Merge main into next

.changeset/six-meals-lie.md

@@ -0,0 +1,8 @@
+---
+"@comet/cms-admin": patch
+---
+
+Fix link target validation in `ExternalLinkBlock`
+
+Previously, two different validation checks were used.
+This resulted in an error when saving an invalid link target but no error message was shown.

docs/docs/dependencies/index.md

@@ -1,45 +1,86 @@
+<<<<<<< HEAD
 ---
 title: Dependencies
 sidebar_position: 15
 ---
 
 # Dependencies
+=======
+# Block Index / Dependencies
+>>>>>>> main
 
-## Register fields to be added to the block index
+Blocks can have references to entities.
+But since block data is stored as JSON, there is no actual database relationship.
 
-### Add `@RootBlockEntity()` and `@RootBlock()` decorators to entity
+If you still need to know which entities a block references or in which blocks an entity is used, you can use COMET's block index.
 
-The entity needs to be annotated with `@RootBlockEntity()`.
+---
 
-All fields containing block data need to be annotated with `@RootBlock()`. The Block used by this field must be passed as an argument.
+## Configuration Guide
 
-```ts
-//...
-@RootBlockEntity()
-export class News extends BaseEntity<News, "id"> {
-    // ...
+Follow the upcoming guide if you want to
 
-    @RootBlock(DamImageBlock)
-    @Property({ customType: new RootBlockType(DamImageBlock) })
-    @Field(() => RootBlockDataScalar(DamImageBlock))
-    image: BlockDataInterface;
+-   make the "Dependents" tab in the DAM work
+-   display the dependencies or dependents of an entity somewhere in your admin app
 
-    @RootBlock(NewsContentBlock)
-    @Property({ customType: new RootBlockType(NewsContentBlock) })
-    @Field(() => RootBlockDataScalar(NewsContentBlock))
-    content: BlockDataInterface;
+### Configuring the block index
 
-    // ...
-}
+#### 1. API: Register fields to be added to the block index
+
+First, you must "tell" the block index which database fields contain block data.
+It will scan these fields for dependency information.
+
+To do that, you must
+
+-   Annotate the entity with `@RootBlockEntity()`
+-   Annotate all columns containing block data with `@RootBlock(ExampleBlock)`
+
+For example:
+
+```diff
++   @RootBlockEntity()
+    export class News extends BaseEntity<News, "id"> {
+        // ...
+
++       @RootBlock(DamImageBlock)
+        @Property({ customType: new RootBlockType(DamImageBlock) })
+        @Field(() => RootBlockDataScalar(DamImageBlock))
+        image: BlockDataInterface;
+
++       @RootBlock(NewsContentBlock)
+        @Property({ customType: new RootBlockType(NewsContentBlock) })
+        @Field(() => RootBlockDataScalar(NewsContentBlock))
+        content: BlockDataInterface;
+
+        // ...
+    }
 ```
 
-## Correctly display a dependency target
+#### 2. Create the block index
 
-### 1. Add `@EntityInfo()` to entity (API)
+You must then create the block index by calling `npm run console createBlockIndexViews` in your `/api` directory.
+This creates a materialized view called `block_index_dependencies` in your database.
 
-You can provide the entity info in two ways:
+You must recreate the block index views after
 
-#### `GetEntityInfo` Method
+-   executing database migrations
+-   executing the fixtures (because they drop the whole database and recreate it)
+
+You can automate this process by following the steps in the [migration guide](../migration/migration-from-v5-to-v6/#block-index).
+For new projects, it should already be automated.
+
+### Displaying dependencies in the admin interface
+
+Next, you probably want to display the dependencies or dependents (usages) of an entity in the admin interface.
+
+#### 1. API: Add `@EntityInfo()` to entity
+
+The `@EntityInfo()` decorator allows you to configure which information about an entity should be displayed in the admin interface.
+You can provide a `name` and `secondaryInformation`.
+
+The decorator accepts two inputs:
+
+##### `GetEntityInfo` method
 
 The simple way is to provide a function returning a `name` and (optional) `secondaryInformation` based on the entity instance.
 
@@ -48,9 +89,10 @@ The simple way is to provide a function returning a `name` and (optional) `secon
 @EntityInfo<News>((news) => ({ name: news.title, secondaryInformation: news.slug }))
 ```
 
-#### `EntityInfoService`
+##### `EntityInfoService`
 
-If you need to load additional information from a service or repository to provide the entity info, you can implement an `EntityInfoService`. In this service, you can use Nest's dependency injection.
+If you need to load additional information from a service or repository, you can implement an `EntityInfoService`.
+In this service, you can use Nest's dependency injection.
 
 The service must offer a `getEntityInfo()` method returning a `name` and (optional) `secondaryInformation`.
 
@@ -74,11 +116,29 @@ export class FilesEntityInfoService implements EntityInfoServiceInterface<FileIn
 }
 ```
 
-### 2. Implement the DependencyInterface (Admin)
+###### Helper service for documents
 
-The DependencyInterface requires a translatable `displayName` and a `resolvePath()` method providing a path to edit an entity or its blocks.
+For documents, you can simply use the `PageTreeNodeDocumentEntityInfoService`.
+It will return the `PageTreeNode` name and slug (as secondary information).
 
 ```ts
+// page.entity.ts
+@EntityInfo(PageTreeNodeDocumentEntityInfoService)
+export class Page extends BaseEntity<Page, "id"> implements DocumentInterface {
+    // ...
+}
+```
+
+#### 2. Admin: Implement the `DependencyInterface`
+
+The DependencyInterface requires a translatable `displayName` and a `resolvePath()` method.
+`resolvePath` provides a URL path to the edit page of an entity or a specific block.
+
+<details>
+
+<summary>Example of a `resolvePath` method</summary>
+
+```tsx
 // NewsDependency.tsx
 export const NewsDependency: DependencyInterface = {
     displayName: <FormattedMessage id="news.displayName" defaultMessage="News" />,
@@ -117,7 +177,23 @@ export const NewsDependency: DependencyInterface = {
 };
 ```
 
-You may also use the `createDependencyMethods` helper to simplify resolving the path to the entity/block. Use the `basePath` option to specify where the entity is located in the Admin.
+</details>
+
+Usually, you don't have to write the `resolvePath` method yourself.
+Instead, use one of our helpers:
+
+##### `createDependencyMethods`
+
+For most entities, you can use the `createDependencyMethods` helper.
+
+The `rootQueryName` specifies the name of the GraphQL query used to load the entity.
+It should normally be the camelCase version of the entity name.
+
+The `rootBlocks` specify which of the entity's fields contain block data.
+These should be the same fields you annotated with `@RootBlock()` in the API.
+You must also specify the used Block and - if necessary - the path under which the block is available.
+
+The `basePath` option specifies the URL path to the entity's edit page.
 
 ```tsx
 // NewsDependency.tsx
@@ -135,7 +211,10 @@ export const NewsDependency: DependencyInterface = {
 };
 ```
 
-For document types you may use the `createDocumentDependencyMethods` helper that also loads the page tree node the document is attached to:
+##### `createDocumentDependencyMethods`
+
+For document types you can use the `createDocumentDependencyMethods` helper.
+It loads the document and also the `PageTreeNode` the document is attached to.
 
 ```tsx
 // Page.tsx
@@ -158,11 +237,11 @@ export const Page: DocumentInterface<Pick<GQLPage, "content" | "seo">, GQLPageIn
 };
 ```
 
-### 3. Register the DependencyInterface at the DependenciesConfigProvider
+#### 3. Admin: Register the `DependencyInterface` at the `DependenciesConfigProvider`
 
 The key must be the name of the GraphQL object type associated with the entity.
 
-```ts
+```tsx
 // App.tsx
 // ...
 <DependenciesConfigProvider
@@ -175,3 +254,72 @@ The key must be the name of the GraphQL object type associated with the entity.
 </DependenciesConfigProvider>
 // ...
 ```
+
+Now, the DAM's "Dependents" tab should work.
+If that was your goal, you can stop here.
+Otherwise, continue following the guide.
+
+#### 4. API: Add field resolvers
+
+If you want to query the dependencies or dependents of an entity, use the factories provided by the library.
+**Only do this where it makes sense.**
+
+```ts
+// news.module.ts
+@Module({
+    // ...
+    providers: [
+        // ...
+        DependenciesResolverFactory.create(News),
+        DependentsResolverFactory.create(News),
+    ],
+})
+export class NewsModule {}
+```
+
+#### 5. Admin: Display dependencies with the `DependencyList` component
+
+You can use the `DependencyList` component provided by `@comet/cms-admin` to display dependencies or dependents.
+The DAM uses this component in its "Dependents" tab.
+
+The component requires two props:
+
+-   `query`: A GraphQL query. It must have a `dependencies` or `dependents` field resolver.
+-   `variables`: The variables for the query.
+
+<details>
+
+<summary>A usage could look like this</summary>
+
+```tsx
+<DependencyList
+    query={gql`
+        query DamFileDependencies(
+            $id: ID!
+            $offset: Int!
+            $limit: Int!
+            $forceRefresh: Boolean = false
+        ) {
+            item: damFile(id: $id) {
+                id
+                dependents(offset: $offset, limit: $limit, forceRefresh: $forceRefresh) {
+                    nodes {
+                        rootGraphqlObjectType
+                        rootId
+                        rootColumnName
+                        jsonPath
+                        name
+                        secondaryInformation
+                    }
+                    totalCount
+                }
+            }
+        }
+    `}
+    variables={{
+        id: id,
+    }}
+/>
+```
+
+</details>

docs/docs/migration/migration-from-v5-to-v6.md

@@ -160,6 +160,43 @@ It automatically installs the new versions of all `@comet` libraries, runs an ES
       }),
     ```
 
+### Block Index
+
+Automate the creation of the block index during local development:
+
+1. Call `DependenciesService#createViews` in your `FixturesConsole`:
+
+```diff
+  // ...
+  await this.publicUploadsFixtureService.generatePublicUploads();
+
++ await this.dependenciesService.createViews();
+
+  await this.orm.em.flush();
+  // ...
+```
+
+2. Call `createBlockIndexViews` before starting the API (after the migrations):
+
+Remove `db:migrate` from `dev-pm.config.js`:
+
+```diff
+{
+   name: "api",
+-  script: "npm --prefix api run db:migrate && npm --prefix api run start:dev",
++  script: "npm --prefix api run start:dev",
+   group: "api",
+   waitOn: ["tcp:$POSTGRESQL_PORT", "tcp:$IMGPROXY_PORT"],
+},
+```
+
+Add `db:migrate` and `createBlockIndexViews` to `start:dev` script in package.json:
+
+```diff
+- "start:dev": "npm run prebuild && dotenv -c secrets -- nest start --watch --preserveWatchOutput",
++ "start:dev": "npm run prebuild && npm run db:migrate && npm run console createBlockIndexViews && dotenv -c secrets -- nest start --watch --preserveWatchOutput",
+```
+
 ## Admin
 
 ### User Permissions

packages/admin/cms-admin/src/blocks/ExternalLinkBlock.tsx

@@ -6,7 +6,7 @@ import { FormattedMessage } from "react-intl";
 
 import { ExternalLinkBlockData, ExternalLinkBlockInput } from "../blocks.generated";
 import { isLinkTarget } from "../validation/isLinkTarget";
-import { validateUrl } from "../validation/validateUrl";
+import { validateLinkTarget } from "../validation/validateLinkTarget";
 
 type State = ExternalLinkBlockData;
 
@@ -68,7 +68,7 @@ export const ExternalLinkBlock: BlockInterface<ExternalLinkBlockData, State, Ext
                         name="targetUrl"
                         component={FinalFormInput}
                         fullWidth
-                        validate={(url) => validateUrl(url)}
+                        validate={(url) => validateLinkTarget(url)}
                         disableContentTranslation
                     />
                     <Field name="openInNewWindow" type="checkbox">

packages/admin/cms-admin/src/validation/validateLinkTarget.tsx

@@ -0,0 +1,10 @@
+import React from "react";
+import { FormattedMessage } from "react-intl";
+
+import { isLinkTarget } from "./isLinkTarget";
+
+export function validateLinkTarget(linkTarget?: string) {
+    if (linkTarget && !isLinkTarget(linkTarget)) {
+        return <FormattedMessage id="comet.validation.validateLinkTarget.invalid" defaultMessage="Invalid link target" />;
+    }
+}

packages/admin/cms-admin/src/validation/validateUrl.tsx

@@ -2,7 +2,7 @@ import { isURL } from "class-validator";
 import React from "react";
 import { FormattedMessage } from "react-intl";
 
-export function validateUrl(url: string) {
+export function validateUrl(url?: string) {
     if (url && !isURL(url)) {
         return <FormattedMessage id="comet.validation.validateUrl.invalid" defaultMessage="Invalid URL" />;
     }

packages/api/cms-api/src/builds/build-templates.resolver.ts

@@ -1,24 +1,22 @@
+import { UseGuards } from "@nestjs/common";
 import { Query, Resolver } from "@nestjs/graphql";
 
 import { GetCurrentUser } from "../auth/decorators/get-current-user.decorator";
 import { LABEL_ANNOTATION } from "../kubernetes/kubernetes.constants";
-import { KubernetesService } from "../kubernetes/kubernetes.service";
+import { PreventLocalInvocationGuard } from "../kubernetes/prevent-local-invocation.guard";
 import { RequiredPermission } from "../user-permissions/decorators/required-permission.decorator";
 import { CurrentUser } from "../user-permissions/dto/current-user";
 import { BuildTemplatesService } from "./build-templates.service";
 import { BuildTemplateObject } from "./dto/build-template.object";
 
 @Resolver(() => BuildTemplateObject)
 @RequiredPermission(["builds"], { skipScopeCheck: true }) // Scopes are checked in Code
+@UseGuards(PreventLocalInvocationGuard)
 export class BuildTemplatesResolver {
-    constructor(private readonly kubernetesService: KubernetesService, private readonly buildTemplatesService: BuildTemplatesService) {}
+    constructor(private readonly buildTemplatesService: BuildTemplatesService) {}
 
     @Query(() => [BuildTemplateObject])
     async buildTemplates(@GetCurrentUser() user: CurrentUser): Promise<BuildTemplateObject[]> {
-        if (this.kubernetesService.localMode) {
-            throw Error("Not available in local mode!");
-        }
-
         const builderCronJobs = await this.buildTemplatesService.getAllowedBuilderCronJobs(user);
         return builderCronJobs.map((cronJob) => ({
             id: cronJob.metadata?.uid as string,