@wix/patterns-cms 1.1.0

package/dist/cjs/adapter/__tests__/cmsPermissions.spec.js

@@ -0,0 +1,175 @@
+"use strict";
+
+var _cmsPermissions = require("../cmsPermissions");
+const WIX_STORES = '1380b703-ce81-ff05-f115-39571d94dfcd';
+const SITE_MEMBERS = 'SiteMembers';
+const FORM_APP = '225dd912-7dea-4738-8688-4b8c6955ffc2';
+const WIX_DATA = {
+  CREATE_FIELD: 'WIX_DATA.CREATE_COLLECTION_FIELD',
+  UPDATE_FIELD: 'WIX_DATA.UPDATE_COLLECTION_FIELD',
+  DELETE_FIELD: 'WIX_DATA.DELETE_COLLECTION_FIELD',
+  INSERT: 'WIX_DATA.INSERT',
+  UPDATE: 'WIX_DATA.UPDATE',
+  REMOVE: 'WIX_DATA.REMOVE'
+};
+const ALL_FIELD_PERMS = [WIX_DATA.CREATE_FIELD, WIX_DATA.UPDATE_FIELD, WIX_DATA.DELETE_FIELD];
+const ALL_PERMS = [...ALL_FIELD_PERMS, WIX_DATA.INSERT, WIX_DATA.UPDATE, WIX_DATA.REMOVE];
+const makeSchema = (overrides = {}) => {
+  const base = {
+    _id: 'col-1',
+    collectionType: 'NATIVE',
+    capabilities: {
+      dataOperations: ['SAVE', 'UPDATE', 'REMOVE']
+    },
+    permissions: {
+      read: 'ANYONE',
+      insert: 'SITE_MEMBER',
+      update: 'SITE_MEMBER',
+      remove: 'SITE_MEMBER'
+    },
+    plugins: []
+  };
+  return {
+    ...base,
+    ...overrides
+  };
+};
+describe('computeCmsPermissions', () => {
+  it('shared collection: schema not editable, no item permissions', () => {
+    const schema = makeSchema({
+      plugins: [{
+        type: 'SHARED'
+      }]
+    });
+    const result = (0, _cmsPermissions.computeCmsPermissions)(schema, ALL_PERMS, []);
+
+    // patterns-cms returns `schemaPermissions: undefined` (NOT an isSchemaEditable boolean)
+    // when the schema is not structurally editable.
+    expect(result.schemaPermissions).toBeUndefined();
+    expect(result.itemPermissions).toEqual({
+      createItem: false,
+      updateItem: false,
+      deleteItem: false
+    });
+  });
+  it('Wix-app collection (Stores): item permissions all false', () => {
+    const schema = makeSchema({
+      collectionType: 'WIX_APP',
+      ownerAppId: WIX_STORES
+    });
+    const result = (0, _cmsPermissions.computeCmsPermissions)(schema, ALL_PERMS, []);
+    expect(result.itemPermissions).toEqual({
+      createItem: false,
+      updateItem: false,
+      deleteItem: false
+    });
+  });
+  it('Wix-app SiteMembers: NOT treated as readonly', () => {
+    const schema = makeSchema({
+      collectionType: 'WIX_APP',
+      ownerAppId: SITE_MEMBERS
+    });
+    const result = (0, _cmsPermissions.computeCmsPermissions)(schema, ALL_PERMS, []);
+    expect(result.itemPermissions.createItem).toBe(true);
+    expect(result.itemPermissions.updateItem).toBe(true);
+    expect(result.itemPermissions.deleteItem).toBe(true);
+  });
+  it('Wix-app Forms collection: NOT treated as readonly', () => {
+    const schema = makeSchema({
+      collectionType: 'WIX_APP',
+      ownerAppId: FORM_APP
+    });
+    const result = (0, _cmsPermissions.computeCmsPermissions)(schema, ALL_PERMS, []);
+    expect(result.itemPermissions.createItem).toBe(true);
+    expect(result.itemPermissions.updateItem).toBe(true);
+    expect(result.itemPermissions.deleteItem).toBe(true);
+  });
+  it('NATIVE collection with full ABAC + roles: all permissions granted', () => {
+    const schema = makeSchema();
+    const result = (0, _cmsPermissions.computeCmsPermissions)(schema, ALL_PERMS, []);
+
+    // Structurally editable → schemaPermissions is defined.
+    expect(result.schemaPermissions).toEqual({
+      createField: true,
+      updateField: true,
+      deleteField: true
+    });
+    expect(result.itemPermissions).toEqual({
+      createItem: true,
+      updateItem: true,
+      deleteItem: true
+    });
+  });
+  it("role 'ANYONE' bypasses ABAC for update/remove but NOT for insert", () => {
+    const schema = makeSchema({
+      permissions: {
+        read: 'ANYONE',
+        insert: 'ANYONE',
+        update: 'ANYONE',
+        remove: 'ANYONE'
+      }
+    });
+
+    // User has ZERO ABAC permissions.
+    const result = (0, _cmsPermissions.computeCmsPermissions)(schema, [], []);
+
+    // Insert intentionally does NOT honor ANYONE bypass (cms-web parity).
+    expect(result.itemPermissions.createItem).toBe(false);
+    expect(result.itemPermissions.updateItem).toBe(true);
+    expect(result.itemPermissions.deleteItem).toBe(true);
+  });
+  it('allowedDataPermissions.itemRemove === false overrides role grant', () => {
+    const schema = makeSchema({
+      allowedDataPermissions: {
+        itemRemove: false
+      }
+    });
+    const result = (0, _cmsPermissions.computeCmsPermissions)(schema, ALL_PERMS, []);
+    expect(result.itemPermissions.deleteItem).toBe(false);
+    expect(result.itemPermissions.updateItem).toBe(true);
+    expect(result.itemPermissions.createItem).toBe(true);
+  });
+  it('EXTERNAL collection with no matching connection: schema not editable', () => {
+    const schema = makeSchema({
+      _id: 'mydb/products',
+      collectionType: 'EXTERNAL'
+    });
+    const result = (0, _cmsPermissions.computeCmsPermissions)(schema, ALL_PERMS, []);
+    expect(result.schemaPermissions).toBeUndefined();
+  });
+  it('EXTERNAL collection with capable connection: schema editable', () => {
+    const schema = makeSchema({
+      _id: 'mydb/products',
+      collectionType: 'EXTERNAL'
+    });
+    const connections = [{
+      namespace: 'mydb',
+      capabilities: {
+        collectionModificationsSupported: true,
+        fieldTypes: ['TEXT', 'NUMBER']
+      }
+    }];
+    const result = (0, _cmsPermissions.computeCmsPermissions)(schema, ALL_PERMS, connections);
+    expect(result.schemaPermissions).toEqual({
+      createField: true,
+      updateField: true,
+      deleteField: true
+    });
+  });
+  it('NATIVE editable but missing field-management ABAC: schemaPermissions all false', () => {
+    const schema = makeSchema();
+    const userPermissions = [WIX_DATA.INSERT, WIX_DATA.UPDATE, WIX_DATA.REMOVE
+    // Note: no field-management perms.
+    ];
+    const result = (0, _cmsPermissions.computeCmsPermissions)(schema, userPermissions, []);
+
+    // Schema is editable so schemaPermissions is defined, but each flag is false
+    // because the user lacks field-management ABAC.
+    expect(result.schemaPermissions).toEqual({
+      createField: false,
+      updateField: false,
+      deleteField: false
+    });
+  });
+});
+//# sourceMappingURL=cmsPermissions.spec.js.map

package/dist/cjs/adapter/__tests__/cmsPermissions.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_cmsPermissions","require","WIX_STORES","SITE_MEMBERS","FORM_APP","WIX_DATA","CREATE_FIELD","UPDATE_FIELD","DELETE_FIELD","INSERT","UPDATE","REMOVE","ALL_FIELD_PERMS","ALL_PERMS","makeSchema","overrides","base","_id","collectionType","capabilities","dataOperations","permissions","read","insert","update","remove","plugins","describe","it","schema","type","result","computeCmsPermissions","expect","schemaPermissions","toBeUndefined","itemPermissions","toEqual","createItem","updateItem","deleteItem","ownerAppId","toBe","createField","updateField","deleteField","allowedDataPermissions","itemRemove","connections","namespace","collectionModificationsSupported","fieldTypes","userPermissions"],"sources":["../../../../src/adapter/__tests__/cmsPermissions.spec.ts"],"sourcesContent":["import { collections } from '@wix/data';\nimport { computeCmsPermissions } from '../cmsPermissions';\nimport type { ExternalDbConnection } from '../cmsPermissions';\n\nconst WIX_STORES = '1380b703-ce81-ff05-f115-39571d94dfcd';\nconst SITE_MEMBERS = 'SiteMembers';\nconst FORM_APP = '225dd912-7dea-4738-8688-4b8c6955ffc2';\n\nconst WIX_DATA = {\n  CREATE_FIELD: 'WIX_DATA.CREATE_COLLECTION_FIELD',\n  UPDATE_FIELD: 'WIX_DATA.UPDATE_COLLECTION_FIELD',\n  DELETE_FIELD: 'WIX_DATA.DELETE_COLLECTION_FIELD',\n  INSERT: 'WIX_DATA.INSERT',\n  UPDATE: 'WIX_DATA.UPDATE',\n  REMOVE: 'WIX_DATA.REMOVE',\n};\n\nconst ALL_FIELD_PERMS = [\n  WIX_DATA.CREATE_FIELD,\n  WIX_DATA.UPDATE_FIELD,\n  WIX_DATA.DELETE_FIELD,\n];\n\nconst ALL_PERMS = [\n  ...ALL_FIELD_PERMS,\n  WIX_DATA.INSERT,\n  WIX_DATA.UPDATE,\n  WIX_DATA.REMOVE,\n];\n\ntype SchemaWithAllowed = collections.DataCollection & {\n  allowedDataPermissions?: {\n    itemInsert?: boolean;\n    itemUpdate?: boolean;\n    itemRemove?: boolean;\n  };\n};\n\nconst makeSchema = (\n  overrides: Partial<SchemaWithAllowed> = {},\n): SchemaWithAllowed => {\n  const base = {\n    _id: 'col-1',\n    collectionType: 'NATIVE',\n    capabilities: { dataOperations: ['SAVE', 'UPDATE', 'REMOVE'] },\n    permissions: {\n      read: 'ANYONE',\n      insert: 'SITE_MEMBER',\n      update: 'SITE_MEMBER',\n      remove: 'SITE_MEMBER',\n    },\n    plugins: [],\n  };\n  return { ...base, ...overrides } as SchemaWithAllowed;\n};\n\ndescribe('computeCmsPermissions', () => {\n  it('shared collection: schema not editable, no item permissions', () => {\n    const schema = makeSchema({\n      plugins: [{ type: 'SHARED' }],\n    });\n\n    const result = computeCmsPermissions(schema, ALL_PERMS, []);\n\n    // patterns-cms returns `schemaPermissions: undefined` (NOT an isSchemaEditable boolean)\n    // when the schema is not structurally editable.\n    expect(result.schemaPermissions).toBeUndefined();\n    expect(result.itemPermissions).toEqual({\n      createItem: false,\n      updateItem: false,\n      deleteItem: false,\n    });\n  });\n\n  it('Wix-app collection (Stores): item permissions all false', () => {\n    const schema = makeSchema({\n      collectionType: 'WIX_APP',\n      ownerAppId: WIX_STORES,\n    });\n\n    const result = computeCmsPermissions(schema, ALL_PERMS, []);\n\n    expect(result.itemPermissions).toEqual({\n      createItem: false,\n      updateItem: false,\n      deleteItem: false,\n    });\n  });\n\n  it('Wix-app SiteMembers: NOT treated as readonly', () => {\n    const schema = makeSchema({\n      collectionType: 'WIX_APP',\n      ownerAppId: SITE_MEMBERS,\n    });\n\n    const result = computeCmsPermissions(schema, ALL_PERMS, []);\n\n    expect(result.itemPermissions.createItem).toBe(true);\n    expect(result.itemPermissions.updateItem).toBe(true);\n    expect(result.itemPermissions.deleteItem).toBe(true);\n  });\n\n  it('Wix-app Forms collection: NOT treated as readonly', () => {\n    const schema = makeSchema({\n      collectionType: 'WIX_APP',\n      ownerAppId: FORM_APP,\n    });\n\n    const result = computeCmsPermissions(schema, ALL_PERMS, []);\n\n    expect(result.itemPermissions.createItem).toBe(true);\n    expect(result.itemPermissions.updateItem).toBe(true);\n    expect(result.itemPermissions.deleteItem).toBe(true);\n  });\n\n  it('NATIVE collection with full ABAC + roles: all permissions granted', () => {\n    const schema = makeSchema();\n\n    const result = computeCmsPermissions(schema, ALL_PERMS, []);\n\n    // Structurally editable → schemaPermissions is defined.\n    expect(result.schemaPermissions).toEqual({\n      createField: true,\n      updateField: true,\n      deleteField: true,\n    });\n    expect(result.itemPermissions).toEqual({\n      createItem: true,\n      updateItem: true,\n      deleteItem: true,\n    });\n  });\n\n  it(\"role 'ANYONE' bypasses ABAC for update/remove but NOT for insert\", () => {\n    const schema = makeSchema({\n      permissions: {\n        read: 'ANYONE',\n        insert: 'ANYONE',\n        update: 'ANYONE',\n        remove: 'ANYONE',\n      },\n    });\n\n    // User has ZERO ABAC permissions.\n    const result = computeCmsPermissions(schema, [], []);\n\n    // Insert intentionally does NOT honor ANYONE bypass (cms-web parity).\n    expect(result.itemPermissions.createItem).toBe(false);\n    expect(result.itemPermissions.updateItem).toBe(true);\n    expect(result.itemPermissions.deleteItem).toBe(true);\n  });\n\n  it('allowedDataPermissions.itemRemove === false overrides role grant', () => {\n    const schema = makeSchema({\n      allowedDataPermissions: { itemRemove: false },\n    });\n\n    const result = computeCmsPermissions(schema, ALL_PERMS, []);\n\n    expect(result.itemPermissions.deleteItem).toBe(false);\n    expect(result.itemPermissions.updateItem).toBe(true);\n    expect(result.itemPermissions.createItem).toBe(true);\n  });\n\n  it('EXTERNAL collection with no matching connection: schema not editable', () => {\n    const schema = makeSchema({\n      _id: 'mydb/products',\n      collectionType: 'EXTERNAL',\n    });\n\n    const result = computeCmsPermissions(schema, ALL_PERMS, []);\n\n    expect(result.schemaPermissions).toBeUndefined();\n  });\n\n  it('EXTERNAL collection with capable connection: schema editable', () => {\n    const schema = makeSchema({\n      _id: 'mydb/products',\n      collectionType: 'EXTERNAL',\n    });\n    const connections: ExternalDbConnection[] = [\n      {\n        namespace: 'mydb',\n        capabilities: {\n          collectionModificationsSupported: true,\n          fieldTypes: ['TEXT', 'NUMBER'],\n        },\n      },\n    ];\n\n    const result = computeCmsPermissions(schema, ALL_PERMS, connections);\n\n    expect(result.schemaPermissions).toEqual({\n      createField: true,\n      updateField: true,\n      deleteField: true,\n    });\n  });\n\n  it('NATIVE editable but missing field-management ABAC: schemaPermissions all false', () => {\n    const schema = makeSchema();\n    const userPermissions = [\n      WIX_DATA.INSERT,\n      WIX_DATA.UPDATE,\n      WIX_DATA.REMOVE,\n      // Note: no field-management perms.\n    ];\n\n    const result = computeCmsPermissions(schema, userPermissions, []);\n\n    // Schema is editable so schemaPermissions is defined, but each flag is false\n    // because the user lacks field-management ABAC.\n    expect(result.schemaPermissions).toEqual({\n      createField: false,\n      updateField: false,\n      deleteField: false,\n    });\n  });\n});\n"],"mappings":";;AACA,IAAAA,eAAA,GAAAC,OAAA;AAGA,MAAMC,UAAU,GAAG,sCAAsC;AACzD,MAAMC,YAAY,GAAG,aAAa;AAClC,MAAMC,QAAQ,GAAG,sCAAsC;AAEvD,MAAMC,QAAQ,GAAG;EACfC,YAAY,EAAE,kCAAkC;EAChDC,YAAY,EAAE,kCAAkC;EAChDC,YAAY,EAAE,kCAAkC;EAChDC,MAAM,EAAE,iBAAiB;EACzBC,MAAM,EAAE,iBAAiB;EACzBC,MAAM,EAAE;AACV,CAAC;AAED,MAAMC,eAAe,GAAG,CACtBP,QAAQ,CAACC,YAAY,EACrBD,QAAQ,CAACE,YAAY,EACrBF,QAAQ,CAACG,YAAY,CACtB;AAED,MAAMK,SAAS,GAAG,CAChB,GAAGD,eAAe,EAClBP,QAAQ,CAACI,MAAM,EACfJ,QAAQ,CAACK,MAAM,EACfL,QAAQ,CAACM,MAAM,CAChB;AAUD,MAAMG,UAAU,GAAGA,CACjBC,SAAqC,GAAG,CAAC,CAAC,KACpB;EACtB,MAAMC,IAAI,GAAG;IACXC,GAAG,EAAE,OAAO;IACZC,cAAc,EAAE,QAAQ;IACxBC,YAAY,EAAE;MAAEC,cAAc,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;IAAE,CAAC;IAC9DC,WAAW,EAAE;MACXC,IAAI,EAAE,QAAQ;MACdC,MAAM,EAAE,aAAa;MACrBC,MAAM,EAAE,aAAa;MACrBC,MAAM,EAAE;IACV,CAAC;IACDC,OAAO,EAAE;EACX,CAAC;EACD,OAAO;IAAE,GAAGV,IAAI;IAAE,GAAGD;EAAU,CAAC;AAClC,CAAC;AAEDY,QAAQ,CAAC,uBAAuB,EAAE,MAAM;EACtCC,EAAE,CAAC,6DAA6D,EAAE,MAAM;IACtE,MAAMC,MAAM,GAAGf,UAAU,CAAC;MACxBY,OAAO,EAAE,CAAC;QAAEI,IAAI,EAAE;MAAS,CAAC;IAC9B,CAAC,CAAC;IAEF,MAAMC,MAAM,GAAG,IAAAC,qCAAqB,EAACH,MAAM,EAAEhB,SAAS,EAAE,EAAE,CAAC;;IAE3D;IACA;IACAoB,MAAM,CAACF,MAAM,CAACG,iBAAiB,CAAC,CAACC,aAAa,CAAC,CAAC;IAChDF,MAAM,CAACF,MAAM,CAACK,eAAe,CAAC,CAACC,OAAO,CAAC;MACrCC,UAAU,EAAE,KAAK;MACjBC,UAAU,EAAE,KAAK;MACjBC,UAAU,EAAE;IACd,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFZ,EAAE,CAAC,yDAAyD,EAAE,MAAM;IAClE,MAAMC,MAAM,GAAGf,UAAU,CAAC;MACxBI,cAAc,EAAE,SAAS;MACzBuB,UAAU,EAAEvC;IACd,CAAC,CAAC;IAEF,MAAM6B,MAAM,GAAG,IAAAC,qCAAqB,EAACH,MAAM,EAAEhB,SAAS,EAAE,EAAE,CAAC;IAE3DoB,MAAM,CAACF,MAAM,CAACK,eAAe,CAAC,CAACC,OAAO,CAAC;MACrCC,UAAU,EAAE,KAAK;MACjBC,UAAU,EAAE,KAAK;MACjBC,UAAU,EAAE;IACd,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFZ,EAAE,CAAC,8CAA8C,EAAE,MAAM;IACvD,MAAMC,MAAM,GAAGf,UAAU,CAAC;MACxBI,cAAc,EAAE,SAAS;MACzBuB,UAAU,EAAEtC;IACd,CAAC,CAAC;IAEF,MAAM4B,MAAM,GAAG,IAAAC,qCAAqB,EAACH,MAAM,EAAEhB,SAAS,EAAE,EAAE,CAAC;IAE3DoB,MAAM,CAACF,MAAM,CAACK,eAAe,CAACE,UAAU,CAAC,CAACI,IAAI,CAAC,IAAI,CAAC;IACpDT,MAAM,CAACF,MAAM,CAACK,eAAe,CAACG,UAAU,CAAC,CAACG,IAAI,CAAC,IAAI,CAAC;IACpDT,MAAM,CAACF,MAAM,CAACK,eAAe,CAACI,UAAU,CAAC,CAACE,IAAI,CAAC,IAAI,CAAC;EACtD,CAAC,CAAC;EAEFd,EAAE,CAAC,mDAAmD,EAAE,MAAM;IAC5D,MAAMC,MAAM,GAAGf,UAAU,CAAC;MACxBI,cAAc,EAAE,SAAS;MACzBuB,UAAU,EAAErC;IACd,CAAC,CAAC;IAEF,MAAM2B,MAAM,GAAG,IAAAC,qCAAqB,EAACH,MAAM,EAAEhB,SAAS,EAAE,EAAE,CAAC;IAE3DoB,MAAM,CAACF,MAAM,CAACK,eAAe,CAACE,UAAU,CAAC,CAACI,IAAI,CAAC,IAAI,CAAC;IACpDT,MAAM,CAACF,MAAM,CAACK,eAAe,CAACG,UAAU,CAAC,CAACG,IAAI,CAAC,IAAI,CAAC;IACpDT,MAAM,CAACF,MAAM,CAACK,eAAe,CAACI,UAAU,CAAC,CAACE,IAAI,CAAC,IAAI,CAAC;EACtD,CAAC,CAAC;EAEFd,EAAE,CAAC,mEAAmE,EAAE,MAAM;IAC5E,MAAMC,MAAM,GAAGf,UAAU,CAAC,CAAC;IAE3B,MAAMiB,MAAM,GAAG,IAAAC,qCAAqB,EAACH,MAAM,EAAEhB,SAAS,EAAE,EAAE,CAAC;;IAE3D;IACAoB,MAAM,CAACF,MAAM,CAACG,iBAAiB,CAAC,CAACG,OAAO,CAAC;MACvCM,WAAW,EAAE,IAAI;MACjBC,WAAW,EAAE,IAAI;MACjBC,WAAW,EAAE;IACf,CAAC,CAAC;IACFZ,MAAM,CAACF,MAAM,CAACK,eAAe,CAAC,CAACC,OAAO,CAAC;MACrCC,UAAU,EAAE,IAAI;MAChBC,UAAU,EAAE,IAAI;MAChBC,UAAU,EAAE;IACd,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFZ,EAAE,CAAC,kEAAkE,EAAE,MAAM;IAC3E,MAAMC,MAAM,GAAGf,UAAU,CAAC;MACxBO,WAAW,EAAE;QACXC,IAAI,EAAE,QAAQ;QACdC,MAAM,EAAE,QAAQ;QAChBC,MAAM,EAAE,QAAQ;QAChBC,MAAM,EAAE;MACV;IACF,CAAC,CAAC;;IAEF;IACA,MAAMM,MAAM,GAAG,IAAAC,qCAAqB,EAACH,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;;IAEpD;IACAI,MAAM,CAACF,MAAM,CAACK,eAAe,CAACE,UAAU,CAAC,CAACI,IAAI,CAAC,KAAK,CAAC;IACrDT,MAAM,CAACF,MAAM,CAACK,eAAe,CAACG,UAAU,CAAC,CAACG,IAAI,CAAC,IAAI,CAAC;IACpDT,MAAM,CAACF,MAAM,CAACK,eAAe,CAACI,UAAU,CAAC,CAACE,IAAI,CAAC,IAAI,CAAC;EACtD,CAAC,CAAC;EAEFd,EAAE,CAAC,kEAAkE,EAAE,MAAM;IAC3E,MAAMC,MAAM,GAAGf,UAAU,CAAC;MACxBgC,sBAAsB,EAAE;QAAEC,UAAU,EAAE;MAAM;IAC9C,CAAC,CAAC;IAEF,MAAMhB,MAAM,GAAG,IAAAC,qCAAqB,EAACH,MAAM,EAAEhB,SAAS,EAAE,EAAE,CAAC;IAE3DoB,MAAM,CAACF,MAAM,CAACK,eAAe,CAACI,UAAU,CAAC,CAACE,IAAI,CAAC,KAAK,CAAC;IACrDT,MAAM,CAACF,MAAM,CAACK,eAAe,CAACG,UAAU,CAAC,CAACG,IAAI,CAAC,IAAI,CAAC;IACpDT,MAAM,CAACF,MAAM,CAACK,eAAe,CAACE,UAAU,CAAC,CAACI,IAAI,CAAC,IAAI,CAAC;EACtD,CAAC,CAAC;EAEFd,EAAE,CAAC,sEAAsE,EAAE,MAAM;IAC/E,MAAMC,MAAM,GAAGf,UAAU,CAAC;MACxBG,GAAG,EAAE,eAAe;MACpBC,cAAc,EAAE;IAClB,CAAC,CAAC;IAEF,MAAMa,MAAM,GAAG,IAAAC,qCAAqB,EAACH,MAAM,EAAEhB,SAAS,EAAE,EAAE,CAAC;IAE3DoB,MAAM,CAACF,MAAM,CAACG,iBAAiB,CAAC,CAACC,aAAa,CAAC,CAAC;EAClD,CAAC,CAAC;EAEFP,EAAE,CAAC,8DAA8D,EAAE,MAAM;IACvE,MAAMC,MAAM,GAAGf,UAAU,CAAC;MACxBG,GAAG,EAAE,eAAe;MACpBC,cAAc,EAAE;IAClB,CAAC,CAAC;IACF,MAAM8B,WAAmC,GAAG,CAC1C;MACEC,SAAS,EAAE,MAAM;MACjB9B,YAAY,EAAE;QACZ+B,gCAAgC,EAAE,IAAI;QACtCC,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ;MAC/B;IACF,CAAC,CACF;IAED,MAAMpB,MAAM,GAAG,IAAAC,qCAAqB,EAACH,MAAM,EAAEhB,SAAS,EAAEmC,WAAW,CAAC;IAEpEf,MAAM,CAACF,MAAM,CAACG,iBAAiB,CAAC,CAACG,OAAO,CAAC;MACvCM,WAAW,EAAE,IAAI;MACjBC,WAAW,EAAE,IAAI;MACjBC,WAAW,EAAE;IACf,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFjB,EAAE,CAAC,gFAAgF,EAAE,MAAM;IACzF,MAAMC,MAAM,GAAGf,UAAU,CAAC,CAAC;IAC3B,MAAMsC,eAAe,GAAG,CACtB/C,QAAQ,CAACI,MAAM,EACfJ,QAAQ,CAACK,MAAM,EACfL,QAAQ,CAACM;IACT;IAAA,CACD;IAED,MAAMoB,MAAM,GAAG,IAAAC,qCAAqB,EAACH,MAAM,EAAEuB,eAAe,EAAE,EAAE,CAAC;;IAEjE;IACA;IACAnB,MAAM,CAACF,MAAM,CAACG,iBAAiB,CAAC,CAACG,OAAO,CAAC;MACvCM,WAAW,EAAE,KAAK;MAClBC,WAAW,EAAE,KAAK;MAClBC,WAAW,EAAE;IACf,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ,CAAC,CAAC","ignoreList":[]}

package/dist/cjs/adapter/__tests__/createCmsBackend.spec.js

@@ -0,0 +1,440 @@
+"use strict";
+
+var _data = require("@wix/data");
+var _createCmsBackend = require("../createCmsBackend");
+// `bulkInsert`/`backup` wrap calls in errorHandler.withErrorHandler, which needs an
+// initialized Wix SDK context. In a pure-function unit test there is none, so we
+// stub the wrapper to just invoke its callback (the mapping logic is what we assert).
+jest.mock('@wix/essentials', () => ({
+  errorHandler: {
+    withErrorHandler: fn => fn()
+  }
+}));
+
+// A chainable query stub whose terminal `.find()` resolves to a configurable
+// result. `mockFindResult` is reassigned per-test before the backend call.
+// `mock`-prefixed names are the only out-of-scope refs jest.mock() factories allow.
+let mockFindResult = {
+  items: [],
+  totalCount: 0
+};
+jest.mock('@wix/data', () => {
+  const queryChain = {};
+  ['eq', 'include', 'skip', 'limit', 'and', 'ge', 'le', 'ascending', 'descending'].forEach(m => {
+    queryChain[m] = jest.fn(() => queryChain);
+  });
+  queryChain.find = jest.fn(() => Promise.resolve(mockFindResult));
+  const filterChain = {};
+  ['eq', 'contains', 'or', 'and', 'not'].forEach(m => {
+    filterChain[m] = jest.fn(() => filterChain);
+  });
+  return {
+    __chains: {
+      queryChain,
+      filterChain
+    },
+    items: {
+      query: jest.fn(() => queryChain),
+      filter: jest.fn(() => filterChain),
+      insert: jest.fn(),
+      update: jest.fn(),
+      remove: jest.fn(),
+      bulkRemove: jest.fn(),
+      bulkInsert: jest.fn(),
+      replaceReferences: jest.fn()
+    },
+    backups: {}
+  };
+});
+
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const {
+  queryChain,
+  filterChain
+} = require('@wix/data').__chains;
+const queryMock = _data.items.query;
+const insert = _data.items.insert;
+const update = _data.items.update;
+const remove = _data.items.remove;
+const bulkRemove = _data.items.bulkRemove;
+const bulkInsert = _data.items.bulkInsert;
+const replaceReferences = _data.items.replaceReferences;
+const COLLECTION_ID = 'collection-1';
+const fieldsWithRefs = {
+  title: {
+    id: 'title',
+    type: 'SHORT_TEXT',
+    displayName: 'Title',
+    capabilities: {
+      supportedQueryOperators: [],
+      sortable: true
+    }
+  },
+  author: {
+    id: 'author',
+    type: 'REFERENCE',
+    displayName: 'Author',
+    referenceMetadata: {
+      referencedCollectionId: 'authors'
+    },
+    capabilities: {
+      supportedQueryOperators: [],
+      sortable: false
+    }
+  },
+  tags: {
+    id: 'tags',
+    type: 'MULTI_REFERENCE',
+    displayName: 'Tags',
+    referenceMetadata: {
+      referencedCollectionId: 'tags-collection'
+    },
+    capabilities: {
+      supportedQueryOperators: [],
+      sortable: false
+    }
+  }
+};
+/** Calls `backend.find` with the per-call options arg (absent from the erased interface). */
+const findWithOptions = (find, query, options) => find(query, options);
+describe('createCmsBackend', () => {
+  beforeEach(() => {
+    jest.clearAllMocks();
+    mockFindResult = {
+      items: [],
+      totalCount: 0
+    };
+  });
+  describe('get', () => {
+    it('queries by _id and returns the single matching entity', async () => {
+      mockFindResult = {
+        items: [{
+          _id: 'e1',
+          title: 'Hello'
+        }]
+      };
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, {
+        title: fieldsWithRefs.title
+      });
+      const entity = await backend.get('e1');
+      expect(queryMock).toHaveBeenCalledWith(COLLECTION_ID);
+      expect(queryChain.eq).toHaveBeenCalledWith('_id', 'e1');
+      expect(entity).toEqual({
+        _id: 'e1',
+        title: 'Hello'
+      });
+    });
+    it('includes reference fields when the schema has them', async () => {
+      mockFindResult = {
+        items: [{
+          _id: 'e1'
+        }]
+      };
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, fieldsWithRefs);
+      await backend.get('e1');
+      expect(queryChain.include).toHaveBeenCalledWith('author', 'tags');
+    });
+    it('throws when no entity is found', async () => {
+      mockFindResult = {
+        items: []
+      };
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, {
+        title: fieldsWithRefs.title
+      });
+      await expect(backend.get('missing')).rejects.toThrow('Entity not found: missing');
+    });
+  });
+  describe('create', () => {
+    it('inserts the entity and returns it with the created _id', async () => {
+      insert.mockResolvedValue({
+        _id: 'new-1'
+      });
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, {
+        title: fieldsWithRefs.title
+      });
+      const result = await backend.create({
+        title: 'Hi'
+      });
+      expect(insert).toHaveBeenCalledWith(COLLECTION_ID, {
+        title: 'Hi'
+      });
+      expect(result).toEqual({
+        title: 'Hi',
+        _id: 'new-1'
+      });
+    });
+    it('syncs multi-reference fields via replaceReferences', async () => {
+      insert.mockResolvedValue({
+        _id: 'new-1'
+      });
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, fieldsWithRefs);
+      await backend.create({
+        title: 'Hi',
+        tags: [{
+          _id: 't1'
+        }, {
+          _id: 't2'
+        }]
+      });
+      expect(replaceReferences).toHaveBeenCalledWith(COLLECTION_ID, 'tags', 'new-1', ['t1', 't2']);
+    });
+  });
+  describe('update', () => {
+    it('updates the entity and returns it', async () => {
+      update.mockResolvedValue(undefined);
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, {
+        title: fieldsWithRefs.title
+      });
+      const entity = {
+        _id: 'e1',
+        title: 'Edited'
+      };
+      const result = await backend.update(entity);
+      expect(update).toHaveBeenCalledWith(COLLECTION_ID, entity);
+      expect(result).toBe(entity);
+    });
+  });
+  describe('delete / bulkDelete', () => {
+    it('removes a single entity by id', async () => {
+      remove.mockResolvedValue(undefined);
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, {});
+      await backend.delete('e1');
+      expect(remove).toHaveBeenCalledWith(COLLECTION_ID, 'e1');
+    });
+    it('bulk-removes entities by ids', async () => {
+      bulkRemove.mockResolvedValue(undefined);
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, {});
+      await backend.bulkDelete(['e1', 'e2']);
+      expect(bulkRemove).toHaveBeenCalledWith(COLLECTION_ID, ['e1', 'e2']);
+    });
+  });
+  describe('find', () => {
+    it('applies skip/limit and computes total and hasNext', async () => {
+      mockFindResult = {
+        items: [{
+          _id: 'a'
+        }, {
+          _id: 'b'
+        }],
+        totalCount: 5
+      };
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, {
+        title: fieldsWithRefs.title
+      });
+      const result = await backend.find({
+        offset: 0,
+        limit: 2
+      });
+      expect(queryChain.skip).toHaveBeenCalledWith(0);
+      expect(queryChain.limit).toHaveBeenCalledWith(2);
+      expect(queryChain.find).toHaveBeenCalledWith({
+        returnTotalCount: true
+      });
+      expect(result.items).toEqual([{
+        _id: 'a'
+      }, {
+        _id: 'b'
+      }]);
+      expect(result.total).toBe(5);
+      // 0 + 2 < 5 → there is a next page.
+      expect(result.hasNext).toBe(true);
+    });
+    it('reports hasNext false on the last page', async () => {
+      mockFindResult = {
+        items: [{
+          _id: 'e'
+        }],
+        totalCount: 3
+      };
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, {
+        title: fieldsWithRefs.title
+      });
+      const result = await backend.find({
+        offset: 2,
+        limit: 2
+      });
+
+      // 2 + 1 === 3 → no next page.
+      expect(result.hasNext).toBe(false);
+    });
+    it('includes only reference fields that are also searchable', async () => {
+      mockFindResult = {
+        items: [],
+        totalCount: 0
+      };
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, fieldsWithRefs);
+
+      // The per-call `options` arg is part of the concrete `createCmsBackend.find`
+      // but not the erased `CollectionBackend.find` contract — cast to reach it.
+      await findWithOptions(backend.find, {
+        offset: 0,
+        limit: 10
+      }, {
+        searchableFieldIds: ['title', 'author']
+      });
+
+      // 'author' is a reference and searchable → included; 'tags' is not searchable.
+      expect(queryChain.include).toHaveBeenCalledWith('author');
+    });
+    it('does not call include when no reference field is searchable', async () => {
+      mockFindResult = {
+        items: [],
+        totalCount: 0
+      };
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, fieldsWithRefs);
+      await findWithOptions(backend.find, {
+        offset: 0,
+        limit: 10
+      }, {
+        searchableFieldIds: ['title']
+      });
+      expect(queryChain.include).not.toHaveBeenCalled();
+    });
+    it('includes no reference fields when called with no options (inert default)', async () => {
+      mockFindResult = {
+        items: [],
+        totalCount: 0
+      };
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, fieldsWithRefs);
+
+      // No options → default searchableFieldIds = [] → no refs included, no search.
+      await backend.find({
+        offset: 0,
+        limit: 10
+      });
+      expect(queryChain.include).not.toHaveBeenCalled();
+    });
+
+    // The cases below mirror auto-patterns' end-to-end coverage: the fetch path
+    // must actually apply the query's filters/sort/search, not just skip/limit.
+    const filterableFields = {
+      title: fieldsWithRefs.title,
+      price: {
+        id: 'price',
+        type: 'NUMBER',
+        displayName: 'Price',
+        capabilities: {
+          supportedQueryOperators: ['GTE', 'LTE'],
+          sortable: true
+        }
+      },
+      done: {
+        id: 'done',
+        type: 'BOOLEAN',
+        displayName: 'Done',
+        capabilities: {
+          supportedQueryOperators: [],
+          sortable: false
+        }
+      }
+    };
+    it('applies a number range filter from the query', async () => {
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, filterableFields);
+      await findWithOptions(backend.find, {
+        offset: 0,
+        limit: 10,
+        filters: {
+          price: {
+            from: 10,
+            to: 100
+          }
+        }
+      }, {
+        filterFieldMapping: {
+          price: {
+            fieldId: 'price'
+          }
+        }
+      });
+      expect(queryChain.ge).toHaveBeenCalledWith('price', 10);
+      expect(queryChain.le).toHaveBeenCalledWith('price', 100);
+    });
+    it('applies a checked boolean filter from the query', async () => {
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, filterableFields);
+      await findWithOptions(backend.find, {
+        offset: 0,
+        limit: 10,
+        filters: {
+          done: [{
+            id: 'checked'
+          }]
+        }
+      }, {
+        filterFieldMapping: {
+          done: {
+            fieldId: 'done'
+          }
+        }
+      });
+      expect(queryChain.eq).toHaveBeenCalledWith('done', true);
+    });
+    it('applies ascending sort from the query', async () => {
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, filterableFields);
+      await backend.find({
+        offset: 0,
+        limit: 10,
+        sort: [{
+          fieldName: 'title',
+          order: 'asc'
+        }]
+      });
+      expect(queryChain.ascending).toHaveBeenCalledWith('title');
+    });
+    it('applies descending sort from the query', async () => {
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, filterableFields);
+      await backend.find({
+        offset: 0,
+        limit: 10,
+        sort: [{
+          fieldName: 'title',
+          order: 'desc'
+        }]
+      });
+      expect(queryChain.descending).toHaveBeenCalledWith('title');
+    });
+    it('applies the search term as a contains filter on searchable text fields', async () => {
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, filterableFields);
+      await findWithOptions(backend.find, {
+        offset: 0,
+        limit: 10,
+        search: 'hello'
+      }, {
+        searchableFieldIds: ['title']
+      });
+      expect(filterChain.contains).toHaveBeenCalledWith('title', 'hello');
+      expect(queryChain.and).toHaveBeenCalledWith(filterChain);
+    });
+  });
+  describe('bulkInsert', () => {
+    it('maps inserted/updated to succeeded, errors to failed, and surfaces error rows', async () => {
+      bulkInsert.mockResolvedValue({
+        inserted: 2,
+        updated: 1,
+        errors: [{
+          originalIndex: 4,
+          message: 'bad row',
+          code: 'INVALID'
+        }]
+      });
+      const backend = (0, _createCmsBackend.createCmsBackend)(COLLECTION_ID, {});
+      const result = await backend.bulkInsert([{
+        a: 1
+      }, {
+        a: 2
+      }]);
+      expect(bulkInsert).toHaveBeenCalledWith(COLLECTION_ID, [{
+        a: 1
+      }, {
+        a: 2
+      }]);
+      expect(result.succeeded).toBe(3);
+      expect(result.failed).toBe(1);
+      expect(result.errors).toEqual([{
+        rowIndex: 4,
+        message: 'bad row',
+        code: 'INVALID'
+      }]);
+    });
+  });
+});
+//# sourceMappingURL=createCmsBackend.spec.js.map