@strapi/core 0.0.0-experimental.00380841fe1b29f71fe755bb387fa1f75073621b

package/dist/services/content-api/permissions/engine.mjs

@@ -0,0 +1,8 @@
+import permissions from '@strapi/permissions';
+
+var createPermissionEngine = (({ providers })=>permissions.engine.new({
+        providers
+    }));
+
+export { createPermissionEngine as default };
+//# sourceMappingURL=engine.mjs.map

package/dist/services/content-api/permissions/engine.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.mjs","sources":["../../../../src/services/content-api/permissions/engine.ts"],"sourcesContent":["import permissions from '@strapi/permissions';\n\ntype Options = Parameters<typeof permissions.engine.new>[0];\n\nexport default ({ providers }: Options) => permissions.engine.new({ providers });\n"],"names":["providers","permissions","engine","new"],"mappings":";;AAIA,6BAAe,CAAA,CAAC,EAAEA,SAAS,EAAW,GAAKC,WAAYC,CAAAA,MAAM,CAACC,GAAG,CAAC;AAAEH,QAAAA;AAAU,KAAA,CAAC;;;;"}

package/dist/services/content-api/permissions/index.d.ts

@@ -0,0 +1,50 @@
+import type { Core } from '@strapi/types';
+/**
+ * Create instances of providers and permission engine for the core content-API service.
+ * Also, expose utilities to get information about available actions and such.
+ */
+declare const _default: (strapi: Core.Strapi) => {
+    engine: import("@strapi/permissions/dist/engine").Engine;
+    providers: {
+        action: {
+            register(action: string, payload: Record<string, unknown>): Promise<import("@strapi/utils/dist/provider-factory").Provider<unknown>>;
+            hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+            delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider<unknown>>;
+            get(key: string): {
+                [x: string]: unknown;
+            } | undefined;
+            values(): {
+                [x: string]: unknown;
+            }[];
+            keys(): string[];
+            has(key: string): boolean;
+            size(): number;
+            clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider<{
+                [x: string]: unknown;
+            }>>;
+        };
+        condition: {
+            register(condition: import("./providers/condition").Condition): Promise<import("@strapi/utils/dist/provider-factory").Provider<unknown>>;
+            hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+            delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider<unknown>>;
+            get(key: string): {
+                [x: string]: unknown;
+            } | undefined;
+            values(): {
+                [x: string]: unknown;
+            }[];
+            keys(): string[];
+            has(key: string): boolean;
+            size(): number;
+            clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider<{
+                [x: string]: unknown;
+            }>>;
+        };
+    };
+    registerActions: () => Promise<void>;
+    getActionsMap: () => Record<string, {
+        controllers: Record<string, string[]>;
+    }>;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/services/content-api/permissions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/services/content-api/permissions/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AA8B1C;;;GAGG;iCACqB,KAAK,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAkBd,OAAO,MAAM,EAAE,MAAM,EAAE,CAAC;;;AAlB7C,wBAmHE"}

package/dist/services/content-api/permissions/index.js

@@ -0,0 +1,107 @@
+'use strict';
+
+var _ = require('lodash');
+var action = require('./providers/action.js');
+var condition = require('./providers/condition.js');
+var engine = require('./engine.js');
+
+const typeSymbol = Symbol.for('__type__');
+/**
+ * Creates a handler that checks if the permission's action exists in the action registry
+ */ const createValidatePermissionHandler = (actionProvider)=>({ permission })=>{
+        const action = actionProvider.get(permission.action);
+        // If the action isn't registered into the action provider, then ignore the permission and warn the user
+        if (!action) {
+            strapi.log.debug(`Unknown action "${permission.action}" supplied when registering a new permission`);
+            return false;
+        }
+        return true;
+    };
+/**
+ * Create instances of providers and permission engine for the core content-API service.
+ * Also, expose utilities to get information about available actions and such.
+ */ var instantiatePermissionsUtilities = ((strapi1)=>{
+    // NOTE: Here we define both an action and condition provider,
+    // but at the moment, we're only using the action one.
+    const providers = {
+        action: action(),
+        condition: condition()
+    };
+    /**
+   * Get a tree representation of the available Content API actions
+   * based on the methods of the Content API controllers.
+   *
+   * @note Only actions bound to a content-API route are returned.
+   */ const getActionsMap = ()=>{
+        const actionMap = {};
+        /**
+     * Check if a controller's action is bound to the
+     * content-api by looking at a potential __type__ symbol
+     */ const isContentApi = (action)=>{
+            if (!_.has(action, typeSymbol)) {
+                return false;
+            }
+            return action[typeSymbol].includes('content-api');
+        };
+        /**
+     * Register actions from a specific API source into the result tree
+     */ const registerAPIsActions = (apis, source)=>{
+            _.forEach(apis, (api, apiName)=>{
+                const controllers = _.reduce(api.controllers, (acc, controller, controllerName)=>{
+                    const contentApiActions = _.pickBy(controller, isContentApi);
+                    if (_.isEmpty(contentApiActions)) {
+                        return acc;
+                    }
+                    acc[controllerName] = Object.keys(contentApiActions);
+                    return acc;
+                }, {});
+                if (!_.isEmpty(controllers)) {
+                    actionMap[`${source}::${apiName}`] = {
+                        controllers
+                    };
+                }
+            });
+        };
+        registerAPIsActions(strapi1.apis, 'api');
+        registerAPIsActions(strapi1.plugins, 'plugin');
+        return actionMap;
+    };
+    /**
+   * Register all the content-API controllers actions into the action provider.
+   * This method make use of the {@link getActionsMap} to generate the list of actions to register.
+   */ const registerActions = async ()=>{
+        const actionsMap = getActionsMap();
+        // For each API
+        for (const [api, value] of Object.entries(actionsMap)){
+            const { controllers } = value;
+            // Register controllers methods as actions
+            for (const [controller, actions] of Object.entries(controllers)){
+                // Register each action individually
+                await Promise.all(actions.map((action)=>{
+                    const actionUID = `${api}.${controller}.${action}`;
+                    return providers.action.register(actionUID, {
+                        api,
+                        controller,
+                        action,
+                        uid: actionUID
+                    });
+                }));
+            }
+        }
+    };
+    // Create an instance of a content-API permission engine
+    // and binds a custom validation handler to it
+    const engine$1 = engine({
+        providers
+    });
+    engine$1.on('before-format::validate.permission', createValidatePermissionHandler(providers.action));
+    return {
+        engine: engine$1,
+        providers,
+        registerActions,
+        getActionsMap
+    };
+});
+
+module.exports = instantiatePermissionsUtilities;
+//# sourceMappingURL=index.js.map

package/dist/services/content-api/permissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../../src/services/content-api/permissions/index.ts"],"sourcesContent":["import _ from 'lodash';\nimport type { Core } from '@strapi/types';\nimport { createActionProvider, createConditionProvider } from './providers';\nimport createPermissionEngine from './engine';\n\nconst typeSymbol = Symbol.for('__type__');\n\ninterface ValidatePermissionHandler {\n  (params: { permission: { action: string } }): boolean;\n}\n\n/**\n * Creates a handler that checks if the permission's action exists in the action registry\n */\nconst createValidatePermissionHandler =\n  (actionProvider: ReturnType<typeof createActionProvider>): ValidatePermissionHandler =>\n  ({ permission }) => {\n    const action = actionProvider.get(permission.action);\n\n    // If the action isn't registered into the action provider, then ignore the permission and warn the user\n    if (!action) {\n      strapi.log.debug(\n        `Unknown action \"${permission.action}\" supplied when registering a new permission`\n      );\n\n      return false;\n    }\n\n    return true;\n  };\n\n/**\n * Create instances of providers and permission engine for the core content-API service.\n * Also, expose utilities to get information about available actions and such.\n */\nexport default (strapi: Core.Strapi) => {\n  // NOTE: Here we define both an action and condition provider,\n  // but at the moment, we're only using the action one.\n  const providers = {\n    action: createActionProvider(),\n    condition: createConditionProvider(),\n  };\n\n  /**\n   * Get a tree representation of the available Content API actions\n   * based on the methods of the Content API controllers.\n   *\n   * @note Only actions bound to a content-API route are returned.\n   */\n  const getActionsMap = () => {\n    const actionMap: Record<\n      string,\n      {\n        controllers: Record<string, string[]>;\n      }\n    > = {};\n\n    /**\n     * Check if a controller's action is bound to the\n     * content-api by looking at a potential __type__ symbol\n     */\n    const isContentApi = (action: Core.ControllerHandler & { [s: symbol]: any }) => {\n      if (!_.has(action, typeSymbol)) {\n        return false;\n      }\n\n      return action[typeSymbol].includes('content-api');\n    };\n\n    /**\n     * Register actions from a specific API source into the result tree\n     */\n    const registerAPIsActions = (\n      apis: Record<string, Core.Plugin | Core.Module>,\n      source: 'api' | 'plugin'\n    ) => {\n      _.forEach(apis, (api, apiName) => {\n        const controllers = _.reduce(\n          api.controllers,\n          (acc, controller, controllerName) => {\n            const contentApiActions = _.pickBy(controller, isContentApi);\n\n            if (_.isEmpty(contentApiActions)) {\n              return acc;\n            }\n\n            acc[controllerName] = Object.keys(contentApiActions);\n\n            return acc;\n          },\n          {} as Record<string, string[]>\n        );\n\n        if (!_.isEmpty(controllers)) {\n          actionMap[`${source}::${apiName}`] = { controllers };\n        }\n      });\n    };\n\n    registerAPIsActions(strapi.apis, 'api');\n    registerAPIsActions(strapi.plugins, 'plugin');\n\n    return actionMap;\n  };\n\n  /**\n   * Register all the content-API controllers actions into the action provider.\n   * This method make use of the {@link getActionsMap} to generate the list of actions to register.\n   */\n  const registerActions = async () => {\n    const actionsMap = getActionsMap();\n\n    // For each API\n    for (const [api, value] of Object.entries(actionsMap)) {\n      const { controllers } = value;\n\n      // Register controllers methods as actions\n      for (const [controller, actions] of Object.entries(controllers)) {\n        // Register each action individually\n        await Promise.all(\n          actions.map((action) => {\n            const actionUID = `${api}.${controller}.${action}`;\n\n            return providers.action.register(actionUID, {\n              api,\n              controller,\n              action,\n              uid: actionUID,\n            });\n          })\n        );\n      }\n    }\n  };\n\n  // Create an instance of a content-API permission engine\n  // and binds a custom validation handler to it\n  const engine = createPermissionEngine({ providers });\n\n  engine.on(\n    'before-format::validate.permission',\n    createValidatePermissionHandler(providers.action)\n  );\n\n  return {\n    engine,\n    providers,\n    registerActions,\n    getActionsMap,\n  };\n};\n"],"names":["typeSymbol","Symbol","for","createValidatePermissionHandler","actionProvider","permission","action","get","strapi","log","debug","providers","createActionProvider","condition","createConditionProvider","getActionsMap","actionMap","isContentApi","_","has","includes","registerAPIsActions","apis","source","forEach","api","apiName","controllers","reduce","acc","controller","controllerName","contentApiActions","pickBy","isEmpty","Object","keys","plugins","registerActions","actionsMap","value","entries","actions","Promise","all","map","actionUID","register","uid","engine","createPermissionEngine","on"],"mappings":";;;;;;;AAKA,MAAMA,UAAAA,GAAaC,MAAOC,CAAAA,GAAG,CAAC,UAAA,CAAA;AAM9B;;AAEC,IACD,MAAMC,+BACJ,GAAA,CAACC,iBACD,CAAC,EAAEC,UAAU,EAAE,GAAA;AACb,QAAA,MAAMC,MAASF,GAAAA,cAAAA,CAAeG,GAAG,CAACF,WAAWC,MAAM,CAAA;;AAGnD,QAAA,IAAI,CAACA,MAAQ,EAAA;YACXE,MAAOC,CAAAA,GAAG,CAACC,KAAK,CACd,CAAC,gBAAgB,EAAEL,UAAWC,CAAAA,MAAM,CAAC,4CAA4C,CAAC,CAAA;YAGpF,OAAO,KAAA;AACT;QAEA,OAAO,IAAA;AACT,KAAA;AAEF;;;IAIA,sCAAe,CAAA,CAACE,OAAAA,GAAAA;;;AAGd,IAAA,MAAMG,SAAY,GAAA;QAChBL,MAAQM,EAAAA,MAAAA,EAAAA;QACRC,SAAWC,EAAAA,SAAAA;AACb,KAAA;AAEA;;;;;AAKC,MACD,MAAMC,aAAgB,GAAA,IAAA;AACpB,QAAA,MAAMC,YAKF,EAAC;AAEL;;;QAIA,MAAMC,eAAe,CAACX,MAAAA,GAAAA;AACpB,YAAA,IAAI,CAACY,CAAAA,CAAEC,GAAG,CAACb,QAAQN,UAAa,CAAA,EAAA;gBAC9B,OAAO,KAAA;AACT;AAEA,YAAA,OAAOM,MAAM,CAACN,UAAW,CAAA,CAACoB,QAAQ,CAAC,aAAA,CAAA;AACrC,SAAA;AAEA;;QAGA,MAAMC,mBAAsB,GAAA,CAC1BC,IACAC,EAAAA,MAAAA,GAAAA;AAEAL,YAAAA,CAAAA,CAAEM,OAAO,CAACF,IAAM,EAAA,CAACG,GAAKC,EAAAA,OAAAA,GAAAA;gBACpB,MAAMC,WAAAA,GAAcT,EAAEU,MAAM,CAC1BH,IAAIE,WAAW,EACf,CAACE,GAAAA,EAAKC,UAAYC,EAAAA,cAAAA,GAAAA;AAChB,oBAAA,MAAMC,iBAAoBd,GAAAA,CAAAA,CAAEe,MAAM,CAACH,UAAYb,EAAAA,YAAAA,CAAAA;oBAE/C,IAAIC,CAAAA,CAAEgB,OAAO,CAACF,iBAAoB,CAAA,EAAA;wBAChC,OAAOH,GAAAA;AACT;AAEAA,oBAAAA,GAAG,CAACE,cAAAA,CAAe,GAAGI,MAAAA,CAAOC,IAAI,CAACJ,iBAAAA,CAAAA;oBAElC,OAAOH,GAAAA;AACT,iBAAA,EACA,EAAC,CAAA;AAGH,gBAAA,IAAI,CAACX,CAAAA,CAAEgB,OAAO,CAACP,WAAc,CAAA,EAAA;oBAC3BX,SAAS,CAAC,CAAC,EAAEO,MAAAA,CAAO,EAAE,EAAEG,OAAAA,CAAQ,CAAC,CAAC,GAAG;AAAEC,wBAAAA;AAAY,qBAAA;AACrD;AACF,aAAA,CAAA;AACF,SAAA;QAEAN,mBAAoBb,CAAAA,OAAAA,CAAOc,IAAI,EAAE,KAAA,CAAA;QACjCD,mBAAoBb,CAAAA,OAAAA,CAAO6B,OAAO,EAAE,QAAA,CAAA;QAEpC,OAAOrB,SAAAA;AACT,KAAA;AAEA;;;AAGC,MACD,MAAMsB,eAAkB,GAAA,UAAA;AACtB,QAAA,MAAMC,UAAaxB,GAAAA,aAAAA,EAAAA;;QAGnB,KAAK,MAAM,CAACU,GAAKe,EAAAA,KAAAA,CAAM,IAAIL,MAAOM,CAAAA,OAAO,CAACF,UAAa,CAAA,CAAA;YACrD,MAAM,EAAEZ,WAAW,EAAE,GAAGa,KAAAA;;YAGxB,KAAK,MAAM,CAACV,UAAYY,EAAAA,OAAAA,CAAQ,IAAIP,MAAOM,CAAAA,OAAO,CAACd,WAAc,CAAA,CAAA;;AAE/D,gBAAA,MAAMgB,QAAQC,GAAG,CACfF,OAAQG,CAAAA,GAAG,CAAC,CAACvC,MAAAA,GAAAA;oBACX,MAAMwC,SAAAA,GAAY,CAAC,EAAErB,GAAI,CAAA,CAAC,EAAEK,UAAW,CAAA,CAAC,EAAExB,MAAAA,CAAO,CAAC;AAElD,oBAAA,OAAOK,SAAUL,CAAAA,MAAM,CAACyC,QAAQ,CAACD,SAAW,EAAA;AAC1CrB,wBAAAA,GAAAA;AACAK,wBAAAA,UAAAA;AACAxB,wBAAAA,MAAAA;wBACA0C,GAAKF,EAAAA;AACP,qBAAA,CAAA;AACF,iBAAA,CAAA,CAAA;AAEJ;AACF;AACF,KAAA;;;AAIA,IAAA,MAAMG,WAASC,MAAuB,CAAA;AAAEvC,QAAAA;AAAU,KAAA,CAAA;AAElDsC,IAAAA,QAAAA,CAAOE,EAAE,CACP,oCACAhD,EAAAA,+BAAAA,CAAgCQ,UAAUL,MAAM,CAAA,CAAA;IAGlD,OAAO;AACL2C,gBAAAA,QAAAA;AACAtC,QAAAA,SAAAA;AACA2B,QAAAA,eAAAA;AACAvB,QAAAA;AACF,KAAA;AACF,CAAA;;;;"}

package/dist/services/content-api/permissions/index.mjs

@@ -0,0 +1,105 @@
+import _ from 'lodash';
+import createActionProvider from './providers/action.mjs';
+import createConditionProvider from './providers/condition.mjs';
+import createPermissionEngine from './engine.mjs';
+
+const typeSymbol = Symbol.for('__type__');
+/**
+ * Creates a handler that checks if the permission's action exists in the action registry
+ */ const createValidatePermissionHandler = (actionProvider)=>({ permission })=>{
+        const action = actionProvider.get(permission.action);
+        // If the action isn't registered into the action provider, then ignore the permission and warn the user
+        if (!action) {
+            strapi.log.debug(`Unknown action "${permission.action}" supplied when registering a new permission`);
+            return false;
+        }
+        return true;
+    };
+/**
+ * Create instances of providers and permission engine for the core content-API service.
+ * Also, expose utilities to get information about available actions and such.
+ */ var instantiatePermissionsUtilities = ((strapi1)=>{
+    // NOTE: Here we define both an action and condition provider,
+    // but at the moment, we're only using the action one.
+    const providers = {
+        action: createActionProvider(),
+        condition: createConditionProvider()
+    };
+    /**
+   * Get a tree representation of the available Content API actions
+   * based on the methods of the Content API controllers.
+   *
+   * @note Only actions bound to a content-API route are returned.
+   */ const getActionsMap = ()=>{
+        const actionMap = {};
+        /**
+     * Check if a controller's action is bound to the
+     * content-api by looking at a potential __type__ symbol
+     */ const isContentApi = (action)=>{
+            if (!_.has(action, typeSymbol)) {
+                return false;
+            }
+            return action[typeSymbol].includes('content-api');
+        };
+        /**
+     * Register actions from a specific API source into the result tree
+     */ const registerAPIsActions = (apis, source)=>{
+            _.forEach(apis, (api, apiName)=>{
+                const controllers = _.reduce(api.controllers, (acc, controller, controllerName)=>{
+                    const contentApiActions = _.pickBy(controller, isContentApi);
+                    if (_.isEmpty(contentApiActions)) {
+                        return acc;
+                    }
+                    acc[controllerName] = Object.keys(contentApiActions);
+                    return acc;
+                }, {});
+                if (!_.isEmpty(controllers)) {
+                    actionMap[`${source}::${apiName}`] = {
+                        controllers
+                    };
+                }
+            });
+        };
+        registerAPIsActions(strapi1.apis, 'api');
+        registerAPIsActions(strapi1.plugins, 'plugin');
+        return actionMap;
+    };
+    /**
+   * Register all the content-API controllers actions into the action provider.
+   * This method make use of the {@link getActionsMap} to generate the list of actions to register.
+   */ const registerActions = async ()=>{
+        const actionsMap = getActionsMap();
+        // For each API
+        for (const [api, value] of Object.entries(actionsMap)){
+            const { controllers } = value;
+            // Register controllers methods as actions
+            for (const [controller, actions] of Object.entries(controllers)){
+                // Register each action individually
+                await Promise.all(actions.map((action)=>{
+                    const actionUID = `${api}.${controller}.${action}`;
+                    return providers.action.register(actionUID, {
+                        api,
+                        controller,
+                        action,
+                        uid: actionUID
+                    });
+                }));
+            }
+        }
+    };
+    // Create an instance of a content-API permission engine
+    // and binds a custom validation handler to it
+    const engine = createPermissionEngine({
+        providers
+    });
+    engine.on('before-format::validate.permission', createValidatePermissionHandler(providers.action));
+    return {
+        engine,
+        providers,
+        registerActions,
+        getActionsMap
+    };
+});
+
+export { instantiatePermissionsUtilities as default };
+//# sourceMappingURL=index.mjs.map

package/dist/services/content-api/permissions/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../../src/services/content-api/permissions/index.ts"],"sourcesContent":["import _ from 'lodash';\nimport type { Core } from '@strapi/types';\nimport { createActionProvider, createConditionProvider } from './providers';\nimport createPermissionEngine from './engine';\n\nconst typeSymbol = Symbol.for('__type__');\n\ninterface ValidatePermissionHandler {\n  (params: { permission: { action: string } }): boolean;\n}\n\n/**\n * Creates a handler that checks if the permission's action exists in the action registry\n */\nconst createValidatePermissionHandler =\n  (actionProvider: ReturnType<typeof createActionProvider>): ValidatePermissionHandler =>\n  ({ permission }) => {\n    const action = actionProvider.get(permission.action);\n\n    // If the action isn't registered into the action provider, then ignore the permission and warn the user\n    if (!action) {\n      strapi.log.debug(\n        `Unknown action \"${permission.action}\" supplied when registering a new permission`\n      );\n\n      return false;\n    }\n\n    return true;\n  };\n\n/**\n * Create instances of providers and permission engine for the core content-API service.\n * Also, expose utilities to get information about available actions and such.\n */\nexport default (strapi: Core.Strapi) => {\n  // NOTE: Here we define both an action and condition provider,\n  // but at the moment, we're only using the action one.\n  const providers = {\n    action: createActionProvider(),\n    condition: createConditionProvider(),\n  };\n\n  /**\n   * Get a tree representation of the available Content API actions\n   * based on the methods of the Content API controllers.\n   *\n   * @note Only actions bound to a content-API route are returned.\n   */\n  const getActionsMap = () => {\n    const actionMap: Record<\n      string,\n      {\n        controllers: Record<string, string[]>;\n      }\n    > = {};\n\n    /**\n     * Check if a controller's action is bound to the\n     * content-api by looking at a potential __type__ symbol\n     */\n    const isContentApi = (action: Core.ControllerHandler & { [s: symbol]: any }) => {\n      if (!_.has(action, typeSymbol)) {\n        return false;\n      }\n\n      return action[typeSymbol].includes('content-api');\n    };\n\n    /**\n     * Register actions from a specific API source into the result tree\n     */\n    const registerAPIsActions = (\n      apis: Record<string, Core.Plugin | Core.Module>,\n      source: 'api' | 'plugin'\n    ) => {\n      _.forEach(apis, (api, apiName) => {\n        const controllers = _.reduce(\n          api.controllers,\n          (acc, controller, controllerName) => {\n            const contentApiActions = _.pickBy(controller, isContentApi);\n\n            if (_.isEmpty(contentApiActions)) {\n              return acc;\n            }\n\n            acc[controllerName] = Object.keys(contentApiActions);\n\n            return acc;\n          },\n          {} as Record<string, string[]>\n        );\n\n        if (!_.isEmpty(controllers)) {\n          actionMap[`${source}::${apiName}`] = { controllers };\n        }\n      });\n    };\n\n    registerAPIsActions(strapi.apis, 'api');\n    registerAPIsActions(strapi.plugins, 'plugin');\n\n    return actionMap;\n  };\n\n  /**\n   * Register all the content-API controllers actions into the action provider.\n   * This method make use of the {@link getActionsMap} to generate the list of actions to register.\n   */\n  const registerActions = async () => {\n    const actionsMap = getActionsMap();\n\n    // For each API\n    for (const [api, value] of Object.entries(actionsMap)) {\n      const { controllers } = value;\n\n      // Register controllers methods as actions\n      for (const [controller, actions] of Object.entries(controllers)) {\n        // Register each action individually\n        await Promise.all(\n          actions.map((action) => {\n            const actionUID = `${api}.${controller}.${action}`;\n\n            return providers.action.register(actionUID, {\n              api,\n              controller,\n              action,\n              uid: actionUID,\n            });\n          })\n        );\n      }\n    }\n  };\n\n  // Create an instance of a content-API permission engine\n  // and binds a custom validation handler to it\n  const engine = createPermissionEngine({ providers });\n\n  engine.on(\n    'before-format::validate.permission',\n    createValidatePermissionHandler(providers.action)\n  );\n\n  return {\n    engine,\n    providers,\n    registerActions,\n    getActionsMap,\n  };\n};\n"],"names":["typeSymbol","Symbol","for","createValidatePermissionHandler","actionProvider","permission","action","get","strapi","log","debug","providers","createActionProvider","condition","createConditionProvider","getActionsMap","actionMap","isContentApi","_","has","includes","registerAPIsActions","apis","source","forEach","api","apiName","controllers","reduce","acc","controller","controllerName","contentApiActions","pickBy","isEmpty","Object","keys","plugins","registerActions","actionsMap","value","entries","actions","Promise","all","map","actionUID","register","uid","engine","createPermissionEngine","on"],"mappings":";;;;;AAKA,MAAMA,UAAAA,GAAaC,MAAOC,CAAAA,GAAG,CAAC,UAAA,CAAA;AAM9B;;AAEC,IACD,MAAMC,+BACJ,GAAA,CAACC,iBACD,CAAC,EAAEC,UAAU,EAAE,GAAA;AACb,QAAA,MAAMC,MAASF,GAAAA,cAAAA,CAAeG,GAAG,CAACF,WAAWC,MAAM,CAAA;;AAGnD,QAAA,IAAI,CAACA,MAAQ,EAAA;YACXE,MAAOC,CAAAA,GAAG,CAACC,KAAK,CACd,CAAC,gBAAgB,EAAEL,UAAWC,CAAAA,MAAM,CAAC,4CAA4C,CAAC,CAAA;YAGpF,OAAO,KAAA;AACT;QAEA,OAAO,IAAA;AACT,KAAA;AAEF;;;IAIA,sCAAe,CAAA,CAACE,OAAAA,GAAAA;;;AAGd,IAAA,MAAMG,SAAY,GAAA;QAChBL,MAAQM,EAAAA,oBAAAA,EAAAA;QACRC,SAAWC,EAAAA,uBAAAA;AACb,KAAA;AAEA;;;;;AAKC,MACD,MAAMC,aAAgB,GAAA,IAAA;AACpB,QAAA,MAAMC,YAKF,EAAC;AAEL;;;QAIA,MAAMC,eAAe,CAACX,MAAAA,GAAAA;AACpB,YAAA,IAAI,CAACY,CAAAA,CAAEC,GAAG,CAACb,QAAQN,UAAa,CAAA,EAAA;gBAC9B,OAAO,KAAA;AACT;AAEA,YAAA,OAAOM,MAAM,CAACN,UAAW,CAAA,CAACoB,QAAQ,CAAC,aAAA,CAAA;AACrC,SAAA;AAEA;;QAGA,MAAMC,mBAAsB,GAAA,CAC1BC,IACAC,EAAAA,MAAAA,GAAAA;AAEAL,YAAAA,CAAAA,CAAEM,OAAO,CAACF,IAAM,EAAA,CAACG,GAAKC,EAAAA,OAAAA,GAAAA;gBACpB,MAAMC,WAAAA,GAAcT,EAAEU,MAAM,CAC1BH,IAAIE,WAAW,EACf,CAACE,GAAAA,EAAKC,UAAYC,EAAAA,cAAAA,GAAAA;AAChB,oBAAA,MAAMC,iBAAoBd,GAAAA,CAAAA,CAAEe,MAAM,CAACH,UAAYb,EAAAA,YAAAA,CAAAA;oBAE/C,IAAIC,CAAAA,CAAEgB,OAAO,CAACF,iBAAoB,CAAA,EAAA;wBAChC,OAAOH,GAAAA;AACT;AAEAA,oBAAAA,GAAG,CAACE,cAAAA,CAAe,GAAGI,MAAAA,CAAOC,IAAI,CAACJ,iBAAAA,CAAAA;oBAElC,OAAOH,GAAAA;AACT,iBAAA,EACA,EAAC,CAAA;AAGH,gBAAA,IAAI,CAACX,CAAAA,CAAEgB,OAAO,CAACP,WAAc,CAAA,EAAA;oBAC3BX,SAAS,CAAC,CAAC,EAAEO,MAAAA,CAAO,EAAE,EAAEG,OAAAA,CAAQ,CAAC,CAAC,GAAG;AAAEC,wBAAAA;AAAY,qBAAA;AACrD;AACF,aAAA,CAAA;AACF,SAAA;QAEAN,mBAAoBb,CAAAA,OAAAA,CAAOc,IAAI,EAAE,KAAA,CAAA;QACjCD,mBAAoBb,CAAAA,OAAAA,CAAO6B,OAAO,EAAE,QAAA,CAAA;QAEpC,OAAOrB,SAAAA;AACT,KAAA;AAEA;;;AAGC,MACD,MAAMsB,eAAkB,GAAA,UAAA;AACtB,QAAA,MAAMC,UAAaxB,GAAAA,aAAAA,EAAAA;;QAGnB,KAAK,MAAM,CAACU,GAAKe,EAAAA,KAAAA,CAAM,IAAIL,MAAOM,CAAAA,OAAO,CAACF,UAAa,CAAA,CAAA;YACrD,MAAM,EAAEZ,WAAW,EAAE,GAAGa,KAAAA;;YAGxB,KAAK,MAAM,CAACV,UAAYY,EAAAA,OAAAA,CAAQ,IAAIP,MAAOM,CAAAA,OAAO,CAACd,WAAc,CAAA,CAAA;;AAE/D,gBAAA,MAAMgB,QAAQC,GAAG,CACfF,OAAQG,CAAAA,GAAG,CAAC,CAACvC,MAAAA,GAAAA;oBACX,MAAMwC,SAAAA,GAAY,CAAC,EAAErB,GAAI,CAAA,CAAC,EAAEK,UAAW,CAAA,CAAC,EAAExB,MAAAA,CAAO,CAAC;AAElD,oBAAA,OAAOK,SAAUL,CAAAA,MAAM,CAACyC,QAAQ,CAACD,SAAW,EAAA;AAC1CrB,wBAAAA,GAAAA;AACAK,wBAAAA,UAAAA;AACAxB,wBAAAA,MAAAA;wBACA0C,GAAKF,EAAAA;AACP,qBAAA,CAAA;AACF,iBAAA,CAAA,CAAA;AAEJ;AACF;AACF,KAAA;;;AAIA,IAAA,MAAMG,SAASC,sBAAuB,CAAA;AAAEvC,QAAAA;AAAU,KAAA,CAAA;AAElDsC,IAAAA,MAAAA,CAAOE,EAAE,CACP,oCACAhD,EAAAA,+BAAAA,CAAgCQ,UAAUL,MAAM,CAAA,CAAA;IAGlD,OAAO;AACL2C,QAAAA,MAAAA;AACAtC,QAAAA,SAAAA;AACA2B,QAAAA,eAAAA;AACAvB,QAAAA;AACF,KAAA;AACF,CAAA;;;;"}

package/dist/services/content-api/permissions/providers/action.d.ts

@@ -0,0 +1,19 @@
+declare const _default: (options?: {}) => {
+    register(action: string, payload: Record<string, unknown>): Promise<import("@strapi/utils/dist/provider-factory").Provider<unknown>>;
+    hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+    delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider<unknown>>;
+    get(key: string): {
+        [x: string]: unknown;
+    } | undefined;
+    values(): {
+        [x: string]: unknown;
+    }[];
+    keys(): string[];
+    has(key: string): boolean;
+    size(): number;
+    clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider<{
+        [x: string]: unknown;
+    }>>;
+};
+export default _default;
+//# sourceMappingURL=action.d.ts.map

package/dist/services/content-api/permissions/providers/action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../../../src/services/content-api/permissions/providers/action.ts"],"names":[],"mappings":";qBAQ2B,MAAM,WAAW,OAAO,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;;;;;AANnE,wBAcE"}

package/dist/services/content-api/permissions/providers/action.js

@@ -0,0 +1,19 @@
+'use strict';
+
+var strapiUtils = require('@strapi/utils');
+
+var createActionProvider = ((options = {})=>{
+    const provider = strapiUtils.providerFactory(options);
+    return {
+        ...provider,
+        async register (action, payload) {
+            if (strapi.isLoaded) {
+                throw new Error(`You can't register new actions outside the bootstrap function.`);
+            }
+            return provider.register(action, payload);
+        }
+    };
+});
+
+module.exports = createActionProvider;
+//# sourceMappingURL=action.js.map

package/dist/services/content-api/permissions/providers/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sources":["../../../../../src/services/content-api/permissions/providers/action.ts"],"sourcesContent":["import { providerFactory } from '@strapi/utils';\n\nexport default (options = {}) => {\n  const provider = providerFactory(options);\n\n  return {\n    ...provider,\n\n    async register(action: string, payload: Record<string, unknown>) {\n      if (strapi.isLoaded) {\n        throw new Error(`You can't register new actions outside the bootstrap function.`);\n      }\n\n      return provider.register(action, payload);\n    },\n  };\n};\n"],"names":["options","provider","providerFactory","register","action","payload","strapi","isLoaded","Error"],"mappings":";;;;AAEA,2BAAe,CAAA,CAACA,OAAU,GAAA,EAAE,GAAA;AAC1B,IAAA,MAAMC,WAAWC,2BAAgBF,CAAAA,OAAAA,CAAAA;IAEjC,OAAO;AACL,QAAA,GAAGC,QAAQ;QAEX,MAAME,QAAAA,CAAAA,CAASC,MAAc,EAAEC,OAAgC,EAAA;YAC7D,IAAIC,MAAAA,CAAOC,QAAQ,EAAE;AACnB,gBAAA,MAAM,IAAIC,KAAAA,CAAM,CAAC,8DAA8D,CAAC,CAAA;AAClF;YAEA,OAAOP,QAAAA,CAASE,QAAQ,CAACC,MAAQC,EAAAA,OAAAA,CAAAA;AACnC;AACF,KAAA;AACF,CAAA;;;;"}

package/dist/services/content-api/permissions/providers/action.mjs

@@ -0,0 +1,17 @@
+import { providerFactory } from '@strapi/utils';
+
+var createActionProvider = ((options = {})=>{
+    const provider = providerFactory(options);
+    return {
+        ...provider,
+        async register (action, payload) {
+            if (strapi.isLoaded) {
+                throw new Error(`You can't register new actions outside the bootstrap function.`);
+            }
+            return provider.register(action, payload);
+        }
+    };
+});
+
+export { createActionProvider as default };
+//# sourceMappingURL=action.mjs.map

package/dist/services/content-api/permissions/providers/action.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.mjs","sources":["../../../../../src/services/content-api/permissions/providers/action.ts"],"sourcesContent":["import { providerFactory } from '@strapi/utils';\n\nexport default (options = {}) => {\n  const provider = providerFactory(options);\n\n  return {\n    ...provider,\n\n    async register(action: string, payload: Record<string, unknown>) {\n      if (strapi.isLoaded) {\n        throw new Error(`You can't register new actions outside the bootstrap function.`);\n      }\n\n      return provider.register(action, payload);\n    },\n  };\n};\n"],"names":["options","provider","providerFactory","register","action","payload","strapi","isLoaded","Error"],"mappings":";;AAEA,2BAAe,CAAA,CAACA,OAAU,GAAA,EAAE,GAAA;AAC1B,IAAA,MAAMC,WAAWC,eAAgBF,CAAAA,OAAAA,CAAAA;IAEjC,OAAO;AACL,QAAA,GAAGC,QAAQ;QAEX,MAAME,QAAAA,CAAAA,CAASC,MAAc,EAAEC,OAAgC,EAAA;YAC7D,IAAIC,MAAAA,CAAOC,QAAQ,EAAE;AACnB,gBAAA,MAAM,IAAIC,KAAAA,CAAM,CAAC,8DAA8D,CAAC,CAAA;AAClF;YAEA,OAAOP,QAAAA,CAASE,QAAQ,CAACC,MAAQC,EAAAA,OAAAA,CAAAA;AACnC;AACF,KAAA;AACF,CAAA;;;;"}

package/dist/services/content-api/permissions/providers/condition.d.ts

@@ -0,0 +1,23 @@
+export interface Condition {
+    name: string;
+    [key: string]: unknown;
+}
+declare const _default: (options?: {}) => {
+    register(condition: Condition): Promise<import("@strapi/utils/dist/provider-factory").Provider<unknown>>;
+    hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+    delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider<unknown>>;
+    get(key: string): {
+        [x: string]: unknown;
+    } | undefined;
+    values(): {
+        [x: string]: unknown;
+    }[];
+    keys(): string[];
+    has(key: string): boolean;
+    size(): number;
+    clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider<{
+        [x: string]: unknown;
+    }>>;
+};
+export default _default;
+//# sourceMappingURL=condition.d.ts.map

package/dist/services/content-api/permissions/providers/condition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.d.ts","sourceRoot":"","sources":["../../../../../src/services/content-api/permissions/providers/condition.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;;wBAQ6B,SAAS;;;;;;;;;;;;;;;;AANvC,wBAcE"}

package/dist/services/content-api/permissions/providers/condition.js

@@ -0,0 +1,19 @@
+'use strict';
+
+var strapiUtils = require('@strapi/utils');
+
+var createConditionProvider = ((options = {})=>{
+    const provider = strapiUtils.providerFactory(options);
+    return {
+        ...provider,
+        async register (condition) {
+            if (strapi.isLoaded) {
+                throw new Error(`You can't register new conditions outside the bootstrap function.`);
+            }
+            return provider.register(condition.name, condition);
+        }
+    };
+});
+
+module.exports = createConditionProvider;
+//# sourceMappingURL=condition.js.map

package/dist/services/content-api/permissions/providers/condition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.js","sources":["../../../../../src/services/content-api/permissions/providers/condition.ts"],"sourcesContent":["import { providerFactory } from '@strapi/utils';\n\nexport interface Condition {\n  name: string;\n  [key: string]: unknown;\n}\n\nexport default (options = {}) => {\n  const provider = providerFactory(options);\n\n  return {\n    ...provider,\n\n    async register(condition: Condition) {\n      if (strapi.isLoaded) {\n        throw new Error(`You can't register new conditions outside the bootstrap function.`);\n      }\n\n      return provider.register(condition.name, condition);\n    },\n  };\n};\n"],"names":["options","provider","providerFactory","register","condition","strapi","isLoaded","Error","name"],"mappings":";;;;AAOA,8BAAe,CAAA,CAACA,OAAU,GAAA,EAAE,GAAA;AAC1B,IAAA,MAAMC,WAAWC,2BAAgBF,CAAAA,OAAAA,CAAAA;IAEjC,OAAO;AACL,QAAA,GAAGC,QAAQ;AAEX,QAAA,MAAME,UAASC,SAAoB,EAAA;YACjC,IAAIC,MAAAA,CAAOC,QAAQ,EAAE;AACnB,gBAAA,MAAM,IAAIC,KAAAA,CAAM,CAAC,iEAAiE,CAAC,CAAA;AACrF;AAEA,YAAA,OAAON,QAASE,CAAAA,QAAQ,CAACC,SAAAA,CAAUI,IAAI,EAAEJ,SAAAA,CAAAA;AAC3C;AACF,KAAA;AACF,CAAA;;;;"}

package/dist/services/content-api/permissions/providers/condition.mjs

@@ -0,0 +1,17 @@
+import { providerFactory } from '@strapi/utils';
+
+var createConditionProvider = ((options = {})=>{
+    const provider = providerFactory(options);
+    return {
+        ...provider,
+        async register (condition) {
+            if (strapi.isLoaded) {
+                throw new Error(`You can't register new conditions outside the bootstrap function.`);
+            }
+            return provider.register(condition.name, condition);
+        }
+    };
+});
+
+export { createConditionProvider as default };
+//# sourceMappingURL=condition.mjs.map

package/dist/services/content-api/permissions/providers/condition.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.mjs","sources":["../../../../../src/services/content-api/permissions/providers/condition.ts"],"sourcesContent":["import { providerFactory } from '@strapi/utils';\n\nexport interface Condition {\n  name: string;\n  [key: string]: unknown;\n}\n\nexport default (options = {}) => {\n  const provider = providerFactory(options);\n\n  return {\n    ...provider,\n\n    async register(condition: Condition) {\n      if (strapi.isLoaded) {\n        throw new Error(`You can't register new conditions outside the bootstrap function.`);\n      }\n\n      return provider.register(condition.name, condition);\n    },\n  };\n};\n"],"names":["options","provider","providerFactory","register","condition","strapi","isLoaded","Error","name"],"mappings":";;AAOA,8BAAe,CAAA,CAACA,OAAU,GAAA,EAAE,GAAA;AAC1B,IAAA,MAAMC,WAAWC,eAAgBF,CAAAA,OAAAA,CAAAA;IAEjC,OAAO;AACL,QAAA,GAAGC,QAAQ;AAEX,QAAA,MAAME,UAASC,SAAoB,EAAA;YACjC,IAAIC,MAAAA,CAAOC,QAAQ,EAAE;AACnB,gBAAA,MAAM,IAAIC,KAAAA,CAAM,CAAC,iEAAiE,CAAC,CAAA;AACrF;AAEA,YAAA,OAAON,QAASE,CAAAA,QAAQ,CAACC,SAAAA,CAAUI,IAAI,EAAEJ,SAAAA,CAAAA;AAC3C;AACF,KAAA;AACF,CAAA;;;;"}

package/dist/services/content-api/permissions/providers/index.d.ts

@@ -0,0 +1,3 @@
+export { default as createActionProvider } from './action';
+export { default as createConditionProvider } from './condition';
+//# sourceMappingURL=index.d.ts.map

package/dist/services/content-api/permissions/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/services/content-api/permissions/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/dist/services/content-source-maps.d.ts

@@ -0,0 +1,13 @@
+import type { Core, Struct } from '@strapi/types';
+import type { FieldContentSourceMap } from '@strapi/admin/strapi-admin';
+interface EncodingInfo {
+    data: any;
+    schema: Struct.Schema;
+}
+declare const createContentSourceMapsService: (strapi: Core.Strapi) => {
+    encodeField(text: string, { kind, model, documentId, type, path, locale }: FieldContentSourceMap): string;
+    encodeEntry({ data, schema }: EncodingInfo): Promise<any>;
+    encodeSourceMaps({ data, schema }: EncodingInfo): Promise<any>;
+};
+export { createContentSourceMapsService };
+//# sourceMappingURL=content-source-maps.d.ts.map

package/dist/services/content-source-maps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-source-maps.d.ts","sourceRoot":"","sources":["../../src/services/content-source-maps.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAO,MAAM,eAAe,CAAC;AAEvD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAwCxE,UAAU,YAAY;IACpB,IAAI,EAAE,GAAG,CAAC;IACV,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;CACvB;AAMD,QAAA,MAAM,8BAA8B,WAAY,KAAK,MAAM;sBAG/C,MAAM,mDACqC,qBAAqB;kCAyBpC,YAAY,GAAG,QAAQ,GAAG,CAAC;uCAiCtB,YAAY,GAAG,QAAQ,GAAG,CAAC;CAmBvE,CAAC;AAEF,OAAO,EAAE,8BAA8B,EAAE,CAAC"}

package/dist/services/content-source-maps.js

@@ -0,0 +1,108 @@
+'use strict';
+
+var stega = require('@vercel/stega');
+var strapiUtils = require('@strapi/utils');
+
+const ENCODABLE_TYPES = [
+    'string',
+    'text',
+    'richtext',
+    'biginteger',
+    'date',
+    'time',
+    'datetime',
+    'timestamp',
+    'boolean',
+    'enumeration',
+    'json',
+    'media',
+    'email',
+    'password'
+];
+// TODO: use a centralized store for these fields that would be shared with the CM and CTB
+const EXCLUDED_FIELDS = [
+    'id',
+    'documentId',
+    'locale',
+    'localizations',
+    'created_by',
+    'updated_by',
+    'created_at',
+    'updated_at',
+    'publishedAt'
+];
+const isObject = (value)=>{
+    return typeof value === 'object' && value !== null;
+};
+const createContentSourceMapsService = (strapi)=>{
+    return {
+        encodeField (text, { kind, model, documentId, type, path, locale }) {
+            /**
+       * Combine all metadata into into a one string so we only have to deal with one data-atribute
+       * on the frontend. Make it human readable because that data-attribute may be set manually by
+       * users for fields that don't support sourcemap encoding.
+       */ const strapiSource = new URLSearchParams();
+            strapiSource.set('documentId', documentId);
+            strapiSource.set('type', type);
+            strapiSource.set('path', path);
+            if (model) {
+                strapiSource.set('model', model);
+            }
+            if (kind) {
+                strapiSource.set('kind', kind);
+            }
+            if (locale) {
+                strapiSource.set('locale', locale);
+            }
+            return stega.vercelStegaCombine(text, {
+                strapiSource: strapiSource.toString()
+            });
+        },
+        async encodeEntry ({ data, schema }) {
+            if (!isObject(data) || data === undefined) {
+                return data;
+            }
+            return strapiUtils.traverseEntity(({ key, value, attribute, schema, path }, { set })=>{
+                if (!attribute || EXCLUDED_FIELDS.includes(key)) {
+                    return;
+                }
+                if (ENCODABLE_TYPES.includes(attribute.type) && typeof value === 'string') {
+                    set(key, this.encodeField(value, {
+                        path: path.rawWithIndices,
+                        type: attribute.type,
+                        kind: schema.kind,
+                        model: schema.uid,
+                        locale: data.locale,
+                        documentId: data.documentId
+                    }));
+                }
+            }, {
+                schema,
+                getModel: (uid)=>strapi.getModel(uid)
+            }, data);
+        },
+        async encodeSourceMaps ({ data, schema }) {
+            try {
+                if (Array.isArray(data)) {
+                    return await Promise.all(data.map((item)=>this.encodeSourceMaps({
+                            data: item,
+                            schema
+                        })));
+                }
+                if (!isObject(data)) {
+                    return data;
+                }
+                return await this.encodeEntry({
+                    data,
+                    schema
+                });
+            } catch (error) {
+                strapi.log.error('Error encoding source maps:', error);
+                return data;
+            }
+        }
+    };
+};
+
+exports.createContentSourceMapsService = createContentSourceMapsService;
+//# sourceMappingURL=content-source-maps.js.map

package/dist/services/content-source-maps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-source-maps.js","sources":["../../src/services/content-source-maps.ts"],"sourcesContent":["import { vercelStegaCombine } from '@vercel/stega';\nimport type { Core, Struct, UID } from '@strapi/types';\nimport { traverseEntity } from '@strapi/utils';\nimport type { FieldContentSourceMap } from '@strapi/admin/strapi-admin';\n\nconst ENCODABLE_TYPES = [\n  'string',\n  'text',\n  'richtext',\n  'biginteger',\n  'date',\n  'time',\n  'datetime',\n  'timestamp',\n  'boolean',\n  'enumeration',\n  'json',\n  'media',\n  'email',\n  'password',\n  /**\n   * We cannot modify the response shape, so types that aren't based on string cannot be encoded:\n   * - json: object\n   * - blocks: object, will require a custom implementation in a dedicated PR\n   * - integer, float and decimal: number\n   * - boolean: boolean (believe it or not)\n   * - uid: can be stringified but would mess up URLs\n   */\n];\n\n// TODO: use a centralized store for these fields that would be shared with the CM and CTB\nconst EXCLUDED_FIELDS = [\n  'id',\n  'documentId',\n  'locale',\n  'localizations',\n  'created_by',\n  'updated_by',\n  'created_at',\n  'updated_at',\n  'publishedAt',\n];\n\ninterface EncodingInfo {\n  data: any;\n  schema: Struct.Schema;\n}\n\nconst isObject = (value: unknown): value is Record<string, any> => {\n  return typeof value === 'object' && value !== null;\n};\n\nconst createContentSourceMapsService = (strapi: Core.Strapi) => {\n  return {\n    encodeField(\n      text: string,\n      { kind, model, documentId, type, path, locale }: FieldContentSourceMap\n    ) {\n      /**\n       * Combine all metadata into into a one string so we only have to deal with one data-atribute\n       * on the frontend. Make it human readable because that data-attribute may be set manually by\n       * users for fields that don't support sourcemap encoding.\n       */\n      const strapiSource = new URLSearchParams();\n      strapiSource.set('documentId', documentId);\n      strapiSource.set('type', type);\n      strapiSource.set('path', path);\n\n      if (model) {\n        strapiSource.set('model', model);\n      }\n      if (kind) {\n        strapiSource.set('kind', kind);\n      }\n      if (locale) {\n        strapiSource.set('locale', locale);\n      }\n\n      return vercelStegaCombine(text, { strapiSource: strapiSource.toString() });\n    },\n\n    async encodeEntry({ data, schema }: EncodingInfo): Promise<any> {\n      if (!isObject(data) || data === undefined) {\n        return data;\n      }\n\n      return traverseEntity(\n        ({ key, value, attribute, schema, path }, { set }) => {\n          if (!attribute || EXCLUDED_FIELDS.includes(key)) {\n            return;\n          }\n\n          if (ENCODABLE_TYPES.includes(attribute.type) && typeof value === 'string') {\n            set(\n              key,\n              this.encodeField(value, {\n                path: path.rawWithIndices!,\n                type: attribute.type,\n                kind: schema.kind,\n                model: schema.uid as UID.Schema,\n                locale: data.locale,\n                documentId: data.documentId,\n              }) as any\n            );\n          }\n        },\n        {\n          schema,\n          getModel: (uid) => strapi.getModel(uid as UID.Schema),\n        },\n        data\n      );\n    },\n\n    async encodeSourceMaps({ data, schema }: EncodingInfo): Promise<any> {\n      try {\n        if (Array.isArray(data)) {\n          return await Promise.all(\n            data.map((item) => this.encodeSourceMaps({ data: item, schema }))\n          );\n        }\n\n        if (!isObject(data)) {\n          return data;\n        }\n\n        return await this.encodeEntry({ data, schema });\n      } catch (error) {\n        strapi.log.error('Error encoding source maps:', error);\n        return data;\n      }\n    },\n  };\n};\n\nexport { createContentSourceMapsService };\n"],"names":["ENCODABLE_TYPES","EXCLUDED_FIELDS","isObject","value","createContentSourceMapsService","strapi","encodeField","text","kind","model","documentId","type","path","locale","strapiSource","URLSearchParams","set","vercelStegaCombine","toString","encodeEntry","data","schema","undefined","traverseEntity","key","attribute","includes","rawWithIndices","uid","getModel","encodeSourceMaps","Array","isArray","Promise","all","map","item","error","log"],"mappings":";;;;;AAKA,MAAMA,eAAkB,GAAA;AACtB,IAAA,QAAA;AACA,IAAA,MAAA;AACA,IAAA,UAAA;AACA,IAAA,YAAA;AACA,IAAA,MAAA;AACA,IAAA,MAAA;AACA,IAAA,UAAA;AACA,IAAA,WAAA;AACA,IAAA,SAAA;AACA,IAAA,aAAA;AACA,IAAA,MAAA;AACA,IAAA,OAAA;AACA,IAAA,OAAA;AACA,IAAA;AASD,CAAA;AAED;AACA,MAAMC,eAAkB,GAAA;AACtB,IAAA,IAAA;AACA,IAAA,YAAA;AACA,IAAA,QAAA;AACA,IAAA,eAAA;AACA,IAAA,YAAA;AACA,IAAA,YAAA;AACA,IAAA,YAAA;AACA,IAAA,YAAA;AACA,IAAA;AACD,CAAA;AAOD,MAAMC,WAAW,CAACC,KAAAA,GAAAA;IAChB,OAAO,OAAOA,KAAU,KAAA,QAAA,IAAYA,KAAU,KAAA,IAAA;AAChD,CAAA;AAEA,MAAMC,iCAAiC,CAACC,MAAAA,GAAAA;IACtC,OAAO;AACLC,QAAAA,WAAAA,CAAAA,CACEC,IAAY,EACZ,EAAEC,IAAI,EAAEC,KAAK,EAAEC,UAAU,EAAEC,IAAI,EAAEC,IAAI,EAAEC,MAAM,EAAyB,EAAA;AAEtE;;;;UAKA,MAAMC,eAAe,IAAIC,eAAAA,EAAAA;YACzBD,YAAaE,CAAAA,GAAG,CAAC,YAAcN,EAAAA,UAAAA,CAAAA;YAC/BI,YAAaE,CAAAA,GAAG,CAAC,MAAQL,EAAAA,IAAAA,CAAAA;YACzBG,YAAaE,CAAAA,GAAG,CAAC,MAAQJ,EAAAA,IAAAA,CAAAA;AAEzB,YAAA,IAAIH,KAAO,EAAA;gBACTK,YAAaE,CAAAA,GAAG,CAAC,OAASP,EAAAA,KAAAA,CAAAA;AAC5B;AACA,YAAA,IAAID,IAAM,EAAA;gBACRM,YAAaE,CAAAA,GAAG,CAAC,MAAQR,EAAAA,IAAAA,CAAAA;AAC3B;AACA,YAAA,IAAIK,MAAQ,EAAA;gBACVC,YAAaE,CAAAA,GAAG,CAAC,QAAUH,EAAAA,MAAAA,CAAAA;AAC7B;AAEA,YAAA,OAAOI,yBAAmBV,IAAM,EAAA;AAAEO,gBAAAA,YAAAA,EAAcA,aAAaI,QAAQ;AAAG,aAAA,CAAA;AAC1E,SAAA;AAEA,QAAA,MAAMC,WAAY,CAAA,CAAA,EAAEC,IAAI,EAAEC,MAAM,EAAgB,EAAA;AAC9C,YAAA,IAAI,CAACnB,QAAAA,CAASkB,IAASA,CAAAA,IAAAA,IAAAA,KAASE,SAAW,EAAA;gBACzC,OAAOF,IAAAA;AACT;AAEA,YAAA,OAAOG,2BACL,CAAC,EAAEC,GAAG,EAAErB,KAAK,EAAEsB,SAAS,EAAEJ,MAAM,EAAET,IAAI,EAAE,EAAE,EAAEI,GAAG,EAAE,GAAA;AAC/C,gBAAA,IAAI,CAACS,SAAAA,IAAaxB,eAAgByB,CAAAA,QAAQ,CAACF,GAAM,CAAA,EAAA;AAC/C,oBAAA;AACF;gBAEA,IAAIxB,eAAAA,CAAgB0B,QAAQ,CAACD,SAAAA,CAAUd,IAAI,CAAK,IAAA,OAAOR,UAAU,QAAU,EAAA;AACzEa,oBAAAA,GAAAA,CACEQ,GACA,EAAA,IAAI,CAAClB,WAAW,CAACH,KAAO,EAAA;AACtBS,wBAAAA,IAAAA,EAAMA,KAAKe,cAAc;AACzBhB,wBAAAA,IAAAA,EAAMc,UAAUd,IAAI;AACpBH,wBAAAA,IAAAA,EAAMa,OAAOb,IAAI;AACjBC,wBAAAA,KAAAA,EAAOY,OAAOO,GAAG;AACjBf,wBAAAA,MAAAA,EAAQO,KAAKP,MAAM;AACnBH,wBAAAA,UAAAA,EAAYU,KAAKV;AACnB,qBAAA,CAAA,CAAA;AAEJ;aAEF,EAAA;AACEW,gBAAAA,MAAAA;AACAQ,gBAAAA,QAAAA,EAAU,CAACD,GAAAA,GAAQvB,MAAOwB,CAAAA,QAAQ,CAACD,GAAAA;aAErCR,EAAAA,IAAAA,CAAAA;AAEJ,SAAA;AAEA,QAAA,MAAMU,gBAAiB,CAAA,CAAA,EAAEV,IAAI,EAAEC,MAAM,EAAgB,EAAA;YACnD,IAAI;gBACF,IAAIU,KAAAA,CAAMC,OAAO,CAACZ,IAAO,CAAA,EAAA;AACvB,oBAAA,OAAO,MAAMa,OAAAA,CAAQC,GAAG,CACtBd,IAAKe,CAAAA,GAAG,CAAC,CAACC,IAAS,GAAA,IAAI,CAACN,gBAAgB,CAAC;4BAAEV,IAAMgB,EAAAA,IAAAA;AAAMf,4BAAAA;AAAO,yBAAA,CAAA,CAAA,CAAA;AAElE;gBAEA,IAAI,CAACnB,SAASkB,IAAO,CAAA,EAAA;oBACnB,OAAOA,IAAAA;AACT;AAEA,gBAAA,OAAO,MAAM,IAAI,CAACD,WAAW,CAAC;AAAEC,oBAAAA,IAAAA;AAAMC,oBAAAA;AAAO,iBAAA,CAAA;AAC/C,aAAA,CAAE,OAAOgB,KAAO,EAAA;AACdhC,gBAAAA,MAAAA,CAAOiC,GAAG,CAACD,KAAK,CAAC,6BAA+BA,EAAAA,KAAAA,CAAAA;gBAChD,OAAOjB,IAAAA;AACT;AACF;AACF,KAAA;AACF;;;;"}