@webiny/api-headless-cms-workflows 0.0.0-unstable.c27f4d8a31 → 0.0.0-unstable.d0f34a8194

package/CmsWorkflowsFeature.d.ts

@@ -0,0 +1,4 @@
+export declare const CmsWorkflowsFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/CmsWorkflowsFeature.js

@@ -0,0 +1,28 @@
+import { createFeature } from "@webiny/feature/api";
+import { CmsGraphQLSchemaFactory } from "@webiny/api-headless-cms";
+import { FeatureFlags } from "@webiny/api-core/features/featureFlags/abstractions.js";
+import { WorkflowsFeature } from "./features/Workflows/index.js";
+import { CmsTargetFeature } from "./features/target/feature.js";
+import { CmsHooksFeature } from "./features/hooks/feature.js";
+import { CmsWrappersFeature } from "./features/wrappers/feature.js";
+import { createEntrySystemSchemaExtension } from "./graphql/entrySystemSchema.js";
+import { CmsWorkflowsSchemaFactory } from "./graphql/CmsWorkflowsSchemaFactory.js";
+const CmsWorkflowsFeature = createFeature({
+    name: "CmsWorkflows",
+    register (container) {
+        if (!container.resolve(FeatureFlags).get().isEnabled("advancedPublishingWorkflow")) return;
+        WorkflowsFeature.register(container);
+        CmsTargetFeature.register(container);
+        CmsHooksFeature.register(container);
+        CmsWrappersFeature.register(container);
+        container.register(CmsWorkflowsSchemaFactory);
+        container.registerInstance(CmsGraphQLSchemaFactory, {
+            execute: ()=>[
+                    createEntrySystemSchemaExtension()
+                ]
+        });
+    }
+});
+export { CmsWorkflowsFeature };
+
+//# sourceMappingURL=CmsWorkflowsFeature.js.map

package/CmsWorkflowsFeature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CmsWorkflowsFeature.js","sources":["../src/CmsWorkflowsFeature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { CmsGraphQLSchemaFactory } from \"@webiny/api-headless-cms\";\nimport { FeatureFlags } from \"@webiny/api-core/features/featureFlags/abstractions.js\";\nimport { WorkflowsFeature as CmsLocalWorkflowsFeature } from \"./features/Workflows/index.js\";\nimport { CmsTargetFeature } from \"./features/target/feature.js\";\nimport { CmsHooksFeature } from \"./features/hooks/feature.js\";\nimport { CmsWrappersFeature } from \"./features/wrappers/feature.js\";\nimport { createEntrySystemSchemaExtension } from \"./graphql/entrySystemSchema.js\";\nimport { CmsWorkflowsSchemaFactory } from \"./graphql/CmsWorkflowsSchemaFactory.js\";\n\nexport const CmsWorkflowsFeature = createFeature({\n    name: \"CmsWorkflows\",\n    register(container) {\n        // Advanced publishing workflow is license-gated — check at register time (license is fresh\n        // pre-register) so nothing wires up without the entitlement.\n        if (!container.resolve(FeatureFlags).get().isEnabled(\"advancedPublishingWorkflow\")) {\n            return;\n        }\n\n        // Bindable-model checks on the engine's workflow before-save events.\n        CmsLocalWorkflowsFeature.register(container);\n\n        // The `cms.*` target adapter (spec 9.3).\n        CmsTargetFeature.register(container);\n\n        // Workflow handlers on CMS events (spec 9.2).\n        CmsHooksFeature.register(container);\n\n        // Wrapper use cases (identity, permission and target checks around the engine).\n        CmsWrappersFeature.register(container);\n\n        // Every CMS workflow and review operation on the `cms` root of `/graphql` (R88).\n        container.register(CmsWorkflowsSchemaFactory);\n\n        // Add the `workflow` field to CmsEntrySystem on the CMS endpoint, which is served from the\n        // separate CMS schema and needs its own CmsGraphQLSchemaFactory entry.\n        container.registerInstance(CmsGraphQLSchemaFactory, {\n            execute: () => [createEntrySystemSchemaExtension()]\n        });\n    }\n});\n"],"names":["CmsWorkflowsFeature","createFeature","container","FeatureFlags","CmsLocalWorkflowsFeature","CmsTargetFeature","CmsHooksFeature","CmsWrappersFeature","CmsWorkflowsSchemaFactory","CmsGraphQLSchemaFactory","createEntrySystemSchemaExtension"],"mappings":";;;;;;;;;AAUO,MAAMA,sBAAsBC,cAAc;IAC7C,MAAM;IACN,UAASC,SAAS;QAGd,IAAI,CAACA,UAAU,OAAO,CAACC,cAAc,GAAG,GAAG,SAAS,CAAC,+BACjD;QAIJC,iBAAAA,QAAiC,CAACF;QAGlCG,iBAAiB,QAAQ,CAACH;QAG1BI,gBAAgB,QAAQ,CAACJ;QAGzBK,mBAAmB,QAAQ,CAACL;QAG5BA,UAAU,QAAQ,CAACM;QAInBN,UAAU,gBAAgB,CAACO,yBAAyB;YAChD,SAAS,IAAM;oBAACC;iBAAmC;QACvD;IACJ;AACJ"}

package/domain/errors.d.ts

@@ -0,0 +1,27 @@
+import { BaseError } from "@webiny/feature/api";
+import type { WorkflowPersistenceError } from "@webiny/api-workflows/domain/workflow/errors.js";
+export interface BoundWorkflow {
+    id: string;
+    name: string;
+}
+export interface ModelBoundToWorkflowErrorData {
+    modelId: string;
+    workflows: BoundWorkflow[];
+}
+/**
+ * A model bound to a workflow cannot be deleted, neither through `DeleteModelUseCase` nor the
+ * "fully delete model" task (D41, D64, D134); the workflow must be deleted or the model removed
+ * from it first.
+ */
+export declare class ModelBoundToWorkflowError extends BaseError<ModelBoundToWorkflowErrorData> {
+    readonly code: "Workflows/Model/BoundToWorkflow";
+    constructor(data: ModelBoundToWorkflowErrorData);
+}
+declare module "@webiny/api-headless-cms/features/contentModel/DeleteModel/abstractions.js" {
+    interface IDeleteModelUseCaseErrors {
+        /** Added by the CMS workflows package (R64). */
+        boundToWorkflow: ModelBoundToWorkflowError;
+        /** The bound-workflow lookup failed; the delete is blocked (R64). */
+        workflowPersistence: WorkflowPersistenceError;
+    }
+}

package/domain/errors.js

@@ -0,0 +1,14 @@
+import { BaseError } from "@webiny/feature/api";
+class ModelBoundToWorkflowError extends BaseError {
+    constructor(data){
+        const names = data.workflows.map((workflow)=>`"${workflow.name}"`).join(", ");
+        const noun = 1 === data.workflows.length ? "workflow" : "workflows";
+        super({
+            message: `The model "${data.modelId}" is used by the ${noun} ${names}. Delete the ${noun} or remove the model from it first.`,
+            data
+        }), this.code = "Workflows/Model/BoundToWorkflow";
+    }
+}
+export { ModelBoundToWorkflowError };
+
+//# sourceMappingURL=errors.js.map

package/domain/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain/errors.js","sources":["../../src/domain/errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\nimport type { WorkflowPersistenceError } from \"@webiny/api-workflows/domain/workflow/errors.js\";\n\nexport interface BoundWorkflow {\n    id: string;\n    name: string;\n}\n\nexport interface ModelBoundToWorkflowErrorData {\n    modelId: string;\n    workflows: BoundWorkflow[];\n}\n\n/**\n * A model bound to a workflow cannot be deleted, neither through `DeleteModelUseCase` nor the\n * \"fully delete model\" task (D41, D64, D134); the workflow must be deleted or the model removed\n * from it first.\n */\nexport class ModelBoundToWorkflowError extends BaseError<ModelBoundToWorkflowErrorData> {\n    override readonly code = \"Workflows/Model/BoundToWorkflow\" as const;\n\n    constructor(data: ModelBoundToWorkflowErrorData) {\n        const names = data.workflows.map(workflow => `\"${workflow.name}\"`).join(\", \");\n        const noun = data.workflows.length === 1 ? \"workflow\" : \"workflows\";\n        super({\n            message: `The model \"${data.modelId}\" is used by the ${noun} ${names}. Delete the ${noun} or remove the model from it first.`,\n            data\n        });\n    }\n}\n\ndeclare module \"@webiny/api-headless-cms/features/contentModel/DeleteModel/abstractions.js\" {\n    interface IDeleteModelUseCaseErrors {\n        /** Added by the CMS workflows package (R64). */\n        boundToWorkflow: ModelBoundToWorkflowError;\n        /** The bound-workflow lookup failed; the delete is blocked (R64). */\n        workflowPersistence: WorkflowPersistenceError;\n    }\n}\n"],"names":["ModelBoundToWorkflowError","BaseError","data","names","workflow","noun"],"mappings":";AAkBO,MAAMA,kCAAkCC;IAG3C,YAAYC,IAAmC,CAAE;QAC7C,MAAMC,QAAQD,KAAK,SAAS,CAAC,GAAG,CAACE,CAAAA,WAAY,CAAC,CAAC,EAAEA,SAAS,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QACxE,MAAMC,OAAOH,AAA0B,MAA1BA,KAAK,SAAS,CAAC,MAAM,GAAS,aAAa;QACxD,KAAK,CAAC;YACF,SAAS,CAAC,WAAW,EAAEA,KAAK,OAAO,CAAC,iBAAiB,EAAEG,KAAK,CAAC,EAAEF,MAAM,aAAa,EAAEE,KAAK,mCAAmC,CAAC;YAC7HH;QACJ,SARc,IAAI,GAAG;IASzB;AACJ"}

package/features/Workflows/feature.d.ts

@@ -1 +1,4 @@
-export declare const WorkflowsFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;
+export declare const WorkflowsFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/Workflows/feature.js

@@ -1,10 +1,13 @@
 import { createFeature } from "@webiny/feature/api";
 import { DisallowUnpublishableModelsOnBeforeCreate } from "./handlers/DisallowUnpublishableModelsOnBeforeCreate.js";
-export const WorkflowsFeature = createFeature({
-  name: "CmsWorkflows",
-  register(container) {
-    container.register(DisallowUnpublishableModelsOnBeforeCreate);
-  }
+import { DisallowUnpublishableModelsOnBeforeUpdate } from "./handlers/DisallowUnpublishableModelsOnBeforeUpdate.js";
+const WorkflowsFeature = createFeature({
+    name: "CmsWorkflows",
+    register (container) {
+        container.register(DisallowUnpublishableModelsOnBeforeCreate);
+        container.register(DisallowUnpublishableModelsOnBeforeUpdate);
+    }
 });
+export { WorkflowsFeature };
 
 //# sourceMappingURL=feature.js.map

package/features/Workflows/feature.js.map

@@ -1 +1 @@
-{"version":3,"names":["createFeature","DisallowUnpublishableModelsOnBeforeCreate","WorkflowsFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { DisallowUnpublishableModelsOnBeforeCreate } from \"./handlers/DisallowUnpublishableModelsOnBeforeCreate.js\";\n\nexport const WorkflowsFeature = createFeature({\n    name: \"CmsWorkflows\",\n    register(container) {\n        container.register(DisallowUnpublishableModelsOnBeforeCreate);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,yCAAyC;AAElD,OAAO,MAAMC,gBAAgB,GAAGF,aAAa,CAAC;EAC1CG,IAAI,EAAE,cAAc;EACpBC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,yCAAyC,CAAC;EACjE;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/Workflows/feature.js","sources":["../../../src/features/Workflows/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { DisallowUnpublishableModelsOnBeforeCreate } from \"./handlers/DisallowUnpublishableModelsOnBeforeCreate.js\";\nimport { DisallowUnpublishableModelsOnBeforeUpdate } from \"./handlers/DisallowUnpublishableModelsOnBeforeUpdate.js\";\n\nexport const WorkflowsFeature = createFeature({\n    name: \"CmsWorkflows\",\n    register(container) {\n        container.register(DisallowUnpublishableModelsOnBeforeCreate);\n        container.register(DisallowUnpublishableModelsOnBeforeUpdate);\n    }\n});\n"],"names":["WorkflowsFeature","createFeature","container","DisallowUnpublishableModelsOnBeforeCreate","DisallowUnpublishableModelsOnBeforeUpdate"],"mappings":";;;AAIO,MAAMA,mBAAmBC,cAAc;IAC1C,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;QACnBD,UAAU,QAAQ,CAACE;IACvB;AACJ"}

package/features/Workflows/handlers/DisallowUnpublishableModelsOnBeforeCreate.d.ts

@@ -1,11 +1,23 @@
-import { WorkflowBeforeCreateHandler } from "@webiny/api-workflows/features/workflow/CreateWorkflow/events.js";
+import { WorkflowBeforeCreateEventHandler } from "@webiny/api-workflows/features/workflow/StoreWorkflow/index.js";
 import { GetModelUseCase } from "@webiny/api-headless-cms/features/contentModel/GetModel/index.js";
-declare class DisallowUnpublishableModelsOnBeforeCreateImpl implements WorkflowBeforeCreateHandler.Interface {
-    private getModelUseCase;
-    constructor(getModelUseCase: GetModelUseCase.Interface);
-    handle(event: WorkflowBeforeCreateHandler.Event): Promise<void>;
+/**
+ * Spec 4.1, D41: a workflow can only bind an existing, public, publishable CMS model. Throws
+ * `WorkflowValidationError`, which `StoreWorkflowUseCase` returns as a failed result. Non-CMS
+ * namespaces (`wb.page`) are skipped; the namespace format itself is checked by
+ * `WorkflowValidator` before any event is published. Other model read errors propagate.
+ *
+ * Binding requires read access to the model (R38): a model the caller cannot access fails
+ * validation instead of throwing `Cms/Model/NotAuthorized` out of `StoreWorkflowUseCase`. The CMS
+ * hides code-defined models the caller cannot access, so those report as not found. The read stays
+ * access-controlled on purpose: `GetModelRepository` or an elevated identity would fill the CMS
+ * tenant-keyed model cache with a list other callers must not see.
+ */
+declare class DisallowUnpublishableModelsOnBeforeCreateImpl implements WorkflowBeforeCreateEventHandler.Interface {
+    private getModel;
+    constructor(getModel: GetModelUseCase.Interface);
+    handle(event: WorkflowBeforeCreateEventHandler.Event): Promise<void>;
 }
 export declare const DisallowUnpublishableModelsOnBeforeCreate: typeof DisallowUnpublishableModelsOnBeforeCreateImpl & {
-    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-workflows/features/workflow/CreateWorkflow/events.js").WorkflowBeforeCreateEvent>>;
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/eventPublisher").IEventHandler<import("@webiny/api-workflows/features/workflow/StoreWorkflow/events").WorkflowBeforeCreateEvent>>;
 };
 export {};

package/features/Workflows/handlers/DisallowUnpublishableModelsOnBeforeCreate.js

@@ -1,32 +1,44 @@
-import { WorkflowBeforeCreateHandler } from "@webiny/api-workflows/features/workflow/CreateWorkflow/events.js";
-import { getModelIdFromAppName } from "../../../utils/appName.js";
+import { WorkflowBeforeCreateEventHandler } from "@webiny/api-workflows/features/workflow/StoreWorkflow/index.js";
 import { GetModelUseCase } from "@webiny/api-headless-cms/features/contentModel/GetModel/index.js";
+import { WorkflowValidationError } from "@webiny/api-workflows/domain/workflow/errors.js";
+import { getModelIdFromAppName } from "../../../utils/appName.js";
+import { UNPUBLISHABLE_MODEL_TAG } from "../../../utils/isBindableModel.js";
+const MODEL_NOT_FOUND = "Cms/Model/NotFound";
+const MODEL_NOT_AUTHORIZED = "Cms/Model/NotAuthorized";
 class DisallowUnpublishableModelsOnBeforeCreateImpl {
-  constructor(getModelUseCase) {
-    this.getModelUseCase = getModelUseCase;
-  }
-  async handle(event) {
-    const {
-      workflow
-    } = event.payload;
-    const modelId = getModelIdFromAppName(workflow.app);
-    if (!modelId) {
-      return;
-    }
-    const model = await this.getModelUseCase.execute(modelId);
-    if (model.isFail()) {
-      return;
+    constructor(getModel){
+        this.getModel = getModel;
     }
-    const tags = model.value.tags || [];
-    if (tags.includes("$publishing:false") === false) {
-      return;
+    async handle(event) {
+        for (const namespaceId of event.payload.workflow.models){
+            const modelId = getModelIdFromAppName(namespaceId);
+            if (!modelId) continue;
+            const model = await this.getModel.execute(modelId);
+            if (model.isFail()) {
+                if (model.error.code === MODEL_NOT_FOUND) throw new WorkflowValidationError(`The model "${modelId}" does not exist.`, {
+                    field: "models"
+                });
+                if (model.error.code === MODEL_NOT_AUTHORIZED) throw new WorkflowValidationError(`You don't have access to the model "${modelId}".`, {
+                    field: "models"
+                });
+                throw model.error;
+            }
+            if (model.value.isPrivate) throw new WorkflowValidationError(`Cannot bind a workflow to the model "${modelId}" because it is a private model.`, {
+                field: "models"
+            });
+            const tags = model.value.tags || [];
+            if (tags.includes(UNPUBLISHABLE_MODEL_TAG)) throw new WorkflowValidationError(`Cannot bind a workflow to the model "${modelId}" because it is marked as unpublishable.`, {
+                field: "models"
+            });
+        }
     }
-    throw new Error(`Cannot create a workflow for the model "${modelId}" because it is marked as unpublishable.`);
-  }
 }
-export const DisallowUnpublishableModelsOnBeforeCreate = WorkflowBeforeCreateHandler.createImplementation({
-  implementation: DisallowUnpublishableModelsOnBeforeCreateImpl,
-  dependencies: [GetModelUseCase]
+const DisallowUnpublishableModelsOnBeforeCreate = WorkflowBeforeCreateEventHandler.createImplementation({
+    implementation: DisallowUnpublishableModelsOnBeforeCreateImpl,
+    dependencies: [
+        GetModelUseCase
+    ]
 });
+export { DisallowUnpublishableModelsOnBeforeCreate };
 
 //# sourceMappingURL=DisallowUnpublishableModelsOnBeforeCreate.js.map

package/features/Workflows/handlers/DisallowUnpublishableModelsOnBeforeCreate.js.map

@@ -1 +1 @@
-{"version":3,"names":["WorkflowBeforeCreateHandler","getModelIdFromAppName","GetModelUseCase","DisallowUnpublishableModelsOnBeforeCreateImpl","constructor","getModelUseCase","handle","event","workflow","payload","modelId","app","model","execute","isFail","tags","value","includes","Error","DisallowUnpublishableModelsOnBeforeCreate","createImplementation","implementation","dependencies"],"sources":["DisallowUnpublishableModelsOnBeforeCreate.ts"],"sourcesContent":["import { WorkflowBeforeCreateHandler } from \"@webiny/api-workflows/features/workflow/CreateWorkflow/events.js\";\nimport { getModelIdFromAppName } from \"~/utils/appName.js\";\nimport { GetModelUseCase } from \"@webiny/api-headless-cms/features/contentModel/GetModel/index.js\";\n\nclass DisallowUnpublishableModelsOnBeforeCreateImpl\n    implements WorkflowBeforeCreateHandler.Interface\n{\n    public constructor(private getModelUseCase: GetModelUseCase.Interface) {}\n\n    public async handle(event: WorkflowBeforeCreateHandler.Event): Promise<void> {\n        const { workflow } = event.payload;\n        const modelId = getModelIdFromAppName(workflow.app);\n        if (!modelId) {\n            return;\n        }\n        const model = await this.getModelUseCase.execute(modelId);\n        if (model.isFail()) {\n            return;\n        }\n        const tags = model.value.tags || [];\n        if (tags.includes(\"$publishing:false\") === false) {\n            return;\n        }\n        throw new Error(\n            `Cannot create a workflow for the model \"${modelId}\" because it is marked as unpublishable.`\n        );\n    }\n}\n\nexport const DisallowUnpublishableModelsOnBeforeCreate =\n    WorkflowBeforeCreateHandler.createImplementation({\n        implementation: DisallowUnpublishableModelsOnBeforeCreateImpl,\n        dependencies: [GetModelUseCase]\n    });\n"],"mappings":"AAAA,SAASA,2BAA2B,QAAQ,kEAAkE;AAC9G,SAASC,qBAAqB;AAC9B,SAASC,eAAe,QAAQ,kEAAkE;AAElG,MAAMC,6CAA6C,CAEnD;EACWC,WAAWA,CAASC,eAA0C,EAAE;IAAA,KAA5CA,eAA0C,GAA1CA,eAA0C;EAAG;EAExE,MAAaC,MAAMA,CAACC,KAAwC,EAAiB;IACzE,MAAM;MAAEC;IAAS,CAAC,GAAGD,KAAK,CAACE,OAAO;IAClC,MAAMC,OAAO,GAAGT,qBAAqB,CAACO,QAAQ,CAACG,GAAG,CAAC;IACnD,IAAI,CAACD,OAAO,EAAE;MACV;IACJ;IACA,MAAME,KAAK,GAAG,MAAM,IAAI,CAACP,eAAe,CAACQ,OAAO,CAACH,OAAO,CAAC;IACzD,IAAIE,KAAK,CAACE,MAAM,CAAC,CAAC,EAAE;MAChB;IACJ;IACA,MAAMC,IAAI,GAAGH,KAAK,CAACI,KAAK,CAACD,IAAI,IAAI,EAAE;IACnC,IAAIA,IAAI,CAACE,QAAQ,CAAC,mBAAmB,CAAC,KAAK,KAAK,EAAE;MAC9C;IACJ;IACA,MAAM,IAAIC,KAAK,CACX,2CAA2CR,OAAO,0CACtD,CAAC;EACL;AACJ;AAEA,OAAO,MAAMS,yCAAyC,GAClDnB,2BAA2B,CAACoB,oBAAoB,CAAC;EAC7CC,cAAc,EAAElB,6CAA6C;EAC7DmB,YAAY,EAAE,CAACpB,eAAe;AAClC,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/Workflows/handlers/DisallowUnpublishableModelsOnBeforeCreate.js","sources":["../../../../src/features/Workflows/handlers/DisallowUnpublishableModelsOnBeforeCreate.ts"],"sourcesContent":["import { WorkflowBeforeCreateEventHandler } from \"@webiny/api-workflows/features/workflow/StoreWorkflow/index.js\";\nimport { GetModelUseCase } from \"@webiny/api-headless-cms/features/contentModel/GetModel/index.js\";\nimport { WorkflowValidationError } from \"@webiny/api-workflows/domain/workflow/errors.js\";\nimport { getModelIdFromAppName } from \"~/utils/appName.js\";\nimport { UNPUBLISHABLE_MODEL_TAG } from \"~/utils/isBindableModel.js\";\n\nconst MODEL_NOT_FOUND = \"Cms/Model/NotFound\";\nconst MODEL_NOT_AUTHORIZED = \"Cms/Model/NotAuthorized\";\n\n/**\n * Spec 4.1, D41: a workflow can only bind an existing, public, publishable CMS model. Throws\n * `WorkflowValidationError`, which `StoreWorkflowUseCase` returns as a failed result. Non-CMS\n * namespaces (`wb.page`) are skipped; the namespace format itself is checked by\n * `WorkflowValidator` before any event is published. Other model read errors propagate.\n *\n * Binding requires read access to the model (R38): a model the caller cannot access fails\n * validation instead of throwing `Cms/Model/NotAuthorized` out of `StoreWorkflowUseCase`. The CMS\n * hides code-defined models the caller cannot access, so those report as not found. The read stays\n * access-controlled on purpose: `GetModelRepository` or an elevated identity would fill the CMS\n * tenant-keyed model cache with a list other callers must not see.\n */\nclass DisallowUnpublishableModelsOnBeforeCreateImpl\n    implements WorkflowBeforeCreateEventHandler.Interface\n{\n    public constructor(private getModel: GetModelUseCase.Interface) {}\n\n    public async handle(event: WorkflowBeforeCreateEventHandler.Event): Promise<void> {\n        for (const namespaceId of event.payload.workflow.models) {\n            const modelId = getModelIdFromAppName(namespaceId);\n            if (!modelId) {\n                continue;\n            }\n            // oxlint-disable-next-line no-await-in-loop -- per-request cached model read, one per bound model.\n            const model = await this.getModel.execute(modelId);\n            if (model.isFail()) {\n                if (model.error.code === MODEL_NOT_FOUND) {\n                    throw new WorkflowValidationError(`The model \"${modelId}\" does not exist.`, {\n                        field: \"models\"\n                    });\n                }\n                if (model.error.code === MODEL_NOT_AUTHORIZED) {\n                    throw new WorkflowValidationError(\n                        `You don't have access to the model \"${modelId}\".`,\n                        { field: \"models\" }\n                    );\n                }\n                throw model.error;\n            }\n            if (model.value.isPrivate) {\n                throw new WorkflowValidationError(\n                    `Cannot bind a workflow to the model \"${modelId}\" because it is a private model.`,\n                    { field: \"models\" }\n                );\n            }\n            const tags = model.value.tags || [];\n            if (!tags.includes(UNPUBLISHABLE_MODEL_TAG)) {\n                continue;\n            }\n            throw new WorkflowValidationError(\n                `Cannot bind a workflow to the model \"${modelId}\" because it is marked as unpublishable.`,\n                { field: \"models\" }\n            );\n        }\n    }\n}\n\nexport const DisallowUnpublishableModelsOnBeforeCreate =\n    WorkflowBeforeCreateEventHandler.createImplementation({\n        implementation: DisallowUnpublishableModelsOnBeforeCreateImpl,\n        dependencies: [GetModelUseCase]\n    });\n"],"names":["MODEL_NOT_FOUND","MODEL_NOT_AUTHORIZED","DisallowUnpublishableModelsOnBeforeCreateImpl","getModel","event","namespaceId","modelId","getModelIdFromAppName","model","WorkflowValidationError","tags","UNPUBLISHABLE_MODEL_TAG","DisallowUnpublishableModelsOnBeforeCreate","WorkflowBeforeCreateEventHandler","GetModelUseCase"],"mappings":";;;;;AAMA,MAAMA,kBAAkB;AACxB,MAAMC,uBAAuB;AAc7B,MAAMC;IAGF,YAA2BC,QAAmC,CAAE;aAArCA,QAAQ,GAARA;IAAsC;IAEjE,MAAa,OAAOC,KAA6C,EAAiB;QAC9E,KAAK,MAAMC,eAAeD,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAE;YACrD,MAAME,UAAUC,sBAAsBF;YACtC,IAAI,CAACC,SACD;YAGJ,MAAME,QAAQ,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAACF;YAC1C,IAAIE,MAAM,MAAM,IAAI;gBAChB,IAAIA,MAAM,KAAK,CAAC,IAAI,KAAKR,iBACrB,MAAM,IAAIS,wBAAwB,CAAC,WAAW,EAAEH,QAAQ,iBAAiB,CAAC,EAAE;oBACxE,OAAO;gBACX;gBAEJ,IAAIE,MAAM,KAAK,CAAC,IAAI,KAAKP,sBACrB,MAAM,IAAIQ,wBACN,CAAC,oCAAoC,EAAEH,QAAQ,EAAE,CAAC,EAClD;oBAAE,OAAO;gBAAS;gBAG1B,MAAME,MAAM,KAAK;YACrB;YACA,IAAIA,MAAM,KAAK,CAAC,SAAS,EACrB,MAAM,IAAIC,wBACN,CAAC,qCAAqC,EAAEH,QAAQ,gCAAgC,CAAC,EACjF;gBAAE,OAAO;YAAS;YAG1B,MAAMI,OAAOF,MAAM,KAAK,CAAC,IAAI,IAAI,EAAE;YACnC,IAAKE,KAAK,QAAQ,CAACC,0BAGnB,MAAM,IAAIF,wBACN,CAAC,qCAAqC,EAAEH,QAAQ,wCAAwC,CAAC,EACzF;gBAAE,OAAO;YAAS;QAE1B;IACJ;AACJ;AAEO,MAAMM,4CACTC,iCAAiC,oBAAoB,CAAC;IAClD,gBAAgBX;IAChB,cAAc;QAACY;KAAgB;AACnC"}

package/features/Workflows/handlers/DisallowUnpublishableModelsOnBeforeUpdate.d.ts

@@ -0,0 +1,23 @@
+import { WorkflowBeforeUpdateEventHandler } from "@webiny/api-workflows/features/workflow/StoreWorkflow/index.js";
+import { GetModelUseCase } from "@webiny/api-headless-cms/features/contentModel/GetModel/index.js";
+/**
+ * Spec 4.1, D41: a workflow can only bind an existing, public, publishable CMS model. Throws
+ * `WorkflowValidationError`, which `StoreWorkflowUseCase` returns as a failed result. Non-CMS
+ * namespaces (`wb.page`) are skipped; the namespace format itself is checked by
+ * `WorkflowValidator` before any event is published. Other model read errors propagate.
+ *
+ * Binding requires read access to the model (R38): a model the caller cannot access fails
+ * validation instead of throwing `Cms/Model/NotAuthorized` out of `StoreWorkflowUseCase`. The CMS
+ * hides code-defined models the caller cannot access, so those report as not found. The read stays
+ * access-controlled on purpose: `GetModelRepository` or an elevated identity would fill the CMS
+ * tenant-keyed model cache with a list other callers must not see.
+ */
+declare class DisallowUnpublishableModelsOnBeforeUpdateImpl implements WorkflowBeforeUpdateEventHandler.Interface {
+    private getModel;
+    constructor(getModel: GetModelUseCase.Interface);
+    handle(event: WorkflowBeforeUpdateEventHandler.Event): Promise<void>;
+}
+export declare const DisallowUnpublishableModelsOnBeforeUpdate: typeof DisallowUnpublishableModelsOnBeforeUpdateImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/eventPublisher").IEventHandler<import("@webiny/api-workflows/features/workflow/StoreWorkflow/events").WorkflowBeforeUpdateEvent>>;
+};
+export {};

package/features/Workflows/handlers/DisallowUnpublishableModelsOnBeforeUpdate.js

@@ -0,0 +1,44 @@
+import { WorkflowBeforeUpdateEventHandler } from "@webiny/api-workflows/features/workflow/StoreWorkflow/index.js";
+import { GetModelUseCase } from "@webiny/api-headless-cms/features/contentModel/GetModel/index.js";
+import { WorkflowValidationError } from "@webiny/api-workflows/domain/workflow/errors.js";
+import { getModelIdFromAppName } from "../../../utils/appName.js";
+import { UNPUBLISHABLE_MODEL_TAG } from "../../../utils/isBindableModel.js";
+const MODEL_NOT_FOUND = "Cms/Model/NotFound";
+const MODEL_NOT_AUTHORIZED = "Cms/Model/NotAuthorized";
+class DisallowUnpublishableModelsOnBeforeUpdateImpl {
+    constructor(getModel){
+        this.getModel = getModel;
+    }
+    async handle(event) {
+        for (const namespaceId of event.payload.workflow.models){
+            const modelId = getModelIdFromAppName(namespaceId);
+            if (!modelId) continue;
+            const model = await this.getModel.execute(modelId);
+            if (model.isFail()) {
+                if (model.error.code === MODEL_NOT_FOUND) throw new WorkflowValidationError(`The model "${modelId}" does not exist.`, {
+                    field: "models"
+                });
+                if (model.error.code === MODEL_NOT_AUTHORIZED) throw new WorkflowValidationError(`You don't have access to the model "${modelId}".`, {
+                    field: "models"
+                });
+                throw model.error;
+            }
+            if (model.value.isPrivate) throw new WorkflowValidationError(`Cannot bind a workflow to the model "${modelId}" because it is a private model.`, {
+                field: "models"
+            });
+            const tags = model.value.tags || [];
+            if (tags.includes(UNPUBLISHABLE_MODEL_TAG)) throw new WorkflowValidationError(`Cannot bind a workflow to the model "${modelId}" because it is marked as unpublishable.`, {
+                field: "models"
+            });
+        }
+    }
+}
+const DisallowUnpublishableModelsOnBeforeUpdate = WorkflowBeforeUpdateEventHandler.createImplementation({
+    implementation: DisallowUnpublishableModelsOnBeforeUpdateImpl,
+    dependencies: [
+        GetModelUseCase
+    ]
+});
+export { DisallowUnpublishableModelsOnBeforeUpdate };
+
+//# sourceMappingURL=DisallowUnpublishableModelsOnBeforeUpdate.js.map

package/features/Workflows/handlers/DisallowUnpublishableModelsOnBeforeUpdate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/Workflows/handlers/DisallowUnpublishableModelsOnBeforeUpdate.js","sources":["../../../../src/features/Workflows/handlers/DisallowUnpublishableModelsOnBeforeUpdate.ts"],"sourcesContent":["import { WorkflowBeforeUpdateEventHandler } from \"@webiny/api-workflows/features/workflow/StoreWorkflow/index.js\";\nimport { GetModelUseCase } from \"@webiny/api-headless-cms/features/contentModel/GetModel/index.js\";\nimport { WorkflowValidationError } from \"@webiny/api-workflows/domain/workflow/errors.js\";\nimport { getModelIdFromAppName } from \"~/utils/appName.js\";\nimport { UNPUBLISHABLE_MODEL_TAG } from \"~/utils/isBindableModel.js\";\n\nconst MODEL_NOT_FOUND = \"Cms/Model/NotFound\";\nconst MODEL_NOT_AUTHORIZED = \"Cms/Model/NotAuthorized\";\n\n/**\n * Spec 4.1, D41: a workflow can only bind an existing, public, publishable CMS model. Throws\n * `WorkflowValidationError`, which `StoreWorkflowUseCase` returns as a failed result. Non-CMS\n * namespaces (`wb.page`) are skipped; the namespace format itself is checked by\n * `WorkflowValidator` before any event is published. Other model read errors propagate.\n *\n * Binding requires read access to the model (R38): a model the caller cannot access fails\n * validation instead of throwing `Cms/Model/NotAuthorized` out of `StoreWorkflowUseCase`. The CMS\n * hides code-defined models the caller cannot access, so those report as not found. The read stays\n * access-controlled on purpose: `GetModelRepository` or an elevated identity would fill the CMS\n * tenant-keyed model cache with a list other callers must not see.\n */\nclass DisallowUnpublishableModelsOnBeforeUpdateImpl\n    implements WorkflowBeforeUpdateEventHandler.Interface\n{\n    public constructor(private getModel: GetModelUseCase.Interface) {}\n\n    public async handle(event: WorkflowBeforeUpdateEventHandler.Event): Promise<void> {\n        for (const namespaceId of event.payload.workflow.models) {\n            const modelId = getModelIdFromAppName(namespaceId);\n            if (!modelId) {\n                continue;\n            }\n            // oxlint-disable-next-line no-await-in-loop -- per-request cached model read, one per bound model.\n            const model = await this.getModel.execute(modelId);\n            if (model.isFail()) {\n                if (model.error.code === MODEL_NOT_FOUND) {\n                    throw new WorkflowValidationError(`The model \"${modelId}\" does not exist.`, {\n                        field: \"models\"\n                    });\n                }\n                if (model.error.code === MODEL_NOT_AUTHORIZED) {\n                    throw new WorkflowValidationError(\n                        `You don't have access to the model \"${modelId}\".`,\n                        { field: \"models\" }\n                    );\n                }\n                throw model.error;\n            }\n            if (model.value.isPrivate) {\n                throw new WorkflowValidationError(\n                    `Cannot bind a workflow to the model \"${modelId}\" because it is a private model.`,\n                    { field: \"models\" }\n                );\n            }\n            const tags = model.value.tags || [];\n            if (!tags.includes(UNPUBLISHABLE_MODEL_TAG)) {\n                continue;\n            }\n            throw new WorkflowValidationError(\n                `Cannot bind a workflow to the model \"${modelId}\" because it is marked as unpublishable.`,\n                { field: \"models\" }\n            );\n        }\n    }\n}\n\nexport const DisallowUnpublishableModelsOnBeforeUpdate =\n    WorkflowBeforeUpdateEventHandler.createImplementation({\n        implementation: DisallowUnpublishableModelsOnBeforeUpdateImpl,\n        dependencies: [GetModelUseCase]\n    });\n"],"names":["MODEL_NOT_FOUND","MODEL_NOT_AUTHORIZED","DisallowUnpublishableModelsOnBeforeUpdateImpl","getModel","event","namespaceId","modelId","getModelIdFromAppName","model","WorkflowValidationError","tags","UNPUBLISHABLE_MODEL_TAG","DisallowUnpublishableModelsOnBeforeUpdate","WorkflowBeforeUpdateEventHandler","GetModelUseCase"],"mappings":";;;;;AAMA,MAAMA,kBAAkB;AACxB,MAAMC,uBAAuB;AAc7B,MAAMC;IAGF,YAA2BC,QAAmC,CAAE;aAArCA,QAAQ,GAARA;IAAsC;IAEjE,MAAa,OAAOC,KAA6C,EAAiB;QAC9E,KAAK,MAAMC,eAAeD,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAE;YACrD,MAAME,UAAUC,sBAAsBF;YACtC,IAAI,CAACC,SACD;YAGJ,MAAME,QAAQ,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAACF;YAC1C,IAAIE,MAAM,MAAM,IAAI;gBAChB,IAAIA,MAAM,KAAK,CAAC,IAAI,KAAKR,iBACrB,MAAM,IAAIS,wBAAwB,CAAC,WAAW,EAAEH,QAAQ,iBAAiB,CAAC,EAAE;oBACxE,OAAO;gBACX;gBAEJ,IAAIE,MAAM,KAAK,CAAC,IAAI,KAAKP,sBACrB,MAAM,IAAIQ,wBACN,CAAC,oCAAoC,EAAEH,QAAQ,EAAE,CAAC,EAClD;oBAAE,OAAO;gBAAS;gBAG1B,MAAME,MAAM,KAAK;YACrB;YACA,IAAIA,MAAM,KAAK,CAAC,SAAS,EACrB,MAAM,IAAIC,wBACN,CAAC,qCAAqC,EAAEH,QAAQ,gCAAgC,CAAC,EACjF;gBAAE,OAAO;YAAS;YAG1B,MAAMI,OAAOF,MAAM,KAAK,CAAC,IAAI,IAAI,EAAE;YACnC,IAAKE,KAAK,QAAQ,CAACC,0BAGnB,MAAM,IAAIF,wBACN,CAAC,qCAAqC,EAAEH,QAAQ,wCAAwC,CAAC,EACzF;gBAAE,OAAO;YAAS;QAE1B;IACJ;AACJ;AAEO,MAAMM,4CACTC,iCAAiC,oBAAoB,CAAC;IAClD,gBAAgBX;IAChB,cAAc;QAACY;KAAgB;AACnC"}

package/features/Workflows/index.js

@@ -1,3 +1 @@
 export { WorkflowsFeature } from "./feature.js";
-
-//# sourceMappingURL=index.js.map

package/features/hooks/BlockDeleteMultipleWhileInReview.d.ts

@@ -0,0 +1,22 @@
+import { EntryBeforeDeleteMultipleEventHandler } from "@webiny/api-headless-cms/features/contentEntry/DeleteMultipleEntries/index.js";
+import { AccessControl } from "@webiny/api-headless-cms/features/shared/abstractions.js";
+import { GetBoundWorkflowUseCase } from "@webiny/api-workflows/features/workflow/GetBoundWorkflow/index.js";
+import { ListReviewsByTargetsUseCase } from "@webiny/api-workflows/features/review/ListReviewsByTargets/index.js";
+/**
+ * `deleteMultiple` (permanent, up to 50 entries) is refused while any entry it would delete has an
+ * in-progress review (D134, R73). Only the entries the caller may access are considered, with the
+ * same check `DeleteMultipleEntriesUseCase` applies, so the error never names a review of content
+ * the caller cannot see. Bound models only; the binding is looked up once, the reviews of all
+ * accessible entries with one engine call (Q79).
+ */
+declare class BlockDeleteMultipleWhileInReviewImpl implements EntryBeforeDeleteMultipleEventHandler.Interface {
+    private accessControl;
+    private getBoundWorkflow;
+    private listReviewsByTargets;
+    constructor(accessControl: AccessControl.Interface, getBoundWorkflow: GetBoundWorkflowUseCase.Interface, listReviewsByTargets: ListReviewsByTargetsUseCase.Interface);
+    handle(event: EntryBeforeDeleteMultipleEventHandler.Event): Promise<void>;
+}
+export declare const BlockDeleteMultipleWhileInReview: typeof BlockDeleteMultipleWhileInReviewImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/eventPublisher").IEventHandler<import("@webiny/api-headless-cms/features/contentEntry/DeleteMultipleEntries/events").EntryBeforeDeleteMultipleEvent>>;
+};
+export {};

package/features/hooks/BlockDeleteMultipleWhileInReview.js

@@ -0,0 +1,64 @@
+import { EntryBeforeDeleteMultipleEventHandler } from "@webiny/api-headless-cms/features/contentEntry/DeleteMultipleEntries/index.js";
+import { AccessControl } from "@webiny/api-headless-cms/features/shared/abstractions.js";
+import { GetBoundWorkflowUseCase } from "@webiny/api-workflows/features/workflow/GetBoundWorkflow/index.js";
+import { ListReviewsByTargetsUseCase } from "@webiny/api-workflows/features/review/ListReviewsByTargets/index.js";
+import { ReviewActiveOnTrashError } from "@webiny/api-workflows/domain/review/errors.js";
+import { toBlockingReview } from "@webiny/api-workflows/domain/review/toBlockingReview.js";
+import { getCmsNamespace } from "../../utils/appName.js";
+class BlockDeleteMultipleWhileInReviewImpl {
+    constructor(accessControl, getBoundWorkflow, listReviewsByTargets){
+        this.accessControl = accessControl;
+        this.getBoundWorkflow = getBoundWorkflow;
+        this.listReviewsByTargets = listReviewsByTargets;
+    }
+    async handle(event) {
+        const { model, entries } = event.payload;
+        const namespace = getCmsNamespace(model);
+        if (!namespace) return;
+        const bound = await this.getBoundWorkflow.execute({
+            model: namespace
+        });
+        if (bound.isFail()) throw bound.error;
+        if (!bound.value) return;
+        const entryIds = [];
+        for (const entry of entries)if (await this.accessControl.canAccessEntry({
+            model,
+            entry
+        })) entryIds.push(entry.entryId);
+        if (0 === entryIds.length) return;
+        const listed = await this.listReviewsByTargets.execute({
+            model: namespace,
+            targetIds: entryIds,
+            state: "inProgress"
+        });
+        if (listed.isFail()) throw listed.error;
+        const inProgress = new Map();
+        for (const review of listed.value){
+            const reviews = inProgress.get(review.targetId) ?? [];
+            reviews.push(review);
+            inProgress.set(review.targetId, reviews);
+        }
+        const blocking = [];
+        for (const entryId of entryIds){
+            const reviews = inProgress.get(entryId) ?? [];
+            for (const review of reviews)blocking.push(toBlockingReview(review));
+        }
+        if (0 === blocking.length) return;
+        throw new ReviewActiveOnTrashError({
+            model: namespace,
+            action: "delete",
+            reviews: blocking
+        });
+    }
+}
+const BlockDeleteMultipleWhileInReview = EntryBeforeDeleteMultipleEventHandler.createImplementation({
+    implementation: BlockDeleteMultipleWhileInReviewImpl,
+    dependencies: [
+        AccessControl,
+        GetBoundWorkflowUseCase,
+        ListReviewsByTargetsUseCase
+    ]
+});
+export { BlockDeleteMultipleWhileInReview };
+
+//# sourceMappingURL=BlockDeleteMultipleWhileInReview.js.map

package/features/hooks/BlockDeleteMultipleWhileInReview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/hooks/BlockDeleteMultipleWhileInReview.js","sources":["../../../src/features/hooks/BlockDeleteMultipleWhileInReview.ts"],"sourcesContent":["import { EntryBeforeDeleteMultipleEventHandler } from \"@webiny/api-headless-cms/features/contentEntry/DeleteMultipleEntries/index.js\";\nimport { AccessControl } from \"@webiny/api-headless-cms/features/shared/abstractions.js\";\nimport { GetBoundWorkflowUseCase } from \"@webiny/api-workflows/features/workflow/GetBoundWorkflow/index.js\";\nimport { ListReviewsByTargetsUseCase } from \"@webiny/api-workflows/features/review/ListReviewsByTargets/index.js\";\nimport { ReviewActiveOnTrashError } from \"@webiny/api-workflows/domain/review/errors.js\";\nimport { toBlockingReview } from \"@webiny/api-workflows/domain/review/toBlockingReview.js\";\nimport type { ReviewData } from \"@webiny/api-workflows/domain/review/types.js\";\nimport type { WorkflowBlockingReview } from \"@webiny/api-workflows/domain/workflow/types.js\";\nimport { getCmsNamespace } from \"~/utils/appName.js\";\n\n/**\n * `deleteMultiple` (permanent, up to 50 entries) is refused while any entry it would delete has an\n * in-progress review (D134, R73). Only the entries the caller may access are considered, with the\n * same check `DeleteMultipleEntriesUseCase` applies, so the error never names a review of content\n * the caller cannot see. Bound models only; the binding is looked up once, the reviews of all\n * accessible entries with one engine call (Q79).\n */\nclass BlockDeleteMultipleWhileInReviewImpl\n    implements EntryBeforeDeleteMultipleEventHandler.Interface\n{\n    public constructor(\n        private accessControl: AccessControl.Interface,\n        private getBoundWorkflow: GetBoundWorkflowUseCase.Interface,\n        private listReviewsByTargets: ListReviewsByTargetsUseCase.Interface\n    ) {}\n\n    public async handle(event: EntryBeforeDeleteMultipleEventHandler.Event): Promise<void> {\n        const { model, entries } = event.payload;\n        const namespace = getCmsNamespace(model);\n        if (!namespace) {\n            return;\n        }\n\n        const bound = await this.getBoundWorkflow.execute({ model: namespace });\n        if (bound.isFail()) {\n            throw bound.error;\n        }\n        if (!bound.value) {\n            return;\n        }\n\n        // In memory: the caller's permissions are already loaded.\n        const entryIds: string[] = [];\n        for (const entry of entries) {\n            // oxlint-disable-next-line no-await-in-loop -- in memory: the caller's permissions are already loaded.\n            if (await this.accessControl.canAccessEntry({ model, entry })) {\n                entryIds.push(entry.entryId);\n            }\n        }\n        if (entryIds.length === 0) {\n            return;\n        }\n\n        // Any failure throws, so the delete is refused.\n        const listed = await this.listReviewsByTargets.execute({\n            model: namespace,\n            targetIds: entryIds,\n            state: \"inProgress\"\n        });\n        if (listed.isFail()) {\n            throw listed.error;\n        }\n        const inProgress = new Map<string, ReviewData[]>();\n        for (const review of listed.value) {\n            const reviews = inProgress.get(review.targetId) ?? [];\n            reviews.push(review);\n            inProgress.set(review.targetId, reviews);\n        }\n        // In the order of the entries, each entry's reviews in list order.\n        const blocking: WorkflowBlockingReview[] = [];\n        for (const entryId of entryIds) {\n            const reviews = inProgress.get(entryId) ?? [];\n            for (const review of reviews) {\n                blocking.push(toBlockingReview(review));\n            }\n        }\n        if (blocking.length === 0) {\n            return;\n        }\n\n        throw new ReviewActiveOnTrashError({\n            model: namespace,\n            action: \"delete\",\n            reviews: blocking\n        });\n    }\n}\n\nexport const BlockDeleteMultipleWhileInReview =\n    EntryBeforeDeleteMultipleEventHandler.createImplementation({\n        implementation: BlockDeleteMultipleWhileInReviewImpl,\n        dependencies: [AccessControl, GetBoundWorkflowUseCase, ListReviewsByTargetsUseCase]\n    });\n"],"names":["BlockDeleteMultipleWhileInReviewImpl","accessControl","getBoundWorkflow","listReviewsByTargets","event","model","entries","namespace","getCmsNamespace","bound","entryIds","entry","listed","inProgress","Map","review","reviews","blocking","entryId","toBlockingReview","ReviewActiveOnTrashError","BlockDeleteMultipleWhileInReview","EntryBeforeDeleteMultipleEventHandler","AccessControl","GetBoundWorkflowUseCase","ListReviewsByTargetsUseCase"],"mappings":";;;;;;;AAiBA,MAAMA;IAGF,YACYC,aAAsC,EACtCC,gBAAmD,EACnDC,oBAA2D,CACrE;aAHUF,aAAa,GAAbA;aACAC,gBAAgB,GAAhBA;aACAC,oBAAoB,GAApBA;IACT;IAEH,MAAa,OAAOC,KAAkD,EAAiB;QACnF,MAAM,EAAEC,KAAK,EAAEC,OAAO,EAAE,GAAGF,MAAM,OAAO;QACxC,MAAMG,YAAYC,gBAAgBH;QAClC,IAAI,CAACE,WACD;QAGJ,MAAME,QAAQ,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAAE,OAAOF;QAAU;QACrE,IAAIE,MAAM,MAAM,IACZ,MAAMA,MAAM,KAAK;QAErB,IAAI,CAACA,MAAM,KAAK,EACZ;QAIJ,MAAMC,WAAqB,EAAE;QAC7B,KAAK,MAAMC,SAASL,QAEhB,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;YAAED;YAAOM;QAAM,IACvDD,SAAS,IAAI,CAACC,MAAM,OAAO;QAGnC,IAAID,AAAoB,MAApBA,SAAS,MAAM,EACf;QAIJ,MAAME,SAAS,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;YACnD,OAAOL;YACP,WAAWG;YACX,OAAO;QACX;QACA,IAAIE,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;QAEtB,MAAMC,aAAa,IAAIC;QACvB,KAAK,MAAMC,UAAUH,OAAO,KAAK,CAAE;YAC/B,MAAMI,UAAUH,WAAW,GAAG,CAACE,OAAO,QAAQ,KAAK,EAAE;YACrDC,QAAQ,IAAI,CAACD;YACbF,WAAW,GAAG,CAACE,OAAO,QAAQ,EAAEC;QACpC;QAEA,MAAMC,WAAqC,EAAE;QAC7C,KAAK,MAAMC,WAAWR,SAAU;YAC5B,MAAMM,UAAUH,WAAW,GAAG,CAACK,YAAY,EAAE;YAC7C,KAAK,MAAMH,UAAUC,QACjBC,SAAS,IAAI,CAACE,iBAAiBJ;QAEvC;QACA,IAAIE,AAAoB,MAApBA,SAAS,MAAM,EACf;QAGJ,MAAM,IAAIG,yBAAyB;YAC/B,OAAOb;YACP,QAAQ;YACR,SAASU;QACb;IACJ;AACJ;AAEO,MAAMI,mCACTC,sCAAsC,oBAAoB,CAAC;IACvD,gBAAgBtB;IAChB,cAAc;QAACuB;QAAeC;QAAyBC;KAA4B;AACvF"}

package/features/hooks/BlockDeleteWhileInReview.d.ts

@@ -0,0 +1,18 @@
+import { EntryBeforeDeleteEventHandler } from "@webiny/api-headless-cms/features/contentEntry/DeleteEntry/index.js";
+import { GetBoundWorkflowUseCase } from "@webiny/api-workflows/features/workflow/GetBoundWorkflow/index.js";
+import { ListTargetReviewsUseCase } from "@webiny/api-workflows/features/review/ListTargetReviews/index.js";
+/**
+ * Trash and permanent delete of a CMS entry are refused while any revision has an in-progress
+ * review (D134, R73): `permanent: false` is the trash, `true` the delete. The admin confirms by
+ * calling `CancelCmsEntryReviewsForDelete` and repeating the action. Bound models only.
+ */
+declare class BlockDeleteWhileInReviewImpl implements EntryBeforeDeleteEventHandler.Interface {
+    private getBoundWorkflow;
+    private listTargetReviews;
+    constructor(getBoundWorkflow: GetBoundWorkflowUseCase.Interface, listTargetReviews: ListTargetReviewsUseCase.Interface);
+    handle(event: EntryBeforeDeleteEventHandler.Event): Promise<void>;
+}
+export declare const BlockDeleteWhileInReview: typeof BlockDeleteWhileInReviewImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/eventPublisher").IEventHandler<import("@webiny/api-headless-cms/features/contentEntry/DeleteEntry/events").EntryBeforeDeleteEvent>>;
+};
+export {};

package/features/hooks/BlockDeleteWhileInReview.js

@@ -0,0 +1,45 @@
+import { EntryBeforeDeleteEventHandler } from "@webiny/api-headless-cms/features/contentEntry/DeleteEntry/index.js";
+import { GetBoundWorkflowUseCase } from "@webiny/api-workflows/features/workflow/GetBoundWorkflow/index.js";
+import { ListTargetReviewsUseCase } from "@webiny/api-workflows/features/review/ListTargetReviews/index.js";
+import { ReviewActiveOnTrashError } from "@webiny/api-workflows/domain/review/errors.js";
+import { toBlockingReview } from "@webiny/api-workflows/domain/review/toBlockingReview.js";
+import { getCmsNamespace } from "../../utils/appName.js";
+class BlockDeleteWhileInReviewImpl {
+    constructor(getBoundWorkflow, listTargetReviews){
+        this.getBoundWorkflow = getBoundWorkflow;
+        this.listTargetReviews = listTargetReviews;
+    }
+    async handle(event) {
+        const { model, entry, permanent } = event.payload;
+        const namespace = getCmsNamespace(model);
+        if (!namespace) return;
+        const bound = await this.getBoundWorkflow.execute({
+            model: namespace
+        });
+        if (bound.isFail()) throw bound.error;
+        if (!bound.value) return;
+        const reviews = await this.listTargetReviews.execute({
+            model: namespace,
+            targetId: entry.entryId,
+            state: "inProgress"
+        });
+        if (reviews.isFail()) throw reviews.error;
+        const inProgress = reviews.value;
+        if (0 === inProgress.length) return;
+        throw new ReviewActiveOnTrashError({
+            model: namespace,
+            action: permanent ? "delete" : "trash",
+            reviews: inProgress.map(toBlockingReview)
+        });
+    }
+}
+const BlockDeleteWhileInReview = EntryBeforeDeleteEventHandler.createImplementation({
+    implementation: BlockDeleteWhileInReviewImpl,
+    dependencies: [
+        GetBoundWorkflowUseCase,
+        ListTargetReviewsUseCase
+    ]
+});
+export { BlockDeleteWhileInReview };
+
+//# sourceMappingURL=BlockDeleteWhileInReview.js.map

package/features/hooks/BlockDeleteWhileInReview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/hooks/BlockDeleteWhileInReview.js","sources":["../../../src/features/hooks/BlockDeleteWhileInReview.ts"],"sourcesContent":["import { EntryBeforeDeleteEventHandler } from \"@webiny/api-headless-cms/features/contentEntry/DeleteEntry/index.js\";\nimport { GetBoundWorkflowUseCase } from \"@webiny/api-workflows/features/workflow/GetBoundWorkflow/index.js\";\nimport { ListTargetReviewsUseCase } from \"@webiny/api-workflows/features/review/ListTargetReviews/index.js\";\nimport { ReviewActiveOnTrashError } from \"@webiny/api-workflows/domain/review/errors.js\";\nimport { toBlockingReview } from \"@webiny/api-workflows/domain/review/toBlockingReview.js\";\nimport { getCmsNamespace } from \"~/utils/appName.js\";\n\n/**\n * Trash and permanent delete of a CMS entry are refused while any revision has an in-progress\n * review (D134, R73): `permanent: false` is the trash, `true` the delete. The admin confirms by\n * calling `CancelCmsEntryReviewsForDelete` and repeating the action. Bound models only.\n */\nclass BlockDeleteWhileInReviewImpl implements EntryBeforeDeleteEventHandler.Interface {\n    public constructor(\n        private getBoundWorkflow: GetBoundWorkflowUseCase.Interface,\n        private listTargetReviews: ListTargetReviewsUseCase.Interface\n    ) {}\n\n    public async handle(event: EntryBeforeDeleteEventHandler.Event): Promise<void> {\n        const { model, entry, permanent } = event.payload;\n        const namespace = getCmsNamespace(model);\n        if (!namespace) {\n            return;\n        }\n\n        const bound = await this.getBoundWorkflow.execute({ model: namespace });\n        if (bound.isFail()) {\n            throw bound.error;\n        }\n        if (!bound.value) {\n            return;\n        }\n\n        const reviews = await this.listTargetReviews.execute({\n            model: namespace,\n            targetId: entry.entryId,\n            state: \"inProgress\"\n        });\n        if (reviews.isFail()) {\n            throw reviews.error;\n        }\n        const inProgress = reviews.value;\n        if (inProgress.length === 0) {\n            return;\n        }\n\n        throw new ReviewActiveOnTrashError({\n            model: namespace,\n            action: permanent ? \"delete\" : \"trash\",\n            reviews: inProgress.map(toBlockingReview)\n        });\n    }\n}\n\nexport const BlockDeleteWhileInReview = EntryBeforeDeleteEventHandler.createImplementation({\n    implementation: BlockDeleteWhileInReviewImpl,\n    dependencies: [GetBoundWorkflowUseCase, ListTargetReviewsUseCase]\n});\n"],"names":["BlockDeleteWhileInReviewImpl","getBoundWorkflow","listTargetReviews","event","model","entry","permanent","namespace","getCmsNamespace","bound","reviews","inProgress","ReviewActiveOnTrashError","toBlockingReview","BlockDeleteWhileInReview","EntryBeforeDeleteEventHandler","GetBoundWorkflowUseCase","ListTargetReviewsUseCase"],"mappings":";;;;;;AAYA,MAAMA;IACF,YACYC,gBAAmD,EACnDC,iBAAqD,CAC/D;aAFUD,gBAAgB,GAAhBA;aACAC,iBAAiB,GAAjBA;IACT;IAEH,MAAa,OAAOC,KAA0C,EAAiB;QAC3E,MAAM,EAAEC,KAAK,EAAEC,KAAK,EAAEC,SAAS,EAAE,GAAGH,MAAM,OAAO;QACjD,MAAMI,YAAYC,gBAAgBJ;QAClC,IAAI,CAACG,WACD;QAGJ,MAAME,QAAQ,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAAE,OAAOF;QAAU;QACrE,IAAIE,MAAM,MAAM,IACZ,MAAMA,MAAM,KAAK;QAErB,IAAI,CAACA,MAAM,KAAK,EACZ;QAGJ,MAAMC,UAAU,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YACjD,OAAOH;YACP,UAAUF,MAAM,OAAO;YACvB,OAAO;QACX;QACA,IAAIK,QAAQ,MAAM,IACd,MAAMA,QAAQ,KAAK;QAEvB,MAAMC,aAAaD,QAAQ,KAAK;QAChC,IAAIC,AAAsB,MAAtBA,WAAW,MAAM,EACjB;QAGJ,MAAM,IAAIC,yBAAyB;YAC/B,OAAOL;YACP,QAAQD,YAAY,WAAW;YAC/B,SAASK,WAAW,GAAG,CAACE;QAC5B;IACJ;AACJ;AAEO,MAAMC,2BAA2BC,8BAA8B,oBAAoB,CAAC;IACvF,gBAAgBf;IAChB,cAAc;QAACgB;QAAyBC;KAAyB;AACrE"}

package/features/hooks/BlockFolderChangeWhileInReview.d.ts

@@ -0,0 +1,21 @@
+import { EntryBeforeUpdateEventHandler } from "@webiny/api-headless-cms/features/contentEntry/UpdateEntry/index.js";
+import { ReviewTargetFolderChangeGuard } from "@webiny/api-workflows/features/review/ReviewTargetFolderChangeGuard/index.js";
+import { CmsEntryReviewNamespace } from "../../features/target/CmsEntryReviewNamespace/index.js";
+/**
+ * Move rule of the `cms.*` adapter applied to updates (D84, R55, A24). An update can relocate the
+ * entry (`UpdateEntryDataFactory` sets `location` from `wbyAco_location`) without publishing
+ * `EntryBeforeMove`, and the save block only checks the updated revision. So when an update changes
+ * the folder of an entry of a bound model with a review namespace (R51), any in-progress review of
+ * the entry (any revision) refuses it like a move. Updates that keep the folder are left to the save block. The
+ * rule itself is `ReviewTargetFolderChangeGuard`, shared with the Website Builder page handler.
+ */
+declare class BlockFolderChangeWhileInReviewImpl implements EntryBeforeUpdateEventHandler.Interface {
+    private namespaces;
+    private folderChangeGuard;
+    constructor(namespaces: CmsEntryReviewNamespace.Interface[], folderChangeGuard: ReviewTargetFolderChangeGuard.Interface);
+    handle(event: EntryBeforeUpdateEventHandler.Event): Promise<void>;
+}
+export declare const BlockFolderChangeWhileInReview: typeof BlockFolderChangeWhileInReviewImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/eventPublisher").IEventHandler<import("@webiny/api-headless-cms/features/contentEntry/UpdateEntry/events").EntryBeforeUpdateEvent>>;
+};
+export {};

package/features/hooks/BlockFolderChangeWhileInReview.js

@@ -0,0 +1,44 @@
+import { EntryBeforeUpdateEventHandler } from "@webiny/api-headless-cms/features/contentEntry/UpdateEntry/index.js";
+import { ReviewTargetFolderChangeGuard } from "@webiny/api-workflows/features/review/ReviewTargetFolderChangeGuard/index.js";
+import { CmsEntryReviewNamespace } from "../target/CmsEntryReviewNamespace/index.js";
+class BlockFolderChangeWhileInReviewImpl {
+    constructor(namespaces, folderChangeGuard){
+        this.namespaces = namespaces;
+        this.folderChangeGuard = folderChangeGuard;
+    }
+    async handle(event) {
+        const { model, entry, original } = event.payload;
+        if (entry.location?.folderId === original.location?.folderId) return;
+        let namespace = null;
+        for (const candidate of [
+            ...this.namespaces
+        ].reverse()){
+            const resolved = candidate.resolve(model);
+            if (resolved) {
+                namespace = resolved;
+                break;
+            }
+        }
+        if (!namespace) return;
+        const checked = await this.folderChangeGuard.check({
+            model: namespace,
+            targetId: original.entryId
+        });
+        if (checked.isFail()) throw checked.error;
+    }
+}
+const BlockFolderChangeWhileInReview = EntryBeforeUpdateEventHandler.createImplementation({
+    implementation: BlockFolderChangeWhileInReviewImpl,
+    dependencies: [
+        [
+            CmsEntryReviewNamespace,
+            {
+                multiple: true
+            }
+        ],
+        ReviewTargetFolderChangeGuard
+    ]
+});
+export { BlockFolderChangeWhileInReview };
+
+//# sourceMappingURL=BlockFolderChangeWhileInReview.js.map

package/features/hooks/BlockFolderChangeWhileInReview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/hooks/BlockFolderChangeWhileInReview.js","sources":["../../../src/features/hooks/BlockFolderChangeWhileInReview.ts"],"sourcesContent":["import { EntryBeforeUpdateEventHandler } from \"@webiny/api-headless-cms/features/contentEntry/UpdateEntry/index.js\";\nimport { ReviewTargetFolderChangeGuard } from \"@webiny/api-workflows/features/review/ReviewTargetFolderChangeGuard/index.js\";\nimport { CmsEntryReviewNamespace } from \"~/features/target/CmsEntryReviewNamespace/index.js\";\n\n/**\n * Move rule of the `cms.*` adapter applied to updates (D84, R55, A24). An update can relocate the\n * entry (`UpdateEntryDataFactory` sets `location` from `wbyAco_location`) without publishing\n * `EntryBeforeMove`, and the save block only checks the updated revision. So when an update changes\n * the folder of an entry of a bound model with a review namespace (R51), any in-progress review of\n * the entry (any revision) refuses it like a move. Updates that keep the folder are left to the save block. The\n * rule itself is `ReviewTargetFolderChangeGuard`, shared with the Website Builder page handler.\n */\nclass BlockFolderChangeWhileInReviewImpl implements EntryBeforeUpdateEventHandler.Interface {\n    public constructor(\n        private namespaces: CmsEntryReviewNamespace.Interface[],\n        private folderChangeGuard: ReviewTargetFolderChangeGuard.Interface\n    ) {}\n\n    public async handle(event: EntryBeforeUpdateEventHandler.Event): Promise<void> {\n        const { model, entry, original } = event.payload;\n        if (entry.location?.folderId === original.location?.folderId) {\n            return;\n        }\n        // The last registered non-null namespace for the model wins (R51).\n        let namespace: string | null = null;\n        for (const candidate of [...this.namespaces].reverse()) {\n            const resolved = candidate.resolve(model);\n            if (resolved) {\n                namespace = resolved;\n                break;\n            }\n        }\n        if (!namespace) {\n            return;\n        }\n\n        const checked = await this.folderChangeGuard.check({\n            model: namespace,\n            targetId: original.entryId\n        });\n        if (checked.isFail()) {\n            throw checked.error;\n        }\n    }\n}\n\nexport const BlockFolderChangeWhileInReview = EntryBeforeUpdateEventHandler.createImplementation({\n    implementation: BlockFolderChangeWhileInReviewImpl,\n    dependencies: [[CmsEntryReviewNamespace, { multiple: true }], ReviewTargetFolderChangeGuard]\n});\n"],"names":["BlockFolderChangeWhileInReviewImpl","namespaces","folderChangeGuard","event","model","entry","original","namespace","candidate","resolved","checked","BlockFolderChangeWhileInReview","EntryBeforeUpdateEventHandler","CmsEntryReviewNamespace","ReviewTargetFolderChangeGuard"],"mappings":";;;AAYA,MAAMA;IACF,YACYC,UAA+C,EAC/CC,iBAA0D,CACpE;aAFUD,UAAU,GAAVA;aACAC,iBAAiB,GAAjBA;IACT;IAEH,MAAa,OAAOC,KAA0C,EAAiB;QAC3E,MAAM,EAAEC,KAAK,EAAEC,KAAK,EAAEC,QAAQ,EAAE,GAAGH,MAAM,OAAO;QAChD,IAAIE,MAAM,QAAQ,EAAE,aAAaC,SAAS,QAAQ,EAAE,UAChD;QAGJ,IAAIC,YAA2B;QAC/B,KAAK,MAAMC,aAAa;eAAI,IAAI,CAAC,UAAU;SAAC,CAAC,OAAO,GAAI;YACpD,MAAMC,WAAWD,UAAU,OAAO,CAACJ;YACnC,IAAIK,UAAU;gBACVF,YAAYE;gBACZ;YACJ;QACJ;QACA,IAAI,CAACF,WACD;QAGJ,MAAMG,UAAU,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAC/C,OAAOH;YACP,UAAUD,SAAS,OAAO;QAC9B;QACA,IAAII,QAAQ,MAAM,IACd,MAAMA,QAAQ,KAAK;IAE3B;AACJ;AAEO,MAAMC,iCAAiCC,8BAA8B,oBAAoB,CAAC;IAC7F,gBAAgBZ;IAChB,cAAc;QAAC;YAACa;YAAyB;gBAAE,UAAU;YAAK;SAAE;QAAEC;KAA8B;AAChG"}