@lucidcms/core/dist/services/sync/sync-roles.mjs.map

The core of the Lucid CMS. It's responsible for spinning up the API and serving the CMS.

{"version":3,"file":"sync-roles.mjs","names":["formatter"],"sources":["../../../src/services/sync/sync-roles.ts"],"sourcesContent":["import formatter from \"../../libs/formatters/index.js\";\nimport type { AdminCopyInput } from \"../../libs/i18n/types.js\";\nimport {\n\tgetValidPermissions,\n\tisCorePermission,\n} from \"../../libs/permission/registry.js\";\nimport type { CorePermission } from \"../../libs/permission/types.js\";\nimport {\n\tRolePermissionsRepository,\n\tRolesRepository,\n\tRoleTranslationsRepository,\n} from \"../../libs/repositories/index.js\";\nimport type { ServiceFn } from \"../../utils/services/types.js\";\nimport { invalidateAuthCache } from \"../auth/helpers/auth-cache.js\";\nimport {\n\tgetTranslationValue,\n\tnormalizeTranslationArray,\n\tprepareRoleTranslations,\n} from \"../roles/helpers/role-translations.js\";\n\ntype ManagedRoleDefinition = {\n\tkey: string;\n\tname: AdminCopyInput;\n\tdescription?: AdminCopyInput;\n\tpermissions: CorePermission[];\n};\n\n/**\n * Synchronizes internally managed roles and prunes grants that are no longer registered.\n */\nconst syncRoles: ServiceFn<[], undefined> = async (context) => {\n\tconst Roles = new RolesRepository(context.db.client, context.config.db);\n\tconst RolePermissions = new RolePermissionsRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\tconst RoleTranslations = new RoleTranslationsRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\n\tconst rolesRes = await Roles.selectMultiple({\n\t\tselect: [\"id\", \"key\", \"locked\"],\n\t\tvalidation: {\n\t\t\tenabled: true,\n\t\t},\n\t});\n\tif (rolesRes.error) return rolesRes;\n\n\tconst managedRoles: ManagedRoleDefinition[] = [];\n\tconst managedRoleKeys = managedRoles.map((role) => role.key);\n\tconst managedRoleIdsToDelete = rolesRes.data\n\t\t.filter(\n\t\t\t(role) =>\n\t\t\t\tformatter.formatBoolean(role.locked) &&\n\t\t\t\trole.key !== null &&\n\t\t\t\t!managedRoleKeys.includes(role.key),\n\t\t)\n\t\t.map((role) => role.id);\n\n\tif (managedRoleIdsToDelete.length > 0) {\n\t\tconst deleteRolesRes = await Roles.deleteMultiple({\n\t\t\twhere: [\n\t\t\t\t{\n\t\t\t\t\tkey: \"id\",\n\t\t\t\t\toperator: \"in\",\n\t\t\t\t\tvalue: managedRoleIdsToDelete,\n\t\t\t\t},\n\t\t\t],\n\t\t\treturning: [\"id\"],\n\t\t});\n\t\tif (deleteRolesRes.error) return deleteRolesRes;\n\t}\n\n\tfor (const managedRole of managedRoles) {\n\t\tconst defaultRoleLocale = context.config.i18n.defaultLocale;\n\t\tconst nameTranslations = normalizeTranslationArray(\n\t\t\tmanagedRole.name,\n\t\t\tcontext.config,\n\t\t\tcontext.translate,\n\t\t);\n\t\tconst descriptionTranslations = normalizeTranslationArray(\n\t\t\tmanagedRole.description,\n\t\t\tcontext.config,\n\t\t\tcontext.translate,\n\t\t);\n\t\tconst defaultName =\n\t\t\tgetTranslationValue(nameTranslations, defaultRoleLocale) ??\n\t\t\tnameTranslations[0]?.value ??\n\t\t\t\"\";\n\t\tconst defaultDescription =\n\t\t\tgetTranslationValue(descriptionTranslations, defaultRoleLocale) ??\n\t\t\tdescriptionTranslations[0]?.value ??\n\t\t\tnull;\n\t\tconst existingRole = rolesRes.data.find(\n\t\t\t(role) => role.key === managedRole.key,\n\t\t);\n\n\t\tconst roleId = existingRole?.id;\n\t\tconst upsertRoleRes =\n\t\t\troleId === undefined\n\t\t\t\t? await Roles.createSingle({\n\t\t\t\t\t\tdata: {\n\t\t\t\t\t\t\tkey: managedRole.key,\n\t\t\t\t\t\t\tlocked: true,\n\t\t\t\t\t\t},\n\t\t\t\t\t\treturning: [\"id\"],\n\t\t\t\t\t\tvalidation: {\n\t\t\t\t\t\t\tenabled: true,\n\t\t\t\t\t\t},\n\t\t\t\t\t})\n\t\t\t\t: await Roles.updateSingle({\n\t\t\t\t\t\tdata: {\n\t\t\t\t\t\t\tlocked: true,\n\t\t\t\t\t\t\tupdated_at: new Date().toISOString(),\n\t\t\t\t\t\t},\n\t\t\t\t\t\twhere: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tkey: \"id\",\n\t\t\t\t\t\t\t\toperator: \"=\",\n\t\t\t\t\t\t\t\tvalue: roleId,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\treturning: [\"id\"],\n\t\t\t\t\t\tvalidation: {\n\t\t\t\t\t\t\tenabled: true,\n\t\t\t\t\t\t},\n\t\t\t\t\t});\n\t\tif (upsertRoleRes.error) return upsertRoleRes;\n\n\t\tconst syncedRoleId = upsertRoleRes.data.id;\n\t\tconst deleteTranslationsRes = await RoleTranslations.deleteMultiple({\n\t\t\twhere: [\n\t\t\t\t{\n\t\t\t\t\tkey: \"role_id\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: syncedRoleId,\n\t\t\t\t},\n\t\t\t],\n\t\t\treturning: [\"id\"],\n\t\t});\n\t\tif (deleteTranslationsRes.error) return deleteTranslationsRes;\n\n\t\tconst translations = prepareRoleTranslations({\n\t\t\tname: nameTranslations,\n\t\t\tdescription: descriptionTranslations,\n\t\t\troleId: syncedRoleId,\n\t\t});\n\t\tif (\n\t\t\ttranslations.every(\n\t\t\t\t(translation) => translation.locale_code !== defaultRoleLocale,\n\t\t\t)\n\t\t) {\n\t\t\ttranslations.push({\n\t\t\t\trole_id: syncedRoleId,\n\t\t\t\tlocale_code: defaultRoleLocale,\n\t\t\t\tname: defaultName,\n\t\t\t\tdescription: defaultDescription,\n\t\t\t});\n\t\t}\n\t\tif (translations.length > 0) {\n\t\t\tconst upsertTranslationsRes = await RoleTranslations.upsertMultiple({\n\t\t\t\tdata: translations,\n\t\t\t\treturning: [\"id\"],\n\t\t\t\tvalidation: {\n\t\t\t\t\tenabled: true,\n\t\t\t\t},\n\t\t\t});\n\t\t\tif (upsertTranslationsRes.error) return upsertTranslationsRes;\n\t\t}\n\n\t\tconst deletePermissionsRes = await RolePermissions.deleteMultiple({\n\t\t\twhere: [\n\t\t\t\t{\n\t\t\t\t\tkey: \"role_id\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: syncedRoleId,\n\t\t\t\t},\n\t\t\t],\n\t\t\treturning: [\"id\"],\n\t\t});\n\t\tif (deletePermissionsRes.error) return deletePermissionsRes;\n\n\t\tif (managedRole.permissions.length > 0) {\n\t\t\tconst createPermissionsRes = await RolePermissions.createMultiple({\n\t\t\t\tdata: managedRole.permissions.map((permission) => ({\n\t\t\t\t\trole_id: syncedRoleId,\n\t\t\t\t\tpermission,\n\t\t\t\t\tcore: isCorePermission(permission),\n\t\t\t\t})),\n\t\t\t});\n\t\t\tif (createPermissionsRes.error) return createPermissionsRes;\n\t\t}\n\t}\n\n\tconst validPermissions = getValidPermissions(context.config);\n\tconst prunePermissionsRes = await RolePermissions.deleteMultiple({\n\t\twhere: [\n\t\t\t{\n\t\t\t\tkey: \"permission\",\n\t\t\t\toperator: \"not in\",\n\t\t\t\tvalue: validPermissions,\n\t\t\t},\n\t\t],\n\t\treturning: [\"id\"],\n\t});\n\tif (prunePermissionsRes.error) return prunePermissionsRes;\n\n\tawait invalidateAuthCache(context);\n\n\treturn {\n\t\terror: undefined,\n\t\tdata: undefined,\n\t};\n};\n\nexport default syncRoles;\n"],"mappings":"sgBA8BA,MAAM,EAAsC,KAAO,IAAY,CAC9D,IAAM,EAAQ,IAAI,EAAgB,EAAQ,GAAG,OAAQ,EAAQ,OAAO,EAAE,EAChE,EAAkB,IAAI,EAC3B,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EACM,EAAmB,IAAI,EAC5B,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EAEM,EAAW,MAAM,EAAM,eAAe,CAC3C,OAAQ,CAAC,KAAM,MAAO,QAAQ,EAC9B,WAAY,CACX,QAAS,EACV,CACD,CAAC,EACD,GAAI,EAAS,MAAO,OAAO,EAE3B,IAAM,EAAwC,CAAC,EACzC,EAAkB,EAAa,IAAK,GAAS,EAAK,GAAG,EACrD,EAAyB,EAAS,KACtC,OACC,GACAA,EAAU,cAAc,EAAK,MAAM,GACnC,EAAK,MAAQ,MACb,CAAC,EAAgB,SAAS,EAAK,GAAG,CACpC,CAAC,CACA,IAAK,GAAS,EAAK,EAAE,EAEvB,GAAI,EAAuB,OAAS,EAAG,CACtC,IAAM,EAAiB,MAAM,EAAM,eAAe,CACjD,MAAO,CACN,CACC,IAAK,KACL,SAAU,KACV,MAAO,CACR,CACD,EACA,UAAW,CAAC,IAAI,CACjB,CAAC,EACD,GAAI,EAAe,MAAO,OAAO,CAClC,CAEA,IAAK,IAAM,KAAe,EAAc,CACvC,IAAM,EAAoB,EAAQ,OAAO,KAAK,cACxC,EAAmB,EACxB,EAAY,KACZ,EAAQ,OACR,EAAQ,SACT,EACM,EAA0B,EAC/B,EAAY,YACZ,EAAQ,OACR,EAAQ,SACT,EACM,EACL,EAAoB,EAAkB,CAAiB,GACvD,EAAiB,EAAE,EAAE,OACrB,GACK,EACL,EAAoB,EAAyB,CAAiB,GAC9D,EAAwB,EAAE,EAAE,OAC5B,KAKK,EAJe,EAAS,KAAK,KACjC,GAAS,EAAK,MAAQ,EAAY,GAGV,CAAC,EAAE,GACvB,EACL,IAAW,IAAA,GACR,MAAM,EAAM,aAAa,CACzB,KAAM,CACL,IAAK,EAAY,IACjB,OAAQ,EACT,EACA,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,EACV,CACD,CAAC,EACA,MAAM,EAAM,aAAa,CACzB,KAAM,CACL,OAAQ,GACR,WAAY,IAAI,KAAK,CAAA,CAAE,YAAY,CACpC,EACA,MAAO,CACN,CACC,IAAK,KACL,SAAU,IACV,MAAO,CACR,CACD,EACA,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,EACV,CACD,CAAC,EACJ,GAAI,EAAc,MAAO,OAAO,EAEhC,IAAM,EAAe,EAAc,KAAK,GAClC,EAAwB,MAAM,EAAiB,eAAe,CACnE,MAAO,CACN,CACC,IAAK,UACL,SAAU,IACV,MAAO,CACR,CACD,EACA,UAAW,CAAC,IAAI,CACjB,CAAC,EACD,GAAI,EAAsB,MAAO,OAAO,EAExC,IAAM,EAAe,EAAwB,CAC5C,KAAM,EACN,YAAa,EACb,OAAQ,CACT,CAAC,EAaD,GAXC,EAAa,MACX,GAAgB,EAAY,cAAgB,CAC9C,GAEA,EAAa,KAAK,CACjB,QAAS,EACT,YAAa,EACb,KAAM,EACN,YAAa,CACd,CAAC,EAEE,EAAa,OAAS,EAAG,CAC5B,IAAM,EAAwB,MAAM,EAAiB,eAAe,CACnE,KAAM,EACN,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,EACV,CACD,CAAC,EACD,GAAI,EAAsB,MAAO,OAAO,CACzC,CAEA,IAAM,EAAuB,MAAM,EAAgB,eAAe,CACjE,MAAO,CACN,CACC,IAAK,UACL,SAAU,IACV,MAAO,CACR,CACD,EACA,UAAW,CAAC,IAAI,CACjB,CAAC,EACD,GAAI,EAAqB,MAAO,OAAO,EAEvC,GAAI,EAAY,YAAY,OAAS,EAAG,CACvC,IAAM,EAAuB,MAAM,EAAgB,eAAe,CACjE,KAAM,EAAY,YAAY,IAAK,IAAgB,CAClD,QAAS,EACT,aACA,KAAM,EAAiB,CAAU,CAClC,EAAE,CACH,CAAC,EACD,GAAI,EAAqB,MAAO,OAAO,CACxC,CACD,CAEA,IAAM,EAAmB,EAAoB,EAAQ,MAAM,EACrD,EAAsB,MAAM,EAAgB,eAAe,CAChE,MAAO,CACN,CACC,IAAK,aACL,SAAU,SACV,MAAO,CACR,CACD,EACA,UAAW,CAAC,IAAI,CACjB,CAAC,EAKD,OAJI,EAAoB,MAAc,GAEtC,MAAM,EAAoB,CAAO,EAE1B,CACN,MAAO,IAAA,GACP,KAAM,IAAA,EACP,EACD"}