@valkyrianlabs/payload-markdown-docs 0.3.1 → 0.4.1

package/dist/payload/docsSets.js

@@ -1,22 +1,4 @@
-export const updateDocsSetAfterSync = async ({ aiExport, collectionSlug, docsCount, docsSetId, now, payload, syncRunId })=>{
-    if (!payload.update) {
-        return;
-    }
-    await payload.update({
-        id: String(docsSetId),
-        collection: collectionSlug,
-        data: {
-            aiExport: aiExport ?? null,
-            sync: {
-                docsCount,
-                lastStatus: 'success',
-                lastSyncedAt: now.toISOString(),
-                lastSyncRunId: syncRunId
-            }
-        },
-        overrideAccess: true
-    });
-};
+import { deriveDocsSetRouteBase, joinRouteSegments, normalizeRoutePath } from '../routing/index.js';
 const isRecord = (value)=>typeof value === 'object' && value !== null && !Array.isArray(value);
 const getRecordId = (doc)=>{
     if (typeof doc.id === 'string' || typeof doc.id === 'number') {
@@ -24,13 +6,22 @@ const getRecordId = (doc)=>{
     }
     return undefined;
 };
+const getRelationshipId = (value)=>{
+    if (typeof value === 'string' || typeof value === 'number') {
+        return String(value);
+    }
+    if (isRecord(value)) {
+        const id = getRecordId(value);
+        return id === undefined ? undefined : String(id);
+    }
+    return undefined;
+};
 const getString = (value)=>typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
-const getNumber = (value)=>typeof value === 'number' && Number.isFinite(value) ? value : undefined;
 const getStringArray = (value)=>{
     if (!Array.isArray(value)) {
-        return undefined;
+        return [];
     }
-    const values = value.flatMap((item)=>{
+    return value.flatMap((item)=>{
         if (typeof item === 'string' && item.trim() !== '') {
             return [
                 item.trim()
@@ -44,87 +35,159 @@ const getStringArray = (value)=>{
         }
         return [];
     });
-    return values.length > 0 ? values : undefined;
 };
-const getRecord = (value)=>isRecord(value) ? value : undefined;
-const toResolvedDocsSetAuth = (value)=>{
-    const auth = getRecord(value);
-    if (!auth) {
-        return undefined;
+const authToggleEnabled = (toggle, defaultValue)=>{
+    if (toggle === undefined) {
+        return defaultValue;
     }
-    const ed25519 = getRecord(auth.ed25519);
-    const keys = Array.isArray(ed25519?.keys) ? ed25519.keys.flatMap((key)=>{
-        if (!isRecord(key)) {
-            return [];
-        }
-        const id = getString(key.keyId) ?? getString(key.id);
-        const publicKey = getString(key.publicKey);
-        return id && publicKey ? [
-            {
-                id,
-                publicKey
-            }
-        ] : [];
-    }) : [];
-    const githubOidc = getRecord(auth.githubOidc);
-    const resolvedGithubOidc = githubOidc && githubOidc.enabled !== false ? {
-        allowedEnvironments: getStringArray(githubOidc.allowedEnvironments),
-        allowedRefs: getStringArray(githubOidc.allowedRefs),
-        allowedRepositories: getStringArray(githubOidc.allowedRepositories),
-        allowedRepositoryOwners: getStringArray(githubOidc.allowedRepositoryOwners),
-        allowedWorkflowRefs: getStringArray(githubOidc.allowedWorkflowRefs),
-        allowedWorkflows: getStringArray(githubOidc.allowedWorkflows),
-        allowPullRequests: typeof githubOidc.allowPullRequests === 'boolean' ? githubOidc.allowPullRequests : undefined,
-        audience: getString(githubOidc.audience),
-        enabled: githubOidc.enabled === true,
-        issuer: getString(githubOidc.issuer),
-        jwksUrl: getString(githubOidc.jwksUrl),
-        maxSkewSeconds: getNumber(githubOidc.maxSkewSeconds)
-    } : undefined;
-    const hasGithubOidcPolicy = Boolean(resolvedGithubOidc && (resolvedGithubOidc.enabled || resolvedGithubOidc.audience || resolvedGithubOidc.allowedEnvironments || resolvedGithubOidc.allowedRefs || resolvedGithubOidc.allowedRepositories || resolvedGithubOidc.allowedRepositoryOwners || resolvedGithubOidc.allowedWorkflowRefs || resolvedGithubOidc.allowedWorkflows || resolvedGithubOidc.allowPullRequests !== undefined || resolvedGithubOidc.issuer || resolvedGithubOidc.jwksUrl || resolvedGithubOidc.maxSkewSeconds !== undefined));
-    const resolvedAuth = {
-        ...keys.length > 0 ? {
-            ed25519: {
-                keys,
-                maxSkewSeconds: getNumber(ed25519?.maxSkewSeconds),
-                nonceTtlSeconds: getNumber(ed25519?.nonceTtlSeconds)
+    if (typeof toggle === 'boolean') {
+        return toggle;
+    }
+    return toggle.enabled !== false;
+};
+export const isGitHubOidcAuthEnabled = (auth)=>auth?.mode !== 'disabled' && authToggleEnabled(auth?.githubOidc, false);
+export const isEd25519AuthEnabled = (auth)=>auth?.mode !== 'disabled' && authToggleEnabled(auth?.ed25519, false);
+export const updateDocsSetAfterSync = async ({ aiExport, collectionSlug, docsCount, docsSetId, now, payload, syncRunId })=>{
+    if (!payload.update) {
+        return;
+    }
+    await payload.update({
+        id: String(docsSetId),
+        collection: collectionSlug,
+        data: {
+            aiExport: aiExport ?? null,
+            sync: {
+                docsCount,
+                lastStatus: 'success',
+                lastSyncedAt: now.toISOString(),
+                lastSyncRunId: syncRunId
             }
-        } : {},
-        ...hasGithubOidcPolicy && resolvedGithubOidc ? {
-            githubOidc: resolvedGithubOidc
-        } : {}
+        },
+        overrideAccess: true
+    });
+};
+const toResolvedGroup = (doc, groupsById, seen = new Set())=>{
+    if (!isRecord(doc)) {
+        return undefined;
+    }
+    const id = getRecordId(doc);
+    const slug = getString(doc.slug);
+    if (!id || !slug) {
+        return undefined;
+    }
+    const stringId = String(id);
+    if (seen.has(stringId)) {
+        return {
+            id,
+            slug,
+            routePath: joinRouteSegments(slug)
+        };
+    }
+    const parentId = getRelationshipId(doc.parent);
+    const parentDoc = parentId ? groupsById.get(parentId) : undefined;
+    const parentGroup = parentDoc ? toResolvedGroup(parentDoc, groupsById, new Set([
+        stringId,
+        ...seen
+    ])) : undefined;
+    return {
+        id,
+        slug,
+        parentId,
+        routePath: joinRouteSegments(parentGroup?.routePath, slug)
     };
-    return resolvedAuth.ed25519 || resolvedAuth.githubOidc ? resolvedAuth : undefined;
 };
-const toResolvedDocsSet = (doc)=>{
+const toResolvedDocsSet = ({ doc, groupsById })=>{
     if (!isRecord(doc)) {
         return undefined;
     }
     const id = getRecordId(doc);
-    if (!id || typeof doc.sourceId !== 'string' || typeof doc.routeBase !== 'string') {
+    const slug = getString(doc.slug);
+    if (!id || !slug) {
         return undefined;
     }
+    const groupId = getRelationshipId(doc.group);
+    const group = groupId ? toResolvedGroup(groupsById.get(groupId), groupsById) : undefined;
+    const advancedSecurity = isRecord(doc.advancedSecurity) ? doc.advancedSecurity : undefined;
+    const advancedSecurityEnabled = advancedSecurity?.enabled === true;
     return {
         id,
-        auth: toResolvedDocsSetAuth(doc.auth),
-        routeBase: doc.routeBase,
-        sourceId: doc.sourceId,
-        sourceRoot: typeof doc.sourceRoot === 'string' ? doc.sourceRoot : undefined
+        ...advancedSecurityEnabled ? {
+            advancedSecurity: {
+                allowedWorkflowRefs: getStringArray(advancedSecurity.allowedWorkflowRefs),
+                enabled: true
+            }
+        } : {},
+        slug,
+        allowPullRequests: doc.allowPullRequests === true,
+        branch: getString(doc.branch) ?? 'main',
+        groupId,
+        routeBase: normalizeRoutePath(deriveDocsSetRouteBase({
+            docsSetSlug: slug,
+            groupRoutePath: group?.routePath
+        }))
     };
 };
-export const findDocsSetBySourceId = async ({ collectionSlug, payload, sourceId })=>{
+const getGroupsById = async ({ collectionSlug, payload })=>{
     const result = await payload.find({
         collection: collectionSlug,
         depth: 0,
-        limit: 1,
-        overrideAccess: true,
-        where: {
-            sourceId: {
-                equals: sourceId
-            }
+        limit: 1000,
+        overrideAccess: true
+    });
+    return new Map(result.docs.flatMap((doc)=>{
+        if (!isRecord(doc)) {
+            return [];
         }
+        const id = getRecordId(doc);
+        return id === undefined ? [] : [
+            [
+                String(id),
+                doc
+            ]
+        ];
+    }));
+};
+export const findDocsSetBySlug = async ({ slug, collectionSlug, docsGroupsCollectionSlug, payload })=>{
+    const [result, groupsById] = await Promise.all([
+        payload.find({
+            collection: collectionSlug,
+            depth: 0,
+            limit: 1,
+            overrideAccess: true,
+            where: {
+                slug: {
+                    equals: slug
+                }
+            }
+        }),
+        getGroupsById({
+            collectionSlug: docsGroupsCollectionSlug,
+            payload
+        })
+    ]);
+    return toResolvedDocsSet({
+        doc: result.docs[0],
+        groupsById
     });
-    return toResolvedDocsSet(result.docs[0]);
+};
+export const findDocsSetByRouteBase = async ({ collectionSlug, docsGroupsCollectionSlug, payload, routeBase })=>{
+    const [result, groupsById] = await Promise.all([
+        payload.find({
+            collection: collectionSlug,
+            depth: 0,
+            limit: 1000,
+            overrideAccess: true
+        }),
+        getGroupsById({
+            collectionSlug: docsGroupsCollectionSlug,
+            payload
+        })
+    ]);
+    const normalizedRouteBase = normalizeRoutePath(routeBase);
+    return result.docs.map((doc)=>toResolvedDocsSet({
+            doc,
+            groupsById
+        })).find((docsSet)=>docsSet?.routeBase === normalizedRouteBase);
 };
 
 //# sourceMappingURL=docsSets.js.map

package/dist/payload/docsSets.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/payload/docsSets.ts"],"sourcesContent":["import type { PayloadMarkdownDocsDocsSetAuthConfig } from '../types.js'\n\nexport type DocsSetPayloadOperations = {\n  find: (args: {\n    collection: string\n    depth?: number\n    limit?: number\n    overrideAccess?: boolean\n    where?: unknown\n  }) => Promise<{\n    docs: unknown[]\n  }>\n  update?: (args: {\n    collection: string\n    data: Record<string, unknown>\n    id: string\n    overrideAccess?: boolean\n  }) => Promise<Record<string, unknown>>\n}\n\nexport type PayloadRecordId = number | string\n\nexport type ResolvedDocsSet = {\n  auth?: PayloadMarkdownDocsDocsSetAuthConfig\n  id: PayloadRecordId\n  routeBase: string\n  sourceId: string\n  sourceRoot?: string\n}\n\nexport const updateDocsSetAfterSync = async ({\n  aiExport,\n  collectionSlug,\n  docsCount,\n  docsSetId,\n  now,\n  payload,\n  syncRunId,\n}: {\n  aiExport?: unknown\n  collectionSlug: string\n  docsCount: number\n  docsSetId: PayloadRecordId\n  now: Date\n  payload: DocsSetPayloadOperations\n  syncRunId?: PayloadRecordId\n}): Promise<void> => {\n  if (!payload.update) {\n    return\n  }\n\n  await payload.update({\n    id: String(docsSetId),\n    collection: collectionSlug,\n    data: {\n      aiExport: aiExport ?? null,\n      sync: {\n        docsCount,\n        lastStatus: 'success',\n        lastSyncedAt: now.toISOString(),\n        lastSyncRunId: syncRunId,\n      },\n    },\n    overrideAccess: true,\n  })\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value)\n\nconst getRecordId = (doc: Record<string, unknown>): PayloadRecordId | undefined => {\n  if (typeof doc.id === 'string' || typeof doc.id === 'number') {\n    return doc.id\n  }\n\n  return undefined\n}\n\nconst getString = (value: unknown): string | undefined =>\n  typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined\n\nconst getNumber = (value: unknown): number | undefined =>\n  typeof value === 'number' && Number.isFinite(value) ? value : undefined\n\nconst getStringArray = (value: unknown): string[] | undefined => {\n  if (!Array.isArray(value)) {\n    return undefined\n  }\n\n  const values = value.flatMap((item) => {\n    if (typeof item === 'string' && item.trim() !== '') {\n      return [item.trim()]\n    }\n\n    if (isRecord(item)) {\n      const nestedValue = getString(item.value)\n\n      return nestedValue ? [nestedValue] : []\n    }\n\n    return []\n  })\n\n  return values.length > 0 ? values : undefined\n}\n\nconst getRecord = (value: unknown): Record<string, unknown> | undefined =>\n  isRecord(value) ? value : undefined\n\nconst toResolvedDocsSetAuth = (\n  value: unknown,\n): PayloadMarkdownDocsDocsSetAuthConfig | undefined => {\n  const auth = getRecord(value)\n\n  if (!auth) {\n    return undefined\n  }\n\n  const ed25519 = getRecord(auth.ed25519)\n  const keys = Array.isArray(ed25519?.keys)\n    ? ed25519.keys.flatMap((key) => {\n        if (!isRecord(key)) {\n          return []\n        }\n\n        const id = getString(key.keyId) ?? getString(key.id)\n        const publicKey = getString(key.publicKey)\n\n        return id && publicKey\n          ? [\n              {\n                id,\n                publicKey,\n              },\n            ]\n          : []\n      })\n    : []\n  const githubOidc = getRecord(auth.githubOidc)\n  const resolvedGithubOidc =\n    githubOidc && githubOidc.enabled !== false\n      ? {\n          allowedEnvironments: getStringArray(githubOidc.allowedEnvironments),\n          allowedRefs: getStringArray(githubOidc.allowedRefs),\n          allowedRepositories: getStringArray(githubOidc.allowedRepositories),\n          allowedRepositoryOwners: getStringArray(githubOidc.allowedRepositoryOwners),\n          allowedWorkflowRefs: getStringArray(githubOidc.allowedWorkflowRefs),\n          allowedWorkflows: getStringArray(githubOidc.allowedWorkflows),\n          allowPullRequests:\n            typeof githubOidc.allowPullRequests === 'boolean'\n              ? githubOidc.allowPullRequests\n              : undefined,\n          audience: getString(githubOidc.audience),\n          enabled: githubOidc.enabled === true,\n          issuer: getString(githubOidc.issuer),\n          jwksUrl: getString(githubOidc.jwksUrl),\n          maxSkewSeconds: getNumber(githubOidc.maxSkewSeconds),\n        }\n      : undefined\n  const hasGithubOidcPolicy = Boolean(\n    resolvedGithubOidc &&\n    (resolvedGithubOidc.enabled ||\n      resolvedGithubOidc.audience ||\n      resolvedGithubOidc.allowedEnvironments ||\n      resolvedGithubOidc.allowedRefs ||\n      resolvedGithubOidc.allowedRepositories ||\n      resolvedGithubOidc.allowedRepositoryOwners ||\n      resolvedGithubOidc.allowedWorkflowRefs ||\n      resolvedGithubOidc.allowedWorkflows ||\n      resolvedGithubOidc.allowPullRequests !== undefined ||\n      resolvedGithubOidc.issuer ||\n      resolvedGithubOidc.jwksUrl ||\n      resolvedGithubOidc.maxSkewSeconds !== undefined),\n  )\n  const resolvedAuth: PayloadMarkdownDocsDocsSetAuthConfig = {\n    ...(keys.length > 0\n      ? {\n          ed25519: {\n            keys,\n            maxSkewSeconds: getNumber(ed25519?.maxSkewSeconds),\n            nonceTtlSeconds: getNumber(ed25519?.nonceTtlSeconds),\n          },\n        }\n      : {}),\n    ...(hasGithubOidcPolicy && resolvedGithubOidc\n      ? {\n          githubOidc: resolvedGithubOidc,\n        }\n      : {}),\n  }\n\n  return resolvedAuth.ed25519 || resolvedAuth.githubOidc ? resolvedAuth : undefined\n}\n\nconst toResolvedDocsSet = (doc: unknown): ResolvedDocsSet | undefined => {\n  if (!isRecord(doc)) {\n    return undefined\n  }\n\n  const id = getRecordId(doc)\n\n  if (!id || typeof doc.sourceId !== 'string' || typeof doc.routeBase !== 'string') {\n    return undefined\n  }\n\n  return {\n    id,\n    auth: toResolvedDocsSetAuth(doc.auth),\n    routeBase: doc.routeBase,\n    sourceId: doc.sourceId,\n    sourceRoot: typeof doc.sourceRoot === 'string' ? doc.sourceRoot : undefined,\n  }\n}\n\nexport const findDocsSetBySourceId = async ({\n  collectionSlug,\n  payload,\n  sourceId,\n}: {\n  collectionSlug: string\n  payload: DocsSetPayloadOperations\n  sourceId: string\n}): Promise<ResolvedDocsSet | undefined> => {\n  const result = await payload.find({\n    collection: collectionSlug,\n    depth: 0,\n    limit: 1,\n    overrideAccess: true,\n    where: {\n      sourceId: {\n        equals: sourceId,\n      },\n    },\n  })\n\n  return toResolvedDocsSet(result.docs[0])\n}\n"],"names":["updateDocsSetAfterSync","aiExport","collectionSlug","docsCount","docsSetId","now","payload","syncRunId","update","id","String","collection","data","sync","lastStatus","lastSyncedAt","toISOString","lastSyncRunId","overrideAccess","isRecord","value","Array","isArray","getRecordId","doc","undefined","getString","trim","getNumber","Number","isFinite","getStringArray","values","flatMap","item","nestedValue","length","getRecord","toResolvedDocsSetAuth","auth","ed25519","keys","key","keyId","publicKey","githubOidc","resolvedGithubOidc","enabled","allowedEnvironments","allowedRefs","allowedRepositories","allowedRepositoryOwners","allowedWorkflowRefs","allowedWorkflows","allowPullRequests","audience","issuer","jwksUrl","maxSkewSeconds","hasGithubOidcPolicy","Boolean","resolvedAuth","nonceTtlSeconds","toResolvedDocsSet","sourceId","routeBase","sourceRoot","findDocsSetBySourceId","result","find","depth","limit","where","equals","docs"],"mappings":"AA8BA,OAAO,MAAMA,yBAAyB,OAAO,EAC3CC,QAAQ,EACRC,cAAc,EACdC,SAAS,EACTC,SAAS,EACTC,GAAG,EACHC,OAAO,EACPC,SAAS,EASV;IACC,IAAI,CAACD,QAAQE,MAAM,EAAE;QACnB;IACF;IAEA,MAAMF,QAAQE,MAAM,CAAC;QACnBC,IAAIC,OAAON;QACXO,YAAYT;QACZU,MAAM;YACJX,UAAUA,YAAY;YACtBY,MAAM;gBACJV;gBACAW,YAAY;gBACZC,cAAcV,IAAIW,WAAW;gBAC7BC,eAAeV;YACjB;QACF;QACAW,gBAAgB;IAClB;AACF,EAAC;AAED,MAAMC,WAAW,CAACC,QAChB,OAAOA,UAAU,YAAYA,UAAU,QAAQ,CAACC,MAAMC,OAAO,CAACF;AAEhE,MAAMG,cAAc,CAACC;IACnB,IAAI,OAAOA,IAAIf,EAAE,KAAK,YAAY,OAAOe,IAAIf,EAAE,KAAK,UAAU;QAC5D,OAAOe,IAAIf,EAAE;IACf;IAEA,OAAOgB;AACT;AAEA,MAAMC,YAAY,CAACN,QACjB,OAAOA,UAAU,YAAYA,MAAMO,IAAI,OAAO,KAAKP,MAAMO,IAAI,KAAKF;AAEpE,MAAMG,YAAY,CAACR,QACjB,OAAOA,UAAU,YAAYS,OAAOC,QAAQ,CAACV,SAASA,QAAQK;AAEhE,MAAMM,iBAAiB,CAACX;IACtB,IAAI,CAACC,MAAMC,OAAO,CAACF,QAAQ;QACzB,OAAOK;IACT;IAEA,MAAMO,SAASZ,MAAMa,OAAO,CAAC,CAACC;QAC5B,IAAI,OAAOA,SAAS,YAAYA,KAAKP,IAAI,OAAO,IAAI;YAClD,OAAO;gBAACO,KAAKP,IAAI;aAAG;QACtB;QAEA,IAAIR,SAASe,OAAO;YAClB,MAAMC,cAAcT,UAAUQ,KAAKd,KAAK;YAExC,OAAOe,cAAc;gBAACA;aAAY,GAAG,EAAE;QACzC;QAEA,OAAO,EAAE;IACX;IAEA,OAAOH,OAAOI,MAAM,GAAG,IAAIJ,SAASP;AACtC;AAEA,MAAMY,YAAY,CAACjB,QACjBD,SAASC,SAASA,QAAQK;AAE5B,MAAMa,wBAAwB,CAC5BlB;IAEA,MAAMmB,OAAOF,UAAUjB;IAEvB,IAAI,CAACmB,MAAM;QACT,OAAOd;IACT;IAEA,MAAMe,UAAUH,UAAUE,KAAKC,OAAO;IACtC,MAAMC,OAAOpB,MAAMC,OAAO,CAACkB,SAASC,QAChCD,QAAQC,IAAI,CAACR,OAAO,CAAC,CAACS;QACpB,IAAI,CAACvB,SAASuB,MAAM;YAClB,OAAO,EAAE;QACX;QAEA,MAAMjC,KAAKiB,UAAUgB,IAAIC,KAAK,KAAKjB,UAAUgB,IAAIjC,EAAE;QACnD,MAAMmC,YAAYlB,UAAUgB,IAAIE,SAAS;QAEzC,OAAOnC,MAAMmC,YACT;YACE;gBACEnC;gBACAmC;YACF;SACD,GACD,EAAE;IACR,KACA,EAAE;IACN,MAAMC,aAAaR,UAAUE,KAAKM,UAAU;IAC5C,MAAMC,qBACJD,cAAcA,WAAWE,OAAO,KAAK,QACjC;QACEC,qBAAqBjB,eAAec,WAAWG,mBAAmB;QAClEC,aAAalB,eAAec,WAAWI,WAAW;QAClDC,qBAAqBnB,eAAec,WAAWK,mBAAmB;QAClEC,yBAAyBpB,eAAec,WAAWM,uBAAuB;QAC1EC,qBAAqBrB,eAAec,WAAWO,mBAAmB;QAClEC,kBAAkBtB,eAAec,WAAWQ,gBAAgB;QAC5DC,mBACE,OAAOT,WAAWS,iBAAiB,KAAK,YACpCT,WAAWS,iBAAiB,GAC5B7B;QACN8B,UAAU7B,UAAUmB,WAAWU,QAAQ;QACvCR,SAASF,WAAWE,OAAO,KAAK;QAChCS,QAAQ9B,UAAUmB,WAAWW,MAAM;QACnCC,SAAS/B,UAAUmB,WAAWY,OAAO;QACrCC,gBAAgB9B,UAAUiB,WAAWa,cAAc;IACrD,IACAjC;IACN,MAAMkC,sBAAsBC,QAC1Bd,sBACCA,CAAAA,mBAAmBC,OAAO,IACzBD,mBAAmBS,QAAQ,IAC3BT,mBAAmBE,mBAAmB,IACtCF,mBAAmBG,WAAW,IAC9BH,mBAAmBI,mBAAmB,IACtCJ,mBAAmBK,uBAAuB,IAC1CL,mBAAmBM,mBAAmB,IACtCN,mBAAmBO,gBAAgB,IACnCP,mBAAmBQ,iBAAiB,KAAK7B,aACzCqB,mBAAmBU,MAAM,IACzBV,mBAAmBW,OAAO,IAC1BX,mBAAmBY,cAAc,KAAKjC,SAAQ;IAElD,MAAMoC,eAAqD;QACzD,GAAIpB,KAAKL,MAAM,GAAG,IACd;YACEI,SAAS;gBACPC;gBACAiB,gBAAgB9B,UAAUY,SAASkB;gBACnCI,iBAAiBlC,UAAUY,SAASsB;YACtC;QACF,IACA,CAAC,CAAC;QACN,GAAIH,uBAAuBb,qBACvB;YACED,YAAYC;QACd,IACA,CAAC,CAAC;IACR;IAEA,OAAOe,aAAarB,OAAO,IAAIqB,aAAahB,UAAU,GAAGgB,eAAepC;AAC1E;AAEA,MAAMsC,oBAAoB,CAACvC;IACzB,IAAI,CAACL,SAASK,MAAM;QAClB,OAAOC;IACT;IAEA,MAAMhB,KAAKc,YAAYC;IAEvB,IAAI,CAACf,MAAM,OAAOe,IAAIwC,QAAQ,KAAK,YAAY,OAAOxC,IAAIyC,SAAS,KAAK,UAAU;QAChF,OAAOxC;IACT;IAEA,OAAO;QACLhB;QACA8B,MAAMD,sBAAsBd,IAAIe,IAAI;QACpC0B,WAAWzC,IAAIyC,SAAS;QACxBD,UAAUxC,IAAIwC,QAAQ;QACtBE,YAAY,OAAO1C,IAAI0C,UAAU,KAAK,WAAW1C,IAAI0C,UAAU,GAAGzC;IACpE;AACF;AAEA,OAAO,MAAM0C,wBAAwB,OAAO,EAC1CjE,cAAc,EACdI,OAAO,EACP0D,QAAQ,EAKT;IACC,MAAMI,SAAS,MAAM9D,QAAQ+D,IAAI,CAAC;QAChC1D,YAAYT;QACZoE,OAAO;QACPC,OAAO;QACPrD,gBAAgB;QAChBsD,OAAO;YACLR,UAAU;gBACRS,QAAQT;YACV;QACF;IACF;IAEA,OAAOD,kBAAkBK,OAAOM,IAAI,CAAC,EAAE;AACzC,EAAC"}
+{"version":3,"sources":["../../src/payload/docsSets.ts"],"sourcesContent":["import type { PayloadMarkdownDocsAuthToggle } from '../types.js'\n\nimport {\n  deriveDocsSetRouteBase,\n  joinRouteSegments,\n  normalizeRoutePath,\n} from '../routing/index.js'\n\nexport type DocsSetPayloadOperations = {\n  find: (args: {\n    collection: string\n    depth?: number\n    limit?: number\n    overrideAccess?: boolean\n    where?: unknown\n  }) => Promise<{\n    docs: unknown[]\n  }>\n  update?: (args: {\n    collection: string\n    data: Record<string, unknown>\n    id: string\n    overrideAccess?: boolean\n  }) => Promise<Record<string, unknown>>\n}\n\nexport type PayloadRecordId = number | string\n\nexport type ResolvedDocsGroup = {\n  id: PayloadRecordId\n  parentId?: string\n  routePath: string\n  slug: string\n}\n\nexport type ResolvedDocsSet = {\n  advancedSecurity?: {\n    allowedWorkflowRefs: string[]\n    enabled: boolean\n  }\n  allowPullRequests: boolean\n  branch: string\n  groupId?: string\n  id: PayloadRecordId\n  routeBase: string\n  slug: string\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value)\n\nconst getRecordId = (doc: Record<string, unknown>): PayloadRecordId | undefined => {\n  if (typeof doc.id === 'string' || typeof doc.id === 'number') {\n    return doc.id\n  }\n\n  return undefined\n}\n\nconst getRelationshipId = (value: unknown): string | undefined => {\n  if (typeof value === 'string' || typeof value === 'number') {\n    return String(value)\n  }\n\n  if (isRecord(value)) {\n    const id = getRecordId(value)\n\n    return id === undefined ? undefined : String(id)\n  }\n\n  return undefined\n}\n\nconst getString = (value: unknown): string | undefined =>\n  typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined\n\nconst getStringArray = (value: unknown): string[] => {\n  if (!Array.isArray(value)) {\n    return []\n  }\n\n  return value.flatMap((item) => {\n    if (typeof item === 'string' && item.trim() !== '') {\n      return [item.trim()]\n    }\n\n    if (isRecord(item)) {\n      const nestedValue = getString(item.value)\n\n      return nestedValue ? [nestedValue] : []\n    }\n\n    return []\n  })\n}\n\nconst authToggleEnabled = (\n  toggle: boolean | PayloadMarkdownDocsAuthToggle | undefined,\n  defaultValue: boolean,\n): boolean => {\n  if (toggle === undefined) {\n    return defaultValue\n  }\n\n  if (typeof toggle === 'boolean') {\n    return toggle\n  }\n\n  return toggle.enabled !== false\n}\n\nexport const isGitHubOidcAuthEnabled = (\n  auth: { githubOidc?: boolean | PayloadMarkdownDocsAuthToggle; mode?: 'disabled' } | undefined,\n): boolean => auth?.mode !== 'disabled' && authToggleEnabled(auth?.githubOidc, false)\n\nexport const isEd25519AuthEnabled = (\n  auth: { ed25519?: boolean | PayloadMarkdownDocsAuthToggle; mode?: 'disabled' } | undefined,\n): boolean => auth?.mode !== 'disabled' && authToggleEnabled(auth?.ed25519, false)\n\nexport const updateDocsSetAfterSync = async ({\n  aiExport,\n  collectionSlug,\n  docsCount,\n  docsSetId,\n  now,\n  payload,\n  syncRunId,\n}: {\n  aiExport?: unknown\n  collectionSlug: string\n  docsCount: number\n  docsSetId: PayloadRecordId\n  now: Date\n  payload: DocsSetPayloadOperations\n  syncRunId?: PayloadRecordId\n}): Promise<void> => {\n  if (!payload.update) {\n    return\n  }\n\n  await payload.update({\n    id: String(docsSetId),\n    collection: collectionSlug,\n    data: {\n      aiExport: aiExport ?? null,\n      sync: {\n        docsCount,\n        lastStatus: 'success',\n        lastSyncedAt: now.toISOString(),\n        lastSyncRunId: syncRunId,\n      },\n    },\n    overrideAccess: true,\n  })\n}\n\nconst toResolvedGroup = (\n  doc: unknown,\n  groupsById: Map<string, unknown>,\n  seen = new Set<string>(),\n): ResolvedDocsGroup | undefined => {\n  if (!isRecord(doc)) {\n    return undefined\n  }\n\n  const id = getRecordId(doc)\n  const slug = getString(doc.slug)\n\n  if (!id || !slug) {\n    return undefined\n  }\n\n  const stringId = String(id)\n\n  if (seen.has(stringId)) {\n    return {\n      id,\n      slug,\n      routePath: joinRouteSegments(slug),\n    }\n  }\n\n  const parentId = getRelationshipId(doc.parent)\n  const parentDoc = parentId ? groupsById.get(parentId) : undefined\n  const parentGroup = parentDoc\n    ? toResolvedGroup(parentDoc, groupsById, new Set([stringId, ...seen]))\n    : undefined\n\n  return {\n    id,\n    slug,\n    parentId,\n    routePath: joinRouteSegments(parentGroup?.routePath, slug),\n  }\n}\n\nconst toResolvedDocsSet = ({\n  doc,\n  groupsById,\n}: {\n  doc: unknown\n  groupsById: Map<string, unknown>\n}): ResolvedDocsSet | undefined => {\n  if (!isRecord(doc)) {\n    return undefined\n  }\n\n  const id = getRecordId(doc)\n  const slug = getString(doc.slug)\n\n  if (!id || !slug) {\n    return undefined\n  }\n\n  const groupId = getRelationshipId(doc.group)\n  const group = groupId ? toResolvedGroup(groupsById.get(groupId), groupsById) : undefined\n  const advancedSecurity = isRecord(doc.advancedSecurity)\n    ? doc.advancedSecurity\n    : undefined\n  const advancedSecurityEnabled = advancedSecurity?.enabled === true\n\n  return {\n    id,\n    ...(advancedSecurityEnabled\n      ? {\n          advancedSecurity: {\n            allowedWorkflowRefs: getStringArray(advancedSecurity.allowedWorkflowRefs),\n            enabled: true,\n          },\n        }\n      : {}),\n    slug,\n    allowPullRequests: doc.allowPullRequests === true,\n    branch: getString(doc.branch) ?? 'main',\n    groupId,\n    routeBase: normalizeRoutePath(\n      deriveDocsSetRouteBase({\n        docsSetSlug: slug,\n        groupRoutePath: group?.routePath,\n      }),\n    ),\n  }\n}\n\nconst getGroupsById = async ({\n  collectionSlug,\n  payload,\n}: {\n  collectionSlug: string\n  payload: DocsSetPayloadOperations\n}): Promise<Map<string, unknown>> => {\n  const result = await payload.find({\n    collection: collectionSlug,\n    depth: 0,\n    limit: 1000,\n    overrideAccess: true,\n  })\n\n  return new Map(\n    result.docs.flatMap((doc) => {\n      if (!isRecord(doc)) {\n        return []\n      }\n\n      const id = getRecordId(doc)\n\n      return id === undefined ? [] : [[String(id), doc]]\n    }),\n  )\n}\n\nexport const findDocsSetBySlug = async ({\n  slug,\n  collectionSlug,\n  docsGroupsCollectionSlug,\n  payload,\n}: {\n  collectionSlug: string\n  docsGroupsCollectionSlug: string\n  payload: DocsSetPayloadOperations\n  slug: string\n}): Promise<ResolvedDocsSet | undefined> => {\n  const [result, groupsById] = await Promise.all([\n    payload.find({\n      collection: collectionSlug,\n      depth: 0,\n      limit: 1,\n      overrideAccess: true,\n      where: {\n        slug: {\n          equals: slug,\n        },\n      },\n    }),\n    getGroupsById({\n      collectionSlug: docsGroupsCollectionSlug,\n      payload,\n    }),\n  ])\n\n  return toResolvedDocsSet({\n    doc: result.docs[0],\n    groupsById,\n  })\n}\n\nexport const findDocsSetByRouteBase = async ({\n  collectionSlug,\n  docsGroupsCollectionSlug,\n  payload,\n  routeBase,\n}: {\n  collectionSlug: string\n  docsGroupsCollectionSlug: string\n  payload: DocsSetPayloadOperations\n  routeBase: string\n}): Promise<ResolvedDocsSet | undefined> => {\n  const [result, groupsById] = await Promise.all([\n    payload.find({\n      collection: collectionSlug,\n      depth: 0,\n      limit: 1000,\n      overrideAccess: true,\n    }),\n    getGroupsById({\n      collectionSlug: docsGroupsCollectionSlug,\n      payload,\n    }),\n  ])\n  const normalizedRouteBase = normalizeRoutePath(routeBase)\n\n  return result.docs\n    .map((doc) =>\n      toResolvedDocsSet({\n        doc,\n        groupsById,\n      }),\n    )\n    .find((docsSet) => docsSet?.routeBase === normalizedRouteBase)\n}\n"],"names":["deriveDocsSetRouteBase","joinRouteSegments","normalizeRoutePath","isRecord","value","Array","isArray","getRecordId","doc","id","undefined","getRelationshipId","String","getString","trim","getStringArray","flatMap","item","nestedValue","authToggleEnabled","toggle","defaultValue","enabled","isGitHubOidcAuthEnabled","auth","mode","githubOidc","isEd25519AuthEnabled","ed25519","updateDocsSetAfterSync","aiExport","collectionSlug","docsCount","docsSetId","now","payload","syncRunId","update","collection","data","sync","lastStatus","lastSyncedAt","toISOString","lastSyncRunId","overrideAccess","toResolvedGroup","groupsById","seen","Set","slug","stringId","has","routePath","parentId","parent","parentDoc","get","parentGroup","toResolvedDocsSet","groupId","group","advancedSecurity","advancedSecurityEnabled","allowedWorkflowRefs","allowPullRequests","branch","routeBase","docsSetSlug","groupRoutePath","getGroupsById","result","find","depth","limit","Map","docs","findDocsSetBySlug","docsGroupsCollectionSlug","Promise","all","where","equals","findDocsSetByRouteBase","normalizedRouteBase","map","docsSet"],"mappings":"AAEA,SACEA,sBAAsB,EACtBC,iBAAiB,EACjBC,kBAAkB,QACb,sBAAqB;AA0C5B,MAAMC,WAAW,CAACC,QAChB,OAAOA,UAAU,YAAYA,UAAU,QAAQ,CAACC,MAAMC,OAAO,CAACF;AAEhE,MAAMG,cAAc,CAACC;IACnB,IAAI,OAAOA,IAAIC,EAAE,KAAK,YAAY,OAAOD,IAAIC,EAAE,KAAK,UAAU;QAC5D,OAAOD,IAAIC,EAAE;IACf;IAEA,OAAOC;AACT;AAEA,MAAMC,oBAAoB,CAACP;IACzB,IAAI,OAAOA,UAAU,YAAY,OAAOA,UAAU,UAAU;QAC1D,OAAOQ,OAAOR;IAChB;IAEA,IAAID,SAASC,QAAQ;QACnB,MAAMK,KAAKF,YAAYH;QAEvB,OAAOK,OAAOC,YAAYA,YAAYE,OAAOH;IAC/C;IAEA,OAAOC;AACT;AAEA,MAAMG,YAAY,CAACT,QACjB,OAAOA,UAAU,YAAYA,MAAMU,IAAI,OAAO,KAAKV,MAAMU,IAAI,KAAKJ;AAEpE,MAAMK,iBAAiB,CAACX;IACtB,IAAI,CAACC,MAAMC,OAAO,CAACF,QAAQ;QACzB,OAAO,EAAE;IACX;IAEA,OAAOA,MAAMY,OAAO,CAAC,CAACC;QACpB,IAAI,OAAOA,SAAS,YAAYA,KAAKH,IAAI,OAAO,IAAI;YAClD,OAAO;gBAACG,KAAKH,IAAI;aAAG;QACtB;QAEA,IAAIX,SAASc,OAAO;YAClB,MAAMC,cAAcL,UAAUI,KAAKb,KAAK;YAExC,OAAOc,cAAc;gBAACA;aAAY,GAAG,EAAE;QACzC;QAEA,OAAO,EAAE;IACX;AACF;AAEA,MAAMC,oBAAoB,CACxBC,QACAC;IAEA,IAAID,WAAWV,WAAW;QACxB,OAAOW;IACT;IAEA,IAAI,OAAOD,WAAW,WAAW;QAC/B,OAAOA;IACT;IAEA,OAAOA,OAAOE,OAAO,KAAK;AAC5B;AAEA,OAAO,MAAMC,0BAA0B,CACrCC,OACYA,MAAMC,SAAS,cAAcN,kBAAkBK,MAAME,YAAY,OAAM;AAErF,OAAO,MAAMC,uBAAuB,CAClCH,OACYA,MAAMC,SAAS,cAAcN,kBAAkBK,MAAMI,SAAS,OAAM;AAElF,OAAO,MAAMC,yBAAyB,OAAO,EAC3CC,QAAQ,EACRC,cAAc,EACdC,SAAS,EACTC,SAAS,EACTC,GAAG,EACHC,OAAO,EACPC,SAAS,EASV;IACC,IAAI,CAACD,QAAQE,MAAM,EAAE;QACnB;IACF;IAEA,MAAMF,QAAQE,MAAM,CAAC;QACnB5B,IAAIG,OAAOqB;QACXK,YAAYP;QACZQ,MAAM;YACJT,UAAUA,YAAY;YACtBU,MAAM;gBACJR;gBACAS,YAAY;gBACZC,cAAcR,IAAIS,WAAW;gBAC7BC,eAAeR;YACjB;QACF;QACAS,gBAAgB;IAClB;AACF,EAAC;AAED,MAAMC,kBAAkB,CACtBtC,KACAuC,YACAC,OAAO,IAAIC,KAAa;IAExB,IAAI,CAAC9C,SAASK,MAAM;QAClB,OAAOE;IACT;IAEA,MAAMD,KAAKF,YAAYC;IACvB,MAAM0C,OAAOrC,UAAUL,IAAI0C,IAAI;IAE/B,IAAI,CAACzC,MAAM,CAACyC,MAAM;QAChB,OAAOxC;IACT;IAEA,MAAMyC,WAAWvC,OAAOH;IAExB,IAAIuC,KAAKI,GAAG,CAACD,WAAW;QACtB,OAAO;YACL1C;YACAyC;YACAG,WAAWpD,kBAAkBiD;QAC/B;IACF;IAEA,MAAMI,WAAW3C,kBAAkBH,IAAI+C,MAAM;IAC7C,MAAMC,YAAYF,WAAWP,WAAWU,GAAG,CAACH,YAAY5C;IACxD,MAAMgD,cAAcF,YAChBV,gBAAgBU,WAAWT,YAAY,IAAIE,IAAI;QAACE;WAAaH;KAAK,KAClEtC;IAEJ,OAAO;QACLD;QACAyC;QACAI;QACAD,WAAWpD,kBAAkByD,aAAaL,WAAWH;IACvD;AACF;AAEA,MAAMS,oBAAoB,CAAC,EACzBnD,GAAG,EACHuC,UAAU,EAIX;IACC,IAAI,CAAC5C,SAASK,MAAM;QAClB,OAAOE;IACT;IAEA,MAAMD,KAAKF,YAAYC;IACvB,MAAM0C,OAAOrC,UAAUL,IAAI0C,IAAI;IAE/B,IAAI,CAACzC,MAAM,CAACyC,MAAM;QAChB,OAAOxC;IACT;IAEA,MAAMkD,UAAUjD,kBAAkBH,IAAIqD,KAAK;IAC3C,MAAMA,QAAQD,UAAUd,gBAAgBC,WAAWU,GAAG,CAACG,UAAUb,cAAcrC;IAC/E,MAAMoD,mBAAmB3D,SAASK,IAAIsD,gBAAgB,IAClDtD,IAAIsD,gBAAgB,GACpBpD;IACJ,MAAMqD,0BAA0BD,kBAAkBxC,YAAY;IAE9D,OAAO;QACLb;QACA,GAAIsD,0BACA;YACED,kBAAkB;gBAChBE,qBAAqBjD,eAAe+C,iBAAiBE,mBAAmB;gBACxE1C,SAAS;YACX;QACF,IACA,CAAC,CAAC;QACN4B;QACAe,mBAAmBzD,IAAIyD,iBAAiB,KAAK;QAC7CC,QAAQrD,UAAUL,IAAI0D,MAAM,KAAK;QACjCN;QACAO,WAAWjE,mBACTF,uBAAuB;YACrBoE,aAAalB;YACbmB,gBAAgBR,OAAOR;QACzB;IAEJ;AACF;AAEA,MAAMiB,gBAAgB,OAAO,EAC3BvC,cAAc,EACdI,OAAO,EAIR;IACC,MAAMoC,SAAS,MAAMpC,QAAQqC,IAAI,CAAC;QAChClC,YAAYP;QACZ0C,OAAO;QACPC,OAAO;QACP7B,gBAAgB;IAClB;IAEA,OAAO,IAAI8B,IACTJ,OAAOK,IAAI,CAAC5D,OAAO,CAAC,CAACR;QACnB,IAAI,CAACL,SAASK,MAAM;YAClB,OAAO,EAAE;QACX;QAEA,MAAMC,KAAKF,YAAYC;QAEvB,OAAOC,OAAOC,YAAY,EAAE,GAAG;YAAC;gBAACE,OAAOH;gBAAKD;aAAI;SAAC;IACpD;AAEJ;AAEA,OAAO,MAAMqE,oBAAoB,OAAO,EACtC3B,IAAI,EACJnB,cAAc,EACd+C,wBAAwB,EACxB3C,OAAO,EAMR;IACC,MAAM,CAACoC,QAAQxB,WAAW,GAAG,MAAMgC,QAAQC,GAAG,CAAC;QAC7C7C,QAAQqC,IAAI,CAAC;YACXlC,YAAYP;YACZ0C,OAAO;YACPC,OAAO;YACP7B,gBAAgB;YAChBoC,OAAO;gBACL/B,MAAM;oBACJgC,QAAQhC;gBACV;YACF;QACF;QACAoB,cAAc;YACZvC,gBAAgB+C;YAChB3C;QACF;KACD;IAED,OAAOwB,kBAAkB;QACvBnD,KAAK+D,OAAOK,IAAI,CAAC,EAAE;QACnB7B;IACF;AACF,EAAC;AAED,OAAO,MAAMoC,yBAAyB,OAAO,EAC3CpD,cAAc,EACd+C,wBAAwB,EACxB3C,OAAO,EACPgC,SAAS,EAMV;IACC,MAAM,CAACI,QAAQxB,WAAW,GAAG,MAAMgC,QAAQC,GAAG,CAAC;QAC7C7C,QAAQqC,IAAI,CAAC;YACXlC,YAAYP;YACZ0C,OAAO;YACPC,OAAO;YACP7B,gBAAgB;QAClB;QACAyB,cAAc;YACZvC,gBAAgB+C;YAChB3C;QACF;KACD;IACD,MAAMiD,sBAAsBlF,mBAAmBiE;IAE/C,OAAOI,OAAOK,IAAI,CACfS,GAAG,CAAC,CAAC7E,MACJmD,kBAAkB;YAChBnD;YACAuC;QACF,IAEDyB,IAAI,CAAC,CAACc,UAAYA,SAASnB,cAAciB;AAC9C,EAAC"}

package/dist/payload/docsTrusted.d.ts

@@ -0,0 +1,16 @@
+import type { GitHubOidcTrustedSource } from '../security/index.js';
+export type DocsTrustedPayloadOperations = {
+    find: (args: {
+        collection: string;
+        depth?: number;
+        limit?: number;
+        overrideAccess?: boolean;
+        where?: unknown;
+    }) => Promise<{
+        docs: unknown[];
+    }>;
+};
+export declare const findTrustedGitHubSources: ({ collectionSlug, payload, }: {
+    collectionSlug: string;
+    payload: DocsTrustedPayloadOperations;
+}) => Promise<GitHubOidcTrustedSource[]>;

package/dist/payload/docsTrusted.js

@@ -0,0 +1,49 @@
+const isRecord = (value)=>typeof value === 'object' && value !== null && !Array.isArray(value);
+const getString = (value)=>typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
+const getStringArray = (value)=>{
+    if (!Array.isArray(value)) {
+        return [];
+    }
+    return value.flatMap((item)=>{
+        if (typeof item === 'string' && item.trim() !== '') {
+            return [
+                item.trim()
+            ];
+        }
+        if (isRecord(item)) {
+            const nestedValue = getString(item.value);
+            return nestedValue ? [
+                nestedValue
+            ] : [];
+        }
+        return [];
+    });
+};
+const toTrustedSource = (doc)=>{
+    if (!isRecord(doc)) {
+        return undefined;
+    }
+    const owner = getString(doc.owner);
+    if (!owner) {
+        return undefined;
+    }
+    const limitRepos = doc.limitRepos === true;
+    return {
+        limitRepos,
+        owner,
+        ...limitRepos ? {
+            repositories: getStringArray(doc.repositories)
+        } : {}
+    };
+};
+export const findTrustedGitHubSources = async ({ collectionSlug, payload })=>{
+    const result = await payload.find({
+        collection: collectionSlug,
+        depth: 0,
+        limit: 1000,
+        overrideAccess: true
+    });
+    return result.docs.map(toTrustedSource).filter((source)=>source !== undefined);
+};
+
+//# sourceMappingURL=docsTrusted.js.map

package/dist/payload/docsTrusted.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/payload/docsTrusted.ts"],"sourcesContent":["import type { GitHubOidcTrustedSource } from '../security/index.js'\n\nexport type DocsTrustedPayloadOperations = {\n  find: (args: {\n    collection: string\n    depth?: number\n    limit?: number\n    overrideAccess?: boolean\n    where?: unknown\n  }) => Promise<{\n    docs: unknown[]\n  }>\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value)\n\nconst getString = (value: unknown): string | undefined =>\n  typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined\n\nconst getStringArray = (value: unknown): string[] => {\n  if (!Array.isArray(value)) {\n    return []\n  }\n\n  return value.flatMap((item) => {\n    if (typeof item === 'string' && item.trim() !== '') {\n      return [item.trim()]\n    }\n\n    if (isRecord(item)) {\n      const nestedValue = getString(item.value)\n\n      return nestedValue ? [nestedValue] : []\n    }\n\n    return []\n  })\n}\n\nconst toTrustedSource = (doc: unknown): GitHubOidcTrustedSource | undefined => {\n  if (!isRecord(doc)) {\n    return undefined\n  }\n\n  const owner = getString(doc.owner)\n\n  if (!owner) {\n    return undefined\n  }\n\n  const limitRepos = doc.limitRepos === true\n\n  return {\n    limitRepos,\n    owner,\n    ...(limitRepos\n      ? {\n          repositories: getStringArray(doc.repositories),\n        }\n      : {}),\n  }\n}\n\nexport const findTrustedGitHubSources = async ({\n  collectionSlug,\n  payload,\n}: {\n  collectionSlug: string\n  payload: DocsTrustedPayloadOperations\n}): Promise<GitHubOidcTrustedSource[]> => {\n  const result = await payload.find({\n    collection: collectionSlug,\n    depth: 0,\n    limit: 1000,\n    overrideAccess: true,\n  })\n\n  return result.docs\n    .map(toTrustedSource)\n    .filter((source): source is GitHubOidcTrustedSource => source !== undefined)\n}\n"],"names":["isRecord","value","Array","isArray","getString","trim","undefined","getStringArray","flatMap","item","nestedValue","toTrustedSource","doc","owner","limitRepos","repositories","findTrustedGitHubSources","collectionSlug","payload","result","find","collection","depth","limit","overrideAccess","docs","map","filter","source"],"mappings":"AAcA,MAAMA,WAAW,CAACC,QAChB,OAAOA,UAAU,YAAYA,UAAU,QAAQ,CAACC,MAAMC,OAAO,CAACF;AAEhE,MAAMG,YAAY,CAACH,QACjB,OAAOA,UAAU,YAAYA,MAAMI,IAAI,OAAO,KAAKJ,MAAMI,IAAI,KAAKC;AAEpE,MAAMC,iBAAiB,CAACN;IACtB,IAAI,CAACC,MAAMC,OAAO,CAACF,QAAQ;QACzB,OAAO,EAAE;IACX;IAEA,OAAOA,MAAMO,OAAO,CAAC,CAACC;QACpB,IAAI,OAAOA,SAAS,YAAYA,KAAKJ,IAAI,OAAO,IAAI;YAClD,OAAO;gBAACI,KAAKJ,IAAI;aAAG;QACtB;QAEA,IAAIL,SAASS,OAAO;YAClB,MAAMC,cAAcN,UAAUK,KAAKR,KAAK;YAExC,OAAOS,cAAc;gBAACA;aAAY,GAAG,EAAE;QACzC;QAEA,OAAO,EAAE;IACX;AACF;AAEA,MAAMC,kBAAkB,CAACC;IACvB,IAAI,CAACZ,SAASY,MAAM;QAClB,OAAON;IACT;IAEA,MAAMO,QAAQT,UAAUQ,IAAIC,KAAK;IAEjC,IAAI,CAACA,OAAO;QACV,OAAOP;IACT;IAEA,MAAMQ,aAAaF,IAAIE,UAAU,KAAK;IAEtC,OAAO;QACLA;QACAD;QACA,GAAIC,aACA;YACEC,cAAcR,eAAeK,IAAIG,YAAY;QAC/C,IACA,CAAC,CAAC;IACR;AACF;AAEA,OAAO,MAAMC,2BAA2B,OAAO,EAC7CC,cAAc,EACdC,OAAO,EAIR;IACC,MAAMC,SAAS,MAAMD,QAAQE,IAAI,CAAC;QAChCC,YAAYJ;QACZK,OAAO;QACPC,OAAO;QACPC,gBAAgB;IAClB;IAEA,OAAOL,OAAOM,IAAI,CACfC,GAAG,CAACf,iBACJgB,MAAM,CAAC,CAACC,SAA8CA,WAAWtB;AACtE,EAAC"}

package/dist/payload/index.d.ts

@@ -4,8 +4,12 @@ export { findDocsSyncConflicts } from './docsConflicts.js';
 export type { DocsSyncConflict, DocsSyncConflictReason, } from './docsConflicts.js';
 export { buildArchiveData, buildDocsData, getDocsDepth, } from './docsData.js';
 export type { BuildDocsDataInput, DocsDraftStatus, DocsPublishMode, } from './docsData.js';
-export { findDocsSetBySourceId, updateDocsSetAfterSync, } from './docsSets.js';
+export { findDocsKeyById } from './docsKeys.js';
+export type { DocsKeyPayloadOperations, ResolvedDocsKey, } from './docsKeys.js';
+export { findDocsSetByRouteBase, findDocsSetBySlug, isEd25519AuthEnabled, isGitHubOidcAuthEnabled, updateDocsSetAfterSync, } from './docsSets.js';
 export type { DocsSetPayloadOperations, ResolvedDocsSet, } from './docsSets.js';
+export { findTrustedGitHubSources } from './docsTrusted.js';
+export type { DocsTrustedPayloadOperations } from './docsTrusted.js';
 export { findExistingDocsRecords } from './existingDocs.js';
 export { findExistingPayloadDocsRecords, toExistingDocsRecord, } from './existingDocs.js';
 export type { ExistingDocsPayloadOperations, ExistingPayloadDocsRecord, } from './existingDocs.js';

package/dist/payload/index.js

@@ -1,7 +1,9 @@
 export { applyDocsSync, assertApplyDeleteBehaviorSupported } from './applyDocsSync.js';
 export { findDocsSyncConflicts } from './docsConflicts.js';
 export { buildArchiveData, buildDocsData, getDocsDepth } from './docsData.js';
-export { findDocsSetBySourceId, updateDocsSetAfterSync } from './docsSets.js';
+export { findDocsKeyById } from './docsKeys.js';
+export { findDocsSetByRouteBase, findDocsSetBySlug, isEd25519AuthEnabled, isGitHubOidcAuthEnabled, updateDocsSetAfterSync } from './docsSets.js';
+export { findTrustedGitHubSources } from './docsTrusted.js';
 export { findExistingDocsRecords } from './existingDocs.js';
 export { findExistingPayloadDocsRecords, toExistingDocsRecord } from './existingDocs.js';
 export { findConfiguredPagesRouteCollisions, findDuplicateDesiredRouteCollisions, findExistingDocsRouteCollisions } from './routeCollisions.js';

package/dist/payload/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/payload/index.ts"],"sourcesContent":["export {\n  applyDocsSync,\n  assertApplyDeleteBehaviorSupported,\n} from './applyDocsSync.js'\nexport type {\n  ApplyDocsSyncPayloadOperations,\n  ApplyDocsSyncResult,\n} from './applyDocsSync.js'\nexport { findDocsSyncConflicts } from './docsConflicts.js'\nexport type {\n  DocsSyncConflict,\n  DocsSyncConflictReason,\n} from './docsConflicts.js'\nexport {\n  buildArchiveData,\n  buildDocsData,\n  getDocsDepth,\n} from './docsData.js'\nexport type {\n  BuildDocsDataInput,\n  DocsDraftStatus,\n  DocsPublishMode,\n} from './docsData.js'\nexport {\n  findDocsSetBySourceId,\n  updateDocsSetAfterSync,\n} from './docsSets.js'\nexport type {\n  DocsSetPayloadOperations,\n  ResolvedDocsSet,\n} from './docsSets.js'\nexport { findExistingDocsRecords } from './existingDocs.js'\nexport {\n  findExistingPayloadDocsRecords,\n  toExistingDocsRecord,\n} from './existingDocs.js'\nexport type {\n  ExistingDocsPayloadOperations,\n  ExistingPayloadDocsRecord,\n} from './existingDocs.js'\nexport {\n  findConfiguredPagesRouteCollisions,\n  findDuplicateDesiredRouteCollisions,\n  findExistingDocsRouteCollisions,\n} from './routeCollisions.js'\nexport type {\n  DocsRouteCollisionIssue,\n  RouteCollisionPayloadOperations,\n} from './routeCollisions.js'\nexport {\n  createSyncRunAudit,\n  getRecordId,\n  updateSyncRunAudit,\n} from './syncRuns.js'\nexport type {\n  CreateSyncRunAuditInput,\n  SyncRunsPayloadOperations,\n  SyncRunStatus,\n  SyncRunSummary,\n} from './syncRuns.js'\n"],"names":["applyDocsSync","assertApplyDeleteBehaviorSupported","findDocsSyncConflicts","buildArchiveData","buildDocsData","getDocsDepth","findDocsSetBySourceId","updateDocsSetAfterSync","findExistingDocsRecords","findExistingPayloadDocsRecords","toExistingDocsRecord","findConfiguredPagesRouteCollisions","findDuplicateDesiredRouteCollisions","findExistingDocsRouteCollisions","createSyncRunAudit","getRecordId","updateSyncRunAudit"],"mappings":"AAAA,SACEA,aAAa,EACbC,kCAAkC,QAC7B,qBAAoB;AAK3B,SAASC,qBAAqB,QAAQ,qBAAoB;AAK1D,SACEC,gBAAgB,EAChBC,aAAa,EACbC,YAAY,QACP,gBAAe;AAMtB,SACEC,qBAAqB,EACrBC,sBAAsB,QACjB,gBAAe;AAKtB,SAASC,uBAAuB,QAAQ,oBAAmB;AAC3D,SACEC,8BAA8B,EAC9BC,oBAAoB,QACf,oBAAmB;AAK1B,SACEC,kCAAkC,EAClCC,mCAAmC,EACnCC,+BAA+B,QAC1B,uBAAsB;AAK7B,SACEC,kBAAkB,EAClBC,WAAW,EACXC,kBAAkB,QACb,gBAAe"}
+{"version":3,"sources":["../../src/payload/index.ts"],"sourcesContent":["export {\n  applyDocsSync,\n  assertApplyDeleteBehaviorSupported,\n} from './applyDocsSync.js'\nexport type {\n  ApplyDocsSyncPayloadOperations,\n  ApplyDocsSyncResult,\n} from './applyDocsSync.js'\nexport { findDocsSyncConflicts } from './docsConflicts.js'\nexport type {\n  DocsSyncConflict,\n  DocsSyncConflictReason,\n} from './docsConflicts.js'\nexport {\n  buildArchiveData,\n  buildDocsData,\n  getDocsDepth,\n} from './docsData.js'\nexport type {\n  BuildDocsDataInput,\n  DocsDraftStatus,\n  DocsPublishMode,\n} from './docsData.js'\nexport { findDocsKeyById } from './docsKeys.js'\nexport type {\n  DocsKeyPayloadOperations,\n  ResolvedDocsKey,\n} from './docsKeys.js'\nexport {\n  findDocsSetByRouteBase,\n  findDocsSetBySlug,\n  isEd25519AuthEnabled,\n  isGitHubOidcAuthEnabled,\n  updateDocsSetAfterSync,\n} from './docsSets.js'\nexport type {\n  DocsSetPayloadOperations,\n  ResolvedDocsSet,\n} from './docsSets.js'\nexport { findTrustedGitHubSources } from './docsTrusted.js'\nexport type { DocsTrustedPayloadOperations } from './docsTrusted.js'\nexport { findExistingDocsRecords } from './existingDocs.js'\nexport {\n  findExistingPayloadDocsRecords,\n  toExistingDocsRecord,\n} from './existingDocs.js'\nexport type {\n  ExistingDocsPayloadOperations,\n  ExistingPayloadDocsRecord,\n} from './existingDocs.js'\nexport {\n  findConfiguredPagesRouteCollisions,\n  findDuplicateDesiredRouteCollisions,\n  findExistingDocsRouteCollisions,\n} from './routeCollisions.js'\nexport type {\n  DocsRouteCollisionIssue,\n  RouteCollisionPayloadOperations,\n} from './routeCollisions.js'\nexport {\n  createSyncRunAudit,\n  getRecordId,\n  updateSyncRunAudit,\n} from './syncRuns.js'\nexport type {\n  CreateSyncRunAuditInput,\n  SyncRunsPayloadOperations,\n  SyncRunStatus,\n  SyncRunSummary,\n} from './syncRuns.js'\n"],"names":["applyDocsSync","assertApplyDeleteBehaviorSupported","findDocsSyncConflicts","buildArchiveData","buildDocsData","getDocsDepth","findDocsKeyById","findDocsSetByRouteBase","findDocsSetBySlug","isEd25519AuthEnabled","isGitHubOidcAuthEnabled","updateDocsSetAfterSync","findTrustedGitHubSources","findExistingDocsRecords","findExistingPayloadDocsRecords","toExistingDocsRecord","findConfiguredPagesRouteCollisions","findDuplicateDesiredRouteCollisions","findExistingDocsRouteCollisions","createSyncRunAudit","getRecordId","updateSyncRunAudit"],"mappings":"AAAA,SACEA,aAAa,EACbC,kCAAkC,QAC7B,qBAAoB;AAK3B,SAASC,qBAAqB,QAAQ,qBAAoB;AAK1D,SACEC,gBAAgB,EAChBC,aAAa,EACbC,YAAY,QACP,gBAAe;AAMtB,SAASC,eAAe,QAAQ,gBAAe;AAK/C,SACEC,sBAAsB,EACtBC,iBAAiB,EACjBC,oBAAoB,EACpBC,uBAAuB,EACvBC,sBAAsB,QACjB,gBAAe;AAKtB,SAASC,wBAAwB,QAAQ,mBAAkB;AAE3D,SAASC,uBAAuB,QAAQ,oBAAmB;AAC3D,SACEC,8BAA8B,EAC9BC,oBAAoB,QACf,oBAAmB;AAK1B,SACEC,kCAAkC,EAClCC,mCAAmC,EACnCC,+BAA+B,QAC1B,uBAAsB;AAK7B,SACEC,kBAAkB,EAClBC,WAAW,EACXC,kBAAkB,QACb,gBAAe"}

package/dist/plugin.js

@@ -1,13 +1,13 @@
-import { createDocsCollection, createDocsGroupsCollection, createDocsSetsCollection, createNoncesCollection, createSyncRunsCollection } from './collections/index.js';
-import { DEFAULT_DOCS_COLLECTION_SLUG, DEFAULT_DOCS_GROUPS_COLLECTION_SLUG, DEFAULT_DOCS_ROUTE_BASE, DEFAULT_DOCS_SETS_COLLECTION_SLUG, DEFAULT_DOCS_SYNC_ENDPOINT_PATH, DEFAULT_DOCS_SYNC_NONCES_COLLECTION_SLUG, DEFAULT_DOCS_SYNC_RUNS_COLLECTION_SLUG, DEFAULT_MARKDOWN_FIELD_NAME, DEFAULT_MAX_BODY_BYTES, DEFAULT_PAGES_BRIDGE_FIELD, DEFAULT_PAGES_COLLECTION_SLUG, DEFAULT_PAGES_ROUTE_FIELD } from './constants.js';
+import { createDocsCollection, createDocsGroupsCollection, createDocsKeysCollection, createDocsSetsCollection, createDocsTrustedCollection, createNoncesCollection, createSyncRunsCollection } from './collections/index.js';
+import { DEFAULT_DOCS_COLLECTION_SLUG, DEFAULT_DOCS_GROUPS_COLLECTION_SLUG, DEFAULT_DOCS_KEYS_COLLECTION_SLUG, DEFAULT_DOCS_SETS_COLLECTION_SLUG, DEFAULT_DOCS_SYNC_ENDPOINT_PATH, DEFAULT_DOCS_SYNC_NONCES_COLLECTION_SLUG, DEFAULT_DOCS_SYNC_RUNS_COLLECTION_SLUG, DEFAULT_DOCS_TRUSTED_COLLECTION_SLUG, DEFAULT_MARKDOWN_FIELD_NAME, DEFAULT_MAX_BODY_BYTES, DEFAULT_PAGES_BRIDGE_FIELD, DEFAULT_PAGES_COLLECTION_SLUG, DEFAULT_PAGES_ROUTE_FIELD } from './constants.js';
 import { createSyncEndpoint } from './endpoints/index.js';
 const normalizeEndpointPath = (path)=>{
     const normalized = `/${path.trim()}`.replace(/\/+/g, '/');
     return normalized.length > 1 ? normalized.replace(/\/+$/g, '') : normalized;
 };
 const resolveCollectionOptions = (pluginOptions)=>{
-    if (pluginOptions.target?.type === 'existingCollection') {
-        throw new Error('payloadMarkdownDocs: target.type "existingCollection" is not supported yet. Use target.type "docsCollection".');
+    if (pluginOptions.target?.type !== undefined && pluginOptions.target.type !== 'docsCollection') {
+        throw new Error('payloadMarkdownDocs: target.type only supports "docsCollection". existingCollection is not supported.');
     }
     const docsSlugFromTarget = pluginOptions.target?.slug;
     const docsSlugFromCollections = pluginOptions.collections?.docs?.slug;
@@ -19,10 +19,14 @@ const resolveCollectionOptions = (pluginOptions)=>{
         docsEnabled: pluginOptions.collections?.docs?.enabled !== false,
         docsGroupsCollectionSlug: pluginOptions.collections?.docsGroups?.slug ?? DEFAULT_DOCS_GROUPS_COLLECTION_SLUG,
         docsGroupsEnabled: pluginOptions.collections?.docsGroups?.enabled !== false,
+        docsKeysCollectionSlug: pluginOptions.collections?.docsKeys?.slug ?? DEFAULT_DOCS_KEYS_COLLECTION_SLUG,
+        docsKeysEnabled: pluginOptions.collections?.docsKeys?.enabled !== false,
         docsSetsCollectionSlug: pluginOptions.collections?.docsSets?.slug ?? DEFAULT_DOCS_SETS_COLLECTION_SLUG,
         docsSetsEnabled: pluginOptions.collections?.docsSets?.enabled !== false,
-        enableDrafts: pluginOptions.target?.type === 'docsCollection' ? pluginOptions.target.enableDrafts === true : false,
-        markdownFieldName: pluginOptions.target?.type === 'docsCollection' ? pluginOptions.target.markdownField ?? DEFAULT_MARKDOWN_FIELD_NAME : DEFAULT_MARKDOWN_FIELD_NAME,
+        docsTrustedCollectionSlug: pluginOptions.collections?.docsTrusted?.slug ?? DEFAULT_DOCS_TRUSTED_COLLECTION_SLUG,
+        docsTrustedEnabled: pluginOptions.collections?.docsTrusted?.enabled !== false,
+        enableDrafts: pluginOptions.target?.enableDrafts === true,
+        markdownFieldName: pluginOptions.target?.markdownField ?? DEFAULT_MARKDOWN_FIELD_NAME,
         noncesCollectionSlug: pluginOptions.collections?.nonces?.slug ?? DEFAULT_DOCS_SYNC_NONCES_COLLECTION_SLUG,
         noncesEnabled: pluginOptions.collections?.nonces?.enabled !== false,
         syncRunsCollectionSlug: pluginOptions.collections?.syncRuns?.slug ?? DEFAULT_DOCS_SYNC_RUNS_COLLECTION_SLUG,
@@ -49,14 +53,18 @@ export const payloadMarkdownDocs = (pluginOptions = {})=>(incomingConfig)=>{
         if (pluginOptions.enabled === false) {
             return incomingConfig;
         }
-        const { docsCollectionSlug, docsEnabled, docsGroupsCollectionSlug, docsGroupsEnabled, docsSetsCollectionSlug, docsSetsEnabled, enableDrafts, markdownFieldName, noncesCollectionSlug, noncesEnabled, syncRunsCollectionSlug, syncRunsEnabled } = resolveCollectionOptions(pluginOptions);
+        const { docsCollectionSlug, docsEnabled, docsGroupsCollectionSlug, docsGroupsEnabled, docsKeysCollectionSlug, docsKeysEnabled, docsSetsCollectionSlug, docsSetsEnabled, docsTrustedCollectionSlug, docsTrustedEnabled, enableDrafts, markdownFieldName, noncesCollectionSlug, noncesEnabled, syncRunsCollectionSlug, syncRunsEnabled } = resolveCollectionOptions(pluginOptions);
         assertCollectionOptionCompatibility({
             docsCollectionSlug,
             docsEnabled,
             docsGroupsCollectionSlug,
             docsGroupsEnabled,
+            docsKeysCollectionSlug,
+            docsKeysEnabled,
             docsSetsCollectionSlug,
             docsSetsEnabled,
+            docsTrustedCollectionSlug,
+            docsTrustedEnabled,
             enableDrafts,
             markdownFieldName,
             noncesCollectionSlug,
@@ -72,6 +80,12 @@ export const payloadMarkdownDocs = (pluginOptions = {})=>(incomingConfig)=>{
             ...docsSetsEnabled ? [
                 docsSetsCollectionSlug
             ] : [],
+            ...docsKeysEnabled ? [
+                docsKeysCollectionSlug
+            ] : [],
+            ...docsTrustedEnabled ? [
+                docsTrustedCollectionSlug
+            ] : [],
             ...docsEnabled ? [
                 docsCollectionSlug
             ] : [],
@@ -97,6 +111,16 @@ export const payloadMarkdownDocs = (pluginOptions = {})=>(incomingConfig)=>{
                     syncRunsCollectionSlug: syncRunsEnabled ? syncRunsCollectionSlug : undefined
                 })
             ] : [],
+            ...docsKeysEnabled ? [
+                createDocsKeysCollection({
+                    slug: docsKeysCollectionSlug
+                })
+            ] : [],
+            ...docsTrustedEnabled ? [
+                createDocsTrustedCollection({
+                    slug: docsTrustedCollectionSlug
+                })
+            ] : [],
             ...docsEnabled ? [
                 createDocsCollection({
                     slug: docsCollectionSlug,
@@ -136,15 +160,19 @@ export const payloadMarkdownDocs = (pluginOptions = {})=>(incomingConfig)=>{
                     docsCollectionSlug,
                     docsEnabled,
                     docsEnableDrafts: enableDrafts,
+                    docsGroupsCollectionSlug,
+                    docsKeysCollectionSlug,
+                    docsKeysEnabled,
                     docsSetsCollectionSlug,
                     docsSetsEnabled,
+                    docsTrustedCollectionSlug,
+                    docsTrustedEnabled,
                     endpointPath,
                     markdownFieldName,
                     maxBodyBytes: pluginOptions.endpoint?.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES,
                     noncesCollectionSlug,
                     noncesEnabled,
                     requireDryRunBeforeApply: pluginOptions.sync?.requireDryRunBeforeApply,
-                    routeBase: DEFAULT_DOCS_ROUTE_BASE,
                     routing: {
                         pages: {
                             allowBridgePages: pluginOptions.routing?.pages?.allowBridgePages ?? true,
@@ -154,7 +182,6 @@ export const payloadMarkdownDocs = (pluginOptions = {})=>(incomingConfig)=>{
                             routeField: pluginOptions.routing?.pages?.routeField ?? DEFAULT_PAGES_ROUTE_FIELD
                         }
                     },
-                    sources: pluginOptions.sources,
                     syncRunsCollectionSlug,
                     syncRunsEnabled
                 })