@webiny/api-headless-cms 0.0.0-unstable.de38392959 → 0.0.0-unstable.df7a8bb475

package/crud/AccessControl/AccessControl.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NotAuthorizedError","AccessControl","constructor","getIdentity","getGroupsPermissions","getModelsPermissions","getEntriesPermissions","listAllGroups","fullAccessPermissions","listAllGroupsCallback","allGroups","canAccessGroup","params","acl","getGroupsAccessControlList","canRead","find","ace","rwd","includes","hasRwd","canAccessNonOwnedGroups","some","canAccessNonOwned","canAccessOnlyOwnedGroups","hasFullAccessToGroups","canAccessOnlyOwned","groupsPermissionsList","groupsPermissions","own","modelGroupCreatedBy","group","createdBy","identity","id","push","groups","Array","isArray","permissions","p","filter","Boolean","name","canAccessModel","getModelsAccessControlList","ensureCanAccessModel","canAccess","modelName","model","canAccessNonOwnedModels","canAccessOnlyOwnedModels","hasFullAccessToModels","i","length","modelsPermissionsList","relatedModelPermissions","_src","getGroup","fullAccess","models","modelCreatedBy","modelId","modelAuthorizationDisabled","canAccessEntry","getEntriesAccessControlList","pw","hasPw","ensureCanAccessEntry","entry","entryId","canAccessNonOwnedEntries","canAccessOnlyOwnedEntries","hasFullAccessToEntries","groupPermissions","relatedModelsPermissions","entriesPermissionsList","relatedEntriesPermissions","groupCreatedBy","entryCreatedBy","authorization","slug"],"sources":["AccessControl.ts"],"sourcesContent":["import type {\n    CmsEntry,\n    CmsEntryPermission,\n    CmsGroup,\n    CmsGroupPermission,\n    CmsModel,\n    CmsModelPermission\n} from \"~/types/index.js\";\nimport type { SecurityIdentity } from \"@webiny/api-core/types/security.js\";\nimport { NotAuthorizedError } from \"~/utils/errors.js\";\n\nexport interface AccessControlParams {\n    getIdentity: () => Promise<SecurityIdentity>;\n    getGroupsPermissions: () => Promise<CmsGroupPermission[]>;\n    getModelsPermissions: () => Promise<CmsModelPermission[]>;\n    getEntriesPermissions: () => Promise<CmsEntryPermission[]>;\n    listAllGroups: () => Promise<CmsGroup[]>;\n}\n\ninterface GetGroupsAccessControlListParams {\n    group?: CmsGroup;\n}\n\ninterface CanAccessGroupParams extends GetGroupsAccessControlListParams {\n    rwd?: string;\n}\n\ninterface GetModelsAccessControlListParams {\n    model?: CmsModel;\n}\n\ninterface CanAccessModelParams extends GetModelsAccessControlListParams {\n    rwd?: string;\n}\n\ninterface GetEntriesAccessControlListParams {\n    model: Pick<CmsModel, \"modelId\" | \"createdBy\" | \"group\" | \"authorization\">;\n    entry?: Pick<CmsEntry, \"entryId\" | \"createdBy\">;\n}\n\nexport interface CanAccessEntryParams extends GetEntriesAccessControlListParams {\n    rwd?: string;\n    pw?: string;\n}\n\ninterface AccessControlEntry {\n    rwd: string;\n    canAccessNonOwned: boolean;\n    canAccessOnlyOwned: boolean;\n}\n\ntype AccessControlList = AccessControlEntry[];\n\ninterface EntriesAccessControlEntry extends AccessControlEntry {\n    pw?: string;\n}\n\ntype EntriesAccessControlList = EntriesAccessControlEntry[];\n\ninterface IModelAuthorizationDisabledParams {\n    model: Pick<CmsModel, \"authorization\">;\n}\n\nexport class AccessControl {\n    getIdentity: AccessControlParams[\"getIdentity\"];\n    getGroupsPermissions: AccessControlParams[\"getGroupsPermissions\"];\n    getModelsPermissions: AccessControlParams[\"getModelsPermissions\"];\n    getEntriesPermissions: AccessControlParams[\"getEntriesPermissions\"];\n    listAllGroupsCallback: AccessControlParams[\"listAllGroups\"];\n\n    private fullAccessPermissions: string[];\n    private allGroups: null | Promise<CmsGroup[]>;\n\n    constructor({\n        getIdentity,\n        getGroupsPermissions,\n        getModelsPermissions,\n        getEntriesPermissions,\n        listAllGroups\n    }: AccessControlParams) {\n        this.getIdentity = getIdentity;\n        this.getGroupsPermissions = getGroupsPermissions;\n        this.getModelsPermissions = getModelsPermissions;\n        this.getEntriesPermissions = getEntriesPermissions;\n        this.fullAccessPermissions = [\"*\", \"cms.*\"];\n        this.listAllGroupsCallback = listAllGroups;\n        this.allGroups = null;\n    }\n\n    /**\n     * Groups-related methods below. 👇\n     * - canAccessGroup\n     * - ensureCanAccessGroup\n     * - canAccessNonOwnedGroups\n     * - canAccessOnlyOwnedGroups\n     * - getGroupsAccessControlList\n     * - hasFullAccessToGroups\n     */\n\n    async canAccessGroup(params: CanAccessGroupParams = {}) {\n        const acl = await this.getGroupsAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd?.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    async canAccessNonOwnedGroups(params: GetGroupsAccessControlListParams) {\n        const acl = await this.getGroupsAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    async canAccessOnlyOwnedGroups(params: GetGroupsAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedGroups(params);\n        return !canAccessNonOwned;\n    }\n\n    async getGroupsAccessControlList(\n        params: GetGroupsAccessControlListParams\n    ): Promise<AccessControlList> {\n        if (await this.hasFullAccessToGroups()) {\n            return [{ rwd: \"rwd\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: AccessControlList = [];\n\n        for (const groupsPermissions of groupsPermissionsList) {\n            if (groupsPermissions.own) {\n                if (\"group\" in params) {\n                    const modelGroupCreatedBy = params.group?.createdBy;\n                    if (!modelGroupCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n\n                    if (modelGroupCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n            }\n\n            if (groupsPermissions.groups) {\n                if (\"group\" in params) {\n                    const { group } = params;\n                    if (!group) {\n                        continue;\n                    }\n\n                    const { groups } = groupsPermissions;\n                    if (!Array.isArray(groups)) {\n                        continue;\n                    }\n\n                    if (!groups.includes(group.id)) {\n                        continue;\n                    }\n                }\n            }\n\n            acl.push({\n                rwd: groupsPermissions.rwd as string,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false\n            });\n        }\n\n        return acl;\n    }\n\n    async hasFullAccessToGroups() {\n        const permissions = await this.getGroupsPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    /**\n     * Models-related methods below. 👇\n     * - canAccessModel\n     * - ensureCanAccessModel\n     * - canAccessNonOwnedModels\n     * - canAccessOnlyOwnedModels\n     * - getModelsAccessControlList\n     * - hasFullAccessToModels\n     */\n\n    async canAccessModel(params: CanAccessModelParams) {\n        const acl = await this.getModelsAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    async ensureCanAccessModel(params: CanAccessModelParams = {}) {\n        const canAccess = await this.canAccessModel(params);\n        if (canAccess) {\n            return;\n        }\n\n        if (\"model\" in params) {\n            let modelName = \"(could not determine name)\";\n            if (params.model?.name) {\n                modelName = `\"${params.model.name}\"`;\n            }\n\n            throw new NotAuthorizedError(`Not allowed to access content model ${modelName}.`);\n        }\n\n        throw new NotAuthorizedError(`Not allowed to access content models.`);\n    }\n\n    async canAccessNonOwnedModels(params: GetModelsAccessControlListParams) {\n        const acl = await this.getModelsAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    async canAccessOnlyOwnedModels(params: GetModelsAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedModels(params);\n        return !canAccessNonOwned;\n    }\n\n    async getModelsAccessControlList(\n        params: GetModelsAccessControlListParams\n    ): Promise<AccessControlList> {\n        if (await this.hasFullAccessToModels(params)) {\n            return [{ rwd: \"rwd\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: AccessControlList = [];\n\n        for (let i = 0; i < groupsPermissionsList.length; i++) {\n            const groupsPermissions = groupsPermissionsList[i];\n\n            const modelsPermissionsList = await this.getModelsPermissions();\n            const relatedModelPermissions = modelsPermissionsList.find(\n                permissions => permissions._src === groupsPermissions._src\n            );\n\n            if (!relatedModelPermissions) {\n                continue;\n            }\n\n            if (groupsPermissions.own) {\n                if (\"model\" in params) {\n                    const { model } = params;\n                    if (!model) {\n                        continue;\n                    }\n\n                    const group = await this.getGroup(model.group);\n                    if (!group) {\n                        continue;\n                    }\n\n                    const modelGroupCreatedBy = group.createdBy;\n                    if (!modelGroupCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (modelGroupCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n\n                continue;\n            }\n\n            if (groupsPermissions.groups) {\n                if (\"model\" in params) {\n                    const { model } = params;\n                    if (!model) {\n                        continue;\n                    }\n\n                    if (!Array.isArray(groupsPermissions.groups)) {\n                        continue;\n                    }\n\n                    if (!groupsPermissions.groups.includes(model.group)) {\n                        continue;\n                    }\n                }\n            }\n\n            const fullAccess =\n                !relatedModelPermissions.rwd &&\n                !relatedModelPermissions.own &&\n                !relatedModelPermissions.models;\n\n            if (fullAccess) {\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: true,\n                    canAccessOnlyOwned: false\n                });\n\n                continue;\n            }\n\n            if (relatedModelPermissions.own) {\n                if (\"model\" in params) {\n                    if (!params.model) {\n                        continue;\n                    }\n\n                    const modelCreatedBy = params.model.createdBy;\n                    if (!modelCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (modelCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n\n                continue;\n            }\n\n            if (relatedModelPermissions.models) {\n                const { models } = relatedModelPermissions;\n                if (\"model\" in params) {\n                    if (!params.model) {\n                        continue;\n                    }\n\n                    if (!Array.isArray(models)) {\n                        continue;\n                    }\n\n                    if (!models.includes(params.model.modelId)) {\n                        continue;\n                    }\n                }\n            }\n\n            acl.push({\n                rwd: relatedModelPermissions.rwd as string,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false\n            });\n        }\n\n        return acl;\n    }\n\n    async hasFullAccessToModels(params: GetModelsAccessControlListParams) {\n        const { model } = params;\n        if (model) {\n            if (this.modelAuthorizationDisabled({ model })) {\n                return true;\n            }\n        }\n\n        const permissions = await this.getModelsPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    /**\n     * Entries-related methods below. 👇\n     * - canAccessEntry\n     * - ensureCanAccessEntry\n     * - canAccessNonOwnedEntries\n     * - canAccessOnlyOwnedEntries\n     * - getEntriesAccessControlList\n     * - hasFullAccessToEntries\n     */\n\n    async canAccessEntry(params: CanAccessEntryParams) {\n        const acl = await this.getEntriesAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        const { pw } = params;\n        if (pw) {\n            const hasPw = acl.find(ace => ace.pw?.includes(pw));\n            if (!hasPw) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    async ensureCanAccessEntry(params: CanAccessEntryParams) {\n        const canAccess = await this.canAccessEntry(params);\n        if (!canAccess) {\n            if (params.entry) {\n                throw new NotAuthorizedError(\n                    `Not allowed to access entry \"${params.entry.entryId}\".`\n                );\n            }\n\n            throw new NotAuthorizedError(\n                `Not allowed to access \"${params.model.modelId}\" entries.`\n            );\n        }\n    }\n\n    async canAccessNonOwnedEntries(params: GetEntriesAccessControlListParams) {\n        const acl = await this.getEntriesAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    async canAccessOnlyOwnedEntries(params: GetEntriesAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedEntries(params);\n        return !canAccessNonOwned;\n    }\n\n    async getEntriesAccessControlList(\n        params: GetEntriesAccessControlListParams\n    ): Promise<EntriesAccessControlList> {\n        if (await this.hasFullAccessToEntries(params)) {\n            return [{ rwd: \"rwd\", pw: \"pu\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        // We need a map of groups slugs to ids, to perform checks on models\n        const { model } = params;\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: EntriesAccessControlList = [];\n\n        for (let i = 0; i < groupsPermissionsList.length; i++) {\n            const groupPermissions = groupsPermissionsList[i];\n\n            const modelsPermissionsList = await this.getModelsPermissions();\n            const relatedModelsPermissions = modelsPermissionsList.find(\n                permissions => permissions._src === groupPermissions._src\n            );\n\n            if (!relatedModelsPermissions) {\n                continue;\n            }\n\n            const entriesPermissionsList = await this.getEntriesPermissions();\n            const relatedEntriesPermissions = entriesPermissionsList.find(\n                permissions => permissions._src === groupPermissions._src\n            );\n\n            if (!relatedEntriesPermissions) {\n                continue;\n            }\n\n            if (groupPermissions.own) {\n                const group = await this.getGroup(model.group);\n                if (!group) {\n                    continue;\n                }\n\n                const groupCreatedBy = group.createdBy;\n                if (!groupCreatedBy) {\n                    continue;\n                }\n\n                const identity = await this.getIdentity();\n                if (groupCreatedBy.id !== identity.id) {\n                    continue;\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n\n                continue;\n            }\n\n            if (groupPermissions.groups) {\n                const { groups } = groupPermissions;\n\n                if (!Array.isArray(groups)) {\n                    continue;\n                }\n\n                if (!groups.includes(model.group)) {\n                    continue;\n                }\n            }\n\n            if (relatedModelsPermissions.own) {\n                const modelCreatedBy = model.createdBy;\n                if (!modelCreatedBy) {\n                    continue;\n                }\n\n                const identity = await this.getIdentity();\n                if (modelCreatedBy.id !== identity.id) {\n                    continue;\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n            }\n\n            if (relatedModelsPermissions.models) {\n                if (!Array.isArray(relatedModelsPermissions.models)) {\n                    continue;\n                }\n\n                if (!relatedModelsPermissions.models.includes(model.modelId)) {\n                    continue;\n                }\n            }\n\n            const fullAccess =\n                !relatedEntriesPermissions.rwd &&\n                !relatedEntriesPermissions.own &&\n                !relatedEntriesPermissions.models;\n\n            if (fullAccess) {\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: \"pu\"\n                });\n\n                continue;\n            }\n\n            if (relatedEntriesPermissions.own) {\n                if (\"entry\" in params) {\n                    const entryCreatedBy = params.entry?.createdBy;\n                    if (!entryCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (entryCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: relatedEntriesPermissions.rwd,\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n\n                continue;\n            }\n\n            acl.push({\n                rwd: relatedEntriesPermissions.rwd,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false,\n                pw: relatedEntriesPermissions.pw\n            });\n        }\n\n        return acl;\n    }\n\n    async hasFullAccessToEntries(params: GetEntriesAccessControlListParams) {\n        if (this.modelAuthorizationDisabled(params)) {\n            return true;\n        }\n\n        const permissions = await this.getEntriesPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    private modelAuthorizationDisabled(params: IModelAuthorizationDisabledParams) {\n        if (\"authorization\" in params.model) {\n            const { authorization } = params.model;\n            if (typeof authorization === \"boolean\") {\n                return authorization === false;\n            }\n\n            return authorization?.permissions === false;\n        }\n\n        return false;\n    }\n\n    private async listAllGroups(): Promise<CmsGroup[]> {\n        if (this.allGroups === null) {\n            this.allGroups = this.listAllGroupsCallback();\n        }\n\n        return this.allGroups;\n    }\n\n    private async getGroup(slug: string): Promise<CmsGroup | undefined> {\n        const groups = await this.listAllGroups();\n        return groups.find(group => group.slug === slug);\n    }\n}\n"],"mappings":"AASA,SAASA,kBAAkB;AAsD3B,OAAO,MAAMC,aAAa,CAAC;EAUvBC,WAAWA,CAAC;IACRC,WAAW;IACXC,oBAAoB;IACpBC,oBAAoB;IACpBC,qBAAqB;IACrBC;EACiB,CAAC,EAAE;IACpB,IAAI,CAACJ,WAAW,GAAGA,WAAW;IAC9B,IAAI,CAACC,oBAAoB,GAAGA,oBAAoB;IAChD,IAAI,CAACC,oBAAoB,GAAGA,oBAAoB;IAChD,IAAI,CAACC,qBAAqB,GAAGA,qBAAqB;IAClD,IAAI,CAACE,qBAAqB,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;IAC3C,IAAI,CAACC,qBAAqB,GAAGF,aAAa;IAC1C,IAAI,CAACG,SAAS,GAAG,IAAI;EACzB;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMC,cAAcA,CAACC,MAA4B,GAAG,CAAC,CAAC,EAAE;IACpD,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACC,0BAA0B,CAACF,MAAM,CAAC;IAEzD,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,EAAEC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAMC,uBAAuBA,CAACT,MAAwC,EAAE;IACpE,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACC,0BAA0B,CAACF,MAAM,CAAC;IACzD,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAMC,wBAAwBA,CAACZ,MAAwC,EAAE;IACrE,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAACF,uBAAuB,CAACT,MAAM,CAAC;IACpE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAMT,0BAA0BA,CAC5BF,MAAwC,EACd;IAC1B,IAAI,MAAM,IAAI,CAACa,qBAAqB,CAAC,CAAC,EAAE;MACpC,OAAO,CAAC;QAAEP,GAAG,EAAE,KAAK;QAAEK,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IAC/E;IAEA,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAAsB,GAAG,EAAE;IAEjC,KAAK,MAAMe,iBAAiB,IAAID,qBAAqB,EAAE;MACnD,IAAIC,iBAAiB,CAACC,GAAG,EAAE;QACvB,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAMkB,mBAAmB,GAAGlB,MAAM,CAACmB,KAAK,EAAEC,SAAS;UACnD,IAAI,CAACF,mBAAmB,EAAE;YACtB;UACJ;UAEA,MAAMG,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UAEzC,IAAI2B,mBAAmB,CAACI,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACxC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;MACN;MAEA,IAAIE,iBAAiB,CAACQ,MAAM,EAAE;QAC1B,IAAI,OAAO,IAAIxB,MAAM,EAAE;UACnB,MAAM;YAAEmB;UAAM,CAAC,GAAGnB,MAAM;UACxB,IAAI,CAACmB,KAAK,EAAE;YACR;UACJ;UAEA,MAAM;YAAEK;UAAO,CAAC,GAAGR,iBAAiB;UACpC,IAAI,CAACS,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;YACxB;UACJ;UAEA,IAAI,CAACA,MAAM,CAACjB,QAAQ,CAACY,KAAK,CAACG,EAAE,CAAC,EAAE;YAC5B;UACJ;QACJ;MACJ;MAEArB,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAEU,iBAAiB,CAACV,GAAa;QACpCK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE;MACxB,CAAC,CAAC;IACN;IAEA,OAAOb,GAAG;EACd;EAEA,MAAMY,qBAAqBA,CAAA,EAAG;IAC1B,MAAMc,WAAW,GAAG,MAAM,IAAI,CAACnC,oBAAoB,CAAC,CAAC;IACrD,OAAOmC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMC,cAAcA,CAAChC,MAA4B,EAAE;IAC/C,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACgC,0BAA0B,CAACjC,MAAM,CAAC;IAEzD,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAM0B,oBAAoBA,CAAClC,MAA4B,GAAG,CAAC,CAAC,EAAE;IAC1D,MAAMmC,SAAS,GAAG,MAAM,IAAI,CAACH,cAAc,CAAChC,MAAM,CAAC;IACnD,IAAImC,SAAS,EAAE;MACX;IACJ;IAEA,IAAI,OAAO,IAAInC,MAAM,EAAE;MACnB,IAAIoC,SAAS,GAAG,4BAA4B;MAC5C,IAAIpC,MAAM,CAACqC,KAAK,EAAEN,IAAI,EAAE;QACpBK,SAAS,GAAG,IAAIpC,MAAM,CAACqC,KAAK,CAACN,IAAI,GAAG;MACxC;MAEA,MAAM,IAAI3C,kBAAkB,CAAC,uCAAuCgD,SAAS,GAAG,CAAC;IACrF;IAEA,MAAM,IAAIhD,kBAAkB,CAAC,uCAAuC,CAAC;EACzE;EAEA,MAAMkD,uBAAuBA,CAACtC,MAAwC,EAAE;IACpE,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACgC,0BAA0B,CAACjC,MAAM,CAAC;IACzD,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAM4B,wBAAwBA,CAACvC,MAAwC,EAAE;IACrE,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAAC2B,uBAAuB,CAACtC,MAAM,CAAC;IACpE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAMsB,0BAA0BA,CAC5BjC,MAAwC,EACd;IAC1B,IAAI,MAAM,IAAI,CAACwC,qBAAqB,CAACxC,MAAM,CAAC,EAAE;MAC1C,OAAO,CAAC;QAAEM,GAAG,EAAE,KAAK;QAAEK,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IAC/E;IAEA,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAAsB,GAAG,EAAE;IAEjC,KAAK,IAAIwC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG1B,qBAAqB,CAAC2B,MAAM,EAAED,CAAC,EAAE,EAAE;MACnD,MAAMzB,iBAAiB,GAAGD,qBAAqB,CAAC0B,CAAC,CAAC;MAElD,MAAME,qBAAqB,GAAG,MAAM,IAAI,CAAClD,oBAAoB,CAAC,CAAC;MAC/D,MAAMmD,uBAAuB,GAAGD,qBAAqB,CAACvC,IAAI,CACtDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAK7B,iBAAiB,CAAC6B,IAC1D,CAAC;MAED,IAAI,CAACD,uBAAuB,EAAE;QAC1B;MACJ;MAEA,IAAI5B,iBAAiB,CAACC,GAAG,EAAE;QACvB,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAM;YAAEqC;UAAM,CAAC,GAAGrC,MAAM;UACxB,IAAI,CAACqC,KAAK,EAAE;YACR;UACJ;UAEA,MAAMlB,KAAK,GAAG,MAAM,IAAI,CAAC2B,QAAQ,CAACT,KAAK,CAAClB,KAAK,CAAC;UAC9C,IAAI,CAACA,KAAK,EAAE;YACR;UACJ;UAEA,MAAMD,mBAAmB,GAAGC,KAAK,CAACC,SAAS;UAC3C,IAAI,CAACF,mBAAmB,EAAE;YACtB;UACJ;UAEA,MAAMG,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI2B,mBAAmB,CAACI,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACxC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIE,iBAAiB,CAACQ,MAAM,EAAE;QAC1B,IAAI,OAAO,IAAIxB,MAAM,EAAE;UACnB,MAAM;YAAEqC;UAAM,CAAC,GAAGrC,MAAM;UACxB,IAAI,CAACqC,KAAK,EAAE;YACR;UACJ;UAEA,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACV,iBAAiB,CAACQ,MAAM,CAAC,EAAE;YAC1C;UACJ;UAEA,IAAI,CAACR,iBAAiB,CAACQ,MAAM,CAACjB,QAAQ,CAAC8B,KAAK,CAAClB,KAAK,CAAC,EAAE;YACjD;UACJ;QACJ;MACJ;MAEA,MAAM4B,UAAU,GACZ,CAACH,uBAAuB,CAACtC,GAAG,IAC5B,CAACsC,uBAAuB,CAAC3B,GAAG,IAC5B,CAAC2B,uBAAuB,CAACI,MAAM;MAEnC,IAAID,UAAU,EAAE;QACZ9C,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,IAAI;UACvBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAI8B,uBAAuB,CAAC3B,GAAG,EAAE;QAC7B,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,IAAI,CAACA,MAAM,CAACqC,KAAK,EAAE;YACf;UACJ;UAEA,MAAMY,cAAc,GAAGjD,MAAM,CAACqC,KAAK,CAACjB,SAAS;UAC7C,IAAI,CAAC6B,cAAc,EAAE;YACjB;UACJ;UAEA,MAAM5B,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI0D,cAAc,CAAC3B,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACnC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAI8B,uBAAuB,CAACI,MAAM,EAAE;QAChC,MAAM;UAAEA;QAAO,CAAC,GAAGJ,uBAAuB;QAC1C,IAAI,OAAO,IAAI5C,MAAM,EAAE;UACnB,IAAI,CAACA,MAAM,CAACqC,KAAK,EAAE;YACf;UACJ;UAEA,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACsB,MAAM,CAAC,EAAE;YACxB;UACJ;UAEA,IAAI,CAACA,MAAM,CAACzC,QAAQ,CAACP,MAAM,CAACqC,KAAK,CAACa,OAAO,CAAC,EAAE;YACxC;UACJ;QACJ;MACJ;MAEAjD,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAEsC,uBAAuB,CAACtC,GAAa;QAC1CK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE;MACxB,CAAC,CAAC;IACN;IAEA,OAAOb,GAAG;EACd;EAEA,MAAMuC,qBAAqBA,CAACxC,MAAwC,EAAE;IAClE,MAAM;MAAEqC;IAAM,CAAC,GAAGrC,MAAM;IACxB,IAAIqC,KAAK,EAAE;MACP,IAAI,IAAI,CAACc,0BAA0B,CAAC;QAAEd;MAAM,CAAC,CAAC,EAAE;QAC5C,OAAO,IAAI;MACf;IACJ;IAEA,MAAMV,WAAW,GAAG,MAAM,IAAI,CAAClC,oBAAoB,CAAC,CAAC;IACrD,OAAOkC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMqB,cAAcA,CAACpD,MAA4B,EAAE;IAC/C,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACoD,2BAA2B,CAACrD,MAAM,CAAC;IAE1D,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,MAAM;MAAE8C;IAAG,CAAC,GAAGtD,MAAM;IACrB,IAAIsD,EAAE,EAAE;MACJ,MAAMC,KAAK,GAAGtD,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACiD,EAAE,EAAE/C,QAAQ,CAAC+C,EAAE,CAAC,CAAC;MACnD,IAAI,CAACC,KAAK,EAAE;QACR,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAMC,oBAAoBA,CAACxD,MAA4B,EAAE;IACrD,MAAMmC,SAAS,GAAG,MAAM,IAAI,CAACiB,cAAc,CAACpD,MAAM,CAAC;IACnD,IAAI,CAACmC,SAAS,EAAE;MACZ,IAAInC,MAAM,CAACyD,KAAK,EAAE;QACd,MAAM,IAAIrE,kBAAkB,CACxB,gCAAgCY,MAAM,CAACyD,KAAK,CAACC,OAAO,IACxD,CAAC;MACL;MAEA,MAAM,IAAItE,kBAAkB,CACxB,0BAA0BY,MAAM,CAACqC,KAAK,CAACa,OAAO,YAClD,CAAC;IACL;EACJ;EAEA,MAAMS,wBAAwBA,CAAC3D,MAAyC,EAAE;IACtE,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACoD,2BAA2B,CAACrD,MAAM,CAAC;IAC1D,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAMiD,yBAAyBA,CAAC5D,MAAyC,EAAE;IACvE,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAACgD,wBAAwB,CAAC3D,MAAM,CAAC;IACrE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAM0C,2BAA2BA,CAC7BrD,MAAyC,EACR;IACjC,IAAI,MAAM,IAAI,CAAC6D,sBAAsB,CAAC7D,MAAM,CAAC,EAAE;MAC3C,OAAO,CAAC;QAAEM,GAAG,EAAE,KAAK;QAAEgD,EAAE,EAAE,IAAI;QAAE3C,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IACzF;;IAEA;IACA,MAAM;MAAEuB;IAAM,CAAC,GAAGrC,MAAM;IACxB,MAAMe,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAA6B,GAAG,EAAE;IAExC,KAAK,IAAIwC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG1B,qBAAqB,CAAC2B,MAAM,EAAED,CAAC,EAAE,EAAE;MACnD,MAAMqB,gBAAgB,GAAG/C,qBAAqB,CAAC0B,CAAC,CAAC;MAEjD,MAAME,qBAAqB,GAAG,MAAM,IAAI,CAAClD,oBAAoB,CAAC,CAAC;MAC/D,MAAMsE,wBAAwB,GAAGpB,qBAAqB,CAACvC,IAAI,CACvDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAKiB,gBAAgB,CAACjB,IACzD,CAAC;MAED,IAAI,CAACkB,wBAAwB,EAAE;QAC3B;MACJ;MAEA,MAAMC,sBAAsB,GAAG,MAAM,IAAI,CAACtE,qBAAqB,CAAC,CAAC;MACjE,MAAMuE,yBAAyB,GAAGD,sBAAsB,CAAC5D,IAAI,CACzDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAKiB,gBAAgB,CAACjB,IACzD,CAAC;MAED,IAAI,CAACoB,yBAAyB,EAAE;QAC5B;MACJ;MAEA,IAAIH,gBAAgB,CAAC7C,GAAG,EAAE;QACtB,MAAME,KAAK,GAAG,MAAM,IAAI,CAAC2B,QAAQ,CAACT,KAAK,CAAClB,KAAK,CAAC;QAC9C,IAAI,CAACA,KAAK,EAAE;UACR;QACJ;QAEA,MAAM+C,cAAc,GAAG/C,KAAK,CAACC,SAAS;QACtC,IAAI,CAAC8C,cAAc,EAAE;UACjB;QACJ;QAEA,MAAM7C,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;QACzC,IAAI2E,cAAc,CAAC5C,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;UACnC;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIQ,gBAAgB,CAACtC,MAAM,EAAE;QACzB,MAAM;UAAEA;QAAO,CAAC,GAAGsC,gBAAgB;QAEnC,IAAI,CAACrC,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;UACxB;QACJ;QAEA,IAAI,CAACA,MAAM,CAACjB,QAAQ,CAAC8B,KAAK,CAAClB,KAAK,CAAC,EAAE;UAC/B;QACJ;MACJ;MAEA,IAAI4C,wBAAwB,CAAC9C,GAAG,EAAE;QAC9B,MAAMgC,cAAc,GAAGZ,KAAK,CAACjB,SAAS;QACtC,IAAI,CAAC6B,cAAc,EAAE;UACjB;QACJ;QAEA,MAAM5B,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;QACzC,IAAI0D,cAAc,CAAC3B,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;UACnC;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;MACN;MAEA,IAAIS,wBAAwB,CAACf,MAAM,EAAE;QACjC,IAAI,CAACvB,KAAK,CAACC,OAAO,CAACqC,wBAAwB,CAACf,MAAM,CAAC,EAAE;UACjD;QACJ;QAEA,IAAI,CAACe,wBAAwB,CAACf,MAAM,CAACzC,QAAQ,CAAC8B,KAAK,CAACa,OAAO,CAAC,EAAE;UAC1D;QACJ;MACJ;MAEA,MAAMH,UAAU,GACZ,CAACkB,yBAAyB,CAAC3D,GAAG,IAC9B,CAAC2D,yBAAyB,CAAChD,GAAG,IAC9B,CAACgD,yBAAyB,CAACjB,MAAM;MAErC,IAAID,UAAU,EAAE;QACZ9C,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAE;QACR,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIW,yBAAyB,CAAChD,GAAG,EAAE;QAC/B,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAMmE,cAAc,GAAGnE,MAAM,CAACyD,KAAK,EAAErC,SAAS;UAC9C,IAAI,CAAC+C,cAAc,EAAE;YACjB;UACJ;UAEA,MAAM9C,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI4E,cAAc,CAAC7C,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACnC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE2D,yBAAyB,CAAC3D,GAAG;UAClCK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;QAEF;MACJ;MAEArD,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAE2D,yBAAyB,CAAC3D,GAAG;QAClCK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE,KAAK;QACzBwC,EAAE,EAAEW,yBAAyB,CAACX;MAClC,CAAC,CAAC;IACN;IAEA,OAAOrD,GAAG;EACd;EAEA,MAAM4D,sBAAsBA,CAAC7D,MAAyC,EAAE;IACpE,IAAI,IAAI,CAACmD,0BAA0B,CAACnD,MAAM,CAAC,EAAE;MACzC,OAAO,IAAI;IACf;IAEA,MAAM2B,WAAW,GAAG,MAAM,IAAI,CAACjC,qBAAqB,CAAC,CAAC;IACtD,OAAOiC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;EAEQoB,0BAA0BA,CAACnD,MAAyC,EAAE;IAC1E,IAAI,eAAe,IAAIA,MAAM,CAACqC,KAAK,EAAE;MACjC,MAAM;QAAE+B;MAAc,CAAC,GAAGpE,MAAM,CAACqC,KAAK;MACtC,IAAI,OAAO+B,aAAa,KAAK,SAAS,EAAE;QACpC,OAAOA,aAAa,KAAK,KAAK;MAClC;MAEA,OAAOA,aAAa,EAAEzC,WAAW,KAAK,KAAK;IAC/C;IAEA,OAAO,KAAK;EAChB;EAEA,MAAchC,aAAaA,CAAA,EAAwB;IAC/C,IAAI,IAAI,CAACG,SAAS,KAAK,IAAI,EAAE;MACzB,IAAI,CAACA,SAAS,GAAG,IAAI,CAACD,qBAAqB,CAAC,CAAC;IACjD;IAEA,OAAO,IAAI,CAACC,SAAS;EACzB;EAEA,MAAcgD,QAAQA,CAACuB,IAAY,EAAiC;IAChE,MAAM7C,MAAM,GAAG,MAAM,IAAI,CAAC7B,aAAa,CAAC,CAAC;IACzC,OAAO6B,MAAM,CAACpB,IAAI,CAACe,KAAK,IAAIA,KAAK,CAACkD,IAAI,KAAKA,IAAI,CAAC;EACpD;AACJ","ignoreList":[]}

package/crud/AccessControl/README.md

@@ -0,0 +1,47 @@
+# How Access Control Works
+
+With Headless CMS, checking base permissions (access control) is a bit more interesting because the three types of permissions objects are related to each other. The three types of permissions are:
+
+1. `cms.contentModelGroup`
+2. `cms.contentModel`
+3. `cms.contentEntry`
+
+So, for example, when checking if a user can create content entries, it's not enough to check if the user has the `cms.contentEntry` permission. We also need to check if the user has the `cms.contentModel` permission for the content model the entry belongs to, and if the user has the `cms.contentModelGroup` permission for the content model group the content model belongs to.
+
+All of the above is handled by the `AccessControl` class, which provides a set of methods to check if a user has the necessary permissions to perform a specific action. The main methods that are used in CRUD operations-related code are:
+
+1. `canAccessGroup` (`ensureCanAccessGroup`): checks if a user has the necessary permissions to access a content model group.
+2. `canAccessModel` (`ensureCanAccessModel`): checks if a user has the necessary permissions to access a content model (takes into consideration the content model group permissions).
+3. `canAccessEntry` (`ensureCanAccessEntry`): checks if a user has the necessary permissions to access a content entry (takes into consideration the content model and content model group permissions).
+
+Note that all of these methods can accept an exact entity instance if needed, but it's not required. Both has its own use cases.
+
+For example, when checking if a user can access (read) a content entry, you can pass the entry instance to the `canAccessEntry` method, and it will check if the user has the necessary permissions to access that specific entry. On the other hand, if the entry instance was not passed, the method would check if the user has the necessary permissions to access (read) entries of the given content model.
+
+Note that, whenever possible, the entry should be passed to the method, as it's more secure and provides more accurate results. For example, it is possible to receive a `true` response when checking if a user can access a specific content model, but still receive `false` when the model was not passed (when checking if user can access / read models in general).
+
+## Folder Level Permissions
+
+With Folder Level Permissions, a user can be part of a team, that may have multiple roles that provide different Headless CMS-related permissions (more information [here](https://www.webiny.com/docs/enterprise/aacl/teams#overview)).
+
+The Access Control class is aware of this and ensures that only permissions objects from a single role are taken into consideration when checking if a user has the necessary permissions to perform a specific action. If permission objects from a single role do not provide the necessary permissions, the next role is checked, and so on.
+
+In order to achieve this, we're using the `_src` property that's assigned to each permission object. This property contains the role ID, and is used to filter out permissions objects that belong to a different role.
+
+## Interesting Permissions-related Logic
+
+### Only groups created by the user
+
+When choosing "Only groups created by the user" access scope via the `cms.contentModelGroup` permission, the user that possesses this permission can not only fully (r/w/d) access content models that belong to the content model groups that the user has created, but also content entries that belong to those content models.
+
+<img src="./groups-own.png">
+
+Note that only the entry publishing actions-related permissions are not automatically set here. They need to be defined when defining the role explicitly.
+
+### Only models created by the user
+
+When choosing "Only models created by the user" access scope via the `cms.contentModel` permission, the user that possesses this permission can not only fully (r/w/d) access content models that the user has created, but also content entries that belong to those content models.
+
+<img src="./models-own.png">
+
+Note that only the entry publishing actions-related permissions are not automatically set here. They need to be defined when defining the role explicitly.

package/crud/contentEntry/entryDataFactories/createEntryData.d.ts

@@ -1,20 +1,19 @@
-import { CmsContext, CmsEntry, CmsModel, CreateCmsEntryInput, CreateCmsEntryOptionsInput } from "../../../types";
-import { I18NLocale } from "@webiny/api-i18n/types";
-import { SecurityIdentity } from "@webiny/api-security/types";
-import { Tenant } from "@webiny/api-tenancy/types";
-import { EntriesPermissions } from "../../../utils/permissions/EntriesPermissions";
-declare type CreateEntryDataParams = {
+import type { CmsContext, CmsEntry, CmsEntryValues, CmsModel, CreateCmsEntryInput, CreateCmsEntryOptionsInput } from "../../../types/index.js";
+import type { AccessControl } from "../../../crud/AccessControl/AccessControl.js";
+import type { SecurityIdentity } from "@webiny/api-core/types/security.js";
+import type { Tenant } from "@webiny/api-core/types/tenancy.js";
+interface CreateEntryDataParams<TValues extends CmsEntryValues = CmsEntryValues> {
     model: CmsModel;
-    rawInput: CreateCmsEntryInput;
+    rawInput: CreateCmsEntryInput<TValues>;
     options?: CreateCmsEntryOptionsInput;
     context: CmsContext;
     getIdentity: () => SecurityIdentity;
     getTenant: () => Tenant;
-    getLocale: () => I18NLocale;
-    entriesPermissions: EntriesPermissions;
-};
-export declare const createEntryData: ({ model, rawInput, options, context, getIdentity: getSecurityIdentity, getLocale, getTenant, entriesPermissions }: CreateEntryDataParams) => Promise<{
-    entry: CmsEntry;
-    input: Record<string, any>;
-}>;
+    accessControl: AccessControl;
+}
+interface ICreateEntryDataResponse<TValues extends CmsEntryValues = CmsEntryValues> {
+    entry: CmsEntry<TValues>;
+    input: CreateCmsEntryInput<TValues>;
+}
+export declare const createEntryData: <TValues extends CmsEntryValues = CmsEntryValues>({ model, rawInput, options, context, getIdentity: getSecurityIdentity, getTenant, accessControl }: CreateEntryDataParams<TValues>) => Promise<ICreateEntryDataResponse<TValues>>;
 export {};

package/crud/contentEntry/entryDataFactories/createEntryData.js

@@ -1,42 +1,122 @@
-"use strict";
+import { getDate } from "../../../utils/date.js";
+import { ROOT_FOLDER } from "../../../constants.js";
+import WebinyError from "@webiny/error";
+import { validateModelEntryDataOrThrow } from "../entryDataValidation.js";
+import { referenceFieldsMapping } from "../referenceFieldsMapping.js";
+import { createIdentifier, mdbid } from "@webiny/utils";
+import { STATUS_DRAFT, STATUS_PUBLISHED, STATUS_UNPUBLISHED } from "./statuses.js";
+import { getIdentity } from "../../../utils/identity.js";
+import { getState } from "./state.js";
+/**
+ * Used for some fields to convert their values.
+ */
+const convertDefaultValue = (field, value) => {
+  switch (field.type) {
+    case "boolean":
+      return Boolean(value);
+    case "number":
+      return Number(value);
+    default:
+      return value;
+  }
+};
+const getDefaultValue = field => {
+  const {
+    settings,
+    list
+  } = field;
+  if (settings && settings.defaultValue !== undefined) {
+    return convertDefaultValue(field, settings.defaultValue);
+  }
+  const {
+    predefinedValues
+  } = field;
+  if (!predefinedValues || !predefinedValues.enabled || Array.isArray(predefinedValues.values) === false) {
+    return undefined;
+  }
+  if (!list) {
+    const selectedValue = predefinedValues.values.find(value => {
+      return !!value.selected;
+    });
+    if (selectedValue) {
+      return convertDefaultValue(field, selectedValue.value);
+    }
+    return undefined;
+  }
+  return predefinedValues.values.filter(({
+    selected
+  }) => !!selected).map(({
+    value
+  }) => {
+    return convertDefaultValue(field, value);
+  });
+};
+const createEntryId = input => {
+  let entryId = mdbid();
+  if (input.id) {
+    if (input.id.match(/^([a-zA-Z0-9])([a-zA-Z0-9\-]+)([a-zA-Z0-9])$/) === null) {
+      throw new WebinyError("The provided ID is not valid. It must be a string which can be A-Z, a-z, 0-9, - and it cannot start or end with a -.", "INVALID_ID", {
+        id: input.id
+      });
+    }
+    entryId = input.id;
+  }
+  const version = 1;
+  return {
+    entryId,
+    version,
+    id: createIdentifier({
+      id: entryId,
+      version
+    })
+  };
+};
 
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createEntryData = void 0;
-var _date = require("../../../utils/date");
-var _constants = require("../../../constants");
-var _error = _interopRequireDefault(require("@webiny/error"));
-var _entryDataValidation = require("../entryDataValidation");
-var _referenceFieldsMapping = require("../referenceFieldsMapping");
-var _utils = require("@webiny/utils");
-var _statuses = require("./statuses");
-var _identity = require("../../../utils/identity");
-const createEntryData = async ({
+/**
+ * Cleans and adds default values to create input data.
+ */
+const cleanInputValues = (model, input) => {
+  return model.fields.reduce((acc, field) => {
+    /**
+     * This should never happen, but let's make it sure.
+     * The fix would be for the user to add the fieldId on the field definition.
+     */
+    if (!field.fieldId) {
+      throw new WebinyError("Field does not have an fieldId.", "MISSING_FIELD_ID", {
+        field
+      });
+    }
+    const key = field.fieldId;
+    const value = input[key];
+    /**
+     * We set the default value on create input if value is not defined.
+     */
+    acc[key] = value === undefined ? getDefaultValue(field) : value;
+    return acc;
+  }, {});
+};
+export const createEntryData = async ({
   model,
   rawInput,
   options,
   context,
   getIdentity: getSecurityIdentity,
-  getLocale,
   getTenant,
-  entriesPermissions
+  accessControl
 }) => {
-  const initialInput = mapAndCleanCreateInputData(model, rawInput);
-  await (0, _entryDataValidation.validateModelEntryDataOrThrow)({
+  const initialValues = cleanInputValues(model, rawInput.values || {});
+  await validateModelEntryDataOrThrow({
     context,
     model,
-    data: initialInput,
+    values: initialValues,
     skipValidators: options?.skipValidators
   });
-  const input = await (0, _referenceFieldsMapping.referenceFieldsMapping)({
+  const values = await referenceFieldsMapping({
     context,
     model,
-    input: initialInput,
+    values: initialValues,
     validateEntries: true
   });
-  const locale = getLocale();
   const {
     id,
     entryId,
@@ -55,20 +135,22 @@ const createEntryData = async ({
    * sure they have the required permissions and also that all the fields
    * are filled in correctly.
    */
-  const status = rawInput.status || _statuses.STATUS_DRAFT;
-  if (status !== _statuses.STATUS_DRAFT) {
-    if (status === _statuses.STATUS_PUBLISHED) {
-      await entriesPermissions.ensure({
+  const status = rawInput.status || STATUS_DRAFT;
+  if (status !== STATUS_DRAFT) {
+    if (status === STATUS_PUBLISHED) {
+      await accessControl.ensureCanAccessEntry({
+        model,
         pw: "p"
       });
-    } else if (status === _statuses.STATUS_UNPUBLISHED) {
+    } else if (status === STATUS_UNPUBLISHED) {
       // If setting the status other than draft, we have to check if the user has permissions to publish.
-      await entriesPermissions.ensure({
+      await accessControl.ensureCanAccessEntry({
+        model,
         pw: "u"
       });
     }
   }
-  const locked = status !== _statuses.STATUS_DRAFT;
+  const locked = status !== STATUS_DRAFT;
   let revisionLevelPublishingMetaFields = {
     revisionFirstPublishedOn: null,
     revisionLastPublishedOn: null,
@@ -81,147 +163,86 @@ const createEntryData = async ({
     firstPublishedBy: null,
     lastPublishedBy: null
   };
-  if (status === _statuses.STATUS_PUBLISHED) {
+  if (status === STATUS_PUBLISHED) {
     revisionLevelPublishingMetaFields = {
-      revisionFirstPublishedOn: (0, _date.getDate)(rawInput.revisionFirstPublishedOn, currentDateTime),
-      revisionLastPublishedOn: (0, _date.getDate)(rawInput.revisionLastPublishedOn, currentDateTime),
-      revisionFirstPublishedBy: (0, _identity.getIdentity)(rawInput.revisionFirstPublishedBy, currentIdentity),
-      revisionLastPublishedBy: (0, _identity.getIdentity)(rawInput.revisionLastPublishedBy, currentIdentity)
+      revisionFirstPublishedOn: getDate(rawInput.revisionFirstPublishedOn, currentDateTime),
+      revisionLastPublishedOn: getDate(rawInput.revisionLastPublishedOn, currentDateTime),
+      revisionFirstPublishedBy: getIdentity(rawInput.revisionFirstPublishedBy, currentIdentity),
+      revisionLastPublishedBy: getIdentity(rawInput.revisionLastPublishedBy, currentIdentity)
     };
     entryLevelPublishingMetaFields = {
-      firstPublishedOn: (0, _date.getDate)(rawInput.firstPublishedOn, currentDateTime),
-      lastPublishedOn: (0, _date.getDate)(rawInput.lastPublishedOn, currentDateTime),
-      firstPublishedBy: (0, _identity.getIdentity)(rawInput.firstPublishedBy, currentIdentity),
-      lastPublishedBy: (0, _identity.getIdentity)(rawInput.lastPublishedBy, currentIdentity)
+      firstPublishedOn: getDate(rawInput.firstPublishedOn, currentDateTime),
+      lastPublishedOn: getDate(rawInput.lastPublishedOn, currentDateTime),
+      firstPublishedBy: getIdentity(rawInput.firstPublishedBy, currentIdentity),
+      lastPublishedBy: getIdentity(rawInput.lastPublishedBy, currentIdentity)
     };
   }
   const entry = {
-    webinyVersion: context.WEBINY_VERSION,
     tenant: getTenant().id,
     entryId,
     id,
     modelId: model.modelId,
-    locale: locale.code,
     /**
      * Entry-level meta fields. 👇
      */
-    createdOn: (0, _date.getDate)(rawInput.createdOn, currentDateTime),
-    modifiedOn: (0, _date.getDate)(rawInput.modifiedOn, null),
-    savedOn: (0, _date.getDate)(rawInput.savedOn, currentDateTime),
-    createdBy: (0, _identity.getIdentity)(rawInput.createdBy, currentIdentity),
-    modifiedBy: (0, _identity.getIdentity)(rawInput.modifiedBy, null),
-    savedBy: (0, _identity.getIdentity)(rawInput.savedBy, currentIdentity),
+    createdOn: getDate(rawInput.createdOn, currentDateTime),
+    modifiedOn: getDate(rawInput.modifiedOn, null),
+    savedOn: getDate(rawInput.savedOn, currentDateTime),
+    deletedOn: getDate(rawInput.deletedOn, null),
+    restoredOn: getDate(rawInput.restoredOn, null),
+    createdBy: getIdentity(rawInput.createdBy, currentIdentity),
+    modifiedBy: getIdentity(rawInput.modifiedBy, null),
+    savedBy: getIdentity(rawInput.savedBy, currentIdentity),
+    deletedBy: getIdentity(rawInput.deletedBy, null),
+    restoredBy: getIdentity(rawInput.restoredBy, null),
     ...entryLevelPublishingMetaFields,
     /**
      * Revision-level meta fields. 👇
      */
-    revisionCreatedOn: (0, _date.getDate)(rawInput.revisionCreatedOn, currentDateTime),
-    revisionModifiedOn: (0, _date.getDate)(rawInput.revisionModifiedOn, null),
-    revisionSavedOn: (0, _date.getDate)(rawInput.revisionSavedOn, currentDateTime),
-    revisionCreatedBy: (0, _identity.getIdentity)(rawInput.revisionCreatedBy, currentIdentity),
-    revisionModifiedBy: (0, _identity.getIdentity)(rawInput.revisionModifiedBy, null),
-    revisionSavedBy: (0, _identity.getIdentity)(rawInput.revisionSavedBy, currentIdentity),
+    revisionCreatedOn: getDate(rawInput.revisionCreatedOn, currentDateTime),
+    revisionModifiedOn: getDate(rawInput.revisionModifiedOn, null),
+    revisionSavedOn: getDate(rawInput.revisionSavedOn, currentDateTime),
+    revisionDeletedOn: getDate(rawInput.revisionDeletedOn, null),
+    revisionRestoredOn: getDate(rawInput.revisionRestoredOn, null),
+    revisionCreatedBy: getIdentity(rawInput.revisionCreatedBy, currentIdentity),
+    revisionModifiedBy: getIdentity(rawInput.revisionModifiedBy, null),
+    revisionSavedBy: getIdentity(rawInput.revisionSavedBy, currentIdentity),
+    revisionDeletedBy: getIdentity(rawInput.revisionDeletedBy, null),
+    revisionRestoredBy: getIdentity(rawInput.revisionRestoredBy, null),
     ...revisionLevelPublishingMetaFields,
     version,
     status,
     locked,
-    values: input,
+    values,
     location: {
-      folderId: rawInput.wbyAco_location?.folderId || _constants.ROOT_FOLDER
-    }
-  };
-  return {
-    entry,
-    input
+      folderId: rawInput.location?.folderId || rawInput.wbyAco_location?.folderId || ROOT_FOLDER
+    },
+    state: getState({
+      input: rawInput
+    })
   };
-};
-
-/**
- * Used for some fields to convert their values.
- */
-exports.createEntryData = createEntryData;
-const convertDefaultValue = (field, value) => {
-  switch (field.type) {
-    case "boolean":
-      return Boolean(value);
-    case "number":
-      return Number(value);
-    default:
-      return value;
-  }
-};
-const getDefaultValue = field => {
-  const {
-    settings,
-    multipleValues
-  } = field;
-  if (settings && settings.defaultValue !== undefined) {
-    return convertDefaultValue(field, settings.defaultValue);
-  }
-  const {
-    predefinedValues
-  } = field;
-  if (!predefinedValues || !predefinedValues.enabled || Array.isArray(predefinedValues.values) === false) {
-    return undefined;
-  }
-  if (!multipleValues) {
-    const selectedValue = predefinedValues.values.find(value => {
-      return !!value.selected;
-    });
-    if (selectedValue) {
-      return convertDefaultValue(field, selectedValue.value);
-    }
-    return undefined;
-  }
-  return predefinedValues.values.filter(({
-    selected
-  }) => !!selected).map(({
-    value
-  }) => {
-    return convertDefaultValue(field, value);
-  });
-};
-
-/**
- * Cleans and adds default values to create input data.
- */
-const mapAndCleanCreateInputData = (model, input) => {
-  return model.fields.reduce((acc, field) => {
-    /**
-     * This should never happen, but let's make it sure.
-     * The fix would be for the user to add the fieldId on the field definition.
-     */
-    if (!field.fieldId) {
-      throw new _error.default("Field does not have an fieldId.", "MISSING_FIELD_ID", {
-        field
+  if (status !== STATUS_DRAFT) {
+    if (status === STATUS_PUBLISHED) {
+      await accessControl.ensureCanAccessEntry({
+        model,
+        entry,
+        pw: "p"
       });
-    }
-    const value = input[field.fieldId];
-    /**
-     * We set the default value on create input if value is not defined.
-     */
-    acc[field.fieldId] = value === undefined ? getDefaultValue(field) : value;
-    return acc;
-  }, {});
-};
-const createEntryId = input => {
-  let entryId = (0, _utils.mdbid)();
-  if (input.id) {
-    if (input.id.match(/^([a-zA-Z0-9])([a-zA-Z0-9\-]+)([a-zA-Z0-9])$/) === null) {
-      throw new _error.default("The provided ID is not valid. It must be a string which can be A-Z, a-z, 0-9, - and it cannot start or end with a -.", "INVALID_ID", {
-        id: input.id
+    } else if (status === STATUS_UNPUBLISHED) {
+      // If setting the status other than draft, we have to check if the user has permissions to publish.
+      await accessControl.ensureCanAccessEntry({
+        model,
+        entry,
+        pw: "u"
       });
     }
-    entryId = input.id;
   }
-  const version = 1;
   return {
-    entryId,
-    version,
-    id: (0, _utils.createIdentifier)({
-      id: entryId,
-      version
-    })
+    entry,
+    input: {
+      ...rawInput,
+      values: structuredClone(values)
+    }
   };
 };
 

package/crud/contentEntry/entryDataFactories/createEntryData.js.map

@@ -1 +1 @@
-{"version":3,"names":["_date","require","_constants","_error","_interopRequireDefault","_entryDataValidation","_referenceFieldsMapping","_utils","_statuses","_identity","createEntryData","model","rawInput","options","context","getIdentity","getSecurityIdentity","getLocale","getTenant","entriesPermissions","initialInput","mapAndCleanCreateInputData","validateModelEntryDataOrThrow","data","skipValidators","input","referenceFieldsMapping","validateEntries","locale","id","entryId","version","createEntryId","currentIdentity","currentDateTime","Date","status","STATUS_DRAFT","STATUS_PUBLISHED","ensure","pw","STATUS_UNPUBLISHED","locked","revisionLevelPublishingMetaFields","revisionFirstPublishedOn","revisionLastPublishedOn","revisionFirstPublishedBy","revisionLastPublishedBy","entryLevelPublishingMetaFields","firstPublishedOn","lastPublishedOn","firstPublishedBy","lastPublishedBy","getDate","entry","webinyVersion","WEBINY_VERSION","tenant","modelId","code","createdOn","modifiedOn","savedOn","createdBy","modifiedBy","savedBy","revisionCreatedOn","revisionModifiedOn","revisionSavedOn","revisionCreatedBy","revisionModifiedBy","revisionSavedBy","values","location","folderId","wbyAco_location","ROOT_FOLDER","exports","convertDefaultValue","field","value","type","Boolean","Number","getDefaultValue","settings","multipleValues","defaultValue","undefined","predefinedValues","enabled","Array","isArray","selectedValue","find","selected","filter","map","fields","reduce","acc","fieldId","WebinyError","mdbid","match","createIdentifier"],"sources":["createEntryData.ts"],"sourcesContent":["import {\n    CmsContext,\n    CmsEntry,\n    CmsModel,\n    CmsModelField,\n    CreateCmsEntryInput,\n    CreateCmsEntryOptionsInput\n} from \"~/types\";\nimport { getDate } from \"~/utils/date\";\nimport { ROOT_FOLDER } from \"~/constants\";\nimport WebinyError from \"@webiny/error\";\nimport { validateModelEntryDataOrThrow } from \"~/crud/contentEntry/entryDataValidation\";\nimport { referenceFieldsMapping } from \"~/crud/contentEntry/referenceFieldsMapping\";\nimport { createIdentifier, mdbid } from \"@webiny/utils\";\nimport { STATUS_DRAFT, STATUS_PUBLISHED, STATUS_UNPUBLISHED } from \"./statuses\";\nimport { I18NLocale } from \"@webiny/api-i18n/types\";\nimport { SecurityIdentity } from \"@webiny/api-security/types\";\nimport { Tenant } from \"@webiny/api-tenancy/types\";\nimport { EntriesPermissions } from \"~/utils/permissions/EntriesPermissions\";\nimport { getIdentity } from \"~/utils/identity\";\n\ntype DefaultValue = boolean | number | string | null;\n\ntype CreateEntryDataParams = {\n    model: CmsModel;\n    rawInput: CreateCmsEntryInput;\n    options?: CreateCmsEntryOptionsInput;\n    context: CmsContext;\n    getIdentity: () => SecurityIdentity;\n    getTenant: () => Tenant;\n    getLocale: () => I18NLocale;\n    entriesPermissions: EntriesPermissions;\n};\n\nexport const createEntryData = async ({\n    model,\n    rawInput,\n    options,\n    context,\n    getIdentity: getSecurityIdentity,\n    getLocale,\n    getTenant,\n    entriesPermissions\n}: CreateEntryDataParams): Promise<{\n    entry: CmsEntry;\n    input: Record<string, any>;\n}> => {\n    const initialInput = mapAndCleanCreateInputData(model, rawInput);\n\n    await validateModelEntryDataOrThrow({\n        context,\n        model,\n        data: initialInput,\n        skipValidators: options?.skipValidators\n    });\n\n    const input = await referenceFieldsMapping({\n        context,\n        model,\n        input: initialInput,\n        validateEntries: true\n    });\n\n    const locale = getLocale();\n\n    const { id, entryId, version } = createEntryId(rawInput);\n\n    /**\n     * There is a possibility that user sends an ID in the input, so we will use that one.\n     * There is no check if the ID is unique or not, that is up to the user.\n     */\n    const currentIdentity = getSecurityIdentity();\n    const currentDateTime = new Date();\n\n    /**\n     * Users can set the initial status of the entry. If so, we need to make\n     * sure they have the required permissions and also that all the fields\n     * are filled in correctly.\n     */\n    const status = rawInput.status || STATUS_DRAFT;\n    if (status !== STATUS_DRAFT) {\n        if (status === STATUS_PUBLISHED) {\n            await entriesPermissions.ensure({ pw: \"p\" });\n        } else if (status === STATUS_UNPUBLISHED) {\n            // If setting the status other than draft, we have to check if the user has permissions to publish.\n            await entriesPermissions.ensure({ pw: \"u\" });\n        }\n    }\n\n    const locked = status !== STATUS_DRAFT;\n\n    let revisionLevelPublishingMetaFields: Pick<\n        CmsEntry,\n        | \"revisionFirstPublishedOn\"\n        | \"revisionLastPublishedOn\"\n        | \"revisionFirstPublishedBy\"\n        | \"revisionLastPublishedBy\"\n    > = {\n        revisionFirstPublishedOn: null,\n        revisionLastPublishedOn: null,\n        revisionFirstPublishedBy: null,\n        revisionLastPublishedBy: null\n    };\n\n    let entryLevelPublishingMetaFields: Pick<\n        CmsEntry,\n        \"firstPublishedOn\" | \"lastPublishedOn\" | \"firstPublishedBy\" | \"lastPublishedBy\"\n    > = {\n        firstPublishedOn: null,\n        lastPublishedOn: null,\n        firstPublishedBy: null,\n        lastPublishedBy: null\n    };\n\n    if (status === STATUS_PUBLISHED) {\n        revisionLevelPublishingMetaFields = {\n            revisionFirstPublishedOn: getDate(rawInput.revisionFirstPublishedOn, currentDateTime),\n            revisionLastPublishedOn: getDate(rawInput.revisionLastPublishedOn, currentDateTime),\n            revisionFirstPublishedBy: getIdentity(\n                rawInput.revisionFirstPublishedBy,\n                currentIdentity\n            ),\n            revisionLastPublishedBy: getIdentity(rawInput.revisionLastPublishedBy, currentIdentity)\n        };\n\n        entryLevelPublishingMetaFields = {\n            firstPublishedOn: getDate(rawInput.firstPublishedOn, currentDateTime),\n            lastPublishedOn: getDate(rawInput.lastPublishedOn, currentDateTime),\n            firstPublishedBy: getIdentity(rawInput.firstPublishedBy, currentIdentity),\n            lastPublishedBy: getIdentity(rawInput.lastPublishedBy, currentIdentity)\n        };\n    }\n\n    const entry: CmsEntry = {\n        webinyVersion: context.WEBINY_VERSION,\n        tenant: getTenant().id,\n        entryId,\n        id,\n        modelId: model.modelId,\n        locale: locale.code,\n\n        /**\n         * Entry-level meta fields. 👇\n         */\n        createdOn: getDate(rawInput.createdOn, currentDateTime),\n        modifiedOn: getDate(rawInput.modifiedOn, null),\n        savedOn: getDate(rawInput.savedOn, currentDateTime),\n        createdBy: getIdentity(rawInput.createdBy, currentIdentity),\n        modifiedBy: getIdentity(rawInput.modifiedBy, null),\n        savedBy: getIdentity(rawInput.savedBy, currentIdentity),\n        ...entryLevelPublishingMetaFields,\n\n        /**\n         * Revision-level meta fields. 👇\n         */\n        revisionCreatedOn: getDate(rawInput.revisionCreatedOn, currentDateTime),\n        revisionModifiedOn: getDate(rawInput.revisionModifiedOn, null),\n        revisionSavedOn: getDate(rawInput.revisionSavedOn, currentDateTime),\n        revisionCreatedBy: getIdentity(rawInput.revisionCreatedBy, currentIdentity),\n        revisionModifiedBy: getIdentity(rawInput.revisionModifiedBy, null),\n        revisionSavedBy: getIdentity(rawInput.revisionSavedBy, currentIdentity),\n        ...revisionLevelPublishingMetaFields,\n\n        version,\n        status,\n        locked,\n        values: input,\n        location: {\n            folderId: rawInput.wbyAco_location?.folderId || ROOT_FOLDER\n        }\n    };\n\n    return { entry, input };\n};\n\n/**\n * Used for some fields to convert their values.\n */\nconst convertDefaultValue = (field: CmsModelField, value: DefaultValue): DefaultValue => {\n    switch (field.type) {\n        case \"boolean\":\n            return Boolean(value);\n        case \"number\":\n            return Number(value);\n        default:\n            return value;\n    }\n};\n\nconst getDefaultValue = (field: CmsModelField): (DefaultValue | DefaultValue[]) | undefined => {\n    const { settings, multipleValues } = field;\n    if (settings && settings.defaultValue !== undefined) {\n        return convertDefaultValue(field, settings.defaultValue);\n    }\n    const { predefinedValues } = field;\n    if (\n        !predefinedValues ||\n        !predefinedValues.enabled ||\n        Array.isArray(predefinedValues.values) === false\n    ) {\n        return undefined;\n    }\n    if (!multipleValues) {\n        const selectedValue = predefinedValues.values.find(value => {\n            return !!value.selected;\n        });\n        if (selectedValue) {\n            return convertDefaultValue(field, selectedValue.value);\n        }\n        return undefined;\n    }\n    return predefinedValues.values\n        .filter(({ selected }) => !!selected)\n        .map(({ value }) => {\n            return convertDefaultValue(field, value);\n        });\n};\n\n/**\n * Cleans and adds default values to create input data.\n */\nconst mapAndCleanCreateInputData = (model: CmsModel, input: CreateCmsEntryInput) => {\n    return model.fields.reduce<CreateCmsEntryInput>((acc, field) => {\n        /**\n         * This should never happen, but let's make it sure.\n         * The fix would be for the user to add the fieldId on the field definition.\n         */\n        if (!field.fieldId) {\n            throw new WebinyError(\"Field does not have an fieldId.\", \"MISSING_FIELD_ID\", {\n                field\n            });\n        }\n        const value = input[field.fieldId];\n        /**\n         * We set the default value on create input if value is not defined.\n         */\n        acc[field.fieldId] = value === undefined ? getDefaultValue(field) : value;\n        return acc;\n    }, {});\n};\n\nconst createEntryId = (input: CreateCmsEntryInput) => {\n    let entryId = mdbid();\n    if (input.id) {\n        if (input.id.match(/^([a-zA-Z0-9])([a-zA-Z0-9\\-]+)([a-zA-Z0-9])$/) === null) {\n            throw new WebinyError(\n                \"The provided ID is not valid. It must be a string which can be A-Z, a-z, 0-9, - and it cannot start or end with a -.\",\n                \"INVALID_ID\",\n                {\n                    id: input.id\n                }\n            );\n        }\n        entryId = input.id;\n    }\n    const version = 1;\n    return {\n        entryId,\n        version,\n        id: createIdentifier({\n            id: entryId,\n            version\n        })\n    };\n};\n"],"mappings":";;;;;;;AAQA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAC,sBAAA,CAAAH,OAAA;AACA,IAAAI,oBAAA,GAAAJ,OAAA;AACA,IAAAK,uBAAA,GAAAL,OAAA;AACA,IAAAM,MAAA,GAAAN,OAAA;AACA,IAAAO,SAAA,GAAAP,OAAA;AAKA,IAAAQ,SAAA,GAAAR,OAAA;AAeO,MAAMS,eAAe,GAAG,MAAAA,CAAO;EAClCC,KAAK;EACLC,QAAQ;EACRC,OAAO;EACPC,OAAO;EACPC,WAAW,EAAEC,mBAAmB;EAChCC,SAAS;EACTC,SAAS;EACTC;AACmB,CAAC,KAGlB;EACF,MAAMC,YAAY,GAAGC,0BAA0B,CAACV,KAAK,EAAEC,QAAQ,CAAC;EAEhE,MAAM,IAAAU,kDAA6B,EAAC;IAChCR,OAAO;IACPH,KAAK;IACLY,IAAI,EAAEH,YAAY;IAClBI,cAAc,EAAEX,OAAO,EAAEW;EAC7B,CAAC,CAAC;EAEF,MAAMC,KAAK,GAAG,MAAM,IAAAC,8CAAsB,EAAC;IACvCZ,OAAO;IACPH,KAAK;IACLc,KAAK,EAAEL,YAAY;IACnBO,eAAe,EAAE;EACrB,CAAC,CAAC;EAEF,MAAMC,MAAM,GAAGX,SAAS,CAAC,CAAC;EAE1B,MAAM;IAAEY,EAAE;IAAEC,OAAO;IAAEC;EAAQ,CAAC,GAAGC,aAAa,CAACpB,QAAQ,CAAC;;EAExD;AACJ;AACA;AACA;EACI,MAAMqB,eAAe,GAAGjB,mBAAmB,CAAC,CAAC;EAC7C,MAAMkB,eAAe,GAAG,IAAIC,IAAI,CAAC,CAAC;;EAElC;AACJ;AACA;AACA;AACA;EACI,MAAMC,MAAM,GAAGxB,QAAQ,CAACwB,MAAM,IAAIC,sBAAY;EAC9C,IAAID,MAAM,KAAKC,sBAAY,EAAE;IACzB,IAAID,MAAM,KAAKE,0BAAgB,EAAE;MAC7B,MAAMnB,kBAAkB,CAACoB,MAAM,CAAC;QAAEC,EAAE,EAAE;MAAI,CAAC,CAAC;IAChD,CAAC,MAAM,IAAIJ,MAAM,KAAKK,4BAAkB,EAAE;MACtC;MACA,MAAMtB,kBAAkB,CAACoB,MAAM,CAAC;QAAEC,EAAE,EAAE;MAAI,CAAC,CAAC;IAChD;EACJ;EAEA,MAAME,MAAM,GAAGN,MAAM,KAAKC,sBAAY;EAEtC,IAAIM,iCAMH,GAAG;IACAC,wBAAwB,EAAE,IAAI;IAC9BC,uBAAuB,EAAE,IAAI;IAC7BC,wBAAwB,EAAE,IAAI;IAC9BC,uBAAuB,EAAE;EAC7B,CAAC;EAED,IAAIC,8BAGH,GAAG;IACAC,gBAAgB,EAAE,IAAI;IACtBC,eAAe,EAAE,IAAI;IACrBC,gBAAgB,EAAE,IAAI;IACtBC,eAAe,EAAE;EACrB,CAAC;EAED,IAAIhB,MAAM,KAAKE,0BAAgB,EAAE;IAC7BK,iCAAiC,GAAG;MAChCC,wBAAwB,EAAE,IAAAS,aAAO,EAACzC,QAAQ,CAACgC,wBAAwB,EAAEV,eAAe,CAAC;MACrFW,uBAAuB,EAAE,IAAAQ,aAAO,EAACzC,QAAQ,CAACiC,uBAAuB,EAAEX,eAAe,CAAC;MACnFY,wBAAwB,EAAE,IAAA/B,qBAAW,EACjCH,QAAQ,CAACkC,wBAAwB,EACjCb,eACJ,CAAC;MACDc,uBAAuB,EAAE,IAAAhC,qBAAW,EAACH,QAAQ,CAACmC,uBAAuB,EAAEd,eAAe;IAC1F,CAAC;IAEDe,8BAA8B,GAAG;MAC7BC,gBAAgB,EAAE,IAAAI,aAAO,EAACzC,QAAQ,CAACqC,gBAAgB,EAAEf,eAAe,CAAC;MACrEgB,eAAe,EAAE,IAAAG,aAAO,EAACzC,QAAQ,CAACsC,eAAe,EAAEhB,eAAe,CAAC;MACnEiB,gBAAgB,EAAE,IAAApC,qBAAW,EAACH,QAAQ,CAACuC,gBAAgB,EAAElB,eAAe,CAAC;MACzEmB,eAAe,EAAE,IAAArC,qBAAW,EAACH,QAAQ,CAACwC,eAAe,EAAEnB,eAAe;IAC1E,CAAC;EACL;EAEA,MAAMqB,KAAe,GAAG;IACpBC,aAAa,EAAEzC,OAAO,CAAC0C,cAAc;IACrCC,MAAM,EAAEvC,SAAS,CAAC,CAAC,CAACW,EAAE;IACtBC,OAAO;IACPD,EAAE;IACF6B,OAAO,EAAE/C,KAAK,CAAC+C,OAAO;IACtB9B,MAAM,EAAEA,MAAM,CAAC+B,IAAI;IAEnB;AACR;AACA;IACQC,SAAS,EAAE,IAAAP,aAAO,EAACzC,QAAQ,CAACgD,SAAS,EAAE1B,eAAe,CAAC;IACvD2B,UAAU,EAAE,IAAAR,aAAO,EAACzC,QAAQ,CAACiD,UAAU,EAAE,IAAI,CAAC;IAC9CC,OAAO,EAAE,IAAAT,aAAO,EAACzC,QAAQ,CAACkD,OAAO,EAAE5B,eAAe,CAAC;IACnD6B,SAAS,EAAE,IAAAhD,qBAAW,EAACH,QAAQ,CAACmD,SAAS,EAAE9B,eAAe,CAAC;IAC3D+B,UAAU,EAAE,IAAAjD,qBAAW,EAACH,QAAQ,CAACoD,UAAU,EAAE,IAAI,CAAC;IAClDC,OAAO,EAAE,IAAAlD,qBAAW,EAACH,QAAQ,CAACqD,OAAO,EAAEhC,eAAe,CAAC;IACvD,GAAGe,8BAA8B;IAEjC;AACR;AACA;IACQkB,iBAAiB,EAAE,IAAAb,aAAO,EAACzC,QAAQ,CAACsD,iBAAiB,EAAEhC,eAAe,CAAC;IACvEiC,kBAAkB,EAAE,IAAAd,aAAO,EAACzC,QAAQ,CAACuD,kBAAkB,EAAE,IAAI,CAAC;IAC9DC,eAAe,EAAE,IAAAf,aAAO,EAACzC,QAAQ,CAACwD,eAAe,EAAElC,eAAe,CAAC;IACnEmC,iBAAiB,EAAE,IAAAtD,qBAAW,EAACH,QAAQ,CAACyD,iBAAiB,EAAEpC,eAAe,CAAC;IAC3EqC,kBAAkB,EAAE,IAAAvD,qBAAW,EAACH,QAAQ,CAAC0D,kBAAkB,EAAE,IAAI,CAAC;IAClEC,eAAe,EAAE,IAAAxD,qBAAW,EAACH,QAAQ,CAAC2D,eAAe,EAAEtC,eAAe,CAAC;IACvE,GAAGU,iCAAiC;IAEpCZ,OAAO;IACPK,MAAM;IACNM,MAAM;IACN8B,MAAM,EAAE/C,KAAK;IACbgD,QAAQ,EAAE;MACNC,QAAQ,EAAE9D,QAAQ,CAAC+D,eAAe,EAAED,QAAQ,IAAIE;IACpD;EACJ,CAAC;EAED,OAAO;IAAEtB,KAAK;IAAE7B;EAAM,CAAC;AAC3B,CAAC;;AAED;AACA;AACA;AAFAoD,OAAA,CAAAnE,eAAA,GAAAA,eAAA;AAGA,MAAMoE,mBAAmB,GAAGA,CAACC,KAAoB,EAAEC,KAAmB,KAAmB;EACrF,QAAQD,KAAK,CAACE,IAAI;IACd,KAAK,SAAS;MACV,OAAOC,OAAO,CAACF,KAAK,CAAC;IACzB,KAAK,QAAQ;MACT,OAAOG,MAAM,CAACH,KAAK,CAAC;IACxB;MACI,OAAOA,KAAK;EACpB;AACJ,CAAC;AAED,MAAMI,eAAe,GAAIL,KAAoB,IAAkD;EAC3F,MAAM;IAAEM,QAAQ;IAAEC;EAAe,CAAC,GAAGP,KAAK;EAC1C,IAAIM,QAAQ,IAAIA,QAAQ,CAACE,YAAY,KAAKC,SAAS,EAAE;IACjD,OAAOV,mBAAmB,CAACC,KAAK,EAAEM,QAAQ,CAACE,YAAY,CAAC;EAC5D;EACA,MAAM;IAAEE;EAAiB,CAAC,GAAGV,KAAK;EAClC,IACI,CAACU,gBAAgB,IACjB,CAACA,gBAAgB,CAACC,OAAO,IACzBC,KAAK,CAACC,OAAO,CAACH,gBAAgB,CAACjB,MAAM,CAAC,KAAK,KAAK,EAClD;IACE,OAAOgB,SAAS;EACpB;EACA,IAAI,CAACF,cAAc,EAAE;IACjB,MAAMO,aAAa,GAAGJ,gBAAgB,CAACjB,MAAM,CAACsB,IAAI,CAACd,KAAK,IAAI;MACxD,OAAO,CAAC,CAACA,KAAK,CAACe,QAAQ;IAC3B,CAAC,CAAC;IACF,IAAIF,aAAa,EAAE;MACf,OAAOf,mBAAmB,CAACC,KAAK,EAAEc,aAAa,CAACb,KAAK,CAAC;IAC1D;IACA,OAAOQ,SAAS;EACpB;EACA,OAAOC,gBAAgB,CAACjB,MAAM,CACzBwB,MAAM,CAAC,CAAC;IAAED;EAAS,CAAC,KAAK,CAAC,CAACA,QAAQ,CAAC,CACpCE,GAAG,CAAC,CAAC;IAAEjB;EAAM,CAAC,KAAK;IAChB,OAAOF,mBAAmB,CAACC,KAAK,EAAEC,KAAK,CAAC;EAC5C,CAAC,CAAC;AACV,CAAC;;AAED;AACA;AACA;AACA,MAAM3D,0BAA0B,GAAGA,CAACV,KAAe,EAAEc,KAA0B,KAAK;EAChF,OAAOd,KAAK,CAACuF,MAAM,CAACC,MAAM,CAAsB,CAACC,GAAG,EAAErB,KAAK,KAAK;IAC5D;AACR;AACA;AACA;IACQ,IAAI,CAACA,KAAK,CAACsB,OAAO,EAAE;MAChB,MAAM,IAAIC,cAAW,CAAC,iCAAiC,EAAE,kBAAkB,EAAE;QACzEvB;MACJ,CAAC,CAAC;IACN;IACA,MAAMC,KAAK,GAAGvD,KAAK,CAACsD,KAAK,CAACsB,OAAO,CAAC;IAClC;AACR;AACA;IACQD,GAAG,CAACrB,KAAK,CAACsB,OAAO,CAAC,GAAGrB,KAAK,KAAKQ,SAAS,GAAGJ,eAAe,CAACL,KAAK,CAAC,GAAGC,KAAK;IACzE,OAAOoB,GAAG;EACd,CAAC,EAAE,CAAC,CAAC,CAAC;AACV,CAAC;AAED,MAAMpE,aAAa,GAAIP,KAA0B,IAAK;EAClD,IAAIK,OAAO,GAAG,IAAAyE,YAAK,EAAC,CAAC;EACrB,IAAI9E,KAAK,CAACI,EAAE,EAAE;IACV,IAAIJ,KAAK,CAACI,EAAE,CAAC2E,KAAK,CAAC,8CAA8C,CAAC,KAAK,IAAI,EAAE;MACzE,MAAM,IAAIF,cAAW,CACjB,sHAAsH,EACtH,YAAY,EACZ;QACIzE,EAAE,EAAEJ,KAAK,CAACI;MACd,CACJ,CAAC;IACL;IACAC,OAAO,GAAGL,KAAK,CAACI,EAAE;EACtB;EACA,MAAME,OAAO,GAAG,CAAC;EACjB,OAAO;IACHD,OAAO;IACPC,OAAO;IACPF,EAAE,EAAE,IAAA4E,uBAAgB,EAAC;MACjB5E,EAAE,EAAEC,OAAO;MACXC;IACJ,CAAC;EACL,CAAC;AACL,CAAC"}
+{"version":3,"names":["getDate","ROOT_FOLDER","WebinyError","validateModelEntryDataOrThrow","referenceFieldsMapping","createIdentifier","mdbid","STATUS_DRAFT","STATUS_PUBLISHED","STATUS_UNPUBLISHED","getIdentity","getState","convertDefaultValue","field","value","type","Boolean","Number","getDefaultValue","settings","list","defaultValue","undefined","predefinedValues","enabled","Array","isArray","values","selectedValue","find","selected","filter","map","createEntryId","input","entryId","id","match","version","cleanInputValues","model","fields","reduce","acc","fieldId","key","createEntryData","rawInput","options","context","getSecurityIdentity","getTenant","accessControl","initialValues","skipValidators","validateEntries","currentIdentity","currentDateTime","Date","status","ensureCanAccessEntry","pw","locked","revisionLevelPublishingMetaFields","revisionFirstPublishedOn","revisionLastPublishedOn","revisionFirstPublishedBy","revisionLastPublishedBy","entryLevelPublishingMetaFields","firstPublishedOn","lastPublishedOn","firstPublishedBy","lastPublishedBy","entry","tenant","modelId","createdOn","modifiedOn","savedOn","deletedOn","restoredOn","createdBy","modifiedBy","savedBy","deletedBy","restoredBy","revisionCreatedOn","revisionModifiedOn","revisionSavedOn","revisionDeletedOn","revisionRestoredOn","revisionCreatedBy","revisionModifiedBy","revisionSavedBy","revisionDeletedBy","revisionRestoredBy","location","folderId","wbyAco_location","state","structuredClone"],"sources":["createEntryData.ts"],"sourcesContent":["import type {\n    CmsContext,\n    CmsEntry,\n    CmsEntryValues,\n    CmsModel,\n    CmsModelField,\n    CreateCmsEntryInput,\n    CreateCmsEntryOptionsInput\n} from \"~/types/index.js\";\nimport { getDate } from \"~/utils/date.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport WebinyError from \"@webiny/error\";\nimport { validateModelEntryDataOrThrow } from \"~/crud/contentEntry/entryDataValidation.js\";\nimport { referenceFieldsMapping } from \"~/crud/contentEntry/referenceFieldsMapping.js\";\nimport { createIdentifier, mdbid } from \"@webiny/utils\";\nimport { STATUS_DRAFT, STATUS_PUBLISHED, STATUS_UNPUBLISHED } from \"./statuses.js\";\nimport { getIdentity } from \"~/utils/identity.js\";\nimport type { AccessControl } from \"~/crud/AccessControl/AccessControl.js\";\nimport { getState } from \"./state.js\";\nimport type { SecurityIdentity } from \"@webiny/api-core/types/security.js\";\nimport type { Tenant } from \"@webiny/api-core/types/tenancy.js\";\n\ntype DefaultValue = boolean | number | string | null;\n\n/**\n * Used for some fields to convert their values.\n */\nconst convertDefaultValue = (field: CmsModelField, value: DefaultValue): DefaultValue => {\n    switch (field.type) {\n        case \"boolean\":\n            return Boolean(value);\n        case \"number\":\n            return Number(value);\n        default:\n            return value;\n    }\n};\n\nconst getDefaultValue = (field: CmsModelField): (DefaultValue | DefaultValue[]) | undefined => {\n    const { settings, list } = field;\n    if (settings && settings.defaultValue !== undefined) {\n        return convertDefaultValue(field, settings.defaultValue);\n    }\n    const { predefinedValues } = field;\n    if (\n        !predefinedValues ||\n        !predefinedValues.enabled ||\n        Array.isArray(predefinedValues.values) === false\n    ) {\n        return undefined;\n    }\n    if (!list) {\n        const selectedValue = predefinedValues.values.find(value => {\n            return !!value.selected;\n        });\n        if (selectedValue) {\n            return convertDefaultValue(field, selectedValue.value);\n        }\n        return undefined;\n    }\n    return predefinedValues.values\n        .filter(({ selected }) => !!selected)\n        .map(({ value }) => {\n            return convertDefaultValue(field, value);\n        });\n};\n\nconst createEntryId = (input: CreateCmsEntryInput) => {\n    let entryId = mdbid();\n    if (input.id) {\n        if (input.id.match(/^([a-zA-Z0-9])([a-zA-Z0-9\\-]+)([a-zA-Z0-9])$/) === null) {\n            throw new WebinyError(\n                \"The provided ID is not valid. It must be a string which can be A-Z, a-z, 0-9, - and it cannot start or end with a -.\",\n                \"INVALID_ID\",\n                {\n                    id: input.id\n                }\n            );\n        }\n        entryId = input.id;\n    }\n    const version = 1;\n    return {\n        entryId,\n        version,\n        id: createIdentifier({\n            id: entryId,\n            version\n        })\n    };\n};\n\n/**\n * Cleans and adds default values to create input data.\n */\nconst cleanInputValues = <TValues extends CmsEntryValues = CmsEntryValues>(\n    model: CmsModel,\n    input: TValues\n) => {\n    return model.fields.reduce<TValues>((acc, field) => {\n        /**\n         * This should never happen, but let's make it sure.\n         * The fix would be for the user to add the fieldId on the field definition.\n         */\n        if (!field.fieldId) {\n            throw new WebinyError(\"Field does not have an fieldId.\", \"MISSING_FIELD_ID\", {\n                field\n            });\n        }\n        const key = field.fieldId as keyof TValues;\n        const value = input[key] as TValues[keyof TValues];\n        /**\n         * We set the default value on create input if value is not defined.\n         */\n        acc[key] = value === undefined ? (getDefaultValue(field) as TValues[keyof TValues]) : value;\n        return acc;\n    }, {} as TValues);\n};\n\ninterface CreateEntryDataParams<TValues extends CmsEntryValues = CmsEntryValues> {\n    model: CmsModel;\n    rawInput: CreateCmsEntryInput<TValues>;\n    options?: CreateCmsEntryOptionsInput;\n    context: CmsContext;\n    getIdentity: () => SecurityIdentity;\n    getTenant: () => Tenant;\n    accessControl: AccessControl;\n}\n\ninterface ICreateEntryDataResponse<TValues extends CmsEntryValues = CmsEntryValues> {\n    entry: CmsEntry<TValues>;\n    input: CreateCmsEntryInput<TValues>;\n}\n\nexport const createEntryData = async <TValues extends CmsEntryValues = CmsEntryValues>({\n    model,\n    rawInput,\n    options,\n    context,\n    getIdentity: getSecurityIdentity,\n    getTenant,\n    accessControl\n}: CreateEntryDataParams<TValues>): Promise<ICreateEntryDataResponse<TValues>> => {\n    const initialValues = cleanInputValues<TValues>(model, rawInput.values || ({} as TValues));\n\n    await validateModelEntryDataOrThrow({\n        context,\n        model,\n        values: initialValues,\n        skipValidators: options?.skipValidators\n    });\n\n    const values = await referenceFieldsMapping<TValues>({\n        context,\n        model,\n        values: initialValues,\n        validateEntries: true\n    });\n\n    const { id, entryId, version } = createEntryId(rawInput);\n\n    /**\n     * There is a possibility that user sends an ID in the input, so we will use that one.\n     * There is no check if the ID is unique or not, that is up to the user.\n     */\n    const currentIdentity = getSecurityIdentity();\n    const currentDateTime = new Date();\n\n    /**\n     * Users can set the initial status of the entry. If so, we need to make\n     * sure they have the required permissions and also that all the fields\n     * are filled in correctly.\n     */\n    const status = rawInput.status || STATUS_DRAFT;\n    if (status !== STATUS_DRAFT) {\n        if (status === STATUS_PUBLISHED) {\n            await accessControl.ensureCanAccessEntry({ model, pw: \"p\" });\n        } else if (status === STATUS_UNPUBLISHED) {\n            // If setting the status other than draft, we have to check if the user has permissions to publish.\n            await accessControl.ensureCanAccessEntry({ model, pw: \"u\" });\n        }\n    }\n\n    const locked = status !== STATUS_DRAFT;\n\n    let revisionLevelPublishingMetaFields: Pick<\n        CmsEntry,\n        | \"revisionFirstPublishedOn\"\n        | \"revisionLastPublishedOn\"\n        | \"revisionFirstPublishedBy\"\n        | \"revisionLastPublishedBy\"\n    > = {\n        revisionFirstPublishedOn: null,\n        revisionLastPublishedOn: null,\n        revisionFirstPublishedBy: null,\n        revisionLastPublishedBy: null\n    };\n\n    let entryLevelPublishingMetaFields: Pick<\n        CmsEntry,\n        \"firstPublishedOn\" | \"lastPublishedOn\" | \"firstPublishedBy\" | \"lastPublishedBy\"\n    > = {\n        firstPublishedOn: null,\n        lastPublishedOn: null,\n        firstPublishedBy: null,\n        lastPublishedBy: null\n    };\n\n    if (status === STATUS_PUBLISHED) {\n        revisionLevelPublishingMetaFields = {\n            revisionFirstPublishedOn: getDate(rawInput.revisionFirstPublishedOn, currentDateTime),\n            revisionLastPublishedOn: getDate(rawInput.revisionLastPublishedOn, currentDateTime),\n            revisionFirstPublishedBy: getIdentity(\n                rawInput.revisionFirstPublishedBy,\n                currentIdentity\n            ),\n            revisionLastPublishedBy: getIdentity(rawInput.revisionLastPublishedBy, currentIdentity)\n        };\n\n        entryLevelPublishingMetaFields = {\n            firstPublishedOn: getDate(rawInput.firstPublishedOn, currentDateTime),\n            lastPublishedOn: getDate(rawInput.lastPublishedOn, currentDateTime),\n            firstPublishedBy: getIdentity(rawInput.firstPublishedBy, currentIdentity),\n            lastPublishedBy: getIdentity(rawInput.lastPublishedBy, currentIdentity)\n        };\n    }\n\n    const entry: CmsEntry<TValues> = {\n        tenant: getTenant().id,\n        entryId,\n        id,\n        modelId: model.modelId,\n\n        /**\n         * Entry-level meta fields. 👇\n         */\n        createdOn: getDate(rawInput.createdOn, currentDateTime),\n        modifiedOn: getDate(rawInput.modifiedOn, null),\n        savedOn: getDate(rawInput.savedOn, currentDateTime),\n        deletedOn: getDate(rawInput.deletedOn, null),\n        restoredOn: getDate(rawInput.restoredOn, null),\n        createdBy: getIdentity(rawInput.createdBy, currentIdentity)!,\n        modifiedBy: getIdentity(rawInput.modifiedBy, null),\n        savedBy: getIdentity(rawInput.savedBy, currentIdentity)!,\n        deletedBy: getIdentity(rawInput.deletedBy, null),\n        restoredBy: getIdentity(rawInput.restoredBy, null),\n        ...entryLevelPublishingMetaFields,\n\n        /**\n         * Revision-level meta fields. 👇\n         */\n        revisionCreatedOn: getDate(rawInput.revisionCreatedOn, currentDateTime),\n        revisionModifiedOn: getDate(rawInput.revisionModifiedOn, null),\n        revisionSavedOn: getDate(rawInput.revisionSavedOn, currentDateTime),\n        revisionDeletedOn: getDate(rawInput.revisionDeletedOn, null),\n        revisionRestoredOn: getDate(rawInput.revisionRestoredOn, null),\n        revisionCreatedBy: getIdentity(rawInput.revisionCreatedBy, currentIdentity)!,\n        revisionModifiedBy: getIdentity(rawInput.revisionModifiedBy, null),\n        revisionSavedBy: getIdentity(rawInput.revisionSavedBy, currentIdentity)!,\n        revisionDeletedBy: getIdentity(rawInput.revisionDeletedBy, null),\n        revisionRestoredBy: getIdentity(rawInput.revisionRestoredBy, null),\n        ...revisionLevelPublishingMetaFields,\n\n        version,\n        status,\n        locked,\n        values,\n        location: {\n            folderId:\n                rawInput.location?.folderId || rawInput.wbyAco_location?.folderId || ROOT_FOLDER\n        },\n        state: getState({\n            input: rawInput\n        })\n    };\n\n    if (status !== STATUS_DRAFT) {\n        if (status === STATUS_PUBLISHED) {\n            await accessControl.ensureCanAccessEntry({ model, entry, pw: \"p\" });\n        } else if (status === STATUS_UNPUBLISHED) {\n            // If setting the status other than draft, we have to check if the user has permissions to publish.\n            await accessControl.ensureCanAccessEntry({ model, entry, pw: \"u\" });\n        }\n    }\n\n    return {\n        entry,\n        input: {\n            ...rawInput,\n            values: structuredClone(values)\n        }\n    };\n};\n"],"mappings":"AASA,SAASA,OAAO;AAChB,SAASC,WAAW;AACpB,OAAOC,WAAW,MAAM,eAAe;AACvC,SAASC,6BAA6B;AACtC,SAASC,sBAAsB;AAC/B,SAASC,gBAAgB,EAAEC,KAAK,QAAQ,eAAe;AACvD,SAASC,YAAY,EAAEC,gBAAgB,EAAEC,kBAAkB;AAC3D,SAASC,WAAW;AAEpB,SAASC,QAAQ;AAMjB;AACA;AACA;AACA,MAAMC,mBAAmB,GAAGA,CAACC,KAAoB,EAAEC,KAAmB,KAAmB;EACrF,QAAQD,KAAK,CAACE,IAAI;IACd,KAAK,SAAS;MACV,OAAOC,OAAO,CAACF,KAAK,CAAC;IACzB,KAAK,QAAQ;MACT,OAAOG,MAAM,CAACH,KAAK,CAAC;IACxB;MACI,OAAOA,KAAK;EACpB;AACJ,CAAC;AAED,MAAMI,eAAe,GAAIL,KAAoB,IAAkD;EAC3F,MAAM;IAAEM,QAAQ;IAAEC;EAAK,CAAC,GAAGP,KAAK;EAChC,IAAIM,QAAQ,IAAIA,QAAQ,CAACE,YAAY,KAAKC,SAAS,EAAE;IACjD,OAAOV,mBAAmB,CAACC,KAAK,EAAEM,QAAQ,CAACE,YAAY,CAAC;EAC5D;EACA,MAAM;IAAEE;EAAiB,CAAC,GAAGV,KAAK;EAClC,IACI,CAACU,gBAAgB,IACjB,CAACA,gBAAgB,CAACC,OAAO,IACzBC,KAAK,CAACC,OAAO,CAACH,gBAAgB,CAACI,MAAM,CAAC,KAAK,KAAK,EAClD;IACE,OAAOL,SAAS;EACpB;EACA,IAAI,CAACF,IAAI,EAAE;IACP,MAAMQ,aAAa,GAAGL,gBAAgB,CAACI,MAAM,CAACE,IAAI,CAACf,KAAK,IAAI;MACxD,OAAO,CAAC,CAACA,KAAK,CAACgB,QAAQ;IAC3B,CAAC,CAAC;IACF,IAAIF,aAAa,EAAE;MACf,OAAOhB,mBAAmB,CAACC,KAAK,EAAEe,aAAa,CAACd,KAAK,CAAC;IAC1D;IACA,OAAOQ,SAAS;EACpB;EACA,OAAOC,gBAAgB,CAACI,MAAM,CACzBI,MAAM,CAAC,CAAC;IAAED;EAAS,CAAC,KAAK,CAAC,CAACA,QAAQ,CAAC,CACpCE,GAAG,CAAC,CAAC;IAAElB;EAAM,CAAC,KAAK;IAChB,OAAOF,mBAAmB,CAACC,KAAK,EAAEC,KAAK,CAAC;EAC5C,CAAC,CAAC;AACV,CAAC;AAED,MAAMmB,aAAa,GAAIC,KAA0B,IAAK;EAClD,IAAIC,OAAO,GAAG7B,KAAK,CAAC,CAAC;EACrB,IAAI4B,KAAK,CAACE,EAAE,EAAE;IACV,IAAIF,KAAK,CAACE,EAAE,CAACC,KAAK,CAAC,8CAA8C,CAAC,KAAK,IAAI,EAAE;MACzE,MAAM,IAAInC,WAAW,CACjB,sHAAsH,EACtH,YAAY,EACZ;QACIkC,EAAE,EAAEF,KAAK,CAACE;MACd,CACJ,CAAC;IACL;IACAD,OAAO,GAAGD,KAAK,CAACE,EAAE;EACtB;EACA,MAAME,OAAO,GAAG,CAAC;EACjB,OAAO;IACHH,OAAO;IACPG,OAAO;IACPF,EAAE,EAAE/B,gBAAgB,CAAC;MACjB+B,EAAE,EAAED,OAAO;MACXG;IACJ,CAAC;EACL,CAAC;AACL,CAAC;;AAED;AACA;AACA;AACA,MAAMC,gBAAgB,GAAGA,CACrBC,KAAe,EACfN,KAAc,KACb;EACD,OAAOM,KAAK,CAACC,MAAM,CAACC,MAAM,CAAU,CAACC,GAAG,EAAE9B,KAAK,KAAK;IAChD;AACR;AACA;AACA;IACQ,IAAI,CAACA,KAAK,CAAC+B,OAAO,EAAE;MAChB,MAAM,IAAI1C,WAAW,CAAC,iCAAiC,EAAE,kBAAkB,EAAE;QACzEW;MACJ,CAAC,CAAC;IACN;IACA,MAAMgC,GAAG,GAAGhC,KAAK,CAAC+B,OAAwB;IAC1C,MAAM9B,KAAK,GAAGoB,KAAK,CAACW,GAAG,CAA2B;IAClD;AACR;AACA;IACQF,GAAG,CAACE,GAAG,CAAC,GAAG/B,KAAK,KAAKQ,SAAS,GAAIJ,eAAe,CAACL,KAAK,CAAC,GAA8BC,KAAK;IAC3F,OAAO6B,GAAG;EACd,CAAC,EAAE,CAAC,CAAY,CAAC;AACrB,CAAC;AAiBD,OAAO,MAAMG,eAAe,GAAG,MAAAA,CAAwD;EACnFN,KAAK;EACLO,QAAQ;EACRC,OAAO;EACPC,OAAO;EACPvC,WAAW,EAAEwC,mBAAmB;EAChCC,SAAS;EACTC;AAC4B,CAAC,KAAiD;EAC9E,MAAMC,aAAa,GAAGd,gBAAgB,CAAUC,KAAK,EAAEO,QAAQ,CAACpB,MAAM,IAAK,CAAC,CAAa,CAAC;EAE1F,MAAMxB,6BAA6B,CAAC;IAChC8C,OAAO;IACPT,KAAK;IACLb,MAAM,EAAE0B,aAAa;IACrBC,cAAc,EAAEN,OAAO,EAAEM;EAC7B,CAAC,CAAC;EAEF,MAAM3B,MAAM,GAAG,MAAMvB,sBAAsB,CAAU;IACjD6C,OAAO;IACPT,KAAK;IACLb,MAAM,EAAE0B,aAAa;IACrBE,eAAe,EAAE;EACrB,CAAC,CAAC;EAEF,MAAM;IAAEnB,EAAE;IAAED,OAAO;IAAEG;EAAQ,CAAC,GAAGL,aAAa,CAACc,QAAQ,CAAC;;EAExD;AACJ;AACA;AACA;EACI,MAAMS,eAAe,GAAGN,mBAAmB,CAAC,CAAC;EAC7C,MAAMO,eAAe,GAAG,IAAIC,IAAI,CAAC,CAAC;;EAElC;AACJ;AACA;AACA;AACA;EACI,MAAMC,MAAM,GAAGZ,QAAQ,CAACY,MAAM,IAAIpD,YAAY;EAC9C,IAAIoD,MAAM,KAAKpD,YAAY,EAAE;IACzB,IAAIoD,MAAM,KAAKnD,gBAAgB,EAAE;MAC7B,MAAM4C,aAAa,CAACQ,oBAAoB,CAAC;QAAEpB,KAAK;QAAEqB,EAAE,EAAE;MAAI,CAAC,CAAC;IAChE,CAAC,MAAM,IAAIF,MAAM,KAAKlD,kBAAkB,EAAE;MACtC;MACA,MAAM2C,aAAa,CAACQ,oBAAoB,CAAC;QAAEpB,KAAK;QAAEqB,EAAE,EAAE;MAAI,CAAC,CAAC;IAChE;EACJ;EAEA,MAAMC,MAAM,GAAGH,MAAM,KAAKpD,YAAY;EAEtC,IAAIwD,iCAMH,GAAG;IACAC,wBAAwB,EAAE,IAAI;IAC9BC,uBAAuB,EAAE,IAAI;IAC7BC,wBAAwB,EAAE,IAAI;IAC9BC,uBAAuB,EAAE;EAC7B,CAAC;EAED,IAAIC,8BAGH,GAAG;IACAC,gBAAgB,EAAE,IAAI;IACtBC,eAAe,EAAE,IAAI;IACrBC,gBAAgB,EAAE,IAAI;IACtBC,eAAe,EAAE;EACrB,CAAC;EAED,IAAIb,MAAM,KAAKnD,gBAAgB,EAAE;IAC7BuD,iCAAiC,GAAG;MAChCC,wBAAwB,EAAEhE,OAAO,CAAC+C,QAAQ,CAACiB,wBAAwB,EAAEP,eAAe,CAAC;MACrFQ,uBAAuB,EAAEjE,OAAO,CAAC+C,QAAQ,CAACkB,uBAAuB,EAAER,eAAe,CAAC;MACnFS,wBAAwB,EAAExD,WAAW,CACjCqC,QAAQ,CAACmB,wBAAwB,EACjCV,eACJ,CAAC;MACDW,uBAAuB,EAAEzD,WAAW,CAACqC,QAAQ,CAACoB,uBAAuB,EAAEX,eAAe;IAC1F,CAAC;IAEDY,8BAA8B,GAAG;MAC7BC,gBAAgB,EAAErE,OAAO,CAAC+C,QAAQ,CAACsB,gBAAgB,EAAEZ,eAAe,CAAC;MACrEa,eAAe,EAAEtE,OAAO,CAAC+C,QAAQ,CAACuB,eAAe,EAAEb,eAAe,CAAC;MACnEc,gBAAgB,EAAE7D,WAAW,CAACqC,QAAQ,CAACwB,gBAAgB,EAAEf,eAAe,CAAC;MACzEgB,eAAe,EAAE9D,WAAW,CAACqC,QAAQ,CAACyB,eAAe,EAAEhB,eAAe;IAC1E,CAAC;EACL;EAEA,MAAMiB,KAAwB,GAAG;IAC7BC,MAAM,EAAEvB,SAAS,CAAC,CAAC,CAACf,EAAE;IACtBD,OAAO;IACPC,EAAE;IACFuC,OAAO,EAAEnC,KAAK,CAACmC,OAAO;IAEtB;AACR;AACA;IACQC,SAAS,EAAE5E,OAAO,CAAC+C,QAAQ,CAAC6B,SAAS,EAAEnB,eAAe,CAAC;IACvDoB,UAAU,EAAE7E,OAAO,CAAC+C,QAAQ,CAAC8B,UAAU,EAAE,IAAI,CAAC;IAC9CC,OAAO,EAAE9E,OAAO,CAAC+C,QAAQ,CAAC+B,OAAO,EAAErB,eAAe,CAAC;IACnDsB,SAAS,EAAE/E,OAAO,CAAC+C,QAAQ,CAACgC,SAAS,EAAE,IAAI,CAAC;IAC5CC,UAAU,EAAEhF,OAAO,CAAC+C,QAAQ,CAACiC,UAAU,EAAE,IAAI,CAAC;IAC9CC,SAAS,EAAEvE,WAAW,CAACqC,QAAQ,CAACkC,SAAS,EAAEzB,eAAe,CAAE;IAC5D0B,UAAU,EAAExE,WAAW,CAACqC,QAAQ,CAACmC,UAAU,EAAE,IAAI,CAAC;IAClDC,OAAO,EAAEzE,WAAW,CAACqC,QAAQ,CAACoC,OAAO,EAAE3B,eAAe,CAAE;IACxD4B,SAAS,EAAE1E,WAAW,CAACqC,QAAQ,CAACqC,SAAS,EAAE,IAAI,CAAC;IAChDC,UAAU,EAAE3E,WAAW,CAACqC,QAAQ,CAACsC,UAAU,EAAE,IAAI,CAAC;IAClD,GAAGjB,8BAA8B;IAEjC;AACR;AACA;IACQkB,iBAAiB,EAAEtF,OAAO,CAAC+C,QAAQ,CAACuC,iBAAiB,EAAE7B,eAAe,CAAC;IACvE8B,kBAAkB,EAAEvF,OAAO,CAAC+C,QAAQ,CAACwC,kBAAkB,EAAE,IAAI,CAAC;IAC9DC,eAAe,EAAExF,OAAO,CAAC+C,QAAQ,CAACyC,eAAe,EAAE/B,eAAe,CAAC;IACnEgC,iBAAiB,EAAEzF,OAAO,CAAC+C,QAAQ,CAAC0C,iBAAiB,EAAE,IAAI,CAAC;IAC5DC,kBAAkB,EAAE1F,OAAO,CAAC+C,QAAQ,CAAC2C,kBAAkB,EAAE,IAAI,CAAC;IAC9DC,iBAAiB,EAAEjF,WAAW,CAACqC,QAAQ,CAAC4C,iBAAiB,EAAEnC,eAAe,CAAE;IAC5EoC,kBAAkB,EAAElF,WAAW,CAACqC,QAAQ,CAAC6C,kBAAkB,EAAE,IAAI,CAAC;IAClEC,eAAe,EAAEnF,WAAW,CAACqC,QAAQ,CAAC8C,eAAe,EAAErC,eAAe,CAAE;IACxEsC,iBAAiB,EAAEpF,WAAW,CAACqC,QAAQ,CAAC+C,iBAAiB,EAAE,IAAI,CAAC;IAChEC,kBAAkB,EAAErF,WAAW,CAACqC,QAAQ,CAACgD,kBAAkB,EAAE,IAAI,CAAC;IAClE,GAAGhC,iCAAiC;IAEpCzB,OAAO;IACPqB,MAAM;IACNG,MAAM;IACNnC,MAAM;IACNqE,QAAQ,EAAE;MACNC,QAAQ,EACJlD,QAAQ,CAACiD,QAAQ,EAAEC,QAAQ,IAAIlD,QAAQ,CAACmD,eAAe,EAAED,QAAQ,IAAIhG;IAC7E,CAAC;IACDkG,KAAK,EAAExF,QAAQ,CAAC;MACZuB,KAAK,EAAEa;IACX,CAAC;EACL,CAAC;EAED,IAAIY,MAAM,KAAKpD,YAAY,EAAE;IACzB,IAAIoD,MAAM,KAAKnD,gBAAgB,EAAE;MAC7B,MAAM4C,aAAa,CAACQ,oBAAoB,CAAC;QAAEpB,KAAK;QAAEiC,KAAK;QAAEZ,EAAE,EAAE;MAAI,CAAC,CAAC;IACvE,CAAC,MAAM,IAAIF,MAAM,KAAKlD,kBAAkB,EAAE;MACtC;MACA,MAAM2C,aAAa,CAACQ,oBAAoB,CAAC;QAAEpB,KAAK;QAAEiC,KAAK;QAAEZ,EAAE,EAAE;MAAI,CAAC,CAAC;IACvE;EACJ;EAEA,OAAO;IACHY,KAAK;IACLvC,KAAK,EAAE;MACH,GAAGa,QAAQ;MACXpB,MAAM,EAAEyE,eAAe,CAACzE,MAAM;IAClC;EACJ,CAAC;AACL,CAAC","ignoreList":[]}