@webiny/api-core 6.4.11 → 6.6.0-alpha.1

package/features/security/teams/CreateTeam/CreateTeamUseCase.js

@@ -3,15 +3,19 @@ import { Result, createImplementation } from "@webiny/feature/api";
 import { EventPublisher } from "../../../eventPublisher/index.js";
 import { CreateTeam } from "./abstractions.js";
 import { TeamsRepository } from "../shared/abstractions.js";
+import { RolesRepository } from "../../roles/shared/abstractions.js";
 import { IdentityContext } from "../../IdentityContext/abstractions.js";
 import { createTeamValidation } from "./schema.js";
 import { TeamAfterCreateEvent, TeamBeforeCreateEvent } from "./events.js";
 import { NotAuthorizedError, TeamExistsError, TeamValidationError } from "../shared/errors.js";
+import { descriptionOnCreate } from "../../shared/description.js";
+import { resolveRoleIdentifiers } from "../shared/resolveRoleIdentifiers.js";
 class CreateTeamUseCase {
-    constructor(identityContext, eventPublisher, repository){
+    constructor(identityContext, eventPublisher, repository, rolesRepository){
         this.identityContext = identityContext;
         this.eventPublisher = eventPublisher;
         this.repository = repository;
+        this.rolesRepository = rolesRepository;
     }
     async execute(input) {
         const hasPermission = await this.identityContext.getPermission("security.team");
@@ -24,12 +28,19 @@ class CreateTeamUseCase {
             slug: data.slug
         });
         if (existingTeamResult.isOk()) return Result.fail(new TeamExistsError(data.slug));
+        const roleIdsResult = await resolveRoleIdentifiers(this.rolesRepository, data.roles);
+        if (roleIdsResult.isFail()) return Result.fail(roleIdsResult.error);
+        const createInput = {
+            ...data,
+            description: descriptionOnCreate(data.description),
+            roles: roleIdsResult.value
+        };
         const team = {
             id: mdbid(),
-            name: data.name,
-            slug: data.slug,
-            description: data.description,
-            roles: data.roles,
+            name: createInput.name,
+            slug: createInput.slug,
+            description: descriptionOnCreate(createInput.description),
+            roles: createInput.roles,
             system: input.system || false,
             createdOn: new Date().toISOString(),
             createdBy: {
@@ -41,13 +52,13 @@ class CreateTeamUseCase {
         };
         await this.eventPublisher.publish(new TeamBeforeCreateEvent({
             team,
-            input: validation.data
+            input: createInput
         }));
         const result = await this.repository.create(team);
         if (result.isFail()) return Result.fail(result.error);
         await this.eventPublisher.publish(new TeamAfterCreateEvent({
             team,
-            input: validation.data
+            input: createInput
         }));
         return Result.ok(team);
     }
@@ -58,7 +69,8 @@ const CreateTeamUseCaseImpl = createImplementation({
     dependencies: [
         IdentityContext,
         EventPublisher,
-        TeamsRepository
+        TeamsRepository,
+        RolesRepository
     ]
 });
 export { CreateTeamUseCase, CreateTeamUseCaseImpl };

package/features/security/teams/CreateTeam/CreateTeamUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/teams/CreateTeam/CreateTeamUseCase.js","sources":["../../../../../src/features/security/teams/CreateTeam/CreateTeamUseCase.ts"],"sourcesContent":["import { mdbid } from \"@webiny/utils\";\nimport { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { CreateTeam } from \"./abstractions.js\";\nimport { TeamsRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { createTeamValidation } from \"./schema.js\";\nimport { TeamBeforeCreateEvent, TeamAfterCreateEvent } from \"./events.js\";\nimport type { Team, CreateTeamInput } from \"../shared/types.js\";\nimport { NotAuthorizedError, TeamExistsError, TeamValidationError } from \"../shared/errors.js\";\n\nexport class CreateTeamUseCase implements CreateTeam.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private eventPublisher: EventPublisher.Interface,\n        private repository: TeamsRepository.Interface\n    ) {}\n\n    async execute(input: CreateTeamInput): Promise<Result<Team, CreateTeam.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.team\");\n\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = createTeamValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new TeamValidationError(validation.error.issues[0].message));\n        }\n\n        const identity = this.identityContext.getIdentity();\n        const data = validation.data;\n\n        // Check if team with same slug already exists\n        const existingTeamResult = await this.repository.get({ slug: data.slug });\n        if (existingTeamResult.isOk()) {\n            return Result.fail(new TeamExistsError(data.slug));\n        }\n\n        const team: Team = {\n            id: mdbid(),\n            name: data.name,\n            slug: data.slug,\n            description: data.description,\n            roles: data.roles,\n            system: input.system || false,\n            createdOn: new Date().toISOString(),\n            createdBy: {\n                id: identity.id,\n                displayName: identity.displayName,\n                type: identity.type\n            },\n            plugin: false\n        };\n\n        await this.eventPublisher.publish(\n            new TeamBeforeCreateEvent({ team, input: validation.data })\n        );\n\n        const result = await this.repository.create(team);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new TeamAfterCreateEvent({ team, input: validation.data })\n        );\n\n        return Result.ok(team);\n    }\n}\n\nexport const CreateTeamUseCaseImpl = createImplementation({\n    abstraction: CreateTeam,\n    implementation: CreateTeamUseCase,\n    dependencies: [IdentityContext, EventPublisher, TeamsRepository]\n});\n"],"names":["CreateTeamUseCase","identityContext","eventPublisher","repository","input","hasPermission","Result","NotAuthorizedError","validation","createTeamValidation","TeamValidationError","identity","data","existingTeamResult","TeamExistsError","team","mdbid","Date","TeamBeforeCreateEvent","result","TeamAfterCreateEvent","CreateTeamUseCaseImpl","createImplementation","CreateTeam","IdentityContext","EventPublisher","TeamsRepository"],"mappings":";;;;;;;;;AAYO,MAAMA;IACT,YACYC,eAA0C,EAC1CC,cAAwC,EACxCC,UAAqC,CAC/C;aAHUF,eAAe,GAAfA;aACAC,cAAc,GAAdA;aACAC,UAAU,GAAVA;IACT;IAEH,MAAM,QAAQC,KAAsB,EAA2C;QAC3E,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAE/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,qBAAqB,SAAS,CAACL;QAClD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,oBAAoBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGjF,MAAMG,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QACjD,MAAMC,OAAOJ,WAAW,IAAI;QAG5B,MAAMK,qBAAqB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAMD,KAAK,IAAI;QAAC;QACvE,IAAIC,mBAAmB,IAAI,IACvB,OAAOP,OAAO,IAAI,CAAC,IAAIQ,gBAAgBF,KAAK,IAAI;QAGpD,MAAMG,OAAa;YACf,IAAIC;YACJ,MAAMJ,KAAK,IAAI;YACf,MAAMA,KAAK,IAAI;YACf,aAAaA,KAAK,WAAW;YAC7B,OAAOA,KAAK,KAAK;YACjB,QAAQR,MAAM,MAAM,IAAI;YACxB,WAAW,IAAIa,OAAO,WAAW;YACjC,WAAW;gBACP,IAAIN,SAAS,EAAE;gBACf,aAAaA,SAAS,WAAW;gBACjC,MAAMA,SAAS,IAAI;YACvB;YACA,QAAQ;QACZ;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIO,sBAAsB;YAAEH;YAAM,OAAOP,WAAW,IAAI;QAAC;QAG7D,MAAMW,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACJ;QAE5C,IAAII,OAAO,MAAM,IACb,OAAOb,OAAO,IAAI,CAACa,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,qBAAqB;YAAEL;YAAM,OAAOP,WAAW,IAAI;QAAC;QAG5D,OAAOF,OAAO,EAAE,CAACS;IACrB;AACJ;AAEO,MAAMM,wBAAwBC,qBAAqB;IACtD,aAAaC;IACb,gBAAgBvB;IAChB,cAAc;QAACwB;QAAiBC;QAAgBC;KAAgB;AACpE"}
+{"version":3,"file":"features/security/teams/CreateTeam/CreateTeamUseCase.js","sources":["../../../../../src/features/security/teams/CreateTeam/CreateTeamUseCase.ts"],"sourcesContent":["import { mdbid } from \"@webiny/utils\";\nimport { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { CreateTeam } from \"./abstractions.js\";\nimport { TeamsRepository } from \"../shared/abstractions.js\";\nimport { RolesRepository } from \"../../roles/shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { createTeamValidation } from \"./schema.js\";\nimport { TeamBeforeCreateEvent, TeamAfterCreateEvent } from \"./events.js\";\nimport type { Team, CreateTeamInput } from \"../shared/types.js\";\nimport { NotAuthorizedError, TeamExistsError, TeamValidationError } from \"../shared/errors.js\";\nimport { descriptionOnCreate } from \"../../shared/description.js\";\nimport { resolveRoleIdentifiers } from \"../shared/resolveRoleIdentifiers.js\";\n\nexport class CreateTeamUseCase implements CreateTeam.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private eventPublisher: EventPublisher.Interface,\n        private repository: TeamsRepository.Interface,\n        private rolesRepository: RolesRepository.Interface\n    ) {}\n\n    async execute(input: CreateTeamInput): Promise<Result<Team, CreateTeam.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.team\");\n\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = createTeamValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new TeamValidationError(validation.error.issues[0].message));\n        }\n\n        const identity = this.identityContext.getIdentity();\n        const data = validation.data;\n\n        // Check if team with same slug already exists\n        const existingTeamResult = await this.repository.get({ slug: data.slug });\n        if (existingTeamResult.isOk()) {\n            return Result.fail(new TeamExistsError(data.slug));\n        }\n\n        // A slug here would be stored verbatim and then match no role, leaving a team that grants\n        // nothing. Resolved before the entity is built so the events carry the stored IDs.\n        const roleIdsResult = await resolveRoleIdentifiers(this.rolesRepository, data.roles);\n\n        if (roleIdsResult.isFail()) {\n            return Result.fail(roleIdsResult.error);\n        }\n\n        // Normalised up front so that null reaches neither the entity nor the published events.\n        const createInput: CreateTeamInput = {\n            ...data,\n            description: descriptionOnCreate(data.description),\n            roles: roleIdsResult.value\n        };\n\n        const team: Team = {\n            id: mdbid(),\n            name: createInput.name,\n            slug: createInput.slug,\n            description: descriptionOnCreate(createInput.description),\n            roles: createInput.roles,\n            system: input.system || false,\n            createdOn: new Date().toISOString(),\n            createdBy: {\n                id: identity.id,\n                displayName: identity.displayName,\n                type: identity.type\n            },\n            plugin: false\n        };\n\n        await this.eventPublisher.publish(new TeamBeforeCreateEvent({ team, input: createInput }));\n\n        const result = await this.repository.create(team);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(new TeamAfterCreateEvent({ team, input: createInput }));\n\n        return Result.ok(team);\n    }\n}\n\nexport const CreateTeamUseCaseImpl = createImplementation({\n    abstraction: CreateTeam,\n    implementation: CreateTeamUseCase,\n    dependencies: [IdentityContext, EventPublisher, TeamsRepository, RolesRepository]\n});\n"],"names":["CreateTeamUseCase","identityContext","eventPublisher","repository","rolesRepository","input","hasPermission","Result","NotAuthorizedError","validation","createTeamValidation","TeamValidationError","identity","data","existingTeamResult","TeamExistsError","roleIdsResult","resolveRoleIdentifiers","createInput","descriptionOnCreate","team","mdbid","Date","TeamBeforeCreateEvent","result","TeamAfterCreateEvent","CreateTeamUseCaseImpl","createImplementation","CreateTeam","IdentityContext","EventPublisher","TeamsRepository","RolesRepository"],"mappings":";;;;;;;;;;;;AAeO,MAAMA;IACT,YACYC,eAA0C,EAC1CC,cAAwC,EACxCC,UAAqC,EACrCC,eAA0C,CACpD;aAJUH,eAAe,GAAfA;aACAC,cAAc,GAAdA;aACAC,UAAU,GAAVA;aACAC,eAAe,GAAfA;IACT;IAEH,MAAM,QAAQC,KAAsB,EAA2C;QAC3E,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAE/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,qBAAqB,SAAS,CAACL;QAClD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,oBAAoBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGjF,MAAMG,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QACjD,MAAMC,OAAOJ,WAAW,IAAI;QAG5B,MAAMK,qBAAqB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAMD,KAAK,IAAI;QAAC;QACvE,IAAIC,mBAAmB,IAAI,IACvB,OAAOP,OAAO,IAAI,CAAC,IAAIQ,gBAAgBF,KAAK,IAAI;QAKpD,MAAMG,gBAAgB,MAAMC,uBAAuB,IAAI,CAAC,eAAe,EAAEJ,KAAK,KAAK;QAEnF,IAAIG,cAAc,MAAM,IACpB,OAAOT,OAAO,IAAI,CAACS,cAAc,KAAK;QAI1C,MAAME,cAA+B;YACjC,GAAGL,IAAI;YACP,aAAaM,oBAAoBN,KAAK,WAAW;YACjD,OAAOG,cAAc,KAAK;QAC9B;QAEA,MAAMI,OAAa;YACf,IAAIC;YACJ,MAAMH,YAAY,IAAI;YACtB,MAAMA,YAAY,IAAI;YACtB,aAAaC,oBAAoBD,YAAY,WAAW;YACxD,OAAOA,YAAY,KAAK;YACxB,QAAQb,MAAM,MAAM,IAAI;YACxB,WAAW,IAAIiB,OAAO,WAAW;YACjC,WAAW;gBACP,IAAIV,SAAS,EAAE;gBACf,aAAaA,SAAS,WAAW;gBACjC,MAAMA,SAAS,IAAI;YACvB;YACA,QAAQ;QACZ;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAIW,sBAAsB;YAAEH;YAAM,OAAOF;QAAY;QAEvF,MAAMM,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACJ;QAE5C,IAAII,OAAO,MAAM,IACb,OAAOjB,OAAO,IAAI,CAACiB,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAIC,qBAAqB;YAAEL;YAAM,OAAOF;QAAY;QAEtF,OAAOX,OAAO,EAAE,CAACa;IACrB;AACJ;AAEO,MAAMM,wBAAwBC,qBAAqB;IACtD,aAAaC;IACb,gBAAgB5B;IAChB,cAAc;QAAC6B;QAAiBC;QAAgBC;QAAiBC;KAAgB;AACrF"}

package/features/security/teams/CreateTeam/schema.d.ts

@@ -2,6 +2,6 @@ import { z } from "zod";
 export declare const createTeamValidation: z.ZodObject<{
     name: z.ZodString;
     slug: z.ZodString;
-    description: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     roles: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;

package/features/security/teams/CreateTeam/schema.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 const createTeamValidation = z.object({
     name: z.string().min(3),
     slug: z.string().min(3),
-    description: z.string().max(500).optional().default(""),
+    description: z.string().max(500).nullish(),
     roles: z.array(z.string())
 });
 export { createTeamValidation };

package/features/security/teams/CreateTeam/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/teams/CreateTeam/schema.js","sources":["../../../../../src/features/security/teams/CreateTeam/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createTeamValidation = z.object({\n    name: z.string().min(3),\n    slug: z.string().min(3),\n    description: z.string().max(500).optional().default(\"\"),\n    roles: z.array(z.string())\n});\n"],"names":["createTeamValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IACrB,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IACrB,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,QAAQ,GAAG,OAAO,CAAC;IACpD,OAAOA,EAAE,KAAK,CAACA,EAAE,MAAM;AAC3B"}
+{"version":3,"file":"features/security/teams/CreateTeam/schema.js","sources":["../../../../../src/features/security/teams/CreateTeam/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createTeamValidation = z.object({\n    name: z.string().min(3),\n    slug: z.string().min(3),\n    // Nullable in the GraphQL schema - see `descriptionOnCreate` for why this is `.nullish()`.\n    description: z.string().max(500).nullish(),\n    roles: z.array(z.string())\n});\n"],"names":["createTeamValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IACrB,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IAErB,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,OAAO;IACxC,OAAOA,EAAE,KAAK,CAACA,EAAE,MAAM;AAC3B"}

package/features/security/teams/UpdateTeam/UpdateTeamUseCase.d.ts

@@ -1,6 +1,7 @@
 import { Result } from "@webiny/feature/api";
 import { UpdateTeam } from "./abstractions.js";
 import { TeamsRepository } from "../shared/abstractions.js";
+import { RolesRepository } from "../../roles/shared/abstractions.js";
 import { IdentityContext } from "../../IdentityContext/abstractions.js";
 import { EventPublisher } from "../../../../features/eventPublisher/index.js";
 import type { Team, UpdateTeamInput } from "../shared/types.js";
@@ -8,7 +9,8 @@ export declare class UpdateTeamUseCase {
     private repository;
     private identityContext;
     private eventPublisher;
-    constructor(repository: TeamsRepository.Interface, identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface);
+    private rolesRepository;
+    constructor(repository: TeamsRepository.Interface, identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface, rolesRepository: RolesRepository.Interface);
     execute(id: string, input: UpdateTeamInput): Promise<Result<Team, UpdateTeam.Error>>;
 }
 export declare const UpdateTeamUseCaseImpl: import("@webiny/di").Implementation<typeof UpdateTeamUseCase>;

package/features/security/teams/UpdateTeam/UpdateTeamUseCase.js

@@ -1,16 +1,20 @@
 import { Result, createImplementation } from "@webiny/feature/api";
 import { UpdateTeam } from "./abstractions.js";
 import { TeamsRepository } from "../shared/abstractions.js";
+import { RolesRepository } from "../../roles/shared/abstractions.js";
 import { IdentityContext } from "../../IdentityContext/abstractions.js";
 import { EventPublisher } from "../../../eventPublisher/index.js";
 import { updateTeamValidation } from "./schema.js";
 import { TeamAfterUpdateEvent, TeamBeforeUpdateEvent } from "./events.js";
+import { descriptionOnUpdate } from "../../shared/description.js";
+import { resolveRoleIdentifiers } from "../shared/resolveRoleIdentifiers.js";
 import { CannotUpdatePluginTeamsError, CannotUpdateSystemTeamsError, NotAuthorizedError, TeamValidationError } from "../shared/errors.js";
 class UpdateTeamUseCase {
-    constructor(repository, identityContext, eventPublisher){
+    constructor(repository, identityContext, eventPublisher, rolesRepository){
         this.repository = repository;
         this.identityContext = identityContext;
         this.eventPublisher = eventPublisher;
+        this.rolesRepository = rolesRepository;
     }
     async execute(id, input) {
         const hasPermission = await this.identityContext.getPermission("security.team");
@@ -24,21 +28,31 @@ class UpdateTeamUseCase {
         const existingTeam = existingResult.value;
         if (existingTeam.system) return Result.fail(new CannotUpdateSystemTeamsError());
         if (existingTeam.plugin) return Result.fail(new CannotUpdatePluginTeamsError());
+        const { description, ...rest } = validation.data;
+        const changes = {
+            ...rest,
+            ...descriptionOnUpdate(description)
+        };
+        if (changes.roles) {
+            const roleIdsResult = await resolveRoleIdentifiers(this.rolesRepository, changes.roles);
+            if (roleIdsResult.isFail()) return Result.fail(roleIdsResult.error);
+            changes.roles = roleIdsResult.value;
+        }
         const updatedTeam = {
             ...existingTeam,
-            ...validation.data
+            ...changes
         };
         await this.eventPublisher.publish(new TeamBeforeUpdateEvent({
             original: existingTeam,
             updated: updatedTeam,
-            input: validation.data
+            input: changes
         }));
         const result = await this.repository.update(updatedTeam);
         if (result.isFail()) return Result.fail(result.error);
         await this.eventPublisher.publish(new TeamAfterUpdateEvent({
             original: existingTeam,
             updated: updatedTeam,
-            input: validation.data
+            input: changes
         }));
         return Result.ok(updatedTeam);
     }
@@ -49,7 +63,8 @@ const UpdateTeamUseCaseImpl = createImplementation({
     dependencies: [
         TeamsRepository,
         IdentityContext,
-        EventPublisher
+        EventPublisher,
+        RolesRepository
     ]
 });
 export { UpdateTeamUseCase, UpdateTeamUseCaseImpl };

package/features/security/teams/UpdateTeam/UpdateTeamUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/teams/UpdateTeam/UpdateTeamUseCase.js","sources":["../../../../../src/features/security/teams/UpdateTeam/UpdateTeamUseCase.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { UpdateTeam } from \"./abstractions.js\";\nimport { TeamsRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { updateTeamValidation } from \"./schema.js\";\nimport { TeamBeforeUpdateEvent, TeamAfterUpdateEvent } from \"./events.js\";\nimport type { Team, UpdateTeamInput } from \"../shared/types.js\";\nimport {\n    NotAuthorizedError,\n    CannotUpdatePluginTeamsError,\n    CannotUpdateSystemTeamsError,\n    TeamValidationError\n} from \"../shared/errors.js\";\n\nexport class UpdateTeamUseCase {\n    private repository: TeamsRepository.Interface;\n    private identityContext: IdentityContext.Interface;\n    private eventPublisher: EventPublisher.Interface;\n\n    constructor(\n        repository: TeamsRepository.Interface,\n        identityContext: IdentityContext.Interface,\n        eventPublisher: EventPublisher.Interface\n    ) {\n        this.repository = repository;\n        this.identityContext = identityContext;\n        this.eventPublisher = eventPublisher;\n    }\n\n    async execute(id: string, input: UpdateTeamInput): Promise<Result<Team, UpdateTeam.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.team\");\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = updateTeamValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new TeamValidationError(validation.error.issues[0].message));\n        }\n\n        const existingResult = await this.repository.get({ id });\n        if (existingResult.isFail()) {\n            return Result.fail(existingResult.error);\n        }\n\n        const existingTeam = existingResult.value;\n\n        // Check if team is system team\n        if (existingTeam.system) {\n            return Result.fail(new CannotUpdateSystemTeamsError());\n        }\n\n        // Check if team is created via plugin\n        if (existingTeam.plugin) {\n            return Result.fail(new CannotUpdatePluginTeamsError());\n        }\n\n        const updatedTeam: Team = {\n            ...existingTeam,\n            ...validation.data\n        };\n\n        await this.eventPublisher.publish(\n            new TeamBeforeUpdateEvent({\n                original: existingTeam,\n                updated: updatedTeam,\n                input: validation.data\n            })\n        );\n\n        const result = await this.repository.update(updatedTeam);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new TeamAfterUpdateEvent({\n                original: existingTeam,\n                updated: updatedTeam,\n                input: validation.data\n            })\n        );\n\n        return Result.ok(updatedTeam);\n    }\n}\n\nexport const UpdateTeamUseCaseImpl = createImplementation({\n    abstraction: UpdateTeam,\n    implementation: UpdateTeamUseCase,\n    dependencies: [TeamsRepository, IdentityContext, EventPublisher]\n});\n"],"names":["UpdateTeamUseCase","repository","identityContext","eventPublisher","id","input","hasPermission","Result","NotAuthorizedError","validation","updateTeamValidation","TeamValidationError","existingResult","existingTeam","CannotUpdateSystemTeamsError","CannotUpdatePluginTeamsError","updatedTeam","TeamBeforeUpdateEvent","result","TeamAfterUpdateEvent","UpdateTeamUseCaseImpl","createImplementation","UpdateTeam","TeamsRepository","IdentityContext","EventPublisher"],"mappings":";;;;;;;;AAgBO,MAAMA;IAKT,YACIC,UAAqC,EACrCC,eAA0C,EAC1CC,cAAwC,CAC1C;QACE,IAAI,CAAC,UAAU,GAAGF;QAClB,IAAI,CAAC,eAAe,GAAGC;QACvB,IAAI,CAAC,cAAc,GAAGC;IAC1B;IAEA,MAAM,QAAQC,EAAU,EAAEC,KAAsB,EAA2C;QACvF,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,qBAAqB,SAAS,CAACL;QAClD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,oBAAoBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGjF,MAAMG,iBAAiB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAER;QAAG;QACtD,IAAIQ,eAAe,MAAM,IACrB,OAAOL,OAAO,IAAI,CAACK,eAAe,KAAK;QAG3C,MAAMC,eAAeD,eAAe,KAAK;QAGzC,IAAIC,aAAa,MAAM,EACnB,OAAON,OAAO,IAAI,CAAC,IAAIO;QAI3B,IAAID,aAAa,MAAM,EACnB,OAAON,OAAO,IAAI,CAAC,IAAIQ;QAG3B,MAAMC,cAAoB;YACtB,GAAGH,YAAY;YACf,GAAGJ,WAAW,IAAI;QACtB;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIQ,sBAAsB;YACtB,UAAUJ;YACV,SAASG;YACT,OAAOP,WAAW,IAAI;QAC1B;QAGJ,MAAMS,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACF;QAE5C,IAAIE,OAAO,MAAM,IACb,OAAOX,OAAO,IAAI,CAACW,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,qBAAqB;YACrB,UAAUN;YACV,SAASG;YACT,OAAOP,WAAW,IAAI;QAC1B;QAGJ,OAAOF,OAAO,EAAE,CAACS;IACrB;AACJ;AAEO,MAAMI,wBAAwBC,qBAAqB;IACtD,aAAaC;IACb,gBAAgBtB;IAChB,cAAc;QAACuB;QAAiBC;QAAiBC;KAAe;AACpE"}
+{"version":3,"file":"features/security/teams/UpdateTeam/UpdateTeamUseCase.js","sources":["../../../../../src/features/security/teams/UpdateTeam/UpdateTeamUseCase.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { UpdateTeam } from \"./abstractions.js\";\nimport { TeamsRepository } from \"../shared/abstractions.js\";\nimport { RolesRepository } from \"../../roles/shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { updateTeamValidation } from \"./schema.js\";\nimport { TeamBeforeUpdateEvent, TeamAfterUpdateEvent } from \"./events.js\";\nimport type { Team, UpdateTeamInput } from \"../shared/types.js\";\nimport { descriptionOnUpdate } from \"../../shared/description.js\";\nimport { resolveRoleIdentifiers } from \"../shared/resolveRoleIdentifiers.js\";\nimport {\n    NotAuthorizedError,\n    CannotUpdatePluginTeamsError,\n    CannotUpdateSystemTeamsError,\n    TeamValidationError\n} from \"../shared/errors.js\";\n\nexport class UpdateTeamUseCase {\n    private repository: TeamsRepository.Interface;\n    private identityContext: IdentityContext.Interface;\n    private eventPublisher: EventPublisher.Interface;\n    private rolesRepository: RolesRepository.Interface;\n\n    constructor(\n        repository: TeamsRepository.Interface,\n        identityContext: IdentityContext.Interface,\n        eventPublisher: EventPublisher.Interface,\n        rolesRepository: RolesRepository.Interface\n    ) {\n        this.repository = repository;\n        this.identityContext = identityContext;\n        this.eventPublisher = eventPublisher;\n        this.rolesRepository = rolesRepository;\n    }\n\n    async execute(id: string, input: UpdateTeamInput): Promise<Result<Team, UpdateTeam.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.team\");\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = updateTeamValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new TeamValidationError(validation.error.issues[0].message));\n        }\n\n        const existingResult = await this.repository.get({ id });\n        if (existingResult.isFail()) {\n            return Result.fail(existingResult.error);\n        }\n\n        const existingTeam = existingResult.value;\n\n        // Check if team is system team\n        if (existingTeam.system) {\n            return Result.fail(new CannotUpdateSystemTeamsError());\n        }\n\n        // Check if team is created via plugin\n        if (existingTeam.plugin) {\n            return Result.fail(new CannotUpdatePluginTeamsError());\n        }\n\n        // `description` is pulled out of the spread because it is the one field that accepts null.\n        // Normalising it here keeps null out of both the entity and the published events, whose\n        // input type declares `description?: string`.\n        const { description, ...rest } = validation.data;\n\n        const changes: UpdateTeamInput = {\n            ...rest,\n            ...descriptionOnUpdate(description)\n        };\n\n        /*\n         * Only when the update mentions roles. An update that omits them must leave the stored ones\n         * alone, and resolving an absent list would cost a read and write an empty array.\n         */\n        if (changes.roles) {\n            const roleIdsResult = await resolveRoleIdentifiers(this.rolesRepository, changes.roles);\n\n            if (roleIdsResult.isFail()) {\n                return Result.fail(roleIdsResult.error);\n            }\n\n            changes.roles = roleIdsResult.value;\n        }\n\n        const updatedTeam: Team = {\n            ...existingTeam,\n            ...changes\n        };\n\n        await this.eventPublisher.publish(\n            new TeamBeforeUpdateEvent({\n                original: existingTeam,\n                updated: updatedTeam,\n                input: changes\n            })\n        );\n\n        const result = await this.repository.update(updatedTeam);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new TeamAfterUpdateEvent({\n                original: existingTeam,\n                updated: updatedTeam,\n                input: changes\n            })\n        );\n\n        return Result.ok(updatedTeam);\n    }\n}\n\nexport const UpdateTeamUseCaseImpl = createImplementation({\n    abstraction: UpdateTeam,\n    implementation: UpdateTeamUseCase,\n    dependencies: [TeamsRepository, IdentityContext, EventPublisher, RolesRepository]\n});\n"],"names":["UpdateTeamUseCase","repository","identityContext","eventPublisher","rolesRepository","id","input","hasPermission","Result","NotAuthorizedError","validation","updateTeamValidation","TeamValidationError","existingResult","existingTeam","CannotUpdateSystemTeamsError","CannotUpdatePluginTeamsError","description","rest","changes","descriptionOnUpdate","roleIdsResult","resolveRoleIdentifiers","updatedTeam","TeamBeforeUpdateEvent","result","TeamAfterUpdateEvent","UpdateTeamUseCaseImpl","createImplementation","UpdateTeam","TeamsRepository","IdentityContext","EventPublisher","RolesRepository"],"mappings":";;;;;;;;;;;AAmBO,MAAMA;IAMT,YACIC,UAAqC,EACrCC,eAA0C,EAC1CC,cAAwC,EACxCC,eAA0C,CAC5C;QACE,IAAI,CAAC,UAAU,GAAGH;QAClB,IAAI,CAAC,eAAe,GAAGC;QACvB,IAAI,CAAC,cAAc,GAAGC;QACtB,IAAI,CAAC,eAAe,GAAGC;IAC3B;IAEA,MAAM,QAAQC,EAAU,EAAEC,KAAsB,EAA2C;QACvF,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,qBAAqB,SAAS,CAACL;QAClD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,oBAAoBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGjF,MAAMG,iBAAiB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAER;QAAG;QACtD,IAAIQ,eAAe,MAAM,IACrB,OAAOL,OAAO,IAAI,CAACK,eAAe,KAAK;QAG3C,MAAMC,eAAeD,eAAe,KAAK;QAGzC,IAAIC,aAAa,MAAM,EACnB,OAAON,OAAO,IAAI,CAAC,IAAIO;QAI3B,IAAID,aAAa,MAAM,EACnB,OAAON,OAAO,IAAI,CAAC,IAAIQ;QAM3B,MAAM,EAAEC,WAAW,EAAE,GAAGC,MAAM,GAAGR,WAAW,IAAI;QAEhD,MAAMS,UAA2B;YAC7B,GAAGD,IAAI;YACP,GAAGE,oBAAoBH,YAAY;QACvC;QAMA,IAAIE,QAAQ,KAAK,EAAE;YACf,MAAME,gBAAgB,MAAMC,uBAAuB,IAAI,CAAC,eAAe,EAAEH,QAAQ,KAAK;YAEtF,IAAIE,cAAc,MAAM,IACpB,OAAOb,OAAO,IAAI,CAACa,cAAc,KAAK;YAG1CF,QAAQ,KAAK,GAAGE,cAAc,KAAK;QACvC;QAEA,MAAME,cAAoB;YACtB,GAAGT,YAAY;YACf,GAAGK,OAAO;QACd;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIK,sBAAsB;YACtB,UAAUV;YACV,SAASS;YACT,OAAOJ;QACX;QAGJ,MAAMM,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACF;QAE5C,IAAIE,OAAO,MAAM,IACb,OAAOjB,OAAO,IAAI,CAACiB,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,qBAAqB;YACrB,UAAUZ;YACV,SAASS;YACT,OAAOJ;QACX;QAGJ,OAAOX,OAAO,EAAE,CAACe;IACrB;AACJ;AAEO,MAAMI,wBAAwBC,qBAAqB;IACtD,aAAaC;IACb,gBAAgB7B;IAChB,cAAc;QAAC8B;QAAiBC;QAAiBC;QAAgBC;KAAgB;AACrF"}

package/features/security/teams/UpdateTeam/schema.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod";
 export declare const updateTeamValidation: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;

package/features/security/teams/UpdateTeam/schema.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 const updateTeamValidation = z.object({
     name: z.string().min(3).optional(),
-    description: z.string().max(500).optional(),
+    description: z.string().max(500).nullish(),
     roles: z.array(z.string()).optional()
 });
 export { updateTeamValidation };

package/features/security/teams/UpdateTeam/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/teams/UpdateTeam/schema.js","sources":["../../../../../src/features/security/teams/UpdateTeam/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const updateTeamValidation = z.object({\n    name: z.string().min(3).optional(),\n    description: z.string().max(500).optional(),\n    roles: z.array(z.string()).optional()\n});\n"],"names":["updateTeamValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ;IAChC,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,QAAQ;IACzC,OAAOA,EAAE,KAAK,CAACA,EAAE,MAAM,IAAI,QAAQ;AACvC"}
+{"version":3,"file":"features/security/teams/UpdateTeam/schema.js","sources":["../../../../../src/features/security/teams/UpdateTeam/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const updateTeamValidation = z.object({\n    name: z.string().min(3).optional(),\n    // Nullable in the GraphQL schema - see `descriptionOnUpdate` for why this is `.nullish()` and\n    // must not carry a `.transform()`.\n    description: z.string().max(500).nullish(),\n    roles: z.array(z.string()).optional()\n});\n"],"names":["updateTeamValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ;IAGhC,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,OAAO;IACxC,OAAOA,EAAE,KAAK,CAACA,EAAE,MAAM,IAAI,QAAQ;AACvC"}

package/features/security/teams/shared/resolveRoleIdentifiers.d.ts

@@ -0,0 +1,17 @@
+import { Result } from "@webiny/feature/api";
+import { RolesRepository } from "../../roles/shared/abstractions.js";
+import { TeamValidationError } from "./errors.js";
+/**
+ * Maps whatever a caller used to name a role onto the role IDs a team stores.
+ *
+ * `team.roles` holds IDs and only IDs: GetPermissionsFromIdentity resolves them with `id_in` against
+ * the roles repository. A slug stored here matches nothing, so the team is created, reads correctly
+ * in the admin UI, and grants no permissions at all. Nothing previously caught that, because the
+ * field is typed `string[]` and the use case wrote it through untouched.
+ *
+ * Accepting both forms rather than rejecting slugs: which identifier a given field wants is not
+ * guessable from the outside, and a few lines away in the same area a team is identified by SLUG
+ * (folder permission targets are `team:<slug>`). An identifier that is neither is a genuine mistake
+ * and is reported.
+ */
+export declare const resolveRoleIdentifiers: (rolesRepository: RolesRepository.Interface, identifiers: string[]) => Promise<Result<string[], TeamValidationError>>;

package/features/security/teams/shared/resolveRoleIdentifiers.js

@@ -0,0 +1,32 @@
+import { Result } from "@webiny/feature/api";
+import { TeamValidationError } from "./errors.js";
+const resolveRoleIdentifiers = async (rolesRepository, identifiers)=>{
+    if (0 === identifiers.length) return Result.ok([]);
+    const rolesResult = await rolesRepository.list({});
+    if (rolesResult.isFail()) return Result.fail(new TeamValidationError(`Could not load roles: ${rolesResult.error}`));
+    const byId = new Map(rolesResult.value.map((role)=>[
+            role.id,
+            role.id
+        ]));
+    const bySlug = new Map(rolesResult.value.map((role)=>[
+            role.slug,
+            role.id
+        ]));
+    const unknown = [];
+    const roleIds = identifiers.map((identifier)=>{
+        const resolved = byId.get(identifier) ?? bySlug.get(identifier);
+        if (!resolved) {
+            unknown.push(identifier);
+            return identifier;
+        }
+        return resolved;
+    });
+    if (unknown.length > 0) {
+        const names = unknown.map((identifier)=>`"${identifier}"`).join(", ");
+        return Result.fail(new TeamValidationError(`Not a known role id or slug: ${names}.`));
+    }
+    return Result.ok(roleIds);
+};
+export { resolveRoleIdentifiers };
+
+//# sourceMappingURL=resolveRoleIdentifiers.js.map

package/features/security/teams/shared/resolveRoleIdentifiers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/teams/shared/resolveRoleIdentifiers.js","sources":["../../../../../src/features/security/teams/shared/resolveRoleIdentifiers.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { RolesRepository } from \"../../roles/shared/abstractions.js\";\nimport { TeamValidationError } from \"./errors.js\";\n\n/**\n * Maps whatever a caller used to name a role onto the role IDs a team stores.\n *\n * `team.roles` holds IDs and only IDs: GetPermissionsFromIdentity resolves them with `id_in` against\n * the roles repository. A slug stored here matches nothing, so the team is created, reads correctly\n * in the admin UI, and grants no permissions at all. Nothing previously caught that, because the\n * field is typed `string[]` and the use case wrote it through untouched.\n *\n * Accepting both forms rather than rejecting slugs: which identifier a given field wants is not\n * guessable from the outside, and a few lines away in the same area a team is identified by SLUG\n * (folder permission targets are `team:<slug>`). An identifier that is neither is a genuine mistake\n * and is reported.\n */\nexport const resolveRoleIdentifiers = async (\n    rolesRepository: RolesRepository.Interface,\n    identifiers: string[]\n): Promise<Result<string[], TeamValidationError>> => {\n    if (identifiers.length === 0) {\n        return Result.ok([]);\n    }\n\n    /*\n     * Every role, in one read. `id_in` and `slug_in` are ANDed by the repository, so they cannot\n     * express \"either of these\", and a project has few enough roles for the distinction not to\n     * matter. Plugin-defined roles are included, which a filtered query would also have to cover.\n     */\n    const rolesResult = await rolesRepository.list({});\n\n    if (rolesResult.isFail()) {\n        return Result.fail(new TeamValidationError(`Could not load roles: ${rolesResult.error}`));\n    }\n\n    const byId = new Map(rolesResult.value.map(role => [role.id, role.id]));\n    const bySlug = new Map(rolesResult.value.map(role => [role.slug, role.id]));\n\n    const unknown: string[] = [];\n\n    // ID first, so a slug that happens to equal another role's ID cannot shadow it.\n    const roleIds = identifiers.map(identifier => {\n        const resolved = byId.get(identifier) ?? bySlug.get(identifier);\n\n        if (!resolved) {\n            unknown.push(identifier);\n            return identifier;\n        }\n\n        return resolved;\n    });\n\n    if (unknown.length > 0) {\n        const names = unknown.map(identifier => `\"${identifier}\"`).join(\", \");\n        return Result.fail(new TeamValidationError(`Not a known role id or slug: ${names}.`));\n    }\n\n    return Result.ok(roleIds);\n};\n"],"names":["resolveRoleIdentifiers","rolesRepository","identifiers","Result","rolesResult","TeamValidationError","byId","Map","role","bySlug","unknown","roleIds","identifier","resolved","names"],"mappings":";;AAiBO,MAAMA,yBAAyB,OAClCC,iBACAC;IAEA,IAAIA,AAAuB,MAAvBA,YAAY,MAAM,EAClB,OAAOC,OAAO,EAAE,CAAC,EAAE;IAQvB,MAAMC,cAAc,MAAMH,gBAAgB,IAAI,CAAC,CAAC;IAEhD,IAAIG,YAAY,MAAM,IAClB,OAAOD,OAAO,IAAI,CAAC,IAAIE,oBAAoB,CAAC,sBAAsB,EAAED,YAAY,KAAK,EAAE;IAG3F,MAAME,OAAO,IAAIC,IAAIH,YAAY,KAAK,CAAC,GAAG,CAACI,CAAAA,OAAQ;YAACA,KAAK,EAAE;YAAEA,KAAK,EAAE;SAAC;IACrE,MAAMC,SAAS,IAAIF,IAAIH,YAAY,KAAK,CAAC,GAAG,CAACI,CAAAA,OAAQ;YAACA,KAAK,IAAI;YAAEA,KAAK,EAAE;SAAC;IAEzE,MAAME,UAAoB,EAAE;IAG5B,MAAMC,UAAUT,YAAY,GAAG,CAACU,CAAAA;QAC5B,MAAMC,WAAWP,KAAK,GAAG,CAACM,eAAeH,OAAO,GAAG,CAACG;QAEpD,IAAI,CAACC,UAAU;YACXH,QAAQ,IAAI,CAACE;YACb,OAAOA;QACX;QAEA,OAAOC;IACX;IAEA,IAAIH,QAAQ,MAAM,GAAG,GAAG;QACpB,MAAMI,QAAQJ,QAAQ,GAAG,CAACE,CAAAA,aAAc,CAAC,CAAC,EAAEA,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC;QAChE,OAAOT,OAAO,IAAI,CAAC,IAAIE,oBAAoB,CAAC,6BAA6B,EAAES,MAAM,CAAC,CAAC;IACvF;IAEA,OAAOX,OAAO,EAAE,CAACQ;AACrB"}

package/features/security/utils/getPermissionsFromRoles.d.ts

@@ -3,6 +3,6 @@ export declare const getPermissionsFromRoles: (securityGroups: Array<{
     permissions: SecurityPermission[];
     id: string;
 }>) => {
-    _src: string;
     name: string;
+    _src: string;
 }[];

package/features/serviceDiscovery/ServiceDiscovery.d.ts

@@ -0,0 +1,17 @@
+import type { GenericRecord } from "@webiny/api/types.js";
+export interface IServiceManifest {
+    name: string;
+    manifest: GenericRecord<string>;
+}
+export interface IServiceManifestLoader {
+    load(): Promise<IServiceManifest[] | undefined>;
+}
+type Manifest = GenericRecord<string>;
+export declare class ServiceDiscovery {
+    private static loader;
+    private static manifest;
+    static setLoader(loader: IServiceManifestLoader): void;
+    static load(): Promise<Manifest | undefined>;
+    static clear(): void;
+}
+export {};

package/features/serviceDiscovery/ServiceDiscovery.js

@@ -0,0 +1,22 @@
+class ServiceDiscovery {
+    static setLoader(loader) {
+        this.loader = loader;
+    }
+    static async load() {
+        if (this.manifest) return this.manifest;
+        if (!this.loader) throw new Error("ServiceDiscovery loader not configured. Call ServiceDiscovery.setLoader() before loading manifests.");
+        const manifests = await this.loader.load();
+        if (!manifests) return;
+        this.manifest = manifests.reduce((acc, item)=>({
+                ...acc,
+                [item.name]: item.manifest
+            }), {});
+        return this.manifest;
+    }
+    static clear() {
+        this.manifest = void 0;
+    }
+}
+export { ServiceDiscovery };
+
+//# sourceMappingURL=ServiceDiscovery.js.map

package/features/serviceDiscovery/ServiceDiscovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/serviceDiscovery/ServiceDiscovery.js","sources":["../../../src/features/serviceDiscovery/ServiceDiscovery.ts"],"sourcesContent":["import type { GenericRecord } from \"@webiny/api/types.js\";\n\nexport interface IServiceManifest {\n    name: string;\n    manifest: GenericRecord<string>;\n}\n\nexport interface IServiceManifestLoader {\n    load(): Promise<IServiceManifest[] | undefined>;\n}\n\ntype Manifest = GenericRecord<string>;\n\nexport class ServiceDiscovery {\n    private static loader: IServiceManifestLoader | undefined;\n    private static manifest: Manifest | undefined;\n\n    static setLoader(loader: IServiceManifestLoader): void {\n        this.loader = loader;\n    }\n\n    static async load(): Promise<Manifest | undefined> {\n        if (this.manifest) {\n            return this.manifest;\n        }\n\n        if (!this.loader) {\n            throw new Error(\n                \"ServiceDiscovery loader not configured. Call ServiceDiscovery.setLoader() before loading manifests.\"\n            );\n        }\n\n        const manifests = await this.loader.load();\n\n        if (!manifests) {\n            return undefined;\n        }\n\n        this.manifest = manifests.reduce<Manifest>((acc, item) => {\n            return { ...acc, [item.name]: item.manifest };\n        }, {});\n\n        return this.manifest;\n    }\n\n    static clear(): void {\n        this.manifest = undefined;\n    }\n}\n"],"names":["ServiceDiscovery","loader","Error","manifests","acc","item","undefined"],"mappings":"AAaO,MAAMA;IAIT,OAAO,UAAUC,MAA8B,EAAQ;QACnD,IAAI,CAAC,MAAM,GAAGA;IAClB;IAEA,aAAa,OAAsC;QAC/C,IAAI,IAAI,CAAC,QAAQ,EACb,OAAO,IAAI,CAAC,QAAQ;QAGxB,IAAI,CAAC,IAAI,CAAC,MAAM,EACZ,MAAM,IAAIC,MACN;QAIR,MAAMC,YAAY,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;QAExC,IAAI,CAACA,WACD;QAGJ,IAAI,CAAC,QAAQ,GAAGA,UAAU,MAAM,CAAW,CAACC,KAAKC,OACtC;gBAAE,GAAGD,GAAG;gBAAE,CAACC,KAAK,IAAI,CAAC,EAAEA,KAAK,QAAQ;YAAC,IAC7C,CAAC;QAEJ,OAAO,IAAI,CAAC,QAAQ;IACxB;IAEA,OAAO,QAAc;QACjB,IAAI,CAAC,QAAQ,GAAGC;IACpB;AACJ"}

package/features/serviceDiscovery/__tests__/ServiceDiscovery.test.d.ts

@@ -0,0 +1 @@
+export {};

package/features/serviceDiscovery/__tests__/ServiceDiscovery.test.js

@@ -0,0 +1,111 @@
+import { beforeEach, describe, expect, it } from "vitest";
+import { ServiceDiscovery } from "../ServiceDiscovery.js";
+describe("ServiceDiscovery", ()=>{
+    beforeEach(()=>{
+        ServiceDiscovery.clear();
+    });
+    it("should throw if no loader is set", async ()=>{
+        ServiceDiscovery.loader = void 0;
+        await expect(ServiceDiscovery.load()).rejects.toThrow("ServiceDiscovery loader not configured");
+    });
+    it("should load manifests and combine them by name", async ()=>{
+        const loader = {
+            async load () {
+                return [
+                    {
+                        name: "api",
+                        manifest: {
+                            cloudfront: {
+                                distributionId: "123"
+                            }
+                        }
+                    },
+                    {
+                        name: "core",
+                        manifest: {
+                            bucket: {
+                                name: "my-bucket"
+                            }
+                        }
+                    }
+                ];
+            }
+        };
+        ServiceDiscovery.setLoader(loader);
+        const result = await ServiceDiscovery.load();
+        expect(result).toEqual({
+            api: {
+                cloudfront: {
+                    distributionId: "123"
+                }
+            },
+            core: {
+                bucket: {
+                    name: "my-bucket"
+                }
+            }
+        });
+    });
+    it("should cache the result and not call loader again", async ()=>{
+        let callCount = 0;
+        const loader = {
+            async load () {
+                callCount++;
+                return [
+                    {
+                        name: "api",
+                        manifest: {
+                            url: "https://example.com"
+                        }
+                    }
+                ];
+            }
+        };
+        ServiceDiscovery.setLoader(loader);
+        await ServiceDiscovery.load();
+        await ServiceDiscovery.load();
+        await ServiceDiscovery.load();
+        expect(callCount).toBe(1);
+    });
+    it("should return undefined when loader returns undefined", async ()=>{
+        const loader = {
+            async load () {}
+        };
+        ServiceDiscovery.setLoader(loader);
+        const result = await ServiceDiscovery.load();
+        expect(result).toBeUndefined();
+    });
+    it("should reload after clear()", async ()=>{
+        let callCount = 0;
+        const loader = {
+            async load () {
+                callCount++;
+                return [
+                    {
+                        name: "api",
+                        manifest: {
+                            version: callCount
+                        }
+                    }
+                ];
+            }
+        };
+        ServiceDiscovery.setLoader(loader);
+        const first = await ServiceDiscovery.load();
+        expect(first).toEqual({
+            api: {
+                version: 1
+            }
+        });
+        ServiceDiscovery.clear();
+        const second = await ServiceDiscovery.load();
+        expect(second).toEqual({
+            api: {
+                version: 2
+            }
+        });
+        expect(callCount).toBe(2);
+    });
+});
+
+//# sourceMappingURL=ServiceDiscovery.test.js.map

package/features/serviceDiscovery/__tests__/ServiceDiscovery.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/serviceDiscovery/__tests__/ServiceDiscovery.test.js","sources":["../../../../src/features/serviceDiscovery/__tests__/ServiceDiscovery.test.ts"],"sourcesContent":["import { describe, it, expect, beforeEach } from \"vitest\";\nimport { ServiceDiscovery } from \"../ServiceDiscovery.js\";\nimport type { IServiceManifestLoader } from \"../ServiceDiscovery.js\";\n\ndescribe(\"ServiceDiscovery\", () => {\n    beforeEach(() => {\n        ServiceDiscovery.clear();\n    });\n\n    it(\"should throw if no loader is set\", async () => {\n        (ServiceDiscovery as any).loader = undefined;\n\n        await expect(ServiceDiscovery.load()).rejects.toThrow(\n            \"ServiceDiscovery loader not configured\"\n        );\n    });\n\n    it(\"should load manifests and combine them by name\", async () => {\n        const loader: IServiceManifestLoader = {\n            async load() {\n                return [\n                    { name: \"api\", manifest: { cloudfront: { distributionId: \"123\" } } },\n                    { name: \"core\", manifest: { bucket: { name: \"my-bucket\" } } }\n                ];\n            }\n        };\n\n        ServiceDiscovery.setLoader(loader);\n\n        const result = await ServiceDiscovery.load();\n\n        expect(result).toEqual({\n            api: { cloudfront: { distributionId: \"123\" } },\n            core: { bucket: { name: \"my-bucket\" } }\n        });\n    });\n\n    it(\"should cache the result and not call loader again\", async () => {\n        let callCount = 0;\n        const loader: IServiceManifestLoader = {\n            async load() {\n                callCount++;\n                return [{ name: \"api\", manifest: { url: \"https://example.com\" } }];\n            }\n        };\n\n        ServiceDiscovery.setLoader(loader);\n\n        await ServiceDiscovery.load();\n        await ServiceDiscovery.load();\n        await ServiceDiscovery.load();\n\n        expect(callCount).toBe(1);\n    });\n\n    it(\"should return undefined when loader returns undefined\", async () => {\n        const loader: IServiceManifestLoader = {\n            async load() {\n                return undefined;\n            }\n        };\n\n        ServiceDiscovery.setLoader(loader);\n\n        const result = await ServiceDiscovery.load();\n        expect(result).toBeUndefined();\n    });\n\n    it(\"should reload after clear()\", async () => {\n        let callCount = 0;\n        const loader: IServiceManifestLoader = {\n            async load() {\n                callCount++;\n                return [{ name: \"api\", manifest: { version: callCount } }];\n            }\n        };\n\n        ServiceDiscovery.setLoader(loader);\n\n        const first = await ServiceDiscovery.load();\n        expect(first).toEqual({ api: { version: 1 } });\n\n        ServiceDiscovery.clear();\n\n        const second = await ServiceDiscovery.load();\n        expect(second).toEqual({ api: { version: 2 } });\n        expect(callCount).toBe(2);\n    });\n});\n"],"names":["describe","beforeEach","ServiceDiscovery","it","undefined","expect","loader","result","callCount","first","second"],"mappings":";;AAIAA,SAAS,oBAAoB;IACzBC,WAAW;QACPC,iBAAiB,KAAK;IAC1B;IAEAC,GAAG,oCAAoC;QAClCD,iBAAAA,MAA+B,GAAGE;QAEnC,MAAMC,OAAOH,iBAAiB,IAAI,IAAI,OAAO,CAAC,OAAO,CACjD;IAER;IAEAC,GAAG,kDAAkD;QACjD,MAAMG,SAAiC;YACnC,MAAM;gBACF,OAAO;oBACH;wBAAE,MAAM;wBAAO,UAAU;4BAAE,YAAY;gCAAE,gBAAgB;4BAAM;wBAAE;oBAAE;oBACnE;wBAAE,MAAM;wBAAQ,UAAU;4BAAE,QAAQ;gCAAE,MAAM;4BAAY;wBAAE;oBAAE;iBAC/D;YACL;QACJ;QAEAJ,iBAAiB,SAAS,CAACI;QAE3B,MAAMC,SAAS,MAAML,iBAAiB,IAAI;QAE1CG,OAAOE,QAAQ,OAAO,CAAC;YACnB,KAAK;gBAAE,YAAY;oBAAE,gBAAgB;gBAAM;YAAE;YAC7C,MAAM;gBAAE,QAAQ;oBAAE,MAAM;gBAAY;YAAE;QAC1C;IACJ;IAEAJ,GAAG,qDAAqD;QACpD,IAAIK,YAAY;QAChB,MAAMF,SAAiC;YACnC,MAAM;gBACFE;gBACA,OAAO;oBAAC;wBAAE,MAAM;wBAAO,UAAU;4BAAE,KAAK;wBAAsB;oBAAE;iBAAE;YACtE;QACJ;QAEAN,iBAAiB,SAAS,CAACI;QAE3B,MAAMJ,iBAAiB,IAAI;QAC3B,MAAMA,iBAAiB,IAAI;QAC3B,MAAMA,iBAAiB,IAAI;QAE3BG,OAAOG,WAAW,IAAI,CAAC;IAC3B;IAEAL,GAAG,yDAAyD;QACxD,MAAMG,SAAiC;YACnC,MAAM,SAEN;QACJ;QAEAJ,iBAAiB,SAAS,CAACI;QAE3B,MAAMC,SAAS,MAAML,iBAAiB,IAAI;QAC1CG,OAAOE,QAAQ,aAAa;IAChC;IAEAJ,GAAG,+BAA+B;QAC9B,IAAIK,YAAY;QAChB,MAAMF,SAAiC;YACnC,MAAM;gBACFE;gBACA,OAAO;oBAAC;wBAAE,MAAM;wBAAO,UAAU;4BAAE,SAASA;wBAAU;oBAAE;iBAAE;YAC9D;QACJ;QAEAN,iBAAiB,SAAS,CAACI;QAE3B,MAAMG,QAAQ,MAAMP,iBAAiB,IAAI;QACzCG,OAAOI,OAAO,OAAO,CAAC;YAAE,KAAK;gBAAE,SAAS;YAAE;QAAE;QAE5CP,iBAAiB,KAAK;QAEtB,MAAMQ,SAAS,MAAMR,iBAAiB,IAAI;QAC1CG,OAAOK,QAAQ,OAAO,CAAC;YAAE,KAAK;gBAAE,SAAS;YAAE;QAAE;QAC7CL,OAAOG,WAAW,IAAI,CAAC;IAC3B;AACJ"}

package/features/serviceDiscovery/index.d.ts

@@ -0,0 +1,3 @@
+export { ServiceDiscovery } from "./ServiceDiscovery.js";
+export type { IServiceManifestLoader } from "./ServiceDiscovery.js";
+export type { IServiceManifest } from "./ServiceDiscovery.js";

package/features/serviceDiscovery/index.js

@@ -0,0 +1 @@
+export { ServiceDiscovery } from "./ServiceDiscovery.js";

package/features/slugify/DefaultSlugify.d.ts

@@ -0,0 +1,8 @@
+import { Slugify } from "./abstractions.js";
+declare class DefaultSlugifyImpl implements Slugify.Interface {
+    execute(value: string): string;
+}
+export declare const DefaultSlugify: typeof DefaultSlugifyImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").ISlugify>;
+};
+export {};

package/features/slugify/DefaultSlugify.js

@@ -0,0 +1,20 @@
+import slugify from "slugify";
+import { Slugify } from "./abstractions.js";
+const DEFAULT_OPTIONS = {
+    replacement: "-",
+    lower: true,
+    remove: /[*#?<>_{}[\]+~.()'"!:;@]/g,
+    trim: false
+};
+class DefaultSlugifyImpl {
+    execute(value) {
+        return slugify(value, DEFAULT_OPTIONS);
+    }
+}
+const DefaultSlugify = Slugify.createImplementation({
+    implementation: DefaultSlugifyImpl,
+    dependencies: []
+});
+export { DefaultSlugify };
+
+//# sourceMappingURL=DefaultSlugify.js.map

package/features/slugify/DefaultSlugify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/slugify/DefaultSlugify.js","sources":["../../../src/features/slugify/DefaultSlugify.ts"],"sourcesContent":["import baseSlugify from \"slugify\";\nimport { Slugify } from \"./abstractions.js\";\n\n/**\n * Webiny's canonical slug options. These were previously duplicated at every call site; keeping them\n * in one private place means projects can change slug generation everywhere at once by decorating\n * Slugify — not by passing per-call options, so the abstraction stays independent of this library.\n */\nconst DEFAULT_OPTIONS = {\n    replacement: \"-\",\n    lower: true,\n    remove: /[*#?<>_{}[\\]+~.()'\"!:;@]/g,\n    trim: false\n};\n\nclass DefaultSlugifyImpl implements Slugify.Interface {\n    execute(value: string): string {\n        return baseSlugify(value, DEFAULT_OPTIONS);\n    }\n}\n\nexport const DefaultSlugify = Slugify.createImplementation({\n    implementation: DefaultSlugifyImpl,\n    dependencies: []\n});\n"],"names":["DEFAULT_OPTIONS","DefaultSlugifyImpl","value","baseSlugify","DefaultSlugify","Slugify"],"mappings":";;AAQA,MAAMA,kBAAkB;IACpB,aAAa;IACb,OAAO;IACP,QAAQ;IACR,MAAM;AACV;AAEA,MAAMC;IACF,QAAQC,KAAa,EAAU;QAC3B,OAAOC,QAAYD,OAAOF;IAC9B;AACJ;AAEO,MAAMI,iBAAiBC,QAAQ,oBAAoB,CAAC;IACvD,gBAAgBJ;IAChB,cAAc,EAAE;AACpB"}

package/features/slugify/abstractions.d.ts

@@ -0,0 +1,12 @@
+export interface ISlugify {
+    /**
+     * Turns a value into a URL-friendly slug using Webiny's canonical options. This is the
+     * fine-grained seam behind `StringFormatter.slugify()` — decorate `Slugify` alone to change slug
+     * logic without touching the rest of the string formatter.
+     */
+    execute(value: string): string;
+}
+export declare const Slugify: import("@webiny/di").Abstraction<ISlugify>;
+export declare namespace Slugify {
+    type Interface = ISlugify;
+}

package/features/slugify/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const Slugify = createAbstraction("Slugify");
+export { Slugify };
+
+//# sourceMappingURL=abstractions.js.map

package/features/slugify/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/slugify/abstractions.js","sources":["../../../src/features/slugify/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\n\nexport interface ISlugify {\n    /**\n     * Turns a value into a URL-friendly slug using Webiny's canonical options. This is the\n     * fine-grained seam behind `StringFormatter.slugify()` — decorate `Slugify` alone to change slug\n     * logic without touching the rest of the string formatter.\n     */\n    execute(value: string): string;\n}\n\nexport const Slugify = createAbstraction<ISlugify>(\"Slugify\");\n\nexport namespace Slugify {\n    export type Interface = ISlugify;\n}\n"],"names":["Slugify","createAbstraction"],"mappings":";AAWO,MAAMA,UAAUC,kBAA4B"}

package/features/slugify/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const SlugifyFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/slugify/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { DefaultSlugify } from "./DefaultSlugify.js";
+const SlugifyFeature = createFeature({
+    name: "SlugifyFeature",
+    register (container) {
+        container.register(DefaultSlugify);
+    }
+});
+export { SlugifyFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/slugify/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/slugify/feature.js","sources":["../../../src/features/slugify/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { DefaultSlugify } from \"./DefaultSlugify.js\";\n\nexport const SlugifyFeature = createFeature({\n    name: \"SlugifyFeature\",\n    register(container) {\n        container.register(DefaultSlugify);\n    }\n});\n"],"names":["SlugifyFeature","createFeature","container","DefaultSlugify"],"mappings":";;AAGO,MAAMA,iBAAiBC,cAAc;IACxC,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/features/slugify/index.d.ts

@@ -0,0 +1,3 @@
+export { Slugify } from "./abstractions.js";
+export type { ISlugify } from "./abstractions.js";
+export { SlugifyFeature } from "./feature.js";