@webiny/api-aco 0.0.0-unstable.99666aeb00 → 0.0.0-unstable.a9593f74dd

package/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["ListSortDirection"],"sources":["types.ts"],"sourcesContent":["import { TenancyContext, Tenant } from \"@webiny/api-tenancy/types\";\nimport { Context as BaseContext } from \"@webiny/handler/types\";\nimport { I18NContext, I18NLocale } from \"@webiny/api-i18n/types\";\nimport { SecurityContext, SecurityIdentity } from \"@webiny/api-security/types\";\nimport { CmsContext, CmsModel, CmsModelField } from \"@webiny/api-headless-cms/types\";\nimport {\n    AcoSearchRecordCrud,\n    AcoSearchRecordCrudBase,\n    AcoSearchRecordStorageOperations\n} from \"~/record/record.types\";\nimport { AcoFolderCrud, AcoFolderStorageOperations } from \"~/folder/folder.types\";\n\nexport * from \"./folder/folder.types\";\nexport * from \"./record/record.types\";\n\nexport interface User {\n    id: string;\n    type: string;\n    displayName: string | null;\n}\n\nexport interface ListMeta {\n    cursor: string | null;\n    totalCount: number;\n    hasMoreItems: boolean;\n}\n\nexport enum ListSortDirection {\n    ASC,\n    DESC\n}\n\nexport type ListSort = Record<string, ListSortDirection>;\n\nexport interface AcoBaseFields {\n    id: string;\n    entryId: string;\n    createdOn: string;\n    createdBy: User;\n    savedOn: string;\n}\n\nexport interface AdvancedContentOrganisation {\n    folder: AcoFolderCrud;\n    search: AcoSearchRecordCrud;\n    apps: IAcoApps;\n    registerApp: (params: IAcoAppRegisterParams) => Promise<IAcoApp>;\n    getApp: (name: string) => IAcoApp;\n    listApps: () => IAcoApp[];\n}\n\nexport interface CreateAcoParams {\n    getIdentity: () => SecurityIdentity;\n    getLocale: () => I18NLocale;\n    getTenant: () => Tenant;\n    storageOperations: AcoStorageOperations;\n}\n\nexport type AcoStorageOperations = AcoFolderStorageOperations & AcoSearchRecordStorageOperations;\n\nexport interface AcoContext\n    extends BaseContext,\n        I18NContext,\n        TenancyContext,\n        SecurityContext,\n        CmsContext {\n    aco: AdvancedContentOrganisation;\n}\n\n/**\n * @deprecated Use AcoContext instead\n */\nexport type ACOContext = AcoContext;\n\n/**\n * Apps\n */\nexport interface IAcoAppAddFieldCallable {\n    (field: CmsModelField): void;\n}\n\nexport interface IAcoAppRemoveFieldCallable {\n    (id: string): void;\n}\n\nexport interface IAcoAppModifyFieldCallableCallback {\n    (field: CmsModelField): CmsModelField;\n}\n\nexport interface IAcoAppModifyFieldCallable {\n    (id: string, cb: IAcoAppModifyFieldCallableCallback): void;\n}\n\nexport interface IAcoApp {\n    context: AcoContext;\n    search: AcoSearchRecordCrudBase;\n    folder: AcoFolderCrud;\n    name: string;\n    model: CmsModel;\n    getFields: () => CmsModelField[];\n    addField: IAcoAppAddFieldCallable;\n    removeField: IAcoAppRemoveFieldCallable;\n    modifyField: IAcoAppModifyFieldCallable;\n}\n\nexport interface IAcoAppParams {\n    name: string;\n    apiName: string;\n    model: CmsModel;\n    fields: CmsModelField[];\n}\n\nexport type IAcoAppsOptions = CreateAcoParams;\n\nexport interface IAcoApps {\n    list: () => IAcoApp[];\n    register: (app: IAcoAppParams) => Promise<IAcoApp>;\n}\n\nexport type IAcoAppRegisterParams = Omit<IAcoAppParams, \"model\">;\n"],"mappings":";;;;;;;;;AAYA;AAAA;EAAA;EAAA;EAAA;EAAA;IAAA;IAAA;MAAA;IAAA;EAAA;AAAA;AACA;AAAA;EAAA;EAAA;EAAA;EAAA;IAAA;IAAA;MAAA;IAAA;EAAA;AAAA;AAAsC,IAc1BA,iBAAiB;AAAA;AAAA,WAAjBA,iBAAiB;EAAjBA,iBAAiB,CAAjBA,iBAAiB;EAAjBA,iBAAiB,CAAjBA,iBAAiB;AAAA,GAAjBA,iBAAiB,iCAAjBA,iBAAiB"}
+{"version":3,"names":["_filter","require","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","_folder","_record","ListSortDirection"],"sources":["types.ts"],"sourcesContent":["import { TenancyContext, Tenant } from \"@webiny/api-tenancy/types\";\nimport { Context as BaseContext } from \"@webiny/handler/types\";\nimport { I18NContext, I18NLocale } from \"@webiny/api-i18n/types\";\nimport { SecurityContext } from \"@webiny/api-security/types\";\nimport { AdminUsersContext } from \"@webiny/api-admin-users/types\";\nimport { FileManagerContext } from \"@webiny/api-file-manager/types\";\nimport { CmsContext, CmsModel, CmsModelField } from \"@webiny/api-headless-cms/types\";\nimport {\n    AcoSearchRecordCrud,\n    AcoSearchRecordCrudBase,\n    AcoSearchRecordStorageOperations,\n    SearchRecord\n} from \"~/record/record.types\";\nimport { AcoFolderCrud, AcoFolderStorageOperations } from \"~/folder/folder.types\";\nimport { AcoFilterCrud, AcoFilterStorageOperations } from \"~/filter/filter.types\";\nimport { FolderLevelPermissions } from \"~/utils/FolderLevelPermissions\";\n\nexport * from \"./filter/filter.types\";\nexport * from \"./folder/folder.types\";\nexport * from \"./record/record.types\";\n\nexport interface User {\n    id: string;\n    type: string;\n    displayName: string | null;\n}\n\nexport interface ListMeta {\n    cursor: string | null;\n    totalCount: number;\n    hasMoreItems: boolean;\n}\n\nexport enum ListSortDirection {\n    ASC,\n    DESC\n}\n\nexport type ListSort = Record<string, ListSortDirection>;\n\nexport interface AcoBaseFields {\n    id: string;\n    entryId: string;\n    createdOn: string;\n    modifiedOn: string | null;\n    savedOn: string;\n    createdBy: User;\n    modifiedBy: User | null;\n    savedBy: User;\n}\n\nexport interface AdvancedContentOrganisation {\n    folder: AcoFolderCrud;\n    search: AcoSearchRecordCrud;\n    filter: AcoFilterCrud;\n    folderLevelPermissions: FolderLevelPermissions;\n    apps: IAcoApps;\n    registerApp: (params: IAcoAppRegisterParams) => Promise<IAcoApp>;\n    getApp: (name: string) => IAcoApp;\n    listApps: () => IAcoApp[];\n}\n\nexport interface CreateAcoParams {\n    getLocale: () => I18NLocale;\n    getTenant: () => Tenant;\n    storageOperations: AcoStorageOperations;\n    folderLevelPermissions: FolderLevelPermissions;\n}\n\nexport type AcoStorageOperations = AcoFolderStorageOperations &\n    AcoSearchRecordStorageOperations &\n    AcoFilterStorageOperations;\n\nexport interface AcoContext\n    extends BaseContext,\n        I18NContext,\n        TenancyContext,\n        SecurityContext,\n        AdminUsersContext,\n        CmsContext,\n        FileManagerContext {\n    aco: AdvancedContentOrganisation;\n}\n\n/**\n * @deprecated Use AcoContext instead\n */\nexport type ACOContext = AcoContext;\n\n/**\n * Apps\n */\nexport interface IAcoAppAddFieldCallable {\n    (field: CmsModelField): void;\n}\n\nexport interface IAcoAppRemoveFieldCallable {\n    (id: string): void;\n}\n\nexport interface IAcoAppModifyFieldCallableCallback {\n    (field: CmsModelField): CmsModelField;\n}\n\nexport interface IAcoAppModifyFieldCallable {\n    (id: string, cb: IAcoAppModifyFieldCallableCallback): void;\n}\n\nexport interface IAcoApp {\n    context: AcoContext;\n    search: AcoSearchRecordCrudBase;\n    folder: AcoFolderCrud;\n    name: string;\n    model: CmsModel;\n    getFields: () => CmsModelField[];\n    addField: IAcoAppAddFieldCallable;\n    removeField: IAcoAppRemoveFieldCallable;\n    modifyField: IAcoAppModifyFieldCallable;\n}\n// TODO: determine correct type\nexport type IAcoAppOnEntry<T = any> = (entry: SearchRecord<T>) => Promise<SearchRecord<T>>;\nexport type IAcoAppOnEntryList<T = any> = (entry: SearchRecord<T>[]) => Promise<SearchRecord<T>[]>;\nexport type AcoRequestAction = \"create\" | \"update\" | \"delete\" | \"move\" | \"fetch\";\nexport type IAcoAppOnAnyRequest = (context: AcoContext, action: AcoRequestAction) => Promise<void>;\n\nexport interface IAcoAppParams {\n    name: string;\n    apiName: string;\n    model: CmsModel;\n    fields: CmsModelField[];\n    onEntry?: IAcoAppOnEntry;\n    onEntryList?: IAcoAppOnEntryList;\n    onAnyRequest?: IAcoAppOnAnyRequest;\n}\n\nexport type IAcoAppsOptions = CreateAcoParams;\n\nexport interface IAcoApps {\n    list: () => IAcoApp[];\n    register: (app: IAcoAppParams) => Promise<IAcoApp>;\n}\n\nexport type IAcoAppRegisterParams = Omit<IAcoAppParams, \"model\">;\n"],"mappings":";;;;;;;;;AAiBA,IAAAA,OAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,OAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAL,OAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAb,OAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,OAAA,GAAAb,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAW,OAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAS,OAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,OAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AACA,IAAAU,OAAA,GAAAd,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAY,OAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAU,OAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,OAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AAAsC,IAc1BW,iBAAiB,0BAAjBA,iBAAiB;EAAjBA,iBAAiB,CAAjBA,iBAAiB;EAAjBA,iBAAiB,CAAjBA,iBAAiB;EAAA,OAAjBA,iBAAiB;AAAA;AAmD7B;AACA;AACA;AAGA;AACA;AACA;AA4BA;AAAAN,OAAA,CAAAM,iBAAA,GAAAA,iBAAA"}

package/utils/FolderLevelPermissions.d.ts

@@ -0,0 +1,71 @@
+import { Authentication } from "@webiny/api-authentication/types";
+import { SecurityPermission, Team } from "@webiny/api-security/types";
+import { Folder } from "../folder/folder.types";
+export declare type FolderAccessLevel = "owner" | "viewer" | "editor" | "public";
+export interface FolderPermission {
+    target: string;
+    level: FolderAccessLevel;
+    inheritedFrom?: string;
+}
+export interface FolderPermissionsListItem {
+    folderId: string;
+    permissions: FolderPermission[];
+}
+export declare type FolderPermissionsList = FolderPermissionsListItem[];
+export interface CanAccessFolderContentParams {
+    folder: Pick<Folder, "id" | "type" | "parentId">;
+    rwd?: "r" | "w" | "d";
+    foldersList?: Folder[];
+}
+export interface CanAccessFolderParams extends CanAccessFolderContentParams {
+    managePermissions?: boolean;
+}
+interface FilterFoldersParams {
+    folders: Array<Folder>;
+    rwd?: "r" | "w" | "d";
+}
+interface GetFolderPermissionsParams {
+    folder: Pick<Folder, "id" | "type">;
+    foldersList?: Folder[];
+}
+interface ListFolderPermissionsParams {
+    folderType: string;
+    foldersList?: Folder[];
+}
+export interface FolderLevelPermissionsParams {
+    getIdentity: Authentication["getIdentity"];
+    getIdentityTeam: () => Promise<Team | null>;
+    listPermissions: () => Promise<SecurityPermission[]>;
+    listAllFolders: (folderType: string) => Promise<Folder[]>;
+    canUseTeams: () => boolean;
+    canUseFolderLevelPermissions: () => boolean;
+    isAuthorizationEnabled: () => boolean;
+}
+export declare class FolderLevelPermissions {
+    private readonly getIdentity;
+    private readonly getIdentityTeam;
+    private readonly listPermissions;
+    private readonly listAllFoldersCallback;
+    private readonly canUseTeams;
+    private readonly canUseFolderLevelPermissions;
+    private readonly isAuthorizationEnabled;
+    private allFolders;
+    constructor(params: FolderLevelPermissionsParams);
+    listAllFolders(folderType: string): Promise<Folder[]>;
+    listAllFoldersWithPermissions(folderType: string): Promise<Folder[]>;
+    invalidateCache(folderType?: string): void;
+    listFoldersPermissions(params: ListFolderPermissionsParams): Promise<FolderPermissionsList>;
+    getFolderPermissions(params: GetFolderPermissionsParams): Promise<FolderPermissionsListItem | undefined>;
+    canAccessFolder(params: CanAccessFolderParams): Promise<boolean>;
+    ensureCanAccessFolder(params: CanAccessFolderParams): Promise<void>;
+    canManageFolderPermissions(folder: Folder): boolean | Promise<boolean>;
+    canManageFolderStructure(folder: Folder): true | Promise<boolean>;
+    canManageFolderContent(folder: Folder): true | Promise<boolean>;
+    canAccessFolderContent(params: CanAccessFolderContentParams): Promise<boolean>;
+    ensureCanAccessFolderContent(params: CanAccessFolderContentParams): Promise<void>;
+    canCreateFolderInRoot(): Promise<boolean>;
+    filterFolders(params: FilterFoldersParams): Promise<Folder[]>;
+    assignFolderPermissions(folder: Folder | Folder[]): Promise<void>;
+    permissionsIncludeNonInheritedPermissions(folderPermissionsList?: FolderPermission[]): boolean | undefined;
+}
+export {};

package/utils/FolderLevelPermissions.js

@@ -0,0 +1,353 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.FolderLevelPermissions = void 0;
+var _apiSecurity = require("@webiny/api-security");
+class FolderLevelPermissions {
+  allFolders = {};
+  constructor(params) {
+    this.getIdentity = params.getIdentity;
+    this.getIdentityTeam = params.getIdentityTeam;
+    this.listPermissions = params.listPermissions;
+    this.listAllFoldersCallback = params.listAllFolders;
+    this.canUseTeams = params.canUseTeams;
+    this.canUseFolderLevelPermissions = params.canUseFolderLevelPermissions;
+    this.isAuthorizationEnabled = params.isAuthorizationEnabled;
+
+    // TODO: resolve this issue.
+    // We immediately enable authorization, because, at the moment, the rest of the system
+    // requires us to have FLP always enabled. We must now disable it, even if the security's
+    // `isAuthorizationEnabled` is set to false. To resolve this, we'll need to refactor CMS-based
+    // CRUD files and have them use CMS storage operations instead of CMS CRUD methods.
+    // We'll be handling this in the near future.
+    this.isAuthorizationEnabled = () => true;
+  }
+  async listAllFolders(folderType) {
+    if (folderType in this.allFolders) {
+      return structuredClone(this.allFolders[folderType]);
+    }
+    this.allFolders[folderType] = await this.listAllFoldersCallback(folderType);
+    return structuredClone(this.allFolders[folderType]);
+  }
+  async listAllFoldersWithPermissions(folderType) {
+    const folders = await this.listAllFolders(folderType);
+
+    // Filter folders based on permissions and assign permissions to each folder.
+    const filteredFoldersWithPermissions = await this.filterFolders({
+      folders,
+      rwd: "r"
+    });
+    await this.assignFolderPermissions(filteredFoldersWithPermissions);
+    return filteredFoldersWithPermissions;
+  }
+  invalidateCache(folderType) {
+    if (folderType) {
+      if (folderType in this.allFolders) {
+        delete this.allFolders[folderType];
+      }
+    } else {
+      this.allFolders = {};
+    }
+  }
+  async listFoldersPermissions(params) {
+    if (!this.canUseFolderLevelPermissions() || !this.isAuthorizationEnabled()) {
+      return [];
+    }
+    const {
+      folderType,
+      foldersList
+    } = params;
+    const allFolders = foldersList || (await this.listAllFolders(folderType));
+    const identity = this.getIdentity();
+    const permissions = await this.listPermissions();
+    let identityTeam;
+    if (this.canUseTeams()) {
+      identityTeam = await this.getIdentityTeam();
+    }
+    const processedFolderPermissions = [];
+    const processFolderPermissions = folder => {
+      if (processedFolderPermissions.some(fp => fp.folderId === folder.id)) {
+        return;
+      }
+
+      // Copy permissions, so we don't modify the original object.
+      const currentFolderPermissions = {
+        folderId: folder.id,
+        // On new folders, permissions can be `null`. Guard against that.
+        permissions: folder.permissions?.map(permission => ({
+          ...permission
+        })) || []
+      };
+
+      // Check for permissions inherited from parent folder.
+      if (folder.parentId) {
+        const parentFolder = allFolders.find(f => f.id === folder.parentId);
+        if (parentFolder) {
+          // First check if the parent folder has already been processed.
+          let processedParentFolderPermissions = processedFolderPermissions.find(fp => fp.folderId === parentFolder.id);
+
+          // If not, process the parent folder.
+          if (!processedParentFolderPermissions) {
+            processFolderPermissions(parentFolder);
+            processedParentFolderPermissions = processedFolderPermissions.find(fp => fp.folderId === folder.parentId);
+          }
+
+          // If the parent folder has permissions, let's add them to the current folder.
+          if (processedParentFolderPermissions) {
+            const isPublicParentFolder = processedParentFolderPermissions.permissions.some(p => p.level === "public");
+
+            // We inherit parent permissions if:
+            // 1. the parent folder is not public or...
+            // 2. ...the parent folder is public, but the current folder doesn't have any permissions set
+            const mustInherit = !isPublicParentFolder || currentFolderPermissions.permissions.length === 0;
+            if (mustInherit) {
+              const inheritedPermissions = processedParentFolderPermissions.permissions.map(p => {
+                return {
+                  ...p,
+                  inheritedFrom: "parent:" + processedParentFolderPermissions.folderId
+                };
+              });
+              currentFolderPermissions.permissions.push(...inheritedPermissions);
+            }
+          }
+        }
+      }
+
+      // Let's ensure current identity's permission is included in the permissions array.
+      // We first check if the current identity is already included in the permissions array.
+      // If not, we check if the user has full access or if the team user belongs to has access.
+      const currentIdentityIncludedInPermissions = currentFolderPermissions.permissions.some(p => p.target === `admin:${identity.id}`);
+      if (currentIdentityIncludedInPermissions) {
+        // Ensure existing identity permission is always the first one in the array.
+        const currentIdentityPermissionIndex = currentFolderPermissions.permissions.findIndex(p => p.target === `admin:${identity.id}`);
+        if (currentIdentityPermissionIndex > 0) {
+          const [currentIdentityPermission] = currentFolderPermissions.permissions.splice(currentIdentityPermissionIndex, 1);
+          currentFolderPermissions.permissions.unshift(currentIdentityPermission);
+        }
+      } else {
+        // Current identity not included in permissions? Let's add it.
+        let currentIdentityPermission = null;
+
+        // 1. Check if the user has full access.
+        const hasFullAccess = permissions.some(p => p.name === "*");
+        if (hasFullAccess) {
+          currentIdentityPermission = {
+            target: `admin:${identity.id}`,
+            level: "owner",
+            inheritedFrom: "role:full-access"
+          };
+        } else if (identityTeam) {
+          // 2. Check the team user belongs to grants access to the folder.
+          const teamPermission = currentFolderPermissions.permissions.find(p => p.target === `team:${identityTeam.id}`);
+          if (teamPermission) {
+            currentIdentityPermission = {
+              target: `admin:${identity.id}`,
+              level: teamPermission.level,
+              inheritedFrom: "team:" + identityTeam.id
+            };
+          }
+        }
+        if (currentIdentityPermission) {
+          // If permission is found, let's add it to the beginning of the array.
+          // We're doing this just because it looks nicer in the UI.
+          currentFolderPermissions.permissions.unshift(currentIdentityPermission);
+        }
+      }
+
+      // Note that this can only happen with root folders. All other (child) folders will
+      // always have at least one permission (inherited from parent).
+      const mustAddPublicPermission = currentFolderPermissions.permissions.length === 0;
+      if (mustAddPublicPermission) {
+        currentFolderPermissions.permissions = [{
+          target: `admin:${identity.id}`,
+          level: "public",
+          inheritedFrom: "public"
+        }];
+      }
+      processedFolderPermissions.push(currentFolderPermissions);
+    };
+    for (let i = 0; i < allFolders.length; i++) {
+      const folder = allFolders[i];
+      processFolderPermissions(folder);
+    }
+    return processedFolderPermissions;
+  }
+  async getFolderPermissions(params) {
+    const {
+      folder,
+      foldersList
+    } = params;
+    const folderPermissionsList = await this.listFoldersPermissions({
+      folderType: folder.type,
+      foldersList
+    });
+    return folderPermissionsList.find(fp => fp.folderId === folder.id);
+  }
+  async canAccessFolder(params) {
+    if (!this.canUseFolderLevelPermissions() || !this.isAuthorizationEnabled()) {
+      return true;
+    }
+    const {
+      folder
+    } = params;
+
+    // We check for parent folder access first because the passed folder should be
+    // inaccessible if the parent folder is inaccessible.
+    if (folder.parentId) {
+      let foldersList = params.foldersList;
+      if (!foldersList) {
+        foldersList = await this.listAllFolders(folder.type);
+      }
+      const parentFolder = foldersList.find(f => f.id === folder.parentId);
+      if (parentFolder) {
+        const canAccessParentFolder = await this.canAccessFolder({
+          ...params,
+          folder: parentFolder
+        });
+        if (!canAccessParentFolder) {
+          return false;
+        }
+      }
+    }
+    const folderPermissions = await this.getFolderPermissions({
+      folder,
+      foldersList: params.foldersList
+    });
+    const identity = this.getIdentity();
+    const currentIdentityPermission = folderPermissions?.permissions.find(p => {
+      return p.target === `admin:${identity.id}`;
+    });
+    if (!currentIdentityPermission) {
+      return false;
+    }
+    const {
+      level
+    } = currentIdentityPermission;
+    if (params.managePermissions) {
+      return level === "owner";
+    }
+
+    // Checking for "write" or "delete" access. Allow only if the
+    // user is an owner or the folder is public (no FLP assigned).
+    if (params.rwd !== "r") {
+      return level === "owner" || level === "public";
+    }
+    return true;
+  }
+  async ensureCanAccessFolder(params) {
+    const canAccessFolder = await this.canAccessFolder(params);
+    if (!canAccessFolder) {
+      throw new _apiSecurity.NotAuthorizedError();
+    }
+  }
+  canManageFolderPermissions(folder) {
+    if (!this.canUseFolderLevelPermissions()) {
+      return false;
+    }
+    if (!this.isAuthorizationEnabled()) {
+      return true;
+    }
+    return this.canAccessFolder({
+      folder,
+      rwd: "w",
+      managePermissions: true
+    });
+  }
+  canManageFolderStructure(folder) {
+    if (!this.canUseFolderLevelPermissions() || !this.isAuthorizationEnabled()) {
+      return true;
+    }
+    return this.canAccessFolder({
+      folder,
+      rwd: "w"
+    });
+  }
+  canManageFolderContent(folder) {
+    if (!this.canUseFolderLevelPermissions() || !this.isAuthorizationEnabled()) {
+      return true;
+    }
+    return this.canAccessFolderContent({
+      folder,
+      rwd: "w"
+    });
+  }
+  async canAccessFolderContent(params) {
+    if (!this.canUseFolderLevelPermissions() || !this.isAuthorizationEnabled()) {
+      return true;
+    }
+    const {
+      folder,
+      foldersList
+    } = params;
+    const folderPermissions = await this.getFolderPermissions({
+      folder,
+      foldersList
+    });
+    const identity = this.getIdentity();
+    const currentIdentityPermission = folderPermissions?.permissions.find(p => {
+      return p.target === `admin:${identity.id}`;
+    });
+    if (!currentIdentityPermission) {
+      return false;
+    }
+
+    // If the user is not an owner and we're checking for "write" or
+    // "delete" access, then we can immediately return false.
+    if (params.rwd !== "r") {
+      const {
+        level
+      } = currentIdentityPermission;
+      return level !== "viewer";
+    }
+    return true;
+  }
+  async ensureCanAccessFolderContent(params) {
+    const canAccessFolderContent = await this.canAccessFolderContent(params);
+    if (!canAccessFolderContent) {
+      throw new _apiSecurity.NotAuthorizedError();
+    }
+  }
+  async canCreateFolderInRoot() {
+    return true;
+  }
+  async filterFolders(params) {
+    const filteredFolders = [];
+    const {
+      folders,
+      rwd
+    } = params;
+    for (let i = 0; i < folders.length; i++) {
+      const folder = folders[i];
+      const canAccessFolder = await this.canAccessFolder({
+        folder,
+        rwd
+      });
+      if (canAccessFolder) {
+        filteredFolders.push(folder);
+      }
+    }
+    return filteredFolders;
+  }
+  async assignFolderPermissions(folder) {
+    const folders = Array.isArray(folder) ? folder : [folder];
+    for (let i = 0; i < folders.length; i++) {
+      const folder = folders[i];
+      const folderPermissions = await this.getFolderPermissions({
+        folder
+      });
+      if (folderPermissions) {
+        folder.permissions = folderPermissions.permissions;
+      } else {
+        folder.permissions = [];
+      }
+    }
+  }
+  permissionsIncludeNonInheritedPermissions(folderPermissionsList) {
+    return folderPermissionsList?.some(p => !p.inheritedFrom);
+  }
+}
+exports.FolderLevelPermissions = FolderLevelPermissions;
+
+//# sourceMappingURL=FolderLevelPermissions.js.map

package/utils/FolderLevelPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_apiSecurity","require","FolderLevelPermissions","allFolders","constructor","params","getIdentity","getIdentityTeam","listPermissions","listAllFoldersCallback","listAllFolders","canUseTeams","canUseFolderLevelPermissions","isAuthorizationEnabled","folderType","structuredClone","listAllFoldersWithPermissions","folders","filteredFoldersWithPermissions","filterFolders","rwd","assignFolderPermissions","invalidateCache","listFoldersPermissions","foldersList","identity","permissions","identityTeam","processedFolderPermissions","processFolderPermissions","folder","some","fp","folderId","id","currentFolderPermissions","map","permission","parentId","parentFolder","find","f","processedParentFolderPermissions","isPublicParentFolder","p","level","mustInherit","length","inheritedPermissions","inheritedFrom","push","currentIdentityIncludedInPermissions","target","currentIdentityPermissionIndex","findIndex","currentIdentityPermission","splice","unshift","hasFullAccess","name","teamPermission","mustAddPublicPermission","i","getFolderPermissions","folderPermissionsList","type","canAccessFolder","canAccessParentFolder","folderPermissions","managePermissions","ensureCanAccessFolder","NotAuthorizedError","canManageFolderPermissions","canManageFolderStructure","canManageFolderContent","canAccessFolderContent","ensureCanAccessFolderContent","canCreateFolderInRoot","filteredFolders","Array","isArray","permissionsIncludeNonInheritedPermissions","exports"],"sources":["FolderLevelPermissions.ts"],"sourcesContent":["import { Authentication } from \"@webiny/api-authentication/types\";\nimport { SecurityPermission, Team } from \"@webiny/api-security/types\";\nimport { Folder } from \"~/folder/folder.types\";\nimport { NotAuthorizedError } from \"@webiny/api-security\";\n\nexport type FolderAccessLevel = \"owner\" | \"viewer\" | \"editor\" | \"public\";\n\nexport interface FolderPermission {\n    target: string;\n    level: FolderAccessLevel;\n    inheritedFrom?: string;\n}\n\nexport interface FolderPermissionsListItem {\n    folderId: string;\n    permissions: FolderPermission[];\n}\n\nexport type FolderPermissionsList = FolderPermissionsListItem[];\n\nexport interface CanAccessFolderContentParams {\n    folder: Pick<Folder, \"id\" | \"type\" | \"parentId\">;\n    rwd?: \"r\" | \"w\" | \"d\";\n    foldersList?: Folder[];\n}\n\nexport interface CanAccessFolderParams extends CanAccessFolderContentParams {\n    managePermissions?: boolean;\n}\n\ninterface FilterFoldersParams {\n    folders: Array<Folder>;\n    rwd?: \"r\" | \"w\" | \"d\";\n}\n\ninterface GetFolderPermissionsParams {\n    folder: Pick<Folder, \"id\" | \"type\">;\n    foldersList?: Folder[];\n}\n\ninterface ListFolderPermissionsParams {\n    folderType: string;\n    foldersList?: Folder[];\n}\n\nexport interface FolderLevelPermissionsParams {\n    getIdentity: Authentication[\"getIdentity\"];\n    getIdentityTeam: () => Promise<Team | null>;\n    listPermissions: () => Promise<SecurityPermission[]>;\n    listAllFolders: (folderType: string) => Promise<Folder[]>;\n    canUseTeams: () => boolean;\n    canUseFolderLevelPermissions: () => boolean;\n    isAuthorizationEnabled: () => boolean;\n}\n\nexport class FolderLevelPermissions {\n    private readonly getIdentity: Authentication[\"getIdentity\"];\n    private readonly getIdentityTeam: () => Promise<Team | null>;\n    private readonly listPermissions: () => Promise<SecurityPermission[]>;\n    private readonly listAllFoldersCallback: (folderType: string) => Promise<Folder[]>;\n    private readonly canUseTeams: () => boolean;\n    private readonly canUseFolderLevelPermissions: () => boolean;\n    private readonly isAuthorizationEnabled: () => boolean;\n    private allFolders: Record<string, Folder[]> = {};\n\n    constructor(params: FolderLevelPermissionsParams) {\n        this.getIdentity = params.getIdentity;\n        this.getIdentityTeam = params.getIdentityTeam;\n        this.listPermissions = params.listPermissions;\n        this.listAllFoldersCallback = params.listAllFolders;\n        this.canUseTeams = params.canUseTeams;\n        this.canUseFolderLevelPermissions = params.canUseFolderLevelPermissions;\n\n        this.isAuthorizationEnabled = params.isAuthorizationEnabled;\n\n        // TODO: resolve this issue.\n        // We immediately enable authorization, because, at the moment, the rest of the system\n        // requires us to have FLP always enabled. We must now disable it, even if the security's\n        // `isAuthorizationEnabled` is set to false. To resolve this, we'll need to refactor CMS-based\n        // CRUD files and have them use CMS storage operations instead of CMS CRUD methods.\n        // We'll be handling this in the near future.\n        this.isAuthorizationEnabled = () => true;\n    }\n\n    async listAllFolders(folderType: string): Promise<Folder[]> {\n        if (folderType in this.allFolders) {\n            return structuredClone(this.allFolders[folderType]);\n        }\n\n        this.allFolders[folderType] = await this.listAllFoldersCallback(folderType);\n        return structuredClone(this.allFolders[folderType]);\n    }\n\n    async listAllFoldersWithPermissions(folderType: string) {\n        const folders = await this.listAllFolders(folderType);\n\n        // Filter folders based on permissions and assign permissions to each folder.\n        const filteredFoldersWithPermissions = await this.filterFolders({\n            folders,\n            rwd: \"r\"\n        });\n\n        await this.assignFolderPermissions(filteredFoldersWithPermissions);\n\n        return filteredFoldersWithPermissions;\n    }\n\n    invalidateCache(folderType?: string) {\n        if (folderType) {\n            if (folderType in this.allFolders) {\n                delete this.allFolders[folderType];\n            }\n        } else {\n            this.allFolders = {};\n        }\n    }\n\n    async listFoldersPermissions(\n        params: ListFolderPermissionsParams\n    ): Promise<FolderPermissionsList> {\n        if (!this.canUseFolderLevelPermissions() || !this.isAuthorizationEnabled()) {\n            return [];\n        }\n\n        const { folderType, foldersList } = params;\n\n        const allFolders = foldersList || (await this.listAllFolders(folderType));\n        const identity = this.getIdentity();\n        const permissions = await this.listPermissions();\n\n        let identityTeam: Team | null;\n        if (this.canUseTeams()) {\n            identityTeam = await this.getIdentityTeam();\n        }\n\n        const processedFolderPermissions: FolderPermissionsListItem[] = [];\n\n        const processFolderPermissions = (folder: Folder) => {\n            if (processedFolderPermissions.some(fp => fp.folderId === folder.id)) {\n                return;\n            }\n\n            // Copy permissions, so we don't modify the original object.\n            const currentFolderPermissions: FolderPermissionsListItem = {\n                folderId: folder.id,\n                // On new folders, permissions can be `null`. Guard against that.\n                permissions: folder.permissions?.map(permission => ({ ...permission })) || []\n            };\n\n            // Check for permissions inherited from parent folder.\n            if (folder.parentId) {\n                const parentFolder = allFolders!.find(f => f.id === folder.parentId)!;\n                if (parentFolder) {\n                    // First check if the parent folder has already been processed.\n                    let processedParentFolderPermissions = processedFolderPermissions.find(\n                        fp => fp.folderId === parentFolder.id\n                    );\n\n                    // If not, process the parent folder.\n                    if (!processedParentFolderPermissions) {\n                        processFolderPermissions(parentFolder);\n                        processedParentFolderPermissions = processedFolderPermissions.find(\n                            fp => fp.folderId === folder.parentId\n                        );\n                    }\n\n                    // If the parent folder has permissions, let's add them to the current folder.\n                    if (processedParentFolderPermissions) {\n                        const isPublicParentFolder =\n                            processedParentFolderPermissions.permissions.some(\n                                p => p.level === \"public\"\n                            );\n\n                        // We inherit parent permissions if:\n                        // 1. the parent folder is not public or...\n                        // 2. ...the parent folder is public, but the current folder doesn't have any permissions set\n                        const mustInherit =\n                            !isPublicParentFolder ||\n                            currentFolderPermissions.permissions.length === 0;\n\n                        if (mustInherit) {\n                            const inheritedPermissions =\n                                processedParentFolderPermissions.permissions.map(p => {\n                                    return {\n                                        ...p,\n                                        inheritedFrom:\n                                            \"parent:\" + processedParentFolderPermissions!.folderId\n                                    };\n                                });\n\n                            currentFolderPermissions.permissions.push(...inheritedPermissions);\n                        }\n                    }\n                }\n            }\n\n            // Let's ensure current identity's permission is included in the permissions array.\n            // We first check if the current identity is already included in the permissions array.\n            // If not, we check if the user has full access or if the team user belongs to has access.\n            const currentIdentityIncludedInPermissions = currentFolderPermissions.permissions.some(\n                p => p.target === `admin:${identity.id}`\n            );\n\n            if (currentIdentityIncludedInPermissions) {\n                // Ensure existing identity permission is always the first one in the array.\n                const currentIdentityPermissionIndex =\n                    currentFolderPermissions.permissions.findIndex(\n                        p => p.target === `admin:${identity.id}`\n                    );\n\n                if (currentIdentityPermissionIndex > 0) {\n                    const [currentIdentityPermission] = currentFolderPermissions.permissions.splice(\n                        currentIdentityPermissionIndex,\n                        1\n                    );\n                    currentFolderPermissions.permissions.unshift(currentIdentityPermission);\n                }\n            } else {\n                // Current identity not included in permissions? Let's add it.\n                let currentIdentityPermission: FolderPermission | null = null;\n\n                // 1. Check if the user has full access.\n                const hasFullAccess = permissions.some(p => p.name === \"*\");\n                if (hasFullAccess) {\n                    currentIdentityPermission = {\n                        target: `admin:${identity.id}`,\n                        level: \"owner\",\n                        inheritedFrom: \"role:full-access\"\n                    };\n                } else if (identityTeam) {\n                    // 2. Check the team user belongs to grants access to the folder.\n                    const teamPermission = currentFolderPermissions.permissions.find(\n                        p => p.target === `team:${identityTeam!.id}`\n                    );\n\n                    if (teamPermission) {\n                        currentIdentityPermission = {\n                            target: `admin:${identity.id}`,\n                            level: teamPermission.level,\n                            inheritedFrom: \"team:\" + identityTeam!.id\n                        };\n                    }\n                }\n\n                if (currentIdentityPermission) {\n                    // If permission is found, let's add it to the beginning of the array.\n                    // We're doing this just because it looks nicer in the UI.\n                    currentFolderPermissions.permissions.unshift(currentIdentityPermission);\n                }\n            }\n\n            // Note that this can only happen with root folders. All other (child) folders will\n            // always have at least one permission (inherited from parent).\n            const mustAddPublicPermission = currentFolderPermissions.permissions.length === 0;\n            if (mustAddPublicPermission) {\n                currentFolderPermissions.permissions = [\n                    {\n                        target: `admin:${identity.id}`,\n                        level: \"public\",\n                        inheritedFrom: \"public\"\n                    }\n                ];\n            }\n\n            processedFolderPermissions.push(currentFolderPermissions);\n        };\n\n        for (let i = 0; i < allFolders!.length; i++) {\n            const folder = allFolders![i];\n            processFolderPermissions(folder);\n        }\n\n        return processedFolderPermissions;\n    }\n\n    async getFolderPermissions(\n        params: GetFolderPermissionsParams\n    ): Promise<FolderPermissionsListItem | undefined> {\n        const { folder, foldersList } = params;\n        const folderPermissionsList = await this.listFoldersPermissions({\n            folderType: folder.type,\n            foldersList\n        });\n\n        return folderPermissionsList.find(fp => fp.folderId === folder.id);\n    }\n\n    async canAccessFolder(params: CanAccessFolderParams) {\n        if (!this.canUseFolderLevelPermissions() || !this.isAuthorizationEnabled()) {\n            return true;\n        }\n\n        const { folder } = params;\n\n        // We check for parent folder access first because the passed folder should be\n        // inaccessible if the parent folder is inaccessible.\n        if (folder.parentId) {\n            let foldersList = params.foldersList;\n            if (!foldersList) {\n                foldersList = await this.listAllFolders(folder.type);\n            }\n\n            const parentFolder = foldersList.find(f => f.id === folder.parentId);\n            if (parentFolder) {\n                const canAccessParentFolder = await this.canAccessFolder({\n                    ...params,\n                    folder: parentFolder\n                });\n\n                if (!canAccessParentFolder) {\n                    return false;\n                }\n            }\n        }\n\n        const folderPermissions = await this.getFolderPermissions({\n            folder,\n            foldersList: params.foldersList\n        });\n\n        const identity = this.getIdentity();\n        const currentIdentityPermission = folderPermissions?.permissions.find(p => {\n            return p.target === `admin:${identity.id}`;\n        });\n\n        if (!currentIdentityPermission) {\n            return false;\n        }\n\n        const { level } = currentIdentityPermission;\n\n        if (params.managePermissions) {\n            return level === \"owner\";\n        }\n\n        // Checking for \"write\" or \"delete\" access. Allow only if the\n        // user is an owner or the folder is public (no FLP assigned).\n        if (params.rwd !== \"r\") {\n            return level === \"owner\" || level === \"public\";\n        }\n\n        return true;\n    }\n\n    async ensureCanAccessFolder(params: CanAccessFolderParams) {\n        const canAccessFolder = await this.canAccessFolder(params);\n        if (!canAccessFolder) {\n            throw new NotAuthorizedError();\n        }\n    }\n\n    canManageFolderPermissions(folder: Folder) {\n        if (!this.canUseFolderLevelPermissions()) {\n            return false;\n        }\n\n        if (!this.isAuthorizationEnabled()) {\n            return true;\n        }\n\n        return this.canAccessFolder({ folder, rwd: \"w\", managePermissions: true });\n    }\n\n    canManageFolderStructure(folder: Folder) {\n        if (!this.canUseFolderLevelPermissions() || !this.isAuthorizationEnabled()) {\n            return true;\n        }\n\n        return this.canAccessFolder({ folder, rwd: \"w\" });\n    }\n\n    canManageFolderContent(folder: Folder) {\n        if (!this.canUseFolderLevelPermissions() || !this.isAuthorizationEnabled()) {\n            return true;\n        }\n\n        return this.canAccessFolderContent({ folder, rwd: \"w\" });\n    }\n\n    async canAccessFolderContent(params: CanAccessFolderContentParams) {\n        if (!this.canUseFolderLevelPermissions() || !this.isAuthorizationEnabled()) {\n            return true;\n        }\n\n        const { folder, foldersList } = params;\n\n        const folderPermissions = await this.getFolderPermissions({\n            folder,\n            foldersList\n        });\n\n        const identity = this.getIdentity();\n        const currentIdentityPermission = folderPermissions?.permissions.find(p => {\n            return p.target === `admin:${identity.id}`;\n        });\n\n        if (!currentIdentityPermission) {\n            return false;\n        }\n\n        // If the user is not an owner and we're checking for \"write\" or\n        // \"delete\" access, then we can immediately return false.\n        if (params.rwd !== \"r\") {\n            const { level } = currentIdentityPermission;\n            return level !== \"viewer\";\n        }\n\n        return true;\n    }\n\n    async ensureCanAccessFolderContent(params: CanAccessFolderContentParams) {\n        const canAccessFolderContent = await this.canAccessFolderContent(params);\n        if (!canAccessFolderContent) {\n            throw new NotAuthorizedError();\n        }\n    }\n\n    async canCreateFolderInRoot() {\n        return true;\n    }\n\n    async filterFolders(params: FilterFoldersParams) {\n        const filteredFolders: Folder[] = [];\n\n        const { folders, rwd } = params;\n        for (let i = 0; i < folders.length; i++) {\n            const folder = folders[i];\n            const canAccessFolder = await this.canAccessFolder({ folder, rwd });\n            if (canAccessFolder) {\n                filteredFolders.push(folder);\n            }\n        }\n\n        return filteredFolders;\n    }\n\n    async assignFolderPermissions(folder: Folder | Folder[]) {\n        const folders = Array.isArray(folder) ? folder : [folder];\n\n        for (let i = 0; i < folders.length; i++) {\n            const folder = folders[i];\n            const folderPermissions = await this.getFolderPermissions({ folder });\n            if (folderPermissions) {\n                folder.permissions = folderPermissions.permissions;\n            } else {\n                folder.permissions = [];\n            }\n        }\n    }\n\n    permissionsIncludeNonInheritedPermissions(folderPermissionsList?: FolderPermission[]) {\n        return folderPermissionsList?.some(p => !p.inheritedFrom);\n    }\n}\n"],"mappings":";;;;;;AAGA,IAAAA,YAAA,GAAAC,OAAA;AAoDO,MAAMC,sBAAsB,CAAC;EAQxBC,UAAU,GAA6B,CAAC,CAAC;EAEjDC,WAAWA,CAACC,MAAoC,EAAE;IAC9C,IAAI,CAACC,WAAW,GAAGD,MAAM,CAACC,WAAW;IACrC,IAAI,CAACC,eAAe,GAAGF,MAAM,CAACE,eAAe;IAC7C,IAAI,CAACC,eAAe,GAAGH,MAAM,CAACG,eAAe;IAC7C,IAAI,CAACC,sBAAsB,GAAGJ,MAAM,CAACK,cAAc;IACnD,IAAI,CAACC,WAAW,GAAGN,MAAM,CAACM,WAAW;IACrC,IAAI,CAACC,4BAA4B,GAAGP,MAAM,CAACO,4BAA4B;IAEvE,IAAI,CAACC,sBAAsB,GAAGR,MAAM,CAACQ,sBAAsB;;IAE3D;IACA;IACA;IACA;IACA;IACA;IACA,IAAI,CAACA,sBAAsB,GAAG,MAAM,IAAI;EAC5C;EAEA,MAAMH,cAAcA,CAACI,UAAkB,EAAqB;IACxD,IAAIA,UAAU,IAAI,IAAI,CAACX,UAAU,EAAE;MAC/B,OAAOY,eAAe,CAAC,IAAI,CAACZ,UAAU,CAACW,UAAU,CAAC,CAAC;IACvD;IAEA,IAAI,CAACX,UAAU,CAACW,UAAU,CAAC,GAAG,MAAM,IAAI,CAACL,sBAAsB,CAACK,UAAU,CAAC;IAC3E,OAAOC,eAAe,CAAC,IAAI,CAACZ,UAAU,CAACW,UAAU,CAAC,CAAC;EACvD;EAEA,MAAME,6BAA6BA,CAACF,UAAkB,EAAE;IACpD,MAAMG,OAAO,GAAG,MAAM,IAAI,CAACP,cAAc,CAACI,UAAU,CAAC;;IAErD;IACA,MAAMI,8BAA8B,GAAG,MAAM,IAAI,CAACC,aAAa,CAAC;MAC5DF,OAAO;MACPG,GAAG,EAAE;IACT,CAAC,CAAC;IAEF,MAAM,IAAI,CAACC,uBAAuB,CAACH,8BAA8B,CAAC;IAElE,OAAOA,8BAA8B;EACzC;EAEAI,eAAeA,CAACR,UAAmB,EAAE;IACjC,IAAIA,UAAU,EAAE;MACZ,IAAIA,UAAU,IAAI,IAAI,CAACX,UAAU,EAAE;QAC/B,OAAO,IAAI,CAACA,UAAU,CAACW,UAAU,CAAC;MACtC;IACJ,CAAC,MAAM;MACH,IAAI,CAACX,UAAU,GAAG,CAAC,CAAC;IACxB;EACJ;EAEA,MAAMoB,sBAAsBA,CACxBlB,MAAmC,EACL;IAC9B,IAAI,CAAC,IAAI,CAACO,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAACC,sBAAsB,CAAC,CAAC,EAAE;MACxE,OAAO,EAAE;IACb;IAEA,MAAM;MAAEC,UAAU;MAAEU;IAAY,CAAC,GAAGnB,MAAM;IAE1C,MAAMF,UAAU,GAAGqB,WAAW,KAAK,MAAM,IAAI,CAACd,cAAc,CAACI,UAAU,CAAC,CAAC;IACzE,MAAMW,QAAQ,GAAG,IAAI,CAACnB,WAAW,CAAC,CAAC;IACnC,MAAMoB,WAAW,GAAG,MAAM,IAAI,CAAClB,eAAe,CAAC,CAAC;IAEhD,IAAImB,YAAyB;IAC7B,IAAI,IAAI,CAAChB,WAAW,CAAC,CAAC,EAAE;MACpBgB,YAAY,GAAG,MAAM,IAAI,CAACpB,eAAe,CAAC,CAAC;IAC/C;IAEA,MAAMqB,0BAAuD,GAAG,EAAE;IAElE,MAAMC,wBAAwB,GAAIC,MAAc,IAAK;MACjD,IAAIF,0BAA0B,CAACG,IAAI,CAACC,EAAE,IAAIA,EAAE,CAACC,QAAQ,KAAKH,MAAM,CAACI,EAAE,CAAC,EAAE;QAClE;MACJ;;MAEA;MACA,MAAMC,wBAAmD,GAAG;QACxDF,QAAQ,EAAEH,MAAM,CAACI,EAAE;QACnB;QACAR,WAAW,EAAEI,MAAM,CAACJ,WAAW,EAAEU,GAAG,CAACC,UAAU,KAAK;UAAE,GAAGA;QAAW,CAAC,CAAC,CAAC,IAAI;MAC/E,CAAC;;MAED;MACA,IAAIP,MAAM,CAACQ,QAAQ,EAAE;QACjB,MAAMC,YAAY,GAAGpC,UAAU,CAAEqC,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACP,EAAE,KAAKJ,MAAM,CAACQ,QAAQ,CAAE;QACrE,IAAIC,YAAY,EAAE;UACd;UACA,IAAIG,gCAAgC,GAAGd,0BAA0B,CAACY,IAAI,CAClER,EAAE,IAAIA,EAAE,CAACC,QAAQ,KAAKM,YAAY,CAACL,EACvC,CAAC;;UAED;UACA,IAAI,CAACQ,gCAAgC,EAAE;YACnCb,wBAAwB,CAACU,YAAY,CAAC;YACtCG,gCAAgC,GAAGd,0BAA0B,CAACY,IAAI,CAC9DR,EAAE,IAAIA,EAAE,CAACC,QAAQ,KAAKH,MAAM,CAACQ,QACjC,CAAC;UACL;;UAEA;UACA,IAAII,gCAAgC,EAAE;YAClC,MAAMC,oBAAoB,GACtBD,gCAAgC,CAAChB,WAAW,CAACK,IAAI,CAC7Ca,CAAC,IAAIA,CAAC,CAACC,KAAK,KAAK,QACrB,CAAC;;YAEL;YACA;YACA;YACA,MAAMC,WAAW,GACb,CAACH,oBAAoB,IACrBR,wBAAwB,CAACT,WAAW,CAACqB,MAAM,KAAK,CAAC;YAErD,IAAID,WAAW,EAAE;cACb,MAAME,oBAAoB,GACtBN,gCAAgC,CAAChB,WAAW,CAACU,GAAG,CAACQ,CAAC,IAAI;gBAClD,OAAO;kBACH,GAAGA,CAAC;kBACJK,aAAa,EACT,SAAS,GAAGP,gCAAgC,CAAET;gBACtD,CAAC;cACL,CAAC,CAAC;cAENE,wBAAwB,CAACT,WAAW,CAACwB,IAAI,CAAC,GAAGF,oBAAoB,CAAC;YACtE;UACJ;QACJ;MACJ;;MAEA;MACA;MACA;MACA,MAAMG,oCAAoC,GAAGhB,wBAAwB,CAACT,WAAW,CAACK,IAAI,CAClFa,CAAC,IAAIA,CAAC,CAACQ,MAAM,KAAM,SAAQ3B,QAAQ,CAACS,EAAG,EAC3C,CAAC;MAED,IAAIiB,oCAAoC,EAAE;QACtC;QACA,MAAME,8BAA8B,GAChClB,wBAAwB,CAACT,WAAW,CAAC4B,SAAS,CAC1CV,CAAC,IAAIA,CAAC,CAACQ,MAAM,KAAM,SAAQ3B,QAAQ,CAACS,EAAG,EAC3C,CAAC;QAEL,IAAImB,8BAA8B,GAAG,CAAC,EAAE;UACpC,MAAM,CAACE,yBAAyB,CAAC,GAAGpB,wBAAwB,CAACT,WAAW,CAAC8B,MAAM,CAC3EH,8BAA8B,EAC9B,CACJ,CAAC;UACDlB,wBAAwB,CAACT,WAAW,CAAC+B,OAAO,CAACF,yBAAyB,CAAC;QAC3E;MACJ,CAAC,MAAM;QACH;QACA,IAAIA,yBAAkD,GAAG,IAAI;;QAE7D;QACA,MAAMG,aAAa,GAAGhC,WAAW,CAACK,IAAI,CAACa,CAAC,IAAIA,CAAC,CAACe,IAAI,KAAK,GAAG,CAAC;QAC3D,IAAID,aAAa,EAAE;UACfH,yBAAyB,GAAG;YACxBH,MAAM,EAAG,SAAQ3B,QAAQ,CAACS,EAAG,EAAC;YAC9BW,KAAK,EAAE,OAAO;YACdI,aAAa,EAAE;UACnB,CAAC;QACL,CAAC,MAAM,IAAItB,YAAY,EAAE;UACrB;UACA,MAAMiC,cAAc,GAAGzB,wBAAwB,CAACT,WAAW,CAACc,IAAI,CAC5DI,CAAC,IAAIA,CAAC,CAACQ,MAAM,KAAM,QAAOzB,YAAY,CAAEO,EAAG,EAC/C,CAAC;UAED,IAAI0B,cAAc,EAAE;YAChBL,yBAAyB,GAAG;cACxBH,MAAM,EAAG,SAAQ3B,QAAQ,CAACS,EAAG,EAAC;cAC9BW,KAAK,EAAEe,cAAc,CAACf,KAAK;cAC3BI,aAAa,EAAE,OAAO,GAAGtB,YAAY,CAAEO;YAC3C,CAAC;UACL;QACJ;QAEA,IAAIqB,yBAAyB,EAAE;UAC3B;UACA;UACApB,wBAAwB,CAACT,WAAW,CAAC+B,OAAO,CAACF,yBAAyB,CAAC;QAC3E;MACJ;;MAEA;MACA;MACA,MAAMM,uBAAuB,GAAG1B,wBAAwB,CAACT,WAAW,CAACqB,MAAM,KAAK,CAAC;MACjF,IAAIc,uBAAuB,EAAE;QACzB1B,wBAAwB,CAACT,WAAW,GAAG,CACnC;UACI0B,MAAM,EAAG,SAAQ3B,QAAQ,CAACS,EAAG,EAAC;UAC9BW,KAAK,EAAE,QAAQ;UACfI,aAAa,EAAE;QACnB,CAAC,CACJ;MACL;MAEArB,0BAA0B,CAACsB,IAAI,CAACf,wBAAwB,CAAC;IAC7D,CAAC;IAED,KAAK,IAAI2B,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG3D,UAAU,CAAE4C,MAAM,EAAEe,CAAC,EAAE,EAAE;MACzC,MAAMhC,MAAM,GAAG3B,UAAU,CAAE2D,CAAC,CAAC;MAC7BjC,wBAAwB,CAACC,MAAM,CAAC;IACpC;IAEA,OAAOF,0BAA0B;EACrC;EAEA,MAAMmC,oBAAoBA,CACtB1D,MAAkC,EACY;IAC9C,MAAM;MAAEyB,MAAM;MAAEN;IAAY,CAAC,GAAGnB,MAAM;IACtC,MAAM2D,qBAAqB,GAAG,MAAM,IAAI,CAACzC,sBAAsB,CAAC;MAC5DT,UAAU,EAAEgB,MAAM,CAACmC,IAAI;MACvBzC;IACJ,CAAC,CAAC;IAEF,OAAOwC,qBAAqB,CAACxB,IAAI,CAACR,EAAE,IAAIA,EAAE,CAACC,QAAQ,KAAKH,MAAM,CAACI,EAAE,CAAC;EACtE;EAEA,MAAMgC,eAAeA,CAAC7D,MAA6B,EAAE;IACjD,IAAI,CAAC,IAAI,CAACO,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAACC,sBAAsB,CAAC,CAAC,EAAE;MACxE,OAAO,IAAI;IACf;IAEA,MAAM;MAAEiB;IAAO,CAAC,GAAGzB,MAAM;;IAEzB;IACA;IACA,IAAIyB,MAAM,CAACQ,QAAQ,EAAE;MACjB,IAAId,WAAW,GAAGnB,MAAM,CAACmB,WAAW;MACpC,IAAI,CAACA,WAAW,EAAE;QACdA,WAAW,GAAG,MAAM,IAAI,CAACd,cAAc,CAACoB,MAAM,CAACmC,IAAI,CAAC;MACxD;MAEA,MAAM1B,YAAY,GAAGf,WAAW,CAACgB,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACP,EAAE,KAAKJ,MAAM,CAACQ,QAAQ,CAAC;MACpE,IAAIC,YAAY,EAAE;QACd,MAAM4B,qBAAqB,GAAG,MAAM,IAAI,CAACD,eAAe,CAAC;UACrD,GAAG7D,MAAM;UACTyB,MAAM,EAAES;QACZ,CAAC,CAAC;QAEF,IAAI,CAAC4B,qBAAqB,EAAE;UACxB,OAAO,KAAK;QAChB;MACJ;IACJ;IAEA,MAAMC,iBAAiB,GAAG,MAAM,IAAI,CAACL,oBAAoB,CAAC;MACtDjC,MAAM;MACNN,WAAW,EAAEnB,MAAM,CAACmB;IACxB,CAAC,CAAC;IAEF,MAAMC,QAAQ,GAAG,IAAI,CAACnB,WAAW,CAAC,CAAC;IACnC,MAAMiD,yBAAyB,GAAGa,iBAAiB,EAAE1C,WAAW,CAACc,IAAI,CAACI,CAAC,IAAI;MACvE,OAAOA,CAAC,CAACQ,MAAM,KAAM,SAAQ3B,QAAQ,CAACS,EAAG,EAAC;IAC9C,CAAC,CAAC;IAEF,IAAI,CAACqB,yBAAyB,EAAE;MAC5B,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEV;IAAM,CAAC,GAAGU,yBAAyB;IAE3C,IAAIlD,MAAM,CAACgE,iBAAiB,EAAE;MAC1B,OAAOxB,KAAK,KAAK,OAAO;IAC5B;;IAEA;IACA;IACA,IAAIxC,MAAM,CAACe,GAAG,KAAK,GAAG,EAAE;MACpB,OAAOyB,KAAK,KAAK,OAAO,IAAIA,KAAK,KAAK,QAAQ;IAClD;IAEA,OAAO,IAAI;EACf;EAEA,MAAMyB,qBAAqBA,CAACjE,MAA6B,EAAE;IACvD,MAAM6D,eAAe,GAAG,MAAM,IAAI,CAACA,eAAe,CAAC7D,MAAM,CAAC;IAC1D,IAAI,CAAC6D,eAAe,EAAE;MAClB,MAAM,IAAIK,+BAAkB,CAAC,CAAC;IAClC;EACJ;EAEAC,0BAA0BA,CAAC1C,MAAc,EAAE;IACvC,IAAI,CAAC,IAAI,CAAClB,4BAA4B,CAAC,CAAC,EAAE;MACtC,OAAO,KAAK;IAChB;IAEA,IAAI,CAAC,IAAI,CAACC,sBAAsB,CAAC,CAAC,EAAE;MAChC,OAAO,IAAI;IACf;IAEA,OAAO,IAAI,CAACqD,eAAe,CAAC;MAAEpC,MAAM;MAAEV,GAAG,EAAE,GAAG;MAAEiD,iBAAiB,EAAE;IAAK,CAAC,CAAC;EAC9E;EAEAI,wBAAwBA,CAAC3C,MAAc,EAAE;IACrC,IAAI,CAAC,IAAI,CAAClB,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAACC,sBAAsB,CAAC,CAAC,EAAE;MACxE,OAAO,IAAI;IACf;IAEA,OAAO,IAAI,CAACqD,eAAe,CAAC;MAAEpC,MAAM;MAAEV,GAAG,EAAE;IAAI,CAAC,CAAC;EACrD;EAEAsD,sBAAsBA,CAAC5C,MAAc,EAAE;IACnC,IAAI,CAAC,IAAI,CAAClB,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAACC,sBAAsB,CAAC,CAAC,EAAE;MACxE,OAAO,IAAI;IACf;IAEA,OAAO,IAAI,CAAC8D,sBAAsB,CAAC;MAAE7C,MAAM;MAAEV,GAAG,EAAE;IAAI,CAAC,CAAC;EAC5D;EAEA,MAAMuD,sBAAsBA,CAACtE,MAAoC,EAAE;IAC/D,IAAI,CAAC,IAAI,CAACO,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAACC,sBAAsB,CAAC,CAAC,EAAE;MACxE,OAAO,IAAI;IACf;IAEA,MAAM;MAAEiB,MAAM;MAAEN;IAAY,CAAC,GAAGnB,MAAM;IAEtC,MAAM+D,iBAAiB,GAAG,MAAM,IAAI,CAACL,oBAAoB,CAAC;MACtDjC,MAAM;MACNN;IACJ,CAAC,CAAC;IAEF,MAAMC,QAAQ,GAAG,IAAI,CAACnB,WAAW,CAAC,CAAC;IACnC,MAAMiD,yBAAyB,GAAGa,iBAAiB,EAAE1C,WAAW,CAACc,IAAI,CAACI,CAAC,IAAI;MACvE,OAAOA,CAAC,CAACQ,MAAM,KAAM,SAAQ3B,QAAQ,CAACS,EAAG,EAAC;IAC9C,CAAC,CAAC;IAEF,IAAI,CAACqB,yBAAyB,EAAE;MAC5B,OAAO,KAAK;IAChB;;IAEA;IACA;IACA,IAAIlD,MAAM,CAACe,GAAG,KAAK,GAAG,EAAE;MACpB,MAAM;QAAEyB;MAAM,CAAC,GAAGU,yBAAyB;MAC3C,OAAOV,KAAK,KAAK,QAAQ;IAC7B;IAEA,OAAO,IAAI;EACf;EAEA,MAAM+B,4BAA4BA,CAACvE,MAAoC,EAAE;IACrE,MAAMsE,sBAAsB,GAAG,MAAM,IAAI,CAACA,sBAAsB,CAACtE,MAAM,CAAC;IACxE,IAAI,CAACsE,sBAAsB,EAAE;MACzB,MAAM,IAAIJ,+BAAkB,CAAC,CAAC;IAClC;EACJ;EAEA,MAAMM,qBAAqBA,CAAA,EAAG;IAC1B,OAAO,IAAI;EACf;EAEA,MAAM1D,aAAaA,CAACd,MAA2B,EAAE;IAC7C,MAAMyE,eAAyB,GAAG,EAAE;IAEpC,MAAM;MAAE7D,OAAO;MAAEG;IAAI,CAAC,GAAGf,MAAM;IAC/B,KAAK,IAAIyD,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG7C,OAAO,CAAC8B,MAAM,EAAEe,CAAC,EAAE,EAAE;MACrC,MAAMhC,MAAM,GAAGb,OAAO,CAAC6C,CAAC,CAAC;MACzB,MAAMI,eAAe,GAAG,MAAM,IAAI,CAACA,eAAe,CAAC;QAAEpC,MAAM;QAAEV;MAAI,CAAC,CAAC;MACnE,IAAI8C,eAAe,EAAE;QACjBY,eAAe,CAAC5B,IAAI,CAACpB,MAAM,CAAC;MAChC;IACJ;IAEA,OAAOgD,eAAe;EAC1B;EAEA,MAAMzD,uBAAuBA,CAACS,MAAyB,EAAE;IACrD,MAAMb,OAAO,GAAG8D,KAAK,CAACC,OAAO,CAAClD,MAAM,CAAC,GAAGA,MAAM,GAAG,CAACA,MAAM,CAAC;IAEzD,KAAK,IAAIgC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG7C,OAAO,CAAC8B,MAAM,EAAEe,CAAC,EAAE,EAAE;MACrC,MAAMhC,MAAM,GAAGb,OAAO,CAAC6C,CAAC,CAAC;MACzB,MAAMM,iBAAiB,GAAG,MAAM,IAAI,CAACL,oBAAoB,CAAC;QAAEjC;MAAO,CAAC,CAAC;MACrE,IAAIsC,iBAAiB,EAAE;QACnBtC,MAAM,CAACJ,WAAW,GAAG0C,iBAAiB,CAAC1C,WAAW;MACtD,CAAC,MAAM;QACHI,MAAM,CAACJ,WAAW,GAAG,EAAE;MAC3B;IACJ;EACJ;EAEAuD,yCAAyCA,CAACjB,qBAA0C,EAAE;IAClF,OAAOA,qBAAqB,EAAEjC,IAAI,CAACa,CAAC,IAAI,CAACA,CAAC,CAACK,aAAa,CAAC;EAC7D;AACJ;AAACiC,OAAA,CAAAhF,sBAAA,GAAAA,sBAAA"}

package/utils/acoRecordId.js

@@ -30,4 +30,6 @@ const removeAcoRecordPrefix = id => {
   }
   return id.substring(WBY_ACO_PREFIX.length);
 };
-exports.removeAcoRecordPrefix = removeAcoRecordPrefix;
+exports.removeAcoRecordPrefix = removeAcoRecordPrefix;
+
+//# sourceMappingURL=acoRecordId.js.map

package/utils/acoRecordId.js.map

@@ -1 +1 @@
-{"version":3,"names":["WBY_ACO_PREFIX","attachAcoRecordPrefix","id","startsWith","removeAcoRecordPrefix","substring","length"],"sources":["acoRecordId.ts"],"sourcesContent":["/**\n * !!! DO NOT CHANGE THIS !!!\n * If this is changed, you will need to create new migration which changes the IDs for the users.\n *\n * packages/migrations/src/migrations/5.35.0/006/ddb/PageDataMigration.ts:236\n * packages/migrations/src/migrations/5.35.0/006/ddb-es/PageDataMigration.ts:419\n */\nconst WBY_ACO_PREFIX = \"wby-aco-\";\n/**\n * 006\n * PageDataMigration in ddb-es and ddb\n */\n\nexport const attachAcoRecordPrefix = (id: string) => {\n    if (id.startsWith(WBY_ACO_PREFIX)) {\n        return id;\n    }\n    return `${WBY_ACO_PREFIX}${id}`;\n};\n\nexport const removeAcoRecordPrefix = (id: string) => {\n    if (id.startsWith(WBY_ACO_PREFIX) === false) {\n        return id;\n    }\n    return id.substring(WBY_ACO_PREFIX.length);\n};\n"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMA,cAAc,GAAG,UAAU;AACjC;AACA;AACA;AACA;;AAEO,MAAMC,qBAAqB,GAAIC,EAAU,IAAK;EACjD,IAAIA,EAAE,CAACC,UAAU,CAACH,cAAc,CAAC,EAAE;IAC/B,OAAOE,EAAE;EACb;EACA,OAAQ,GAAEF,cAAe,GAAEE,EAAG,EAAC;AACnC,CAAC;AAAC;AAEK,MAAME,qBAAqB,GAAIF,EAAU,IAAK;EACjD,IAAIA,EAAE,CAACC,UAAU,CAACH,cAAc,CAAC,KAAK,KAAK,EAAE;IACzC,OAAOE,EAAE;EACb;EACA,OAAOA,EAAE,CAACG,SAAS,CAACL,cAAc,CAACM,MAAM,CAAC;AAC9C,CAAC;AAAC"}
+{"version":3,"names":["WBY_ACO_PREFIX","attachAcoRecordPrefix","id","startsWith","exports","removeAcoRecordPrefix","substring","length"],"sources":["acoRecordId.ts"],"sourcesContent":["/**\n * !!! DO NOT CHANGE THIS !!!\n * If this is changed, you will need to create new migration which changes the IDs for the users.\n *\n * packages/migrations/src/migrations/5.35.0/006/ddb/PageDataMigration.ts:236\n * packages/migrations/src/migrations/5.35.0/006/ddb-es/PageDataMigration.ts:419\n */\nconst WBY_ACO_PREFIX = \"wby-aco-\";\n/**\n * 006\n * PageDataMigration in ddb-es and ddb\n */\n\nexport const attachAcoRecordPrefix = (id: string) => {\n    if (id.startsWith(WBY_ACO_PREFIX)) {\n        return id;\n    }\n    return `${WBY_ACO_PREFIX}${id}`;\n};\n\nexport const removeAcoRecordPrefix = (id: string) => {\n    if (id.startsWith(WBY_ACO_PREFIX) === false) {\n        return id;\n    }\n    return id.substring(WBY_ACO_PREFIX.length);\n};\n"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMA,cAAc,GAAG,UAAU;AACjC;AACA;AACA;AACA;;AAEO,MAAMC,qBAAqB,GAAIC,EAAU,IAAK;EACjD,IAAIA,EAAE,CAACC,UAAU,CAACH,cAAc,CAAC,EAAE;IAC/B,OAAOE,EAAE;EACb;EACA,OAAQ,GAAEF,cAAe,GAAEE,EAAG,EAAC;AACnC,CAAC;AAACE,OAAA,CAAAH,qBAAA,GAAAA,qBAAA;AAEK,MAAMI,qBAAqB,GAAIH,EAAU,IAAK;EACjD,IAAIA,EAAE,CAACC,UAAU,CAACH,cAAc,CAAC,KAAK,KAAK,EAAE;IACzC,OAAOE,EAAE;EACb;EACA,OAAOA,EAAE,CAACI,SAAS,CAACN,cAAc,CAACO,MAAM,CAAC;AAC9C,CAAC;AAACH,OAAA,CAAAC,qBAAA,GAAAA,qBAAA"}

package/utils/createListSort.js

@@ -10,4 +10,6 @@ const createListSort = sort => {
   }
   return Object.keys(sort).map(key => `${key}_${sort[key]}`);
 };
-exports.createListSort = createListSort;
+exports.createListSort = createListSort;
+
+//# sourceMappingURL=createListSort.js.map

package/utils/createListSort.js.map

@@ -1 +1 @@
-{"version":3,"names":["createListSort","sort","Object","keys","map","key"],"sources":["createListSort.ts"],"sourcesContent":["import { ListSort } from \"~/types\";\n\nexport const createListSort = (sort?: ListSort): string[] | undefined => {\n    if (!sort) {\n        return;\n    }\n\n    return Object.keys(sort).map(key => `${key}_${sort[key]}`);\n};\n"],"mappings":";;;;;;AAEO,MAAMA,cAAc,GAAIC,IAAe,IAA2B;EACrE,IAAI,CAACA,IAAI,EAAE;IACP;EACJ;EAEA,OAAOC,MAAM,CAACC,IAAI,CAACF,IAAI,CAAC,CAACG,GAAG,CAACC,GAAG,IAAK,GAAEA,GAAI,IAAGJ,IAAI,CAACI,GAAG,CAAE,EAAC,CAAC;AAC9D,CAAC;AAAC"}
+{"version":3,"names":["createListSort","sort","Object","keys","map","key","exports"],"sources":["createListSort.ts"],"sourcesContent":["import { ListSort } from \"~/types\";\n\nexport const createListSort = (sort?: ListSort): string[] | undefined => {\n    if (!sort) {\n        return;\n    }\n\n    return Object.keys(sort).map(key => `${key}_${sort[key]}`);\n};\n"],"mappings":";;;;;;AAEO,MAAMA,cAAc,GAAIC,IAAe,IAA2B;EACrE,IAAI,CAACA,IAAI,EAAE;IACP;EACJ;EAEA,OAAOC,MAAM,CAACC,IAAI,CAACF,IAAI,CAAC,CAACG,GAAG,CAACC,GAAG,IAAK,GAAEA,GAAI,IAAGJ,IAAI,CAACI,GAAG,CAAE,EAAC,CAAC;AAC9D,CAAC;AAACC,OAAA,CAAAN,cAAA,GAAAA,cAAA"}

package/utils/createModelField.js

@@ -34,4 +34,6 @@ const createModelField = params => {
     predefinedValues
   };
 };
-exports.createModelField = createModelField;
+exports.createModelField = createModelField;
+
+//# sourceMappingURL=createModelField.js.map

package/utils/createModelField.js.map

@@ -1 +1 @@
-{"version":3,"names":["createModelField","params","label","fieldId","initialFieldId","type","settings","listValidation","validation","multipleValues","predefinedValues","values","enabled","camelCase","id","storageId"],"sources":["createModelField.ts"],"sourcesContent":["import { CmsModelField } from \"@webiny/api-headless-cms/types\";\nimport camelCase from \"lodash/camelCase\";\n\nexport interface CreateModelFieldParams\n    extends Omit<CmsModelField, \"id\" | \"storageId\" | \"fieldId\"> {\n    fieldId?: string;\n}\n\nexport const createModelField = (params: CreateModelFieldParams): CmsModelField => {\n    const {\n        label,\n        fieldId: initialFieldId,\n        type,\n        settings = {},\n        listValidation = [],\n        validation = [],\n        multipleValues = false,\n        predefinedValues = {\n            values: [],\n            enabled: false\n        }\n    } = params;\n\n    const fieldId = initialFieldId ? camelCase(initialFieldId) : camelCase(label);\n\n    return {\n        id: fieldId,\n        storageId: `${type}@${fieldId}`,\n        fieldId,\n        label,\n        type,\n        settings,\n        listValidation,\n        validation,\n        multipleValues,\n        predefinedValues\n    };\n};\n"],"mappings":";;;;;;;AACA;AAOO,MAAMA,gBAAgB,GAAIC,MAA8B,IAAoB;EAC/E,MAAM;IACFC,KAAK;IACLC,OAAO,EAAEC,cAAc;IACvBC,IAAI;IACJC,QAAQ,GAAG,CAAC,CAAC;IACbC,cAAc,GAAG,EAAE;IACnBC,UAAU,GAAG,EAAE;IACfC,cAAc,GAAG,KAAK;IACtBC,gBAAgB,GAAG;MACfC,MAAM,EAAE,EAAE;MACVC,OAAO,EAAE;IACb;EACJ,CAAC,GAAGX,MAAM;EAEV,MAAME,OAAO,GAAGC,cAAc,GAAG,IAAAS,kBAAS,EAACT,cAAc,CAAC,GAAG,IAAAS,kBAAS,EAACX,KAAK,CAAC;EAE7E,OAAO;IACHY,EAAE,EAAEX,OAAO;IACXY,SAAS,EAAG,GAAEV,IAAK,IAAGF,OAAQ,EAAC;IAC/BA,OAAO;IACPD,KAAK;IACLG,IAAI;IACJC,QAAQ;IACRC,cAAc;IACdC,UAAU;IACVC,cAAc;IACdC;EACJ,CAAC;AACL,CAAC;AAAC"}
+{"version":3,"names":["_camelCase","_interopRequireDefault","require","createModelField","params","label","fieldId","initialFieldId","type","settings","listValidation","validation","multipleValues","predefinedValues","values","enabled","camelCase","id","storageId","exports"],"sources":["createModelField.ts"],"sourcesContent":["import { CmsModelField } from \"@webiny/api-headless-cms/types\";\nimport camelCase from \"lodash/camelCase\";\n\nexport interface CreateModelFieldParams\n    extends Omit<CmsModelField, \"id\" | \"storageId\" | \"fieldId\"> {\n    fieldId?: string;\n}\n\nexport const createModelField = (params: CreateModelFieldParams): CmsModelField => {\n    const {\n        label,\n        fieldId: initialFieldId,\n        type,\n        settings = {},\n        listValidation = [],\n        validation = [],\n        multipleValues = false,\n        predefinedValues = {\n            values: [],\n            enabled: false\n        }\n    } = params;\n\n    const fieldId = initialFieldId ? camelCase(initialFieldId) : camelCase(label);\n\n    return {\n        id: fieldId,\n        storageId: `${type}@${fieldId}`,\n        fieldId,\n        label,\n        type,\n        settings,\n        listValidation,\n        validation,\n        multipleValues,\n        predefinedValues\n    };\n};\n"],"mappings":";;;;;;;AACA,IAAAA,UAAA,GAAAC,sBAAA,CAAAC,OAAA;AAOO,MAAMC,gBAAgB,GAAIC,MAA8B,IAAoB;EAC/E,MAAM;IACFC,KAAK;IACLC,OAAO,EAAEC,cAAc;IACvBC,IAAI;IACJC,QAAQ,GAAG,CAAC,CAAC;IACbC,cAAc,GAAG,EAAE;IACnBC,UAAU,GAAG,EAAE;IACfC,cAAc,GAAG,KAAK;IACtBC,gBAAgB,GAAG;MACfC,MAAM,EAAE,EAAE;MACVC,OAAO,EAAE;IACb;EACJ,CAAC,GAAGX,MAAM;EAEV,MAAME,OAAO,GAAGC,cAAc,GAAG,IAAAS,kBAAS,EAACT,cAAc,CAAC,GAAG,IAAAS,kBAAS,EAACX,KAAK,CAAC;EAE7E,OAAO;IACHY,EAAE,EAAEX,OAAO;IACXY,SAAS,EAAG,GAAEV,IAAK,IAAGF,OAAQ,EAAC;IAC/BA,OAAO;IACPD,KAAK;IACLG,IAAI;IACJC,QAAQ;IACRC,cAAc;IACdC,UAAU;IACVC,cAAc;IACdC;EACJ,CAAC;AACL,CAAC;AAACM,OAAA,CAAAhB,gBAAA,GAAAA,gBAAA"}

package/utils/createOperationsWrapper.js

@@ -26,4 +26,6 @@ const createOperationsWrapper = params => {
     withModel
   };
 };
-exports.createOperationsWrapper = createOperationsWrapper;
+exports.createOperationsWrapper = createOperationsWrapper;
+
+//# sourceMappingURL=createOperationsWrapper.js.map

package/utils/createOperationsWrapper.js.map

@@ -1 +1 @@
-{"version":3,"names":["createOperationsWrapper","params","cms","security","modelName","withModel","cb","withoutAuthorization","model","getModel","WebinyError","result"],"sources":["createOperationsWrapper.ts"],"sourcesContent":["import { CreateAcoStorageOperationsParams } from \"~/createAcoStorageOperations\";\nimport { CmsModel } from \"@webiny/api-headless-cms/types\";\nimport WebinyError from \"@webiny/error\";\n\ninterface CreateOperationsWrapperParams extends CreateAcoStorageOperationsParams {\n    modelName: string;\n}\n\nexport const createOperationsWrapper = (params: CreateOperationsWrapperParams) => {\n    const { cms, security, modelName } = params;\n\n    const withModel = async <TResult>(\n        cb: (model: CmsModel) => Promise<TResult>\n    ): Promise<TResult> => {\n        return security.withoutAuthorization(async () => {\n            const model = await cms.getModel(modelName);\n\n            if (!model) {\n                throw new WebinyError(\n                    `Could not find \"${modelName}\" model.`,\n                    \"MODEL_NOT_FOUND_ERROR\"\n                );\n            }\n\n            const result = await cb(model);\n\n            return result;\n        });\n    };\n\n    return {\n        withModel\n    };\n};\n"],"mappings":";;;;;;;AAEA;AAMO,MAAMA,uBAAuB,GAAIC,MAAqC,IAAK;EAC9E,MAAM;IAAEC,GAAG;IAAEC,QAAQ;IAAEC;EAAU,CAAC,GAAGH,MAAM;EAE3C,MAAMI,SAAS,GAAG,MACdC,EAAyC,IACtB;IACnB,OAAOH,QAAQ,CAACI,oBAAoB,CAAC,YAAY;MAC7C,MAAMC,KAAK,GAAG,MAAMN,GAAG,CAACO,QAAQ,CAACL,SAAS,CAAC;MAE3C,IAAI,CAACI,KAAK,EAAE;QACR,MAAM,IAAIE,cAAW,CAChB,mBAAkBN,SAAU,UAAS,EACtC,uBAAuB,CAC1B;MACL;MAEA,MAAMO,MAAM,GAAG,MAAML,EAAE,CAACE,KAAK,CAAC;MAE9B,OAAOG,MAAM;IACjB,CAAC,CAAC;EACN,CAAC;EAED,OAAO;IACHN;EACJ,CAAC;AACL,CAAC;AAAC"}
+{"version":3,"names":["_error","_interopRequireDefault","require","createOperationsWrapper","params","cms","security","modelName","withModel","cb","withoutAuthorization","model","getModel","WebinyError","result","exports"],"sources":["createOperationsWrapper.ts"],"sourcesContent":["import { CreateAcoStorageOperationsParams } from \"~/createAcoStorageOperations\";\nimport { CmsModel } from \"@webiny/api-headless-cms/types\";\nimport WebinyError from \"@webiny/error\";\n\ninterface CreateOperationsWrapperParams extends CreateAcoStorageOperationsParams {\n    modelName: string;\n}\n\nexport const createOperationsWrapper = (params: CreateOperationsWrapperParams) => {\n    const { cms, security, modelName } = params;\n\n    const withModel = async <TResult>(\n        cb: (model: CmsModel) => Promise<TResult>\n    ): Promise<TResult> => {\n        return security.withoutAuthorization(async () => {\n            const model = await cms.getModel(modelName);\n\n            if (!model) {\n                throw new WebinyError(\n                    `Could not find \"${modelName}\" model.`,\n                    \"MODEL_NOT_FOUND_ERROR\"\n                );\n            }\n\n            const result = await cb(model);\n\n            return result;\n        });\n    };\n\n    return {\n        withModel\n    };\n};\n"],"mappings":";;;;;;;AAEA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAMO,MAAMC,uBAAuB,GAAIC,MAAqC,IAAK;EAC9E,MAAM;IAAEC,GAAG;IAAEC,QAAQ;IAAEC;EAAU,CAAC,GAAGH,MAAM;EAE3C,MAAMI,SAAS,GAAG,MACdC,EAAyC,IACtB;IACnB,OAAOH,QAAQ,CAACI,oBAAoB,CAAC,YAAY;MAC7C,MAAMC,KAAK,GAAG,MAAMN,GAAG,CAACO,QAAQ,CAACL,SAAS,CAAC;MAE3C,IAAI,CAACI,KAAK,EAAE;QACR,MAAM,IAAIE,cAAW,CAChB,mBAAkBN,SAAU,UAAS,EACtC,uBACJ,CAAC;MACL;MAEA,MAAMO,MAAM,GAAG,MAAML,EAAE,CAACE,KAAK,CAAC;MAE9B,OAAOG,MAAM;IACjB,CAAC,CAAC;EACN,CAAC;EAED,OAAO;IACHN;EACJ,CAAC;AACL,CAAC;AAACO,OAAA,CAAAZ,uBAAA,GAAAA,uBAAA"}

package/utils/decorators/CmsEntriesCrudDecorators.d.ts

@@ -0,0 +1,11 @@
+import { AcoContext } from "../../types";
+declare type Context = Pick<AcoContext, "aco" | "cms">;
+interface EntryManagerCrudDecoratorsParams {
+    context: Context;
+}
+export declare class CmsEntriesCrudDecorators {
+    private readonly context;
+    constructor({ context }: EntryManagerCrudDecoratorsParams);
+    decorate(): void;
+}
+export {};