@sanity/sdk 3.0.0-rc.0 → 3.0.0-rc.2

package/src/document/processActions/discard.ts

@@ -0,0 +1,63 @@
+import {DocumentId, getDraftId, getVersionId} from '@sanity/id-utils'
+import {type Mutation} from '@sanity/types'
+
+import {isReleasePerspective} from '../../releases/utils/isReleasePerspective'
+import {type DiscardDocumentAction} from '../actions'
+import {getId, processMutations} from '../processMutations'
+import {
+  ActionError,
+  type ActionHandlerContext,
+  type ActionHandlerResult,
+  checkGrant,
+  PermissionActionError,
+} from './shared'
+
+export function handleDiscard(
+  action: DiscardDocumentAction,
+  ctx: ActionHandlerContext,
+): ActionHandlerResult {
+  const {transactionId, timestamp, grants, identity, outgoingActions, outgoingMutations} = ctx
+  let {base, working} = ctx
+
+  const documentId = getId(action.documentId)
+
+  if (action.liveEdit) {
+    throw new ActionError({
+      documentId,
+      transactionId,
+      message: `Cannot discard changes for liveEdit document "${documentId}". LiveEdit documents do not support drafts.`,
+    })
+  }
+
+  // draft/published or version logic
+  const versionId = isReleasePerspective(action.perspective)
+    ? getVersionId(DocumentId(documentId), action.perspective.releaseName)
+    : getDraftId(DocumentId(documentId))
+  const mutations: Mutation[] = [{delete: {id: versionId}}]
+
+  if (!working[versionId]) {
+    throw new ActionError({
+      documentId,
+      transactionId,
+      message: `There is no draft or version available to discard for document "${documentId}".`,
+    })
+  }
+
+  if (!checkGrant(grants.update, working[versionId], identity)) {
+    throw new PermissionActionError({
+      documentId,
+      transactionId,
+      message: `You do not have permission to discard changes for document "${documentId}".`,
+    })
+  }
+
+  base = processMutations({documents: base, transactionId, mutations, timestamp})
+  working = processMutations({documents: working, transactionId, mutations, timestamp})
+
+  outgoingMutations.push(...mutations)
+  outgoingActions.push({
+    actionType: 'sanity.action.document.version.discard',
+    versionId,
+  })
+  return {base, working}
+}

package/src/document/processActions/edit.ts

@@ -0,0 +1,154 @@
+import {diffValue} from '@sanity/diff-patch'
+import {DocumentId, getDraftId, getPublishedId, getVersionId} from '@sanity/id-utils'
+import {type Mutation, type PatchOperations, type SanityDocument} from '@sanity/types'
+
+import {isReleasePerspective} from '../../releases/utils/isReleasePerspective'
+import {type EditDocumentAction} from '../actions'
+import {getId} from '../processMutations'
+import {
+  ActionError,
+  type ActionHandlerContext,
+  type ActionHandlerResult,
+  applySingleDocPatch,
+  checkGrant,
+  createMutationApplier,
+  PermissionActionError,
+  preserveNumericOperations,
+} from './shared'
+
+export function handleEdit(
+  action: EditDocumentAction,
+  ctx: ActionHandlerContext,
+): ActionHandlerResult {
+  const {transactionId, timestamp, grants, identity, outgoingActions, outgoingMutations} = ctx
+  let {base, working} = ctx
+
+  const documentId = getId(action.documentId)
+
+  if (action.liveEdit) {
+    const result = applySingleDocPatch({
+      base,
+      working,
+      documentId,
+      patches: action.patches,
+      transactionId,
+      timestamp,
+      grants,
+      identity,
+      preserveOperations: action.preserveOperations,
+    })
+    // liveEdit documents use the mutation endpoint directly -- we don't send actions
+    outgoingMutations.push(...result.workingMutations)
+    return {base: result.base, working: result.working}
+  }
+
+  const versionId = isReleasePerspective(action.perspective)
+    ? getVersionId(DocumentId(documentId), action.perspective.releaseName)
+    : undefined
+  const draftId = getDraftId(DocumentId(documentId))
+  const publishedId = getPublishedId(DocumentId(documentId))
+  const patchDocumentId = isReleasePerspective(action.perspective) ? versionId! : draftId
+  const userPatches = action.patches?.map((patch) => ({
+    patch: {id: patchDocumentId, ...patch},
+  }))
+
+  // skip this action if there are no associated patches
+  if (!userPatches?.length) return {base, working}
+
+  if (isReleasePerspective(action.perspective)) {
+    if (!working[versionId!] && !base[versionId!]) {
+      throw new ActionError({
+        documentId,
+        transactionId,
+        message: `This document does not exist in the release. Please create it or add it to the release first.`,
+      })
+    }
+  } else if (
+    (!working[draftId] && !working[publishedId]) ||
+    (!base[draftId] && !base[publishedId])
+  ) {
+    throw new ActionError({
+      documentId,
+      transactionId,
+      message: `Cannot edit document because it does not exist in draft or published form.`,
+    })
+  }
+
+  const applyMutations = createMutationApplier({
+    documentId,
+    transactionId,
+    timestamp,
+    preserveOperations: action.preserveOperations,
+  })
+
+  const baseMutations: Mutation[] = []
+  // don't create a draft from the published version in a release perspective
+  if (!isReleasePerspective(action.perspective) && !base[draftId] && base[publishedId]) {
+    // otherwise make a draft from the published version
+    baseMutations.push({create: {...base[publishedId], _id: draftId}})
+  }
+
+  // the above statement and guards should make this never be null or undefined
+  const baseBefore = base[patchDocumentId] ?? base[publishedId]
+  if (userPatches) {
+    baseMutations.push(...userPatches)
+  }
+
+  base = applyMutations(base, baseMutations, 'base')
+  // this one will always be defined because a patch mutation will never
+  // delete an input document
+  const baseAfter = base[patchDocumentId] as SanityDocument
+  // when the caller asked us to preserve their operations, forward their
+  // patches verbatim instead of re-deriving them from a snapshot diff. this
+  // keeps keyed array operations addressable so concurrent edits from other
+  // clients interleave instead of being overwritten. otherwise, diff the
+  // snapshots but swap back any `inc`/`dec` the diff collapsed into a `set`,
+  // so concurrent increments accumulate instead of last-write-winning
+  const patches = action.preserveOperations
+    ? (action.patches ?? [])
+    : preserveNumericOperations(
+        baseBefore,
+        action.patches,
+        diffValue(baseBefore, baseAfter) as PatchOperations[],
+      )
+
+  const workingMutations: Mutation[] = []
+  if (!isReleasePerspective(action.perspective) && !working[draftId] && working[publishedId]) {
+    const newDraftFromPublished = {...working[publishedId], _id: draftId}
+
+    if (!checkGrant(grants.create, newDraftFromPublished, identity)) {
+      throw new PermissionActionError({
+        documentId,
+        transactionId,
+        message: `You do not have permission to create a draft for editing this document.`,
+      })
+    }
+
+    workingMutations.push({create: newDraftFromPublished})
+  }
+
+  // the first if statement should make this never be null or undefined
+  const workingBefore = working[patchDocumentId] ?? working[publishedId]
+  if (!checkGrant(grants.update, workingBefore!, identity)) {
+    throw new PermissionActionError({
+      documentId,
+      transactionId,
+      message: `You do not have permission to edit document "${documentId}".`,
+    })
+  }
+  workingMutations.push(...patches.map((patch) => ({patch: {id: patchDocumentId, ...patch}})))
+
+  working = applyMutations(working, workingMutations, 'working')
+
+  outgoingMutations.push(...workingMutations)
+  outgoingActions.push(
+    ...patches.map((patch) => ({
+      actionType: 'sanity.action.document.edit' as const,
+      draftId: patchDocumentId,
+      publishedId,
+      patch: patch as PatchOperations,
+    })),
+  )
+
+  return {base, working}
+}

package/src/document/processActions/processActions.ts

@@ -0,0 +1,218 @@
+import {type Mutation} from '@sanity/types'
+import {type ExprNode} from 'groq-js'
+
+import {type Action, type DocumentAction} from '../actions'
+import {type Grant} from '../permissions'
+import {type DocumentSet} from '../processMutations'
+import {type HttpAction} from '../reducers'
+import {handleCreate} from './create'
+import {handleDelete} from './delete'
+import {handleDiscard} from './discard'
+import {handleEdit} from './edit'
+import {handlePublish} from './publish'
+import {handleReleaseArchive, handleReleaseUnarchive} from './releaseArchive'
+import {handleReleaseCreate} from './releaseCreate'
+import {handleReleaseDelete} from './releaseDelete'
+import {handleReleaseEdit} from './releaseEdit'
+import {handleReleasePublish} from './releasePublish'
+import {handleReleaseSchedule, handleReleaseUnschedule} from './releaseSchedule'
+import {isReleaseAction} from './releaseUtil'
+import {
+  ActionError,
+  type ActionHandlerContext,
+  type ActionHandlerResult,
+  PermissionActionError,
+} from './shared'
+import {handleUnpublish} from './unpublish'
+
+export {ActionError, PermissionActionError}
+
+interface ProcessActionsOptions {
+  /**
+   * The ID of this transaction. This will become the resulting `_rev` for all
+   * documents affected by changes derived from the current set of actions.
+   */
+  transactionId: string
+
+  /**
+   * The actions to apply to the given documents
+   */
+  actions: Action[]
+
+  /**
+   * The set of documents these actions were intended to be applied to. These
+   * set of documents should be captured right before a queued action is
+   * applied.
+   */
+  base: DocumentSet
+
+  /**
+   * The current "working" set of documents. A patch will be created by applying
+   * the actions to the base. This patch will then be applied to the working
+   * set for conflict resolution. Initially, this value should match the base
+   * set.
+   */
+  working: DocumentSet
+
+  /**
+   * The timestamp to use for `_updateAt` and other similar timestamps for this
+   * transaction
+   */
+  timestamp: string
+
+  /**
+   * the lookup with pre-parsed GROQ expressions
+   */
+  grants: Record<Grant, ExprNode>
+
+  /**
+   * The current user's ID, passed to GROQ as the value of `identity()` when
+   * evaluating ACL filters. Optional because the user may not have loaded yet;
+   * filters that reference `identity()` will evaluate to null in that case.
+   */
+  identity?: string
+
+  // // TODO: implement initial values from the schema?
+  // initialValues?: {[TDocumentType in string]?: {_type: string}}
+}
+
+interface ProcessActionsResult {
+  /**
+   * The resulting document set after the actions have been applied. This is
+   * derived from the working documents.
+   */
+  working: DocumentSet
+  /**
+   * The document set before the actions have been applied. This is simply the
+   * input of the `working` document set.
+   */
+  previous: DocumentSet
+  /**
+   * The outgoing action that were collected when applying the actions. These
+   * are sent to the Actions HTTP API
+   */
+  outgoingActions: HttpAction[]
+  /**
+   * The outgoing mutations that were collected when applying the actions. These
+   * are here for debugging purposes.
+   */
+  outgoingMutations: Mutation[]
+  /**
+   * The previous revisions of the given documents before the actions were applied.
+   */
+  previousRevs: {[TDocumentId in string]?: string}
+}
+
+/**
+ * Applies the given set of actions to the working set of documents and converts
+ * high-level actions into lower-level outgoing mutations/actions that respect
+ * the current state of the working documents.
+ *
+ * Supports a "base" and "working" set of documents to allow actions to be
+ * applied on top of a different working set of documents in a 3-way merge
+ *
+ * Actions are applied to the base set of documents first. The difference
+ * between the base before and after is used to create a patch. This patch is
+ * then applied to the working set of documents and is set as the outgoing patch
+ * sent to the server.
+ */
+export function processActions({
+  actions,
+  transactionId,
+  working: initialWorking,
+  base: initialBase,
+  timestamp,
+  grants,
+  identity,
+}: ProcessActionsOptions): ProcessActionsResult {
+  let base: DocumentSet = {...initialBase}
+  let working: DocumentSet = {...initialWorking}
+
+  const outgoingActions: HttpAction[] = []
+  const outgoingMutations: Mutation[] = []
+
+  // liveEdit document actions go to the mutations API, since the actions API
+  // requires a draft+published pair. Mixing them with anything else in the same
+  // transaction would silently lose atomicity for the non-liveEdit operations,
+  // so require users to split the transaction.
+  // (Note that the reducers already does this for us -- you'd have to try hard to mix them.)
+  const liveEditAction = actions.find((action) => !isReleaseAction(action) && action.liveEdit) as
+    | DocumentAction
+    | undefined
+  const otherAction = actions.find((action) => isReleaseAction(action) || !action.liveEdit)
+  if (liveEditAction && otherAction) {
+    throw new ActionError({
+      documentId: liveEditAction.documentId!,
+      transactionId,
+      message:
+        'Cannot combine liveEdit document actions with other actions in the same transaction. Submit them as separate transactions.',
+    })
+  }
+
+  for (const action of actions) {
+    const result = dispatch(action, {
+      base,
+      working,
+      transactionId,
+      timestamp,
+      grants,
+      identity,
+      outgoingActions,
+      outgoingMutations,
+    })
+    base = result.base
+    working = result.working
+  }
+
+  const previousRevs = Object.fromEntries(
+    Object.entries(initialWorking).map(([id, doc]) => [id, doc?._rev]),
+  )
+
+  return {
+    working,
+    outgoingActions,
+    outgoingMutations,
+    previous: initialWorking,
+    previousRevs,
+  }
+}
+
+function dispatch(action: Action, ctx: ActionHandlerContext): ActionHandlerResult {
+  switch (action.type) {
+    case 'document.create':
+      return handleCreate(action, ctx)
+    case 'document.delete':
+      return handleDelete(action, ctx)
+    case 'document.discard':
+      return handleDiscard(action, ctx)
+    case 'document.edit':
+      return handleEdit(action, ctx)
+    case 'document.publish':
+      return handlePublish(action, ctx)
+    case 'document.unpublish':
+      return handleUnpublish(action, ctx)
+    case 'release.create':
+      return handleReleaseCreate(action, ctx)
+    case 'release.edit':
+      return handleReleaseEdit(action, ctx)
+    case 'release.publish':
+      return handleReleasePublish(action, ctx)
+    case 'release.schedule':
+      return handleReleaseSchedule(action, ctx)
+    case 'release.unschedule':
+      return handleReleaseUnschedule(action, ctx)
+    case 'release.archive':
+      return handleReleaseArchive(action, ctx)
+    case 'release.unarchive':
+      return handleReleaseUnarchive(action, ctx)
+    case 'release.delete':
+      return handleReleaseDelete(action, ctx)
+    default:
+      throw new Error(
+        `Unknown action type: "${
+          // @ts-expect-error invalid input
+          action.type
+        }". Please contact support if this issue persists.`,
+      )
+  }
+}

package/src/document/processActions/publish.ts

@@ -0,0 +1,120 @@
+import {DocumentId, getDraftId, getPublishedId} from '@sanity/id-utils'
+import {type Mutation, type Reference, type SanityDocument} from '@sanity/types'
+
+import {isReleasePerspective} from '../../releases/utils/isReleasePerspective'
+import {isDeepEqual} from '../../utils/object'
+import {type PublishDocumentAction} from '../actions'
+import {getId, processMutations} from '../processMutations'
+import {
+  ActionError,
+  type ActionHandlerContext,
+  type ActionHandlerResult,
+  checkGrant,
+  PermissionActionError,
+} from './shared'
+
+export function handlePublish(
+  action: PublishDocumentAction,
+  ctx: ActionHandlerContext,
+): ActionHandlerResult {
+  const {transactionId, timestamp, grants, identity, outgoingActions, outgoingMutations} = ctx
+  let {base, working} = ctx
+
+  const documentId = getId(action.documentId)
+
+  if (action.liveEdit || isReleasePerspective(action.perspective)) {
+    throw new ActionError({
+      documentId,
+      transactionId,
+      message: `Cannot publish this document. Publishing is not supported for liveEdit or version (release) documents.`,
+    })
+  }
+
+  // Standard draft/published logic
+  const draftId = getDraftId(DocumentId(documentId))
+  const publishedId = getPublishedId(DocumentId(documentId))
+
+  const workingDraft = working[draftId]
+  const baseDraft = base[draftId]
+  if (!workingDraft || !baseDraft) {
+    throw new ActionError({
+      documentId,
+      transactionId,
+      message: `Cannot publish because no draft version was found for document "${documentId}".`,
+    })
+  }
+
+  // Before proceeding, verify that the working draft is identical to the base draft.
+  // TODO: is it enough just to check for the _rev or nah?
+  if (!isDeepEqual(workingDraft, baseDraft)) {
+    throw new ActionError({
+      documentId,
+      transactionId,
+      message: `Publish aborted: The document has changed elsewhere. Please try again.`,
+    })
+  }
+
+  const newPublishedFromDraft = {...strengthenOnPublish(workingDraft), _id: publishedId}
+
+  const mutations: Mutation[] = [{delete: {id: draftId}}, {createOrReplace: newPublishedFromDraft}]
+
+  if (working[draftId] && !checkGrant(grants.update, working[draftId], identity)) {
+    throw new PermissionActionError({
+      documentId,
+      transactionId,
+      message: `Publish failed: You do not have permission to update the draft for "${documentId}".`,
+    })
+  }
+
+  if (working[publishedId] && !checkGrant(grants.update, newPublishedFromDraft, identity)) {
+    throw new PermissionActionError({
+      documentId,
+      transactionId,
+      message: `Publish failed: You do not have permission to update the published version of "${documentId}".`,
+    })
+  } else if (!working[publishedId] && !checkGrant(grants.create, newPublishedFromDraft, identity)) {
+    throw new PermissionActionError({
+      documentId,
+      transactionId,
+      message: `Publish failed: You do not have permission to publish a new version of "${documentId}".`,
+    })
+  }
+
+  base = processMutations({documents: base, transactionId, mutations, timestamp})
+  working = processMutations({documents: working, transactionId, mutations, timestamp})
+
+  outgoingMutations.push(...mutations)
+  outgoingActions.push({
+    actionType: 'sanity.action.document.publish',
+    draftId,
+    publishedId,
+  })
+  return {base, working}
+}
+
+function strengthenOnPublish(draft: SanityDocument): SanityDocument {
+  const isStrengthenReference = (
+    value: object,
+  ): value is Reference & Required<Pick<Reference, '_strengthenOnPublish'>> =>
+    '_strengthenOnPublish' in value
+
+  function strengthen(value: unknown): unknown {
+    if (typeof value !== 'object' || !value) return value
+
+    if (isStrengthenReference(value)) {
+      const {_strengthenOnPublish, _weak, ...rest} = value
+      return {
+        ...rest,
+        ...(_strengthenOnPublish.weak && {_weak: true}),
+      }
+    }
+
+    if (Array.isArray(value)) {
+      return value.map(strengthen)
+    }
+
+    return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, strengthen(v)]))
+  }
+
+  return strengthen(draft) as SanityDocument
+}

package/src/document/processActions/releaseArchive.ts

@@ -0,0 +1,77 @@
+import {type ArchiveReleaseAction, type UnarchiveReleaseAction} from '../actions'
+import {getReleaseDocumentId} from './releaseUtil'
+import {
+  ActionError,
+  type ActionHandlerContext,
+  type ActionHandlerResult,
+  checkGrant,
+  PermissionActionError,
+} from './shared'
+
+export function handleReleaseArchive(
+  action: ArchiveReleaseAction,
+  ctx: ActionHandlerContext,
+): ActionHandlerResult {
+  const {base, working, grants, outgoingActions, transactionId, identity} = ctx
+
+  const releaseDocumentId = getReleaseDocumentId(action.releaseId)
+  const existing = working[releaseDocumentId] ?? base[releaseDocumentId]
+  if (!existing) {
+    throw new ActionError({
+      documentId: releaseDocumentId,
+      transactionId,
+      message: `Cannot archive release "${action.releaseId}" because it does not exist.`,
+    })
+  }
+
+  if (!checkGrant(grants.update, existing, identity)) {
+    throw new PermissionActionError({
+      documentId: releaseDocumentId,
+      transactionId,
+      message: `You do not have permission to archive release "${action.releaseId}".`,
+    })
+  }
+
+  // Archiving deletes every version document in the release server-side.
+  // Although technically we could search through the document store for all related
+  // version documents, for now it's simpler to just let the server handle it.
+  // (Those local documents will be eventually updated by the listener.)
+  outgoingActions.push({
+    actionType: 'sanity.action.release.archive',
+    releaseId: action.releaseId,
+  })
+
+  return {base, working}
+}
+
+export function handleReleaseUnarchive(
+  action: UnarchiveReleaseAction,
+  ctx: ActionHandlerContext,
+): ActionHandlerResult {
+  const {base, working, grants, outgoingActions, transactionId, identity} = ctx
+
+  const releaseDocumentId = getReleaseDocumentId(action.releaseId)
+  const existing = working[releaseDocumentId] ?? base[releaseDocumentId]
+  if (!existing) {
+    throw new ActionError({
+      documentId: releaseDocumentId,
+      transactionId,
+      message: `Cannot unarchive release "${action.releaseId}" because it does not exist.`,
+    })
+  }
+
+  if (!checkGrant(grants.update, existing, identity)) {
+    throw new PermissionActionError({
+      documentId: releaseDocumentId,
+      transactionId,
+      message: `You do not have permission to unarchive release "${action.releaseId}".`,
+    })
+  }
+
+  outgoingActions.push({
+    actionType: 'sanity.action.release.unarchive',
+    releaseId: action.releaseId,
+  })
+
+  return {base, working}
+}

package/src/document/processActions/releaseCreate.ts

@@ -0,0 +1,59 @@
+import {type Mutation, type SanityDocument} from '@sanity/types'
+
+import {type CreateReleaseAction} from '../actions'
+import {processMutations} from '../processMutations'
+import {getReleaseDocumentId} from './releaseUtil'
+import {
+  ActionError,
+  type ActionHandlerContext,
+  type ActionHandlerResult,
+  checkGrant,
+  PermissionActionError,
+} from './shared'
+
+export function handleReleaseCreate(
+  action: CreateReleaseAction,
+  ctx: ActionHandlerContext,
+): ActionHandlerResult {
+  const {transactionId, timestamp, grants, outgoingActions, outgoingMutations, identity} = ctx
+  let {base, working} = ctx
+
+  const releaseDocumentId = getReleaseDocumentId(action.releaseId)
+
+  if (working[releaseDocumentId] || base[releaseDocumentId]) {
+    throw new ActionError({
+      documentId: releaseDocumentId,
+      transactionId,
+      message: `A release with id "${action.releaseId}" already exists.`,
+    })
+  }
+  // Optimistic local release doc
+  const releaseDoc = {
+    _id: releaseDocumentId,
+    _type: 'system.release',
+    name: action.releaseId,
+    state: 'active',
+    metadata: action.metadata,
+  }
+  const mutations: Mutation[] = [{create: releaseDoc}]
+
+  base = processMutations({documents: base, transactionId, mutations, timestamp})
+  working = processMutations({documents: working, transactionId, mutations, timestamp})
+
+  if (!checkGrant(grants.create, working[releaseDocumentId] as SanityDocument, identity)) {
+    throw new PermissionActionError({
+      documentId: releaseDocumentId,
+      transactionId,
+      message: `You do not have permission to create release "${action.releaseId}".`,
+    })
+  }
+
+  outgoingMutations.push(...mutations)
+  outgoingActions.push({
+    actionType: 'sanity.action.release.create',
+    releaseId: action.releaseId,
+    metadata: action.metadata,
+  })
+
+  return {base, working}
+}