@rakun-kit/core 1.0.0

package/dist/cjs/api/routes/manager/auth/webauthn/webauthnAuthVerify.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webauthnAuthVerifyHandler = void 0;
+const server_1 = require("@simplewebauthn/server");
+const share_1 = require("./share");
+const internal_content_types_1 = require("../../../../../internal-content-types");
+const errors_1 = require("../../../../../lib/errors");
+const orm_1 = require("../../../../../orm");
+const webauthnAuthVerifyHandler = async ({ input, }) => {
+    const db = await (0, orm_1.getMongoService)();
+    const ch = await db.find(internal_content_types_1.MfaChallenge, { token: input.challengeToken });
+    if (!ch)
+        throw new Error("CHALLENGE_NOT_FOUND");
+    if (ch.method !== "webauthn")
+        throw new Error("WRONG_MFA_METHOD");
+    if (!ch.webAuthnChallenge)
+        throw new Error("MISSING_WEBAUTHN_CHALLENGE");
+    if (ch.consumedAt)
+        throw new Error("CHALLENGE_CONSUMED");
+    if (new Date(ch.expiresAt).getTime() <= Date.now())
+        throw new Error("CHALLENGE_EXPIRED");
+    const userId = ch.user._id;
+    const credIdB64 = Buffer.from(input.response.rawId, "base64url").toString("base64");
+    const legacyDoubleEncodedCredId = Buffer.from(input.response.rawId, "utf8").toString("base64");
+    let cred = await db.find(internal_content_types_1.WebAuthnCredential, {
+        credentialId: input.response.rawId,
+        "user._id": userId,
+    });
+    if (!cred) {
+        cred = await db.find(internal_content_types_1.WebAuthnCredential, {
+            credentialId: credIdB64,
+            "user._id": userId,
+        });
+    }
+    if (!cred) {
+        cred = await db.find(internal_content_types_1.WebAuthnCredential, {
+            credentialId: legacyDoubleEncodedCredId,
+            "user._id": userId,
+        });
+    }
+    if (!cred) {
+        (0, errors_1.throwAppError)("NOT_FOUND", {
+            id: input.response.rawId,
+            resource: "WebAuthnCredential",
+        });
+    }
+    const verification = await (0, server_1.verifyAuthenticationResponse)({
+        response: input.response,
+        expectedChallenge: ch.webAuthnChallenge,
+        expectedOrigin: share_1.ORIGIN,
+        expectedRPID: share_1.RP_ID,
+        credential: {
+            id: (0, share_1.toBase64URL)(cred.credentialId),
+            publicKey: Buffer.from(cred.publicKey, "base64"),
+            counter: Number(cred.counter ?? 0),
+        },
+        requireUserVerification: false,
+    });
+    if (!verification.verified) {
+        (0, errors_1.throwAppError)("INTERNAL", {
+            message: "Authentication failed",
+        });
+    }
+    // actualiza counter
+    await db.update(internal_content_types_1.WebAuthnCredential, cred._id, {
+        counter: verification.authenticationInfo.newCounter,
+    });
+    // consume challenge
+    await db.update(internal_content_types_1.MfaChallenge, ch._id, { consumedAt: new Date() });
+    const token = crypto.randomUUID();
+    const expiresAt = new Date(Date.now() + 1000 * 60 * 60 * 24); // 1 day
+    await db.create(internal_content_types_1.Session, {
+        token,
+        user: {
+            _id: userId,
+            contentType: internal_content_types_1.ManagerUser.name,
+            type: "existing",
+        },
+        expiresAt,
+        _type: "Session",
+    });
+    return {
+        token,
+    };
+};
+exports.webauthnAuthVerifyHandler = webauthnAuthVerifyHandler;
+//# sourceMappingURL=webauthnAuthVerify.js.map

package/dist/cjs/api/routes/manager/auth/webauthn/webauthnAuthVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthnAuthVerify.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/webauthn/webauthnAuthVerify.ts"],"names":[],"mappings":";;;AAAA,mDAGgC;AAEhC,mCAAqD;AACrD,kFAK+C;AAC/C,sDAA0D;AAC1D,4CAAqD;AAE9C,MAAM,yBAAyB,GAAG,KAAK,EAAE,EAC9C,KAAK,GAGN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IAEnC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,qCAAY,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChD,IAAI,EAAE,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACzE,IAAI,EAAE,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACzD,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;QAChD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;IAE3B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CACvE,QAAQ,CACT,CAAC;IACF,MAAM,yBAAyB,GAAG,MAAM,CAAC,IAAI,CAC3C,KAAK,CAAC,QAAQ,CAAC,KAAK,EACpB,MAAM,CACP,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,2CAAkB,EAAE;QAC3C,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;QAClC,UAAU,EAAE,MAAM;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,2CAAkB,EAAE;YACvC,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,2CAAkB,EAAE;YACvC,YAAY,EAAE,yBAAyB;YACvC,UAAU,EAAE,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;YACxB,QAAQ,EAAE,oBAAoB;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,IAAA,qCAA4B,EAAC;QACtD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;QACvC,cAAc,EAAE,cAAM;QACtB,YAAY,EAAE,aAAK;QACnB,UAAU,EAAE;YACV,EAAE,EAAE,IAAA,mBAAW,EAAC,IAAI,CAAC,YAAY,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;YAChD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;SACnC;QACD,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC,2CAAkB,EAAE,IAAI,CAAC,GAAG,EAAE;QAC5C,OAAO,EAAE,YAAY,CAAC,kBAAkB,CAAC,UAAU;KACpD,CAAC,CAAC;IAEH,oBAAoB;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC,qCAAY,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAElE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ;IAEtE,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE;QACvB,KAAK;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,MAAM;YACX,WAAW,EAAE,oCAAW,CAAC,IAAI;YAC7B,IAAI,EAAE,UAAU;SACjB;QACD,SAAS;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;KACN,CAAC;AACJ,CAAC,CAAC;AA3FW,QAAA,yBAAyB,6BA2FpC"}

package/dist/cjs/api/routes/manager/auth/webauthn/webauthnRegisterOptions.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webauthnRegisterOptionsHandler = void 0;
+const crypto_1 = require("crypto");
+const server_1 = require("@simplewebauthn/server");
+const share_1 = require("./share");
+const internal_content_types_1 = require("../../../../../internal-content-types");
+const orm_1 = require("../../../../../orm");
+const RP_NAME = "CMS";
+const webauthnRegisterOptionsHandler = async ({ ctx, input, }) => {
+    const db = await (0, orm_1.getMongoService)();
+    const user = ctx.getUser();
+    // Excluir credenciales ya registradas
+    const creds = (await db.list(internal_content_types_1.WebAuthnCredential, {
+        filter: {
+            "user._id": user._id,
+        },
+    })).items ?? [];
+    const excludeCredentials = creds.map((c) => ({
+        id: (0, share_1.toBase64URL)(c.credentialId),
+    }));
+    await db.delete(internal_content_types_1.WebAuthnRegChallenge, {
+        expiresAt: { $lte: new Date() },
+        consumedAt: null,
+    });
+    const options = await (0, server_1.generateRegistrationOptions)({
+        rpName: RP_NAME,
+        rpID: share_1.RP_ID,
+        userID: Uint8Array.from(Buffer.from(String(user._id))),
+        userName: user.email,
+        attestationType: "none",
+        excludeCredentials,
+        userDisplayName: input.deviceName,
+        authenticatorSelection: {
+            userVerification: "preferred",
+            residentKey: "preferred",
+        },
+    });
+    const token = (0, crypto_1.randomBytes)(32).toString("hex");
+    const expiresAt = new Date(Date.now() + 1000 * 60 * 5);
+    await db.create(internal_content_types_1.WebAuthnRegChallenge, {
+        token,
+        user: { _id: user._id, contentType: internal_content_types_1.ManagerUser.name, type: "existing" },
+        challenge: options.challenge,
+        expiresAt,
+        _type: "WebAuthnRegChallenge",
+    });
+    return {
+        token,
+        options,
+    };
+};
+exports.webauthnRegisterOptionsHandler = webauthnRegisterOptionsHandler;
+//# sourceMappingURL=webauthnRegisterOptions.js.map

package/dist/cjs/api/routes/manager/auth/webauthn/webauthnRegisterOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthnRegisterOptions.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/webauthn/webauthnRegisterOptions.ts"],"names":[],"mappings":";;;AAAA,mCAAqC;AAErC,mDAAqE;AAErE,mCAA6C;AAC7C,kFAI+C;AAC/C,4CAAqD;AAIrD,MAAM,OAAO,GAAG,KAAK,CAAC;AAEf,MAAM,8BAA8B,GAAG,KAAK,EAAE,EACnD,GAAG,EACH,KAAK,GAIN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAE3B,sCAAsC;IACtC,MAAM,KAAK,GACT,CACE,MAAM,EAAE,CAAC,IAAI,CAAC,2CAAkB,EAAE;QAChC,MAAM,EAAE;YACN,UAAU,EAAE,IAAI,CAAC,GAAG;SACrB;KACF,CAAC,CACH,CAAC,KAAK,IAAI,EAAE,CAAC;IAEhB,MAAM,kBAAkB,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,EAAE,EAAE,IAAA,mBAAW,EAAC,CAAC,CAAC,YAAY,CAAC;KAChC,CAAC,CAAC,CAAC;IAEJ,MAAM,EAAE,CAAC,MAAM,CAAC,6CAAoB,EAAE;QACpC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE;QAC/B,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,IAAA,oCAA2B,EAAC;QAChD,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,aAAK;QACX,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,QAAQ,EAAE,IAAI,CAAC,KAAK;QACpB,eAAe,EAAE,MAAM;QACvB,kBAAkB;QAClB,eAAe,EAAE,KAAK,CAAC,UAAU;QACjC,sBAAsB,EAAE;YACtB,gBAAgB,EAAE,WAAW;YAC7B,WAAW,EAAE,WAAW;SACzB;KACF,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAEvD,MAAM,EAAE,CAAC,MAAM,CAAC,6CAAoB,EAAE;QACpC,KAAK;QACL,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,oCAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;QACxE,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS;QACT,KAAK,EAAE,sBAAsB;KAC9B,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC,CAAC;AA1DW,QAAA,8BAA8B,kCA0DzC"}

package/dist/cjs/api/routes/manager/auth/webauthn/webauthnRegisterVerify.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webauthnRegisterVerifyHandler = void 0;
+const server_1 = require("@simplewebauthn/server");
+const share_1 = require("./share");
+const internal_content_types_1 = require("../../../../../internal-content-types");
+const errors_1 = require("../../../../../lib/errors");
+const orm_1 = require("../../../../../orm");
+const toBase64URL = (buf) => buf.toString("base64url");
+const webauthnRegisterVerifyHandler = async ({ ctx, input, }) => {
+    const db = await (0, orm_1.getMongoService)();
+    const user = ctx.getUser();
+    const reg = await db.find(internal_content_types_1.WebAuthnRegChallenge, { token: input.token });
+    if (!reg) {
+        (0, errors_1.throwAppError)("NOT_FOUND", {
+            id: input.token,
+            resource: "WebAuthnRegChallenge",
+        });
+    }
+    if (reg.user?._id?.toString?.() !== user._id.toString?.()) {
+        (0, errors_1.throwAppError)("FORBIDDEN", {
+            reason: "Challenge does not belong to the user",
+        });
+    }
+    if (reg.consumedAt)
+        (0, errors_1.throwAppError)("CONFLICT", {
+            message: "Challenge already consumed",
+        });
+    if (new Date(reg.expiresAt).getTime() <= Date.now()) {
+        (0, errors_1.throwAppError)("CONFLICT", {
+            message: "Challenge expired",
+        });
+    }
+    const verification = await (0, server_1.verifyRegistrationResponse)({
+        response: input.response,
+        expectedChallenge: reg.challenge,
+        expectedOrigin: share_1.ORIGIN,
+        expectedRPID: share_1.RP_ID,
+        requireUserVerification: false,
+    });
+    if (!verification.verified || !verification.registrationInfo) {
+        (0, errors_1.throwAppError)("INTERNAL", {
+            message: "Failed to verify registration response",
+        });
+    }
+    const { id, publicKey, counter } = verification.registrationInfo.credential;
+    await db.create(internal_content_types_1.WebAuthnCredential, {
+        token: crypto.randomUUID?.() ?? input.token + ":cred",
+        user: { _id: user._id, contentType: internal_content_types_1.ManagerUser.name, type: "existing" },
+        // Store credential id in WebAuthn-native base64url format.
+        credentialId: toBase64URL(Buffer.from(id, "base64url")),
+        publicKey: (0, share_1.toB64)(Buffer.from(publicKey)),
+        counter: Number(counter ?? 0),
+        deviceName: input.deviceName,
+        _type: "WebAuthnCredential",
+    });
+    await db.update(internal_content_types_1.WebAuthnRegChallenge, reg._id, { consumedAt: new Date() });
+    let mfa = await db.find(internal_content_types_1.UserMfa, { "user._id": user._id });
+    if (!mfa) {
+        mfa = await db.create(internal_content_types_1.UserMfa, {
+            user: { _id: user._id, contentType: internal_content_types_1.ManagerUser.name, type: "existing" },
+            enabled: true,
+            preferredMethod: "webauthn",
+            _type: "UserMfa",
+        });
+    }
+    else {
+        await db.update(internal_content_types_1.UserMfa, mfa._id, {
+            enabled: true,
+            preferredMethod: "webauthn",
+            totpSecretPending: null,
+        });
+    }
+    await db.update(internal_content_types_1.ManagerUser, user._id, {
+        twoFactorEnabled: true,
+    });
+    return { ok: true };
+};
+exports.webauthnRegisterVerifyHandler = webauthnRegisterVerifyHandler;
+//# sourceMappingURL=webauthnRegisterVerify.js.map

package/dist/cjs/api/routes/manager/auth/webauthn/webauthnRegisterVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthnRegisterVerify.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/webauthn/webauthnRegisterVerify.ts"],"names":[],"mappings":";;;AAAA,mDAGgC;AAEhC,mCAA+C;AAC/C,kFAK+C;AAC/C,sDAA0D;AAC1D,4CAAqD;AAGrD,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAExD,MAAM,6BAA6B,GAAG,KAAK,EAAE,EAClD,GAAG,EACH,KAAK,GAQN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAE3B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,6CAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,QAAQ,EAAE,sBAAsB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC1D,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,MAAM,EAAE,uCAAuC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,UAAU;QAChB,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,4BAA4B;SACtC,CAAC,CAAC;IAEL,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpD,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,mBAAmB;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,IAAA,mCAA0B,EAAC;QACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,GAAG,CAAC,SAAS;QAChC,cAAc,EAAE,cAAM;QACtB,YAAY,EAAE,aAAK;QACnB,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC7D,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,gBAAgB,CAAC,UAAU,CAAC;IAE5E,MAAM,EAAE,CAAC,MAAM,CAAC,2CAAkB,EAAE;QAClC,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,KAAK,CAAC,KAAK,GAAG,OAAO;QACrD,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,oCAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;QACxE,2DAA2D;QAC3D,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACvD,SAAS,EAAE,IAAA,aAAK,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,oBAAoB;KAC5B,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,MAAM,CAAC,6CAAoB,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAE3E,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gCAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE;YAC7B,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,oCAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;YACxE,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,UAAU;YAC3B,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE,GAAG,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,UAAU;YAC3B,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrC,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC,CAAC;AAzFW,QAAA,6BAA6B,iCAyFxC"}

package/dist/cjs/api/routes/manager/create.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createHandler = void 0;
+const zod_1 = require("zod");
+const errors_1 = require("../../../lib/errors");
+const Logger_1 = require("../../../lib/Logger");
+const Registry_1 = require("../../../lib/Registry");
+const orm_1 = require("../../../orm");
+const dbService_1 = require("../../../orm/dbService");
+const checkPermissions_1 = require("../../utils/checkPermissions");
+const revalidatePath_1 = require("../../utils/routes/revalidatePath");
+const proxies_1 = require("../../proxies");
+const createHandler = async ({ input, ctx, }) => {
+    Logger_1.Logger.addTrace("manager.create: handler start", {
+        contentType: input.contentType,
+    });
+    const db = await (0, orm_1.getMongoService)();
+    Logger_1.Logger.addTrace("manager.create: mongo service ready");
+    const { contentType: contentTypeName, data } = input;
+    const user = ctx.getUser();
+    Logger_1.Logger.addTrace("manager.create: user resolved", { userId: user._id });
+    const contentType = (0, Registry_1.getContentTypeByName)(contentTypeName);
+    if (!contentType) {
+        (0, errors_1.throwAppError)("NOT_FOUND", {
+            resource: "ContentType",
+            id: contentTypeName,
+        });
+    }
+    (0, checkPermissions_1.checkPermissions)(user, [`content.${contentTypeName}.own`]);
+    Logger_1.Logger.addTrace("manager.create: permissions checked");
+    if (contentType.name === "Route") {
+        (0, errors_1.throwAppError)("FORBIDDEN", {
+            reason: "Routes are defined in the API and cannot be created from manager",
+        });
+    }
+    try {
+        const parsedInput = contentType.validate({
+            ...data,
+            createdBy: user._id,
+            updatedBy: user._id,
+        });
+        Logger_1.Logger.addTrace("manager.create: input validated");
+        const inputProxy = (0, proxies_1.getInputProxy)(contentType.name);
+        let proxied = parsedInput;
+        if (inputProxy) {
+            proxied = await inputProxy(parsedInput);
+            Logger_1.Logger.addTrace("manager.create: input proxied");
+        }
+        const created = await db.create(contentType, proxied);
+        Logger_1.Logger.addTrace("manager.create: db create success", { id: created._id });
+        await (0, revalidatePath_1.checkRevalidatePath)({
+            contentType: contentType.name,
+            contentTypeId: created._id,
+            operation: "create",
+        });
+        Logger_1.Logger.addTrace("manager.create: revalidate done");
+        return created;
+    }
+    catch (error) {
+        if (error instanceof zod_1.z.ZodError || error instanceof dbService_1.DbErrorInvalidData) {
+            (0, errors_1.throwAppError)("VALIDATION", {
+                errors: error.issues,
+            });
+        }
+        if (error instanceof dbService_1.DbErrorConflict) {
+            (0, errors_1.throwAppError)("CONFLICT", {
+                message: error.message,
+                key: error.details,
+            });
+        }
+        throw error;
+    }
+};
+exports.createHandler = createHandler;
+//# sourceMappingURL=create.js.map

package/dist/cjs/api/routes/manager/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/create.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,gDAAoD;AACpD,gDAA6C;AAC7C,oDAA6D;AAC7D,sCAA+C;AAC/C,sDAA6E;AAG7E,mEAAgE;AAChE,sEAAwE;AAExE,2CAA8C;AAEvC,MAAM,aAAa,GAAG,KAAK,EAAE,EAClC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,eAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE;QAC/C,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,eAAM,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;IACvD,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,eAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAG,IAAA,+BAAoB,EAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,aAAa;YACvB,EAAE,EAAE,eAAe;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAA,mCAAgB,EAAC,IAAI,EAAE,CAAC,WAAW,eAAe,MAAoB,CAAC,CAAC,CAAC;IACzE,eAAM,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;IAEvD,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,MAAM,EACJ,kEAAkE;SACrE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC;YACvC,GAAG,IAAI;YACP,SAAS,EAAE,IAAI,CAAC,GAAG;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG;SACpB,CAAC,CAAC;QACH,eAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QAEnD,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAEnD,IAAI,OAAO,GAAG,WAAW,CAAC;QAE1B,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;YACxC,eAAM,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACtD,eAAM,CAAC,QAAQ,CAAC,mCAAmC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAE1E,MAAM,IAAA,oCAAmB,EAAC;YACxB,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,aAAa,EAAE,OAAO,CAAC,GAAG;YAC1B,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,eAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QAEnD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,OAAC,CAAC,QAAQ,IAAI,KAAK,YAAY,8BAAkB,EAAE,CAAC;YACvE,IAAA,sBAAa,EAAC,YAAY,EAAE;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,YAAY,2BAAe,EAAE,CAAC;YACrC,IAAA,sBAAa,EAAC,UAAU,EAAE;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,EAAE,KAAK,CAAC,OAAiB;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AA9EW,QAAA,aAAa,iBA8ExB"}

package/dist/cjs/api/routes/manager/delete.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deleteHandler = void 0;
+const internal_content_types_1 = require("../../../internal-content-types");
+const errors_1 = require("../../../lib/errors");
+const Logger_1 = require("../../../lib/Logger");
+const Registry_1 = require("../../../lib/Registry");
+const media_1 = require("../../../media");
+const orm_1 = require("../../../orm");
+const checkOwnership_1 = require("../../utils/checkOwnership");
+const revalidatePath_1 = require("../../utils/routes/revalidatePath");
+const deleteHandler = async ({ input, ctx, }) => {
+    Logger_1.Logger.addTrace("manager.delete: handler start", {
+        contentType: input.contentType,
+        id: input.id,
+    });
+    const db = await (0, orm_1.getMongoService)();
+    Logger_1.Logger.addTrace("manager.delete: mongo service ready");
+    const { contentType: contentTypeName, id } = input;
+    const contentType = (0, Registry_1.getContentTypeByName)(contentTypeName);
+    if (!contentType) {
+        (0, errors_1.throwAppError)("NOT_FOUND", {
+            resource: "ContentType",
+            id: contentTypeName,
+        });
+    }
+    await (0, checkOwnership_1.checkOwnership)({
+        ctx,
+        contentType,
+        id,
+        permission: "deleteAny",
+    });
+    Logger_1.Logger.addTrace("manager.delete: ownership checked");
+    if (contentType.name === "Route") {
+        (0, errors_1.throwAppError)("FORBIDDEN", {
+            reason: "Routes are defined in the API and cannot be deleted from manager",
+        });
+    }
+    const dependencies = await db.findDependencies(contentType, id);
+    Logger_1.Logger.addTrace("manager.delete: dependencies resolved", {
+        count: dependencies.length,
+    });
+    if (dependencies.length > 0) {
+        (0, errors_1.throwAppError)("CONFLICT", {
+            message: `Cannot delete item. It is referenced by other items: ${dependencies
+                .map((dep) => `${dep.contentType} (${dep._id})`)
+                .join(", ")}`,
+            key: "DEPENDENCIES_FOUND",
+        });
+    }
+    let mediaToDelete = null;
+    if (contentType.name === internal_content_types_1.Media.name) {
+        mediaToDelete = await db.get(internal_content_types_1.Media, id);
+        Logger_1.Logger.addTrace("manager.delete: media record loaded for storage cleanup", {
+            exists: !!mediaToDelete,
+        });
+    }
+    await db.delete(contentType, { _id: id });
+    Logger_1.Logger.addTrace("manager.delete: db delete success");
+    await (0, revalidatePath_1.checkRevalidatePath)({
+        contentType: contentType.name,
+        contentTypeId: id,
+        operation: "delete",
+    });
+    Logger_1.Logger.addTrace("manager.delete: revalidate done");
+    if (mediaToDelete) {
+        try {
+            const mediaService = (0, media_1.getMediaService)();
+            const keysToDelete = Array.from(new Set([mediaToDelete.key, mediaToDelete.previewKey].filter(Boolean)));
+            for (const key of keysToDelete) {
+                await mediaService.rawAdapter.deleteObject({
+                    key,
+                    access: mediaToDelete.access,
+                });
+            }
+            Logger_1.Logger.addTrace("manager.delete: media storage objects deleted", {
+                count: keysToDelete.length,
+            });
+        }
+        catch (error) {
+            Logger_1.Logger.error("Failed to delete media from storage after DB deletion", {
+                mediaId: mediaToDelete._id,
+                error: error.message,
+            });
+        }
+    }
+    return { ok: true };
+};
+exports.deleteHandler = deleteHandler;
+//# sourceMappingURL=delete.js.map

package/dist/cjs/api/routes/manager/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/delete.ts"],"names":[],"mappings":";;;AAAA,4EAAwD;AACxD,gDAAoD;AACpD,gDAA6C;AAC7C,oDAA6D;AAE7D,0CAAiD;AACjD,sCAA+C;AAG/C,+DAA4D;AAC5D,sEAAwE;AAEjE,MAAM,aAAa,GAAG,KAAK,EAAE,EAClC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,eAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE;QAC/C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,eAAM,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;IACvD,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACnD,MAAM,WAAW,GAAG,IAAA,+BAAoB,EAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,aAAa;YACvB,EAAE,EAAE,eAAe;SACpB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAA,+BAAc,EAAC;QACnB,GAAG;QACH,WAAW;QACX,EAAE;QACF,UAAU,EAAE,WAAW;KACxB,CAAC,CAAC;IACH,eAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAErD,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,MAAM,EACJ,kEAAkE;SACrE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChE,eAAM,CAAC,QAAQ,CAAC,uCAAuC,EAAE;QACvD,KAAK,EAAE,YAAY,CAAC,MAAM;KAC3B,CAAC,CAAC;IAEH,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,wDAAwD,YAAY;iBAC1E,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,EAAE;YACf,GAAG,EAAE,oBAAoB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,aAAa,GAA2B,IAAI,CAAC;IAEjD,IAAI,WAAW,CAAC,IAAI,KAAK,8BAAK,CAAC,IAAI,EAAE,CAAC;QACpC,aAAa,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,8BAAK,EAAE,EAAE,CAAC,CAAC;QACxC,eAAM,CAAC,QAAQ,CAAC,yDAAyD,EAAE;YACzE,MAAM,EAAE,CAAC,CAAC,aAAa;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,eAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAErD,MAAM,IAAA,oCAAmB,EAAC;QACxB,WAAW,EAAE,WAAW,CAAC,IAAI;QAC7B,aAAa,EAAE,EAAE;QACjB,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IACH,eAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;IAEnD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAA,uBAAe,GAAE,CAAC;YACvC,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAC3D,CAAC;YAEd,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,MAAM,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC;oBACzC,GAAG;oBACH,MAAM,EAAE,aAAa,CAAC,MAAM;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,eAAM,CAAC,QAAQ,CAAC,+CAA+C,EAAE;gBAC/D,KAAK,EAAE,YAAY,CAAC,MAAM;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;gBACpE,OAAO,EAAE,aAAa,CAAC,GAAG;gBAC1B,KAAK,EAAG,KAAe,CAAC,OAAO;aAChC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC,CAAC;AAhGW,QAAA,aAAa,iBAgGxB"}

package/dist/cjs/api/routes/manager/get.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getHandler = void 0;
+const errors_1 = require("../../../lib/errors");
+const Logger_1 = require("../../../lib/Logger");
+const Registry_1 = require("../../../lib/Registry");
+const orm_1 = require("../../../orm");
+const checkOwnership_1 = require("../../utils/checkOwnership");
+const syncConfiguredRoutes_1 = require("../../utils/routes/syncConfiguredRoutes");
+const getHandler = async ({ input, ctx, }) => {
+    Logger_1.Logger.addTrace("manager.get: handler start", {
+        contentType: input.contentType,
+        id: input.id,
+    });
+    const db = await (0, orm_1.getMongoService)();
+    Logger_1.Logger.addTrace("manager.get: mongo service ready");
+    const { contentType: contentTypeName, id } = input;
+    const contentType = (0, Registry_1.getContentTypeByName)(contentTypeName);
+    await (0, checkOwnership_1.checkOwnership)({
+        ctx,
+        contentType,
+        id,
+        permission: "readAny",
+    });
+    Logger_1.Logger.addTrace("manager.get: ownership checked");
+    if (!contentType) {
+        (0, errors_1.throwAppError)("NOT_FOUND", {
+            resource: "ContentType",
+            id: contentTypeName,
+        });
+    }
+    if (contentType.name === "Route") {
+        await (0, syncConfiguredRoutes_1.syncConfiguredRoutes)();
+    }
+    try {
+        const item = await db.get(contentType, id);
+        Logger_1.Logger.addTrace("manager.get: db get success", { found: !!item });
+        return item;
+    }
+    catch (_) {
+        (0, errors_1.throwAppError)("NOT_FOUND", {
+            resource: contentTypeName,
+            id,
+        });
+    }
+};
+exports.getHandler = getHandler;
+//# sourceMappingURL=get.js.map

package/dist/cjs/api/routes/manager/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/get.ts"],"names":[],"mappings":";;;AAAA,gDAAoD;AACpD,gDAA6C;AAC7C,oDAA6D;AAC7D,sCAA+C;AAG/C,+DAA4D;AAC5D,kFAA+E;AAExE,MAAM,UAAU,GAAG,KAAK,EAAE,EAC/B,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,eAAM,CAAC,QAAQ,CAAC,4BAA4B,EAAE;QAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,eAAM,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC;IACpD,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACnD,MAAM,WAAW,GAAG,IAAA,+BAAoB,EAAC,eAAe,CAAC,CAAC;IAE1D,MAAM,IAAA,+BAAc,EAAC;QACnB,GAAG;QACH,WAAW;QACX,EAAE;QACF,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IACH,eAAM,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IAElD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,aAAa;YACvB,EAAE,EAAE,eAAe;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAA,2CAAoB,GAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC3C,eAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,eAAe;YACzB,EAAE;SACH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AA7CW,QAAA,UAAU,cA6CrB"}

package/dist/cjs/api/routes/manager/list.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listHandler = void 0;
+const errors_1 = require("../../../lib/errors");
+const Logger_1 = require("../../../lib/Logger");
+const Permissions_1 = require("../../../lib/Permissions");
+const Registry_1 = require("../../../lib/Registry");
+const orm_1 = require("../../../orm");
+const checkPermissions_1 = require("../../utils/checkPermissions");
+const populateRelations_1 = require("../../utils/populates/populateRelations");
+const syncConfiguredRoutes_1 = require("../../utils/routes/syncConfiguredRoutes");
+const listHandler = async ({ input, ctx, }) => {
+    Logger_1.Logger.addTrace("manager.list: handler start", {
+        contentType: input.contentType,
+    });
+    const db = await (0, orm_1.getMongoService)();
+    Logger_1.Logger.addTrace("manager.list: mongo service ready");
+    const { contentType: contentTypeName, query } = input;
+    const contentType = (0, Registry_1.getContentTypeByName)(contentTypeName);
+    const user = ctx.getUser();
+    Logger_1.Logger.addTrace("manager.list: user resolved", { userId: user._id });
+    if (!contentType) {
+        (0, errors_1.throwAppError)("NOT_FOUND", {
+            resource: "ContentType",
+            id: contentTypeName,
+        });
+    }
+    (0, checkPermissions_1.checkAnyPermissions)(user, [
+        `content.${contentTypeName}.own`,
+        `content.${contentTypeName}.readAny`,
+    ]);
+    Logger_1.Logger.addTrace("manager.list: permissions checked");
+    if (!(0, Permissions_1.hasPermissions)(user, [`content.${contentTypeName}.readAny`])) {
+        Logger_1.Logger.addTrace("manager.list: applying own filter");
+        query.filter = {
+            ...query.filter,
+            createdBy: user._id,
+        };
+    }
+    if (contentType.name === "Route" ||
+        contentType.name === "RouteLayoutModule" ||
+        contentType.name === "RouteLayoutModuleOverride") {
+        await (0, syncConfiguredRoutes_1.syncConfiguredRoutes)();
+    }
+    const raw = await db.list(contentType, query);
+    Logger_1.Logger.addTrace("manager.list: db list success", {
+        totalItems: raw.totalItems,
+    });
+    return {
+        totalItems: raw.totalItems,
+        items: (await Promise.all(raw.items.map((item) => (0, populateRelations_1.populateRelations)(item)))),
+    };
+};
+exports.listHandler = listHandler;
+//# sourceMappingURL=list.js.map

package/dist/cjs/api/routes/manager/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/list.ts"],"names":[],"mappings":";;;AAAA,gDAAoD;AACpD,gDAA6C;AAC7C,0DAAsE;AACtE,oDAA6D;AAC7D,sCAA+C;AAG/C,mEAAmE;AACnE,+EAA4E;AAC5E,kFAA+E;AAExE,MAAM,WAAW,GAAG,KAAK,EAAE,EAChC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,eAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE;QAC7C,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,eAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IACrD,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACtD,MAAM,WAAW,GAAG,IAAA,+BAAoB,EAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,eAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAErE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,aAAa;YACvB,EAAE,EAAE,eAAe;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAA,sCAAmB,EAAC,IAAI,EAAE;QACxB,WAAW,eAAe,MAAoB;QAC9C,WAAW,eAAe,UAAwB;KACnD,CAAC,CAAC;IACH,eAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAErD,IACE,CAAC,IAAA,4BAAc,EAAC,IAAI,EAAE,CAAC,WAAW,eAAe,UAAwB,CAAC,CAAC,EAC3E,CAAC;QACD,eAAM,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;QACrD,KAAK,CAAC,MAAM,GAAG;YACb,GAAG,KAAK,CAAC,MAAM;YACf,SAAS,EAAE,IAAI,CAAC,GAAG;SACpB,CAAC;IACJ,CAAC;IAED,IACE,WAAW,CAAC,IAAI,KAAK,OAAO;QAC5B,WAAW,CAAC,IAAI,KAAK,mBAAmB;QACxC,WAAW,CAAC,IAAI,KAAK,2BAA2B,EAChD,CAAC;QACD,MAAM,IAAA,2CAAoB,GAAE,CAAC;IAC/B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC9C,eAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE;QAC/C,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC,CAAC;IAEH,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,CAAC,MAAM,OAAO,CAAC,GAAG,CACvB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,qCAAiB,EAAC,IAAI,CAAC,CAAC,CACjD,CAGE;KACJ,CAAC;AACJ,CAAC,CAAC;AA9DW,QAAA,WAAW,eA8DtB"}

package/dist/cjs/api/routes/manager/literals/list.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listLiteralsHandler = void 0;
+const internal_content_types_1 = require("../../../../internal-content-types");
+const Logger_1 = require("../../../../lib/Logger");
+const literals_1 = require("../../../../literals");
+const orm_1 = require("../../../../orm");
+const checkPermissions_1 = require("../../../utils/checkPermissions");
+const emptyValidation = {
+    isValid: true,
+    missing: [],
+    kindMismatch: [],
+    extra: [],
+};
+const listLiteralsHandler = async ({ input, ctx, }) => {
+    Logger_1.Logger.addTrace("manager.literals.list: handler start", {
+        locale: input.locale,
+    });
+    const user = ctx.getUser();
+    (0, checkPermissions_1.checkAnyPermissions)(user, ["manager.literals.readAny"]);
+    Logger_1.Logger.addTrace("manager.literals.list: permissions checked", {
+        userId: user._id,
+    });
+    const db = await (0, orm_1.getMongoService)();
+    Logger_1.Logger.addTrace("manager.literals.list: mongo service ready");
+    const languagesResult = await db.list(internal_content_types_1.Language, {
+        options: { limit: "all" },
+    });
+    const locales = (languagesResult.items || []).map((language) => ({
+        code: language.code,
+        name: language.name,
+        default: language.default,
+    }));
+    const defaultLocale = locales.find((language) => language.default)?.code ||
+        locales[0]?.code ||
+        "en";
+    const selectedLocale = input.locale || defaultLocale;
+    const translationsResult = await db.list(internal_content_types_1.LiteralTranslation, {
+        filter: { locale: selectedLocale },
+        options: { limit: "all" },
+    });
+    const translationMap = new Map(translationsResult.items.map((item) => [item.key, item.message]));
+    const items = (0, literals_1.getLiteralDefinitions)().map((definition) => {
+        const translation = translationMap.get(definition.key);
+        const validation = translation
+            ? (0, literals_1.validateIcuVariables)({
+                source: definition.defaultMessage,
+                translation,
+            })
+            : emptyValidation;
+        return {
+            key: definition.key,
+            defaultMessage: definition.defaultMessage,
+            description: definition.description,
+            usedBy: definition.usedBy,
+            variables: definition.variables,
+            translation,
+            hasTranslation: typeof translation === "string" && translation.length > 0,
+            validation: {
+                isValid: validation.isValid,
+                missing: validation.missing.map((variable) => variable.name),
+                kindMismatch: validation.kindMismatch.map((variable) => variable.name),
+                extra: validation.extra.map((variable) => variable.name),
+            },
+        };
+    });
+    Logger_1.Logger.addTrace("manager.literals.list: response ready", {
+        locale: selectedLocale,
+        itemCount: items.length,
+    });
+    return {
+        defaultLocale,
+        selectedLocale,
+        locales,
+        items,
+    };
+};
+exports.listLiteralsHandler = listLiteralsHandler;
+//# sourceMappingURL=list.js.map

package/dist/cjs/api/routes/manager/literals/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/literals/list.ts"],"names":[],"mappings":";;;AAAA,+EAG4C;AAC5C,mDAAgD;AAChD,mDAG8B;AAC9B,yCAAkD;AAMlD,sEAAsE;AAEtE,MAAM,eAAe,GAAG;IACtB,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,EAAE;IACX,YAAY,EAAE,EAAE;IAChB,KAAK,EAAE,EAAE;CACV,CAAC;AAEK,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACxC,KAAK,EACL,GAAG,GAIJ,EAA+B,EAAE;IAChC,eAAM,CAAC,QAAQ,CAAC,sCAAsC,EAAE;QACtD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,IAAA,sCAAmB,EAAC,IAAI,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAExD,eAAM,CAAC,QAAQ,CAAC,4CAA4C,EAAE;QAC5D,MAAM,EAAE,IAAI,CAAC,GAAG;KACjB,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,eAAM,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC;IAE9D,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,iCAAQ,EAAE;QAC9C,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;KACjB,CAAC,CAAC;IAEZ,MAAM,OAAO,GAAG,CAAC,eAAe,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CAAC,CAAC;IAEJ,MAAM,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI;QAClD,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI;QAChB,IAAI,CAAC;IAEP,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAC;IAErD,MAAM,kBAAkB,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,2CAAkB,EAAE;QAC3D,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE;QAClC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;KACjB,CAAC,CAAC;IAEZ,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CACjE,CAAC;IAEF,MAAM,KAAK,GAAG,IAAA,gCAAqB,GAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACvD,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,WAAW;YAC5B,CAAC,CAAC,IAAA,+BAAoB,EAAC;gBACnB,MAAM,EAAE,UAAU,CAAC,cAAc;gBACjC,WAAW;aACZ,CAAC;YACJ,CAAC,CAAC,eAAe,CAAC;QAEpB,OAAO;YACL,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,WAAW;YACX,cAAc,EAAE,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YACzE,UAAU,EAAE;gBACV,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC5D,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACtE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;aACzD;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,eAAM,CAAC,QAAQ,CAAC,uCAAuC,EAAE;QACvD,MAAM,EAAE,cAAc;QACtB,SAAS,EAAE,KAAK,CAAC,MAAM;KACxB,CAAC,CAAC;IAEH,OAAO;QACL,aAAa;QACb,cAAc;QACd,OAAO;QACP,KAAK;KACN,CAAC;AACJ,CAAC,CAAC;AAnFW,QAAA,mBAAmB,uBAmF9B"}