@webiny/api-aco 0.0.0-unstable.a4637c5ce6 → 0.0.0-unstable.a85ef555b2

package/features/flp/ListFlps/ListFlpsUseCase.js

@@ -0,0 +1,11 @@
+class ListFlpsUseCase {
+    constructor(list){
+        this.list = list;
+    }
+    async execute(params) {
+        return this.list(params);
+    }
+}
+export { ListFlpsUseCase };
+
+//# sourceMappingURL=ListFlpsUseCase.js.map

package/features/flp/ListFlps/ListFlpsUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/flp/ListFlps/ListFlpsUseCase.js","sources":["../../../../src/features/flp/ListFlps/ListFlpsUseCase.ts"],"sourcesContent":["import type { ListFlpsUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport type { AcoFolderLevelPermissionsCrud, ListFlpsParams } from \"~/flp/flp.types.js\";\n\nexport class ListFlpsUseCase implements UseCaseAbstraction.Interface {\n    private readonly list: AcoFolderLevelPermissionsCrud[\"list\"];\n\n    constructor(list: AcoFolderLevelPermissionsCrud[\"list\"]) {\n        this.list = list;\n    }\n\n    async execute(params: ListFlpsParams) {\n        return this.list(params);\n    }\n}\n"],"names":["ListFlpsUseCase","list","params"],"mappings":"AAGO,MAAMA;IAGT,YAAYC,IAA2C,CAAE;QACrD,IAAI,CAAC,IAAI,GAAGA;IAChB;IAEA,MAAM,QAAQC,MAAsB,EAAE;QAClC,OAAO,IAAI,CAAC,IAAI,CAACA;IACrB;AACJ"}

package/features/flp/ListFlps/abstractions.d.ts

@@ -0,0 +1,17 @@
+import type { FolderLevelPermission } from "../../../types.js";
+interface ListFlpsParams {
+    where: {
+        path_startsWith?: string;
+        parentId?: string;
+        type: string;
+    };
+}
+export interface IListFlps {
+    execute: (params: ListFlpsParams) => Promise<FolderLevelPermission[]>;
+}
+/** List folder-level permissions. */
+export declare const ListFlpsUseCase: import("@webiny/di").Abstraction<IListFlps>;
+export declare namespace ListFlpsUseCase {
+    type Interface = IListFlps;
+}
+export {};

package/features/flp/ListFlps/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const ListFlpsUseCase = createAbstraction("ListFlpsUseCase");
+export { ListFlpsUseCase };
+
+//# sourceMappingURL=abstractions.js.map

package/features/flp/ListFlps/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/flp/ListFlps/abstractions.js","sources":["../../../../src/features/flp/ListFlps/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { FolderLevelPermission } from \"~/types.js\";\n\ninterface ListFlpsParams {\n    where: {\n        path_startsWith?: string;\n        parentId?: string;\n        type: string;\n    };\n}\n\nexport interface IListFlps {\n    execute: (params: ListFlpsParams) => Promise<FolderLevelPermission[]>;\n}\n\n/** List folder-level permissions. */\nexport const ListFlpsUseCase = createAbstraction<IListFlps>(\"ListFlpsUseCase\");\n\nexport namespace ListFlpsUseCase {\n    export type Interface = IListFlps;\n}\n"],"names":["ListFlpsUseCase","createAbstraction"],"mappings":";AAgBO,MAAMA,kBAAkBC,kBAA6B"}

package/features/flp/ListFlps/decorators/ListFlpsWithCodeFlps.d.ts

@@ -0,0 +1,13 @@
+import { ListFlpsUseCase } from "../abstractions.js";
+import { CodeFlpsProvider } from "../../../../features/flp/shared/index.js";
+import type { FolderLevelPermission, ListFlpsParams } from "../../../../flp/flp.types.js";
+declare class ListFlpsWithCodeFlpsImpl implements ListFlpsUseCase.Interface {
+    private codeFlpsProvider;
+    private decoratee;
+    constructor(codeFlpsProvider: CodeFlpsProvider.Interface, decoratee: ListFlpsUseCase.Interface);
+    execute(params: ListFlpsParams): Promise<FolderLevelPermission[]>;
+}
+export declare const ListFlpsWithCodeFlps: typeof ListFlpsWithCodeFlpsImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("../abstractions.js").IListFlps>;
+};
+export {};

package/features/flp/ListFlps/decorators/ListFlpsWithCodeFlps.js

@@ -0,0 +1,27 @@
+import { ListFlpsUseCase } from "../abstractions.js";
+import { CodeFlpMerger, CodeFlpsProvider } from "../../shared/index.js";
+class ListFlpsWithCodeFlpsImpl {
+    constructor(codeFlpsProvider, decoratee){
+        this.codeFlpsProvider = codeFlpsProvider;
+        this.decoratee = decoratee;
+    }
+    async execute(params) {
+        const flps = await this.decoratee.execute(params);
+        return Promise.all(flps.map(async (flp)=>{
+            const codePermissions = await this.codeFlpsProvider.getPermissions({
+                type: flp.type,
+                path: flp.path
+            });
+            return CodeFlpMerger.merge(flp, codePermissions);
+        }));
+    }
+}
+const ListFlpsWithCodeFlps = ListFlpsUseCase.createDecorator({
+    decorator: ListFlpsWithCodeFlpsImpl,
+    dependencies: [
+        CodeFlpsProvider
+    ]
+});
+export { ListFlpsWithCodeFlps };
+
+//# sourceMappingURL=ListFlpsWithCodeFlps.js.map

package/features/flp/ListFlps/decorators/ListFlpsWithCodeFlps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/flp/ListFlps/decorators/ListFlpsWithCodeFlps.js","sources":["../../../../../src/features/flp/ListFlps/decorators/ListFlpsWithCodeFlps.ts"],"sourcesContent":["import { ListFlpsUseCase } from \"../abstractions.js\";\nimport { CodeFlpMerger, CodeFlpsProvider } from \"~/features/flp/shared/index.js\";\nimport type { FolderLevelPermission, ListFlpsParams } from \"~/flp/flp.types.js\";\n\nclass ListFlpsWithCodeFlpsImpl implements ListFlpsUseCase.Interface {\n    constructor(\n        private codeFlpsProvider: CodeFlpsProvider.Interface,\n        private decoratee: ListFlpsUseCase.Interface\n    ) {}\n\n    async execute(params: ListFlpsParams): Promise<FolderLevelPermission[]> {\n        const flps = await this.decoratee.execute(params);\n\n        return Promise.all(\n            flps.map(async flp => {\n                const codePermissions = await this.codeFlpsProvider.getPermissions({\n                    type: flp.type,\n                    path: flp.path\n                });\n\n                return CodeFlpMerger.merge(flp, codePermissions);\n            })\n        );\n    }\n}\n\nexport const ListFlpsWithCodeFlps = ListFlpsUseCase.createDecorator({\n    decorator: ListFlpsWithCodeFlpsImpl,\n    dependencies: [CodeFlpsProvider]\n});\n"],"names":["ListFlpsWithCodeFlpsImpl","codeFlpsProvider","decoratee","params","flps","Promise","flp","codePermissions","CodeFlpMerger","ListFlpsWithCodeFlps","ListFlpsUseCase","CodeFlpsProvider"],"mappings":";;AAIA,MAAMA;IACF,YACYC,gBAA4C,EAC5CC,SAAoC,CAC9C;aAFUD,gBAAgB,GAAhBA;aACAC,SAAS,GAATA;IACT;IAEH,MAAM,QAAQC,MAAsB,EAAoC;QACpE,MAAMC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAACD;QAE1C,OAAOE,QAAQ,GAAG,CACdD,KAAK,GAAG,CAAC,OAAME;YACX,MAAMC,kBAAkB,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC;gBAC/D,MAAMD,IAAI,IAAI;gBACd,MAAMA,IAAI,IAAI;YAClB;YAEA,OAAOE,cAAc,KAAK,CAACF,KAAKC;QACpC;IAER;AACJ;AAEO,MAAME,uBAAuBC,gBAAgB,eAAe,CAAC;IAChE,WAAWV;IACX,cAAc;QAACW;KAAiB;AACpC"}

package/features/flp/ListFlps/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const ListFlpsFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/flp/ListFlps/feature.js

@@ -0,0 +1,13 @@
+import { createFeature } from "@webiny/feature/api";
+import { ListFlpsUseCase } from "./ListFlpsUseCase.js";
+import { ListFlpsUseCase as external_abstractions_js_ListFlpsUseCase } from "./abstractions.js";
+import { AcoFlpCrud } from "../../folder/shared/abstractions.js";
+const ListFlpsFeature = createFeature({
+    name: "ListFlpsFeature",
+    register (container) {
+        container.registerFactory(external_abstractions_js_ListFlpsUseCase, ()=>new ListFlpsUseCase(container.resolve(AcoFlpCrud).list));
+    }
+});
+export { ListFlpsFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/flp/ListFlps/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/flp/ListFlps/feature.js","sources":["../../../../src/features/flp/ListFlps/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { ListFlpsUseCase } from \"./ListFlpsUseCase.js\";\nimport { ListFlpsUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { AcoFlpCrud } from \"~/features/folder/shared/abstractions.js\";\n\nexport const ListFlpsFeature = createFeature({\n    name: \"ListFlpsFeature\",\n    register(container) {\n        container.registerFactory(UseCaseAbstraction, () => {\n            return new ListFlpsUseCase(container.resolve(AcoFlpCrud).list);\n        });\n    }\n});\n"],"names":["ListFlpsFeature","createFeature","container","UseCaseAbstraction","ListFlpsUseCase","AcoFlpCrud"],"mappings":";;;;AAKO,MAAMA,kBAAkBC,cAAc;IACzC,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,eAAe,CAACC,0CAAoB,IACnC,IAAIC,gBAAgBF,UAAU,OAAO,CAACG,YAAY,IAAI;IAErE;AACJ"}

package/features/flp/ListFlps/index.d.ts

@@ -0,0 +1 @@
+export * from "./abstractions.js";

package/features/flp/ListFlps/index.js

@@ -0,0 +1 @@
+export * from "./abstractions.js";

package/features/flp/UpdateFlp/UpdateFlpUseCase.d.ts

@@ -0,0 +1,26 @@
+import type { UpdateFlpParams, UpdateFlpUseCase as UseCaseAbstraction } from "./abstractions.js";
+import type { AcoFlpCrud } from "../../../features/folder/shared/abstractions.js";
+import type { ListFoldersUseCase } from "../../../features/folder/ListFolders/index.js";
+import type { FolderModelProvider } from "../../../domain/folder/abstractions.js";
+import type { UpdateEntryUseCase } from "@webiny/api-headless-cms/features/contentEntry/UpdateEntry/index.js";
+import type { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/abstractions.js";
+export declare class UpdateFlpUseCase implements UseCaseAbstraction.Interface {
+    private flpCrud;
+    private listFoldersUseCase;
+    private folderModelProvider;
+    private updateEntryUseCase;
+    private identityContext;
+    private isCloseToTimeout?;
+    private handleTimeout?;
+    private readonly completed;
+    private readonly flpsToUpdate;
+    private timedOut;
+    private completedThisRun;
+    constructor(flpCrud: AcoFlpCrud.Interface, listFoldersUseCase: ListFoldersUseCase.Interface, folderModelProvider: FolderModelProvider.Interface, updateEntryUseCase: UpdateEntryUseCase.Interface, identityContext: IdentityContext.Interface);
+    execute(params: UpdateFlpParams): Promise<void>;
+    private collectBranchForUpdate;
+    private stopForTimeout;
+    private executeBatchUpdate;
+    private listDirectChildren;
+    private getFlp;
+}

package/features/flp/UpdateFlp/UpdateFlpUseCase.js

@@ -0,0 +1,147 @@
+import { WebinyError } from "@webiny/error";
+import { Path } from "../../../utils/Path.js";
+import { Permissions, ROOT_FOLDER } from "@webiny/shared-aco";
+import { EntryId } from "@webiny/api-headless-cms/exports/api/cms/entry.js";
+class UpdateFlpUseCase {
+    constructor(flpCrud, listFoldersUseCase, folderModelProvider, updateEntryUseCase, identityContext){
+        this.flpCrud = flpCrud;
+        this.listFoldersUseCase = listFoldersUseCase;
+        this.folderModelProvider = folderModelProvider;
+        this.updateEntryUseCase = updateEntryUseCase;
+        this.identityContext = identityContext;
+        this.completed = new Set();
+        this.flpsToUpdate = new Map();
+        this.timedOut = false;
+        this.completedThisRun = 0;
+    }
+    async execute(params) {
+        this.isCloseToTimeout = params.isCloseToTimeout;
+        this.handleTimeout = params.handleTimeout;
+        this.completed.clear();
+        this.timedOut = false;
+        this.completedThisRun = 0;
+        if (params.completed) params.completed.forEach((id)=>this.completed.add(id));
+        try {
+            const { folder } = params;
+            if (!folder) throw new WebinyError("Missing `folder`, I can't update the FLP record.", "ERROR_UPDATING_FLP_USE_CASE_FOLDER_NOT_PROVIDED", {
+                folder
+            });
+            const flp = await this.getFlp(folder);
+            const parentFlp = folder.parentId ? await this.flpCrud.get(folder.parentId) : null;
+            this.flpsToUpdate.set(folder.id, {
+                slug: folder.slug,
+                parentId: folder.parentId ?? ROOT_FOLDER,
+                path: Path.create(folder.slug, parentFlp?.path),
+                permissions: Permissions.create(folder.permissions, parentFlp)
+            });
+            const directChildren = await this.listDirectChildren(flp);
+            for (const child of directChildren){
+                await this.collectBranchForUpdate(child, flp);
+                if (this.timedOut) return;
+            }
+            await this.executeBatchUpdate();
+        } catch (error) {
+            this.flpsToUpdate.clear();
+            this.completed.clear();
+            throw WebinyError.from(error, {
+                message: "Error while updating FLP",
+                code: "ERROR_UPDATING_FLP_USE_CASE"
+            });
+        }
+    }
+    async collectBranchForUpdate(flp, parentFlp) {
+        if (this.completed.has(flp.id)) return;
+        if (this.isCloseToTimeout?.()) return void await this.stopForTimeout();
+        const parentFlpData = this.flpsToUpdate.get(parentFlp.id);
+        const currentParentFlp = {
+            ...parentFlp,
+            ...parentFlpData && {
+                ...parentFlpData
+            }
+        };
+        this.flpsToUpdate.set(flp.id, {
+            slug: flp.slug,
+            parentId: flp.parentId,
+            path: Path.create(flp.slug, currentParentFlp.path),
+            permissions: Permissions.create(flp.permissions, currentParentFlp)
+        });
+        const children = await this.listDirectChildren(flp);
+        for (const child of children){
+            await this.collectBranchForUpdate(child, flp);
+            if (this.timedOut) return;
+        }
+        for (const child of children)this.completed.delete(child.id);
+        this.completed.add(flp.id);
+        this.completedThisRun++;
+    }
+    async stopForTimeout() {
+        this.timedOut = true;
+        await this.executeBatchUpdate();
+        if (0 === this.completedThisRun) throw new WebinyError("The FLP update ran out of time before finishing any folder, so continuing would repeat the same work.", "UPDATE_FLP_NO_PROGRESS");
+        const completed = Array.from(this.completed);
+        this.handleTimeout?.(completed);
+    }
+    async executeBatchUpdate() {
+        const folderModel = await this.folderModelProvider.get();
+        try {
+            const items = Array.from(this.flpsToUpdate.entries()).map(([id, { slug, parentId, path, permissions }])=>({
+                    id,
+                    data: {
+                        slug,
+                        parentId,
+                        path,
+                        permissions
+                    }
+                }));
+            await this.flpCrud.batchUpdate(items);
+            for (const item of items){
+                const { id, data } = item;
+                const entryId = EntryId.from(id);
+                const updateResult = await this.updateEntryUseCase.execute(folderModel, entryId.toString(), {
+                    values: {
+                        path: data.path
+                    }
+                });
+                if (updateResult.isFail()) throw updateResult.error;
+            }
+        } catch (error) {
+            throw WebinyError.from(error, {
+                message: "Error while executing batch update of FLPs",
+                code: "BATCH_UPDATE_FLP_ERROR",
+                data: {
+                    items: Array.from(this.flpsToUpdate.keys())
+                }
+            });
+        } finally{
+            this.flpsToUpdate.clear();
+        }
+    }
+    async listDirectChildren(flp) {
+        const result = await this.identityContext.withoutAuthorization(()=>this.listFoldersUseCase.execute({
+                where: {
+                    type: flp.type,
+                    parentId: flp.id
+                }
+            }));
+        if (result.isFail()) throw result.error;
+        return await Promise.all(result.value.folders.map((folder)=>this.getFlp(folder)));
+    }
+    async getFlp({ id, type, parentId, slug, permissions }) {
+        const flp = await this.flpCrud.get(id);
+        if (!flp) {
+            const parentFlp = parentId ? await this.flpCrud.get(parentId) : null;
+            return await this.flpCrud.create({
+                id,
+                type,
+                slug,
+                parentId: parentId ?? ROOT_FOLDER,
+                path: Path.create(slug, parentFlp?.path),
+                permissions: Permissions.create(permissions, parentFlp)
+            });
+        }
+        return flp;
+    }
+}
+export { UpdateFlpUseCase };
+
+//# sourceMappingURL=UpdateFlpUseCase.js.map

package/features/flp/UpdateFlp/UpdateFlpUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/flp/UpdateFlp/UpdateFlpUseCase.js","sources":["../../../../src/features/flp/UpdateFlp/UpdateFlpUseCase.ts"],"sourcesContent":["import { WebinyError } from \"@webiny/error\";\nimport { Path } from \"~/utils/Path.js\";\nimport { Permissions, ROOT_FOLDER } from \"@webiny/shared-aco\";\nimport type { UpdateFlpParams, UpdateFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport type { Folder, FolderLevelPermission, FolderPermission } from \"~/types.js\";\nimport type { AcoFlpCrud } from \"~/features/folder/shared/abstractions.js\";\nimport type { ListFoldersUseCase } from \"~/features/folder/ListFolders/index.js\";\nimport type { FolderModelProvider } from \"~/domain/folder/abstractions.js\";\nimport { EntryId } from \"@webiny/api-headless-cms/exports/api/cms/entry.js\";\nimport type { UpdateEntryUseCase } from \"@webiny/api-headless-cms/features/contentEntry/UpdateEntry/index.js\";\nimport type { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/abstractions.js\";\n\ninterface FlpUpdateData {\n    parentId: string;\n    slug: string;\n    path: string;\n    permissions: FolderPermission[];\n}\n\nexport class UpdateFlpUseCase implements UseCaseAbstraction.Interface {\n    private isCloseToTimeout?: () => boolean;\n    private handleTimeout?: (updated: string[]) => void;\n\n    /*\n     * Folders whose whole subtree has been written, carried across task runs as `completed` so a\n     * continued run skips them. A folder is added only after all of its descendants are written: one\n     * entered but not finished when time ran out has to be walked again, or the rest of its subtree\n     * would never be updated.\n     *\n     * Only the topmost finished folders are kept. When a folder completes, its children leave the\n     * set, since skipping the folder already skips them. The set travels in the task input on every\n     * continuation, and listing every finished folder would outgrow it on exactly the large trees\n     * that need continuing.\n     */\n    private readonly completed: Set<string> = new Set();\n    private readonly flpsToUpdate: Map<string, FlpUpdateData> = new Map();\n    private timedOut = false;\n    // How many folders this run finished, so a run that finished none can refuse to hand over.\n    private completedThisRun = 0;\n\n    constructor(\n        private flpCrud: AcoFlpCrud.Interface,\n        private listFoldersUseCase: ListFoldersUseCase.Interface,\n        private folderModelProvider: FolderModelProvider.Interface,\n        private updateEntryUseCase: UpdateEntryUseCase.Interface,\n        private identityContext: IdentityContext.Interface\n    ) {}\n\n    async execute(params: UpdateFlpParams): Promise<void> {\n        this.isCloseToTimeout = params.isCloseToTimeout;\n        this.handleTimeout = params.handleTimeout;\n\n        // Fresh per run, so an instance that ever gets reused does not carry the last run's state.\n        this.completed.clear();\n        this.timedOut = false;\n        this.completedThisRun = 0;\n\n        if (params.completed) {\n            params.completed.forEach(id => this.completed.add(id));\n        }\n\n        try {\n            const { folder } = params;\n\n            if (!folder) {\n                throw new WebinyError(\n                    \"Missing `folder`, I can't update the FLP record.\",\n                    \"ERROR_UPDATING_FLP_USE_CASE_FOLDER_NOT_PROVIDED\",\n                    { folder }\n                );\n            }\n\n            const flp = await this.getFlp(folder);\n            const parentFlp = folder.parentId ? await this.flpCrud.get(folder.parentId) : null;\n\n            // Add the root folder to the update collection\n            this.flpsToUpdate.set(folder.id, {\n                slug: folder.slug,\n                parentId: folder.parentId ?? ROOT_FOLDER,\n                path: Path.create(folder.slug, parentFlp?.path),\n                permissions: Permissions.create(folder.permissions, parentFlp)\n            });\n\n            // Get direct children and process each branch completely\n            const directChildren = await this.listDirectChildren(flp);\n\n            for (const child of directChildren) {\n                await this.collectBranchForUpdate(child, flp);\n                if (this.timedOut) {\n                    return;\n                }\n            }\n\n            // Execute batch update\n            await this.executeBatchUpdate();\n        } catch (error) {\n            // Clear the update collection in case of error\n            this.flpsToUpdate.clear();\n            this.completed.clear();\n            throw WebinyError.from(error, {\n                message: \"Error while updating FLP\",\n                code: \"ERROR_UPDATING_FLP_USE_CASE\"\n            });\n        }\n    }\n\n    private async collectBranchForUpdate(\n        flp: FolderLevelPermission,\n        parentFlp: FolderLevelPermission\n    ): Promise<void> {\n        if (this.completed.has(flp.id)) {\n            return;\n        }\n\n        if (this.isCloseToTimeout?.()) {\n            await this.stopForTimeout();\n            return;\n        }\n\n        // Get the parent's permissions from the update collection if available\n        const parentFlpData = this.flpsToUpdate.get(parentFlp.id);\n        const currentParentFlp = {\n            ...parentFlp,\n            ...(parentFlpData && { ...parentFlpData })\n        };\n\n        // Add the FLP to the update collection with inherited permissions\n        this.flpsToUpdate.set(flp.id, {\n            slug: flp.slug,\n            parentId: flp.parentId,\n            path: Path.create(flp.slug, currentParentFlp.path),\n            permissions: Permissions.create(flp.permissions, currentParentFlp)\n        });\n\n        // Process all children of this folder before moving to siblings\n        const children = await this.listDirectChildren(flp);\n\n        for (const child of children) {\n            // Pass the current FLP as the parent for the child\n            await this.collectBranchForUpdate(child, flp);\n            if (this.timedOut) {\n                return;\n            }\n        }\n\n        // Only now is everything below this folder collected.\n        for (const child of children) {\n            this.completed.delete(child.id);\n        }\n        this.completed.add(flp.id);\n        this.completedThisRun++;\n    }\n\n    /*\n     * Writes what has been collected and hands over to a continued run. Every level of the walk\n     * checks `timedOut` and stops, rather than carrying on with its remaining children.\n     *\n     * A run that finished no folder would hand the next run the same input, which would do the same\n     * work and hand over again, forever. That fails the task instead.\n     */\n    private async stopForTimeout(): Promise<void> {\n        this.timedOut = true;\n        await this.executeBatchUpdate();\n\n        if (this.completedThisRun === 0) {\n            throw new WebinyError(\n                \"The FLP update ran out of time before finishing any folder, so continuing would repeat the same work.\",\n                \"UPDATE_FLP_NO_PROGRESS\"\n            );\n        }\n\n        const completed = Array.from(this.completed);\n        this.handleTimeout?.(completed);\n    }\n\n    private async executeBatchUpdate(): Promise<void> {\n        const folderModel = await this.folderModelProvider.get();\n        try {\n            const items = Array.from(this.flpsToUpdate.entries()).map(\n                ([id, { slug, parentId, path, permissions }]) => {\n                    return {\n                        id,\n                        data: {\n                            slug,\n                            parentId,\n                            path,\n                            permissions\n                        }\n                    };\n                }\n            );\n\n            await this.flpCrud.batchUpdate(items);\n\n            // Update all folders with the new path\n            for (const item of items) {\n                const { id, data } = item;\n                // Directly update the folder in CMS storage to bypass any folder update event triggers.\n                const entryId = EntryId.from(id);\n                const updateResult = await this.updateEntryUseCase.execute(\n                    folderModel,\n                    entryId.toString(),\n                    { values: { path: data.path } }\n                );\n                if (updateResult.isFail()) {\n                    throw updateResult.error;\n                }\n            }\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while executing batch update of FLPs\",\n                code: \"BATCH_UPDATE_FLP_ERROR\",\n                data: {\n                    items: Array.from(this.flpsToUpdate.keys())\n                }\n            });\n        } finally {\n            /*\n             * Clear the update collection after the batch update. `completed` is kept: it is what a\n             * continued run needs to know.\n             */\n            this.flpsToUpdate.clear();\n        }\n    }\n\n    private async listDirectChildren(flp: FolderLevelPermission): Promise<FolderLevelPermission[]> {\n        const result = await this.identityContext.withoutAuthorization(() => {\n            return this.listFoldersUseCase.execute({\n                where: {\n                    type: flp.type,\n                    parentId: flp.id\n                }\n            });\n        });\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return await Promise.all(result.value.folders.map(folder => this.getFlp(folder)));\n    }\n\n    private async getFlp({\n        id,\n        type,\n        parentId,\n        slug,\n        permissions\n    }: Folder): Promise<FolderLevelPermission> {\n        const flp = await this.flpCrud.get(id);\n\n        if (!flp) {\n            const parentFlp = parentId ? await this.flpCrud.get(parentId) : null;\n\n            return await this.flpCrud.create({\n                id,\n                type,\n                slug,\n                parentId: parentId ?? ROOT_FOLDER,\n                path: Path.create(slug, parentFlp?.path),\n                permissions: Permissions.create(permissions, parentFlp)\n            });\n        }\n\n        return flp;\n    }\n}\n"],"names":["UpdateFlpUseCase","flpCrud","listFoldersUseCase","folderModelProvider","updateEntryUseCase","identityContext","Set","Map","params","id","folder","WebinyError","flp","parentFlp","ROOT_FOLDER","Path","Permissions","directChildren","child","error","parentFlpData","currentParentFlp","children","completed","Array","folderModel","items","slug","parentId","path","permissions","item","data","entryId","EntryId","updateResult","result","Promise","type"],"mappings":";;;;AAmBO,MAAMA;IAqBT,YACYC,OAA6B,EAC7BC,kBAAgD,EAChDC,mBAAkD,EAClDC,kBAAgD,EAChDC,eAA0C,CACpD;aALUJ,OAAO,GAAPA;aACAC,kBAAkB,GAAlBA;aACAC,mBAAmB,GAAnBA;aACAC,kBAAkB,GAAlBA;aACAC,eAAe,GAAfA;QAZX,KACgB,SAAS,GAAgB,IAAIC;aAC7B,YAAY,GAA+B,IAAIC;aACxD,QAAQ,GAAG;aAEX,gBAAgB,GAAG;IAQxB;IAEH,MAAM,QAAQC,MAAuB,EAAiB;QAClD,IAAI,CAAC,gBAAgB,GAAGA,OAAO,gBAAgB;QAC/C,IAAI,CAAC,aAAa,GAAGA,OAAO,aAAa;QAGzC,IAAI,CAAC,SAAS,CAAC,KAAK;QACpB,IAAI,CAAC,QAAQ,GAAG;QAChB,IAAI,CAAC,gBAAgB,GAAG;QAExB,IAAIA,OAAO,SAAS,EAChBA,OAAO,SAAS,CAAC,OAAO,CAACC,CAAAA,KAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAACA;QAGtD,IAAI;YACA,MAAM,EAAEC,MAAM,EAAE,GAAGF;YAEnB,IAAI,CAACE,QACD,MAAM,IAAIC,YACN,oDACA,mDACA;gBAAED;YAAO;YAIjB,MAAME,MAAM,MAAM,IAAI,CAAC,MAAM,CAACF;YAC9B,MAAMG,YAAYH,OAAO,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAACA,OAAO,QAAQ,IAAI;YAG9E,IAAI,CAAC,YAAY,CAAC,GAAG,CAACA,OAAO,EAAE,EAAE;gBAC7B,MAAMA,OAAO,IAAI;gBACjB,UAAUA,OAAO,QAAQ,IAAII;gBAC7B,MAAMC,KAAK,MAAM,CAACL,OAAO,IAAI,EAAEG,WAAW;gBAC1C,aAAaG,YAAY,MAAM,CAACN,OAAO,WAAW,EAAEG;YACxD;YAGA,MAAMI,iBAAiB,MAAM,IAAI,CAAC,kBAAkB,CAACL;YAErD,KAAK,MAAMM,SAASD,eAAgB;gBAChC,MAAM,IAAI,CAAC,sBAAsB,CAACC,OAAON;gBACzC,IAAI,IAAI,CAAC,QAAQ,EACb;YAER;YAGA,MAAM,IAAI,CAAC,kBAAkB;QACjC,EAAE,OAAOO,OAAO;YAEZ,IAAI,CAAC,YAAY,CAAC,KAAK;YACvB,IAAI,CAAC,SAAS,CAAC,KAAK;YACpB,MAAMR,YAAY,IAAI,CAACQ,OAAO;gBAC1B,SAAS;gBACT,MAAM;YACV;QACJ;IACJ;IAEA,MAAc,uBACVP,GAA0B,EAC1BC,SAAgC,EACnB;QACb,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAACD,IAAI,EAAE,GACzB;QAGJ,IAAI,IAAI,CAAC,gBAAgB,MAAM,YAC3B,MAAM,IAAI,CAAC,cAAc;QAK7B,MAAMQ,gBAAgB,IAAI,CAAC,YAAY,CAAC,GAAG,CAACP,UAAU,EAAE;QACxD,MAAMQ,mBAAmB;YACrB,GAAGR,SAAS;YACZ,GAAIO,iBAAiB;gBAAE,GAAGA,aAAa;YAAC,CAAC;QAC7C;QAGA,IAAI,CAAC,YAAY,CAAC,GAAG,CAACR,IAAI,EAAE,EAAE;YAC1B,MAAMA,IAAI,IAAI;YACd,UAAUA,IAAI,QAAQ;YACtB,MAAMG,KAAK,MAAM,CAACH,IAAI,IAAI,EAAES,iBAAiB,IAAI;YACjD,aAAaL,YAAY,MAAM,CAACJ,IAAI,WAAW,EAAES;QACrD;QAGA,MAAMC,WAAW,MAAM,IAAI,CAAC,kBAAkB,CAACV;QAE/C,KAAK,MAAMM,SAASI,SAAU;YAE1B,MAAM,IAAI,CAAC,sBAAsB,CAACJ,OAAON;YACzC,IAAI,IAAI,CAAC,QAAQ,EACb;QAER;QAGA,KAAK,MAAMM,SAASI,SAChB,IAAI,CAAC,SAAS,CAAC,MAAM,CAACJ,MAAM,EAAE;QAElC,IAAI,CAAC,SAAS,CAAC,GAAG,CAACN,IAAI,EAAE;QACzB,IAAI,CAAC,gBAAgB;IACzB;IASA,MAAc,iBAAgC;QAC1C,IAAI,CAAC,QAAQ,GAAG;QAChB,MAAM,IAAI,CAAC,kBAAkB;QAE7B,IAAI,AAA0B,MAA1B,IAAI,CAAC,gBAAgB,EACrB,MAAM,IAAID,YACN,yGACA;QAIR,MAAMY,YAAYC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS;QAC3C,IAAI,CAAC,aAAa,GAAGD;IACzB;IAEA,MAAc,qBAAoC;QAC9C,MAAME,cAAc,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG;QACtD,IAAI;YACA,MAAMC,QAAQF,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,GAAG,CACrD,CAAC,CAACf,IAAI,EAAEkB,IAAI,EAAEC,QAAQ,EAAEC,IAAI,EAAEC,WAAW,EAAE,CAAC,GACjC;oBACHrB;oBACA,MAAM;wBACFkB;wBACAC;wBACAC;wBACAC;oBACJ;gBACJ;YAIR,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAACJ;YAG/B,KAAK,MAAMK,QAAQL,MAAO;gBACtB,MAAM,EAAEjB,EAAE,EAAEuB,IAAI,EAAE,GAAGD;gBAErB,MAAME,UAAUC,QAAQ,IAAI,CAACzB;gBAC7B,MAAM0B,eAAe,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CACtDV,aACAQ,QAAQ,QAAQ,IAChB;oBAAE,QAAQ;wBAAE,MAAMD,KAAK,IAAI;oBAAC;gBAAE;gBAElC,IAAIG,aAAa,MAAM,IACnB,MAAMA,aAAa,KAAK;YAEhC;QACJ,EAAE,OAAOhB,OAAO;YACZ,MAAMR,YAAY,IAAI,CAACQ,OAAO;gBAC1B,SAAS;gBACT,MAAM;gBACN,MAAM;oBACF,OAAOK,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI;gBAC5C;YACJ;QACJ,SAAU;YAKN,IAAI,CAAC,YAAY,CAAC,KAAK;QAC3B;IACJ;IAEA,MAAc,mBAAmBZ,GAA0B,EAAoC;QAC3F,MAAMwB,SAAS,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,IACpD,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;gBACnC,OAAO;oBACH,MAAMxB,IAAI,IAAI;oBACd,UAAUA,IAAI,EAAE;gBACpB;YACJ;QAGJ,IAAIwB,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;QAGtB,OAAO,MAAMC,QAAQ,GAAG,CAACD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC1B,CAAAA,SAAU,IAAI,CAAC,MAAM,CAACA;IAC5E;IAEA,MAAc,OAAO,EACjBD,EAAE,EACF6B,IAAI,EACJV,QAAQ,EACRD,IAAI,EACJG,WAAW,EACN,EAAkC;QACvC,MAAMlB,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAACH;QAEnC,IAAI,CAACG,KAAK;YACN,MAAMC,YAAYe,WAAW,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAACA,YAAY;YAEhE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC7BnB;gBACA6B;gBACAX;gBACA,UAAUC,YAAYd;gBACtB,MAAMC,KAAK,MAAM,CAACY,MAAMd,WAAW;gBACnC,aAAaG,YAAY,MAAM,CAACc,aAAajB;YACjD;QACJ;QAEA,OAAOD;IACX;AACJ"}

package/features/flp/UpdateFlp/abstractions.d.ts

@@ -0,0 +1,19 @@
+import type { Folder } from "../../../folder/folder.types.js";
+export interface UpdateFlpParams {
+    folder: Folder;
+    /**
+     * Folders whose whole subtree an earlier run of the same update already wrote. Passed back
+     * through `handleTimeout`, so a continued run skips them.
+     */
+    completed?: string[];
+    isCloseToTimeout?: () => boolean;
+    handleTimeout?: (completed: string[]) => void;
+}
+export interface IUpdateFlpUseCase {
+    execute: (params: UpdateFlpParams) => Promise<void>;
+}
+/** Update a folder-level permission. */
+export declare const UpdateFlpUseCase: import("@webiny/di").Abstraction<IUpdateFlpUseCase>;
+export declare namespace UpdateFlpUseCase {
+    type Interface = IUpdateFlpUseCase;
+}

package/features/flp/UpdateFlp/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const UpdateFlpUseCase = createAbstraction("UpdateFlpUseCase");
+export { UpdateFlpUseCase };
+
+//# sourceMappingURL=abstractions.js.map

package/features/flp/UpdateFlp/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/flp/UpdateFlp/abstractions.js","sources":["../../../../src/features/flp/UpdateFlp/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Folder } from \"~/folder/folder.types.js\";\n\nexport interface UpdateFlpParams {\n    folder: Folder;\n    /**\n     * Folders whose whole subtree an earlier run of the same update already wrote. Passed back\n     * through `handleTimeout`, so a continued run skips them.\n     */\n    completed?: string[];\n    isCloseToTimeout?: () => boolean;\n    handleTimeout?: (completed: string[]) => void;\n}\n\n// Use Case Abstraction\nexport interface IUpdateFlpUseCase {\n    execute: (params: UpdateFlpParams) => Promise<void>;\n}\n\n/** Update a folder-level permission. */\nexport const UpdateFlpUseCase = createAbstraction<IUpdateFlpUseCase>(\"UpdateFlpUseCase\");\n\nexport namespace UpdateFlpUseCase {\n    export type Interface = IUpdateFlpUseCase;\n}\n"],"names":["UpdateFlpUseCase","createAbstraction"],"mappings":";AAoBO,MAAMA,mBAAmBC,kBAAqC"}

package/features/flp/UpdateFlp/feature.d.ts

@@ -0,0 +1,5 @@
+import type { Container } from "@webiny/di";
+export declare const UpdateFlpFeature: {
+    name: string;
+    register(container: Container): void;
+};

package/features/flp/UpdateFlp/feature.js

@@ -0,0 +1,17 @@
+import { createFeature } from "@webiny/feature/api";
+import { UpdateFlpUseCase } from "./UpdateFlpUseCase.js";
+import { UpdateFlpUseCase as external_abstractions_js_UpdateFlpUseCase } from "./abstractions.js";
+import { AcoFlpCrud } from "../../folder/shared/abstractions.js";
+import { ListFoldersUseCase } from "../../folder/ListFolders/index.js";
+import { FolderModelProvider } from "../../../domain/folder/abstractions.js";
+import { UpdateEntryUseCase } from "@webiny/api-headless-cms/features/contentEntry/UpdateEntry/index.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/abstractions.js";
+const UpdateFlpFeature = createFeature({
+    name: "UpdateFlp",
+    register (container) {
+        container.registerFactory(external_abstractions_js_UpdateFlpUseCase, ()=>new UpdateFlpUseCase(container.resolve(AcoFlpCrud), container.resolve(ListFoldersUseCase), container.resolve(FolderModelProvider), container.resolve(UpdateEntryUseCase), container.resolve(IdentityContext)));
+    }
+});
+export { UpdateFlpFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/flp/UpdateFlp/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/flp/UpdateFlp/feature.js","sources":["../../../../src/features/flp/UpdateFlp/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport type { Container } from \"@webiny/di\";\nimport { UpdateFlpUseCase } from \"./UpdateFlpUseCase.js\";\nimport { UpdateFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { AcoFlpCrud } from \"~/features/folder/shared/abstractions.js\";\nimport { ListFoldersUseCase } from \"~/features/folder/ListFolders/index.js\";\nimport { FolderModelProvider } from \"~/domain/folder/abstractions.js\";\nimport { UpdateEntryUseCase } from \"@webiny/api-headless-cms/features/contentEntry/UpdateEntry/index.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/abstractions.js\";\n\nexport const UpdateFlpFeature = createFeature({\n    name: \"UpdateFlp\",\n    register(container: Container) {\n        container.registerFactory(UseCaseAbstraction, () => {\n            return new UpdateFlpUseCase(\n                container.resolve(AcoFlpCrud),\n                container.resolve(ListFoldersUseCase),\n                container.resolve(FolderModelProvider),\n                container.resolve(UpdateEntryUseCase),\n                container.resolve(IdentityContext)\n            );\n        });\n    }\n});\n"],"names":["UpdateFlpFeature","createFeature","container","UseCaseAbstraction","UpdateFlpUseCase","AcoFlpCrud","ListFoldersUseCase","FolderModelProvider","UpdateEntryUseCase","IdentityContext"],"mappings":";;;;;;;;AAUO,MAAMA,mBAAmBC,cAAc;IAC1C,MAAM;IACN,UAASC,SAAoB;QACzBA,UAAU,eAAe,CAACC,2CAAoB,IACnC,IAAIC,iBACPF,UAAU,OAAO,CAACG,aAClBH,UAAU,OAAO,CAACI,qBAClBJ,UAAU,OAAO,CAACK,sBAClBL,UAAU,OAAO,CAACM,qBAClBN,UAAU,OAAO,CAACO;IAG9B;AACJ"}

package/features/flp/UpdateFlp/index.d.ts

@@ -0,0 +1,2 @@
+export { UpdateFlpFeature } from "./feature.js";
+export { UpdateFlpUseCase } from "./abstractions.js";

package/features/flp/UpdateFlp/index.js

@@ -0,0 +1,2 @@
+export { UpdateFlpFeature } from "./feature.js";
+export { UpdateFlpUseCase } from "./abstractions.js";

package/features/flp/UpdateFlpOnFolderUpdated/UpdateFlpOnFolderUpdatedHandler.d.ts

@@ -0,0 +1,17 @@
+import { TaskService } from "@webiny/api-core/features/task/TaskService/index.js";
+import { Logger } from "@webiny/api-core/features/logger/index.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/abstractions.js";
+import type { FolderAfterUpdateEvent } from "../../../features/folder/UpdateFolder/events.js";
+import { FolderAfterUpdateEventHandler } from "../../../features/folder/UpdateFolder/index.js";
+declare class UpdateFlpOnFolderUpdatedHandlerImpl implements FolderAfterUpdateEventHandler.Interface {
+    private identityContext;
+    private tasks;
+    private logger;
+    constructor(identityContext: IdentityContext.Interface, tasks: TaskService.Interface, logger: Logger.Interface);
+    handle(event: FolderAfterUpdateEvent): Promise<void>;
+    private logFailure;
+}
+export declare const UpdateFlpOnFolderUpdatedHandler: typeof UpdateFlpOnFolderUpdatedHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/eventPublisher").IEventHandler<import("@webiny/api-core/features/eventPublisher").DomainEvent<import("../../folder/UpdateFolder/abstractions").FolderAfterUpdatePayload>>>;
+};
+export {};

package/features/flp/UpdateFlpOnFolderUpdated/UpdateFlpOnFolderUpdatedHandler.js

@@ -0,0 +1,44 @@
+import { TaskService } from "@webiny/api-core/features/task/TaskService/index.js";
+import { Logger } from "@webiny/api-core/features/logger/index.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/abstractions.js";
+import { UPDATE_FLP_TASK_ID } from "../../../flp/tasks/index.js";
+import { FolderAfterUpdateEventHandler } from "../../folder/UpdateFolder/index.js";
+class UpdateFlpOnFolderUpdatedHandlerImpl {
+    constructor(identityContext, tasks, logger){
+        this.identityContext = identityContext;
+        this.tasks = tasks;
+        this.logger = logger;
+    }
+    async handle(event) {
+        const { folder } = event.payload;
+        try {
+            const result = await this.tasks.trigger({
+                definition: UPDATE_FLP_TASK_ID,
+                input: {
+                    folder,
+                    notifyIdentityId: this.identityContext.getIdentity()?.id
+                }
+            });
+            if (result.isFail()) this.logFailure(folder.id, result.error);
+        } catch (error) {
+            this.logFailure(folder.id, error);
+        }
+    }
+    logFailure(folderId, error) {
+        this.logger.error({
+            error,
+            folderId
+        }, "Could not trigger the task that updates the FLP records of the folder and its subtree.");
+    }
+}
+const UpdateFlpOnFolderUpdatedHandler = FolderAfterUpdateEventHandler.createImplementation({
+    implementation: UpdateFlpOnFolderUpdatedHandlerImpl,
+    dependencies: [
+        IdentityContext,
+        TaskService,
+        Logger
+    ]
+});
+export { UpdateFlpOnFolderUpdatedHandler };
+
+//# sourceMappingURL=UpdateFlpOnFolderUpdatedHandler.js.map

package/features/flp/UpdateFlpOnFolderUpdated/UpdateFlpOnFolderUpdatedHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/flp/UpdateFlpOnFolderUpdated/UpdateFlpOnFolderUpdatedHandler.js","sources":["../../../../src/features/flp/UpdateFlpOnFolderUpdated/UpdateFlpOnFolderUpdatedHandler.ts"],"sourcesContent":["import { TaskService } from \"@webiny/api-core/features/task/TaskService/index.js\";\nimport { Logger } from \"@webiny/api-core/features/logger/index.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/abstractions.js\";\nimport type { FolderAfterUpdateEvent } from \"~/features/folder/UpdateFolder/events.js\";\nimport type { IUpdateFlpTaskInput } from \"~/types.js\";\nimport { UPDATE_FLP_TASK_ID } from \"~/flp/tasks/index.js\";\nimport { FolderAfterUpdateEventHandler } from \"~/features/folder/UpdateFolder/index.js\";\n\n/*\n * Folder reads report permissions from the FLP records, and a change rewrites the folder's record\n * and every descendant's. The task does that later, so it also tells the admin once all of them are\n * written, and it needs to know whom to tell.\n */\nclass UpdateFlpOnFolderUpdatedHandlerImpl implements FolderAfterUpdateEventHandler.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private tasks: TaskService.Interface,\n        private logger: Logger.Interface\n    ) {}\n\n    async handle(event: FolderAfterUpdateEvent): Promise<void> {\n        const { folder } = event.payload;\n\n        try {\n            const result = await this.tasks.trigger<IUpdateFlpTaskInput>({\n                definition: UPDATE_FLP_TASK_ID,\n                // Nobody to tell when there is no identity, as in some system calls.\n                input: { folder, notifyIdentityId: this.identityContext.getIdentity()?.id }\n            });\n            if (result.isFail()) {\n                this.logFailure(folder.id, result.error);\n            }\n        } catch (error) {\n            this.logFailure(folder.id, error);\n        }\n    }\n\n    /*\n     * The folder change is already saved, so it stands. But the FLP records of the folder and its\n     * subtree keep the old permissions, and this log is the only trace of why.\n     */\n    private logFailure(folderId: string, error: unknown): void {\n        this.logger.error(\n            { error, folderId },\n            \"Could not trigger the task that updates the FLP records of the folder and its subtree.\"\n        );\n    }\n}\n\nexport const UpdateFlpOnFolderUpdatedHandler = FolderAfterUpdateEventHandler.createImplementation({\n    implementation: UpdateFlpOnFolderUpdatedHandlerImpl,\n    dependencies: [IdentityContext, TaskService, Logger]\n});\n"],"names":["UpdateFlpOnFolderUpdatedHandlerImpl","identityContext","tasks","logger","event","folder","result","UPDATE_FLP_TASK_ID","error","folderId","UpdateFlpOnFolderUpdatedHandler","FolderAfterUpdateEventHandler","IdentityContext","TaskService","Logger"],"mappings":";;;;;AAaA,MAAMA;IACF,YACYC,eAA0C,EAC1CC,KAA4B,EAC5BC,MAAwB,CAClC;aAHUF,eAAe,GAAfA;aACAC,KAAK,GAALA;aACAC,MAAM,GAANA;IACT;IAEH,MAAM,OAAOC,KAA6B,EAAiB;QACvD,MAAM,EAAEC,MAAM,EAAE,GAAGD,MAAM,OAAO;QAEhC,IAAI;YACA,MAAME,SAAS,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB;gBACzD,YAAYC;gBAEZ,OAAO;oBAAEF;oBAAQ,kBAAkB,IAAI,CAAC,eAAe,CAAC,WAAW,IAAI;gBAAG;YAC9E;YACA,IAAIC,OAAO,MAAM,IACb,IAAI,CAAC,UAAU,CAACD,OAAO,EAAE,EAAEC,OAAO,KAAK;QAE/C,EAAE,OAAOE,OAAO;YACZ,IAAI,CAAC,UAAU,CAACH,OAAO,EAAE,EAAEG;QAC/B;IACJ;IAMQ,WAAWC,QAAgB,EAAED,KAAc,EAAQ;QACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CACb;YAAEA;YAAOC;QAAS,GAClB;IAER;AACJ;AAEO,MAAMC,kCAAkCC,8BAA8B,oBAAoB,CAAC;IAC9F,gBAAgBX;IAChB,cAAc;QAACY;QAAiBC;QAAaC;KAAO;AACxD"}

package/features/flp/UpdateFlpOnFolderUpdated/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const UpdateFlpOnFolderUpdatedFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/flp/UpdateFlpOnFolderUpdated/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { UpdateFlpOnFolderUpdatedHandler } from "./UpdateFlpOnFolderUpdatedHandler.js";
+const UpdateFlpOnFolderUpdatedFeature = createFeature({
+    name: "UpdateFlpOnFolderUpdated",
+    register (container) {
+        container.register(UpdateFlpOnFolderUpdatedHandler);
+    }
+});
+export { UpdateFlpOnFolderUpdatedFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/flp/UpdateFlpOnFolderUpdated/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/flp/UpdateFlpOnFolderUpdated/feature.js","sources":["../../../../src/features/flp/UpdateFlpOnFolderUpdated/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { UpdateFlpOnFolderUpdatedHandler } from \"./UpdateFlpOnFolderUpdatedHandler.js\";\n\nexport const UpdateFlpOnFolderUpdatedFeature = createFeature({\n    name: \"UpdateFlpOnFolderUpdated\",\n    register(container) {\n        container.register(UpdateFlpOnFolderUpdatedHandler);\n    }\n});\n"],"names":["UpdateFlpOnFolderUpdatedFeature","createFeature","container","UpdateFlpOnFolderUpdatedHandler"],"mappings":";;AAGO,MAAMA,kCAAkCC,cAAc;IACzD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/features/flp/UpdateFlpOnFolderUpdated/index.d.ts

@@ -0,0 +1 @@
+export { UpdateFlpOnFolderUpdatedFeature } from "./feature.js";

package/features/flp/UpdateFlpOnFolderUpdated/index.js

@@ -0,0 +1 @@
+export { UpdateFlpOnFolderUpdatedFeature } from "./feature.js";

package/features/flp/shared/CodeFlpMerger.d.ts

@@ -0,0 +1,26 @@
+import type { FolderLevelPermission, FolderPermission } from "../../../flp/flp.types.js";
+export declare class CodeFlpMerger {
+    /**
+     * Merge code-defined permissions into a stored FLP record.
+     *
+     * A code-defined permission always wins over a stored one for the same target, and that takes
+     * both steps below — ordering alone is not enough, because the two downstream consumers pick a
+     * target's permission in different ways:
+     *
+     * - `CanAccessFolder` takes the first match (`permissions.find(p => p.target === ...)`), so code
+     *   permissions go first.
+     * - `DefaultPermissionsMerger` instead collects *every* permission for the identity and reduces
+     *   them by access level, preferring `no-access` and then `owner`. A leftover duplicate would
+     *   join that reduce and could outrank the code-defined entry — a stored `owner` would beat a
+     *   code-defined `viewer`. Dropping the stored permission for a code-defined target is what
+     *   prevents it.
+     *
+     * So: exactly one permission per target, and for code-defined targets it is the code one.
+     */
+    static merge(flp: FolderLevelPermission, codePermissions: FolderPermission[]): FolderLevelPermission;
+    /**
+     * The same merge, for callers that hold a plain permission list rather than a stored FLP record
+     * — the write paths, which resolve code permissions from the folder's own type and path.
+     */
+    static mergePermissions(permissions: FolderPermission[], codePermissions: FolderPermission[]): FolderPermission[];
+}

package/features/flp/shared/CodeFlpMerger.js

@@ -0,0 +1,20 @@
+class CodeFlpMerger {
+    static merge(flp, codePermissions) {
+        if (!codePermissions.length) return flp;
+        return {
+            ...flp,
+            permissions: CodeFlpMerger.mergePermissions(flp.permissions, codePermissions)
+        };
+    }
+    static mergePermissions(permissions, codePermissions) {
+        if (!codePermissions.length) return permissions;
+        const codeTargets = new Set(codePermissions.map((permission)=>permission.target));
+        return [
+            ...codePermissions,
+            ...permissions.filter((permission)=>!codeTargets.has(permission.target))
+        ];
+    }
+}
+export { CodeFlpMerger };
+
+//# sourceMappingURL=CodeFlpMerger.js.map

package/features/flp/shared/CodeFlpMerger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/flp/shared/CodeFlpMerger.js","sources":["../../../../src/features/flp/shared/CodeFlpMerger.ts"],"sourcesContent":["import type { FolderLevelPermission, FolderPermission } from \"~/flp/flp.types.js\";\n\nexport class CodeFlpMerger {\n    /**\n     * Merge code-defined permissions into a stored FLP record.\n     *\n     * A code-defined permission always wins over a stored one for the same target, and that takes\n     * both steps below — ordering alone is not enough, because the two downstream consumers pick a\n     * target's permission in different ways:\n     *\n     * - `CanAccessFolder` takes the first match (`permissions.find(p => p.target === ...)`), so code\n     *   permissions go first.\n     * - `DefaultPermissionsMerger` instead collects *every* permission for the identity and reduces\n     *   them by access level, preferring `no-access` and then `owner`. A leftover duplicate would\n     *   join that reduce and could outrank the code-defined entry — a stored `owner` would beat a\n     *   code-defined `viewer`. Dropping the stored permission for a code-defined target is what\n     *   prevents it.\n     *\n     * So: exactly one permission per target, and for code-defined targets it is the code one.\n     */\n    static merge(\n        flp: FolderLevelPermission,\n        codePermissions: FolderPermission[]\n    ): FolderLevelPermission {\n        if (!codePermissions.length) {\n            return flp;\n        }\n\n        return {\n            ...flp,\n            permissions: CodeFlpMerger.mergePermissions(flp.permissions, codePermissions)\n        };\n    }\n\n    /**\n     * The same merge, for callers that hold a plain permission list rather than a stored FLP record\n     * — the write paths, which resolve code permissions from the folder's own type and path.\n     */\n    static mergePermissions(\n        permissions: FolderPermission[],\n        codePermissions: FolderPermission[]\n    ): FolderPermission[] {\n        if (!codePermissions.length) {\n            return permissions;\n        }\n\n        const codeTargets = new Set(codePermissions.map(permission => permission.target));\n\n        return [\n            ...codePermissions,\n            ...permissions.filter(permission => !codeTargets.has(permission.target))\n        ];\n    }\n}\n"],"names":["CodeFlpMerger","flp","codePermissions","permissions","codeTargets","Set","permission"],"mappings":"AAEO,MAAMA;IAkBT,OAAO,MACHC,GAA0B,EAC1BC,eAAmC,EACd;QACrB,IAAI,CAACA,gBAAgB,MAAM,EACvB,OAAOD;QAGX,OAAO;YACH,GAAGA,GAAG;YACN,aAAaD,cAAc,gBAAgB,CAACC,IAAI,WAAW,EAAEC;QACjE;IACJ;IAMA,OAAO,iBACHC,WAA+B,EAC/BD,eAAmC,EACjB;QAClB,IAAI,CAACA,gBAAgB,MAAM,EACvB,OAAOC;QAGX,MAAMC,cAAc,IAAIC,IAAIH,gBAAgB,GAAG,CAACI,CAAAA,aAAcA,WAAW,MAAM;QAE/E,OAAO;eACAJ;eACAC,YAAY,MAAM,CAACG,CAAAA,aAAc,CAACF,YAAY,GAAG,CAACE,WAAW,MAAM;SACzE;IACL;AACJ"}

package/features/flp/shared/CodeFlpPath.d.ts

@@ -0,0 +1,15 @@
+interface ParsedPath {
+    /** Normalized path, without the wildcard suffix, e.g. `root/marketing`. */
+    base: string;
+    /** Whether the rule was written with a trailing `/*`, meaning "this folder and its subtree". */
+    subtree: boolean;
+}
+/**
+ * Folder paths are stored as `root/<slug>[/<slug>...]` (see `~/utils/Path.ts`). Code-defined FLPs
+ * are authored by hand, so we accept the friendlier `/marketing` form as well and normalize it.
+ */
+export declare class CodeFlpPath {
+    static parse(path: string): ParsedPath;
+    static matches(rulePath: string, folderPath: string): boolean;
+}
+export {};

package/features/flp/shared/CodeFlpPath.js

@@ -0,0 +1,29 @@
+import { ROOT_FOLDER } from "@webiny/shared-aco";
+class CodeFlpPath {
+    static parse(path) {
+        let value = path.trim();
+        let subtree = false;
+        if (value.endsWith("*")) {
+            subtree = true;
+            value = value.slice(0, -1);
+        }
+        value = value.replace(/^\/+/, "").replace(/\/+$/, "");
+        if (value === ROOT_FOLDER || "" === value) return {
+            base: ROOT_FOLDER,
+            subtree: "" === value ? true : subtree
+        };
+        const base = value.startsWith(`${ROOT_FOLDER}/`) ? value : `${ROOT_FOLDER}/${value}`;
+        return {
+            base,
+            subtree
+        };
+    }
+    static matches(rulePath, folderPath) {
+        const { base, subtree } = CodeFlpPath.parse(rulePath);
+        if (folderPath === base) return true;
+        return subtree ? folderPath.startsWith(`${base}/`) : false;
+    }
+}
+export { CodeFlpPath };
+
+//# sourceMappingURL=CodeFlpPath.js.map