@webiny/api-headless-cms-workflows 0.0.0-unstable.c27f4d8a31 → 0.0.0-unstable.d0f34a8194

package/features/target/CmsEntryReviewNamespace/abstractions.d.ts

@@ -0,0 +1,17 @@
+import type { CmsModel } from "@webiny/api-headless-cms/types/index.js";
+export interface ICmsEntryReviewNamespace {
+    /**
+     * The review namespace of this model's entries (e.g. "cms.article", "wb.page"), or `null`
+     * when this implementation does not own the model.
+     */
+    resolve(model: CmsModel): string | null;
+}
+/**
+ * Maps a CMS model to the review namespace of its entries, for the single CMS entry handlers that
+ * also cover apps built on CMS entries (D59, R51). Resolved `multiple`; the last registered
+ * non-null answer wins. A model with no namespace is skipped by every handler.
+ */
+export declare const CmsEntryReviewNamespace: import("@webiny/di").Abstraction<ICmsEntryReviewNamespace>;
+export declare namespace CmsEntryReviewNamespace {
+    type Interface = ICmsEntryReviewNamespace;
+}

package/features/target/CmsEntryReviewNamespace/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const CmsEntryReviewNamespace = createAbstraction("CmsEntryReviewNamespace");
+export { CmsEntryReviewNamespace };
+
+//# sourceMappingURL=abstractions.js.map

package/features/target/CmsEntryReviewNamespace/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/target/CmsEntryReviewNamespace/abstractions.js","sources":["../../../../src/features/target/CmsEntryReviewNamespace/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\n\nexport interface ICmsEntryReviewNamespace {\n    /**\n     * The review namespace of this model's entries (e.g. \"cms.article\", \"wb.page\"), or `null`\n     * when this implementation does not own the model.\n     */\n    resolve(model: CmsModel): string | null;\n}\n\n/**\n * Maps a CMS model to the review namespace of its entries, for the single CMS entry handlers that\n * also cover apps built on CMS entries (D59, R51). Resolved `multiple`; the last registered\n * non-null answer wins. A model with no namespace is skipped by every handler.\n */\nexport const CmsEntryReviewNamespace =\n    createAbstraction<ICmsEntryReviewNamespace>(\"CmsEntryReviewNamespace\");\n\nexport namespace CmsEntryReviewNamespace {\n    export type Interface = ICmsEntryReviewNamespace;\n}\n"],"names":["CmsEntryReviewNamespace","createAbstraction"],"mappings":";AAgBO,MAAMA,0BACTC,kBAA4C"}

package/features/target/CmsEntryReviewNamespace/index.d.ts

@@ -0,0 +1 @@
+export { CmsEntryReviewNamespace } from "./abstractions.js";

package/features/target/CmsEntryReviewNamespace/index.js

@@ -0,0 +1 @@
+export { CmsEntryReviewNamespace } from "./abstractions.js";

package/features/target/CmsEntryReviewReadFilter/CmsEntryReviewReadFilter.d.ts

@@ -0,0 +1,20 @@
+import type { CmsModel } from "@webiny/api-headless-cms/types/index.js";
+import { AccessControl } from "@webiny/api-headless-cms/features/shared/abstractions.js";
+import { ListGroupsUseCase } from "@webiny/api-headless-cms/features/contentModelGroup/ListGroups/index.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
+import { ListReviewedModelsUseCase } from "@webiny/api-workflows/features/review/ListReviewedModels/index.js";
+import { CmsEntryDeniedFolders } from "../CmsEntryDeniedFolders/index.js";
+import { CmsEntryReviewReadFilter as Abstraction } from "./abstractions.js";
+declare class CmsEntryReviewReadFilterImpl implements Abstraction.Interface {
+    private accessControl;
+    private listGroups;
+    private identityContext;
+    private deniedFolders;
+    private listReviewedModels;
+    constructor(accessControl: AccessControl.Interface, listGroups: ListGroupsUseCase.Interface, identityContext: IdentityContext.Interface, deniedFolders: CmsEntryDeniedFolders.Interface, listReviewedModels: ListReviewedModelsUseCase.Interface);
+    build(models: CmsModel[]): Abstraction.Return;
+}
+export declare const CmsEntryReviewReadFilter: typeof CmsEntryReviewReadFilterImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").ICmsEntryReviewReadFilter>;
+};
+export {};

package/features/target/CmsEntryReviewReadFilter/CmsEntryReviewReadFilter.js

@@ -0,0 +1,80 @@
+import { Result } from "@webiny/feature/api";
+import { AccessControl } from "@webiny/api-headless-cms/features/shared/abstractions.js";
+import { ListGroupsUseCase } from "@webiny/api-headless-cms/features/contentModelGroup/ListGroups/index.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
+import { ReviewPersistenceError } from "@webiny/api-workflows/domain/review/errors.js";
+import { ListReviewedModelsUseCase } from "@webiny/api-workflows/features/review/ListReviewedModels/index.js";
+import { toCmsNamespace } from "../../../utils/appName.js";
+import { UNREADABLE_CODES } from "../CmsEntryAccess/index.js";
+import { CmsEntryDeniedFolders } from "../CmsEntryDeniedFolders/index.js";
+import { CmsEntryReviewReadFilter } from "./abstractions.js";
+class CmsEntryReviewReadFilterImpl {
+    constructor(accessControl, listGroups, identityContext, deniedFolders, listReviewedModels){
+        this.accessControl = accessControl;
+        this.listGroups = listGroups;
+        this.identityContext = identityContext;
+        this.deniedFolders = deniedFolders;
+        this.listReviewedModels = listReviewedModels;
+    }
+    async build(models) {
+        const identity = this.identityContext.getIdentity();
+        const filter = {
+            models: [],
+            ownOnlyModels: [],
+            authorId: identity.id,
+            deniedFolderIds: []
+        };
+        if (0 === models.length) return Result.ok(filter);
+        const groups = await this.listGroups.execute();
+        let readableGroups = [];
+        if (groups.isOk()) readableGroups = groups.value;
+        else if (!UNREADABLE_CODES.includes(groups.error.code)) return Result.fail(new ReviewPersistenceError(groups.error));
+        const readable = [];
+        for (const model of models){
+            const group = readableGroups.find((item)=>item.slug === model.group);
+            if (!group || !await this.accessControl.canAccessGroup({
+                group
+            })) continue;
+            if (!await this.accessControl.canAccessModel({
+                model
+            })) continue;
+            if (!await this.accessControl.canAccessEntry({
+                model,
+                rwd: "r"
+            })) continue;
+            const namespace = toCmsNamespace(model.modelId);
+            if (await this.accessControl.canAccessOnlyOwnedEntries({
+                model
+            })) filter.ownOnlyModels.push(namespace);
+            else filter.models.push(namespace);
+            readable.push(model);
+        }
+        if (0 === readable.length) return Result.ok(filter);
+        const reviewedModels = await this.listReviewedModels.execute();
+        if (reviewedModels.isFail()) return Result.fail(reviewedModels.error);
+        const reviewedModelIds = readable.filter((model)=>{
+            const namespace = toCmsNamespace(model.modelId);
+            return reviewedModels.value.includes(namespace);
+        }).map((model)=>model.modelId);
+        if (0 === reviewedModelIds.length) return Result.ok(filter);
+        try {
+            filter.deniedFolderIds = await this.deniedFolders.listDeniedFolderIds(reviewedModelIds);
+        } catch (error) {
+            return Result.fail(new ReviewPersistenceError(error instanceof Error ? error : new Error(String(error))));
+        }
+        return Result.ok(filter);
+    }
+}
+const CmsEntryReviewReadFilter_CmsEntryReviewReadFilter = CmsEntryReviewReadFilter.createImplementation({
+    implementation: CmsEntryReviewReadFilterImpl,
+    dependencies: [
+        AccessControl,
+        ListGroupsUseCase,
+        IdentityContext,
+        CmsEntryDeniedFolders,
+        ListReviewedModelsUseCase
+    ]
+});
+export { CmsEntryReviewReadFilter_CmsEntryReviewReadFilter as CmsEntryReviewReadFilter };
+
+//# sourceMappingURL=CmsEntryReviewReadFilter.js.map

package/features/target/CmsEntryReviewReadFilter/CmsEntryReviewReadFilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/target/CmsEntryReviewReadFilter/CmsEntryReviewReadFilter.js","sources":["../../../../src/features/target/CmsEntryReviewReadFilter/CmsEntryReviewReadFilter.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport type { CmsGroup, CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\nimport { AccessControl } from \"@webiny/api-headless-cms/features/shared/abstractions.js\";\nimport { ListGroupsUseCase } from \"@webiny/api-headless-cms/features/contentModelGroup/ListGroups/index.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\nimport type { ReviewListReadFilter } from \"@webiny/api-workflows/domain/review/types.js\";\nimport { ReviewPersistenceError } from \"@webiny/api-workflows/domain/review/errors.js\";\nimport { ListReviewedModelsUseCase } from \"@webiny/api-workflows/features/review/ListReviewedModels/index.js\";\nimport { toCmsNamespace } from \"~/utils/appName.js\";\nimport { UNREADABLE_CODES } from \"../CmsEntryAccess/index.js\";\nimport { CmsEntryDeniedFolders } from \"../CmsEntryDeniedFolders/index.js\";\nimport { CmsEntryReviewReadFilter as Abstraction } from \"./abstractions.js\";\n\nclass CmsEntryReviewReadFilterImpl implements Abstraction.Interface {\n    public constructor(\n        private accessControl: AccessControl.Interface,\n        private listGroups: ListGroupsUseCase.Interface,\n        private identityContext: IdentityContext.Interface,\n        private deniedFolders: CmsEntryDeniedFolders.Interface,\n        private listReviewedModels: ListReviewedModelsUseCase.Interface\n    ) {}\n\n    public async build(models: CmsModel[]): Abstraction.Return {\n        const identity = this.identityContext.getIdentity();\n        const filter: ReviewListReadFilter = {\n            models: [],\n            ownOnlyModels: [],\n            authorId: identity.id,\n            deniedFolderIds: []\n        };\n        if (models.length === 0) {\n            return Result.ok(filter);\n        }\n\n        // The groups the identity can read, once; a model is found in it by its group's slug, as\n        // `CmsModelGroupService` does. No group read at all leaves every model unreadable.\n        const groups = await this.listGroups.execute();\n        let readableGroups: CmsGroup[] = [];\n        if (groups.isOk()) {\n            readableGroups = groups.value;\n        } else if (!UNREADABLE_CODES.includes(groups.error.code)) {\n            return Result.fail(new ReviewPersistenceError(groups.error));\n        }\n\n        const readable: CmsModel[] = [];\n        for (const model of models) {\n            // In memory: the access control loads the identity's permissions once per request.\n            const group = readableGroups.find(item => item.slug === model.group);\n            // oxlint-disable-next-line no-await-in-loop -- in memory: the access control loads the permissions once per request.\n            if (!group || !(await this.accessControl.canAccessGroup({ group }))) {\n                continue;\n            }\n            // oxlint-disable-next-line no-await-in-loop -- in memory: the access control loads the permissions once per request.\n            if (!(await this.accessControl.canAccessModel({ model }))) {\n                continue;\n            }\n            // oxlint-disable-next-line no-await-in-loop -- in memory: the access control loads the permissions once per request.\n            if (!(await this.accessControl.canAccessEntry({ model, rwd: \"r\" }))) {\n                continue;\n            }\n            const namespace = toCmsNamespace(model.modelId);\n            // oxlint-disable-next-line no-await-in-loop -- in memory: the access control loads the permissions once per request.\n            if (await this.accessControl.canAccessOnlyOwnedEntries({ model })) {\n                filter.ownOnlyModels.push(namespace);\n            } else {\n                filter.models.push(namespace);\n            }\n            readable.push(model);\n        }\n        if (readable.length === 0) {\n            return Result.ok(filter);\n        }\n\n        // Folder rules only for the readable models with active reviews: no row of another\n        // model can match the filter, so its folders need no read (one query for the namespaces).\n        const reviewedModels = await this.listReviewedModels.execute();\n        if (reviewedModels.isFail()) {\n            return Result.fail(reviewedModels.error);\n        }\n        const reviewedModelIds = readable\n            .filter(model => {\n                const namespace = toCmsNamespace(model.modelId);\n                return reviewedModels.value.includes(namespace);\n            })\n            .map(model => model.modelId);\n        if (reviewedModelIds.length === 0) {\n            return Result.ok(filter);\n        }\n\n        try {\n            filter.deniedFolderIds = await this.deniedFolders.listDeniedFolderIds(reviewedModelIds);\n        } catch (error) {\n            return Result.fail(\n                new ReviewPersistenceError(\n                    error instanceof Error ? error : new Error(String(error))\n                )\n            );\n        }\n        return Result.ok(filter);\n    }\n}\n\nexport const CmsEntryReviewReadFilter = Abstraction.createImplementation({\n    implementation: CmsEntryReviewReadFilterImpl,\n    dependencies: [\n        AccessControl,\n        ListGroupsUseCase,\n        IdentityContext,\n        CmsEntryDeniedFolders,\n        ListReviewedModelsUseCase\n    ]\n});\n"],"names":["CmsEntryReviewReadFilterImpl","accessControl","listGroups","identityContext","deniedFolders","listReviewedModels","models","identity","filter","Result","groups","readableGroups","UNREADABLE_CODES","ReviewPersistenceError","readable","model","group","item","namespace","toCmsNamespace","reviewedModels","reviewedModelIds","error","Error","String","CmsEntryReviewReadFilter","Abstraction","AccessControl","ListGroupsUseCase","IdentityContext","CmsEntryDeniedFolders","ListReviewedModelsUseCase"],"mappings":";;;;;;;;;;AAaA,MAAMA;IACF,YACYC,aAAsC,EACtCC,UAAuC,EACvCC,eAA0C,EAC1CC,aAA8C,EAC9CC,kBAAuD,CACjE;aALUJ,aAAa,GAAbA;aACAC,UAAU,GAAVA;aACAC,eAAe,GAAfA;aACAC,aAAa,GAAbA;aACAC,kBAAkB,GAAlBA;IACT;IAEH,MAAa,MAAMC,MAAkB,EAAsB;QACvD,MAAMC,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QACjD,MAAMC,SAA+B;YACjC,QAAQ,EAAE;YACV,eAAe,EAAE;YACjB,UAAUD,SAAS,EAAE;YACrB,iBAAiB,EAAE;QACvB;QACA,IAAID,AAAkB,MAAlBA,OAAO,MAAM,EACb,OAAOG,OAAO,EAAE,CAACD;QAKrB,MAAME,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO;QAC5C,IAAIC,iBAA6B,EAAE;QACnC,IAAID,OAAO,IAAI,IACXC,iBAAiBD,OAAO,KAAK;aAC1B,IAAI,CAACE,iBAAiB,QAAQ,CAACF,OAAO,KAAK,CAAC,IAAI,GACnD,OAAOD,OAAO,IAAI,CAAC,IAAII,uBAAuBH,OAAO,KAAK;QAG9D,MAAMI,WAAuB,EAAE;QAC/B,KAAK,MAAMC,SAAST,OAAQ;YAExB,MAAMU,QAAQL,eAAe,IAAI,CAACM,CAAAA,OAAQA,KAAK,IAAI,KAAKF,MAAM,KAAK;YAEnE,IAAI,CAACC,SAAS,CAAE,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;gBAAEA;YAAM,IAC5D;YAGJ,IAAI,CAAE,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;gBAAED;YAAM,IAClD;YAGJ,IAAI,CAAE,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;gBAAEA;gBAAO,KAAK;YAAI,IAC5D;YAEJ,MAAMG,YAAYC,eAAeJ,MAAM,OAAO;YAE9C,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,yBAAyB,CAAC;gBAAEA;YAAM,IAC3DP,OAAO,aAAa,CAAC,IAAI,CAACU;iBAE1BV,OAAO,MAAM,CAAC,IAAI,CAACU;YAEvBJ,SAAS,IAAI,CAACC;QAClB;QACA,IAAID,AAAoB,MAApBA,SAAS,MAAM,EACf,OAAOL,OAAO,EAAE,CAACD;QAKrB,MAAMY,iBAAiB,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO;QAC5D,IAAIA,eAAe,MAAM,IACrB,OAAOX,OAAO,IAAI,CAACW,eAAe,KAAK;QAE3C,MAAMC,mBAAmBP,SACpB,MAAM,CAACC,CAAAA;YACJ,MAAMG,YAAYC,eAAeJ,MAAM,OAAO;YAC9C,OAAOK,eAAe,KAAK,CAAC,QAAQ,CAACF;QACzC,GACC,GAAG,CAACH,CAAAA,QAASA,MAAM,OAAO;QAC/B,IAAIM,AAA4B,MAA5BA,iBAAiB,MAAM,EACvB,OAAOZ,OAAO,EAAE,CAACD;QAGrB,IAAI;YACAA,OAAO,eAAe,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAACa;QAC1E,EAAE,OAAOC,OAAO;YACZ,OAAOb,OAAO,IAAI,CACd,IAAII,uBACAS,iBAAiBC,QAAQD,QAAQ,IAAIC,MAAMC,OAAOF;QAG9D;QACA,OAAOb,OAAO,EAAE,CAACD;IACrB;AACJ;AAEO,MAAMiB,oDAA2BC,yBAAAA,oBAAgC,CAAC;IACrE,gBAAgB1B;IAChB,cAAc;QACV2B;QACAC;QACAC;QACAC;QACAC;KACH;AACL"}

package/features/target/CmsEntryReviewReadFilter/abstractions.d.ts

@@ -0,0 +1,24 @@
+import { type Result } from "@webiny/feature/api";
+import type { CmsModel } from "@webiny/api-headless-cms/types/index.js";
+import type { ReviewListReadFilter } from "@webiny/api-workflows/domain/review/types.js";
+import type { ReviewPersistenceError } from "@webiny/api-workflows/domain/review/errors.js";
+export interface ICmsEntryReviewReadFilter {
+    /**
+     * The review list read filter (Q77) of the current identity over these models. A failed group
+     * or folder permission read is a persistence error (R87).
+     */
+    build(models: CmsModel[]): Promise<Result<ReviewListReadFilter, ReviewPersistenceError>>;
+}
+/**
+ * What the CMS entry list would show the current identity, as a review list filter: a model is
+ * readable with group read, model read and entry read (`CmsEntryAccess`); an own-only entry
+ * permission makes it own-only, as `ListEntriesUseCase` filters by `createdBy`; folders come from
+ * `CmsEntryDeniedFolders`, only for readable models with active reviews
+ * (`ListReviewedModelsUseCase`). Evaluated once per call, in memory over the cached
+ * permissions.
+ */
+export declare const CmsEntryReviewReadFilter: import("@webiny/di").Abstraction<ICmsEntryReviewReadFilter>;
+export declare namespace CmsEntryReviewReadFilter {
+    type Interface = ICmsEntryReviewReadFilter;
+    type Return = Promise<Result<ReviewListReadFilter, ReviewPersistenceError>>;
+}

package/features/target/CmsEntryReviewReadFilter/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const CmsEntryReviewReadFilter = createAbstraction("CmsEntryReviewReadFilter");
+export { CmsEntryReviewReadFilter };
+
+//# sourceMappingURL=abstractions.js.map

package/features/target/CmsEntryReviewReadFilter/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/target/CmsEntryReviewReadFilter/abstractions.js","sources":["../../../../src/features/target/CmsEntryReviewReadFilter/abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\nimport type { ReviewListReadFilter } from \"@webiny/api-workflows/domain/review/types.js\";\nimport type { ReviewPersistenceError } from \"@webiny/api-workflows/domain/review/errors.js\";\n\nexport interface ICmsEntryReviewReadFilter {\n    /**\n     * The review list read filter (Q77) of the current identity over these models. A failed group\n     * or folder permission read is a persistence error (R87).\n     */\n    build(models: CmsModel[]): Promise<Result<ReviewListReadFilter, ReviewPersistenceError>>;\n}\n\n/**\n * What the CMS entry list would show the current identity, as a review list filter: a model is\n * readable with group read, model read and entry read (`CmsEntryAccess`); an own-only entry\n * permission makes it own-only, as `ListEntriesUseCase` filters by `createdBy`; folders come from\n * `CmsEntryDeniedFolders`, only for readable models with active reviews\n * (`ListReviewedModelsUseCase`). Evaluated once per call, in memory over the cached\n * permissions.\n */\nexport const CmsEntryReviewReadFilter = createAbstraction<ICmsEntryReviewReadFilter>(\n    \"CmsEntryReviewReadFilter\"\n);\n\nexport namespace CmsEntryReviewReadFilter {\n    export type Interface = ICmsEntryReviewReadFilter;\n    export type Return = Promise<Result<ReviewListReadFilter, ReviewPersistenceError>>;\n}\n"],"names":["CmsEntryReviewReadFilter","createAbstraction"],"mappings":";AAqBO,MAAMA,2BAA2BC,kBACpC"}

package/features/target/CmsEntryReviewReadFilter/index.d.ts

@@ -0,0 +1 @@
+export { CmsEntryReviewReadFilter } from "./abstractions.js";

package/features/target/CmsEntryReviewReadFilter/index.js

@@ -0,0 +1 @@
+export { CmsEntryReviewReadFilter } from "./abstractions.js";

package/features/target/CmsEntryReviewTargetEditor.d.ts

@@ -0,0 +1,28 @@
+import { Result } from "@webiny/feature/api";
+import { Logger } from "@webiny/api-core/features/logger/index.js";
+import { UpdateEntryUseCase } from "@webiny/api-headless-cms/features/contentEntry/UpdateEntry/index.js";
+import { ReviewTargetEditor } from "@webiny/api-workflows/features/review/ReviewTargetEditor/index.js";
+import type { ReviewTargetContent, ReviewTargetEditorReadParams, ReviewTargetEditorUpdateParams, ReviewTargetEditorUpdateResult } from "@webiny/api-workflows/features/review/ReviewTargetEditor/abstractions.js";
+import { ReviewTargetEditorError } from "@webiny/api-workflows/domain/review/errors.js";
+import { CmsEntryTargetReader } from "./CmsEntryTargetReader/index.js";
+/**
+ * The `cms.<modelId>` editor of the AI step's built-in tools (spec 9.3, R172). `read` returns the
+ * whole revision; `update` writes top-level and nested object fields of the five writable types by
+ * dotted path, atomically, through the CMS entry update (so field validators run). The model and
+ * group are read as the request identity through `CmsEntryTargetReader`. The save-block
+ * bypass is the tool's business (R173): this class neither reads nor sets it. Throws become failed
+ * Results with a text safe to show the model (R87).
+ */
+declare class CmsEntryReviewTargetEditorImpl implements ReviewTargetEditor.Interface {
+    private targets;
+    private updateEntry;
+    private logger;
+    constructor(targets: CmsEntryTargetReader.Interface, updateEntry: UpdateEntryUseCase.Interface, logger: Logger.Interface);
+    canEdit(model: string): boolean;
+    read(params: ReviewTargetEditorReadParams): Promise<Result<ReviewTargetContent, ReviewTargetEditorError>>;
+    update(params: ReviewTargetEditorUpdateParams): Promise<Result<ReviewTargetEditorUpdateResult, ReviewTargetEditorError>>;
+}
+export declare const CmsEntryReviewTargetEditor: typeof CmsEntryReviewTargetEditorImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-workflows/features/review/ReviewTargetEditor/abstractions.js").IReviewTargetEditor>;
+};
+export {};

package/features/target/CmsEntryReviewTargetEditor.js

@@ -0,0 +1,128 @@
+import { Result } from "@webiny/feature/api";
+import { Logger } from "@webiny/api-core/features/logger/index.js";
+import { getEntryTitle } from "@webiny/api-headless-cms/utils/getEntryTitle.js";
+import { UpdateEntryUseCase } from "@webiny/api-headless-cms/features/contentEntry/UpdateEntry/index.js";
+import { ReviewTargetEditor } from "@webiny/api-workflows/features/review/ReviewTargetEditor/index.js";
+import { ReviewTargetEditorError } from "@webiny/api-workflows/domain/review/errors.js";
+import { isCmsNamespace } from "../../utils/appName.js";
+import { CmsEntryTargetReader } from "./CmsEntryTargetReader/index.js";
+import { toEditorFields } from "./toEditorFields.js";
+import { describeEditorFieldValue, isEditorFieldValue } from "./isEditorFieldValue.js";
+import { toEntryValuesPatch } from "./toEntryValuesPatch.js";
+import { GENERIC_VALIDATION_MESSAGE, getModelSafeValidationMessage } from "./getModelSafeValidationMessage.js";
+import { hasErrorSource } from "@webiny/api-workflows/domain/hasErrorSource.js";
+class CmsEntryReviewTargetEditorImpl {
+    constructor(targets, updateEntry, logger){
+        this.targets = targets;
+        this.updateEntry = updateEntry;
+        this.logger = logger;
+    }
+    canEdit(model) {
+        return isCmsNamespace(model);
+    }
+    async read(params) {
+        try {
+            const target = await this.targets.read({
+                model: params.model,
+                targetRevisionId: params.targetRevisionId
+            });
+            if (!target || target.entry.entryId !== params.targetId) return Result.fail(new ReviewTargetEditorError("The target was not found."));
+            return Result.ok({
+                title: getEntryTitle(target.model, target.entry),
+                fields: toEditorFields(target.model, target.entry.values)
+            });
+        } catch (error) {
+            this.logger.error({
+                err: error,
+                model: params.model,
+                targetId: params.targetId
+            }, "Could not read the target for the AI editor.");
+            return Result.fail(new ReviewTargetEditorError("The target could not be read."));
+        }
+    }
+    async update(params) {
+        const paths = Object.keys(params.values);
+        if (0 === paths.length) return Result.fail(new ReviewTargetEditorError("No fields were given."));
+        let target;
+        let patch;
+        try {
+            const read = await this.targets.read({
+                model: params.model,
+                targetRevisionId: params.targetRevisionId
+            });
+            if (!read || read.entry.entryId !== params.targetId) return Result.fail(new ReviewTargetEditorError("The target was not found."));
+            target = read;
+            const fields = new Map();
+            for (const field of toEditorFields(target.model, target.entry.values))fields.set(field.path, field);
+            const problems = [];
+            for (const path of paths){
+                const field = fields.get(path);
+                if (field) if (field.writable) {
+                    if (!isEditorFieldValue(field.type, params.values[path])) problems.push(`The field "${path}" expects ${describeEditorFieldValue(field.type)}.`);
+                } else problems.push(`The field "${path}" is read-only.`);
+                else problems.push(`Unknown field "${path}". Use the paths returned by readTarget.`);
+            }
+            if (problems.length > 0) return Result.fail(new ReviewTargetEditorError(problems.join(" ")));
+            patch = toEntryValuesPatch(target.entry.values, params.values);
+        } catch (error) {
+            this.logger.error({
+                err: error,
+                model: params.model,
+                targetId: params.targetId
+            }, "Could not read the target for the AI editor.");
+            return Result.fail(new ReviewTargetEditorError("The target could not be read."));
+        }
+        try {
+            const result = await this.updateEntry.execute(target.model, params.targetRevisionId, {
+                values: patch
+            });
+            if (result.isFail()) {
+                if ("Cms/Entry/ValidationError" === result.error.code) {
+                    const invalid = [];
+                    for (const item of result.error.data ?? []){
+                        const itemPath = [
+                            ...item.parents,
+                            item.fieldId
+                        ];
+                        const safe = getModelSafeValidationMessage(target.model, itemPath, item.error);
+                        if (null === safe) this.logger.error({
+                            err: hasErrorSource(item.error) ? item.error.source : item.error,
+                            model: params.model,
+                            targetId: params.targetId,
+                            path: itemPath.join(".")
+                        }, "A field validator failed while the AI editor updated the target.");
+                        invalid.push(`${itemPath.join(".")}: ${safe ?? GENERIC_VALIDATION_MESSAGE}`);
+                    }
+                    return Result.fail(new ReviewTargetEditorError(invalid.length > 0 ? `Validation failed: ${invalid.join(" ")}` : "Validation failed."));
+                }
+                this.logger.error({
+                    err: hasErrorSource(result.error) ? result.error.source : result.error,
+                    model: params.model,
+                    targetId: params.targetId
+                }, "Could not update the target from the AI editor.");
+                return Result.fail(new ReviewTargetEditorError("The target could not be updated."));
+            }
+        } catch (error) {
+            this.logger.error({
+                err: error,
+                model: params.model,
+                targetId: params.targetId
+            }, "Could not update the target from the AI editor.");
+            return Result.fail(new ReviewTargetEditorError("The target could not be updated."));
+        }
+        return Result.ok({
+            applied: paths
+        });
+    }
+}
+const CmsEntryReviewTargetEditor = ReviewTargetEditor.createImplementation({
+    implementation: CmsEntryReviewTargetEditorImpl,
+    dependencies: [
+        CmsEntryTargetReader,
+        UpdateEntryUseCase,
+        Logger
+    ]
+});
+export { CmsEntryReviewTargetEditor };
+
+//# sourceMappingURL=CmsEntryReviewTargetEditor.js.map

package/features/target/CmsEntryReviewTargetEditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/target/CmsEntryReviewTargetEditor.js","sources":["../../../src/features/target/CmsEntryReviewTargetEditor.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { Logger } from \"@webiny/api-core/features/logger/index.js\";\nimport { getEntryTitle } from \"@webiny/api-headless-cms/utils/getEntryTitle.js\";\nimport { UpdateEntryUseCase } from \"@webiny/api-headless-cms/features/contentEntry/UpdateEntry/index.js\";\nimport { ReviewTargetEditor } from \"@webiny/api-workflows/features/review/ReviewTargetEditor/index.js\";\nimport type {\n    ReviewTargetContent,\n    ReviewTargetEditorField,\n    ReviewTargetEditorReadParams,\n    ReviewTargetEditorUpdateParams,\n    ReviewTargetEditorUpdateResult\n} from \"@webiny/api-workflows/features/review/ReviewTargetEditor/abstractions.js\";\nimport { ReviewTargetEditorError } from \"@webiny/api-workflows/domain/review/errors.js\";\nimport { isCmsNamespace } from \"~/utils/appName.js\";\nimport { CmsEntryTargetReader } from \"./CmsEntryTargetReader/index.js\";\nimport { toEditorFields } from \"./toEditorFields.js\";\nimport { describeEditorFieldValue, isEditorFieldValue } from \"./isEditorFieldValue.js\";\nimport { toEntryValuesPatch } from \"./toEntryValuesPatch.js\";\nimport {\n    GENERIC_VALIDATION_MESSAGE,\n    getModelSafeValidationMessage\n} from \"./getModelSafeValidationMessage.js\";\nimport { hasErrorSource } from \"@webiny/api-workflows/domain/hasErrorSource.js\";\n\n/**\n * The `cms.<modelId>` editor of the AI step's built-in tools (spec 9.3, R172). `read` returns the\n * whole revision; `update` writes top-level and nested object fields of the five writable types by\n * dotted path, atomically, through the CMS entry update (so field validators run). The model and\n * group are read as the request identity through `CmsEntryTargetReader`. The save-block\n * bypass is the tool's business (R173): this class neither reads nor sets it. Throws become failed\n * Results with a text safe to show the model (R87).\n */\nclass CmsEntryReviewTargetEditorImpl implements ReviewTargetEditor.Interface {\n    public constructor(\n        private targets: CmsEntryTargetReader.Interface,\n        private updateEntry: UpdateEntryUseCase.Interface,\n        private logger: Logger.Interface\n    ) {}\n\n    public canEdit(model: string): boolean {\n        return isCmsNamespace(model);\n    }\n\n    public async read(\n        params: ReviewTargetEditorReadParams\n    ): Promise<Result<ReviewTargetContent, ReviewTargetEditorError>> {\n        try {\n            const target = await this.targets.read({\n                model: params.model,\n                targetRevisionId: params.targetRevisionId\n            });\n            if (!target || target.entry.entryId !== params.targetId) {\n                return Result.fail(new ReviewTargetEditorError(\"The target was not found.\"));\n            }\n\n            // Inside the try: a malformed model makes these throw, and that must be a failed\n            // Result, never a rejection (R87).\n            return Result.ok({\n                title: getEntryTitle(target.model, target.entry),\n                fields: toEditorFields(target.model, target.entry.values)\n            });\n        } catch (error) {\n            this.logger.error(\n                { err: error, model: params.model, targetId: params.targetId },\n                \"Could not read the target for the AI editor.\"\n            );\n            return Result.fail(new ReviewTargetEditorError(\"The target could not be read.\"));\n        }\n    }\n\n    public async update(\n        params: ReviewTargetEditorUpdateParams\n    ): Promise<Result<ReviewTargetEditorUpdateResult, ReviewTargetEditorError>> {\n        const paths = Object.keys(params.values);\n        if (paths.length === 0) {\n            return Result.fail(new ReviewTargetEditorError(\"No fields were given.\"));\n        }\n\n        let target: CmsEntryTargetReader.Target;\n        let patch: Record<string, unknown>;\n        try {\n            const read = await this.targets.read({\n                model: params.model,\n                targetRevisionId: params.targetRevisionId\n            });\n            if (!read || read.entry.entryId !== params.targetId) {\n                return Result.fail(new ReviewTargetEditorError(\"The target was not found.\"));\n            }\n            target = read;\n\n            // A Map, so a key such as \"__proto__\" is just an unknown path.\n            const fields = new Map<string, ReviewTargetEditorField>();\n            for (const field of toEditorFields(target.model, target.entry.values)) {\n                fields.set(field.path, field);\n            }\n            const problems: string[] = [];\n            for (const path of paths) {\n                const field = fields.get(path);\n                if (!field) {\n                    problems.push(`Unknown field \"${path}\". Use the paths returned by readTarget.`);\n                } else if (!field.writable) {\n                    problems.push(`The field \"${path}\" is read-only.`);\n                } else if (!isEditorFieldValue(field.type, params.values[path])) {\n                    problems.push(\n                        `The field \"${path}\" expects ${describeEditorFieldValue(field.type)}.`\n                    );\n                }\n            }\n            if (problems.length > 0) {\n                return Result.fail(new ReviewTargetEditorError(problems.join(\" \")));\n            }\n\n            patch = toEntryValuesPatch(target.entry.values, params.values);\n        } catch (error) {\n            this.logger.error(\n                { err: error, model: params.model, targetId: params.targetId },\n                \"Could not read the target for the AI editor.\"\n            );\n            return Result.fail(new ReviewTargetEditorError(\"The target could not be read.\"));\n        }\n\n        try {\n            const result = await this.updateEntry.execute(target.model, params.targetRevisionId, {\n                values: patch\n            });\n            if (result.isFail()) {\n                if (result.error.code === \"Cms/Entry/ValidationError\") {\n                    const invalid: string[] = [];\n                    for (const item of result.error.data ?? []) {\n                        const itemPath: string[] = [...item.parents, item.fieldId];\n                        const safe = getModelSafeValidationMessage(\n                            target.model,\n                            itemPath,\n                            item.error\n                        );\n                        if (safe === null) {\n                            // A validator that threw, or one nobody registered: raw text, never\n                            // shown to the model.\n                            this.logger.error(\n                                {\n                                    err: hasErrorSource(item.error)\n                                        ? item.error.source\n                                        : item.error,\n                                    model: params.model,\n                                    targetId: params.targetId,\n                                    path: itemPath.join(\".\")\n                                },\n                                \"A field validator failed while the AI editor updated the target.\"\n                            );\n                        }\n                        invalid.push(\n                            `${itemPath.join(\".\")}: ${safe ?? GENERIC_VALIDATION_MESSAGE}`\n                        );\n                    }\n                    return Result.fail(\n                        new ReviewTargetEditorError(\n                            invalid.length > 0\n                                ? `Validation failed: ${invalid.join(\" \")}`\n                                : \"Validation failed.\"\n                        )\n                    );\n                }\n                this.logger.error(\n                    {\n                        err: hasErrorSource(result.error) ? result.error.source : result.error,\n                        model: params.model,\n                        targetId: params.targetId\n                    },\n                    \"Could not update the target from the AI editor.\"\n                );\n                return Result.fail(new ReviewTargetEditorError(\"The target could not be updated.\"));\n            }\n        } catch (error) {\n            this.logger.error(\n                { err: error, model: params.model, targetId: params.targetId },\n                \"Could not update the target from the AI editor.\"\n            );\n            return Result.fail(new ReviewTargetEditorError(\"The target could not be updated.\"));\n        }\n\n        return Result.ok({ applied: paths });\n    }\n}\n\nexport const CmsEntryReviewTargetEditor = ReviewTargetEditor.createImplementation({\n    implementation: CmsEntryReviewTargetEditorImpl,\n    dependencies: [CmsEntryTargetReader, UpdateEntryUseCase, Logger]\n});\n"],"names":["CmsEntryReviewTargetEditorImpl","targets","updateEntry","logger","model","isCmsNamespace","params","target","Result","ReviewTargetEditorError","getEntryTitle","toEditorFields","error","paths","Object","patch","read","fields","Map","field","problems","path","isEditorFieldValue","describeEditorFieldValue","toEntryValuesPatch","result","invalid","item","itemPath","safe","getModelSafeValidationMessage","hasErrorSource","GENERIC_VALIDATION_MESSAGE","CmsEntryReviewTargetEditor","ReviewTargetEditor","CmsEntryTargetReader","UpdateEntryUseCase","Logger"],"mappings":";;;;;;;;;;;;;AAgCA,MAAMA;IACF,YACYC,OAAuC,EACvCC,WAAyC,EACzCC,MAAwB,CAClC;aAHUF,OAAO,GAAPA;aACAC,WAAW,GAAXA;aACAC,MAAM,GAANA;IACT;IAEI,QAAQC,KAAa,EAAW;QACnC,OAAOC,eAAeD;IAC1B;IAEA,MAAa,KACTE,MAAoC,EACyB;QAC7D,IAAI;YACA,MAAMC,SAAS,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBACnC,OAAOD,OAAO,KAAK;gBACnB,kBAAkBA,OAAO,gBAAgB;YAC7C;YACA,IAAI,CAACC,UAAUA,OAAO,KAAK,CAAC,OAAO,KAAKD,OAAO,QAAQ,EACnD,OAAOE,OAAO,IAAI,CAAC,IAAIC,wBAAwB;YAKnD,OAAOD,OAAO,EAAE,CAAC;gBACb,OAAOE,cAAcH,OAAO,KAAK,EAAEA,OAAO,KAAK;gBAC/C,QAAQI,eAAeJ,OAAO,KAAK,EAAEA,OAAO,KAAK,CAAC,MAAM;YAC5D;QACJ,EAAE,OAAOK,OAAO;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CACb;gBAAE,KAAKA;gBAAO,OAAON,OAAO,KAAK;gBAAE,UAAUA,OAAO,QAAQ;YAAC,GAC7D;YAEJ,OAAOE,OAAO,IAAI,CAAC,IAAIC,wBAAwB;QACnD;IACJ;IAEA,MAAa,OACTH,MAAsC,EACkC;QACxE,MAAMO,QAAQC,OAAO,IAAI,CAACR,OAAO,MAAM;QACvC,IAAIO,AAAiB,MAAjBA,MAAM,MAAM,EACZ,OAAOL,OAAO,IAAI,CAAC,IAAIC,wBAAwB;QAGnD,IAAIF;QACJ,IAAIQ;QACJ,IAAI;YACA,MAAMC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBACjC,OAAOV,OAAO,KAAK;gBACnB,kBAAkBA,OAAO,gBAAgB;YAC7C;YACA,IAAI,CAACU,QAAQA,KAAK,KAAK,CAAC,OAAO,KAAKV,OAAO,QAAQ,EAC/C,OAAOE,OAAO,IAAI,CAAC,IAAIC,wBAAwB;YAEnDF,SAASS;YAGT,MAAMC,SAAS,IAAIC;YACnB,KAAK,MAAMC,SAASR,eAAeJ,OAAO,KAAK,EAAEA,OAAO,KAAK,CAAC,MAAM,EAChEU,OAAO,GAAG,CAACE,MAAM,IAAI,EAAEA;YAE3B,MAAMC,WAAqB,EAAE;YAC7B,KAAK,MAAMC,QAAQR,MAAO;gBACtB,MAAMM,QAAQF,OAAO,GAAG,CAACI;gBACzB,IAAKF,OAEE,IAAKA,MAAM,QAAQ,EAEnB;oBAAA,IAAI,CAACG,mBAAmBH,MAAM,IAAI,EAAEb,OAAO,MAAM,CAACe,KAAK,GAC1DD,SAAS,IAAI,CACT,CAAC,WAAW,EAAEC,KAAK,UAAU,EAAEE,yBAAyBJ,MAAM,IAAI,EAAE,CAAC,CAAC;gBAE9E,OALIC,SAAS,IAAI,CAAC,CAAC,WAAW,EAAEC,KAAK,eAAe,CAAC;qBAFjDD,SAAS,IAAI,CAAC,CAAC,eAAe,EAAEC,KAAK,wCAAwC,CAAC;YAQtF;YACA,IAAID,SAAS,MAAM,GAAG,GAClB,OAAOZ,OAAO,IAAI,CAAC,IAAIC,wBAAwBW,SAAS,IAAI,CAAC;YAGjEL,QAAQS,mBAAmBjB,OAAO,KAAK,CAAC,MAAM,EAAED,OAAO,MAAM;QACjE,EAAE,OAAOM,OAAO;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CACb;gBAAE,KAAKA;gBAAO,OAAON,OAAO,KAAK;gBAAE,UAAUA,OAAO,QAAQ;YAAC,GAC7D;YAEJ,OAAOE,OAAO,IAAI,CAAC,IAAIC,wBAAwB;QACnD;QAEA,IAAI;YACA,MAAMgB,SAAS,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAClB,OAAO,KAAK,EAAED,OAAO,gBAAgB,EAAE;gBACjF,QAAQS;YACZ;YACA,IAAIU,OAAO,MAAM,IAAI;gBACjB,IAAIA,AAAsB,gCAAtBA,OAAO,KAAK,CAAC,IAAI,EAAkC;oBACnD,MAAMC,UAAoB,EAAE;oBAC5B,KAAK,MAAMC,QAAQF,OAAO,KAAK,CAAC,IAAI,IAAI,EAAE,CAAE;wBACxC,MAAMG,WAAqB;+BAAID,KAAK,OAAO;4BAAEA,KAAK,OAAO;yBAAC;wBAC1D,MAAME,OAAOC,8BACTvB,OAAO,KAAK,EACZqB,UACAD,KAAK,KAAK;wBAEd,IAAIE,AAAS,SAATA,MAGA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb;4BACI,KAAKE,eAAeJ,KAAK,KAAK,IACxBA,KAAK,KAAK,CAAC,MAAM,GACjBA,KAAK,KAAK;4BAChB,OAAOrB,OAAO,KAAK;4BACnB,UAAUA,OAAO,QAAQ;4BACzB,MAAMsB,SAAS,IAAI,CAAC;wBACxB,GACA;wBAGRF,QAAQ,IAAI,CACR,GAAGE,SAAS,IAAI,CAAC,KAAK,EAAE,EAAEC,QAAQG,4BAA4B;oBAEtE;oBACA,OAAOxB,OAAO,IAAI,CACd,IAAIC,wBACAiB,QAAQ,MAAM,GAAG,IACX,CAAC,mBAAmB,EAAEA,QAAQ,IAAI,CAAC,MAAM,GACzC;gBAGlB;gBACA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb;oBACI,KAAKK,eAAeN,OAAO,KAAK,IAAIA,OAAO,KAAK,CAAC,MAAM,GAAGA,OAAO,KAAK;oBACtE,OAAOnB,OAAO,KAAK;oBACnB,UAAUA,OAAO,QAAQ;gBAC7B,GACA;gBAEJ,OAAOE,OAAO,IAAI,CAAC,IAAIC,wBAAwB;YACnD;QACJ,EAAE,OAAOG,OAAO;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CACb;gBAAE,KAAKA;gBAAO,OAAON,OAAO,KAAK;gBAAE,UAAUA,OAAO,QAAQ;YAAC,GAC7D;YAEJ,OAAOE,OAAO,IAAI,CAAC,IAAIC,wBAAwB;QACnD;QAEA,OAAOD,OAAO,EAAE,CAAC;YAAE,SAASK;QAAM;IACtC;AACJ;AAEO,MAAMoB,6BAA6BC,mBAAmB,oBAAoB,CAAC;IAC9E,gBAAgBlC;IAChB,cAAc;QAACmC;QAAsBC;QAAoBC;KAAO;AACpE"}

package/features/target/CmsEntryReviewTargetFolderChain.d.ts

@@ -0,0 +1,22 @@
+import { ReviewTargetFolderChain } from "@webiny/api-workflows/features/review/ReviewTargetFolderChain/index.js";
+import { GetFolderRepository } from "@webiny/api-aco/features/folder/GetFolder/abstractions.js";
+import { GetAncestorsUseCase } from "@webiny/api-aco/features/folder/GetAncestors/index.js";
+/**
+ * The folder of a `cms.<modelId>` target and its ancestors, nearest first, for the routing rules'
+ * folder condition (spec 6, R113, R114). Read through ACO's repository, which applies no
+ * folder-level permissions (the folder model is private with `authorization: false`): routing
+ * matches the folder tree, not what the requester may see. Read at step reach, so a moved parent
+ * counts. A missing folder, a folder of another type and a failed read throw; the engine falls
+ * through to the pool (R116).
+ */
+declare class CmsEntryReviewTargetFolderChainImpl implements ReviewTargetFolderChain.Interface {
+    private getFolder;
+    private getAncestors;
+    constructor(getFolder: GetFolderRepository.Interface, getAncestors: GetAncestorsUseCase.Interface);
+    canHandle(model: string): boolean;
+    listFolderChainIds(params: ReviewTargetFolderChain.Params): Promise<string[]>;
+}
+export declare const CmsEntryReviewTargetFolderChain: typeof CmsEntryReviewTargetFolderChainImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-workflows/features/review/ReviewTargetFolderChain/abstractions").IReviewTargetFolderChain>;
+};
+export {};

package/features/target/CmsEntryReviewTargetFolderChain.js

@@ -0,0 +1,37 @@
+import { ReviewTargetFolderChain } from "@webiny/api-workflows/features/review/ReviewTargetFolderChain/index.js";
+import { GetFolderRepository } from "@webiny/api-aco/features/folder/GetFolder/abstractions.js";
+import { GetAncestorsUseCase } from "@webiny/api-aco/features/folder/GetAncestors/index.js";
+import { getModelIdFromAppName, isCmsNamespace } from "../../utils/appName.js";
+import { toCmsFolderType } from "../../utils/folderType.js";
+class CmsEntryReviewTargetFolderChainImpl {
+    constructor(getFolder, getAncestors){
+        this.getFolder = getFolder;
+        this.getAncestors = getAncestors;
+    }
+    canHandle(model) {
+        return isCmsNamespace(model);
+    }
+    async listFolderChainIds(params) {
+        const modelId = getModelIdFromAppName(params.model);
+        if (!modelId) throw new Error(`"${params.model}" is not a CMS namespace.`);
+        if (!params.folderId || params.folderId.includes("#")) throw new Error(`"${params.folderId}" is not a valid folder id.`);
+        const folder = await this.getFolder.execute(params.folderId);
+        if (folder.isFail()) throw folder.error;
+        if (folder.value.type !== toCmsFolderType(modelId)) throw new Error(`Folder "${params.folderId}" is not a folder of "${params.model}".`);
+        const ancestors = await this.getAncestors.execute({
+            folder: folder.value
+        });
+        if (ancestors.isFail()) throw ancestors.error;
+        return ancestors.value.map((item)=>item.id);
+    }
+}
+const CmsEntryReviewTargetFolderChain = ReviewTargetFolderChain.createImplementation({
+    implementation: CmsEntryReviewTargetFolderChainImpl,
+    dependencies: [
+        GetFolderRepository,
+        GetAncestorsUseCase
+    ]
+});
+export { CmsEntryReviewTargetFolderChain };
+
+//# sourceMappingURL=CmsEntryReviewTargetFolderChain.js.map

package/features/target/CmsEntryReviewTargetFolderChain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/target/CmsEntryReviewTargetFolderChain.js","sources":["../../../src/features/target/CmsEntryReviewTargetFolderChain.ts"],"sourcesContent":["import { ReviewTargetFolderChain } from \"@webiny/api-workflows/features/review/ReviewTargetFolderChain/index.js\";\nimport { GetFolderRepository } from \"@webiny/api-aco/features/folder/GetFolder/abstractions.js\";\nimport { GetAncestorsUseCase } from \"@webiny/api-aco/features/folder/GetAncestors/index.js\";\nimport { getModelIdFromAppName, isCmsNamespace } from \"~/utils/appName.js\";\nimport { toCmsFolderType } from \"~/utils/folderType.js\";\n\n/**\n * The folder of a `cms.<modelId>` target and its ancestors, nearest first, for the routing rules'\n * folder condition (spec 6, R113, R114). Read through ACO's repository, which applies no\n * folder-level permissions (the folder model is private with `authorization: false`): routing\n * matches the folder tree, not what the requester may see. Read at step reach, so a moved parent\n * counts. A missing folder, a folder of another type and a failed read throw; the engine falls\n * through to the pool (R116).\n */\nclass CmsEntryReviewTargetFolderChainImpl implements ReviewTargetFolderChain.Interface {\n    public constructor(\n        private getFolder: GetFolderRepository.Interface,\n        private getAncestors: GetAncestorsUseCase.Interface\n    ) {}\n\n    public canHandle(model: string): boolean {\n        return isCmsNamespace(model);\n    }\n\n    public async listFolderChainIds(params: ReviewTargetFolderChain.Params): Promise<string[]> {\n        const modelId = getModelIdFromAppName(params.model);\n        if (!modelId) {\n            throw new Error(`\"${params.model}\" is not a CMS namespace.`);\n        }\n\n        if (!params.folderId || params.folderId.includes(\"#\")) {\n            throw new Error(`\"${params.folderId}\" is not a valid folder id.`);\n        }\n\n        const folder = await this.getFolder.execute(params.folderId);\n        if (folder.isFail()) {\n            throw folder.error;\n        }\n        if (folder.value.type !== toCmsFolderType(modelId)) {\n            throw new Error(`Folder \"${params.folderId}\" is not a folder of \"${params.model}\".`);\n        }\n\n        const ancestors = await this.getAncestors.execute({ folder: folder.value });\n        if (ancestors.isFail()) {\n            throw ancestors.error;\n        }\n        return ancestors.value.map(item => item.id);\n    }\n}\n\nexport const CmsEntryReviewTargetFolderChain = ReviewTargetFolderChain.createImplementation({\n    implementation: CmsEntryReviewTargetFolderChainImpl,\n    dependencies: [GetFolderRepository, GetAncestorsUseCase]\n});\n"],"names":["CmsEntryReviewTargetFolderChainImpl","getFolder","getAncestors","model","isCmsNamespace","params","modelId","getModelIdFromAppName","Error","folder","toCmsFolderType","ancestors","item","CmsEntryReviewTargetFolderChain","ReviewTargetFolderChain","GetFolderRepository","GetAncestorsUseCase"],"mappings":";;;;;AAcA,MAAMA;IACF,YACYC,SAAwC,EACxCC,YAA2C,CACrD;aAFUD,SAAS,GAATA;aACAC,YAAY,GAAZA;IACT;IAEI,UAAUC,KAAa,EAAW;QACrC,OAAOC,eAAeD;IAC1B;IAEA,MAAa,mBAAmBE,MAAsC,EAAqB;QACvF,MAAMC,UAAUC,sBAAsBF,OAAO,KAAK;QAClD,IAAI,CAACC,SACD,MAAM,IAAIE,MAAM,CAAC,CAAC,EAAEH,OAAO,KAAK,CAAC,yBAAyB,CAAC;QAG/D,IAAI,CAACA,OAAO,QAAQ,IAAIA,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAC7C,MAAM,IAAIG,MAAM,CAAC,CAAC,EAAEH,OAAO,QAAQ,CAAC,2BAA2B,CAAC;QAGpE,MAAMI,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAACJ,OAAO,QAAQ;QAC3D,IAAII,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;QAEtB,IAAIA,OAAO,KAAK,CAAC,IAAI,KAAKC,gBAAgBJ,UACtC,MAAM,IAAIE,MAAM,CAAC,QAAQ,EAAEH,OAAO,QAAQ,CAAC,sBAAsB,EAAEA,OAAO,KAAK,CAAC,EAAE,CAAC;QAGvF,MAAMM,YAAY,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YAAE,QAAQF,OAAO,KAAK;QAAC;QACzE,IAAIE,UAAU,MAAM,IAChB,MAAMA,UAAU,KAAK;QAEzB,OAAOA,UAAU,KAAK,CAAC,GAAG,CAACC,CAAAA,OAAQA,KAAK,EAAE;IAC9C;AACJ;AAEO,MAAMC,kCAAkCC,wBAAwB,oBAAoB,CAAC;IACxF,gBAAgBd;IAChB,cAAc;QAACe;QAAqBC;KAAoB;AAC5D"}

package/features/target/CmsEntryReviewTargetLink.d.ts

@@ -0,0 +1,17 @@
+import { ReviewTargetLink } from "@webiny/api-workflows/features/notifications/ReviewTargetLink/index.js";
+/**
+ * The `cms.<modelId>` admin link of a review's content (R195, D133). It mirrors the admin route
+ * `Cms/ContentEntries/List` in `packages/app-headless-cms/src/routes.ts`
+ * (`/cms/content-entries/:modelId`); the open entry is its `id` query parameter. That file lives
+ * in a client package the API cannot import, so a route change there must be mirrored here. The
+ * revision id carries a `#`, which `encodeURIComponent` turns into `%23` so the browser does not
+ * read it as a fragment. The path has no host and no tenant: `ReviewTargetLinkService` adds both.
+ */
+declare class CmsEntryReviewTargetLinkImpl implements ReviewTargetLink.Interface {
+    canLink(model: string): boolean;
+    getPath(params: ReviewTargetLink.Params): string;
+}
+export declare const CmsEntryReviewTargetLink: typeof CmsEntryReviewTargetLinkImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-workflows/features/notifications/ReviewTargetLink/abstractions").IReviewTargetLink>;
+};
+export {};

package/features/target/CmsEntryReviewTargetLink.js

@@ -0,0 +1,18 @@
+import { ReviewTargetLink } from "@webiny/api-workflows/features/notifications/ReviewTargetLink/index.js";
+import { getModelIdFromAppName, isCmsNamespace } from "../../utils/appName.js";
+class CmsEntryReviewTargetLinkImpl {
+    canLink(model) {
+        return isCmsNamespace(model);
+    }
+    getPath(params) {
+        const modelId = getModelIdFromAppName(params.model) ?? params.model;
+        return `/cms/content-entries/${encodeURIComponent(modelId)}?id=${encodeURIComponent(params.targetRevisionId)}`;
+    }
+}
+const CmsEntryReviewTargetLink = ReviewTargetLink.createImplementation({
+    implementation: CmsEntryReviewTargetLinkImpl,
+    dependencies: []
+});
+export { CmsEntryReviewTargetLink };
+
+//# sourceMappingURL=CmsEntryReviewTargetLink.js.map

package/features/target/CmsEntryReviewTargetLink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/target/CmsEntryReviewTargetLink.js","sources":["../../../src/features/target/CmsEntryReviewTargetLink.ts"],"sourcesContent":["import { ReviewTargetLink } from \"@webiny/api-workflows/features/notifications/ReviewTargetLink/index.js\";\nimport { getModelIdFromAppName, isCmsNamespace } from \"~/utils/appName.js\";\n\n/**\n * The `cms.<modelId>` admin link of a review's content (R195, D133). It mirrors the admin route\n * `Cms/ContentEntries/List` in `packages/app-headless-cms/src/routes.ts`\n * (`/cms/content-entries/:modelId`); the open entry is its `id` query parameter. That file lives\n * in a client package the API cannot import, so a route change there must be mirrored here. The\n * revision id carries a `#`, which `encodeURIComponent` turns into `%23` so the browser does not\n * read it as a fragment. The path has no host and no tenant: `ReviewTargetLinkService` adds both.\n */\nclass CmsEntryReviewTargetLinkImpl implements ReviewTargetLink.Interface {\n    public canLink(model: string): boolean {\n        return isCmsNamespace(model);\n    }\n\n    public getPath(params: ReviewTargetLink.Params): string {\n        // `canLink` guarantees a `cms.<modelId>` namespace; the fallback only keeps this a string.\n        const modelId = getModelIdFromAppName(params.model) ?? params.model;\n        return `/cms/content-entries/${encodeURIComponent(modelId)}?id=${encodeURIComponent(params.targetRevisionId)}`;\n    }\n}\n\nexport const CmsEntryReviewTargetLink = ReviewTargetLink.createImplementation({\n    implementation: CmsEntryReviewTargetLinkImpl,\n    dependencies: []\n});\n"],"names":["CmsEntryReviewTargetLinkImpl","model","isCmsNamespace","params","modelId","getModelIdFromAppName","encodeURIComponent","CmsEntryReviewTargetLink","ReviewTargetLink"],"mappings":";;AAWA,MAAMA;IACK,QAAQC,KAAa,EAAW;QACnC,OAAOC,eAAeD;IAC1B;IAEO,QAAQE,MAA+B,EAAU;QAEpD,MAAMC,UAAUC,sBAAsBF,OAAO,KAAK,KAAKA,OAAO,KAAK;QACnE,OAAO,CAAC,qBAAqB,EAAEG,mBAAmBF,SAAS,IAAI,EAAEE,mBAAmBH,OAAO,gBAAgB,GAAG;IAClH;AACJ;AAEO,MAAMI,2BAA2BC,iBAAiB,oBAAoB,CAAC;IAC1E,gBAAgBR;IAChB,cAAc,EAAE;AACpB"}

package/features/target/CmsEntryReviewTargetLoader.d.ts

@@ -0,0 +1,16 @@
+import { ReviewTargetLoader } from "@webiny/api-workflows/features/review/ReviewTargetLoader/index.js";
+import { CmsEntryTargetReader } from "./CmsEntryTargetReader/index.js";
+/**
+ * Loads `cms.<modelId>` targets for `RequestReviewUseCase` (spec 9.3). Runs as the requester,
+ * whose write access the request wrapper has checked (D77).
+ */
+declare class CmsEntryReviewTargetLoaderImpl implements ReviewTargetLoader.Interface {
+    private targets;
+    constructor(targets: CmsEntryTargetReader.Interface);
+    canLoad(model: string): boolean;
+    load(params: ReviewTargetLoader.LoadParams): Promise<ReviewTargetLoader.Target | null>;
+}
+export declare const CmsEntryReviewTargetLoader: typeof CmsEntryReviewTargetLoaderImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-workflows/features/review/ReviewTargetLoader/abstractions.js").IReviewTargetLoader>;
+};
+export {};

package/features/target/CmsEntryReviewTargetLoader.js

@@ -0,0 +1,29 @@
+import { ReviewTargetLoader } from "@webiny/api-workflows/features/review/ReviewTargetLoader/index.js";
+import { isCmsNamespace } from "../../utils/appName.js";
+import { CmsEntryTargetReader } from "./CmsEntryTargetReader/index.js";
+import { toCmsReviewTarget } from "./toCmsReviewTarget.js";
+class CmsEntryReviewTargetLoaderImpl {
+    constructor(targets){
+        this.targets = targets;
+    }
+    canLoad(model) {
+        return isCmsNamespace(model);
+    }
+    async load(params) {
+        const target = await this.targets.read({
+            model: params.model,
+            targetRevisionId: params.targetRevisionId
+        });
+        if (!target || target.entry.entryId !== params.targetId) return null;
+        return toCmsReviewTarget(target);
+    }
+}
+const CmsEntryReviewTargetLoader = ReviewTargetLoader.createImplementation({
+    implementation: CmsEntryReviewTargetLoaderImpl,
+    dependencies: [
+        CmsEntryTargetReader
+    ]
+});
+export { CmsEntryReviewTargetLoader };
+
+//# sourceMappingURL=CmsEntryReviewTargetLoader.js.map

package/features/target/CmsEntryReviewTargetLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/target/CmsEntryReviewTargetLoader.js","sources":["../../../src/features/target/CmsEntryReviewTargetLoader.ts"],"sourcesContent":["import { ReviewTargetLoader } from \"@webiny/api-workflows/features/review/ReviewTargetLoader/index.js\";\nimport { isCmsNamespace } from \"~/utils/appName.js\";\nimport { CmsEntryTargetReader } from \"./CmsEntryTargetReader/index.js\";\nimport { toCmsReviewTarget } from \"./toCmsReviewTarget.js\";\n\n/**\n * Loads `cms.<modelId>` targets for `RequestReviewUseCase` (spec 9.3). Runs as the requester,\n * whose write access the request wrapper has checked (D77).\n */\nclass CmsEntryReviewTargetLoaderImpl implements ReviewTargetLoader.Interface {\n    public constructor(private targets: CmsEntryTargetReader.Interface) {}\n\n    public canLoad(model: string): boolean {\n        return isCmsNamespace(model);\n    }\n\n    public async load(\n        params: ReviewTargetLoader.LoadParams\n    ): Promise<ReviewTargetLoader.Target | null> {\n        const target = await this.targets.read({\n            model: params.model,\n            targetRevisionId: params.targetRevisionId\n        });\n        if (!target || target.entry.entryId !== params.targetId) {\n            return null;\n        }\n        return toCmsReviewTarget(target);\n    }\n}\n\nexport const CmsEntryReviewTargetLoader = ReviewTargetLoader.createImplementation({\n    implementation: CmsEntryReviewTargetLoaderImpl,\n    dependencies: [CmsEntryTargetReader]\n});\n"],"names":["CmsEntryReviewTargetLoaderImpl","targets","model","isCmsNamespace","params","target","toCmsReviewTarget","CmsEntryReviewTargetLoader","ReviewTargetLoader","CmsEntryTargetReader"],"mappings":";;;;AASA,MAAMA;IACF,YAA2BC,OAAuC,CAAE;aAAzCA,OAAO,GAAPA;IAA0C;IAE9D,QAAQC,KAAa,EAAW;QACnC,OAAOC,eAAeD;IAC1B;IAEA,MAAa,KACTE,MAAqC,EACI;QACzC,MAAMC,SAAS,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACnC,OAAOD,OAAO,KAAK;YACnB,kBAAkBA,OAAO,gBAAgB;QAC7C;QACA,IAAI,CAACC,UAAUA,OAAO,KAAK,CAAC,OAAO,KAAKD,OAAO,QAAQ,EACnD,OAAO;QAEX,OAAOE,kBAAkBD;IAC7B;AACJ;AAEO,MAAME,6BAA6BC,mBAAmB,oBAAoB,CAAC;IAC9E,gBAAgBR;IAChB,cAAc;QAACS;KAAqB;AACxC"}

package/features/target/CmsEntryReviewTargetReadAccess.d.ts

@@ -0,0 +1,41 @@
+import { GetModelUseCase } from "@webiny/api-headless-cms/features/contentModel/GetModel/index.js";
+import { ReviewTargetReadAccess } from "@webiny/api-workflows/features/review/ReviewTargetReadAccess/index.js";
+import { CandidateReadAccess } from "@webiny/api-workflows/features/identity/CandidateReadAccess/index.js";
+import { CmsEntryTargetReader } from "./CmsEntryTargetReader/index.js";
+import { CmsEntryAccess } from "./CmsEntryAccess/index.js";
+import { CmsModelGroupService } from "./CmsModelGroupService/index.js";
+import { CandidateFolderReadRules } from "./CandidateFolderReadRules/index.js";
+/**
+ * `filterReadableUsers` for `cms.*` targets (D61, D133, R48, R121). The model, group, revision and
+ * the folder's permission record are read once per call, as the current identity, so nothing is
+ * read as the other users (A19) and nothing is read per user (Q79); only the CMS access check
+ * (group read, model read, entry and folder access, R72) runs as each user, through
+ * `CandidateReadAccess` (R67), which wraps it in `withIdentity` and `withAuthorization`.
+ *
+ * Contract: this class does not widen access itself, and the CMS model cache is filled
+ * per tenant after access filtering. A whole AI step run executes inside `withoutAuthorization`
+ * (R161), so the model and group reads of the AI editor happen there; the access checks here
+ * apply after the cache and run as the candidate user through `CandidateReadAccess`, the only
+ * place that changes identity for the check. Any failure, including a throwing target or model
+ * read, leaves the users out (fail closed, R50).
+ */
+declare class CmsEntryReviewTargetReadAccessImpl implements ReviewTargetReadAccess.Interface {
+    private targets;
+    private access;
+    private candidates;
+    private getModel;
+    private modelGroups;
+    private folderRules;
+    constructor(targets: CmsEntryTargetReader.Interface, access: CmsEntryAccess.Interface, candidates: CandidateReadAccess.Interface, getModel: GetModelUseCase.Interface, modelGroups: CmsModelGroupService.Interface, folderRules: CandidateFolderReadRules.Interface);
+    canHandle(model: string): boolean;
+    filterReadableUsers(params: ReviewTargetReadAccess.UsersParams): Promise<string[]>;
+    /**
+     * The target revision (or, for a folder without a revision, the model and group, R121) as the
+     * current identity; `null` when there is nothing anyone can read.
+     */
+    private readSubject;
+}
+export declare const CmsEntryReviewTargetReadAccess: typeof CmsEntryReviewTargetReadAccessImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-workflows/features/review/ReviewTargetReadAccess/abstractions.js").IReviewTargetReadAccess>;
+};
+export {};