@rakun-kit/core 1.4.11 → 1.5.0

package/dist/esm/api/utils/managerNotifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managerNotifications.js","sourceRoot":"","sources":["../../../../src/api/utils/managerNotifications.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,WAAW,GACZ,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAUpC,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAAE,EAC9C,MAAM,EACN,QAAQ,EACR,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,WAAW,EACX,UAAU,EACV,IAAI,GAUL,EAAE,EAAE;IACH,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAEpC,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAA;IAClC,OAAO,MAAM,EAAE,CAAC,MAAM,CACpB,mBAAmB,EACnB;QACE,KAAK,EAAE,mBAAmB,CAAC,IAAI;QAC/B,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC;QACxC,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC5C,SAAS,EAAE,OAAO;QAClB,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/C,QAAQ;QACR,WAAW;QACX,UAAU;QACV,IAAI;QACJ,IAAI,EAAE,KAAK;QACX,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,QAAQ;KACpB,EACD,EAAE,OAAO,EAAE,QAAQ,EAAE,CACtB,CAAA;AACH,CAAC,CAAA"}

package/dist/esm/api/utils/recoveryCodes.d.ts

@@ -0,0 +1,9 @@
+export declare const MFA_RECOVERY_CODE_COUNT = 10;
+export declare const normalizeRecoveryCode: (value: string) => string;
+export declare const hashRecoveryCode: (value: string) => string;
+export declare const generateRecoveryCodes: () => {
+    codes: string[];
+    hashes: string[];
+};
+export declare const findRecoveryCodeHash: (code: string, hashes: readonly string[]) => string | undefined;
+//# sourceMappingURL=recoveryCodes.d.ts.map

package/dist/esm/api/utils/recoveryCodes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoveryCodes.d.ts","sourceRoot":"","sources":["../../../../src/api/utils/recoveryCodes.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,KAAK,CAAA;AAEzC,eAAO,MAAM,qBAAqB,GAAI,OAAO,MAAM,WACD,CAAA;AAElD,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,WAC2B,CAAA;AAEzE,eAAO,MAAM,qBAAqB;;;CAUjC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAC/B,MAAM,MAAM,EACZ,QAAQ,SAAS,MAAM,EAAE,uBAQ1B,CAAA"}

package/dist/esm/api/utils/recoveryCodes.js

@@ -0,0 +1,22 @@
+import { createHash, randomBytes, timingSafeEqual } from 'crypto';
+export const MFA_RECOVERY_CODE_COUNT = 10;
+export const normalizeRecoveryCode = (value) => value.replace(/[^a-zA-Z0-9]/g, '').toUpperCase();
+export const hashRecoveryCode = (value) => createHash('sha256').update(normalizeRecoveryCode(value)).digest('hex');
+export const generateRecoveryCodes = () => {
+    const codes = Array.from({ length: MFA_RECOVERY_CODE_COUNT }, () => {
+        const value = randomBytes(8).toString('hex').toUpperCase();
+        return value.match(/.{1,4}/g)?.join('-') ?? value;
+    });
+    return {
+        codes,
+        hashes: codes.map(hashRecoveryCode),
+    };
+};
+export const findRecoveryCodeHash = (code, hashes) => {
+    const candidate = Buffer.from(hashRecoveryCode(code), 'hex');
+    return hashes.find((hash) => {
+        const stored = Buffer.from(hash, 'hex');
+        return stored.length === candidate.length && timingSafeEqual(stored, candidate);
+    });
+};
+//# sourceMappingURL=recoveryCodes.js.map

package/dist/esm/api/utils/recoveryCodes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoveryCodes.js","sourceRoot":"","sources":["../../../../src/api/utils/recoveryCodes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAA;AAEjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAA;AAEzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAa,EAAE,EAAE,CACrD,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;AAElD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAE,EAAE,CAChD,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAEzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,EAAE;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,GAAG,EAAE;QACjE,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QAC1D,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,KAAK;QACL,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC;KACpC,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAAY,EACZ,MAAyB,EACzB,EAAE;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;IAE5D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACvC,OAAO,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/esm/api/utils/redirects/createSlugChangeRedirects.d.ts

@@ -0,0 +1,14 @@
+import type { ManagerUserSchema } from '../../../internal-content-types/ManagerUser.js';
+import type { SlugPathChange } from '../../../schemas/manager/slugRedirects.js';
+export declare const createSlugChangeRedirects: ({ changes, user, sourceContentType, sourceDocumentId, }: {
+    changes: readonly SlugPathChange[];
+    user: ManagerUserSchema;
+    sourceContentType: string;
+    sourceDocumentId: string;
+}) => Promise<{
+    _id: string;
+    enabled: boolean;
+    from: string;
+    to: string;
+}[]>;
+//# sourceMappingURL=createSlugChangeRedirects.d.ts.map

package/dist/esm/api/utils/redirects/createSlugChangeRedirects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSlugChangeRedirects.d.ts","sourceRoot":"","sources":["../../../../../src/api/utils/redirects/createSlugChangeRedirects.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAA;AASpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAA;AAuH5E,eAAO,MAAM,yBAAyB,GAAU,yDAK7C;IACD,OAAO,EAAE,SAAS,cAAc,EAAE,CAAA;IAClC,IAAI,EAAE,iBAAiB,CAAA;IACvB,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;CACzB;SAMQ,MAAM;aACF,OAAO;UACV,MAAM;QACR,MAAM;IAsFb,CAAA"}

package/dist/esm/api/utils/redirects/createSlugChangeRedirects.js

@@ -0,0 +1,141 @@
+import { Redirect } from '../../../internal-content-types/index.js';
+import { isAdminRole } from '../../../lib/ManagerRolePolicy.js';
+import { getContentPermission, hasPermissions, } from '../../../lib/Permissions.js';
+import { getMongoService } from '../../../orm/index.js';
+import { createManagerNotification, } from '../managerNotifications.js';
+import { loadUsersWithRoles } from '../reviews.js';
+const REDIRECT_ENABLE_KIND = 'redirect_enable_requested';
+const buildRedirectPayload = ({ change, enabled, actorId, }) => ({
+    _type: Redirect.name,
+    name: `Slug change: ${change.from} → ${change.to}`,
+    enabled,
+    sourcePath: change.from,
+    destinationPath: change.to,
+    statusMode: '301',
+    preserveQuery: true,
+    headerName: '',
+    headerMatchMode: 'none',
+    headerValue: '',
+    functionName: 'none',
+    functionConfig: '',
+    createdBy: actorId,
+    updatedBy: actorId,
+});
+const canCreateRedirect = (user) => {
+    const createPermission = getContentPermission(Redirect, 'own');
+    if (!createPermission)
+        return true;
+    return hasPermissions(user, [createPermission]);
+};
+const canEnableRedirect = (user) => {
+    if (isAdminRole(user.role))
+        return true;
+    const updateAny = getContentPermission(Redirect, 'updateAny');
+    if (!updateAny)
+        return false;
+    return hasPermissions({
+        role: {
+            name: user.role.name,
+            permissions: user.role.permissions,
+        },
+    }, [updateAny]);
+};
+const isSimplePathRedirect = (item) => {
+    const headerName = typeof item.headerName === 'string' ? item.headerName.trim() : '';
+    const headerMatchMode = item.headerMatchMode ?? 'none';
+    return headerName === '' && headerMatchMode === 'none';
+};
+const findRedirectBySourcePath = async (sourcePath) => {
+    const db = await getMongoService();
+    const existing = await db.list(Redirect, {
+        filter: { sourcePath },
+        options: { limit: 'all' },
+    });
+    return existing.items.find(isSimplePathRedirect) ?? null;
+};
+const listSimpleRedirectsByDestination = async (destinationPath) => {
+    const db = await getMongoService();
+    const existing = await db.list(Redirect, {
+        filter: { destinationPath },
+        options: { limit: 'all' },
+    });
+    return existing.items.filter(isSimplePathRedirect);
+};
+const notifyRedirectEnableRequested = async ({ redirectId, authorId, sourceContentType, sourceDocumentId, change, }) => {
+    const recipients = (await loadUsersWithRoles()).filter((user) => canEnableRedirect(user) && user._id !== authorId);
+    await Promise.all(recipients.map((user) => createManagerNotification({
+        userId: user._id,
+        authorId,
+        eventId: redirectId,
+        kind: REDIRECT_ENABLE_KIND,
+        contentType: 'Redirect',
+        documentId: redirectId,
+        text: `Enable permanent redirect ${change.from} → ${change.to} for ${sourceContentType}/${sourceDocumentId}`,
+    })));
+};
+export const createSlugChangeRedirects = async ({ changes, user, sourceContentType, sourceDocumentId, }) => {
+    if (changes.length === 0)
+        return [];
+    const db = await getMongoService();
+    const enabled = canCreateRedirect(user);
+    const results = [];
+    for (const change of changes) {
+        if (change.from === change.to)
+            continue;
+        // Reclaiming `to`: that path becomes live again, so any redirect whose
+        // source is `to` must go (e.g. h1→h2 then back to h1 deletes h1→h2).
+        const reclaiming = await findRedirectBySourcePath(change.to);
+        if (reclaiming) {
+            await db.delete(Redirect, { _id: reclaiming._id }, { actorId: user._id, reason: 'slug change redirect reclaim' });
+        }
+        // Compounding: anything that pointed at the old live path should follow
+        // the new one (A→B then B→C becomes A→C and B→C).
+        const incoming = await listSimpleRedirectsByDestination(change.from);
+        for (const redirect of incoming) {
+            if (redirect.sourcePath === change.to) {
+                await db.delete(Redirect, { _id: redirect._id }, { actorId: user._id, reason: 'slug change redirect self-loop' });
+                continue;
+            }
+            await db.update(Redirect, redirect._id, {
+                name: `Slug change: ${redirect.sourcePath} → ${change.to}`,
+                destinationPath: change.to,
+                statusMode: '301',
+                preserveQuery: true,
+                updatedBy: user._id,
+            }, { actorId: user._id, reason: 'slug change redirect compound' });
+        }
+        const payload = buildRedirectPayload({
+            change,
+            enabled,
+            actorId: user._id,
+        });
+        const existing = await findRedirectBySourcePath(change.from);
+        const redirect = existing
+            ? await db.update(Redirect, existing._id, {
+                name: payload.name,
+                destinationPath: payload.destinationPath,
+                statusMode: payload.statusMode,
+                preserveQuery: payload.preserveQuery,
+                enabled: payload.enabled,
+                updatedBy: user._id,
+            }, { actorId: user._id, reason: 'slug change redirect' })
+            : await db.create(Redirect, payload, { actorId: user._id });
+        results.push({
+            _id: redirect._id,
+            enabled: Boolean(redirect.enabled),
+            from: change.from,
+            to: change.to,
+        });
+        if (!enabled) {
+            await notifyRedirectEnableRequested({
+                redirectId: redirect._id,
+                authorId: user._id,
+                sourceContentType,
+                sourceDocumentId,
+                change,
+            });
+        }
+    }
+    return results;
+};
+//# sourceMappingURL=createSlugChangeRedirects.js.map

package/dist/esm/api/utils/redirects/createSlugChangeRedirects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSlugChangeRedirects.js","sourceRoot":"","sources":["../../../../../src/api/utils/redirects/createSlugChangeRedirects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAA;AAC5D,OAAO,EACL,oBAAoB,EACpB,cAAc,GAEf,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,OAAO,EACL,yBAAyB,GAE1B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAE/C,MAAM,oBAAoB,GACxB,2BAA2B,CAAA;AAI7B,MAAM,oBAAoB,GAAG,CAAC,EAC5B,MAAM,EACN,OAAO,EACP,OAAO,GAKR,EAAE,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,QAAQ,CAAC,IAAI;IACpB,IAAI,EAAE,gBAAgB,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,EAAE,EAAE;IAClD,OAAO;IACP,UAAU,EAAE,MAAM,CAAC,IAAI;IACvB,eAAe,EAAE,MAAM,CAAC,EAAE;IAC1B,UAAU,EAAE,KAAc;IAC1B,aAAa,EAAE,IAAI;IACnB,UAAU,EAAE,EAAE;IACd,eAAe,EAAE,MAAe;IAChC,WAAW,EAAE,EAAE;IACf,YAAY,EAAE,MAAe;IAC7B,cAAc,EAAE,EAAE;IAClB,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,OAAO;CACnB,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,CAAC,IAAuB,EAAE,EAAE;IACpD,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC9D,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAA;IAClC,OAAO,cAAc,CAAC,IAAI,EAAE,CAAC,gBAA8B,CAAC,CAAC,CAAA;AAC/D,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,CAAC,IAE1B,EAAE,EAAE;IACH,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACvC,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAA;IAC5B,OAAO,cAAc,CACnB;QACE,IAAI,EAAE;YACJ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;SACnC;KACmB,EACtB,CAAC,SAAuB,CAAC,CAC1B,CAAA;AACH,CAAC,CAAA;AAED,MAAM,oBAAoB,GAAG,CAAC,IAAoB,EAAE,EAAE;IACpD,MAAM,UAAU,GACd,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACnE,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,MAAM,CAAA;IACtD,OAAO,UAAU,KAAK,EAAE,IAAI,eAAe,KAAK,MAAM,CAAA;AACxD,CAAC,CAAA;AAED,MAAM,wBAAwB,GAAG,KAAK,EAAE,UAAkB,EAAE,EAAE;IAC5D,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAA;IAClC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,EAAE,UAAU,EAAW;QAC/B,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;KAC1B,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAA;AAC1D,CAAC,CAAA;AAED,MAAM,gCAAgC,GAAG,KAAK,EAAE,eAAuB,EAAE,EAAE;IACzE,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAA;IAClC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,EAAE,eAAe,EAAW;QACpC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;KAC1B,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;AACpD,CAAC,CAAA;AAED,MAAM,6BAA6B,GAAG,KAAK,EAAE,EAC3C,UAAU,EACV,QAAQ,EACR,iBAAiB,EACjB,gBAAgB,EAChB,MAAM,GAOP,EAAE,EAAE;IACH,MAAM,UAAU,GAAG,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC,MAAM,CACpD,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAC3D,CAAA;IAED,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACtB,yBAAyB,CAAC;QACxB,MAAM,EAAE,IAAI,CAAC,GAAG;QAChB,QAAQ;QACR,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,UAAU;QACvB,UAAU,EAAE,UAAU;QACtB,IAAI,EAAE,6BAA6B,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,EAAE,QAAQ,iBAAiB,IAAI,gBAAgB,EAAE;KAC7G,CAAC,CACH,CACF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAAE,EAC9C,OAAO,EACP,IAAI,EACJ,iBAAiB,EACjB,gBAAgB,GAMjB,EAAE,EAAE;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEnC,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,OAAO,GAKR,EAAE,CAAA;IAEP,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE;YAAE,SAAQ;QAEvC,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC5D,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,EAAE,CAAC,MAAM,CACb,QAAQ,EACR,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,EACvB,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAC9D,CAAA;QACH,CAAC;QAED,wEAAwE;QACxE,kDAAkD;QAClD,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACpE,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,EAAE,CAAC,MAAM,CACb,QAAQ,EACR,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,EACrB,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAChE,CAAA;gBACD,SAAQ;YACV,CAAC;YAED,MAAM,EAAE,CAAC,MAAM,CACb,QAAQ,EACR,QAAQ,CAAC,GAAG,EACZ;gBACE,IAAI,EAAE,gBAAgB,QAAQ,CAAC,UAAU,MAAM,MAAM,CAAC,EAAE,EAAE;gBAC1D,eAAe,EAAE,MAAM,CAAC,EAAE;gBAC1B,UAAU,EAAE,KAAK;gBACjB,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,IAAI,CAAC,GAAG;aACpB,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAC/D,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,MAAM;YACN,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,GAAG;SAClB,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAE5D,MAAM,QAAQ,GAAG,QAAQ;YACvB,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CACb,QAAQ,EACR,QAAQ,CAAC,GAAG,EACZ;gBACE,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS,EAAE,IAAI,CAAC,GAAG;aACpB,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,sBAAsB,EAAE,CACtD;YACH,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QAE7D,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAClC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,EAAE,EAAE,MAAM,CAAC,EAAE;SACd,CAAC,CAAA;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,6BAA6B,CAAC;gBAClC,UAAU,EAAE,QAAQ,CAAC,GAAG;gBACxB,QAAQ,EAAE,IAAI,CAAC,GAAG;gBAClB,iBAAiB;gBACjB,gBAAgB;gBAChB,MAAM;aACP,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/dist/esm/api/utils/redirects/slugPathChanges.d.ts

@@ -0,0 +1,9 @@
+import type { SlugPathChange } from '../../../schemas/manager/slugRedirects.js';
+export declare const computeSlugPathChanges: ({ contentType, documentId, data, assumePublished, languageCodes, }: {
+    contentType: string;
+    documentId: string;
+    data?: Record<string, unknown>;
+    assumePublished?: boolean;
+    languageCodes?: readonly string[];
+}) => Promise<SlugPathChange[]>;
+//# sourceMappingURL=slugPathChanges.d.ts.map

package/dist/esm/api/utils/redirects/slugPathChanges.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slugPathChanges.d.ts","sourceRoot":"","sources":["../../../../../src/api/utils/redirects/slugPathChanges.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAA;AA4G5E,eAAO,MAAM,sBAAsB,GAAU,oEAM1C;IACD,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC,KAAG,OAAO,CAAC,cAAc,EAAE,CAmG3B,CAAA"}

package/dist/esm/api/utils/redirects/slugPathChanges.js

@@ -0,0 +1,133 @@
+import { Language, RouteLocaleVariant, RouteMap, } from '../../../internal-content-types/index.js';
+import { getLocaleVariantGroupId, LOCALE_VARIANT_GROUP_FIELD, } from '../../../lib/localeVariants.js';
+import { getContentTypeByName } from '../../../lib/Registry.js';
+import { generateRouteMapItems, getRouteFields, loadRouteData, } from '../routes/routeMapHelpers.js';
+const activeContentFilter = {
+    _trashed: { $ne: true },
+    _visibility: { $nin: ['draft', 'trash'] },
+};
+const getRouteLocaleVariants = async (db, routeId) => {
+    return (await db.list(RouteLocaleVariant, {
+        filter: { routeId },
+        options: {
+            limit: 'all',
+            fields: ['routeId', 'groupId', 'languageId', 'documentId'],
+        },
+    })).items;
+};
+const getGroupRouteItems = async ({ db, contentType, groupIds, route, }) => {
+    const contentTypeRecord = getContentTypeByName(contentType);
+    const fields = getRouteFields(route);
+    return (await db.list(contentTypeRecord, {
+        filter: {
+            ...activeContentFilter,
+            $or: [
+                { _id: { $in: groupIds } },
+                { [LOCALE_VARIANT_GROUP_FIELD]: { $in: groupIds } },
+            ],
+        },
+        options: { limit: 'all', fields },
+    })).items;
+};
+const resolveLanguagesByCode = async (db, languageCodes) => {
+    if (languageCodes.length === 0)
+        return [];
+    const languages = (await db.list(Language, {
+        filter: { code: { $in: [...languageCodes] } },
+        options: { limit: 'all' },
+    })).items;
+    return languages;
+};
+const diffPathChanges = ({ prevRoutesMap, nextRoutesMap, languages, }) => {
+    const languageCodeById = new Map(languages.map((language) => [language._id, language.code]));
+    const nextByLanguage = new Map(nextRoutesMap.map((item) => [String(item.languageId), String(item.path)]));
+    const changes = [];
+    for (const prev of prevRoutesMap) {
+        const languageId = String(prev.languageId);
+        const from = String(prev.path);
+        const to = nextByLanguage.get(languageId);
+        if (!to || to === from)
+            continue;
+        changes.push({
+            from,
+            to,
+            languageId,
+            languageCode: languageCodeById.get(languageId),
+        });
+    }
+    return changes;
+};
+export const computeSlugPathChanges = async ({ contentType, documentId, data, assumePublished = false, languageCodes, }) => {
+    const { routes, languages, routeSettings, db } = await loadRouteData();
+    const contentTypeRecord = getContentTypeByName(contentType);
+    if (!contentTypeRecord)
+        return [];
+    const current = (await db.get(contentTypeRecord, documentId));
+    if (!current)
+        return [];
+    const merged = {
+        ...current,
+        ...(data ?? {}),
+        _id: current._id,
+        ...(assumePublished ? { _visibility: 'published', _trashed: false } : {}),
+    };
+    const route = routes.find((item) => item.contentType === contentType && item.hasPage);
+    if (!route)
+        return [];
+    const initialPrevRoutesMap = (await db.list(RouteMap, {
+        filter: {
+            contentType,
+            contentTypeId: documentId,
+        },
+        options: { limit: 'all' },
+    })).items;
+    const groupIds = Array.from(new Set([
+        getLocaleVariantGroupId(merged),
+        ...initialPrevRoutesMap
+            .map((routeMap) => routeMap.variantGroupId)
+            .filter((value) => typeof value === 'string'),
+    ]));
+    const prevRoutesMap = (await db.list(RouteMap, {
+        filter: {
+            contentType,
+            routeId: route._id,
+            $or: [
+                { variantGroupId: { $in: groupIds } },
+                { contentTypeId: { $in: groupIds } },
+                { contentTypeId: documentId },
+            ],
+        },
+        options: { limit: 'all' },
+    })).items;
+    if (prevRoutesMap.length === 0)
+        return [];
+    const [groupItems, localeVariants] = await Promise.all([
+        getGroupRouteItems({ db, contentType, groupIds, route }),
+        getRouteLocaleVariants(db, route._id),
+    ]);
+    const itemsById = new Map(groupItems.map((item) => [item._id, item]));
+    itemsById.set(merged._id, merged);
+    let projectedLocaleVariants = localeVariants;
+    if (languageCodes && languageCodes.length > 0) {
+        const selected = await resolveLanguagesByCode(db, languageCodes);
+        const selectedLanguageIds = new Set(selected.map((language) => language._id));
+        const groupId = getLocaleVariantGroupId(merged);
+        projectedLocaleVariants = [
+            ...localeVariants.filter((variant) => variant.groupId !== groupId ||
+                !selectedLanguageIds.has(variant.languageId)),
+            ...selected.map((language) => ({
+                routeId: route._id,
+                groupId,
+                languageId: language._id,
+                documentId: merged._id,
+            })),
+        ];
+    }
+    const nextRoutesMap = await generateRouteMapItems(Array.from(itemsById.values()), route, languages, routes, routeSettings, languages, projectedLocaleVariants);
+    return diffPathChanges({
+        prevRoutesMap,
+        nextRoutesMap,
+        languages,
+    });
+};
+//# sourceMappingURL=slugPathChanges.js.map

package/dist/esm/api/utils/redirects/slugPathChanges.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slugPathChanges.js","sourceRoot":"","sources":["../../../../../src/api/utils/redirects/slugPathChanges.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EAER,kBAAkB,EAClB,QAAQ,GACT,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAI5D,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,aAAa,GAId,MAAM,2BAA2B,CAAA;AAElC,MAAM,mBAAmB,GAAG;IAC1B,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;IACvB,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE;CAC1C,CAAA;AAED,MAAM,sBAAsB,GAAG,KAAK,EAClC,EAAa,EACb,OAAe,EACsB,EAAE;IACvC,OAAO,CACL,MAAM,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE;QAChC,MAAM,EAAE,EAAE,OAAO,EAAE;QACnB,OAAO,EAAE;YACP,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC;SAC3D;KACF,CAAC,CACH,CAAC,KAAK,CAAA;AACT,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,KAAK,EAAE,EAChC,EAAE,EACF,WAAW,EACX,QAAQ,EACR,KAAK,GAMN,EAAE,EAAE;IACH,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,WAAW,CAAE,CAAA;IAC5D,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IAEpC,OAAO,CACL,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC/B,MAAM,EAAE;YACN,GAAG,mBAAmB;YACtB,GAAG,EAAE;gBACH,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;gBAC1B,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;aACpD;SACF;QACD,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE;KAClC,CAAC,CACH,CAAC,KAAsB,CAAA;AAC1B,CAAC,CAAA;AAED,MAAM,sBAAsB,GAAG,KAAK,EAClC,EAAa,EACb,aAAgC,EACD,EAAE;IACjC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEzC,MAAM,SAAS,GAAG,CAChB,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE;QACtB,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,aAAa,CAAC,EAAE,EAAW;QACtD,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;KAC1B,CAAC,CACH,CAAC,KAAK,CAAA;IAEP,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,EACvB,aAAa,EACb,aAAa,EACb,SAAS,GAKV,EAAoB,EAAE;IACrB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAc,CAAC,CAAC,CACrE,CAAA;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAC1E,CAAA;IACD,MAAM,OAAO,GAAqB,EAAE,CAAA;IAEpC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACzC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI;YAAE,SAAQ;QAEhC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,EAAE;YACF,UAAU;YACV,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC;SAC/C,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EAAE,EAC3C,WAAW,EACX,UAAU,EACV,IAAI,EACJ,eAAe,GAAG,KAAK,EACvB,aAAa,GAOd,EAA6B,EAAE;IAC9B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,MAAM,aAAa,EAAE,CAAA;IACtE,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAA;IAC3D,IAAI,CAAC,iBAAiB;QAAE,OAAO,EAAE,CAAA;IAEjC,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAEpD,CAAA;IACR,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IAEvB,MAAM,MAAM,GAA0C;QACpD,GAAG,OAAO;QACV,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACf,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAA;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,CAAA;IACrF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IAErB,MAAM,oBAAoB,GAAG,CAC3B,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE;QACtB,MAAM,EAAE;YACN,WAAW;YACX,aAAa,EAAE,UAAU;SAC1B;QACD,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;KAC1B,CAAC,CACH,CAAC,KAAK,CAAA;IAEP,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CACzB,IAAI,GAAG,CAAC;QACN,uBAAuB,CAAC,MAAM,CAAC;QAC/B,GAAG,oBAAoB;aACpB,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;aAC1C,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;KACjE,CAAC,CACH,CAAA;IAED,MAAM,aAAa,GAAG,CACpB,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE;QACtB,MAAM,EAAE;YACN,WAAW;YACX,OAAO,EAAE,KAAK,CAAC,GAAG;YAClB,GAAG,EAAE;gBACH,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;gBACrC,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;gBACpC,EAAE,aAAa,EAAE,UAAU,EAAE;aAC9B;SACO;QACV,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;KAC1B,CAAC,CACH,CAAC,KAAK,CAAA;IAEP,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEzC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrD,kBAAkB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxD,sBAAsB,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC;KACtC,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACrE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAEjC,IAAI,uBAAuB,GAAG,cAAc,CAAA;IAC5C,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE,aAAa,CAAC,CAAA;QAChE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7E,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAA;QAC/C,uBAAuB,GAAG;YACxB,GAAG,cAAc,CAAC,MAAM,CACtB,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,OAAO,KAAK,OAAO;gBAC3B,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAC/C;YACD,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC7B,OAAO,EAAE,KAAK,CAAC,GAAG;gBAClB,OAAO;gBACP,UAAU,EAAE,QAAQ,CAAC,GAAG;gBACxB,UAAU,EAAE,MAAM,CAAC,GAAG;aACvB,CAAC,CAAC;SACJ,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAC9B,KAAK,EACL,SAAS,EACT,MAAM,EACN,aAAa,EACb,SAAS,EACT,uBAAuB,CACxB,CAAA;IAED,OAAO,eAAe,CAAC;QACrB,aAAa;QACb,aAAa;QACb,SAAS;KACV,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/esm/api/utils/requireContentType.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"requireContentType.d.ts","sourceRoot":"","sources":["../../../../src/api/utils/requireContentType.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,WAAW,MAAM,uBAAuB,CAAC;AAIrD,eAAO,MAAM,kBAAkB,GAAI,iBAAiB,MAAM,KAAG,WAW5D,CAAC"}
+{"version":3,"file":"requireContentType.d.ts","sourceRoot":"","sources":["../../../../src/api/utils/requireContentType.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,WAAW,MAAM,uBAAuB,CAAC;AAarD,eAAO,MAAM,kBAAkB,GAAI,iBAAiB,MAAM,KAAG,WAiB5D,CAAC"}

package/dist/esm/api/utils/requireContentType.js

@@ -1,5 +1,13 @@
 import { throwAppError } from "../../lib/errors/index.js";
 import { getContentTypeByName } from "../../lib/Registry.js";
+const managerPrivateContentTypes = new Set([
+    'MfaChallenge',
+    'PasswordResetToken',
+    'Session',
+    'UserMfa',
+    'WebAuthnCredential',
+    'WebAuthnRegChallenge',
+]);
 export const requireContentType = (contentTypeName) => {
     const contentType = getContentTypeByName(contentTypeName);
     if (!contentType) {
@@ -8,6 +16,11 @@ export const requireContentType = (contentTypeName) => {
             id: contentTypeName,
         });
     }
+    if (managerPrivateContentTypes.has(contentType.name)) {
+        throwAppError('FORBIDDEN', {
+            reason: 'This internal authentication resource is not accessible through generic manager operations',
+        });
+    }
     return contentType;
 };
 //# sourceMappingURL=requireContentType.js.map

package/dist/esm/api/utils/requireContentType.js.map

@@ -1 +1 @@
-{"version":3,"file":"requireContentType.js","sourceRoot":"","sources":["../../../../src/api/utils/requireContentType.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,eAAuB,EAAe,EAAE;IACzE,MAAM,WAAW,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,aAAa,CAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,aAAa;YACvB,EAAE,EAAE,eAAe;SACpB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC"}
+{"version":3,"file":"requireContentType.js","sourceRoot":"","sources":["../../../../src/api/utils/requireContentType.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,cAAc;IACd,oBAAoB;IACpB,SAAS;IACT,SAAS;IACT,oBAAoB;IACpB,sBAAsB;CACvB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,eAAuB,EAAe,EAAE;IACzE,MAAM,WAAW,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,aAAa,CAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,aAAa;YACvB,EAAE,EAAE,eAAe;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,aAAa,CAAC,WAAW,EAAE;YACzB,MAAM,EAAE,4FAA4F;SACrG,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC"}

package/dist/esm/api/utils/reviews.d.ts

@@ -0,0 +1,145 @@
+import type ContentType from '../../lib/ContentType.js';
+import type { ReviewCandidate, ReviewRecord, ReviewStatus } from '../../schemas/manager/reviews.js';
+export type StoredRelation = {
+    _id?: string;
+};
+export type StoredReview = {
+    _id: string;
+    contentType: string;
+    documentId: string;
+    revisionToken: string;
+    requestedBy?: StoredRelation;
+    author?: StoredRelation;
+    subjectRole?: StoredRelation;
+    reviewers?: StoredRelation[];
+    reviewerRoles?: StoredRelation[];
+    requiredApprovals: number;
+    blocking: boolean;
+    status: Exclude<ReviewStatus, 'outdated'>;
+    createdAt?: Date;
+};
+export type StoredDecision = {
+    _id: string;
+    reviewId: string;
+    reviewer?: StoredRelation;
+    decision: 'approve' | 'request_changes';
+    feedback?: string;
+    createdAt?: Date;
+};
+export type UserWithRole = {
+    _id: string;
+    name?: string;
+    user: string;
+    avatarUrl?: string;
+    avatarPreviewUrl?: string;
+    role: {
+        _id: string;
+        name: string;
+        permissions: string[];
+    };
+};
+export declare const resolveStoredReviewStatus: (review: Pick<StoredReview, "revisionToken" | "status">, currentRevisionToken: string) => ReviewStatus;
+export declare const getReviewDecisionStatus: ({ decisions, requiredApprovals, }: {
+    decisions: Array<Pick<StoredDecision, "decision">>;
+    requiredApprovals: number;
+}) => "pending" | "changes_requested" | "approved";
+export declare const getRelationId: (value: unknown) => string | undefined;
+export declare const getDocumentAuthorId: (document: Record<string, unknown>) => string | undefined;
+export declare const relation: <T extends string>(contentType: T, id: string) => {
+    type: "existing";
+    _id: string;
+    contentType: T;
+};
+export declare const getReviewPolicyContentTypes: (policy: Record<string, unknown>) => string[];
+export declare const getDocumentRevisionToken: (document: Record<string, unknown>) => string;
+export declare const loadUsersWithRoles: (ids?: string[]) => Promise<UserWithRole[]>;
+export declare const loadUserWithRole: (id: string) => Promise<UserWithRole>;
+export declare const canReadReviewDocument: (contentType: ContentType, document: Record<string, unknown>, user: UserWithRole) => boolean;
+export declare const canWriteReviewDocument: (contentType: ContentType, document: Record<string, unknown>, user: UserWithRole) => boolean;
+export declare const getDocumentReviewPolicy: ({ contentType, document, }: {
+    contentType: ContentType;
+    document: Record<string, unknown>;
+}) => Promise<{
+    policy: {
+        role: import("../../index.js").RelationExisting<"ManagerRole">;
+        reviewerRoles: import("../../index.js").RelationExisting<"ManagerRole">[];
+        requiredApprovals: number;
+        _type: "ContentReviewPolicy";
+        _id: string;
+        contentType?: string | undefined;
+        contentTypes?: (string | undefined)[] | undefined;
+        _schemaVersion?: number | undefined;
+        _visibility?: import("../../index.js").DocumentVisibility | undefined;
+        _visibilityBeforeTrash?: Exclude<import("../../index.js").DocumentVisibility, "trash"> | undefined;
+        _trashed?: boolean | undefined;
+        _revision?: number | undefined;
+        _localeVariantGroupId?: string | undefined;
+        _localeVariantName?: string | undefined;
+        _localeVariantRole?: import("zod").infer<typeof import("../../index.js").LocaleVariantRole> | undefined;
+        trashedAt?: Date | undefined;
+        trashedBy?: string | undefined;
+        createdAt?: Date | undefined;
+        updatedAt?: Date | undefined;
+        createdBy?: string | undefined;
+        updatedBy?: string | undefined;
+        _iteratorUnlinked?: boolean | undefined;
+    };
+    author: UserWithRole;
+    roleId: string;
+    reviewerRoleIds: string[];
+    requiredApprovals: number;
+} | null>;
+export declare const getReviewPolicyForRole: ({ contentType, roleId, }: {
+    contentType: string;
+    roleId: string;
+}) => Promise<{
+    role: import("../../index.js").RelationExisting<"ManagerRole">;
+    reviewerRoles: import("../../index.js").RelationExisting<"ManagerRole">[];
+    requiredApprovals: number;
+    _type: "ContentReviewPolicy";
+    _id: string;
+    contentType?: string | undefined;
+    contentTypes?: (string | undefined)[] | undefined;
+    _schemaVersion?: number | undefined;
+    _visibility?: import("../../index.js").DocumentVisibility | undefined;
+    _visibilityBeforeTrash?: Exclude<import("../../index.js").DocumentVisibility, "trash"> | undefined;
+    _trashed?: boolean | undefined;
+    _revision?: number | undefined;
+    _localeVariantGroupId?: string | undefined;
+    _localeVariantName?: string | undefined;
+    _localeVariantRole?: import("zod").infer<typeof import("../../index.js").LocaleVariantRole> | undefined;
+    trashedAt?: Date | undefined;
+    trashedBy?: string | undefined;
+    createdAt?: Date | undefined;
+    updatedAt?: Date | undefined;
+    createdBy?: string | undefined;
+    updatedBy?: string | undefined;
+    _iteratorUnlinked?: boolean | undefined;
+} | null>;
+export declare const listReviewCandidates: ({ contentType, document, policy, reviewAuthorId, canSelfApprove, }: {
+    contentType: ContentType;
+    document: Record<string, unknown>;
+    policy: Awaited<ReturnType<typeof getDocumentReviewPolicy>>;
+    reviewAuthorId?: string;
+    canSelfApprove: boolean;
+}) => Promise<Array<ReviewCandidate & {
+    source: UserWithRole;
+}>>;
+export declare const findLatestReview: ({ contentType, documentId, revisionToken, }: {
+    contentType: string;
+    documentId: string;
+    revisionToken?: string;
+}) => Promise<StoredReview | null>;
+export declare const resolveReviewRecord: ({ review, currentRevisionToken, contentType, document, }: {
+    review: StoredReview;
+    currentRevisionToken: string;
+    contentType: ContentType;
+    document: Record<string, unknown>;
+}) => Promise<ReviewRecord>;
+export declare const getApprovedCurrentReview: ({ contentType, document, }: {
+    contentType: ContentType;
+    document: Record<string, unknown> & {
+        _id: string;
+    };
+}) => Promise<StoredReview | null>;
+//# sourceMappingURL=reviews.d.ts.map

package/dist/esm/api/utils/reviews.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviews.d.ts","sourceRoot":"","sources":["../../../../src/api/utils/reviews.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,WAAW,MAAM,uBAAuB,CAAA;AAMpD,OAAO,KAAK,EACV,eAAe,EACf,YAAY,EACZ,YAAY,EACb,MAAM,+BAA+B,CAAA;AAGtC,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,cAAc,CAAA;IAC5B,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,WAAW,CAAC,EAAE,cAAc,CAAA;IAC5B,SAAS,CAAC,EAAE,cAAc,EAAE,CAAA;IAC5B,aAAa,CAAC,EAAE,cAAc,EAAE,CAAA;IAChC,iBAAiB,EAAE,MAAM,CAAA;IACzB,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IACzC,SAAS,CAAC,EAAE,IAAI,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,QAAQ,EAAE,SAAS,GAAG,iBAAiB,CAAA;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,IAAI,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM,CAAA;QACX,IAAI,EAAE,MAAM,CAAA;QACZ,WAAW,EAAE,MAAM,EAAE,CAAA;KACtB,CAAA;CACF,CAAA;AAED,eAAO,MAAM,yBAAyB,GACpC,QAAQ,IAAI,CAAC,YAAY,EAAE,eAAe,GAAG,QAAQ,CAAC,EACtD,sBAAsB,MAAM,KAC3B,YAGgB,CAAA;AAEnB,eAAO,MAAM,uBAAuB,GAAI,mCAGrC;IACD,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAA;IAClD,iBAAiB,EAAE,MAAM,CAAA;CAC1B,KAAG,SAAS,GAAG,mBAAmB,GAAG,UAQrC,CAAA;AAED,eAAO,MAAM,aAAa,GAAI,OAAO,OAAO,uBAG7B,CAAA;AAEf,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,uBAUpE,CAAA;AAED,eAAO,MAAM,QAAQ,GAAI,CAAC,SAAS,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,MAAM;;;;CAInE,CAAA;AAEF,eAAO,MAAM,2BAA2B,GACtC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,aAehC,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAI,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,WASzE,CAAA;AA8BD,eAAO,MAAM,kBAAkB,GAAU,MAAM,MAAM,EAAE,4BA8BtD,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAU,IAAI,MAAM,0BACZ,CAAA;AA6BrC,eAAO,MAAM,qBAAqB,GAChC,aAAa,WAAW,EACxB,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,YAAY,YAC0D,CAAA;AAE9E,eAAO,MAAM,sBAAsB,GACjC,aAAa,WAAW,EACxB,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,YAAY,YAC4D,CAAA;AAEhF,eAAO,MAAM,uBAAuB,GAAU,4BAG3C;IACD,WAAW,EAAE,WAAW,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SA6BA,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAU,0BAG1C;IACD,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;CACf;;;;;;;;;;;;;;;;;;;;;;;SAMA,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAU,oEAMxC;IACD,WAAW,EAAE,WAAW,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAA;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,OAAO,CAAA;CACxB,KAAG,OAAO,CAAC,KAAK,CAAC,eAAe,GAAG;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC,CAe5D,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAU,6CAIpC;IACD,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB,iCAgBA,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAU,0DAKvC;IACD,MAAM,EAAE,YAAY,CAAA;IACpB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,WAAW,EAAE,WAAW,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC,KAAG,OAAO,CAAC,YAAY,CA+DvB,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAU,4BAG5C;IACD,WAAW,EAAE,WAAW,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CACpD,iCAUA,CAAA"}