@strapi/strapi 4.14.0-beta.0 → 4.14.0

package/dist/middlewares/responses.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.responses = void 0;
+const fp_1 = require("lodash/fp");
+const responses = (config = {}) => {
+    return async (ctx, next) => {
+        await next();
+        const { status } = ctx;
+        const handler = config?.handlers?.[status];
+        if ((0, fp_1.isFunction)(handler)) {
+            await handler(ctx, next);
+        }
+    };
+};
+exports.responses = responses;
+//# sourceMappingURL=responses.js.map

package/dist/middlewares/responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.js","sourceRoot":"","sources":["../../src/middlewares/responses.ts"],"names":[],"mappings":";;;AAAA,kCAAuC;AAOhC,MAAM,SAAS,GAAqC,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE;IACzE,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,IAAI,EAAE,CAAC;QAEb,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QAE3C,IAAI,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE;YACvB,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;SAC1B;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,SAAS,aAWpB"}

package/dist/middlewares/security.d.ts

@@ -0,0 +1,4 @@
+import { KoaHelmet } from 'koa-helmet';
+import type { Common } from '@strapi/types';
+export type Config = NonNullable<Parameters<KoaHelmet>[0]>;
+export declare const security: Common.MiddlewareFactory<Config>;

package/dist/middlewares/security.js

@@ -0,0 +1,52 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.security = void 0;
+const fp_1 = require("lodash/fp");
+const koa_helmet_1 = __importDefault(require("koa-helmet"));
+const defaults = {
+    crossOriginEmbedderPolicy: false,
+    crossOriginOpenerPolicy: false,
+    crossOriginResourcePolicy: false,
+    originAgentCluster: false,
+    contentSecurityPolicy: {
+        useDefaults: true,
+        directives: {
+            'connect-src': ["'self'", 'https:'],
+            'img-src': ["'self'", 'data:', 'blob:', 'https://market-assets.strapi.io'],
+            'media-src': ["'self'", 'data:', 'blob:'],
+            upgradeInsecureRequests: null,
+        },
+    },
+    xssFilter: false,
+    hsts: {
+        maxAge: 31536000,
+        includeSubDomains: true,
+    },
+    frameguard: {
+        action: 'sameorigin',
+    },
+};
+const security = (config, { strapi }) => (ctx, next) => {
+    let helmetConfig = (0, fp_1.defaultsDeep)(defaults, config);
+    const specialPaths = ['/documentation'];
+    if (strapi.plugin('graphql')) {
+        const { config: gqlConfig } = strapi.plugin('graphql');
+        specialPaths.push(gqlConfig('endpoint'));
+    }
+    if (ctx.method === 'GET' && specialPaths.some((str) => ctx.path.startsWith(str))) {
+        helmetConfig = (0, fp_1.merge)(helmetConfig, {
+            contentSecurityPolicy: {
+                directives: {
+                    'script-src': ["'self'", "'unsafe-inline'", 'cdn.jsdelivr.net'],
+                    'img-src': ["'self'", 'data:', 'cdn.jsdelivr.net', 'strapi.io'],
+                },
+            },
+        });
+    }
+    return (0, koa_helmet_1.default)(helmetConfig)(ctx, next);
+};
+exports.security = security;
+//# sourceMappingURL=security.js.map

package/dist/middlewares/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/middlewares/security.ts"],"names":[],"mappings":";;;;;;AAAA,kCAAgD;AAChD,4DAA+C;AAM/C,MAAM,QAAQ,GAAW;IACvB,yBAAyB,EAAE,KAAK;IAChC,uBAAuB,EAAE,KAAK;IAC9B,yBAAyB,EAAE,KAAK;IAChC,kBAAkB,EAAE,KAAK;IACzB,qBAAqB,EAAE;QACrB,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE;YACV,aAAa,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACnC,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iCAAiC,CAAC;YAC1E,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;YACzC,uBAAuB,EAAE,IAAI;SAC9B;KACF;IACD,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE;QACJ,MAAM,EAAE,QAAQ;QAChB,iBAAiB,EAAE,IAAI;KACxB;IACD,UAAU,EAAE;QACV,MAAM,EAAE,YAAY;KACrB;CACF,CAAC;AAEK,MAAM,QAAQ,GACnB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACvB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;IACZ,IAAI,YAAY,GAAW,IAAA,iBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE1D,MAAM,YAAY,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAExC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;QAC5B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;KAC1C;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE;QAChF,YAAY,GAAG,IAAA,UAAK,EAAC,YAAY,EAAE;YACjC,qBAAqB,EAAE;gBACrB,UAAU,EAAE;oBACV,YAAY,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,kBAAkB,CAAC;oBAC/D,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,CAAC;iBAChE;aACF;SACF,CAAC,CAAC;KACJ;IAED,OAAO,IAAA,oBAAM,EAAC,YAAY,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC,CAAC;AAxBS,QAAA,QAAQ,YAwBjB"}

package/dist/middlewares/session.d.ts

@@ -0,0 +1,3 @@
+import koaSession from 'koa-session';
+import type { Common } from '@strapi/types';
+export declare const session: Common.MiddlewareFactory<Partial<koaSession.opts>>;

package/dist/middlewares/session.js

@@ -0,0 +1,30 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.session = void 0;
+const fp_1 = require("lodash/fp");
+const koa_session_1 = __importDefault(require("koa-session"));
+const defaultConfig = {
+    key: 'koa.sess',
+    maxAge: 86400000,
+    autoCommit: true,
+    overwrite: true,
+    httpOnly: true,
+    signed: true,
+    rolling: false,
+    renew: false,
+    secure: process.env.NODE_ENV === 'production',
+    sameSite: undefined,
+};
+const session = (userConfig, { strapi }) => {
+    const { keys } = strapi.server.app;
+    if (!(0, fp_1.isArray)(keys) || (0, fp_1.isEmpty)(keys) || keys.some(fp_1.isEmpty)) {
+        throw new Error(`App keys are required. Please set app.keys in config/server.js (ex: keys: ['myKeyA', 'myKeyB'])`);
+    }
+    const config = { ...defaultConfig, ...userConfig };
+    strapi.server.use((0, koa_session_1.default)(config, strapi.server.app));
+};
+exports.session = session;
+//# sourceMappingURL=session.js.map

package/dist/middlewares/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/middlewares/session.ts"],"names":[],"mappings":";;;;;;AAAA,kCAA6C;AAC7C,8DAAqC;AAGrC,MAAM,aAAa,GAAG;IACpB,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,IAAI;IAChB,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,KAAK;IACd,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IAC7C,QAAQ,EAAE,SAAS;CACpB,CAAC;AAEK,MAAM,OAAO,GAAuD,CACzE,UAAU,EACV,EAAE,MAAM,EAAE,EACV,EAAE;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;IACnC,IAAI,CAAC,IAAA,YAAO,EAAC,IAAI,CAAC,IAAI,IAAA,YAAO,EAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAO,CAAC,EAAE;QACzD,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;KACH;IAED,MAAM,MAAM,GAA6B,EAAE,GAAG,aAAa,EAAE,GAAG,UAAU,EAAE,CAAC;IAE7E,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAA,qBAAU,EAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC,CAAC;AAdW,QAAA,OAAO,WAclB"}

package/dist/migrations/draft-publish.d.ts

@@ -0,0 +1,8 @@
+import { Schema } from '@strapi/types';
+interface Input {
+    oldContentTypes: Record<string, Schema.ContentType>;
+    contentTypes: Record<string, Schema.ContentType>;
+}
+declare const enableDraftAndPublish: ({ oldContentTypes, contentTypes }: Input) => Promise<void>;
+declare const disableDraftAndPublish: ({ oldContentTypes, contentTypes }: Input) => Promise<void>;
+export { enableDraftAndPublish as enable, disableDraftAndPublish as disable };

package/dist/migrations/draft-publish.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.disable = exports.enable = void 0;
+const utils_1 = require("@strapi/utils");
+const enableDraftAndPublish = async ({ oldContentTypes, contentTypes }) => {
+    if (!oldContentTypes) {
+        return;
+    }
+    // run the after content types migrations
+    for (const uid in contentTypes) {
+        if (!oldContentTypes[uid]) {
+            continue;
+        }
+        const oldContentType = oldContentTypes[uid];
+        const contentType = contentTypes[uid];
+        // if d&p was enabled set publishedAt to eq createdAt
+        if (!utils_1.contentTypes.hasDraftAndPublish(oldContentType) &&
+            utils_1.contentTypes.hasDraftAndPublish(contentType)) {
+            const qb = strapi.db?.queryBuilder(uid);
+            await qb
+                .update({ published_at: qb.ref('created_at') })
+                .where({ published_at: null })
+                .execute();
+        }
+    }
+};
+exports.enable = enableDraftAndPublish;
+const disableDraftAndPublish = async ({ oldContentTypes, contentTypes }) => {
+    if (!oldContentTypes) {
+        return;
+    }
+    for (const uid in contentTypes) {
+        if (!oldContentTypes[uid]) {
+            continue;
+        }
+        const oldContentType = oldContentTypes[uid];
+        const contentType = contentTypes[uid];
+        // if d&p was disabled remove unpublish content before sync
+        if (utils_1.contentTypes.hasDraftAndPublish(oldContentType) &&
+            !utils_1.contentTypes.hasDraftAndPublish(contentType)) {
+            await strapi.db?.queryBuilder(uid).delete().where({ published_at: null }).execute();
+        }
+    }
+};
+exports.disable = disableDraftAndPublish;
+//# sourceMappingURL=draft-publish.js.map

package/dist/migrations/draft-publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft-publish.js","sourceRoot":"","sources":["../../src/migrations/draft-publish.ts"],"names":[],"mappings":";;;AAAA,yCAAkE;AAQlE,MAAM,qBAAqB,GAAG,KAAK,EAAE,EAAE,eAAe,EAAE,YAAY,EAAS,EAAE,EAAE;IAC/E,IAAI,CAAC,eAAe,EAAE;QACpB,OAAO;KACR;IACD,yCAAyC;IAEzC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE;QAC9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE;YACzB,SAAS;SACV;QAED,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAEtC,qDAAqD;QACrD,IACE,CAAC,oBAAiB,CAAC,kBAAkB,CAAC,cAAc,CAAC;YACrD,oBAAiB,CAAC,kBAAkB,CAAC,WAAW,CAAC,EACjD;YACA,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,EAAE;iBACL,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;iBAC9C,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;iBAC7B,OAAO,EAAE,CAAC;SACd;KACF;AACH,CAAC,CAAC;AAyBgC,uCAAM;AAvBxC,MAAM,sBAAsB,GAAG,KAAK,EAAE,EAAE,eAAe,EAAE,YAAY,EAAS,EAAE,EAAE;IAChF,IAAI,CAAC,eAAe,EAAE;QACpB,OAAO;KACR;IAED,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE;QAC9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE;YACzB,SAAS;SACV;QAED,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAEtC,2DAA2D;QAC3D,IACE,oBAAiB,CAAC,kBAAkB,CAAC,cAAc,CAAC;YACpD,CAAC,oBAAiB,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAClD;YACA,MAAM,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SACrF;KACF;AACH,CAAC,CAAC;AAEkE,yCAAO"}

package/dist/services/auth/index.d.ts

@@ -0,0 +1,25 @@
+import type { Common } from '@strapi/types';
+import type { ParameterizedContext } from 'koa';
+interface AuthenticationResponse {
+    authenticated?: boolean;
+    credentials?: unknown;
+    ability?: unknown;
+    error?: Error | null;
+}
+interface AuthenticationInfo {
+    strategy: Strategy;
+    credentials: unknown;
+    ability: unknown;
+}
+interface Strategy {
+    name: string;
+    authenticate: (ctx: ParameterizedContext) => Promise<AuthenticationResponse>;
+    verify?: (auth: AuthenticationInfo, config: Common.RouteConfig['auth']) => Promise<any>;
+}
+interface Authentication {
+    register: (type: string, strategy: Strategy) => Authentication;
+    authenticate: Common.MiddlewareHandler;
+    verify: (auth: AuthenticationInfo, config?: Common.RouteConfig['auth']) => Promise<any>;
+}
+declare const createAuthentication: () => Authentication;
+export default createAuthentication;

package/dist/services/auth/index.js

@@ -0,0 +1,84 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("assert/strict"));
+const fp_1 = require("lodash/fp");
+const utils_1 = require("@strapi/utils");
+const INVALID_STRATEGY_MSG = 'Invalid auth strategy. Expecting an object with properties {name: string, authenticate: function, verify: function}';
+const validStrategy = (strategy) => {
+    (0, strict_1.default)((0, fp_1.has)('authenticate', strategy), INVALID_STRATEGY_MSG);
+    (0, strict_1.default)(typeof strategy.authenticate === 'function', INVALID_STRATEGY_MSG);
+    if ((0, fp_1.has)('verify', strategy)) {
+        (0, strict_1.default)(typeof strategy.verify === 'function', INVALID_STRATEGY_MSG);
+    }
+};
+const createAuthentication = () => {
+    const strategies = {};
+    return {
+        register(type, strategy) {
+            validStrategy(strategy);
+            if (!strategies[type]) {
+                strategies[type] = [];
+            }
+            strategies[type].push(strategy);
+            return this;
+        },
+        async authenticate(ctx, next) {
+            const route = ctx.state.route;
+            // use route strategy
+            const config = route?.config?.auth;
+            if (config === false) {
+                return next();
+            }
+            const routeStrategies = route.info.type ? strategies[route.info.type] : [];
+            const configStrategies = (config?.strategies ?? routeStrategies ?? []);
+            const strategiesToUse = configStrategies.reduce((acc, strategy) => {
+                // Resolve by strategy name
+                if (typeof strategy === 'string') {
+                    const routeStrategy = routeStrategies.find((rs) => rs.name === strategy);
+                    if (routeStrategy) {
+                        acc.push(routeStrategy);
+                    }
+                }
+                // Use the given strategy as is
+                else if (typeof strategy === 'object') {
+                    validStrategy(strategy);
+                    acc.push(strategy);
+                }
+                return acc;
+            }, []);
+            for (const strategy of strategiesToUse) {
+                const result = await strategy.authenticate(ctx);
+                const { authenticated = false, credentials, ability = null, error = null } = result || {};
+                if (error !== null) {
+                    return ctx.unauthorized(error);
+                }
+                if (authenticated) {
+                    ctx.state.isAuthenticated = true;
+                    ctx.state.auth = {
+                        strategy,
+                        credentials,
+                        ability,
+                    };
+                    return next();
+                }
+            }
+            return ctx.unauthorized('Missing or invalid credentials');
+        },
+        async verify(auth, config = {}) {
+            if (config === false) {
+                return;
+            }
+            if (!auth) {
+                throw new utils_1.errors.UnauthorizedError();
+            }
+            if (typeof auth.strategy.verify === 'function') {
+                return auth.strategy.verify(auth, config);
+            }
+        },
+    };
+};
+exports.default = createAuthentication;
+//# sourceMappingURL=index.js.map

package/dist/services/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/auth/index.ts"],"names":[],"mappings":";;;;;AAAA,2DAAmC;AACnC,kCAAgC;AAEhC,yCAAuC;AA6BvC,MAAM,oBAAoB,GACxB,qHAAqH,CAAC;AAExH,MAAM,aAAa,GAAG,CAAC,QAAkB,EAAE,EAAE;IAC3C,IAAA,gBAAM,EAAC,IAAA,QAAG,EAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC5D,IAAA,gBAAM,EAAC,OAAO,QAAQ,CAAC,YAAY,KAAK,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAE1E,IAAI,IAAA,QAAG,EAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;QAC3B,IAAA,gBAAM,EAAC,OAAO,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,oBAAoB,CAAC,CAAC;KACrE;AACH,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,GAAmB,EAAE;IAChD,MAAM,UAAU,GAA+B,EAAE,CAAC;IAElD,OAAO;QACL,QAAQ,CAAC,IAAI,EAAE,QAAQ;YACrB,aAAa,CAAC,QAAQ,CAAC,CAAC;YAExB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;gBACrB,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;aACvB;YAED,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAEhC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI;YAC1B,MAAM,KAAK,GAAiB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAE5C,qBAAqB;YACrB,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC;YAEnC,IAAI,MAAM,KAAK,KAAK,EAAE;gBACpB,OAAO,IAAI,EAAE,CAAC;aACf;YAED,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,eAAe,IAAI,EAAE,CAEpE,CAAC;YAEF,MAAM,eAAe,GAAe,gBAAgB,CAAC,MAAM,CACzD,CAAC,GAAG,EAAE,QAA2B,EAAE,EAAE;gBACnC,2BAA2B;gBAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE;oBAChC,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;oBAEzE,IAAI,aAAa,EAAE;wBACjB,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;qBACzB;iBACF;gBAED,+BAA+B;qBAC1B,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE;oBACrC,aAAa,CAAC,QAAQ,CAAC,CAAC;oBAExB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;iBACpB;gBAED,OAAO,GAAG,CAAC;YACb,CAAC,EACD,EAAgB,CACjB,CAAC;YAEF,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE;gBACtC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBAEhD,MAAM,EAAE,aAAa,GAAG,KAAK,EAAE,WAAW,EAAE,OAAO,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;gBAE1F,IAAI,KAAK,KAAK,IAAI,EAAE;oBAClB,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;iBAChC;gBAED,IAAI,aAAa,EAAE;oBACjB,GAAG,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC;oBACjC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG;wBACf,QAAQ;wBACR,WAAW;wBACX,OAAO;qBACR,CAAC;oBAEF,OAAO,IAAI,EAAE,CAAC;iBACf;aACF;YAED,OAAO,GAAG,CAAC,YAAY,CAAC,gCAAgC,CAAC,CAAC;QAC5D,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,EAAE;YAC5B,IAAI,MAAM,KAAK,KAAK,EAAE;gBACpB,OAAO;aACR;YAED,IAAI,CAAC,IAAI,EAAE;gBACT,MAAM,IAAI,cAAM,CAAC,iBAAiB,EAAE,CAAC;aACtC;YAED,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE;gBAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;aAC3C;QACH,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,kBAAe,oBAAoB,CAAC"}

package/dist/services/content-api/index.d.ts

@@ -0,0 +1,53 @@
+import type { Strapi, Common } from '@strapi/types';
+/**
+ * Create a content API container that holds logic, tools and utils. (eg: permissions, ...)
+ */
+declare const createContentAPI: (strapi: Strapi) => {
+    permissions: {
+        engine: import("@strapi/permissions/dist/engine").Engine;
+        providers: {
+            action: {
+                register(action: string, payload: Record<string, unknown>): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+                delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                get(key: string): {
+                    [x: string]: unknown;
+                } | undefined;
+                getWhere(filters?: Record<string, unknown> | undefined): {
+                    [x: string]: unknown;
+                }[];
+                values(): {
+                    [x: string]: unknown;
+                }[];
+                keys(): string[];
+                has(key: string): boolean;
+                size(): number;
+                clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            };
+            condition: {
+                register(condition: import("./permissions/providers/condition").Condition): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+                delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+                get(key: string): {
+                    [x: string]: unknown;
+                } | undefined;
+                getWhere(filters?: Record<string, unknown> | undefined): {
+                    [x: string]: unknown;
+                }[];
+                values(): {
+                    [x: string]: unknown;
+                }[];
+                keys(): string[];
+                has(key: string): boolean;
+                size(): number;
+                clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            };
+        };
+        registerActions: () => Promise<void>;
+        getActionsMap: () => Record<string, {
+            controllers: Record<string, string[]>;
+        }>;
+    };
+    getRoutesMap: () => Promise<Record<string, Common.Route[]>>;
+};
+export default createContentAPI;

package/dist/services/content-api/index.js

@@ -0,0 +1,62 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const lodash_1 = __importDefault(require("lodash"));
+const permissions_1 = __importDefault(require("./permissions"));
+const transformRoutePrefixFor = (pluginName) => (route) => {
+    const prefix = route.config && route.config.prefix;
+    const path = prefix !== undefined ? `${prefix}${route.path}` : `/${pluginName}${route.path}`;
+    return {
+        ...route,
+        path,
+    };
+};
+const filterContentAPI = (route) => route.info.type === 'content-api';
+/**
+ * Create a content API container that holds logic, tools and utils. (eg: permissions, ...)
+ */
+const createContentAPI = (strapi) => {
+    const getRoutesMap = async () => {
+        const routesMap = {};
+        lodash_1.default.forEach(strapi.api, (api, apiName) => {
+            const routes = lodash_1.default.flatMap(api.routes, (route) => {
+                if ('routes' in route) {
+                    return route.routes;
+                }
+                return route;
+            }).filter(filterContentAPI);
+            if (routes.length === 0) {
+                return;
+            }
+            const apiPrefix = strapi.config.get('api.rest.prefix');
+            routesMap[`api::${apiName}`] = routes.map((route) => ({
+                ...route,
+                path: `${apiPrefix}${route.path}`,
+            }));
+        });
+        lodash_1.default.forEach(strapi.plugins, (plugin, pluginName) => {
+            const transformPrefix = transformRoutePrefixFor(pluginName);
+            if (Array.isArray(plugin.routes)) {
+                return plugin.routes.map(transformPrefix).filter(filterContentAPI);
+            }
+            const routes = lodash_1.default.flatMap(plugin.routes, (route) => route.routes.map(transformPrefix)).filter(filterContentAPI);
+            if (routes.length === 0) {
+                return;
+            }
+            const apiPrefix = strapi.config.get('api.rest.prefix');
+            routesMap[`plugin::${pluginName}`] = routes.map((route) => ({
+                ...route,
+                path: `${apiPrefix}${route.path}`,
+            }));
+        });
+        return routesMap;
+    };
+    return {
+        permissions: (0, permissions_1.default)(strapi),
+        getRoutesMap,
+    };
+};
+exports.default = createContentAPI;
+//# sourceMappingURL=index.js.map

package/dist/services/content-api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/content-api/index.ts"],"names":[],"mappings":";;;;;AAAA,oDAAuB;AAEvB,gEAA4D;AAE5D,MAAM,uBAAuB,GAAG,CAAC,UAAkB,EAAE,EAAE,CAAC,CAAC,KAAmB,EAAE,EAAE;IAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7F,OAAO;QACL,GAAG,KAAK;QACR,IAAI;KACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,KAAmB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC;AAEpF;;GAEG;AACH,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,EAAE;IAC1C,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,MAAM,SAAS,GAAmC,EAAE,CAAC;QAErD,gBAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,gBAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7C,IAAI,QAAQ,IAAI,KAAK,EAAE;oBACrB,OAAO,KAAK,CAAC,MAAM,CAAC;iBACrB;gBAED,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAE5B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;gBACvB,OAAO;aACR;YAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACvD,SAAS,CAAC,QAAQ,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACpD,GAAG,KAAK;gBACR,IAAI,EAAE,GAAG,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE;aAClC,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,gBAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE;YAC/C,MAAM,eAAe,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;YAE5D,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBAChC,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;aACpE;YAED,MAAM,MAAM,GAAG,gBAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAC1F,gBAAgB,CACjB,CAAC;YAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;gBACvB,OAAO;aACR;YAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACvD,SAAS,CAAC,WAAW,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC1D,GAAG,KAAK;gBACR,IAAI,EAAE,GAAG,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE;aAClC,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,OAAO;QACL,WAAW,EAAE,IAAA,qBAA+B,EAAC,MAAM,CAAC;QACpD,YAAY;KACb,CAAC;AACJ,CAAC,CAAC;AAEF,kBAAe,gBAAgB,CAAC"}

package/dist/services/content-api/permissions/engine.d.ts

@@ -0,0 +1,4 @@
+import permissions from '@strapi/permissions';
+type Options = Parameters<typeof permissions.engine.new>[0];
+declare const _default: ({ providers }: Options) => import("@strapi/permissions/dist/engine").Engine;
+export default _default;

package/dist/services/content-api/permissions/engine.js

@@ -0,0 +1,8 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const permissions_1 = __importDefault(require("@strapi/permissions"));
+exports.default = ({ providers }) => permissions_1.default.engine.new({ providers });
+//# sourceMappingURL=engine.js.map

package/dist/services/content-api/permissions/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../../src/services/content-api/permissions/engine.ts"],"names":[],"mappings":";;;;;AAAA,sEAA8C;AAI9C,kBAAe,CAAC,EAAE,SAAS,EAAW,EAAE,EAAE,CAAC,qBAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC"}

package/dist/services/content-api/permissions/index.d.ts

@@ -0,0 +1,51 @@
+import type { Strapi } from '@strapi/types';
+/**
+ * Create instances of providers and permission engine for the core content-API service.
+ * Also, expose utilities to get informations about available actions and such.
+ */
+declare const _default: (strapi: Strapi) => {
+    engine: import("@strapi/permissions/dist/engine").Engine;
+    providers: {
+        action: {
+            register(action: string, payload: Record<string, unknown>): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+            delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            get(key: string): {
+                [x: string]: unknown;
+            } | undefined;
+            getWhere(filters?: Record<string, unknown> | undefined): {
+                [x: string]: unknown;
+            }[];
+            values(): {
+                [x: string]: unknown;
+            }[];
+            keys(): string[];
+            has(key: string): boolean;
+            size(): number;
+            clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+        };
+        condition: {
+            register(condition: import("./providers/condition").Condition): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+            delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+            get(key: string): {
+                [x: string]: unknown;
+            } | undefined;
+            getWhere(filters?: Record<string, unknown> | undefined): {
+                [x: string]: unknown;
+            }[];
+            values(): {
+                [x: string]: unknown;
+            }[];
+            keys(): string[];
+            has(key: string): boolean;
+            size(): number;
+            clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+        };
+    };
+    registerActions: () => Promise<void>;
+    getActionsMap: () => Record<string, {
+        controllers: Record<string, string[]>;
+    }>;
+};
+export default _default;

package/dist/services/content-api/permissions/index.js

@@ -0,0 +1,110 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const lodash_1 = __importDefault(require("lodash"));
+const providers_1 = require("./providers");
+const engine_1 = __importDefault(require("./engine"));
+const typeSymbol = Symbol.for('__type__');
+/**
+ * Creates an handler that checks if the permission's action exists in the action registry
+ */
+const createValidatePermissionHandler = (actionProvider) => ({ permission }) => {
+    const action = actionProvider.get(permission.action);
+    // If the action isn't registered into the action provider, then ignore the permission and warn the user
+    if (!action) {
+        strapi.log.debug(`Unknown action "${permission.action}" supplied when registering a new permission`);
+        return false;
+    }
+    return true;
+};
+/**
+ * Create instances of providers and permission engine for the core content-API service.
+ * Also, expose utilities to get informations about available actions and such.
+ */
+exports.default = (strapi) => {
+    // NOTE: Here we define both an action and condition provider,
+    // but at the moment, we're only using the action one.
+    const providers = {
+        action: (0, providers_1.createActionProvider)(),
+        condition: (0, providers_1.createConditionProvider)(),
+    };
+    /**
+     * Get a tree representation of the available Content API actions
+     * based on the methods of the Content API controllers.
+     *
+     * @note Only actions bound to a content-API route are returned.
+     */
+    const getActionsMap = () => {
+        const actionMap = {};
+        /**
+         * Check if a controller's action is bound to the
+         * content-api by looking at a potential __type__ symbol
+         */
+        const isContentApi = (action) => {
+            if (!lodash_1.default.has(action, typeSymbol)) {
+                return false;
+            }
+            return action[typeSymbol].includes('content-api');
+        };
+        /**
+         * Register actions from a specific API source into the result tree
+         */
+        const registerAPIsActions = (apis, source) => {
+            lodash_1.default.forEach(apis, (api, apiName) => {
+                const controllers = lodash_1.default.reduce(api.controllers, (acc, controller, controllerName) => {
+                    const contentApiActions = lodash_1.default.pickBy(controller, isContentApi);
+                    if (lodash_1.default.isEmpty(contentApiActions)) {
+                        return acc;
+                    }
+                    acc[controllerName] = Object.keys(contentApiActions);
+                    return acc;
+                }, {});
+                if (!lodash_1.default.isEmpty(controllers)) {
+                    actionMap[`${source}::${apiName}`] = { controllers };
+                }
+            });
+        };
+        registerAPIsActions(strapi.api, 'api');
+        registerAPIsActions(strapi.plugins, 'plugin');
+        return actionMap;
+    };
+    /**
+     * Register all the content-API's controllers actions into the action provider.
+     * This method make use of the {@link getActionsMap} to generate the list of actions to register.
+     *
+     * @return {void}
+     */
+    const registerActions = async () => {
+        const actionsMap = getActionsMap();
+        // For each API
+        for (const [api, value] of Object.entries(actionsMap)) {
+            const { controllers } = value;
+            // Register controllers methods as actions
+            for (const [controller, actions] of Object.entries(controllers)) {
+                // Register each action individually
+                await Promise.all(actions.map((action) => {
+                    const actionUID = `${api}.${controller}.${action}`;
+                    return providers.action.register(actionUID, {
+                        api,
+                        controller,
+                        action,
+                        uid: actionUID,
+                    });
+                }));
+            }
+        }
+    };
+    // Create an instance of a content-API permission engine
+    // and binds a custom validation handler to it
+    const engine = (0, engine_1.default)({ providers });
+    engine.on('before-format::validate.permission', createValidatePermissionHandler(providers.action));
+    return {
+        engine,
+        providers,
+        registerActions,
+        getActionsMap,
+    };
+};
+//# sourceMappingURL=index.js.map

package/dist/services/content-api/permissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/services/content-api/permissions/index.ts"],"names":[],"mappings":";;;;;AAAA,oDAAuB;AAEvB,2CAA4E;AAC5E,sDAA8C;AAE9C,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAU1C;;GAEG;AACH,MAAM,+BAA+B,GACnC,CAAC,cAAuD,EAA6B,EAAE,CACvF,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;IACjB,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAErD,wGAAwG;IACxG,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,CAAC,GAAG,CAAC,KAAK,CACd,mBAAmB,UAAU,CAAC,MAAM,8CAA8C,CACnF,CAAC;QAEF,OAAO,KAAK,CAAC;KACd;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEJ;;;GAGG;AACH,kBAAe,CAAC,MAAc,EAAE,EAAE;IAChC,8DAA8D;IAC9D,sDAAsD;IACtD,MAAM,SAAS,GAAG;QAChB,MAAM,EAAE,IAAA,gCAAoB,GAAE;QAC9B,SAAS,EAAE,IAAA,mCAAuB,GAAE;KACrC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,MAAM,SAAS,GAKX,EAAE,CAAC;QAEP;;;WAGG;QACH,MAAM,YAAY,GAAG,CAAC,MAAuD,EAAE,EAAE;YAC/E,IAAI,CAAC,gBAAC,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE;gBAC9B,OAAO,KAAK,CAAC;aACd;YAED,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACpD,CAAC,CAAC;QAEF;;WAEG;QACH,MAAM,mBAAmB,GAAG,CAC1B,IAAmD,EACnD,MAAwB,EACxB,EAAE;YACF,gBAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBAC/B,MAAM,WAAW,GAAG,gBAAC,CAAC,MAAM,CAC1B,GAAG,CAAC,WAAW,EACf,CAAC,GAAG,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE;oBAClC,MAAM,iBAAiB,GAAG,gBAAC,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;oBAE7D,IAAI,gBAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE;wBAChC,OAAO,GAAG,CAAC;qBACZ;oBAED,GAAG,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;oBAErD,OAAO,GAAG,CAAC;gBACb,CAAC,EACD,EAA8B,CAC/B,CAAC;gBAEF,IAAI,CAAC,gBAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;oBAC3B,SAAS,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC;iBACtD;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE9C,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE;QACjC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QAEnC,eAAe;QACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;YACrD,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;YAE9B,0CAA0C;YAC1C,KAAK,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;gBAC/D,oCAAoC;gBACpC,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;oBACrB,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;oBAEnD,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE;wBAC1C,GAAG;wBACH,UAAU;wBACV,MAAM;wBACN,GAAG,EAAE,SAAS;qBACf,CAAC,CAAC;gBACL,CAAC,CAAC,CACH,CAAC;aACH;SACF;IACH,CAAC,CAAC;IAEF,wDAAwD;IACxD,8CAA8C;IAC9C,MAAM,MAAM,GAAG,IAAA,gBAAsB,EAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAErD,MAAM,CAAC,EAAE,CACP,oCAAoC,EACpC,+BAA+B,CAAC,SAAS,CAAC,MAAM,CAAC,CAClD,CAAC;IAEF,OAAO;QACL,MAAM;QACN,SAAS;QACT,eAAe;QACf,aAAa;KACd,CAAC;AACJ,CAAC,CAAC"}

package/dist/services/content-api/permissions/providers/action.d.ts

@@ -0,0 +1,19 @@
+declare const _default: (options?: {}) => {
+    register(action: string, payload: Record<string, unknown>): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+    hooks: import("@strapi/utils/dist/provider-factory").ProviderHooksMap;
+    delete(key: string): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+    get(key: string): {
+        [x: string]: unknown;
+    } | undefined;
+    getWhere(filters?: Record<string, unknown> | undefined): {
+        [x: string]: unknown;
+    }[];
+    values(): {
+        [x: string]: unknown;
+    }[];
+    keys(): string[];
+    has(key: string): boolean;
+    size(): number;
+    clear(): Promise<import("@strapi/utils/dist/provider-factory").Provider>;
+};
+export default _default;