIN, RP_ID, toB64 } from "./share";
+import { WebAuthnRegChallenge, WebAuthnCredential, ManagerUser, UserMfa, } from "../../../../../internal-content-types";
+import { throwAppError } from "../../../../../lib/errors";
+import { getMongoService } from "../../../../../orm";
+const toBase64URL = (buf) => buf.toString("base64url");
+export const webauthnRegisterVerifyHandler = async ({ ctx, input, }) => {
+    const db = await getMongoService();
+    const user = ctx.getUser();
+    const reg = await db.find(WebAuthnRegChallenge, { token: input.token });
+    if (!reg) {
+        throwAppError("NOT_FOUND", {
+            id: input.token,
+            resource: "WebAuthnRegChallenge",
+        });
+    }
+    if (reg.user?._id?.toString?.() !== user._id.toString?.()) {
+        throwAppError("FORBIDDEN", {
+            reason: "Challenge does not belong to the user",
+        });
+    }
+    if (reg.consumedAt)
+        throwAppError("CONFLICT", {
+            message: "Challenge already consumed",
+        });
+    if (new Date(reg.expiresAt).getTime() <= Date.now()) {
+        throwAppError("CONFLICT", {
+            message: "Challenge expired",
+        });
+    }
+    const verification = await verifyRegistrationResponse({
+        response: input.response,
+        expectedChallenge: reg.challenge,
+        expectedOrigin: ORIGIN,
+        expectedRPID: RP_ID,
+        requireUserVerification: false,
+    });
+    if (!verification.verified || !verification.registrationInfo) {
+        throwAppError("INTERNAL", {
+            message: "Failed to verify registration response",
+        });
+    }
+    const { id, publicKey, counter } = verification.registrationInfo.credential;
+    await db.create(WebAuthnCredential, {
+        token: crypto.randomUUID?.() ?? input.token + ":cred",
+        user: { _id: user._id, contentType: ManagerUser.name, type: "existing" },
+        // Store credential id in WebAuthn-native base64url format.
+        credentialId: toBase64URL(Buffer.from(id, "base64url")),
+        publicKey: toB64(Buffer.from(publicKey)),
+        counter: Number(counter ?? 0),
+        deviceName: input.deviceName,
+        _type: "WebAuthnCredential",
+    });
+    await db.update(WebAuthnRegChallenge, reg._id, { consumedAt: new Date() });
+    let mfa = await db.find(UserMfa, { "user._id": user._id });
+    if (!mfa) {
+        mfa = await db.create(UserMfa, {
+            user: { _id: user._id, contentType: ManagerUser.name, type: "existing" },
+            enabled: true,
+            preferredMethod: "webauthn",
+            _type: "UserMfa",
+        });
+    }
+    else {
+        await db.update(UserMfa, mfa._id, {
+            enabled: true,
+            preferredMethod: "webauthn",
+            totpSecretPending: null,
+        });
+    }
+    await db.update(ManagerUser, user._id, {
+        twoFactorEnabled: true,
+    });
+    return { ok: true };
+};
+//# sourceMappingURL=webauthnRegisterVerify.js.map

package/dist/esm/api/routes/manager/auth/webauthn/webauthnRegisterVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthnRegisterVerify.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/webauthn/webauthnRegisterVerify.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,WAAW,EACX,OAAO,GACR,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,EAAE,EAClD,GAAG,EACH,KAAK,GAQN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAE3B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,aAAa,CAAC,WAAW,EAAE;YACzB,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,QAAQ,EAAE,sBAAsB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC1D,aAAa,CAAC,WAAW,EAAE;YACzB,MAAM,EAAE,uCAAuC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,UAAU;QAChB,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,4BAA4B;SACtC,CAAC,CAAC;IAEL,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpD,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,mBAAmB;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC;QACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,GAAG,CAAC,SAAS;QAChC,cAAc,EAAE,MAAM;QACtB,YAAY,EAAE,KAAK;QACnB,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC7D,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,gBAAgB,CAAC,UAAU,CAAC;IAE5E,MAAM,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE;QAClC,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,KAAK,CAAC,KAAK,GAAG,OAAO;QACrD,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;QACxE,2DAA2D;QAC3D,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACvD,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,oBAAoB;KAC5B,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAE3E,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;YAC7B,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;YACxE,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,UAAU;YAC3B,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,UAAU;YAC3B,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrC,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC,CAAC"}

package/dist/esm/api/routes/manager/create.d.ts

@@ -0,0 +1,15 @@
+import { RakunRequestContext } from "../../context";
+import { CreateInput } from "../../../schemas/manager/create";
+export declare const createHandler: ({ input, ctx, }: {
+    input: CreateInput;
+    ctx: RakunRequestContext;
+}) => Promise<{
+    [x: string]: unknown;
+    _id: string;
+    _type: string;
+    createdAt?: Date | undefined;
+    updatedAt?: Date | undefined;
+    createdBy?: string | undefined;
+    updatedBy?: string | undefined;
+}>;
+//# sourceMappingURL=create.d.ts.map

package/dist/esm/api/routes/manager/create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/manager/create.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAM9D,eAAO,MAAM,aAAa,GAAU,iBAGjC;IACD,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;;;;;;;EAwEA,CAAC"}

package/dist/esm/api/routes/manager/create.js

@@ -0,0 +1,71 @@
+import { z } from "zod";
+import { throwAppError } from "../../../lib/errors";
+import { Logger } from "../../../lib/Logger";
+import { getContentTypeByName } from "../../../lib/Registry";
+import { getMongoService } from "../../../orm";
+import { DbErrorInvalidData, DbErrorConflict } from "../../../orm/dbService";
+import { checkPermissions } from "../../utils/checkPermissions";
+import { checkRevalidatePath } from "../../utils/routes/revalidatePath";
+import { getInputProxy } from "../../proxies";
+export const createHandler = async ({ input, ctx, }) => {
+    Logger.addTrace("manager.create: handler start", {
+        contentType: input.contentType,
+    });
+    const db = await getMongoService();
+    Logger.addTrace("manager.create: mongo service ready");
+    const { contentType: contentTypeName, data } = input;
+    const user = ctx.getUser();
+    Logger.addTrace("manager.create: user resolved", { userId: user._id });
+    const contentType = getContentTypeByName(contentTypeName);
+    if (!contentType) {
+        throwAppError("NOT_FOUND", {
+            resource: "ContentType",
+            id: contentTypeName,
+        });
+    }
+    checkPermissions(user, [`content.${contentTypeName}.own`]);
+    Logger.addTrace("manager.create: permissions checked");
+    if (contentType.name === "Route") {
+        throwAppError("FORBIDDEN", {
+            reason: "Routes are defined in the API and cannot be created from manager",
+        });
+    }
+    try {
+        const parsedInput = contentType.validate({
+            ...data,
+            createdBy: user._id,
+            updatedBy: user._id,
+        });
+        Logger.addTrace("manager.create: input validated");
+        const inputProxy = getInputProxy(contentType.name);
+        let proxied = parsedInput;
+        if (inputProxy) {
+            proxied = await inputProxy(parsedInput);
+            Logger.addTrace("manager.create: input proxied");
+        }
+        const created = await db.create(contentType, proxied);
+        Logger.addTrace("manager.create: db create success", { id: created._id });
+        await checkRevalidatePath({
+            contentType: contentType.name,
+            contentTypeId: created._id,
+            operation: "create",
+        });
+        Logger.addTrace("manager.create: revalidate done");
+        return created;
+    }
+    catch (error) {
+        if (error instanceof z.ZodError || error instanceof DbErrorInvalidData) {
+            throwAppError("VALIDATION", {
+                errors: error.issues,
+            });
+        }
+        if (error instanceof DbErrorConflict) {
+            throwAppError("CONFLICT", {
+                message: error.message,
+                key: error.details,
+            });
+        }
+        throw error;
+    }
+};
+//# sourceMappingURL=create.js.map

package/dist/esm/api/routes/manager/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,EAClC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE;QAC/C,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACnC,MAAM,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;IACvD,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,aAAa,CAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,aAAa;YACvB,EAAE,EAAE,eAAe;SACpB,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,IAAI,EAAE,CAAC,WAAW,eAAe,MAAoB,CAAC,CAAC,CAAC;IACzE,MAAM,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;IAEvD,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,aAAa,CAAC,WAAW,EAAE;YACzB,MAAM,EACJ,kEAAkE;SACrE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC;YACvC,GAAG,IAAI;YACP,SAAS,EAAE,IAAI,CAAC,GAAG;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QAEnD,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAEnD,IAAI,OAAO,GAAG,WAAW,CAAC;QAE1B,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,CAAC,QAAQ,CAAC,mCAAmC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAE1E,MAAM,mBAAmB,CAAC;YACxB,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,aAAa,EAAE,OAAO,CAAC,GAAG;YAC1B,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QAEnD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACvE,aAAa,CAAC,YAAY,EAAE;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;YACrC,aAAa,CAAC,UAAU,EAAE;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,EAAE,KAAK,CAAC,OAAiB;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC"}

package/dist/esm/api/routes/manager/delete.d.ts

@@ -0,0 +1,9 @@
+import { RakunRequestContext } from "../../context";
+import { DeleteInput } from "../../../schemas/manager/delete";
+export declare const deleteHandler: ({ input, ctx, }: {
+    input: DeleteInput;
+    ctx: RakunRequestContext;
+}) => Promise<{
+    ok: boolean;
+}>;
+//# sourceMappingURL=delete.d.ts.map

package/dist/esm/api/routes/manager/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/manager/delete.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAI9D,eAAO,MAAM,aAAa,GAAU,iBAGjC;IACD,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;EA0FA,CAAC"}

package/dist/esm/api/routes/manager/delete.js

@@ -0,0 +1,86 @@
+import { Media } from "../../../internal-content-types";
+import { throwAppError } from "../../../lib/errors";
+import { Logger } from "../../../lib/Logger";
+import { getContentTypeByName } from "../../../lib/Registry";
+import { getMediaService } from "../../../media";
+import { getMongoService } from "../../../orm";
+import { checkOwnership } from "../../utils/checkOwnership";
+import { checkRevalidatePath } from "../../utils/routes/revalidatePath";
+export const deleteHandler = async ({ input, ctx, }) => {
+    Logger.addTrace("manager.delete: handler start", {
+        contentType: input.contentType,
+        id: input.id,
+    });
+    const db = await getMongoService();
+    Logger.addTrace("manager.delete: mongo service ready");
+    const { contentType: contentTypeName, id } = input;
+    const contentType = getContentTypeByName(contentTypeName);
+    if (!contentType) {
+        throwAppError("NOT_FOUND", {
+            resource: "ContentType",
+            id: contentTypeName,
+        });
+    }
+    await checkOwnership({
+        ctx,
+        contentType,
+        id,
+        permission: "deleteAny",
+    });
+    Logger.addTrace("manager.delete: ownership checked");
+    if (contentType.name === "Route") {
+        throwAppError("FORBIDDEN", {
+            reason: "Routes are defined in the API and cannot be deleted from manager",
+        });
+    }
+    const dependencies = await db.findDependencies(contentType, id);
+    Logger.addTrace("manager.delete: dependencies resolved", {
+        count: dependencies.length,
+    });
+    if (dependencies.length > 0) {
+        throwAppError("CONFLICT", {
+            message: `Cannot delete item. It is referenced by other items: ${dependencies
+                .map((dep) => `${dep.contentType} (${dep._id})`)
+                .join(", ")}`,
+            key: "DEPENDENCIES_FOUND",
+        });
+    }
+    let mediaToDelete = null;
+    if (contentType.name === Media.name) {
+        mediaToDelete = await db.get(Media, id);
+        Logger.addTrace("manager.delete: media record loaded for storage cleanup", {
+            exists: !!mediaToDelete,
+        });
+    }
+    await db.delete(contentType, { _id: id });
+    Logger.addTrace("manager.delete: db delete success");
+    await checkRevalidatePath({
+        contentType: contentType.name,
+        contentTypeId: id,
+        operation: "delete",
+    });
+    Logger.addTrace("manager.delete: revalidate done");
+    if (mediaToDelete) {
+        try {
+            const mediaService = getMediaService();
+            const keysToDelete = Array.from(new Set([mediaToDelete.key, mediaToDelete.previewKey].filter(Boolean)));
+            for (const key of keysToDelete) {
+                await mediaService.rawAdapter.deleteObject({
+                    key,
+                    access: mediaToDelete.access,
+                });
+            }
+            Logger.addTrace("manager.delete: media storage objects deleted", {
+                count: keysToDelete.length,
+            });
+        }
+        catch (error) {
+            Logger.error("Failed to delete media from storage after DB deletion", {
+                mediaId: mediaToDelete._id,
+                error: error.message,
+            });
+        }
+    }
+    return { ok: true };
+};
+//# sourceMappingURL=delete.js.map

package/dist/esm/api/routes/manager/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iCAAiC,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,EAClC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE;QAC/C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACnC,MAAM,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;IACvD,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACnD,MAAM,WAAW,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,aAAa,CAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,aAAa;YACvB,EAAE,EAAE,eAAe;SACpB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,CAAC;QACnB,GAAG;QACH,WAAW;QACX,EAAE;QACF,UAAU,EAAE,WAAW;KACxB,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAErD,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,aAAa,CAAC,WAAW,EAAE;YACzB,MAAM,EACJ,kEAAkE;SACrE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,QAAQ,CAAC,uCAAuC,EAAE;QACvD,KAAK,EAAE,YAAY,CAAC,MAAM;KAC3B,CAAC,CAAC;IAEH,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,wDAAwD,YAAY;iBAC1E,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,EAAE;YACf,GAAG,EAAE,oBAAoB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,aAAa,GAA2B,IAAI,CAAC;IAEjD,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QACpC,aAAa,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,yDAAyD,EAAE;YACzE,MAAM,EAAE,CAAC,CAAC,aAAa;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAErD,MAAM,mBAAmB,CAAC;QACxB,WAAW,EAAE,WAAW,CAAC,IAAI;QAC7B,aAAa,EAAE,EAAE;QACjB,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;IAEnD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;YACvC,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAC3D,CAAC;YAEd,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,MAAM,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC;oBACzC,GAAG;oBACH,MAAM,EAAE,aAAa,CAAC,MAAM;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,QAAQ,CAAC,+CAA+C,EAAE;gBAC/D,KAAK,EAAE,YAAY,CAAC,MAAM;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;gBACpE,OAAO,EAAE,aAAa,CAAC,GAAG;gBAC1B,KAAK,EAAG,KAAe,CAAC,OAAO;aAChC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC,CAAC"}

package/dist/esm/api/routes/manager/get.d.ts

@@ -0,0 +1,15 @@
+import { RakunRequestContext } from "../../context";
+import { GetInput } from "../../../schemas/manager/get";
+export declare const getHandler: ({ input, ctx, }: {
+    input: GetInput;
+    ctx: RakunRequestContext;
+}) => Promise<{
+    [x: string]: unknown;
+    _id: string;
+    _type: string;
+    createdAt?: Date | undefined;
+    updatedAt?: Date | undefined;
+    createdBy?: string | undefined;
+    updatedBy?: string | undefined;
+}>;
+//# sourceMappingURL=get.d.ts.map

package/dist/esm/api/routes/manager/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/manager/get.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAIxD,eAAO,MAAM,UAAU,GAAU,iBAG9B;IACD,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;;;;;;;EAuCA,CAAC"}

package/dist/esm/api/routes/manager/get.js

@@ -0,0 +1,44 @@
+import { throwAppError } from "../../../lib/errors";
+import { Logger } from "../../../lib/Logger";
+import { getContentTypeByName } from "../../../lib/Registry";
+import { getMongoService } from "../../../orm";
+import { checkOwnership } from "../../utils/checkOwnership";
+import { syncConfiguredRoutes } from "../../utils/routes/syncConfiguredRoutes";
+export const getHandler = async ({ input, ctx, }) => {
+    Logger.addTrace("manager.get: handler start", {
+        contentType: input.contentType,
+        id: input.id,
+    });
+    const db = await getMongoService();
+    Logger.addTrace("manager.get: mongo service ready");
+    const { contentType: contentTypeName, id } = input;
+    const contentType = getContentTypeByName(contentTypeName);
+    await checkOwnership({
+        ctx,
+        contentType,
+        id,
+        permission: "readAny",
+    });
+    Logger.addTrace("manager.get: ownership checked");
+    if (!contentType) {
+        throwAppError("NOT_FOUND", {
+            resource: "ContentType",
+            id: contentTypeName,
+        });
+    }
+    if (contentType.name === "Route") {
+        await syncConfiguredRoutes();
+    }
+    try {
+        const item = await db.get(contentType, id);
+        Logger.addTrace("manager.get: db get success", { found: !!item });
+        return item;
+    }
+    catch (_) {
+        throwAppError("NOT_FOUND", {
+            resource: contentTypeName,
+            id,
+        });
+    }
+};
+//# sourceMappingURL=get.js.map

package/dist/esm/api/routes/manager/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAE/E,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,EAC/B,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,CAAC,QAAQ,CAAC,4BAA4B,EAAE;QAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACnC,MAAM,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC;IACpD,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACnD,MAAM,WAAW,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IAE1D,MAAM,cAAc,CAAC;QACnB,GAAG;QACH,WAAW;QACX,EAAE;QACF,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IAElD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,aAAa,CAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,aAAa;YACvB,EAAE,EAAE,eAAe;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,oBAAoB,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,aAAa,CAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,eAAe;YACzB,EAAE;SACH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC"}

package/dist/esm/api/routes/manager/list.d.ts

@@ -0,0 +1,13 @@
+import { RakunRequestContext } from "../../context";
+import { ListInput } from "../../../schemas/manager/list";
+export declare const listHandler: ({ input, ctx, }: {
+    input: ListInput;
+    ctx: RakunRequestContext;
+}) => Promise<{
+    totalItems: number;
+    items: {
+        [x: string]: unknown;
+        _id: string;
+    }[];
+}>;
+//# sourceMappingURL=list.d.ts.map

package/dist/esm/api/routes/manager/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/manager/list.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAK1D,eAAO,MAAM,WAAW,GAAU,iBAG/B;IACD,KAAK,EAAE,SAAS,CAAC;IACjB,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;WAmDS;QACJ,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;KACb,EAAE;EAEN,CAAC"}

package/dist/esm/api/routes/manager/list.js

@@ -0,0 +1,51 @@
+import { throwAppError } from "../../../lib/errors";
+import { Logger } from "../../../lib/Logger";
+import { hasPermissions } from "../../../lib/Permissions";
+import { getContentTypeByName } from "../../../lib/Registry";
+import { getMongoService } from "../../../orm";
+import { checkAnyPermissions } from "../../utils/checkPermissions";
+import { populateRelations } from "../../utils/populates/populateRelations";
+import { syncConfiguredRoutes } from "../../utils/routes/syncConfiguredRoutes";
+export const listHandler = async ({ input, ctx, }) => {
+    Logger.addTrace("manager.list: handler start", {
+        contentType: input.contentType,
+    });
+    const db = await getMongoService();
+    Logger.addTrace("manager.list: mongo service ready");
+    const { contentType: contentTypeName, query } = input;
+    const contentType = getContentTypeByName(contentTypeName);
+    const user = ctx.getUser();
+    Logger.addTrace("manager.list: user resolved", { userId: user._id });
+    if (!contentType) {
+        throwAppError("NOT_FOUND", {
+            resource: "ContentType",
+            id: contentTypeName,
+        });
+    }
+    checkAnyPermissions(user, [
+        `content.${contentTypeName}.own`,
+        `content.${contentTypeName}.readAny`,
+    ]);
+    Logger.addTrace("manager.list: permissions checked");
+    if (!hasPermissions(user, [`content.${contentTypeName}.readAny`])) {
+        Logger.addTrace("manager.list: applying own filter");
+        query.filter = {
+            ...query.filter,
+            createdBy: user._id,
+        };
+    }
+    if (contentType.name === "Route" ||
+        contentType.name === "RouteLayoutModule" ||
+        contentType.name === "RouteLayoutModuleOverride") {
+        await syncConfiguredRoutes();
+    }
+    const raw = await db.list(contentType, query);
+    Logger.addTrace("manager.list: db list success", {
+        totalItems: raw.totalItems,
+    });
+    return {
+        totalItems: raw.totalItems,
+        items: (await Promise.all(raw.items.map((item) => populateRelations(item)))),
+    };
+};
+//# sourceMappingURL=list.js.map

package/dist/esm/api/routes/manager/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAc,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAE/E,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,EAChC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE;QAC7C,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACnC,MAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IACrD,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACtD,MAAM,WAAW,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAErE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,aAAa,CAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,aAAa;YACvB,EAAE,EAAE,eAAe;SACpB,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,IAAI,EAAE;QACxB,WAAW,eAAe,MAAoB;QAC9C,WAAW,eAAe,UAAwB;KACnD,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAErD,IACE,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,WAAW,eAAe,UAAwB,CAAC,CAAC,EAC3E,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;QACrD,KAAK,CAAC,MAAM,GAAG;YACb,GAAG,KAAK,CAAC,MAAM;YACf,SAAS,EAAE,IAAI,CAAC,GAAG;SACpB,CAAC;IACJ,CAAC;IAED,IACE,WAAW,CAAC,IAAI,KAAK,OAAO;QAC5B,WAAW,CAAC,IAAI,KAAK,mBAAmB;QACxC,WAAW,CAAC,IAAI,KAAK,2BAA2B,EAChD,CAAC;QACD,MAAM,oBAAoB,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE;QAC/C,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC,CAAC;IAEH,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,CAAC,MAAM,OAAO,CAAC,GAAG,CACvB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CACjD,CAGE;KACJ,CAAC;AACJ,CAAC,CAAC"}

package/dist/esm/api/routes/manager/literals/list.d.ts

@@ -0,0 +1,7 @@
+import { RakunRequestContext } from "../../../context";
+import { ListLiteralsInput, ListLiteralsOutput } from "../../../../schemas/manager/literals/list";
+export declare const listLiteralsHandler: ({ input, ctx, }: {
+    input: ListLiteralsInput;
+    ctx: RakunRequestContext;
+}) => Promise<ListLiteralsOutput>;
+//# sourceMappingURL=list.d.ts.map

package/dist/esm/api/routes/manager/literals/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/literals/list.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,2CAA2C,CAAC;AAUnD,eAAO,MAAM,mBAAmB,GAAU,iBAGvC;IACD,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,mBAAmB,CAAC;CAC1B,KAAG,OAAO,CAAC,kBAAkB,CA6E7B,CAAC"}