@tetherto/dev-websites-core 0.3.6 → 0.3.8

package/README.md

@@ -194,7 +194,7 @@ Registered by `buildCmsConfig` in this order. Disable or extend any of them via
 | ---------------- | ---------- | ----------------------------------------------------------------------------------------------------------------- |
 | `users`          | collection | Admin auth users (Payload local strategy).                                                                        |
 | `api-tokens`     | collection | Server-to-server API-key auth for non-admin REST/GraphQL clients. Disable with `overrides['api-tokens'] = false`. |
-| `media`          | collection | Uploads (image/video/pdf) with image sizes; served from S3 or disk.                                               |
+| `media`          | collection | Uploads (image/video/pdf) with image sizes; served from S3 or disk. Anonymous REST document reads are denied; files stay public at `/api/media/file/*`. |
 | `authors`        | collection | Blog authors — bio, social profiles, JSON-LD `Person` overrides.                                                  |
 | `categories`     | collection | Blog post categories.                                                                                             |
 | `blog-posts`     | collection | Blog posts — drafts + autosave, SEO, author/category relations.                                                   |

package/dist/cache/handler.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.mts","names":[],"sources":["../../src/cache/types.ts","../../src/cache/createMongoCacheHandler.ts","../../src/cache/handler.ts"],"mappings":";;;;;;KAgCY;EACV;EACA;EACA;EACA,UAAU;;EAEV,cAAc,0BAA0B;GACvC;;KAWS;EACV;EACA,OAAO;;;KAIG;EACV;;;;KCtBU;EACV,IAAI,cAAc,QAAQ;EAC1B,IAAI,aAAa,OAAO,oBAAoB,MAAM,kBAAkB;EACpE,OAAO,cAAc;EACrB;EACA,cAAc,yBAAyB,sBAAsB;;;;;;KAOnD,oCAAoC,kBAAkB"}
+{"version":3,"file":"handler.d.mts","names":["_$__createMongoCacheHandler_js0.MongoCacheHandlerConstructor"],"sources":["../../src/cache/types.ts","../../src/cache/createMongoCacheHandler.ts","../../src/cache/handler.ts"],"mappings":";;;;;;KAgCY;EACV;EACA;EACA;EACA,UAAU;;EAEV,cAAc,0BAA0B;GACvC;;KAWS;EACV;EACA,OAAO;;;KAIG;EACV;;;;KCtBU;EACV,IAAI,cAAc,QAAQ;EAC1B,IAAI,aAAa,OAAO,oBAAoB,MAAM,kBAAkB;EACpE,OAAO,cAAc;EACrB;EACA,cAAc,yBAAyB,sBAAsB;;;;;;KAOnD,oCAAoC,kBAAkB"}

package/dist/cms/index.d.mts

@@ -1,3 +1,3 @@
-import { $ as createAccessHelpers, A as downloadCtaBlock, B as seoFields, C as codeBlockLanguages, D as sectionHeadingBlock, E as leafBlocks, F as richTextBlock, G as STOCK_COLLECTION_SLUGS, H as BuildCmsConfigOptions, I as coerceBlogPostCategoriesOnRead, J as GlobalOverride, K as StockCollectionSlug, L as coerceBlogPostCategoriesOnWrite, M as imageBlock, N as codeTabsBlock, O as accordionBlock, P as codeBlock, Q as AccessOptions, R as setPublishedAt, S as showcaseContentBlocks, T as languageOptions, U as buildCmsConfig, V as draftsWithAutosave, W as Overrides, X as applyGlobalOverride, Y as applyCollectionOverride, Z as AccessHelpers, _ as requireEnvAtRuntime, _t as writeAccess, a as createChangelog, at as RoleRule, b as blogContentBlocks, c as createPages, ct as collectionRoleRule, d as createAuthors, dt as hiddenUnless, et as ADMIN_ROLE, f as createMedia, ft as isCmsAdmin, g as createS3MediaPlugin, gt as withRoles, h as CreateS3MediaPluginOptions, ht as userHasAnyRole, i as createEventTags, it as RoleOption, j as videoBlock, k as stepsBlock, l as createBlogPosts, lt as effectiveRoles, m as createUsers, mt as resolveRoleOptions, n as createSiteSettings, nt as DEFAULT_GLOBAL_ROLES, o as createChangelogTags, ot as RolesOptions, p as createApiTokens, pt as publishedOrRoleRead, q as CollectionOverride, r as createEvents, rt as DEFAULT_ROLES, s as createLegalPages, st as adminRoleAccess, t as createAnnouncementBanner, tt as DEFAULT_COLLECTION_ROLES, u as createCategories, ut as globalRoleRule, v as getRichTextEditorConfig, w as defaultCodeLanguage, x as pageContentBlocks, y as richTextEditor, z as slugify } from "../index.mjs";
+import { $ as AccessOptions, A as downloadCtaBlock, B as slugify, C as codeBlockLanguages, D as sectionHeadingBlock, E as leafBlocks, F as codeBlock, G as Overrides, H as draftsWithAutosave, I as richTextBlock, J as CollectionOverride, K as STOCK_COLLECTION_SLUGS, L as coerceBlogPostCategoriesOnRead, M as videoBlock, N as imageBlock, O as accordionBlock, P as codeTabsBlock, Q as AccessHelpers, R as coerceBlogPostCategoriesOnWrite, S as showcaseContentBlocks, T as languageOptions, U as BuildCmsConfigOptions, V as seoFields, W as buildCmsConfig, X as applyCollectionOverride, Y as GlobalOverride, Z as applyGlobalOverride, _ as requireEnvAtRuntime, _t as withRoles, a as createChangelog, at as RoleOption, b as blogContentBlocks, c as createPages, ct as adminRoleAccess, d as createAuthors, dt as globalRoleRule, et as createAccessHelpers, f as createMedia, ft as hiddenUnless, g as createS3MediaPlugin, gt as userHasAnyRole, h as CreateS3MediaPluginOptions, ht as resolveRoleOptions, i as createEventTags, it as DEFAULT_ROLES, j as customHtmlBlock, k as stepsBlock, l as createBlogPosts, lt as collectionRoleRule, m as createUsers, mt as publishedOrRoleRead, n as createSiteSettings, nt as DEFAULT_COLLECTION_ROLES, o as createChangelogTags, ot as RoleRule, p as createApiTokens, pt as isCmsAdmin, q as StockCollectionSlug, r as createEvents, rt as DEFAULT_GLOBAL_ROLES, s as createLegalPages, st as RolesOptions, t as createAnnouncementBanner, tt as ADMIN_ROLE, u as createCategories, ut as effectiveRoles, v as getRichTextEditorConfig, vt as writeAccess, w as defaultCodeLanguage, x as pageContentBlocks, y as richTextEditor, z as setPublishedAt } from "../index.mjs";
 import { n as readPayloadMediaAsDataUrl, r as readPayloadMediaBuffer, t as PayloadMedia } from "../readMediaBuffer.mjs";
-export { ADMIN_ROLE, type AccessHelpers, type AccessOptions, type BuildCmsConfigOptions, type CollectionOverride, type CreateS3MediaPluginOptions, DEFAULT_COLLECTION_ROLES, DEFAULT_GLOBAL_ROLES, DEFAULT_ROLES, type GlobalOverride, type Overrides, type PayloadMedia, type RoleOption, type RoleRule, type RolesOptions, STOCK_COLLECTION_SLUGS, type StockCollectionSlug, accordionBlock, adminRoleAccess, applyCollectionOverride, applyGlobalOverride, blogContentBlocks, buildCmsConfig, codeBlock, codeBlockLanguages, codeTabsBlock, coerceBlogPostCategoriesOnRead, coerceBlogPostCategoriesOnWrite, collectionRoleRule, createAccessHelpers, createAnnouncementBanner, createApiTokens, createAuthors, createBlogPosts, createCategories, createChangelog, createChangelogTags, createEventTags, createEvents, createLegalPages, createMedia, createPages, createS3MediaPlugin, createSiteSettings, createUsers, defaultCodeLanguage, downloadCtaBlock, draftsWithAutosave, effectiveRoles, getRichTextEditorConfig, globalRoleRule, hiddenUnless, imageBlock, isCmsAdmin, languageOptions, leafBlocks, pageContentBlocks, publishedOrRoleRead, readPayloadMediaAsDataUrl, readPayloadMediaBuffer, requireEnvAtRuntime, resolveRoleOptions, richTextBlock, richTextEditor, sectionHeadingBlock, seoFields, setPublishedAt, showcaseContentBlocks, slugify, stepsBlock, userHasAnyRole, videoBlock, withRoles, writeAccess };
+export { ADMIN_ROLE, type AccessHelpers, type AccessOptions, type BuildCmsConfigOptions, type CollectionOverride, type CreateS3MediaPluginOptions, DEFAULT_COLLECTION_ROLES, DEFAULT_GLOBAL_ROLES, DEFAULT_ROLES, type GlobalOverride, type Overrides, type PayloadMedia, type RoleOption, type RoleRule, type RolesOptions, STOCK_COLLECTION_SLUGS, type StockCollectionSlug, accordionBlock, adminRoleAccess, applyCollectionOverride, applyGlobalOverride, blogContentBlocks, buildCmsConfig, codeBlock, codeBlockLanguages, codeTabsBlock, coerceBlogPostCategoriesOnRead, coerceBlogPostCategoriesOnWrite, collectionRoleRule, createAccessHelpers, createAnnouncementBanner, createApiTokens, createAuthors, createBlogPosts, createCategories, createChangelog, createChangelogTags, createEventTags, createEvents, createLegalPages, createMedia, createPages, createS3MediaPlugin, createSiteSettings, createUsers, customHtmlBlock, defaultCodeLanguage, downloadCtaBlock, draftsWithAutosave, effectiveRoles, getRichTextEditorConfig, globalRoleRule, hiddenUnless, imageBlock, isCmsAdmin, languageOptions, leafBlocks, pageContentBlocks, publishedOrRoleRead, readPayloadMediaAsDataUrl, readPayloadMediaBuffer, requireEnvAtRuntime, resolveRoleOptions, richTextBlock, richTextEditor, sectionHeadingBlock, seoFields, setPublishedAt, showcaseContentBlocks, slugify, stepsBlock, userHasAnyRole, videoBlock, withRoles, writeAccess };

package/dist/cms/index.mjs

@@ -1,3 +1,3 @@
-import { $ as hiddenUnless, A as richTextBlock, B as languageOptions, C as blogContentBlocks, D as accordionBlock, E as sectionHeadingBlock, F as downloadCtaBlock, G as ADMIN_ROLE, H as seoFields, I as codeTabsBlock, J as DEFAULT_ROLES, K as DEFAULT_COLLECTION_ROLES, L as codeBlock, M as richTextEditor, N as videoBlock, O as leafBlocks, P as imageBlock, Q as globalRoleRule, R as codeBlockLanguages, S as coerceBlogPostCategoriesOnWrite, T as showcaseContentBlocks, U as slugify, V as createAuthors, W as createApiTokens, X as collectionRoleRule, Y as adminRoleAccess, Z as effectiveRoles, _ as createCategories, a as STOCK_COLLECTION_SLUGS, at as writeAccess, b as setPublishedAt, c as createSiteSettings, d as createPages, et as isCmsAdmin, f as createMedia, g as createChangelog, h as createChangelogTags, i as buildCmsConfig, it as withRoles, j as getRichTextEditorConfig, k as stepsBlock, l as createUsers, m as createEventTags, n as createS3MediaPlugin, nt as resolveRoleOptions, o as applyCollectionOverride, ot as createAccessHelpers, p as createEvents, q as DEFAULT_GLOBAL_ROLES, r as requireEnvAtRuntime, rt as userHasAnyRole, s as applyGlobalOverride, t as createAnnouncementBanner, tt as publishedOrRoleRead, u as createLegalPages, v as createBlogPosts, w as pageContentBlocks, x as coerceBlogPostCategoriesOnRead, y as draftsWithAutosave, z as defaultCodeLanguage } from "../cms.mjs";
+import { $ as globalRoleRule, A as richTextBlock, B as defaultCodeLanguage, C as blogContentBlocks, D as accordionBlock, E as sectionHeadingBlock, F as downloadCtaBlock, G as createApiTokens, H as createAuthors, I as customHtmlBlock, J as DEFAULT_GLOBAL_ROLES, K as ADMIN_ROLE, L as codeTabsBlock, M as richTextEditor, N as videoBlock, O as leafBlocks, P as imageBlock, Q as effectiveRoles, R as codeBlock, S as coerceBlogPostCategoriesOnWrite, T as showcaseContentBlocks, U as seoFields, V as languageOptions, W as slugify, X as adminRoleAccess, Y as DEFAULT_ROLES, Z as collectionRoleRule, _ as createCategories, a as STOCK_COLLECTION_SLUGS, at as withRoles, b as setPublishedAt, c as createSiteSettings, d as createPages, et as hiddenUnless, f as createMedia, g as createChangelog, h as createChangelogTags, i as buildCmsConfig, it as userHasAnyRole, j as getRichTextEditorConfig, k as stepsBlock, l as createUsers, m as createEventTags, n as createS3MediaPlugin, nt as publishedOrRoleRead, o as applyCollectionOverride, ot as writeAccess, p as createEvents, q as DEFAULT_COLLECTION_ROLES, r as requireEnvAtRuntime, rt as resolveRoleOptions, s as applyGlobalOverride, st as createAccessHelpers, t as createAnnouncementBanner, tt as isCmsAdmin, u as createLegalPages, v as createBlogPosts, w as pageContentBlocks, x as coerceBlogPostCategoriesOnRead, y as draftsWithAutosave, z as codeBlockLanguages } from "../cms.mjs";
 import { n as readPayloadMediaBuffer, t as readPayloadMediaAsDataUrl } from "../readMediaBuffer.mjs";
-export { ADMIN_ROLE, DEFAULT_COLLECTION_ROLES, DEFAULT_GLOBAL_ROLES, DEFAULT_ROLES, STOCK_COLLECTION_SLUGS, accordionBlock, adminRoleAccess, applyCollectionOverride, applyGlobalOverride, blogContentBlocks, buildCmsConfig, codeBlock, codeBlockLanguages, codeTabsBlock, coerceBlogPostCategoriesOnRead, coerceBlogPostCategoriesOnWrite, collectionRoleRule, createAccessHelpers, createAnnouncementBanner, createApiTokens, createAuthors, createBlogPosts, createCategories, createChangelog, createChangelogTags, createEventTags, createEvents, createLegalPages, createMedia, createPages, createS3MediaPlugin, createSiteSettings, createUsers, defaultCodeLanguage, downloadCtaBlock, draftsWithAutosave, effectiveRoles, getRichTextEditorConfig, globalRoleRule, hiddenUnless, imageBlock, isCmsAdmin, languageOptions, leafBlocks, pageContentBlocks, publishedOrRoleRead, readPayloadMediaAsDataUrl, readPayloadMediaBuffer, requireEnvAtRuntime, resolveRoleOptions, richTextBlock, richTextEditor, sectionHeadingBlock, seoFields, setPublishedAt, showcaseContentBlocks, slugify, stepsBlock, userHasAnyRole, videoBlock, withRoles, writeAccess };
+export { ADMIN_ROLE, DEFAULT_COLLECTION_ROLES, DEFAULT_GLOBAL_ROLES, DEFAULT_ROLES, STOCK_COLLECTION_SLUGS, accordionBlock, adminRoleAccess, applyCollectionOverride, applyGlobalOverride, blogContentBlocks, buildCmsConfig, codeBlock, codeBlockLanguages, codeTabsBlock, coerceBlogPostCategoriesOnRead, coerceBlogPostCategoriesOnWrite, collectionRoleRule, createAccessHelpers, createAnnouncementBanner, createApiTokens, createAuthors, createBlogPosts, createCategories, createChangelog, createChangelogTags, createEventTags, createEvents, createLegalPages, createMedia, createPages, createS3MediaPlugin, createSiteSettings, createUsers, customHtmlBlock, defaultCodeLanguage, downloadCtaBlock, draftsWithAutosave, effectiveRoles, getRichTextEditorConfig, globalRoleRule, hiddenUnless, imageBlock, isCmsAdmin, languageOptions, leafBlocks, pageContentBlocks, publishedOrRoleRead, readPayloadMediaAsDataUrl, readPayloadMediaBuffer, requireEnvAtRuntime, resolveRoleOptions, richTextBlock, richTextEditor, sectionHeadingBlock, seoFields, setPublishedAt, showcaseContentBlocks, slugify, stepsBlock, userHasAnyRole, videoBlock, withRoles, writeAccess };

package/dist/cms.mjs

@@ -21,11 +21,18 @@ function createAccessHelpers(options = {}) {
 		if (apiTokens && isDisabledApiToken(req)) return false;
 		return true;
 	};
+	const mediaRead = ({ req, isReadingStaticFile }) => {
+		if (isReadingStaticFile) return true;
+		if (isAdminUser(req)) return true;
+		if (req.user?.collection === "api-tokens") return !(apiTokens && isDisabledApiToken(req));
+		return false;
+	};
 	const adminOnlyField = ({ req }) => isAdminUser(req);
 	return {
 		adminOnly,
 		adminOrPublished,
 		publicRead,
+		mediaRead,
 		adminOnlyField
 	};
 }
@@ -889,6 +896,25 @@ const codeTabsBlock = {
 	}]
 };
 //#endregion
+//#region src/cms/blocks/custom-html.ts
+const customHtmlBlock = {
+	slug: "custom-html",
+	labels: {
+		singular: "Custom HTML",
+		plural: "Custom HTML"
+	},
+	fields: [{
+		name: "html",
+		type: "code",
+		required: true,
+		localized: true,
+		admin: {
+			language: "html",
+			description: "Raw HTML, CSS, and scripts. Rendered as-is. Inline scripts run in the browser, same as a WordPress Custom HTML block."
+		}
+	}]
+};
+//#endregion
 //#region src/cms/blocks/download-cta.ts
 const downloadCtaBlock = {
 	slug: "download-cta",
@@ -1043,17 +1069,21 @@ const richTextFeatures = ({ defaultFeatures }) => [
 		name: "caption",
 		type: "text"
 	}] } } }),
-	BlocksFeature({ blocks: [CodeBlock({
-		languages: codeBlockLanguages,
-		defaultLanguage: defaultCodeLanguage
-	}), videoBlock] }),
+	BlocksFeature({ blocks: [
+		CodeBlock({
+			languages: codeBlockLanguages,
+			defaultLanguage: defaultCodeLanguage
+		}),
+		videoBlock,
+		customHtmlBlock
+	] }),
 	EXPERIMENTAL_TableFeature()
 ];
 /**
 * Shared Lexical editor for every `richText` field.
 *
-* Adds `CodeBlock`, inline `video` block, media upload captions, and
-* `EXPERIMENTAL_TableFeature` on top of Payload defaults.
+* Adds `CodeBlock`, inline `video` and `custom-html` blocks, media upload
+* captions, and `EXPERIMENTAL_TableFeature` on top of Payload defaults.
 */
 const richTextEditor = () => lexicalEditor({ features: richTextFeatures });
 /** Resolve Lexical editor config for seed scripts / markdown conversion. */
@@ -1121,6 +1151,7 @@ const leafBlocks = [
 	imageBlock,
 	videoBlock,
 	downloadCtaBlock,
+	customHtmlBlock,
 	stepsBlock
 ];
 //#endregion
@@ -1181,6 +1212,7 @@ const blogContentBlocks = [
 	imageBlock,
 	videoBlock,
 	downloadCtaBlock,
+	customHtmlBlock,
 	stepsBlock,
 	accordionBlock
 ];
@@ -1864,7 +1896,10 @@ function createEvents(access) {
 }
 //#endregion
 //#region src/cms/collections/createMedia.ts
-/** Stock media upload collection (always publicly readable once uploaded). */
+/**
+* Stock media upload collection.
+* Documents are not publicly listable; files stay public via `/api/media/file/*`.
+*/
 function createMedia(access) {
 	return {
 		slug: "media",
@@ -1877,7 +1912,7 @@ function createMedia(access) {
 			]
 		},
 		access: {
-			read: access.publicRead,
+			read: access.mediaRead,
 			create: access.adminOnly,
 			update: access.adminOnly,
 			delete: access.adminOnly
@@ -2353,6 +2388,6 @@ function createAnnouncementBanner(access) {
 	};
 }
 //#endregion
-export { hiddenUnless as $, richTextBlock as A, languageOptions as B, blogContentBlocks as C, accordionBlock as D, sectionHeadingBlock as E, downloadCtaBlock as F, ADMIN_ROLE as G, seoFields as H, codeTabsBlock as I, DEFAULT_ROLES as J, DEFAULT_COLLECTION_ROLES as K, codeBlock as L, richTextEditor as M, videoBlock as N, leafBlocks as O, imageBlock as P, globalRoleRule as Q, codeBlockLanguages as R, coerceBlogPostCategoriesOnWrite as S, showcaseContentBlocks as T, slugify as U, createAuthors as V, createApiTokens as W, collectionRoleRule as X, adminRoleAccess as Y, effectiveRoles as Z, createCategories as _, STOCK_COLLECTION_SLUGS as a, writeAccess as at, setPublishedAt as b, createSiteSettings as c, createPages as d, isCmsAdmin as et, createMedia as f, createChangelog as g, createChangelogTags as h, buildCmsConfig as i, withRoles as it, getRichTextEditorConfig as j, stepsBlock as k, createUsers as l, createEventTags as m, createS3MediaPlugin as n, resolveRoleOptions as nt, applyCollectionOverride as o, createAccessHelpers as ot, createEvents as p, DEFAULT_GLOBAL_ROLES as q, requireEnvAtRuntime as r, userHasAnyRole as rt, applyGlobalOverride as s, createAnnouncementBanner as t, publishedOrRoleRead as tt, createLegalPages as u, createBlogPosts as v, pageContentBlocks as w, coerceBlogPostCategoriesOnRead as x, draftsWithAutosave as y, defaultCodeLanguage as z };
+export { globalRoleRule as $, richTextBlock as A, defaultCodeLanguage as B, blogContentBlocks as C, accordionBlock as D, sectionHeadingBlock as E, downloadCtaBlock as F, createApiTokens as G, createAuthors as H, customHtmlBlock as I, DEFAULT_GLOBAL_ROLES as J, ADMIN_ROLE as K, codeTabsBlock as L, richTextEditor as M, videoBlock as N, leafBlocks as O, imageBlock as P, effectiveRoles as Q, codeBlock as R, coerceBlogPostCategoriesOnWrite as S, showcaseContentBlocks as T, seoFields as U, languageOptions as V, slugify as W, adminRoleAccess as X, DEFAULT_ROLES as Y, collectionRoleRule as Z, createCategories as _, STOCK_COLLECTION_SLUGS as a, withRoles as at, setPublishedAt as b, createSiteSettings as c, createPages as d, hiddenUnless as et, createMedia as f, createChangelog as g, createChangelogTags as h, buildCmsConfig as i, userHasAnyRole as it, getRichTextEditorConfig as j, stepsBlock as k, createUsers as l, createEventTags as m, createS3MediaPlugin as n, publishedOrRoleRead as nt, applyCollectionOverride as o, writeAccess as ot, createEvents as p, DEFAULT_COLLECTION_ROLES as q, requireEnvAtRuntime as r, resolveRoleOptions as rt, applyGlobalOverride as s, createAccessHelpers as st, createAnnouncementBanner as t, isCmsAdmin as tt, createLegalPages as u, createBlogPosts as v, pageContentBlocks as w, coerceBlogPostCategoriesOnRead as x, draftsWithAutosave as y, codeBlockLanguages as z };
 
 //# sourceMappingURL=cms.mjs.map