@rakun-kit/core 1.4.11 → 1.5.1

package/dist/esm/api/utils/authEvents.d.ts

@@ -0,0 +1,7 @@
+import { type EventLogInput } from '../../eventLog/index.js';
+import type { RakunRequestContext } from '../context.js';
+export declare const recordAuthEvent: (event: Omit<EventLogInput, "category" | "source" | "correlationId" | "tags"> & {
+    ctx?: RakunRequestContext;
+    tags?: readonly string[];
+}) => Promise<void>;
+//# sourceMappingURL=authEvents.d.ts.map

package/dist/esm/api/utils/authEvents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authEvents.d.ts","sourceRoot":"","sources":["../../../../src/api/utils/authEvents.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAA;AAEvB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAOrD,eAAO,MAAM,eAAe,GAC1B,OAAO,IAAI,CACT,aAAa,EACb,UAAU,GAAG,QAAQ,GAAG,eAAe,GAAG,MAAM,CACjD,GAAG;IACF,GAAG,CAAC,EAAE,mBAAmB,CAAA;IACzB,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACzB,kBAoBF,CAAA"}

package/dist/esm/api/utils/authEvents.js

@@ -0,0 +1,27 @@
+import { getEventLogService, hasEventLogService, } from '../../eventLog/index.js';
+import { Logger } from '../../lib/Logger.js';
+const getCorrelationId = (ctx) => {
+    const value = ctx?.req?.headers?.['x-request-id'];
+    return Array.isArray(value) ? value[0] : value;
+};
+export const recordAuthEvent = async (event) => {
+    if (!hasEventLogService())
+        return;
+    const { ctx, tags, ...input } = event;
+    try {
+        await getEventLogService().record({
+            ...input,
+            category: 'auth',
+            source: '@rakun-kit/core/auth',
+            correlationId: getCorrelationId(ctx),
+            tags: ['auth', ...(tags ?? [])],
+        });
+    }
+    catch (error) {
+        Logger?.error?.('Authentication event could not be persisted', {
+            eventType: event.type,
+            errorName: error instanceof Error ? error.name : 'UnknownError',
+        });
+    }
+};
+//# sourceMappingURL=authEvents.js.map

package/dist/esm/api/utils/authEvents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authEvents.js","sourceRoot":"","sources":["../../../../src/api/utils/authEvents.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAGzC,MAAM,gBAAgB,GAAG,CAAC,GAAyB,EAAE,EAAE;IACrD,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,CAAA;IACjD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAChD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,KAMC,EACD,EAAE;IACF,IAAI,CAAC,kBAAkB,EAAE;QAAE,OAAM;IAEjC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,CAAA;IAErC,IAAI,CAAC;QACH,MAAM,kBAAkB,EAAE,CAAC,MAAM,CAAC;YAChC,GAAG,KAAK;YACR,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,sBAAsB;YAC9B,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC;YACpC,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;SAChC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,KAAK,EAAE,CAAC,6CAA6C,EAAE;YAC7D,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc;SAChE,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAA"}

package/dist/esm/api/utils/authRateLimit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authRateLimit.d.ts","sourceRoot":"","sources":["../../../../src/api/utils/authRateLimit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAmBtD,eAAO,MAAM,6BAA6B,GAAI,MAAM,mBAAmB,WAStE,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,2BAIjC;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB,SAgBA,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,SAE7C,CAAC"}
+{"version":3,"file":"authRateLimit.d.ts","sourceRoot":"","sources":["../../../../src/api/utils/authRateLimit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAmBtD,eAAO,MAAM,6BAA6B,GAAI,MAAM,mBAAmB,WAWtE,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,2BAIjC;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB,SAgBA,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,SAE7C,CAAC"}

package/dist/esm/api/utils/authRateLimit.js

@@ -12,9 +12,10 @@ export const getRequestRateLimitIdentifier = (ctx) => {
     const headers = ctx?.req?.headers ?? {};
     const forwardedFor = headers["x-forwarded-for"];
     const realIp = headers["x-real-ip"];
-    const value = Array.isArray(forwardedFor)
-        ? forwardedFor[0]
-        : forwardedFor || (Array.isArray(realIp) ? realIp[0] : realIp);
+    const value = ctx?.req?.ip ||
+        (Array.isArray(forwardedFor)
+            ? forwardedFor[0]
+            : forwardedFor || (Array.isArray(realIp) ? realIp[0] : realIp));
     return String(value || "unknown").split(",")[0]?.trim() || "unknown";
 };
 export const assertAuthRateLimit = ({ key, limit, windowMs, }) => {

package/dist/esm/api/utils/authRateLimit.js.map

@@ -1 +1 @@
-{"version":3,"file":"authRateLimit.js","sourceRoot":"","sources":["../../../../src/api/utils/authRateLimit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAOjD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;AAElD,MAAM,sBAAsB,GAAG,GAAG,EAAE;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YAC1B,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAAyB,EAAE,EAAE;IACzE,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QACvC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEjE,OAAO,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAClC,GAAG,EACH,KAAK,EACL,QAAQ,GAKT,EAAE,EAAE;IACH,sBAAsB,EAAE,CAAC;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEjC,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC;QAC5D,aAAa,CAAC,WAAW,EAAE;YACzB,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;QAChB,KAAK,EAAE,MAAM,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,OAAO,EAAE,MAAM,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ;KAC1E,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAE,EAAE;IAChD,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC"}
+{"version":3,"file":"authRateLimit.js","sourceRoot":"","sources":["../../../../src/api/utils/authRateLimit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAOjD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;AAElD,MAAM,sBAAsB,GAAG,GAAG,EAAE;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YAC1B,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAAyB,EAAE,EAAE;IACzE,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,KAAK,GACT,GAAG,EAAE,GAAG,EAAE,EAAE;QACZ,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;YAC1B,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YACjB,CAAC,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAEpE,OAAO,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAClC,GAAG,EACH,KAAK,EACL,QAAQ,GAKT,EAAE,EAAE;IACH,sBAAsB,EAAE,CAAC;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEjC,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC;QAC5D,aAAa,CAAC,WAAW,EAAE;YACzB,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;QAChB,KAAK,EAAE,MAAM,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,OAAO,EAAE,MAAM,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ;KAC1E,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAE,EAAE;IAChD,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC"}

package/dist/esm/api/utils/contentTemplate.d.ts

@@ -0,0 +1,31 @@
+import type ContentType from "../../lib/ContentType.js";
+import type { DBMutationOptions, DBService } from "../../orm/dbService.js";
+export type ContentTemplateState = {
+    configured: boolean;
+    modules?: unknown[];
+    revision?: number;
+};
+export declare class ContentTemplateValidationError extends Error {
+}
+export declare const createTemplateContentSlot: () => {
+    name: "TemplateContent";
+    value: {
+        type: "new";
+        data: {
+            _type: "TemplateContent";
+        };
+    };
+};
+export declare const isTemplateContentSlot: (value: unknown) => boolean;
+export declare const stripTemplateContentSlots: (value: unknown) => unknown;
+export declare const validateContentTemplate: (contentType: ContentType, modules: unknown) => unknown[];
+export declare const getContentTemplate: (db: DBService, contentType: ContentType) => Promise<ContentTemplateState>;
+export declare const saveContentTemplate: ({ contentType, db, expectedRevision, modules, options, }: {
+    contentType: ContentType;
+    db: DBService;
+    expectedRevision?: number;
+    modules: unknown;
+    options?: DBMutationOptions;
+}) => Promise<ContentTemplateState>;
+export declare const applyContentTemplate: (templateModules: unknown[], contentModules: unknown[]) => unknown[];
+//# sourceMappingURL=contentTemplate.d.ts.map

package/dist/esm/api/utils/contentTemplate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contentTemplate.d.ts","sourceRoot":"","sources":["../../../../src/api/utils/contentTemplate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,WAAW,MAAM,uBAAuB,CAAC;AAIrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAMxE,MAAM,MAAM,oBAAoB,GAAG;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qBAAa,8BAA+B,SAAQ,KAAK;CAAG;AAE5D,eAAO,MAAM,yBAAyB;;;;;;;;CAMpC,CAAC;AAKH,eAAO,MAAM,qBAAqB,GAAI,OAAO,OAAO,YAanD,CAAC;AA+DF,eAAO,MAAM,yBAAyB,GAAI,OAAO,OAAO,KAAG,OAe1D,CAAC;AAyBF,eAAO,MAAM,uBAAuB,GAClC,aAAa,WAAW,EACxB,SAAS,OAAO,KACf,OAAO,EA4BT,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAC7B,IAAI,SAAS,EACb,aAAa,WAAW,KACvB,OAAO,CAAC,oBAAoB,CAwB9B,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAU,0DAMvC;IACD,WAAW,EAAE,WAAW,CAAC;IACzB,EAAE,EAAE,SAAS,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B,KAAG,OAAO,CAAC,oBAAoB,CAqE/B,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,iBAAiB,OAAO,EAAE,EAC1B,gBAAgB,OAAO,EAAE,KACxB,OAAO,EAmBT,CAAC"}

package/dist/esm/api/utils/contentTemplate.js

@@ -0,0 +1,194 @@
+import { ContentTemplate, TemplateContent } from "../../internal-content-types/index.js";
+import { Logger } from "../../lib/Logger.js";
+import { ITERATOR_FIELD_NAME } from "../../lib/systemFields.js";
+import { DbErrorConflict } from "../../orm/dbService.js";
+import { transformStringToObjectIds } from "../../orm/utils/transformStringToObjectIds.js";
+import { parseId } from "../../orm/utils/parseId.js";
+import { parsePreviewData, serializePreviewData } from "./previewData.js";
+export class ContentTemplateValidationError extends Error {
+}
+export const createTemplateContentSlot = () => ({
+    name: TemplateContent.name,
+    value: {
+        type: "new",
+        data: { _type: TemplateContent.name },
+    },
+});
+const isRecord = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+export const isTemplateContentSlot = (value) => {
+    if (!isRecord(value) || value.name !== TemplateContent.name)
+        return false;
+    const itemValue = value.value;
+    if (!isRecord(itemValue))
+        return false;
+    if (itemValue._type === TemplateContent.name)
+        return true;
+    return (itemValue.type === "new" &&
+        isRecord(itemValue.data) &&
+        itemValue.data._type === TemplateContent.name);
+};
+const visitTemplateSlotsInContentType = (contentType, value) => {
+    if (!isRecord(value))
+        return 0;
+    return Object.entries(contentType.fields).reduce((count, [key, field]) => count + visitTemplateSlotsInField(field, value[key]), 0);
+};
+const visitTemplateSlotsInField = (field, value) => {
+    if ((field.meta.ui === "List" || field.meta.ui === "Iterator") &&
+        "fields" in field &&
+        Array.isArray(field.fields)) {
+        if (!Array.isArray(value))
+            return 0;
+        const entries = field.fields;
+        return value.reduce((count, item) => {
+            if (isTemplateContentSlot(item))
+                return count + 1;
+            if (!isRecord(item) || typeof item.name !== "string")
+                return count;
+            const entry = entries.find((candidate) => candidate.name === item.name);
+            return count + (entry ? visitTemplateSlotsInField(entry.field, item.value) : 0);
+        }, 0);
+    }
+    if (field.meta.ui === "SimpleList" &&
+        "field" in field &&
+        Array.isArray(value)) {
+        return value.reduce((count, item) => count + visitTemplateSlotsInField(field.field, item), 0);
+    }
+    if (field.meta.ui === "ContentType" &&
+        "contentType" in field &&
+        isRecord(value) &&
+        value.type === "new" &&
+        isRecord(value.data)) {
+        return visitTemplateSlotsInContentType(field.contentType, value.data);
+    }
+    return 0;
+};
+export const stripTemplateContentSlots = (value) => {
+    if (Array.isArray(value)) {
+        return value.flatMap((item) => isTemplateContentSlot(item) ? [] : [stripTemplateContentSlots(item)]);
+    }
+    if (!isRecord(value))
+        return value;
+    return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+        key,
+        stripTemplateContentSlots(item),
+    ]));
+};
+const mergeTemplateSlots = (raw, parsed) => {
+    if (Array.isArray(raw) && Array.isArray(parsed)) {
+        let parsedIndex = 0;
+        return raw.map((item) => {
+            if (isTemplateContentSlot(item))
+                return createTemplateContentSlot();
+            const parsedItem = parsed[parsedIndex++];
+            return mergeTemplateSlots(item, parsedItem);
+        });
+    }
+    if (isRecord(raw) && isRecord(parsed)) {
+        return Object.fromEntries(Object.entries(parsed).map(([key, item]) => [
+            key,
+            mergeTemplateSlots(raw[key], item),
+        ]));
+    }
+    return parsed;
+};
+export const validateContentTemplate = (contentType, modules) => {
+    if (!contentType.hasTemplate || !contentType.hasIterator) {
+        throw new ContentTemplateValidationError(`Content type "${contentType.name}" does not have a template.`);
+    }
+    const templateField = contentType.fields[ITERATOR_FIELD_NAME];
+    const slotCount = visitTemplateSlotsInField(templateField, modules);
+    if (slotCount !== 1) {
+        throw new ContentTemplateValidationError(`The template for "${contentType.name}" must contain exactly one Content slot.`);
+    }
+    const parsed = templateField
+        .getSchema()
+        .parse(stripTemplateContentSlots(modules));
+    const normalized = mergeTemplateSlots(modules, parsed);
+    if (!Array.isArray(normalized)) {
+        throw new ContentTemplateValidationError(`The template for "${contentType.name}" is invalid.`);
+    }
+    return normalized;
+};
+export const getContentTemplate = async (db, contentType) => {
+    if (!contentType.hasTemplate)
+        return { configured: false };
+    const template = await db.find(ContentTemplate, {
+        contentType: contentType.name,
+    });
+    if (!template)
+        return { configured: false };
+    try {
+        return {
+            configured: true,
+            modules: validateContentTemplate(contentType, parsePreviewData(template.payload)),
+            revision: template.revision,
+        };
+    }
+    catch (error) {
+        Logger.error(`contentTemplate: invalid template for ${contentType.name}`, error);
+        return { configured: false };
+    }
+};
+export const saveContentTemplate = async ({ contentType, db, expectedRevision, modules, options, }) => {
+    const value = validateContentTemplate(contentType, modules);
+    const current = await db.find(ContentTemplate, {
+        contentType: contentType.name,
+    });
+    if (!current) {
+        const created = await db.create(ContentTemplate, {
+            _type: ContentTemplate.name,
+            contentType: contentType.name,
+            payload: serializePreviewData(value),
+            revision: 1,
+            createdBy: options?.actorId,
+            updatedBy: options?.actorId,
+        }, options);
+        return { configured: true, modules: value, revision: created.revision };
+    }
+    if (expectedRevision === undefined || current.revision !== expectedRevision) {
+        throw new DbErrorConflict(`The template for "${contentType.name}" was modified by another user.`);
+    }
+    const revision = current.revision + 1;
+    const rawDb = db.rawDB;
+    if (rawDb?.collection) {
+        const updated = await rawDb
+            .collection(ContentTemplate.name)
+            .findOneAndUpdate({
+            _id: parseId(current._id),
+            revision: expectedRevision,
+        }, {
+            $set: transformStringToObjectIds({
+                payload: serializePreviewData(value),
+                revision,
+                updatedBy: options?.actorId,
+                updatedAt: new Date(),
+            }),
+        }, { returnDocument: "after" });
+        if (!updated) {
+            throw new DbErrorConflict(`The template for "${contentType.name}" was modified by another user.`);
+        }
+    }
+    else {
+        await db.update(ContentTemplate, current._id, {
+            payload: serializePreviewData(value),
+            revision,
+            updatedBy: options?.actorId,
+        }, options);
+    }
+    return { configured: true, modules: value, revision };
+};
+export const applyContentTemplate = (templateModules, contentModules) => {
+    const expand = (value) => {
+        if (Array.isArray(value)) {
+            return value.flatMap((item) => isTemplateContentSlot(item)
+                ? contentModules.map((module) => structuredClone(module))
+                : [expand(item)]);
+        }
+        if (!isRecord(value))
+            return value;
+        return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, expand(item)]));
+    };
+    const expanded = expand(templateModules);
+    return Array.isArray(expanded) ? expanded : contentModules;
+};
+//# sourceMappingURL=contentTemplate.js.map

package/dist/esm/api/utils/contentTemplate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contentTemplate.js","sourceRoot":"","sources":["../../../../src/api/utils/contentTemplate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAGhF,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAQvE,MAAM,OAAO,8BAA+B,SAAQ,KAAK;CAAG;AAE5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,EAAE,CAAC,CAAC;IAC9C,IAAI,EAAE,eAAe,CAAC,IAAI;IAC1B,KAAK,EAAE;QACL,IAAI,EAAE,KAAc;QACpB,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE;KACtC;CACF,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAc,EAAE,EAAE;IACtD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAE1E,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;IAC9B,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvC,IAAI,SAAS,CAAC,KAAK,KAAK,eAAe,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAE1D,OAAO,CACL,SAAS,CAAC,IAAI,KAAK,KAAK;QACxB,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,eAAe,CAAC,IAAI,CAC9C,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,+BAA+B,GAAG,CACtC,WAAwB,EACxB,KAAc,EACN,EAAE;IACV,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAE/B,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAC9C,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACtB,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EACtD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,KAAe,EAAE,KAAc,EAAU,EAAE;IAC5E,IACE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC;QAC1D,QAAQ,IAAI,KAAK;QACjB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAC3B,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAkD,CAAC;QAEzE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAClC,IAAI,qBAAqB,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAEnE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CACxB,CAAC,SAA2B,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAC3B,CAAC;YAErC,OAAO,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC,EAAE,CAAC,CAAC,CAAC;IACR,CAAC;IAED,IACE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,YAAY;QAC9B,OAAO,IAAI,KAAK;QAChB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAiB,EAAE,IAAI,CAAC,EACjF,CAAC,CACF,CAAC;IACJ,CAAC;IAED,IACE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,aAAa;QAC/B,aAAa,IAAI,KAAK;QACtB,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,IAAI,KAAK,KAAK;QACpB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EACpB,CAAC;QACD,OAAO,+BAA+B,CACpC,KAAK,CAAC,WAA0B,EAChC,KAAK,CAAC,IAAI,CACX,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,KAAc,EAAW,EAAE;IACnE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5B,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACzC,GAAG;QACH,yBAAyB,CAAC,IAAI,CAAC;KAChC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,GAAY,EAAE,MAAe,EAAW,EAAE;IACpE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACtB,IAAI,qBAAqB,CAAC,IAAI,CAAC;gBAAE,OAAO,yBAAyB,EAAE,CAAC;YAEpE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACzC,OAAO,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YAC1C,GAAG;YACH,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;SACnC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,WAAwB,EACxB,OAAgB,EACL,EAAE;IACb,IAAI,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,IAAI,8BAA8B,CACtC,iBAAiB,WAAW,CAAC,IAAI,6BAA6B,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,yBAAyB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAEpE,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,8BAA8B,CACtC,qBAAqB,WAAW,CAAC,IAAI,0CAA0C,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,aAAa;SACzB,SAAS,EAAE;SACX,KAAK,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,8BAA8B,CACtC,qBAAqB,WAAW,CAAC,IAAI,eAAe,CACrD,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,EAAa,EACb,WAAwB,EACO,EAAE;IACjC,IAAI,CAAC,WAAW,CAAC,WAAW;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAE3D,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE;QAC9C,WAAW,EAAE,WAAW,CAAC,IAAI;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAE5C,IAAI,CAAC;QACH,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,uBAAuB,CAC9B,WAAW,EACX,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CACnC;YACD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,yCAAyC,WAAW,CAAC,IAAI,EAAE,EAC3D,KAAc,CACf,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACxC,WAAW,EACX,EAAE,EACF,gBAAgB,EAChB,OAAO,EACP,OAAO,GAOR,EAAiC,EAAE;IAClC,MAAM,KAAK,GAAG,uBAAuB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE;QAC7C,WAAW,EAAE,WAAW,CAAC,IAAI;KAC9B,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAC7B,eAAe,EACf;YACE,KAAK,EAAE,eAAe,CAAC,IAAI;YAC3B,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC;YACpC,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,OAAO,EAAE,OAAO;YAC3B,SAAS,EAAE,OAAO,EAAE,OAAO;SAC5B,EACD,OAAO,CACR,CAAC;QAEF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QAC5E,MAAM,IAAI,eAAe,CACvB,qBAAqB,WAAW,CAAC,IAAI,iCAAiC,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAgC,CAAC;IAClD,IAAI,KAAK,EAAE,UAAU,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,KAAK;aACxB,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC;aAChC,gBAAgB,CACf;YACE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;YACzB,QAAQ,EAAE,gBAAgB;SAC3B,EACD;YACE,IAAI,EAAE,0BAA0B,CAAC;gBAC/B,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC;gBACpC,QAAQ;gBACR,SAAS,EAAE,OAAO,EAAE,OAAO;gBAC3B,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,CAAC;SACH,EACD,EAAE,cAAc,EAAE,OAAO,EAAE,CAC5B,CAAC;QAEJ,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CACvB,qBAAqB,WAAW,CAAC,IAAI,iCAAiC,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,MAAM,CACb,eAAe,EACf,OAAO,CAAC,GAAG,EACX;YACE,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC;YACpC,QAAQ;YACR,SAAS,EAAE,OAAO,EAAE,OAAO;SAC5B,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,eAA0B,EAC1B,cAAyB,EACd,EAAE;IACb,MAAM,MAAM,GAAG,CAAC,KAAc,EAAW,EAAE;QACzC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5B,qBAAqB,CAAC,IAAI,CAAC;gBACzB,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBACzD,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CACnB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAEnC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAChE,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;AAC7D,CAAC,CAAC"}

package/dist/esm/api/utils/getUser.d.ts

@@ -14,6 +14,7 @@ export declare const getUser: (ctx: RakunRequestContext) => Promise<{
         _trashed?: boolean | undefined;
         _revision?: number | undefined;
         _localeVariantGroupId?: string | undefined;
+        _localeVariantName?: string | undefined;
         _localeVariantRole?: import("zod").infer<typeof import("../../index.js").LocaleVariantRole> | undefined;
         trashedAt?: Date | undefined;
         trashedBy?: string | undefined;
@@ -21,7 +22,6 @@ export declare const getUser: (ctx: RakunRequestContext) => Promise<{
         updatedAt?: Date | undefined;
         createdBy?: string | undefined;
         updatedBy?: string | undefined;
-        _iteratorUnlinked?: boolean | undefined;
     };
     twoFactorEnabled: boolean;
     _type: "ManagerUser";
@@ -41,6 +41,7 @@ export declare const getUser: (ctx: RakunRequestContext) => Promise<{
     _trashed?: boolean | undefined;
     _revision?: number | undefined;
     _localeVariantGroupId?: string | undefined;
+    _localeVariantName?: string | undefined;
     _localeVariantRole?: import("zod").infer<typeof import("../../index.js").LocaleVariantRole> | undefined;
     trashedAt?: Date | undefined;
     trashedBy?: string | undefined;
@@ -48,6 +49,5 @@ export declare const getUser: (ctx: RakunRequestContext) => Promise<{
     updatedAt?: Date | undefined;
     createdBy?: string | undefined;
     updatedBy?: string | undefined;
-    _iteratorUnlinked?: boolean | undefined;
 } | null>;
 //# sourceMappingURL=getUser.d.ts.map

package/dist/esm/api/utils/managerNotifications.d.ts

@@ -0,0 +1,38 @@
+export type ManagerNotificationKind = 'comment_mention' | 'review_requested' | 'review_approved' | 'review_changes_requested' | 'review_feedback' | 'redirect_enable_requested';
+export declare const createManagerNotification: ({ userId, authorId, eventId, kind, reviewId, contentType, documentId, text, }: {
+    userId: string;
+    authorId: string;
+    eventId: string;
+    kind: ManagerNotificationKind;
+    reviewId?: string;
+    contentType: string;
+    documentId: string;
+    text: string;
+}) => Promise<{
+    user: import("../../index.js").RelationExisting<"ManagerUser">;
+    author: import("../../index.js").RelationExisting<"ManagerUser">;
+    commentId: string;
+    contentType: string;
+    documentId: string;
+    text: string;
+    read: boolean;
+    _type: "ManagerNotification";
+    _id: string;
+    kind?: "comment_mention" | "review_requested" | "review_approved" | "review_changes_requested" | "review_feedback" | "redirect_enable_requested" | undefined;
+    reviewId?: string | undefined;
+    _schemaVersion?: number | undefined;
+    _visibility?: import("../../index.js").DocumentVisibility | undefined;
+    _visibilityBeforeTrash?: Exclude<import("../../index.js").DocumentVisibility, "trash"> | undefined;
+    _trashed?: boolean | undefined;
+    _revision?: number | undefined;
+    _localeVariantGroupId?: string | undefined;
+    _localeVariantName?: string | undefined;
+    _localeVariantRole?: import("zod").infer<typeof import("../../index.js").LocaleVariantRole> | undefined;
+    trashedAt?: Date | undefined;
+    trashedBy?: string | undefined;
+    createdAt?: Date | undefined;
+    updatedAt?: Date | undefined;
+    createdBy?: string | undefined;
+    updatedBy?: string | undefined;
+} | null>;
+//# sourceMappingURL=managerNotifications.d.ts.map

package/dist/esm/api/utils/managerNotifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managerNotifications.d.ts","sourceRoot":"","sources":["../../../../src/api/utils/managerNotifications.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,uBAAuB,GAC/B,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,GACjB,0BAA0B,GAC1B,iBAAiB,GACjB,2BAA2B,CAAA;AAE/B,eAAO,MAAM,yBAAyB,GAAU,+EAS7C;IACD,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,uBAAuB,CAAA;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;CACb;;;;;;;;;;;;;;;;;;;;;;;;;;SAsBA,CAAA"}

package/dist/esm/api/utils/managerNotifications.js

@@ -0,0 +1,23 @@
+import { ManagerNotification, ManagerUser, } from '../../internal-content-types/index.js';
+import { getMongoService } from '../../orm/index.js';
+import { relation } from './reviews.js';
+export const createManagerNotification = async ({ userId, authorId, eventId, kind, reviewId, contentType, documentId, text, }) => {
+    if (userId === authorId)
+        return null;
+    const db = await getMongoService();
+    return await db.create(ManagerNotification, {
+        _type: ManagerNotification.name,
+        user: relation(ManagerUser.name, userId),
+        author: relation(ManagerUser.name, authorId),
+        commentId: eventId,
+        ...(kind === 'comment_mention' ? {} : { kind }),
+        reviewId,
+        contentType,
+        documentId,
+        text,
+        read: false,
+        createdBy: authorId,
+        updatedBy: authorId,
+    }, { actorId: authorId });
+};
+//# sourceMappingURL=managerNotifications.js.map

package/dist/esm/api/utils/managerNotifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managerNotifications.js","sourceRoot":"","sources":["../../../../src/api/utils/managerNotifications.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,WAAW,GACZ,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAUpC,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAAE,EAC9C,MAAM,EACN,QAAQ,EACR,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,WAAW,EACX,UAAU,EACV,IAAI,GAUL,EAAE,EAAE;IACH,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAEpC,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAA;IAClC,OAAO,MAAM,EAAE,CAAC,MAAM,CACpB,mBAAmB,EACnB;QACE,KAAK,EAAE,mBAAmB,CAAC,IAAI;QAC/B,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC;QACxC,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC5C,SAAS,EAAE,OAAO;QAClB,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/C,QAAQ;QACR,WAAW;QACX,UAAU;QACV,IAAI;QACJ,IAAI,EAAE,KAAK;QACX,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,QAAQ;KACpB,EACD,EAAE,OAAO,EAAE,QAAQ,EAAE,CACtB,CAAA;AACH,CAAC,CAAA"}

package/dist/esm/api/utils/recoveryCodes.d.ts

@@ -0,0 +1,9 @@
+export declare const MFA_RECOVERY_CODE_COUNT = 10;
+export declare const normalizeRecoveryCode: (value: string) => string;
+export declare const hashRecoveryCode: (value: string) => string;
+export declare const generateRecoveryCodes: () => {
+    codes: string[];
+    hashes: string[];
+};
+export declare const findRecoveryCodeHash: (code: string, hashes: readonly string[]) => string | undefined;
+//# sourceMappingURL=recoveryCodes.d.ts.map

package/dist/esm/api/utils/recoveryCodes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoveryCodes.d.ts","sourceRoot":"","sources":["../../../../src/api/utils/recoveryCodes.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,KAAK,CAAA;AAEzC,eAAO,MAAM,qBAAqB,GAAI,OAAO,MAAM,WACD,CAAA;AAElD,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,WAC2B,CAAA;AAEzE,eAAO,MAAM,qBAAqB;;;CAUjC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAC/B,MAAM,MAAM,EACZ,QAAQ,SAAS,MAAM,EAAE,uBAQ1B,CAAA"}

package/dist/esm/api/utils/recoveryCodes.js

@@ -0,0 +1,22 @@
+import { createHash, randomBytes, timingSafeEqual } from 'crypto';
+export const MFA_RECOVERY_CODE_COUNT = 10;
+export const normalizeRecoveryCode = (value) => value.replace(/[^a-zA-Z0-9]/g, '').toUpperCase();
+export const hashRecoveryCode = (value) => createHash('sha256').update(normalizeRecoveryCode(value)).digest('hex');
+export const generateRecoveryCodes = () => {
+    const codes = Array.from({ length: MFA_RECOVERY_CODE_COUNT }, () => {
+        const value = randomBytes(8).toString('hex').toUpperCase();
+        return value.match(/.{1,4}/g)?.join('-') ?? value;
+    });
+    return {
+        codes,
+        hashes: codes.map(hashRecoveryCode),
+    };
+};
+export const findRecoveryCodeHash = (code, hashes) => {
+    const candidate = Buffer.from(hashRecoveryCode(code), 'hex');
+    return hashes.find((hash) => {
+        const stored = Buffer.from(hash, 'hex');
+        return stored.length === candidate.length && timingSafeEqual(stored, candidate);
+    });
+};
+//# sourceMappingURL=recoveryCodes.js.map

package/dist/esm/api/utils/recoveryCodes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoveryCodes.js","sourceRoot":"","sources":["../../../../src/api/utils/recoveryCodes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAA;AAEjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAA;AAEzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAa,EAAE,EAAE,CACrD,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;AAElD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAE,EAAE,CAChD,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAEzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,EAAE;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,GAAG,EAAE;QACjE,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QAC1D,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,KAAK;QACL,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC;KACpC,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAAY,EACZ,MAAyB,EACzB,EAAE;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;IAE5D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACvC,OAAO,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/esm/api/utils/redirects/createSlugChangeRedirects.d.ts

@@ -0,0 +1,14 @@
+import type { ManagerUserSchema } from '../../../internal-content-types/ManagerUser.js';
+import type { SlugPathChange } from '../../../schemas/manager/slugRedirects.js';
+export declare const createSlugChangeRedirects: ({ changes, user, sourceContentType, sourceDocumentId, }: {
+    changes: readonly SlugPathChange[];
+    user: ManagerUserSchema;
+    sourceContentType: string;
+    sourceDocumentId: string;
+}) => Promise<{
+    _id: string;
+    enabled: boolean;
+    from: string;
+    to: string;
+}[]>;
+//# sourceMappingURL=createSlugChangeRedirects.d.ts.map

package/dist/esm/api/utils/redirects/createSlugChangeRedirects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSlugChangeRedirects.d.ts","sourceRoot":"","sources":["../../../../../src/api/utils/redirects/createSlugChangeRedirects.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAA;AASpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAA;AAuH5E,eAAO,MAAM,yBAAyB,GAAU,yDAK7C;IACD,OAAO,EAAE,SAAS,cAAc,EAAE,CAAA;IAClC,IAAI,EAAE,iBAAiB,CAAA;IACvB,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;CACzB;SAMQ,MAAM;aACF,OAAO;UACV,MAAM;QACR,MAAM;IAsFb,CAAA"}

package/dist/esm/api/utils/redirects/createSlugChangeRedirects.js

@@ -0,0 +1,141 @@
+import { Redirect } from '../../../internal-content-types/index.js';
+import { isAdminRole } from '../../../lib/ManagerRolePolicy.js';
+import { getContentPermission, hasPermissions, } from '../../../lib/Permissions.js';
+import { getMongoService } from '../../../orm/index.js';
+import { createManagerNotification, } from '../managerNotifications.js';
+import { loadUsersWithRoles } from '../reviews.js';
+const REDIRECT_ENABLE_KIND = 'redirect_enable_requested';
+const buildRedirectPayload = ({ change, enabled, actorId, }) => ({
+    _type: Redirect.name,
+    name: `Slug change: ${change.from} → ${change.to}`,
+    enabled,
+    sourcePath: change.from,
+    destinationPath: change.to,
+    statusMode: '301',
+    preserveQuery: true,
+    headerName: '',
+    headerMatchMode: 'none',
+    headerValue: '',
+    functionName: 'none',
+    functionConfig: '',
+    createdBy: actorId,
+    updatedBy: actorId,
+});
+const canCreateRedirect = (user) => {
+    const createPermission = getContentPermission(Redirect, 'own');
+    if (!createPermission)
+        return true;
+    return hasPermissions(user, [createPermission]);
+};
+const canEnableRedirect = (user) => {
+    if (isAdminRole(user.role))
+        return true;
+    const updateAny = getContentPermission(Redirect, 'updateAny');
+    if (!updateAny)
+        return false;
+    return hasPermissions({
+        role: {
+            name: user.role.name,
+            permissions: user.role.permissions,
+        },
+    }, [updateAny]);
+};
+const isSimplePathRedirect = (item) => {
+    const headerName = typeof item.headerName === 'string' ? item.headerName.trim() : '';
+    const headerMatchMode = item.headerMatchMode ?? 'none';
+    return headerName === '' && headerMatchMode === 'none';
+};
+const findRedirectBySourcePath = async (sourcePath) => {
+    const db = await getMongoService();
+    const existing = await db.list(Redirect, {
+        filter: { sourcePath },
+        options: { limit: 'all' },
+    });
+    return existing.items.find(isSimplePathRedirect) ?? null;
+};
+const listSimpleRedirectsByDestination = async (destinationPath) => {
+    const db = await getMongoService();
+    const existing = await db.list(Redirect, {
+        filter: { destinationPath },
+        options: { limit: 'all' },
+    });
+    return existing.items.filter(isSimplePathRedirect);
+};
+const notifyRedirectEnableRequested = async ({ redirectId, authorId, sourceContentType, sourceDocumentId, change, }) => {
+    const recipients = (await loadUsersWithRoles()).filter((user) => canEnableRedirect(user) && user._id !== authorId);
+    await Promise.all(recipients.map((user) => createManagerNotification({
+        userId: user._id,
+        authorId,
+        eventId: redirectId,
+        kind: REDIRECT_ENABLE_KIND,
+        contentType: 'Redirect',
+        documentId: redirectId,
+        text: `Enable permanent redirect ${change.from} → ${change.to} for ${sourceContentType}/${sourceDocumentId}`,
+    })));
+};
+export const createSlugChangeRedirects = async ({ changes, user, sourceContentType, sourceDocumentId, }) => {
+    if (changes.length === 0)
+        return [];
+    const db = await getMongoService();
+    const enabled = canCreateRedirect(user);
+    const results = [];
+    for (const change of changes) {
+        if (change.from === change.to)
+            continue;
+        // Reclaiming `to`: that path becomes live again, so any redirect whose
+        // source is `to` must go (e.g. h1→h2 then back to h1 deletes h1→h2).
+        const reclaiming = await findRedirectBySourcePath(change.to);
+        if (reclaiming) {
+            await db.delete(Redirect, { _id: reclaiming._id }, { actorId: user._id, reason: 'slug change redirect reclaim' });
+        }
+        // Compounding: anything that pointed at the old live path should follow
+        // the new one (A→B then B→C becomes A→C and B→C).
+        const incoming = await listSimpleRedirectsByDestination(change.from);
+        for (const redirect of incoming) {
+            if (redirect.sourcePath === change.to) {
+                await db.delete(Redirect, { _id: redirect._id }, { actorId: user._id, reason: 'slug change redirect self-loop' });
+                continue;
+            }
+            await db.update(Redirect, redirect._id, {
+                name: `Slug change: ${redirect.sourcePath} → ${change.to}`,
+                destinationPath: change.to,
+                statusMode: '301',
+                preserveQuery: true,
+                updatedBy: user._id,
+            }, { actorId: user._id, reason: 'slug change redirect compound' });
+        }
+        const payload = buildRedirectPayload({
+            change,
+            enabled,
+            actorId: user._id,
+        });
+        const existing = await findRedirectBySourcePath(change.from);
+        const redirect = existing
+            ? await db.update(Redirect, existing._id, {
+                name: payload.name,
+                destinationPath: payload.destinationPath,
+                statusMode: payload.statusMode,
+                preserveQuery: payload.preserveQuery,
+                enabled: payload.enabled,
+                updatedBy: user._id,
+            }, { actorId: user._id, reason: 'slug change redirect' })
+            : await db.create(Redirect, payload, { actorId: user._id });
+        results.push({
+            _id: redirect._id,
+            enabled: Boolean(redirect.enabled),
+            from: change.from,
+            to: change.to,
+        });
+        if (!enabled) {
+            await notifyRedirectEnableRequested({
+                redirectId: redirect._id,
+                authorId: user._id,
+                sourceContentType,
+                sourceDocumentId,
+                change,
+            });
+        }
+    }
+    return results;
+};
+//# sourceMappingURL=createSlugChangeRedirects.js.map