@webiny/api-core 6.6.0-alpha.0 → 6.6.0-alpha.1

package/features/security/roles/CreateRole/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/roles/CreateRole/schema.js","sources":["../../../../../src/features/security/roles/CreateRole/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createRoleValidation = z.object({\n    name: z.string().min(3),\n    slug: z.string().min(3),\n    description: z.string().max(500).optional().default(\"\"),\n    permissions: z.array(z.looseObject({ name: z.string() }))\n});\n"],"names":["createRoleValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IACrB,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IACrB,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,QAAQ,GAAG,OAAO,CAAC;IACpD,aAAaA,EAAE,KAAK,CAACA,EAAE,WAAW,CAAC;QAAE,MAAMA,EAAE,MAAM;IAAG;AAC1D"}
+{"version":3,"file":"features/security/roles/CreateRole/schema.js","sources":["../../../../../src/features/security/roles/CreateRole/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createRoleValidation = z.object({\n    name: z.string().min(3),\n    slug: z.string().min(3),\n    // Nullable in the GraphQL schema - see `descriptionOnCreate` for why this is `.nullish()`.\n    // `.optional().default(\"\")` did NOT cover this: Zod applies a default to `undefined` only, so\n    // an explicit null still failed validation.\n    description: z.string().max(500).nullish(),\n    permissions: z.array(z.looseObject({ name: z.string() }))\n});\n"],"names":["createRoleValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IACrB,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IAIrB,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,OAAO;IACxC,aAAaA,EAAE,KAAK,CAACA,EAAE,WAAW,CAAC;QAAE,MAAMA,EAAE,MAAM;IAAG;AAC1D"}

package/features/security/roles/UpdateRole/UpdateRoleUseCase.js

@@ -5,6 +5,7 @@ import { IdentityContext } from "../../IdentityContext/abstractions.js";
 import { EventPublisher } from "../../../eventPublisher/index.js";
 import { updateRoleValidation } from "./schema.js";
 import { RoleAfterUpdateEvent, RoleBeforeUpdateEvent } from "./events.js";
+import { descriptionOnUpdate } from "../../shared/description.js";
 import { CannotUpdatePluginRolesError, NotAuthorizedError, RoleValidationError } from "../shared/errors.js";
 class UpdateRoleUseCaseImpl {
     constructor(repository, identityContext, eventPublisher){
@@ -23,21 +24,26 @@ class UpdateRoleUseCaseImpl {
         if (existingResult.isFail()) return Result.fail(existingResult.error);
         const existingRole = existingResult.value;
         if (existingRole.plugin) return Result.fail(new CannotUpdatePluginRolesError());
+        const { description, ...rest } = validation.data;
+        const changes = {
+            ...rest,
+            ...descriptionOnUpdate(description)
+        };
         const updatedRole = {
             ...existingRole,
-            ...validation.data
+            ...changes
         };
         await this.eventPublisher.publish(new RoleBeforeUpdateEvent({
             original: existingRole,
             updated: updatedRole,
-            input: validation.data
+            input: changes
         }));
         const result = await this.repository.update(updatedRole);
         if (result.isFail()) return Result.fail(result.error);
         await this.eventPublisher.publish(new RoleAfterUpdateEvent({
             original: existingRole,
             updated: updatedRole,
-            input: validation.data
+            input: changes
         }));
         return Result.ok(updatedRole);
     }

package/features/security/roles/UpdateRole/UpdateRoleUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/roles/UpdateRole/UpdateRoleUseCase.js","sources":["../../../../../src/features/security/roles/UpdateRole/UpdateRoleUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { UpdateRoleUseCase as UseCase } from \"./abstractions.js\";\nimport { RolesRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { updateRoleValidation } from \"./schema.js\";\nimport { RoleBeforeUpdateEvent, RoleAfterUpdateEvent } from \"./events.js\";\nimport type { Role, UpdateRoleInput } from \"../shared/types.js\";\nimport {\n    NotAuthorizedError,\n    CannotUpdatePluginRolesError,\n    RoleValidationError\n} from \"../shared/errors.js\";\n\nclass UpdateRoleUseCaseImpl implements UseCase.Interface {\n    private repository: RolesRepository.Interface;\n    private identityContext: IdentityContext.Interface;\n    private eventPublisher: EventPublisher.Interface;\n\n    constructor(\n        repository: RolesRepository.Interface,\n        identityContext: IdentityContext.Interface,\n        eventPublisher: EventPublisher.Interface\n    ) {\n        this.repository = repository;\n        this.identityContext = identityContext;\n        this.eventPublisher = eventPublisher;\n    }\n\n    async execute(id: string, input: UpdateRoleInput): Promise<Result<Role, UseCase.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.role\");\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = updateRoleValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new RoleValidationError(validation.error.issues[0].message));\n        }\n\n        const existingResult = await this.repository.get({ id });\n        if (existingResult.isFail()) {\n            return Result.fail(existingResult.error);\n        }\n\n        const existingRole = existingResult.value;\n\n        // Check if role is created via plugin\n        if (existingRole.plugin) {\n            return Result.fail(new CannotUpdatePluginRolesError());\n        }\n\n        const updatedRole: Role = {\n            ...existingRole,\n            ...validation.data\n        };\n\n        await this.eventPublisher.publish(\n            new RoleBeforeUpdateEvent({\n                original: existingRole,\n                updated: updatedRole,\n                input: validation.data\n            })\n        );\n\n        const result = await this.repository.update(updatedRole);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new RoleAfterUpdateEvent({\n                original: existingRole,\n                updated: updatedRole,\n                input: validation.data\n            })\n        );\n\n        return Result.ok(updatedRole);\n    }\n}\n\nexport const UpdateRoleUseCase = UseCase.createImplementation({\n    implementation: UpdateRoleUseCaseImpl,\n    dependencies: [RolesRepository, IdentityContext, EventPublisher]\n});\n"],"names":["UpdateRoleUseCaseImpl","repository","identityContext","eventPublisher","id","input","hasPermission","Result","NotAuthorizedError","validation","updateRoleValidation","RoleValidationError","existingResult","existingRole","CannotUpdatePluginRolesError","updatedRole","RoleBeforeUpdateEvent","result","RoleAfterUpdateEvent","UpdateRoleUseCase","UseCase","RolesRepository","IdentityContext","EventPublisher"],"mappings":";;;;;;;;AAcA,MAAMA;IAKF,YACIC,UAAqC,EACrCC,eAA0C,EAC1CC,cAAwC,CAC1C;QACE,IAAI,CAAC,UAAU,GAAGF;QAClB,IAAI,CAAC,eAAe,GAAGC;QACvB,IAAI,CAAC,cAAc,GAAGC;IAC1B;IAEA,MAAM,QAAQC,EAAU,EAAEC,KAAsB,EAAwC;QACpF,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,qBAAqB,SAAS,CAACL;QAClD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,oBAAoBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGjF,MAAMG,iBAAiB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAER;QAAG;QACtD,IAAIQ,eAAe,MAAM,IACrB,OAAOL,OAAO,IAAI,CAACK,eAAe,KAAK;QAG3C,MAAMC,eAAeD,eAAe,KAAK;QAGzC,IAAIC,aAAa,MAAM,EACnB,OAAON,OAAO,IAAI,CAAC,IAAIO;QAG3B,MAAMC,cAAoB;YACtB,GAAGF,YAAY;YACf,GAAGJ,WAAW,IAAI;QACtB;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIO,sBAAsB;YACtB,UAAUH;YACV,SAASE;YACT,OAAON,WAAW,IAAI;QAC1B;QAGJ,MAAMQ,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACF;QAE5C,IAAIE,OAAO,MAAM,IACb,OAAOV,OAAO,IAAI,CAACU,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,qBAAqB;YACrB,UAAUL;YACV,SAASE;YACT,OAAON,WAAW,IAAI;QAC1B;QAGJ,OAAOF,OAAO,EAAE,CAACQ;IACrB;AACJ;AAEO,MAAMI,sCAAoBC,kBAAAA,oBAA4B,CAAC;IAC1D,gBAAgBpB;IAChB,cAAc;QAACqB;QAAiBC;QAAiBC;KAAe;AACpE"}
+{"version":3,"file":"features/security/roles/UpdateRole/UpdateRoleUseCase.js","sources":["../../../../../src/features/security/roles/UpdateRole/UpdateRoleUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { UpdateRoleUseCase as UseCase } from \"./abstractions.js\";\nimport { RolesRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { updateRoleValidation } from \"./schema.js\";\nimport { RoleBeforeUpdateEvent, RoleAfterUpdateEvent } from \"./events.js\";\nimport type { Role, UpdateRoleInput } from \"../shared/types.js\";\nimport { descriptionOnUpdate } from \"../../shared/description.js\";\nimport {\n    NotAuthorizedError,\n    CannotUpdatePluginRolesError,\n    RoleValidationError\n} from \"../shared/errors.js\";\n\nclass UpdateRoleUseCaseImpl implements UseCase.Interface {\n    private repository: RolesRepository.Interface;\n    private identityContext: IdentityContext.Interface;\n    private eventPublisher: EventPublisher.Interface;\n\n    constructor(\n        repository: RolesRepository.Interface,\n        identityContext: IdentityContext.Interface,\n        eventPublisher: EventPublisher.Interface\n    ) {\n        this.repository = repository;\n        this.identityContext = identityContext;\n        this.eventPublisher = eventPublisher;\n    }\n\n    async execute(id: string, input: UpdateRoleInput): Promise<Result<Role, UseCase.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.role\");\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = updateRoleValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new RoleValidationError(validation.error.issues[0].message));\n        }\n\n        const existingResult = await this.repository.get({ id });\n        if (existingResult.isFail()) {\n            return Result.fail(existingResult.error);\n        }\n\n        const existingRole = existingResult.value;\n\n        // Check if role is created via plugin\n        if (existingRole.plugin) {\n            return Result.fail(new CannotUpdatePluginRolesError());\n        }\n\n        // `description` is pulled out of the spread because it is the one field that accepts null.\n        // Normalising it here keeps null out of both the entity and the published events, whose\n        // input type declares `description?: string`.\n        const { description, ...rest } = validation.data;\n\n        const changes: UpdateRoleInput = {\n            ...rest,\n            ...descriptionOnUpdate(description)\n        };\n\n        const updatedRole: Role = {\n            ...existingRole,\n            ...changes\n        };\n\n        await this.eventPublisher.publish(\n            new RoleBeforeUpdateEvent({\n                original: existingRole,\n                updated: updatedRole,\n                input: changes\n            })\n        );\n\n        const result = await this.repository.update(updatedRole);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new RoleAfterUpdateEvent({\n                original: existingRole,\n                updated: updatedRole,\n                input: changes\n            })\n        );\n\n        return Result.ok(updatedRole);\n    }\n}\n\nexport const UpdateRoleUseCase = UseCase.createImplementation({\n    implementation: UpdateRoleUseCaseImpl,\n    dependencies: [RolesRepository, IdentityContext, EventPublisher]\n});\n"],"names":["UpdateRoleUseCaseImpl","repository","identityContext","eventPublisher","id","input","hasPermission","Result","NotAuthorizedError","validation","updateRoleValidation","RoleValidationError","existingResult","existingRole","CannotUpdatePluginRolesError","description","rest","changes","descriptionOnUpdate","updatedRole","RoleBeforeUpdateEvent","result","RoleAfterUpdateEvent","UpdateRoleUseCase","UseCase","RolesRepository","IdentityContext","EventPublisher"],"mappings":";;;;;;;;;AAeA,MAAMA;IAKF,YACIC,UAAqC,EACrCC,eAA0C,EAC1CC,cAAwC,CAC1C;QACE,IAAI,CAAC,UAAU,GAAGF;QAClB,IAAI,CAAC,eAAe,GAAGC;QACvB,IAAI,CAAC,cAAc,GAAGC;IAC1B;IAEA,MAAM,QAAQC,EAAU,EAAEC,KAAsB,EAAwC;QACpF,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,qBAAqB,SAAS,CAACL;QAClD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,oBAAoBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGjF,MAAMG,iBAAiB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAER;QAAG;QACtD,IAAIQ,eAAe,MAAM,IACrB,OAAOL,OAAO,IAAI,CAACK,eAAe,KAAK;QAG3C,MAAMC,eAAeD,eAAe,KAAK;QAGzC,IAAIC,aAAa,MAAM,EACnB,OAAON,OAAO,IAAI,CAAC,IAAIO;QAM3B,MAAM,EAAEC,WAAW,EAAE,GAAGC,MAAM,GAAGP,WAAW,IAAI;QAEhD,MAAMQ,UAA2B;YAC7B,GAAGD,IAAI;YACP,GAAGE,oBAAoBH,YAAY;QACvC;QAEA,MAAMI,cAAoB;YACtB,GAAGN,YAAY;YACf,GAAGI,OAAO;QACd;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIG,sBAAsB;YACtB,UAAUP;YACV,SAASM;YACT,OAAOF;QACX;QAGJ,MAAMI,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACF;QAE5C,IAAIE,OAAO,MAAM,IACb,OAAOd,OAAO,IAAI,CAACc,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,qBAAqB;YACrB,UAAUT;YACV,SAASM;YACT,OAAOF;QACX;QAGJ,OAAOV,OAAO,EAAE,CAACY;IACrB;AACJ;AAEO,MAAMI,sCAAoBC,kBAAAA,oBAA4B,CAAC;IAC1D,gBAAgBxB;IAChB,cAAc;QAACyB;QAAiBC;QAAiBC;KAAe;AACpE"}

package/features/security/roles/UpdateRole/schema.d.ts

@@ -1,7 +1,7 @@
 import { z } from "zod";
 export declare const updateRoleValidation: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     permissions: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
     }, z.core.$loose>>>;

package/features/security/roles/UpdateRole/schema.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 const updateRoleValidation = z.object({
     name: z.string().min(3).optional(),
-    description: z.string().max(500).optional(),
+    description: z.string().max(500).nullish(),
     permissions: z.array(z.looseObject({
         name: z.string()
     })).optional()

package/features/security/roles/UpdateRole/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/roles/UpdateRole/schema.js","sources":["../../../../../src/features/security/roles/UpdateRole/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const updateRoleValidation = z.object({\n    name: z.string().min(3).optional(),\n    description: z.string().max(500).optional(),\n    permissions: z.array(z.looseObject({ name: z.string() })).optional()\n});\n"],"names":["updateRoleValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ;IAChC,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,QAAQ;IACzC,aAAaA,EAAE,KAAK,CAACA,EAAE,WAAW,CAAC;QAAE,MAAMA,EAAE,MAAM;IAAG,IAAI,QAAQ;AACtE"}
+{"version":3,"file":"features/security/roles/UpdateRole/schema.js","sources":["../../../../../src/features/security/roles/UpdateRole/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const updateRoleValidation = z.object({\n    name: z.string().min(3).optional(),\n    // Nullable in the GraphQL schema - see `descriptionOnUpdate` for why this is `.nullish()` and\n    // must not carry a `.transform()`.\n    description: z.string().max(500).nullish(),\n    permissions: z.array(z.looseObject({ name: z.string() })).optional()\n});\n"],"names":["updateRoleValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ;IAGhC,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,OAAO;IACxC,aAAaA,EAAE,KAAK,CAACA,EAAE,WAAW,CAAC;QAAE,MAAMA,EAAE,MAAM;IAAG,IAAI,QAAQ;AACtE"}

package/features/security/shared/description.d.ts

@@ -0,0 +1,4 @@
+export declare const descriptionOnCreate: (value: string | null | undefined) => string;
+export declare const descriptionOnUpdate: (value: string | null | undefined) => {
+    description?: string;
+};

package/features/security/shared/description.js

@@ -0,0 +1,7 @@
+const descriptionOnCreate = (value)=>value ?? "";
+const descriptionOnUpdate = (value)=>void 0 === value ? {} : {
+        description: value ?? ""
+    };
+export { descriptionOnCreate, descriptionOnUpdate };
+
+//# sourceMappingURL=description.js.map

package/features/security/shared/description.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/shared/description.js","sources":["../../../../src/features/security/shared/description.ts"],"sourcesContent":["// Roles, teams and API keys all declare `description: String` in the GraphQL schema - nullable -\n// while their domain types store a plain string and use \"\" to mean \"no description\". Clients\n// therefore legitimately send null, and the admin app does exactly that: it reads an entity saved\n// without a description and submits the edit form again unchanged.\n//\n// Zod's `.optional()` accepts only `undefined`, so those requests used to fail with\n// \"Invalid input: expected string, received null\". The input schemas use `.nullish()` instead, and\n// these two helpers map what comes out of them onto the domain type.\n//\n// Note the schemas must NOT do this mapping via `.transform()`: a transform makes the key required\n// in the parsed output rather than optional, so spreading a parsed update onto a stored entity\n// would write `description: undefined` and wipe the stored value on every partial update.\n\nexport const descriptionOnCreate = (value: string | null | undefined): string => value ?? \"\";\n\n// Returns a patch rather than a value, because on a partial update an absent `description` has to\n// leave the stored one alone, while an explicit null clears it.\nexport const descriptionOnUpdate = (value: string | null | undefined): { description?: string } =>\n    value === undefined ? {} : { description: value ?? \"\" };\n"],"names":["descriptionOnCreate","value","descriptionOnUpdate","undefined"],"mappings":"AAaO,MAAMA,sBAAsB,CAACC,QAA6CA,SAAS;AAInF,MAAMC,sBAAsB,CAACD,QAChCA,AAAUE,WAAVF,QAAsB,CAAC,IAAI;QAAE,aAAaA,SAAS;IAAG"}

package/features/security/shared/index.d.ts

@@ -1,2 +1,3 @@
 export * from "./abstractions.js";
+export * from "./description.js";
 export * from "./errors.js";

package/features/security/shared/index.js

@@ -1,2 +1,3 @@
 export * from "./abstractions.js";
+export * from "./description.js";
 export * from "./errors.js";

package/features/security/teams/CreateTeam/CreateTeamUseCase.d.ts

@@ -2,13 +2,15 @@ import { Result } from "@webiny/feature/api";
 import { EventPublisher } from "../../../../features/eventPublisher/index.js";
 import { CreateTeam } from "./abstractions.js";
 import { TeamsRepository } from "../shared/abstractions.js";
+import { RolesRepository } from "../../roles/shared/abstractions.js";
 import { IdentityContext } from "../../IdentityContext/abstractions.js";
 import type { Team, CreateTeamInput } from "../shared/types.js";
 export declare class CreateTeamUseCase implements CreateTeam.Interface {
     private identityContext;
     private eventPublisher;
     private repository;
-    constructor(identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface, repository: TeamsRepository.Interface);
+    private rolesRepository;
+    constructor(identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface, repository: TeamsRepository.Interface, rolesRepository: RolesRepository.Interface);
     execute(input: CreateTeamInput): Promise<Result<Team, CreateTeam.Error>>;
 }
 export declare const CreateTeamUseCaseImpl: import("@webiny/di").Implementation<typeof CreateTeamUseCase>;

package/features/security/teams/CreateTeam/CreateTeamUseCase.js

@@ -3,15 +3,19 @@ import { Result, createImplementation } from "@webiny/feature/api";
 import { EventPublisher } from "../../../eventPublisher/index.js";
 import { CreateTeam } from "./abstractions.js";
 import { TeamsRepository } from "../shared/abstractions.js";
+import { RolesRepository } from "../../roles/shared/abstractions.js";
 import { IdentityContext } from "../../IdentityContext/abstractions.js";
 import { createTeamValidation } from "./schema.js";
 import { TeamAfterCreateEvent, TeamBeforeCreateEvent } from "./events.js";
 import { NotAuthorizedError, TeamExistsError, TeamValidationError } from "../shared/errors.js";
+import { descriptionOnCreate } from "../../shared/description.js";
+import { resolveRoleIdentifiers } from "../shared/resolveRoleIdentifiers.js";
 class CreateTeamUseCase {
-    constructor(identityContext, eventPublisher, repository){
+    constructor(identityContext, eventPublisher, repository, rolesRepository){
         this.identityContext = identityContext;
         this.eventPublisher = eventPublisher;
         this.repository = repository;
+        this.rolesRepository = rolesRepository;
     }
     async execute(input) {
         const hasPermission = await this.identityContext.getPermission("security.team");
@@ -24,12 +28,19 @@ class CreateTeamUseCase {
             slug: data.slug
         });
         if (existingTeamResult.isOk()) return Result.fail(new TeamExistsError(data.slug));
+        const roleIdsResult = await resolveRoleIdentifiers(this.rolesRepository, data.roles);
+        if (roleIdsResult.isFail()) return Result.fail(roleIdsResult.error);
+        const createInput = {
+            ...data,
+            description: descriptionOnCreate(data.description),
+            roles: roleIdsResult.value
+        };
         const team = {
             id: mdbid(),
-            name: data.name,
-            slug: data.slug,
-            description: data.description,
-            roles: data.roles,
+            name: createInput.name,
+            slug: createInput.slug,
+            description: descriptionOnCreate(createInput.description),
+            roles: createInput.roles,
             system: input.system || false,
             createdOn: new Date().toISOString(),
             createdBy: {
@@ -41,13 +52,13 @@ class CreateTeamUseCase {
         };
         await this.eventPublisher.publish(new TeamBeforeCreateEvent({
             team,
-            input: validation.data
+            input: createInput
         }));
         const result = await this.repository.create(team);
         if (result.isFail()) return Result.fail(result.error);
         await this.eventPublisher.publish(new TeamAfterCreateEvent({
             team,
-            input: validation.data
+            input: createInput
         }));
         return Result.ok(team);
     }
@@ -58,7 +69,8 @@ const CreateTeamUseCaseImpl = createImplementation({
     dependencies: [
         IdentityContext,
         EventPublisher,
-        TeamsRepository
+        TeamsRepository,
+        RolesRepository
     ]
 });
 export { CreateTeamUseCase, CreateTeamUseCaseImpl };

package/features/security/teams/CreateTeam/CreateTeamUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/teams/CreateTeam/CreateTeamUseCase.js","sources":["../../../../../src/features/security/teams/CreateTeam/CreateTeamUseCase.ts"],"sourcesContent":["import { mdbid } from \"@webiny/utils\";\nimport { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { CreateTeam } from \"./abstractions.js\";\nimport { TeamsRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { createTeamValidation } from \"./schema.js\";\nimport { TeamBeforeCreateEvent, TeamAfterCreateEvent } from \"./events.js\";\nimport type { Team, CreateTeamInput } from \"../shared/types.js\";\nimport { NotAuthorizedError, TeamExistsError, TeamValidationError } from \"../shared/errors.js\";\n\nexport class CreateTeamUseCase implements CreateTeam.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private eventPublisher: EventPublisher.Interface,\n        private repository: TeamsRepository.Interface\n    ) {}\n\n    async execute(input: CreateTeamInput): Promise<Result<Team, CreateTeam.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.team\");\n\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = createTeamValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new TeamValidationError(validation.error.issues[0].message));\n        }\n\n        const identity = this.identityContext.getIdentity();\n        const data = validation.data;\n\n        // Check if team with same slug already exists\n        const existingTeamResult = await this.repository.get({ slug: data.slug });\n        if (existingTeamResult.isOk()) {\n            return Result.fail(new TeamExistsError(data.slug));\n        }\n\n        const team: Team = {\n            id: mdbid(),\n            name: data.name,\n            slug: data.slug,\n            description: data.description,\n            roles: data.roles,\n            system: input.system || false,\n            createdOn: new Date().toISOString(),\n            createdBy: {\n                id: identity.id,\n                displayName: identity.displayName,\n                type: identity.type\n            },\n            plugin: false\n        };\n\n        await this.eventPublisher.publish(\n            new TeamBeforeCreateEvent({ team, input: validation.data })\n        );\n\n        const result = await this.repository.create(team);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new TeamAfterCreateEvent({ team, input: validation.data })\n        );\n\n        return Result.ok(team);\n    }\n}\n\nexport const CreateTeamUseCaseImpl = createImplementation({\n    abstraction: CreateTeam,\n    implementation: CreateTeamUseCase,\n    dependencies: [IdentityContext, EventPublisher, TeamsRepository]\n});\n"],"names":["CreateTeamUseCase","identityContext","eventPublisher","repository","input","hasPermission","Result","NotAuthorizedError","validation","createTeamValidation","TeamValidationError","identity","data","existingTeamResult","TeamExistsError","team","mdbid","Date","TeamBeforeCreateEvent","result","TeamAfterCreateEvent","CreateTeamUseCaseImpl","createImplementation","CreateTeam","IdentityContext","EventPublisher","TeamsRepository"],"mappings":";;;;;;;;;AAYO,MAAMA;IACT,YACYC,eAA0C,EAC1CC,cAAwC,EACxCC,UAAqC,CAC/C;aAHUF,eAAe,GAAfA;aACAC,cAAc,GAAdA;aACAC,UAAU,GAAVA;IACT;IAEH,MAAM,QAAQC,KAAsB,EAA2C;QAC3E,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAE/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,qBAAqB,SAAS,CAACL;QAClD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,oBAAoBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGjF,MAAMG,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QACjD,MAAMC,OAAOJ,WAAW,IAAI;QAG5B,MAAMK,qBAAqB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAMD,KAAK,IAAI;QAAC;QACvE,IAAIC,mBAAmB,IAAI,IACvB,OAAOP,OAAO,IAAI,CAAC,IAAIQ,gBAAgBF,KAAK,IAAI;QAGpD,MAAMG,OAAa;YACf,IAAIC;YACJ,MAAMJ,KAAK,IAAI;YACf,MAAMA,KAAK,IAAI;YACf,aAAaA,KAAK,WAAW;YAC7B,OAAOA,KAAK,KAAK;YACjB,QAAQR,MAAM,MAAM,IAAI;YACxB,WAAW,IAAIa,OAAO,WAAW;YACjC,WAAW;gBACP,IAAIN,SAAS,EAAE;gBACf,aAAaA,SAAS,WAAW;gBACjC,MAAMA,SAAS,IAAI;YACvB;YACA,QAAQ;QACZ;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIO,sBAAsB;YAAEH;YAAM,OAAOP,WAAW,IAAI;QAAC;QAG7D,MAAMW,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACJ;QAE5C,IAAII,OAAO,MAAM,IACb,OAAOb,OAAO,IAAI,CAACa,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,qBAAqB;YAAEL;YAAM,OAAOP,WAAW,IAAI;QAAC;QAG5D,OAAOF,OAAO,EAAE,CAACS;IACrB;AACJ;AAEO,MAAMM,wBAAwBC,qBAAqB;IACtD,aAAaC;IACb,gBAAgBvB;IAChB,cAAc;QAACwB;QAAiBC;QAAgBC;KAAgB;AACpE"}
+{"version":3,"file":"features/security/teams/CreateTeam/CreateTeamUseCase.js","sources":["../../../../../src/features/security/teams/CreateTeam/CreateTeamUseCase.ts"],"sourcesContent":["import { mdbid } from \"@webiny/utils\";\nimport { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { CreateTeam } from \"./abstractions.js\";\nimport { TeamsRepository } from \"../shared/abstractions.js\";\nimport { RolesRepository } from \"../../roles/shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { createTeamValidation } from \"./schema.js\";\nimport { TeamBeforeCreateEvent, TeamAfterCreateEvent } from \"./events.js\";\nimport type { Team, CreateTeamInput } from \"../shared/types.js\";\nimport { NotAuthorizedError, TeamExistsError, TeamValidationError } from \"../shared/errors.js\";\nimport { descriptionOnCreate } from \"../../shared/description.js\";\nimport { resolveRoleIdentifiers } from \"../shared/resolveRoleIdentifiers.js\";\n\nexport class CreateTeamUseCase implements CreateTeam.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private eventPublisher: EventPublisher.Interface,\n        private repository: TeamsRepository.Interface,\n        private rolesRepository: RolesRepository.Interface\n    ) {}\n\n    async execute(input: CreateTeamInput): Promise<Result<Team, CreateTeam.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.team\");\n\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = createTeamValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new TeamValidationError(validation.error.issues[0].message));\n        }\n\n        const identity = this.identityContext.getIdentity();\n        const data = validation.data;\n\n        // Check if team with same slug already exists\n        const existingTeamResult = await this.repository.get({ slug: data.slug });\n        if (existingTeamResult.isOk()) {\n            return Result.fail(new TeamExistsError(data.slug));\n        }\n\n        // A slug here would be stored verbatim and then match no role, leaving a team that grants\n        // nothing. Resolved before the entity is built so the events carry the stored IDs.\n        const roleIdsResult = await resolveRoleIdentifiers(this.rolesRepository, data.roles);\n\n        if (roleIdsResult.isFail()) {\n            return Result.fail(roleIdsResult.error);\n        }\n\n        // Normalised up front so that null reaches neither the entity nor the published events.\n        const createInput: CreateTeamInput = {\n            ...data,\n            description: descriptionOnCreate(data.description),\n            roles: roleIdsResult.value\n        };\n\n        const team: Team = {\n            id: mdbid(),\n            name: createInput.name,\n            slug: createInput.slug,\n            description: descriptionOnCreate(createInput.description),\n            roles: createInput.roles,\n            system: input.system || false,\n            createdOn: new Date().toISOString(),\n            createdBy: {\n                id: identity.id,\n                displayName: identity.displayName,\n                type: identity.type\n            },\n            plugin: false\n        };\n\n        await this.eventPublisher.publish(new TeamBeforeCreateEvent({ team, input: createInput }));\n\n        const result = await this.repository.create(team);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(new TeamAfterCreateEvent({ team, input: createInput }));\n\n        return Result.ok(team);\n    }\n}\n\nexport const CreateTeamUseCaseImpl = createImplementation({\n    abstraction: CreateTeam,\n    implementation: CreateTeamUseCase,\n    dependencies: [IdentityContext, EventPublisher, TeamsRepository, RolesRepository]\n});\n"],"names":["CreateTeamUseCase","identityContext","eventPublisher","repository","rolesRepository","input","hasPermission","Result","NotAuthorizedError","validation","createTeamValidation","TeamValidationError","identity","data","existingTeamResult","TeamExistsError","roleIdsResult","resolveRoleIdentifiers","createInput","descriptionOnCreate","team","mdbid","Date","TeamBeforeCreateEvent","result","TeamAfterCreateEvent","CreateTeamUseCaseImpl","createImplementation","CreateTeam","IdentityContext","EventPublisher","TeamsRepository","RolesRepository"],"mappings":";;;;;;;;;;;;AAeO,MAAMA;IACT,YACYC,eAA0C,EAC1CC,cAAwC,EACxCC,UAAqC,EACrCC,eAA0C,CACpD;aAJUH,eAAe,GAAfA;aACAC,cAAc,GAAdA;aACAC,UAAU,GAAVA;aACAC,eAAe,GAAfA;IACT;IAEH,MAAM,QAAQC,KAAsB,EAA2C;QAC3E,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAE/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,qBAAqB,SAAS,CAACL;QAClD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,oBAAoBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGjF,MAAMG,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QACjD,MAAMC,OAAOJ,WAAW,IAAI;QAG5B,MAAMK,qBAAqB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAMD,KAAK,IAAI;QAAC;QACvE,IAAIC,mBAAmB,IAAI,IACvB,OAAOP,OAAO,IAAI,CAAC,IAAIQ,gBAAgBF,KAAK,IAAI;QAKpD,MAAMG,gBAAgB,MAAMC,uBAAuB,IAAI,CAAC,eAAe,EAAEJ,KAAK,KAAK;QAEnF,IAAIG,cAAc,MAAM,IACpB,OAAOT,OAAO,IAAI,CAACS,cAAc,KAAK;QAI1C,MAAME,cAA+B;YACjC,GAAGL,IAAI;YACP,aAAaM,oBAAoBN,KAAK,WAAW;YACjD,OAAOG,cAAc,KAAK;QAC9B;QAEA,MAAMI,OAAa;YACf,IAAIC;YACJ,MAAMH,YAAY,IAAI;YACtB,MAAMA,YAAY,IAAI;YACtB,aAAaC,oBAAoBD,YAAY,WAAW;YACxD,OAAOA,YAAY,KAAK;YACxB,QAAQb,MAAM,MAAM,IAAI;YACxB,WAAW,IAAIiB,OAAO,WAAW;YACjC,WAAW;gBACP,IAAIV,SAAS,EAAE;gBACf,aAAaA,SAAS,WAAW;gBACjC,MAAMA,SAAS,IAAI;YACvB;YACA,QAAQ;QACZ;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAIW,sBAAsB;YAAEH;YAAM,OAAOF;QAAY;QAEvF,MAAMM,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACJ;QAE5C,IAAII,OAAO,MAAM,IACb,OAAOjB,OAAO,IAAI,CAACiB,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAIC,qBAAqB;YAAEL;YAAM,OAAOF;QAAY;QAEtF,OAAOX,OAAO,EAAE,CAACa;IACrB;AACJ;AAEO,MAAMM,wBAAwBC,qBAAqB;IACtD,aAAaC;IACb,gBAAgB5B;IAChB,cAAc;QAAC6B;QAAiBC;QAAgBC;QAAiBC;KAAgB;AACrF"}

package/features/security/teams/CreateTeam/schema.d.ts

@@ -2,6 +2,6 @@ import { z } from "zod";
 export declare const createTeamValidation: z.ZodObject<{
     name: z.ZodString;
     slug: z.ZodString;
-    description: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     roles: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;

package/features/security/teams/CreateTeam/schema.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 const createTeamValidation = z.object({
     name: z.string().min(3),
     slug: z.string().min(3),
-    description: z.string().max(500).optional().default(""),
+    description: z.string().max(500).nullish(),
     roles: z.array(z.string())
 });
 export { createTeamValidation };

package/features/security/teams/CreateTeam/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/teams/CreateTeam/schema.js","sources":["../../../../../src/features/security/teams/CreateTeam/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createTeamValidation = z.object({\n    name: z.string().min(3),\n    slug: z.string().min(3),\n    description: z.string().max(500).optional().default(\"\"),\n    roles: z.array(z.string())\n});\n"],"names":["createTeamValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IACrB,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IACrB,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,QAAQ,GAAG,OAAO,CAAC;IACpD,OAAOA,EAAE,KAAK,CAACA,EAAE,MAAM;AAC3B"}
+{"version":3,"file":"features/security/teams/CreateTeam/schema.js","sources":["../../../../../src/features/security/teams/CreateTeam/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createTeamValidation = z.object({\n    name: z.string().min(3),\n    slug: z.string().min(3),\n    // Nullable in the GraphQL schema - see `descriptionOnCreate` for why this is `.nullish()`.\n    description: z.string().max(500).nullish(),\n    roles: z.array(z.string())\n});\n"],"names":["createTeamValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IACrB,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IAErB,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,OAAO;IACxC,OAAOA,EAAE,KAAK,CAACA,EAAE,MAAM;AAC3B"}

package/features/security/teams/UpdateTeam/UpdateTeamUseCase.d.ts

@@ -1,6 +1,7 @@
 import { Result } from "@webiny/feature/api";
 import { UpdateTeam } from "./abstractions.js";
 import { TeamsRepository } from "../shared/abstractions.js";
+import { RolesRepository } from "../../roles/shared/abstractions.js";
 import { IdentityContext } from "../../IdentityContext/abstractions.js";
 import { EventPublisher } from "../../../../features/eventPublisher/index.js";
 import type { Team, UpdateTeamInput } from "../shared/types.js";
@@ -8,7 +9,8 @@ export declare class UpdateTeamUseCase {
     private repository;
     private identityContext;
     private eventPublisher;
-    constructor(repository: TeamsRepository.Interface, identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface);
+    private rolesRepository;
+    constructor(repository: TeamsRepository.Interface, identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface, rolesRepository: RolesRepository.Interface);
     execute(id: string, input: UpdateTeamInput): Promise<Result<Team, UpdateTeam.Error>>;
 }
 export declare const UpdateTeamUseCaseImpl: import("@webiny/di").Implementation<typeof UpdateTeamUseCase>;

package/features/security/teams/UpdateTeam/UpdateTeamUseCase.js

@@ -1,16 +1,20 @@
 import { Result, createImplementation } from "@webiny/feature/api";
 import { UpdateTeam } from "./abstractions.js";
 import { TeamsRepository } from "../shared/abstractions.js";
+import { RolesRepository } from "../../roles/shared/abstractions.js";
 import { IdentityContext } from "../../IdentityContext/abstractions.js";
 import { EventPublisher } from "../../../eventPublisher/index.js";
 import { updateTeamValidation } from "./schema.js";
 import { TeamAfterUpdateEvent, TeamBeforeUpdateEvent } from "./events.js";
+import { descriptionOnUpdate } from "../../shared/description.js";
+import { resolveRoleIdentifiers } from "../shared/resolveRoleIdentifiers.js";
 import { CannotUpdatePluginTeamsError, CannotUpdateSystemTeamsError, NotAuthorizedError, TeamValidationError } from "../shared/errors.js";
 class UpdateTeamUseCase {
-    constructor(repository, identityContext, eventPublisher){
+    constructor(repository, identityContext, eventPublisher, rolesRepository){
         this.repository = repository;
         this.identityContext = identityContext;
         this.eventPublisher = eventPublisher;
+        this.rolesRepository = rolesRepository;
     }
     async execute(id, input) {
         const hasPermission = await this.identityContext.getPermission("security.team");
@@ -24,21 +28,31 @@ class UpdateTeamUseCase {
         const existingTeam = existingResult.value;
         if (existingTeam.system) return Result.fail(new CannotUpdateSystemTeamsError());
         if (existingTeam.plugin) return Result.fail(new CannotUpdatePluginTeamsError());
+        const { description, ...rest } = validation.data;
+        const changes = {
+            ...rest,
+            ...descriptionOnUpdate(description)
+        };
+        if (changes.roles) {
+            const roleIdsResult = await resolveRoleIdentifiers(this.rolesRepository, changes.roles);
+            if (roleIdsResult.isFail()) return Result.fail(roleIdsResult.error);
+            changes.roles = roleIdsResult.value;
+        }
         const updatedTeam = {
             ...existingTeam,
-            ...validation.data
+            ...changes
         };
         await this.eventPublisher.publish(new TeamBeforeUpdateEvent({
             original: existingTeam,
             updated: updatedTeam,
-            input: validation.data
+            input: changes
         }));
         const result = await this.repository.update(updatedTeam);
         if (result.isFail()) return Result.fail(result.error);
         await this.eventPublisher.publish(new TeamAfterUpdateEvent({
             original: existingTeam,
             updated: updatedTeam,
-            input: validation.data
+            input: changes
         }));
         return Result.ok(updatedTeam);
     }
@@ -49,7 +63,8 @@ const UpdateTeamUseCaseImpl = createImplementation({
     dependencies: [
         TeamsRepository,
         IdentityContext,
-        EventPublisher
+        EventPublisher,
+        RolesRepository
     ]
 });
 export { UpdateTeamUseCase, UpdateTeamUseCaseImpl };

package/features/security/teams/UpdateTeam/UpdateTeamUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/teams/UpdateTeam/UpdateTeamUseCase.js","sources":["../../../../../src/features/security/teams/UpdateTeam/UpdateTeamUseCase.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { UpdateTeam } from \"./abstractions.js\";\nimport { TeamsRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { updateTeamValidation } from \"./schema.js\";\nimport { TeamBeforeUpdateEvent, TeamAfterUpdateEvent } from \"./events.js\";\nimport type { Team, UpdateTeamInput } from \"../shared/types.js\";\nimport {\n    NotAuthorizedError,\n    CannotUpdatePluginTeamsError,\n    CannotUpdateSystemTeamsError,\n    TeamValidationError\n} from \"../shared/errors.js\";\n\nexport class UpdateTeamUseCase {\n    private repository: TeamsRepository.Interface;\n    private identityContext: IdentityContext.Interface;\n    private eventPublisher: EventPublisher.Interface;\n\n    constructor(\n        repository: TeamsRepository.Interface,\n        identityContext: IdentityContext.Interface,\n        eventPublisher: EventPublisher.Interface\n    ) {\n        this.repository = repository;\n        this.identityContext = identityContext;\n        this.eventPublisher = eventPublisher;\n    }\n\n    async execute(id: string, input: UpdateTeamInput): Promise<Result<Team, UpdateTeam.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.team\");\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = updateTeamValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new TeamValidationError(validation.error.issues[0].message));\n        }\n\n        const existingResult = await this.repository.get({ id });\n        if (existingResult.isFail()) {\n            return Result.fail(existingResult.error);\n        }\n\n        const existingTeam = existingResult.value;\n\n        // Check if team is system team\n        if (existingTeam.system) {\n            return Result.fail(new CannotUpdateSystemTeamsError());\n        }\n\n        // Check if team is created via plugin\n        if (existingTeam.plugin) {\n            return Result.fail(new CannotUpdatePluginTeamsError());\n        }\n\n        const updatedTeam: Team = {\n            ...existingTeam,\n            ...validation.data\n        };\n\n        await this.eventPublisher.publish(\n            new TeamBeforeUpdateEvent({\n                original: existingTeam,\n                updated: updatedTeam,\n                input: validation.data\n            })\n        );\n\n        const result = await this.repository.update(updatedTeam);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new TeamAfterUpdateEvent({\n                original: existingTeam,\n                updated: updatedTeam,\n                input: validation.data\n            })\n        );\n\n        return Result.ok(updatedTeam);\n    }\n}\n\nexport const UpdateTeamUseCaseImpl = createImplementation({\n    abstraction: UpdateTeam,\n    implementation: UpdateTeamUseCase,\n    dependencies: [TeamsRepository, IdentityContext, EventPublisher]\n});\n"],"names":["UpdateTeamUseCase","repository","identityContext","eventPublisher","id","input","hasPermission","Result","NotAuthorizedError","validation","updateTeamValidation","TeamValidationError","existingResult","existingTeam","CannotUpdateSystemTeamsError","CannotUpdatePluginTeamsError","updatedTeam","TeamBeforeUpdateEvent","result","TeamAfterUpdateEvent","UpdateTeamUseCaseImpl","createImplementation","UpdateTeam","TeamsRepository","IdentityContext","EventPublisher"],"mappings":";;;;;;;;AAgBO,MAAMA;IAKT,YACIC,UAAqC,EACrCC,eAA0C,EAC1CC,cAAwC,CAC1C;QACE,IAAI,CAAC,UAAU,GAAGF;QAClB,IAAI,CAAC,eAAe,GAAGC;QACvB,IAAI,CAAC,cAAc,GAAGC;IAC1B;IAEA,MAAM,QAAQC,EAAU,EAAEC,KAAsB,EAA2C;QACvF,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,qBAAqB,SAAS,CAACL;QAClD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,oBAAoBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGjF,MAAMG,iBAAiB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAER;QAAG;QACtD,IAAIQ,eAAe,MAAM,IACrB,OAAOL,OAAO,IAAI,CAACK,eAAe,KAAK;QAG3C,MAAMC,eAAeD,eAAe,KAAK;QAGzC,IAAIC,aAAa,MAAM,EACnB,OAAON,OAAO,IAAI,CAAC,IAAIO;QAI3B,IAAID,aAAa,MAAM,EACnB,OAAON,OAAO,IAAI,CAAC,IAAIQ;QAG3B,MAAMC,cAAoB;YACtB,GAAGH,YAAY;YACf,GAAGJ,WAAW,IAAI;QACtB;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIQ,sBAAsB;YACtB,UAAUJ;YACV,SAASG;YACT,OAAOP,WAAW,IAAI;QAC1B;QAGJ,MAAMS,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACF;QAE5C,IAAIE,OAAO,MAAM,IACb,OAAOX,OAAO,IAAI,CAACW,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,qBAAqB;YACrB,UAAUN;YACV,SAASG;YACT,OAAOP,WAAW,IAAI;QAC1B;QAGJ,OAAOF,OAAO,EAAE,CAACS;IACrB;AACJ;AAEO,MAAMI,wBAAwBC,qBAAqB;IACtD,aAAaC;IACb,gBAAgBtB;IAChB,cAAc;QAACuB;QAAiBC;QAAiBC;KAAe;AACpE"}
+{"version":3,"file":"features/security/teams/UpdateTeam/UpdateTeamUseCase.js","sources":["../../../../../src/features/security/teams/UpdateTeam/UpdateTeamUseCase.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { UpdateTeam } from \"./abstractions.js\";\nimport { TeamsRepository } from \"../shared/abstractions.js\";\nimport { RolesRepository } from \"../../roles/shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { updateTeamValidation } from \"./schema.js\";\nimport { TeamBeforeUpdateEvent, TeamAfterUpdateEvent } from \"./events.js\";\nimport type { Team, UpdateTeamInput } from \"../shared/types.js\";\nimport { descriptionOnUpdate } from \"../../shared/description.js\";\nimport { resolveRoleIdentifiers } from \"../shared/resolveRoleIdentifiers.js\";\nimport {\n    NotAuthorizedError,\n    CannotUpdatePluginTeamsError,\n    CannotUpdateSystemTeamsError,\n    TeamValidationError\n} from \"../shared/errors.js\";\n\nexport class UpdateTeamUseCase {\n    private repository: TeamsRepository.Interface;\n    private identityContext: IdentityContext.Interface;\n    private eventPublisher: EventPublisher.Interface;\n    private rolesRepository: RolesRepository.Interface;\n\n    constructor(\n        repository: TeamsRepository.Interface,\n        identityContext: IdentityContext.Interface,\n        eventPublisher: EventPublisher.Interface,\n        rolesRepository: RolesRepository.Interface\n    ) {\n        this.repository = repository;\n        this.identityContext = identityContext;\n        this.eventPublisher = eventPublisher;\n        this.rolesRepository = rolesRepository;\n    }\n\n    async execute(id: string, input: UpdateTeamInput): Promise<Result<Team, UpdateTeam.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.team\");\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = updateTeamValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new TeamValidationError(validation.error.issues[0].message));\n        }\n\n        const existingResult = await this.repository.get({ id });\n        if (existingResult.isFail()) {\n            return Result.fail(existingResult.error);\n        }\n\n        const existingTeam = existingResult.value;\n\n        // Check if team is system team\n        if (existingTeam.system) {\n            return Result.fail(new CannotUpdateSystemTeamsError());\n        }\n\n        // Check if team is created via plugin\n        if (existingTeam.plugin) {\n            return Result.fail(new CannotUpdatePluginTeamsError());\n        }\n\n        // `description` is pulled out of the spread because it is the one field that accepts null.\n        // Normalising it here keeps null out of both the entity and the published events, whose\n        // input type declares `description?: string`.\n        const { description, ...rest } = validation.data;\n\n        const changes: UpdateTeamInput = {\n            ...rest,\n            ...descriptionOnUpdate(description)\n        };\n\n        /*\n         * Only when the update mentions roles. An update that omits them must leave the stored ones\n         * alone, and resolving an absent list would cost a read and write an empty array.\n         */\n        if (changes.roles) {\n            const roleIdsResult = await resolveRoleIdentifiers(this.rolesRepository, changes.roles);\n\n            if (roleIdsResult.isFail()) {\n                return Result.fail(roleIdsResult.error);\n            }\n\n            changes.roles = roleIdsResult.value;\n        }\n\n        const updatedTeam: Team = {\n            ...existingTeam,\n            ...changes\n        };\n\n        await this.eventPublisher.publish(\n            new TeamBeforeUpdateEvent({\n                original: existingTeam,\n                updated: updatedTeam,\n                input: changes\n            })\n        );\n\n        const result = await this.repository.update(updatedTeam);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new TeamAfterUpdateEvent({\n                original: existingTeam,\n                updated: updatedTeam,\n                input: changes\n            })\n        );\n\n        return Result.ok(updatedTeam);\n    }\n}\n\nexport const UpdateTeamUseCaseImpl = createImplementation({\n    abstraction: UpdateTeam,\n    implementation: UpdateTeamUseCase,\n    dependencies: [TeamsRepository, IdentityContext, EventPublisher, RolesRepository]\n});\n"],"names":["UpdateTeamUseCase","repository","identityContext","eventPublisher","rolesRepository","id","input","hasPermission","Result","NotAuthorizedError","validation","updateTeamValidation","TeamValidationError","existingResult","existingTeam","CannotUpdateSystemTeamsError","CannotUpdatePluginTeamsError","description","rest","changes","descriptionOnUpdate","roleIdsResult","resolveRoleIdentifiers","updatedTeam","TeamBeforeUpdateEvent","result","TeamAfterUpdateEvent","UpdateTeamUseCaseImpl","createImplementation","UpdateTeam","TeamsRepository","IdentityContext","EventPublisher","RolesRepository"],"mappings":";;;;;;;;;;;AAmBO,MAAMA;IAMT,YACIC,UAAqC,EACrCC,eAA0C,EAC1CC,cAAwC,EACxCC,eAA0C,CAC5C;QACE,IAAI,CAAC,UAAU,GAAGH;QAClB,IAAI,CAAC,eAAe,GAAGC;QACvB,IAAI,CAAC,cAAc,GAAGC;QACtB,IAAI,CAAC,eAAe,GAAGC;IAC3B;IAEA,MAAM,QAAQC,EAAU,EAAEC,KAAsB,EAA2C;QACvF,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,qBAAqB,SAAS,CAACL;QAClD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,oBAAoBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGjF,MAAMG,iBAAiB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAER;QAAG;QACtD,IAAIQ,eAAe,MAAM,IACrB,OAAOL,OAAO,IAAI,CAACK,eAAe,KAAK;QAG3C,MAAMC,eAAeD,eAAe,KAAK;QAGzC,IAAIC,aAAa,MAAM,EACnB,OAAON,OAAO,IAAI,CAAC,IAAIO;QAI3B,IAAID,aAAa,MAAM,EACnB,OAAON,OAAO,IAAI,CAAC,IAAIQ;QAM3B,MAAM,EAAEC,WAAW,EAAE,GAAGC,MAAM,GAAGR,WAAW,IAAI;QAEhD,MAAMS,UAA2B;YAC7B,GAAGD,IAAI;YACP,GAAGE,oBAAoBH,YAAY;QACvC;QAMA,IAAIE,QAAQ,KAAK,EAAE;YACf,MAAME,gBAAgB,MAAMC,uBAAuB,IAAI,CAAC,eAAe,EAAEH,QAAQ,KAAK;YAEtF,IAAIE,cAAc,MAAM,IACpB,OAAOb,OAAO,IAAI,CAACa,cAAc,KAAK;YAG1CF,QAAQ,KAAK,GAAGE,cAAc,KAAK;QACvC;QAEA,MAAME,cAAoB;YACtB,GAAGT,YAAY;YACf,GAAGK,OAAO;QACd;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIK,sBAAsB;YACtB,UAAUV;YACV,SAASS;YACT,OAAOJ;QACX;QAGJ,MAAMM,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACF;QAE5C,IAAIE,OAAO,MAAM,IACb,OAAOjB,OAAO,IAAI,CAACiB,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,qBAAqB;YACrB,UAAUZ;YACV,SAASS;YACT,OAAOJ;QACX;QAGJ,OAAOX,OAAO,EAAE,CAACe;IACrB;AACJ;AAEO,MAAMI,wBAAwBC,qBAAqB;IACtD,aAAaC;IACb,gBAAgB7B;IAChB,cAAc;QAAC8B;QAAiBC;QAAiBC;QAAgBC;KAAgB;AACrF"}

package/features/security/teams/UpdateTeam/schema.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod";
 export declare const updateTeamValidation: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;

package/features/security/teams/UpdateTeam/schema.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 const updateTeamValidation = z.object({
     name: z.string().min(3).optional(),
-    description: z.string().max(500).optional(),
+    description: z.string().max(500).nullish(),
     roles: z.array(z.string()).optional()
 });
 export { updateTeamValidation };

package/features/security/teams/UpdateTeam/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/teams/UpdateTeam/schema.js","sources":["../../../../../src/features/security/teams/UpdateTeam/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const updateTeamValidation = z.object({\n    name: z.string().min(3).optional(),\n    description: z.string().max(500).optional(),\n    roles: z.array(z.string()).optional()\n});\n"],"names":["updateTeamValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ;IAChC,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,QAAQ;IACzC,OAAOA,EAAE,KAAK,CAACA,EAAE,MAAM,IAAI,QAAQ;AACvC"}
+{"version":3,"file":"features/security/teams/UpdateTeam/schema.js","sources":["../../../../../src/features/security/teams/UpdateTeam/schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const updateTeamValidation = z.object({\n    name: z.string().min(3).optional(),\n    // Nullable in the GraphQL schema - see `descriptionOnUpdate` for why this is `.nullish()` and\n    // must not carry a `.transform()`.\n    description: z.string().max(500).nullish(),\n    roles: z.array(z.string()).optional()\n});\n"],"names":["updateTeamValidation","z"],"mappings":";AAEO,MAAMA,uBAAuBC,EAAE,MAAM,CAAC;IACzC,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ;IAGhC,aAAaA,EAAE,MAAM,GAAG,GAAG,CAAC,KAAK,OAAO;IACxC,OAAOA,EAAE,KAAK,CAACA,EAAE,MAAM,IAAI,QAAQ;AACvC"}

package/features/security/teams/shared/resolveRoleIdentifiers.d.ts

@@ -0,0 +1,17 @@
+import { Result } from "@webiny/feature/api";
+import { RolesRepository } from "../../roles/shared/abstractions.js";
+import { TeamValidationError } from "./errors.js";
+/**
+ * Maps whatever a caller used to name a role onto the role IDs a team stores.
+ *
+ * `team.roles` holds IDs and only IDs: GetPermissionsFromIdentity resolves them with `id_in` against
+ * the roles repository. A slug stored here matches nothing, so the team is created, reads correctly
+ * in the admin UI, and grants no permissions at all. Nothing previously caught that, because the
+ * field is typed `string[]` and the use case wrote it through untouched.
+ *
+ * Accepting both forms rather than rejecting slugs: which identifier a given field wants is not
+ * guessable from the outside, and a few lines away in the same area a team is identified by SLUG
+ * (folder permission targets are `team:<slug>`). An identifier that is neither is a genuine mistake
+ * and is reported.
+ */
+export declare const resolveRoleIdentifiers: (rolesRepository: RolesRepository.Interface, identifiers: string[]) => Promise<Result<string[], TeamValidationError>>;

package/features/security/teams/shared/resolveRoleIdentifiers.js

@@ -0,0 +1,32 @@
+import { Result } from "@webiny/feature/api";
+import { TeamValidationError } from "./errors.js";
+const resolveRoleIdentifiers = async (rolesRepository, identifiers)=>{
+    if (0 === identifiers.length) return Result.ok([]);
+    const rolesResult = await rolesRepository.list({});
+    if (rolesResult.isFail()) return Result.fail(new TeamValidationError(`Could not load roles: ${rolesResult.error}`));
+    const byId = new Map(rolesResult.value.map((role)=>[
+            role.id,
+            role.id
+        ]));
+    const bySlug = new Map(rolesResult.value.map((role)=>[
+            role.slug,
+            role.id
+        ]));
+    const unknown = [];
+    const roleIds = identifiers.map((identifier)=>{
+        const resolved = byId.get(identifier) ?? bySlug.get(identifier);
+        if (!resolved) {
+            unknown.push(identifier);
+            return identifier;
+        }
+        return resolved;
+    });
+    if (unknown.length > 0) {
+        const names = unknown.map((identifier)=>`"${identifier}"`).join(", ");
+        return Result.fail(new TeamValidationError(`Not a known role id or slug: ${names}.`));
+    }
+    return Result.ok(roleIds);
+};
+export { resolveRoleIdentifiers };
+
+//# sourceMappingURL=resolveRoleIdentifiers.js.map

package/features/security/teams/shared/resolveRoleIdentifiers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/teams/shared/resolveRoleIdentifiers.js","sources":["../../../../../src/features/security/teams/shared/resolveRoleIdentifiers.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { RolesRepository } from \"../../roles/shared/abstractions.js\";\nimport { TeamValidationError } from \"./errors.js\";\n\n/**\n * Maps whatever a caller used to name a role onto the role IDs a team stores.\n *\n * `team.roles` holds IDs and only IDs: GetPermissionsFromIdentity resolves them with `id_in` against\n * the roles repository. A slug stored here matches nothing, so the team is created, reads correctly\n * in the admin UI, and grants no permissions at all. Nothing previously caught that, because the\n * field is typed `string[]` and the use case wrote it through untouched.\n *\n * Accepting both forms rather than rejecting slugs: which identifier a given field wants is not\n * guessable from the outside, and a few lines away in the same area a team is identified by SLUG\n * (folder permission targets are `team:<slug>`). An identifier that is neither is a genuine mistake\n * and is reported.\n */\nexport const resolveRoleIdentifiers = async (\n    rolesRepository: RolesRepository.Interface,\n    identifiers: string[]\n): Promise<Result<string[], TeamValidationError>> => {\n    if (identifiers.length === 0) {\n        return Result.ok([]);\n    }\n\n    /*\n     * Every role, in one read. `id_in` and `slug_in` are ANDed by the repository, so they cannot\n     * express \"either of these\", and a project has few enough roles for the distinction not to\n     * matter. Plugin-defined roles are included, which a filtered query would also have to cover.\n     */\n    const rolesResult = await rolesRepository.list({});\n\n    if (rolesResult.isFail()) {\n        return Result.fail(new TeamValidationError(`Could not load roles: ${rolesResult.error}`));\n    }\n\n    const byId = new Map(rolesResult.value.map(role => [role.id, role.id]));\n    const bySlug = new Map(rolesResult.value.map(role => [role.slug, role.id]));\n\n    const unknown: string[] = [];\n\n    // ID first, so a slug that happens to equal another role's ID cannot shadow it.\n    const roleIds = identifiers.map(identifier => {\n        const resolved = byId.get(identifier) ?? bySlug.get(identifier);\n\n        if (!resolved) {\n            unknown.push(identifier);\n            return identifier;\n        }\n\n        return resolved;\n    });\n\n    if (unknown.length > 0) {\n        const names = unknown.map(identifier => `\"${identifier}\"`).join(\", \");\n        return Result.fail(new TeamValidationError(`Not a known role id or slug: ${names}.`));\n    }\n\n    return Result.ok(roleIds);\n};\n"],"names":["resolveRoleIdentifiers","rolesRepository","identifiers","Result","rolesResult","TeamValidationError","byId","Map","role","bySlug","unknown","roleIds","identifier","resolved","names"],"mappings":";;AAiBO,MAAMA,yBAAyB,OAClCC,iBACAC;IAEA,IAAIA,AAAuB,MAAvBA,YAAY,MAAM,EAClB,OAAOC,OAAO,EAAE,CAAC,EAAE;IAQvB,MAAMC,cAAc,MAAMH,gBAAgB,IAAI,CAAC,CAAC;IAEhD,IAAIG,YAAY,MAAM,IAClB,OAAOD,OAAO,IAAI,CAAC,IAAIE,oBAAoB,CAAC,sBAAsB,EAAED,YAAY,KAAK,EAAE;IAG3F,MAAME,OAAO,IAAIC,IAAIH,YAAY,KAAK,CAAC,GAAG,CAACI,CAAAA,OAAQ;YAACA,KAAK,EAAE;YAAEA,KAAK,EAAE;SAAC;IACrE,MAAMC,SAAS,IAAIF,IAAIH,YAAY,KAAK,CAAC,GAAG,CAACI,CAAAA,OAAQ;YAACA,KAAK,IAAI;YAAEA,KAAK,EAAE;SAAC;IAEzE,MAAME,UAAoB,EAAE;IAG5B,MAAMC,UAAUT,YAAY,GAAG,CAACU,CAAAA;QAC5B,MAAMC,WAAWP,KAAK,GAAG,CAACM,eAAeH,OAAO,GAAG,CAACG;QAEpD,IAAI,CAACC,UAAU;YACXH,QAAQ,IAAI,CAACE;YACb,OAAOA;QACX;QAEA,OAAOC;IACX;IAEA,IAAIH,QAAQ,MAAM,GAAG,GAAG;QACpB,MAAMI,QAAQJ,QAAQ,GAAG,CAACE,CAAAA,aAAc,CAAC,CAAC,EAAEA,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC;QAChE,OAAOT,OAAO,IAAI,CAAC,IAAIE,oBAAoB,CAAC,6BAA6B,EAAES,MAAM,CAAC,CAAC;IACvF;IAEA,OAAOX,OAAO,EAAE,CAACQ;AACrB"}

package/features/slugify/DefaultSlugify.d.ts

@@ -0,0 +1,8 @@
+import { Slugify } from "./abstractions.js";
+declare class DefaultSlugifyImpl implements Slugify.Interface {
+    execute(value: string): string;
+}
+export declare const DefaultSlugify: typeof DefaultSlugifyImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").ISlugify>;
+};
+export {};

package/features/slugify/DefaultSlugify.js

@@ -0,0 +1,20 @@
+import slugify from "slugify";
+import { Slugify } from "./abstractions.js";
+const DEFAULT_OPTIONS = {
+    replacement: "-",
+    lower: true,
+    remove: /[*#?<>_{}[\]+~.()'"!:;@]/g,
+    trim: false
+};
+class DefaultSlugifyImpl {
+    execute(value) {
+        return slugify(value, DEFAULT_OPTIONS);
+    }
+}
+const DefaultSlugify = Slugify.createImplementation({
+    implementation: DefaultSlugifyImpl,
+    dependencies: []
+});
+export { DefaultSlugify };
+
+//# sourceMappingURL=DefaultSlugify.js.map

package/features/slugify/DefaultSlugify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/slugify/DefaultSlugify.js","sources":["../../../src/features/slugify/DefaultSlugify.ts"],"sourcesContent":["import baseSlugify from \"slugify\";\nimport { Slugify } from \"./abstractions.js\";\n\n/**\n * Webiny's canonical slug options. These were previously duplicated at every call site; keeping them\n * in one private place means projects can change slug generation everywhere at once by decorating\n * Slugify — not by passing per-call options, so the abstraction stays independent of this library.\n */\nconst DEFAULT_OPTIONS = {\n    replacement: \"-\",\n    lower: true,\n    remove: /[*#?<>_{}[\\]+~.()'\"!:;@]/g,\n    trim: false\n};\n\nclass DefaultSlugifyImpl implements Slugify.Interface {\n    execute(value: string): string {\n        return baseSlugify(value, DEFAULT_OPTIONS);\n    }\n}\n\nexport const DefaultSlugify = Slugify.createImplementation({\n    implementation: DefaultSlugifyImpl,\n    dependencies: []\n});\n"],"names":["DEFAULT_OPTIONS","DefaultSlugifyImpl","value","baseSlugify","DefaultSlugify","Slugify"],"mappings":";;AAQA,MAAMA,kBAAkB;IACpB,aAAa;IACb,OAAO;IACP,QAAQ;IACR,MAAM;AACV;AAEA,MAAMC;IACF,QAAQC,KAAa,EAAU;QAC3B,OAAOC,QAAYD,OAAOF;IAC9B;AACJ;AAEO,MAAMI,iBAAiBC,QAAQ,oBAAoB,CAAC;IACvD,gBAAgBJ;IAChB,cAAc,EAAE;AACpB"}

package/features/slugify/abstractions.d.ts

@@ -0,0 +1,12 @@
+export interface ISlugify {
+    /**
+     * Turns a value into a URL-friendly slug using Webiny's canonical options. This is the
+     * fine-grained seam behind `StringFormatter.slugify()` — decorate `Slugify` alone to change slug
+     * logic without touching the rest of the string formatter.
+     */
+    execute(value: string): string;
+}
+export declare const Slugify: import("@webiny/di").Abstraction<ISlugify>;
+export declare namespace Slugify {
+    type Interface = ISlugify;
+}

package/features/slugify/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const Slugify = createAbstraction("Slugify");
+export { Slugify };
+
+//# sourceMappingURL=abstractions.js.map

package/features/slugify/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/slugify/abstractions.js","sources":["../../../src/features/slugify/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\n\nexport interface ISlugify {\n    /**\n     * Turns a value into a URL-friendly slug using Webiny's canonical options. This is the\n     * fine-grained seam behind `StringFormatter.slugify()` — decorate `Slugify` alone to change slug\n     * logic without touching the rest of the string formatter.\n     */\n    execute(value: string): string;\n}\n\nexport const Slugify = createAbstraction<ISlugify>(\"Slugify\");\n\nexport namespace Slugify {\n    export type Interface = ISlugify;\n}\n"],"names":["Slugify","createAbstraction"],"mappings":";AAWO,MAAMA,UAAUC,kBAA4B"}

package/features/slugify/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const SlugifyFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/slugify/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { DefaultSlugify } from "./DefaultSlugify.js";
+const SlugifyFeature = createFeature({
+    name: "SlugifyFeature",
+    register (container) {
+        container.register(DefaultSlugify);
+    }
+});
+export { SlugifyFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/slugify/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/slugify/feature.js","sources":["../../../src/features/slugify/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { DefaultSlugify } from \"./DefaultSlugify.js\";\n\nexport const SlugifyFeature = createFeature({\n    name: \"SlugifyFeature\",\n    register(container) {\n        container.register(DefaultSlugify);\n    }\n});\n"],"names":["SlugifyFeature","createFeature","container","DefaultSlugify"],"mappings":";;AAGO,MAAMA,iBAAiBC,cAAc;IACxC,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/features/slugify/index.d.ts

@@ -0,0 +1,3 @@
+export { Slugify } from "./abstractions.js";
+export type { ISlugify } from "./abstractions.js";
+export { SlugifyFeature } from "./feature.js";

package/features/slugify/index.js

@@ -0,0 +1,2 @@
+export { Slugify } from "./abstractions.js";
+export { SlugifyFeature } from "./feature.js";

package/features/stringFormatter/DefaultStringFormatter.d.ts

@@ -0,0 +1,17 @@
+import { Slugify } from "../../features/slugify/abstractions.js";
+import { StringFormatter } from "./abstractions.js";
+/**
+ * The string formatter is the consumer-facing API for string transforms. It keeps each transform's
+ * logic in its own fine-grained, decoratable feature (e.g. `Slugify`) and just delegates to it, so a
+ * project can change one transform without reimplementing the whole formatter. More methods will be
+ * added here over time.
+ */
+declare class DefaultStringFormatterImpl implements StringFormatter.Interface {
+    private readonly slugifier;
+    constructor(slugifier: Slugify.Interface);
+    slugify(value: string): string;
+}
+export declare const DefaultStringFormatter: typeof DefaultStringFormatterImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").IStringFormatter>;
+};
+export {};