@trailmix-cms/cms 0.0.1

package/dist/index.js

@@ -0,0 +1,22 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./constants"), exports);
+__exportStar(require("./decorators/auth.decorator"), exports);
+__exportStar(require("./decorators/audit-context.decorator"), exports);
+__exportStar(require("./decorators/account.decorator"), exports);
+__exportStar(require("./cms.module"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,8DAA4C;AAC5C,uEAAqD;AACrD,iEAA+C;AAC/C,+CAA6B"}

package/dist/pipes/file.pipe.d.ts

@@ -0,0 +1,8 @@
+import { BaseEntityByIdPipe } from '@trailmixcms/utils';
+import { FileCollection } from '../collections/file.collection';
+import * as models from '@trailmixcms/models';
+export declare class FileByIdPipe extends BaseEntityByIdPipe<models.File.Entity> {
+    protected readonly collection: FileCollection;
+    constructor(collection: FileCollection);
+}
+//# sourceMappingURL=file.pipe.d.ts.map

package/dist/pipes/file.pipe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.pipe.d.ts","sourceRoot":"","sources":["../../src/pipes/file.pipe.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,KAAK,MAAM,MAAM,qBAAqB,CAAC;AAE9C,qBACa,YAAa,SAAQ,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;IAEhE,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,cAAc;gBAA1B,UAAU,EAAE,cAAc;CAIpD"}

package/dist/pipes/file.pipe.js

@@ -0,0 +1,28 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileByIdPipe = void 0;
+const common_1 = require("@nestjs/common");
+const utils_1 = require("@trailmixcms/utils");
+const file_collection_1 = require("../collections/file.collection");
+let FileByIdPipe = class FileByIdPipe extends utils_1.BaseEntityByIdPipe {
+    collection;
+    constructor(collection) {
+        super(collection);
+        this.collection = collection;
+    }
+};
+exports.FileByIdPipe = FileByIdPipe;
+exports.FileByIdPipe = FileByIdPipe = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [file_collection_1.FileCollection])
+], FileByIdPipe);
+//# sourceMappingURL=file.pipe.js.map

package/dist/pipes/file.pipe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.pipe.js","sourceRoot":"","sources":["../../src/pipes/file.pipe.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,8CAAwD;AACxD,oEAAgE;AAIzD,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,0BAAsC;IAE7C;IADvB,YACuB,UAA0B;QAE7C,KAAK,CAAC,UAAU,CAAC,CAAC;QAFC,eAAU,GAAV,UAAU,CAAgB;IAGjD,CAAC;CACJ,CAAA;AANY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAG0B,gCAAc;GAFxC,YAAY,CAMxB"}

package/dist/services/authorization.service.d.ts

@@ -0,0 +1,14 @@
+import * as models from '@trailmixcms/models';
+export interface AccountAuthorization {
+    account?: models.Account.Entity;
+    roles: (models.Role | string)[];
+}
+export type AuthorizableEntity = models.Authorization.Model & models.Publishable.Model;
+export declare class AuthorizationService {
+    private readonly logger;
+    constructor();
+    validateAuthorization<T extends AuthorizableEntity>(accountAuthorization: AccountAuthorization, entity: T): Promise<boolean>;
+    checkAccountAuthorizationOnEntity<T extends AuthorizableEntity>(accountAuthorization: AccountAuthorization, entity: T): boolean;
+}
+export declare const AccountAuthorization: (...dataOrPipes: unknown[]) => ParameterDecorator;
+//# sourceMappingURL=authorization.service.d.ts.map

package/dist/services/authorization.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.service.d.ts","sourceRoot":"","sources":["../../src/services/authorization.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,qBAAqB,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,aAAa,CAAC,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;AAEvF,qBACa,oBAAoB;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;;IAI1D,qBAAqB,CAAC,CAAC,SAAS,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAS/G,iCAAiC,CAAC,CAAC,SAAS,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAiCxH;AAED,eAAO,MAAM,oBAAoB,mDAUhC,CAAA"}

package/dist/services/authorization.service.js

@@ -0,0 +1,101 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AuthorizationService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccountAuthorization = exports.AuthorizationService = void 0;
+const common_1 = require("@nestjs/common");
+const models = __importStar(require("@trailmixcms/models"));
+let AuthorizationService = AuthorizationService_1 = class AuthorizationService {
+    logger = new common_1.Logger(AuthorizationService_1.name);
+    constructor() { }
+    async validateAuthorization(accountAuthorization, entity) {
+        const result = this.checkAccountAuthorizationOnEntity(accountAuthorization, entity);
+        if (!result) {
+            // TODO: security audit
+            throw new common_1.NotFoundException('Entity not found');
+        }
+        return result;
+    }
+    checkAccountAuthorizationOnEntity(accountAuthorization, entity) {
+        // console.log('checkAccountAuthorizationOnEntity', { accountAuthorization }, { entity });
+        const account = accountAuthorization.account;
+        if (accountAuthorization.roles.includes(models.Role.Admin)) {
+            return true;
+        }
+        if (!entity.authorization) {
+            // Only admin can access entities that have no "authorization"
+            // TODO: security audit
+            this.logger.warn('Entity has no authorization', { entity });
+            return false;
+        }
+        // IF entity does not have a published property, it is published
+        if (entity.published === false) {
+            return false;
+        }
+        if (entity.authorization.public) {
+            return true;
+        }
+        if (entity.authorization.roles?.some(role => accountAuthorization.roles.includes(role))) {
+            return true;
+        }
+        if (account && entity.authorization.accountIds?.some(id => account._id.equals(id))) {
+            return true;
+        }
+        return false;
+    }
+};
+exports.AuthorizationService = AuthorizationService;
+exports.AuthorizationService = AuthorizationService = AuthorizationService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], AuthorizationService);
+exports.AccountAuthorization = (0, common_1.createParamDecorator)((data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    const accountAuthorization = {
+        account: request.account,
+        roles: request.account?.roles ? request.account.roles.map(role => role) : [],
+    };
+    return accountAuthorization;
+});
+//# sourceMappingURL=authorization.service.js.map

package/dist/services/authorization.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.service.js","sourceRoot":"","sources":["../../src/services/authorization.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA+G;AAE/G,4DAA8C;AAUvC,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IACZ,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAEhE,gBAAgB,CAAC;IAEjB,KAAK,CAAC,qBAAqB,CAA+B,oBAA0C,EAAE,MAAS;QAC3G,MAAM,MAAM,GAAG,IAAI,CAAC,iCAAiC,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,uBAAuB;YACvB,MAAM,IAAI,0BAAiB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,iCAAiC,CAA+B,oBAA0C,EAAE,MAAS;QACjH,0FAA0F;QAC1F,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC;QAE7C,IAAI,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACxB,8DAA8D;YAC9D,uBAAuB;YACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,gEAAgE;QAChE,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACtF,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,IAAI,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ,CAAA;AA/CY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;;GACA,oBAAoB,CA+ChC;AAEY,QAAA,oBAAoB,GAAG,IAAA,6BAAoB,EACpD,CAAC,IAAa,EAAE,GAAqB,EAAE,EAAE;IACrC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAkB,CAAC;IAEhE,MAAM,oBAAoB,GAAyB;QAC/C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAmB,CAAC,CAAC,CAAC,CAAC,EAAE;KAC9F,CAAA;IACD,OAAO,oBAAoB,CAAC;AAChC,CAAC,CACJ,CAAA"}

package/dist/types/collection-config.d.ts

@@ -0,0 +1,4 @@
+export type CollectionConfig = {
+    disableDefaultIndexes?: boolean;
+};
+//# sourceMappingURL=collection-config.d.ts.map

package/dist/types/collection-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection-config.d.ts","sourceRoot":"","sources":["../../src/types/collection-config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG;IAC3B,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACnC,CAAA"}

package/dist/types/collection-config.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=collection-config.js.map

package/dist/types/collection-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection-config.js","sourceRoot":"","sources":["../../src/types/collection-config.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@trailmix-cms/cms",
+  "version": "0.0.1",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "scripts": {
+    "build": "tsc -b -v",
+    "clean": "tsc -b --clean",
+    "trace": "tsc --traceResolution"
+  },
+  "dependencies": {
+    "@clerk/fastify": "^2.6.5",
+    "@nestjs/cache-manager": "^3.0.1",
+    "@nestjs/common": "^11.1.9",
+    "@nestjs/config": "^4.0.2",
+    "@nestjs/core": "^11.1.9",
+    "@nestjs/swagger": "^11.2.3",
+    "@trailmix-cms/db": "0.0.1",
+    "@trailmix-cms/models": "0.0.1",
+    "@trailmix-cms/utils": "0.0.1",
+    "cache-manager": "^7.2.5",
+    "envalid": "^8.1.1",
+    "mongodb": "^7.0.0",
+    "reflect-metadata": "^0.2.2",
+    "rxjs": "^7.8.2",
+    "zod": "^4.1.12"
+  },
+  "devDependencies": {
+    "@types/node": "^24.10.1",
+    "fastify": "5.6.1",
+    "typescript": "5.9.3"
+  },
+  "peerDependencies": {
+    "@nestjs/common": "^11.1.9",
+    "@nestjs/config": "^4.0.2",
+    "@trailmix-cms/db": "0.0.1",
+    "@trailmix-cms/models": "0.0.1",
+    "@trailmix-cms/utils": "0.0.1",
+    "mongodb": "^7.0.0",
+    "reflect-metadata": "^0.2.2",
+    "rxjs": "^7.8.2",
+    "zod": "^4.1.12"
+  }
+}