@depup/payload 3.79.1-depup.0

package/dist/utilities/sanitizePermissions.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/sanitizePermissions.spec.ts"],"sourcesContent":["import { describe, it, expect } from 'vitest'\nimport type { CollectionPermission, Permissions } from '../auth/types.js'\n\nimport { sanitizePermissions } from './sanitizePermissions.js'\n\n/* eslint-disable perfectionist/sort-objects */\ndescribe('recursivelySanitizePermissions', () => {\n  it('should sanitize a basic collection', () => {\n    const permissions: CollectionPermission = {\n      fields: {\n        text: {\n          create: {\n            permission: true,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n      },\n      create: {\n        permission: true,\n      },\n      read: {\n        permission: true,\n      },\n      update: {\n        permission: true,\n      },\n      delete: {\n        permission: false,\n      },\n      readVersions: {\n        permission: true,\n      },\n    }\n\n    sanitizePermissions({\n      canAccessAdmin: true,\n      collections: {\n        test: permissions,\n      },\n    })\n\n    expect(permissions).toStrictEqual({\n      fields: true,\n      create: true,\n      read: true,\n      update: true,\n      readVersions: true,\n    })\n  })\n\n  it('should sanitize a collection with where queries', () => {\n    const permissions: CollectionPermission = {\n      fields: {},\n      create: {\n        permission: true,\n        where: {\n          user: {\n            equals: 2,\n          },\n        },\n      },\n      read: {\n        permission: true,\n      },\n      update: {\n        permission: true,\n      },\n      delete: {\n        permission: false,\n      },\n      readVersions: {\n        permission: true,\n        where: {\n          user: {\n            equals: 1,\n          },\n        },\n      },\n    }\n\n    sanitizePermissions({\n      canAccessAdmin: true,\n      collections: {\n        test: permissions,\n      },\n    })\n    expect(permissions).toStrictEqual({\n      create: {\n        permission: true,\n        where: {\n          user: {\n            equals: 2,\n          },\n        },\n      },\n      fields: true,\n      read: true,\n      update: true,\n      readVersions: {\n        permission: true,\n        where: {\n          user: {\n            equals: 1,\n          },\n        },\n      },\n    })\n  })\n\n  it('should sanitize a collection with nested fields in blocks', () => {\n    const permissions: CollectionPermission = {\n      create: {\n        permission: true,\n      },\n      delete: {\n        permission: true,\n      },\n      read: {\n        permission: true,\n      },\n      update: {\n        permission: true,\n      },\n      fields: {\n        layout: {\n          create: {\n            permission: true,\n          },\n          blocks: {\n            blockWithTitle: {\n              fields: {\n                blockTitle: {\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                id: {\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                blockName: {\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n              },\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n      },\n    }\n\n    sanitizePermissions({\n      canAccessAdmin: true,\n      collections: {\n        test: permissions,\n      },\n    })\n    expect(permissions).toStrictEqual({\n      create: true,\n      delete: true,\n      fields: true,\n      read: true,\n      update: true,\n    })\n  })\n\n  it('should sanitize a collection with nested fields in blocks without truncating', () => {\n    const permissions: CollectionPermission = {\n      create: {\n        permission: true,\n      },\n      delete: {\n        permission: true,\n      },\n      read: {\n        permission: true,\n      },\n      update: {\n        permission: true,\n      },\n      fields: {\n        layout: {\n          create: {\n            permission: true,\n          },\n          blocks: {\n            blockWithTitle: {\n              fields: {\n                blockTitle: {\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                id: {\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                blockName: {\n                  create: {\n                    permission: false,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: false,\n                  },\n                },\n              },\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n      },\n    }\n\n    sanitizePermissions({\n      canAccessAdmin: true,\n      collections: {\n        test: permissions,\n      },\n    })\n    expect(permissions).toStrictEqual({\n      create: true,\n      delete: true,\n      read: true,\n      update: true,\n      fields: {\n        layout: {\n          create: true,\n          blocks: {\n            blockWithTitle: {\n              fields: {\n                blockTitle: true,\n                id: true,\n                blockName: {\n                  read: true,\n                },\n              },\n              create: true,\n              update: true,\n              read: true,\n            },\n          },\n          read: true,\n          update: true,\n        },\n      },\n    })\n  })\n\n  it('should sanitize a collection with nested fields in arrays', () => {\n    const permissions: Partial<CollectionPermission> = {\n      fields: {\n        arrayOfText: {\n          create: {\n            permission: true,\n          },\n          fields: {\n            text: {\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n            hiddenText: {\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: false,\n              },\n              update: {\n                permission: true,\n              },\n            },\n            id: {\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n      },\n    }\n\n    sanitizePermissions({\n      canAccessAdmin: true,\n      collections: {\n        test: permissions as CollectionPermission,\n      },\n    })\n    expect(permissions).toStrictEqual({\n      fields: {\n        arrayOfText: {\n          create: true,\n          fields: {\n            text: true,\n            hiddenText: {\n              create: true,\n              update: true,\n            },\n            id: true,\n          },\n          read: true,\n          update: true,\n        },\n      },\n    })\n  })\n\n  it('should sanitize blocks with subfield named blocks', () => {\n    const permissions: CollectionPermission = {\n      fields: {\n        content: {\n          create: { permission: true },\n          blocks: {\n            test: {\n              fields: {\n                blocks: {\n                  create: { permission: true },\n                  fields: {\n                    arrayText: {\n                      create: { permission: true },\n                      read: { permission: true },\n                      update: { permission: true },\n                    },\n                    id: {\n                      create: { permission: true },\n                      read: { permission: true },\n                      update: { permission: true },\n                    },\n                  },\n                  read: { permission: true },\n                  update: { permission: true },\n                },\n                id: {\n                  create: { permission: true },\n                  read: { permission: true },\n                  update: { permission: true },\n                },\n                blockName: {\n                  create: { permission: true },\n                  read: { permission: true },\n                  update: { permission: true },\n                },\n              },\n              create: { permission: true },\n              read: { permission: true },\n              update: { permission: true },\n            },\n          },\n          read: { permission: true },\n          update: { permission: true },\n        },\n      },\n      create: {\n        permission: true,\n      },\n      read: {\n        permission: true,\n      },\n      update: {\n        permission: true,\n      },\n      delete: {\n        permission: false,\n      },\n      readVersions: {\n        permission: true,\n      },\n    }\n\n    sanitizePermissions({\n      canAccessAdmin: true,\n      collections: {\n        test: permissions,\n      },\n    })\n    expect(permissions).toStrictEqual({\n      fields: true,\n      create: true,\n      read: true,\n      update: true,\n      readVersions: true,\n    })\n  })\n\n  it('should sanitize a collection with nested fields in richText', () => {\n    const permissions: Partial<CollectionPermission> = {\n      fields: {\n        text: {\n          create: {\n            permission: true,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        richText: {\n          create: {\n            permission: true,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n      },\n    }\n\n    sanitizePermissions({\n      canAccessAdmin: true,\n      collections: {\n        test: permissions as CollectionPermission,\n      },\n    })\n    expect(permissions).toStrictEqual({\n      fields: true,\n    })\n  })\n\n  it('ensure complex permissions are sanitized correctly', () => {\n    // This tests a bug where the sanitizePermissions function would previously not correctly sanitize\n    const permissions: Partial<CollectionPermission> = {\n      fields: {\n        GR: {\n          create: {\n            permission: false,\n          },\n          fields: {\n            rt: {\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n            aaa: {\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        tab1: {\n          fields: {\n            rt2: {\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n            blocks2: {\n              create: {\n                permission: false,\n              },\n              blocks: {\n                myBlock: {\n                  fields: {\n                    art: {\n                      create: {\n                        permission: false,\n                      },\n                      read: {\n                        permission: true,\n                      },\n                      update: {\n                        permission: true,\n                      },\n                    },\n                    id: {\n                      create: {\n                        permission: false,\n                      },\n                      read: {\n                        permission: true,\n                      },\n                      update: {\n                        permission: true,\n                      },\n                    },\n                    blockName: {\n                      create: {\n                        permission: false,\n                      },\n                      read: {\n                        permission: true,\n                      },\n                      update: {\n                        permission: true,\n                      },\n                    },\n                  },\n                  create: {\n                    permission: false,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          create: {\n            permission: false,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        rt3: {\n          create: {\n            permission: false,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        blocks3: {\n          create: {\n            permission: false,\n          },\n          blocks: {\n            myBlock: {\n              fields: {\n                art: {\n                  create: {\n                    permission: false,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                id: {\n                  create: {\n                    permission: false,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                blockName: {\n                  create: {\n                    permission: false,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n              },\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        array: {\n          create: {\n            permission: false,\n          },\n          fields: {\n            art: {\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n            id: {\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        arrayWithAccessFalse: {\n          create: {\n            permission: false,\n          },\n          fields: {\n            art: {\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: false,\n              },\n            },\n            id: {\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: false,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: false,\n          },\n        },\n        blocks: {\n          create: {\n            permission: false,\n          },\n          blocks: {\n            myBlock: {\n              fields: {\n                art: {\n                  create: {\n                    permission: false,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                id: {\n                  create: {\n                    permission: false,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                blockName: {\n                  create: {\n                    permission: false,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n              },\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        updatedAt: {\n          create: {\n            permission: false,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        createdAt: {\n          create: {\n            permission: false,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n      },\n      create: {\n        permission: false,\n      },\n      read: {\n        permission: true,\n      },\n      update: {\n        permission: true,\n      },\n      delete: {\n        permission: true,\n      },\n    }\n\n    sanitizePermissions({\n      canAccessAdmin: true,\n      collections: {\n        test: permissions as CollectionPermission,\n      },\n    })\n    expect(permissions).toStrictEqual({\n      fields: {\n        GR: {\n          fields: {\n            rt: {\n              read: true,\n              update: true,\n            },\n            aaa: {\n              read: true,\n              update: true,\n            },\n          },\n          read: true,\n          update: true,\n        },\n        tab1: {\n          fields: {\n            rt2: {\n              read: true,\n              update: true,\n            },\n            blocks2: {\n              blocks: {\n                myBlock: {\n                  fields: {\n                    art: {\n                      read: true,\n                      update: true,\n                    },\n                    id: {\n                      read: true,\n                      update: true,\n                    },\n                    blockName: {\n                      read: true,\n                      update: true,\n                    },\n                  },\n                  read: true,\n                  update: true,\n                },\n              },\n              read: true,\n              update: true,\n            },\n          },\n          read: true,\n          update: true,\n        },\n        rt3: {\n          read: true,\n          update: true,\n        },\n        blocks3: {\n          blocks: {\n            myBlock: {\n              fields: {\n                art: {\n                  read: true,\n                  update: true,\n                },\n                id: {\n                  read: true,\n                  update: true,\n                },\n                blockName: {\n                  read: true,\n                  update: true,\n                },\n              },\n              read: true,\n              update: true,\n            },\n          },\n          read: true,\n          update: true,\n        },\n        array: {\n          fields: {\n            art: {\n              read: true,\n              update: true,\n            },\n            id: {\n              read: true,\n              update: true,\n            },\n          },\n          read: true,\n          update: true,\n        },\n        arrayWithAccessFalse: {\n          fields: {\n            art: {\n              read: true,\n            },\n            id: {\n              read: true,\n            },\n          },\n          read: true,\n        },\n        blocks: {\n          blocks: {\n            myBlock: {\n              fields: {\n                art: {\n                  read: true,\n                  update: true,\n                },\n                id: {\n                  read: true,\n                  update: true,\n                },\n                blockName: {\n                  read: true,\n                  update: true,\n                },\n              },\n              read: true,\n              update: true,\n            },\n          },\n          read: true,\n          update: true,\n        },\n        updatedAt: {\n          read: true,\n          update: true,\n        },\n        createdAt: {\n          read: true,\n          update: true,\n        },\n      },\n      read: true,\n      update: true,\n      delete: true,\n    })\n  })\n\n  it('ensure complex permissions are sanitized correctly 2', () => {\n    // This tests a bug where the sanitizePermissions function would previously not correctly sanitize\n    const permissions: Partial<CollectionPermission> = {\n      fields: {\n        GR: {\n          create: {\n            permission: true,\n          },\n          fields: {\n            rt: {\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n            aaa: {\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        tab1: {\n          fields: {\n            rt2: {\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n            blocks2: {\n              create: {\n                permission: true,\n              },\n              blocks: {\n                myBlock: {\n                  fields: {\n                    art: {\n                      create: {\n                        permission: true,\n                      },\n                      read: {\n                        permission: true,\n                      },\n                      update: {\n                        permission: true,\n                      },\n                    },\n                    id: {\n                      create: {\n                        permission: true,\n                      },\n                      read: {\n                        permission: true,\n                      },\n                      update: {\n                        permission: true,\n                      },\n                    },\n                    blockName: {\n                      create: {\n                        permission: true,\n                      },\n                      read: {\n                        permission: true,\n                      },\n                      update: {\n                        permission: true,\n                      },\n                    },\n                  },\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          create: {\n            permission: true,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        rt3: {\n          create: {\n            permission: true,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        arrayWithAccessFalse: {\n          create: {\n            permission: false,\n          },\n          fields: {\n            art: {\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: false,\n              },\n            },\n            id: {\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: false,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: false,\n          },\n        },\n        blocks: {\n          create: {\n            permission: true,\n          },\n          blocks: {\n            myBlock: {\n              fields: {\n                art: {\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                id: {\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                blockName: {\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n              },\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        updatedAt: {\n          create: {\n            permission: true,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        createdAt: {\n          create: {\n            permission: true,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n      },\n      create: {\n        permission: true,\n      },\n      read: {\n        permission: true,\n      },\n      update: {\n        permission: true,\n      },\n      delete: {\n        permission: true,\n      },\n    }\n\n    sanitizePermissions({\n      canAccessAdmin: true,\n      collections: {\n        test: permissions as CollectionPermission,\n      },\n    })\n    expect(permissions).toStrictEqual({\n      fields: {\n        GR: true,\n        tab1: true,\n        rt3: true,\n        arrayWithAccessFalse: {\n          fields: {\n            art: {\n              read: true,\n            },\n            id: {\n              read: true,\n            },\n          },\n          read: true,\n        },\n        blocks: true,\n        updatedAt: true,\n        createdAt: true,\n      },\n      create: true,\n      read: true,\n      update: true,\n      delete: true,\n    })\n  })\n\n  it('ensure complex permissions are sanitized correctly 3', () => {\n    // This tests a bug where the sanitizePermissions function would previously not correctly sanitize\n    const permissions: Partial<CollectionPermission> = {\n      fields: {\n        GR: {\n          create: {\n            permission: true,\n          },\n          fields: {\n            rt: {\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n            aaa: {\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        tab1: {\n          fields: {\n            rt2: {\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n            blocks2: {\n              create: {\n                permission: true,\n              },\n              blocks: {\n                myBlock: {\n                  fields: {\n                    art: {\n                      create: {\n                        permission: true,\n                      },\n                      read: {\n                        permission: true,\n                      },\n                      update: {\n                        permission: true,\n                      },\n                    },\n                    id: {\n                      create: {\n                        permission: true,\n                      },\n                      read: {\n                        permission: true,\n                      },\n                      update: {\n                        permission: true,\n                      },\n                    },\n                    blockName: {\n                      create: {\n                        permission: true,\n                      },\n                      read: {\n                        permission: true,\n                      },\n                      update: {\n                        permission: true,\n                      },\n                    },\n                  },\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          create: {\n            permission: true,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        rt3: {\n          create: {\n            permission: true,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        blocks: {\n          create: {\n            permission: true,\n          },\n          blocks: {\n            myBlock: {\n              fields: {\n                art: {\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                id: {\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n                blockName: {\n                  create: {\n                    permission: true,\n                  },\n                  read: {\n                    permission: true,\n                  },\n                  update: {\n                    permission: true,\n                  },\n                },\n              },\n              create: {\n                permission: true,\n              },\n              read: {\n                permission: true,\n              },\n              update: {\n                permission: true,\n              },\n            },\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        updatedAt: {\n          create: {\n            permission: true,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n        createdAt: {\n          create: {\n            permission: true,\n          },\n          read: {\n            permission: true,\n          },\n          update: {\n            permission: true,\n          },\n        },\n      },\n      create: {\n        permission: true,\n      },\n      read: {\n        permission: true,\n      },\n      update: {\n        permission: true,\n      },\n      delete: {\n        permission: true,\n      },\n    }\n\n    sanitizePermissions({\n      canAccessAdmin: true,\n      collections: {\n        test: permissions as CollectionPermission,\n      },\n    })\n    expect(permissions).toStrictEqual({\n      fields: true,\n      create: true,\n      read: true,\n      update: true,\n      delete: true,\n    })\n  })\n})\n\ndescribe('sanitizePermissions', () => {\n  it('should return nothing for unauthenticated user', () => {\n    const permissions: Permissions = {\n      canAccessAdmin: false,\n      collections: {\n        preferencesCollectionSlug: {\n          fields: {\n            user: {\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: false,\n              },\n              update: {\n                permission: false,\n              },\n            },\n          },\n          create: {\n            permission: false,\n          },\n          read: {\n            permission: false,\n          },\n          update: {\n            permission: false,\n          },\n          delete: {\n            permission: false,\n          },\n        },\n      },\n      globals: {\n        menu: {\n          fields: {\n            globalText: {\n              create: {\n                permission: false,\n              },\n              read: {\n                permission: false,\n              },\n              update: {\n                permission: false,\n              },\n            },\n          },\n          read: {\n            permission: false,\n          },\n          update: {\n            permission: false,\n          },\n        },\n      },\n    }\n\n    const sanitizedPermissions = sanitizePermissions(permissions)\n\n    expect(sanitizedPermissions).toStrictEqual({})\n  })\n})\n"],"names":["describe","it","expect","sanitizePermissions","permissions","fields","text","create","permission","read","update","delete","readVersions","canAccessAdmin","collections","test","toStrictEqual","where","user","equals","layout","blocks","blockWithTitle","blockTitle","id","blockName","arrayOfText","hiddenText","content","arrayText","richText","GR","rt","aaa","tab1","rt2","blocks2","myBlock","art","rt3","blocks3","array","arrayWithAccessFalse","updatedAt","createdAt","preferencesCollectionSlug","globals","menu","globalText","sanitizedPermissions"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,EAAE,EAAEC,MAAM,QAAQ,SAAQ;AAG7C,SAASC,mBAAmB,QAAQ,2BAA0B;AAE9D,6CAA6C,GAC7CH,SAAS,kCAAkC;IACzCC,GAAG,sCAAsC;QACvC,MAAMG,cAAoC;YACxCC,QAAQ;gBACNC,MAAM;oBACJC,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;YACF;YACAD,QAAQ;gBACNC,YAAY;YACd;YACAC,MAAM;gBACJD,YAAY;YACd;YACAE,QAAQ;gBACNF,YAAY;YACd;YACAG,QAAQ;gBACNH,YAAY;YACd;YACAI,cAAc;gBACZJ,YAAY;YACd;QACF;QAEAL,oBAAoB;YAClBU,gBAAgB;YAChBC,aAAa;gBACXC,MAAMX;YACR;QACF;QAEAF,OAAOE,aAAaY,aAAa,CAAC;YAChCX,QAAQ;YACRE,QAAQ;YACRE,MAAM;YACNC,QAAQ;YACRE,cAAc;QAChB;IACF;IAEAX,GAAG,mDAAmD;QACpD,MAAMG,cAAoC;YACxCC,QAAQ,CAAC;YACTE,QAAQ;gBACNC,YAAY;gBACZS,OAAO;oBACLC,MAAM;wBACJC,QAAQ;oBACV;gBACF;YACF;YACAV,MAAM;gBACJD,YAAY;YACd;YACAE,QAAQ;gBACNF,YAAY;YACd;YACAG,QAAQ;gBACNH,YAAY;YACd;YACAI,cAAc;gBACZJ,YAAY;gBACZS,OAAO;oBACLC,MAAM;wBACJC,QAAQ;oBACV;gBACF;YACF;QACF;QAEAhB,oBAAoB;YAClBU,gBAAgB;YAChBC,aAAa;gBACXC,MAAMX;YACR;QACF;QACAF,OAAOE,aAAaY,aAAa,CAAC;YAChCT,QAAQ;gBACNC,YAAY;gBACZS,OAAO;oBACLC,MAAM;wBACJC,QAAQ;oBACV;gBACF;YACF;YACAd,QAAQ;YACRI,MAAM;YACNC,QAAQ;YACRE,cAAc;gBACZJ,YAAY;gBACZS,OAAO;oBACLC,MAAM;wBACJC,QAAQ;oBACV;gBACF;YACF;QACF;IACF;IAEAlB,GAAG,6DAA6D;QAC9D,MAAMG,cAAoC;YACxCG,QAAQ;gBACNC,YAAY;YACd;YACAG,QAAQ;gBACNH,YAAY;YACd;YACAC,MAAM;gBACJD,YAAY;YACd;YACAE,QAAQ;gBACNF,YAAY;YACd;YACAH,QAAQ;gBACNe,QAAQ;oBACNb,QAAQ;wBACNC,YAAY;oBACd;oBACAa,QAAQ;wBACNC,gBAAgB;4BACdjB,QAAQ;gCACNkB,YAAY;oCACVhB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAgB,IAAI;oCACFjB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAiB,WAAW;oCACTlB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;4BACF;4BACAD,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;YACF;QACF;QAEAL,oBAAoB;YAClBU,gBAAgB;YAChBC,aAAa;gBACXC,MAAMX;YACR;QACF;QACAF,OAAOE,aAAaY,aAAa,CAAC;YAChCT,QAAQ;YACRI,QAAQ;YACRN,QAAQ;YACRI,MAAM;YACNC,QAAQ;QACV;IACF;IAEAT,GAAG,gFAAgF;QACjF,MAAMG,cAAoC;YACxCG,QAAQ;gBACNC,YAAY;YACd;YACAG,QAAQ;gBACNH,YAAY;YACd;YACAC,MAAM;gBACJD,YAAY;YACd;YACAE,QAAQ;gBACNF,YAAY;YACd;YACAH,QAAQ;gBACNe,QAAQ;oBACNb,QAAQ;wBACNC,YAAY;oBACd;oBACAa,QAAQ;wBACNC,gBAAgB;4BACdjB,QAAQ;gCACNkB,YAAY;oCACVhB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAgB,IAAI;oCACFjB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAiB,WAAW;oCACTlB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;4BACF;4BACAD,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;YACF;QACF;QAEAL,oBAAoB;YAClBU,gBAAgB;YAChBC,aAAa;gBACXC,MAAMX;YACR;QACF;QACAF,OAAOE,aAAaY,aAAa,CAAC;YAChCT,QAAQ;YACRI,QAAQ;YACRF,MAAM;YACNC,QAAQ;YACRL,QAAQ;gBACNe,QAAQ;oBACNb,QAAQ;oBACRc,QAAQ;wBACNC,gBAAgB;4BACdjB,QAAQ;gCACNkB,YAAY;gCACZC,IAAI;gCACJC,WAAW;oCACThB,MAAM;gCACR;4BACF;4BACAF,QAAQ;4BACRG,QAAQ;4BACRD,MAAM;wBACR;oBACF;oBACAA,MAAM;oBACNC,QAAQ;gBACV;YACF;QACF;IACF;IAEAT,GAAG,6DAA6D;QAC9D,MAAMG,cAA6C;YACjDC,QAAQ;gBACNqB,aAAa;oBACXnB,QAAQ;wBACNC,YAAY;oBACd;oBACAH,QAAQ;wBACNC,MAAM;4BACJC,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;wBACAmB,YAAY;4BACVpB,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;wBACAgB,IAAI;4BACFjB,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;YACF;QACF;QAEAL,oBAAoB;YAClBU,gBAAgB;YAChBC,aAAa;gBACXC,MAAMX;YACR;QACF;QACAF,OAAOE,aAAaY,aAAa,CAAC;YAChCX,QAAQ;gBACNqB,aAAa;oBACXnB,QAAQ;oBACRF,QAAQ;wBACNC,MAAM;wBACNqB,YAAY;4BACVpB,QAAQ;4BACRG,QAAQ;wBACV;wBACAc,IAAI;oBACN;oBACAf,MAAM;oBACNC,QAAQ;gBACV;YACF;QACF;IACF;IAEAT,GAAG,qDAAqD;QACtD,MAAMG,cAAoC;YACxCC,QAAQ;gBACNuB,SAAS;oBACPrB,QAAQ;wBAAEC,YAAY;oBAAK;oBAC3Ba,QAAQ;wBACNN,MAAM;4BACJV,QAAQ;gCACNgB,QAAQ;oCACNd,QAAQ;wCAAEC,YAAY;oCAAK;oCAC3BH,QAAQ;wCACNwB,WAAW;4CACTtB,QAAQ;gDAAEC,YAAY;4CAAK;4CAC3BC,MAAM;gDAAED,YAAY;4CAAK;4CACzBE,QAAQ;gDAAEF,YAAY;4CAAK;wCAC7B;wCACAgB,IAAI;4CACFjB,QAAQ;gDAAEC,YAAY;4CAAK;4CAC3BC,MAAM;gDAAED,YAAY;4CAAK;4CACzBE,QAAQ;gDAAEF,YAAY;4CAAK;wCAC7B;oCACF;oCACAC,MAAM;wCAAED,YAAY;oCAAK;oCACzBE,QAAQ;wCAAEF,YAAY;oCAAK;gCAC7B;gCACAgB,IAAI;oCACFjB,QAAQ;wCAAEC,YAAY;oCAAK;oCAC3BC,MAAM;wCAAED,YAAY;oCAAK;oCACzBE,QAAQ;wCAAEF,YAAY;oCAAK;gCAC7B;gCACAiB,WAAW;oCACTlB,QAAQ;wCAAEC,YAAY;oCAAK;oCAC3BC,MAAM;wCAAED,YAAY;oCAAK;oCACzBE,QAAQ;wCAAEF,YAAY;oCAAK;gCAC7B;4BACF;4BACAD,QAAQ;gCAAEC,YAAY;4BAAK;4BAC3BC,MAAM;gCAAED,YAAY;4BAAK;4BACzBE,QAAQ;gCAAEF,YAAY;4BAAK;wBAC7B;oBACF;oBACAC,MAAM;wBAAED,YAAY;oBAAK;oBACzBE,QAAQ;wBAAEF,YAAY;oBAAK;gBAC7B;YACF;YACAD,QAAQ;gBACNC,YAAY;YACd;YACAC,MAAM;gBACJD,YAAY;YACd;YACAE,QAAQ;gBACNF,YAAY;YACd;YACAG,QAAQ;gBACNH,YAAY;YACd;YACAI,cAAc;gBACZJ,YAAY;YACd;QACF;QAEAL,oBAAoB;YAClBU,gBAAgB;YAChBC,aAAa;gBACXC,MAAMX;YACR;QACF;QACAF,OAAOE,aAAaY,aAAa,CAAC;YAChCX,QAAQ;YACRE,QAAQ;YACRE,MAAM;YACNC,QAAQ;YACRE,cAAc;QAChB;IACF;IAEAX,GAAG,+DAA+D;QAChE,MAAMG,cAA6C;YACjDC,QAAQ;gBACNC,MAAM;oBACJC,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAsB,UAAU;oBACRvB,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;YACF;QACF;QAEAL,oBAAoB;YAClBU,gBAAgB;YAChBC,aAAa;gBACXC,MAAMX;YACR;QACF;QACAF,OAAOE,aAAaY,aAAa,CAAC;YAChCX,QAAQ;QACV;IACF;IAEAJ,GAAG,sDAAsD;QACvD,kGAAkG;QAClG,MAAMG,cAA6C;YACjDC,QAAQ;gBACN0B,IAAI;oBACFxB,QAAQ;wBACNC,YAAY;oBACd;oBACAH,QAAQ;wBACN2B,IAAI;4BACFzB,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;wBACAyB,KAAK;4BACH1B,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACA0B,MAAM;oBACJ7B,QAAQ;wBACN8B,KAAK;4BACH5B,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;wBACA4B,SAAS;4BACP7B,QAAQ;gCACNC,YAAY;4BACd;4BACAa,QAAQ;gCACNgB,SAAS;oCACPhC,QAAQ;wCACNiC,KAAK;4CACH/B,QAAQ;gDACNC,YAAY;4CACd;4CACAC,MAAM;gDACJD,YAAY;4CACd;4CACAE,QAAQ;gDACNF,YAAY;4CACd;wCACF;wCACAgB,IAAI;4CACFjB,QAAQ;gDACNC,YAAY;4CACd;4CACAC,MAAM;gDACJD,YAAY;4CACd;4CACAE,QAAQ;gDACNF,YAAY;4CACd;wCACF;wCACAiB,WAAW;4CACTlB,QAAQ;gDACNC,YAAY;4CACd;4CACAC,MAAM;gDACJD,YAAY;4CACd;4CACAE,QAAQ;gDACNF,YAAY;4CACd;wCACF;oCACF;oCACAD,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;4BACF;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAD,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACA+B,KAAK;oBACHhC,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAgC,SAAS;oBACPjC,QAAQ;wBACNC,YAAY;oBACd;oBACAa,QAAQ;wBACNgB,SAAS;4BACPhC,QAAQ;gCACNiC,KAAK;oCACH/B,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAgB,IAAI;oCACFjB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAiB,WAAW;oCACTlB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;4BACF;4BACAD,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAiC,OAAO;oBACLlC,QAAQ;wBACNC,YAAY;oBACd;oBACAH,QAAQ;wBACNiC,KAAK;4BACH/B,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;wBACAgB,IAAI;4BACFjB,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAkC,sBAAsB;oBACpBnC,QAAQ;wBACNC,YAAY;oBACd;oBACAH,QAAQ;wBACNiC,KAAK;4BACH/B,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;wBACAgB,IAAI;4BACFjB,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAa,QAAQ;oBACNd,QAAQ;wBACNC,YAAY;oBACd;oBACAa,QAAQ;wBACNgB,SAAS;4BACPhC,QAAQ;gCACNiC,KAAK;oCACH/B,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAgB,IAAI;oCACFjB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAiB,WAAW;oCACTlB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;4BACF;4BACAD,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAmC,WAAW;oBACTpC,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAoC,WAAW;oBACTrC,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;YACF;YACAD,QAAQ;gBACNC,YAAY;YACd;YACAC,MAAM;gBACJD,YAAY;YACd;YACAE,QAAQ;gBACNF,YAAY;YACd;YACAG,QAAQ;gBACNH,YAAY;YACd;QACF;QAEAL,oBAAoB;YAClBU,gBAAgB;YAChBC,aAAa;gBACXC,MAAMX;YACR;QACF;QACAF,OAAOE,aAAaY,aAAa,CAAC;YAChCX,QAAQ;gBACN0B,IAAI;oBACF1B,QAAQ;wBACN2B,IAAI;4BACFvB,MAAM;4BACNC,QAAQ;wBACV;wBACAuB,KAAK;4BACHxB,MAAM;4BACNC,QAAQ;wBACV;oBACF;oBACAD,MAAM;oBACNC,QAAQ;gBACV;gBACAwB,MAAM;oBACJ7B,QAAQ;wBACN8B,KAAK;4BACH1B,MAAM;4BACNC,QAAQ;wBACV;wBACA0B,SAAS;4BACPf,QAAQ;gCACNgB,SAAS;oCACPhC,QAAQ;wCACNiC,KAAK;4CACH7B,MAAM;4CACNC,QAAQ;wCACV;wCACAc,IAAI;4CACFf,MAAM;4CACNC,QAAQ;wCACV;wCACAe,WAAW;4CACThB,MAAM;4CACNC,QAAQ;wCACV;oCACF;oCACAD,MAAM;oCACNC,QAAQ;gCACV;4BACF;4BACAD,MAAM;4BACNC,QAAQ;wBACV;oBACF;oBACAD,MAAM;oBACNC,QAAQ;gBACV;gBACA6B,KAAK;oBACH9B,MAAM;oBACNC,QAAQ;gBACV;gBACA8B,SAAS;oBACPnB,QAAQ;wBACNgB,SAAS;4BACPhC,QAAQ;gCACNiC,KAAK;oCACH7B,MAAM;oCACNC,QAAQ;gCACV;gCACAc,IAAI;oCACFf,MAAM;oCACNC,QAAQ;gCACV;gCACAe,WAAW;oCACThB,MAAM;oCACNC,QAAQ;gCACV;4BACF;4BACAD,MAAM;4BACNC,QAAQ;wBACV;oBACF;oBACAD,MAAM;oBACNC,QAAQ;gBACV;gBACA+B,OAAO;oBACLpC,QAAQ;wBACNiC,KAAK;4BACH7B,MAAM;4BACNC,QAAQ;wBACV;wBACAc,IAAI;4BACFf,MAAM;4BACNC,QAAQ;wBACV;oBACF;oBACAD,MAAM;oBACNC,QAAQ;gBACV;gBACAgC,sBAAsB;oBACpBrC,QAAQ;wBACNiC,KAAK;4BACH7B,MAAM;wBACR;wBACAe,IAAI;4BACFf,MAAM;wBACR;oBACF;oBACAA,MAAM;gBACR;gBACAY,QAAQ;oBACNA,QAAQ;wBACNgB,SAAS;4BACPhC,QAAQ;gCACNiC,KAAK;oCACH7B,MAAM;oCACNC,QAAQ;gCACV;gCACAc,IAAI;oCACFf,MAAM;oCACNC,QAAQ;gCACV;gCACAe,WAAW;oCACThB,MAAM;oCACNC,QAAQ;gCACV;4BACF;4BACAD,MAAM;4BACNC,QAAQ;wBACV;oBACF;oBACAD,MAAM;oBACNC,QAAQ;gBACV;gBACAiC,WAAW;oBACTlC,MAAM;oBACNC,QAAQ;gBACV;gBACAkC,WAAW;oBACTnC,MAAM;oBACNC,QAAQ;gBACV;YACF;YACAD,MAAM;YACNC,QAAQ;YACRC,QAAQ;QACV;IACF;IAEAV,GAAG,wDAAwD;QACzD,kGAAkG;QAClG,MAAMG,cAA6C;YACjDC,QAAQ;gBACN0B,IAAI;oBACFxB,QAAQ;wBACNC,YAAY;oBACd;oBACAH,QAAQ;wBACN2B,IAAI;4BACFzB,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;wBACAyB,KAAK;4BACH1B,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACA0B,MAAM;oBACJ7B,QAAQ;wBACN8B,KAAK;4BACH5B,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;wBACA4B,SAAS;4BACP7B,QAAQ;gCACNC,YAAY;4BACd;4BACAa,QAAQ;gCACNgB,SAAS;oCACPhC,QAAQ;wCACNiC,KAAK;4CACH/B,QAAQ;gDACNC,YAAY;4CACd;4CACAC,MAAM;gDACJD,YAAY;4CACd;4CACAE,QAAQ;gDACNF,YAAY;4CACd;wCACF;wCACAgB,IAAI;4CACFjB,QAAQ;gDACNC,YAAY;4CACd;4CACAC,MAAM;gDACJD,YAAY;4CACd;4CACAE,QAAQ;gDACNF,YAAY;4CACd;wCACF;wCACAiB,WAAW;4CACTlB,QAAQ;gDACNC,YAAY;4CACd;4CACAC,MAAM;gDACJD,YAAY;4CACd;4CACAE,QAAQ;gDACNF,YAAY;4CACd;wCACF;oCACF;oCACAD,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;4BACF;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAD,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACA+B,KAAK;oBACHhC,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAkC,sBAAsB;oBACpBnC,QAAQ;wBACNC,YAAY;oBACd;oBACAH,QAAQ;wBACNiC,KAAK;4BACH/B,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;wBACAgB,IAAI;4BACFjB,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAa,QAAQ;oBACNd,QAAQ;wBACNC,YAAY;oBACd;oBACAa,QAAQ;wBACNgB,SAAS;4BACPhC,QAAQ;gCACNiC,KAAK;oCACH/B,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAgB,IAAI;oCACFjB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAiB,WAAW;oCACTlB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;4BACF;4BACAD,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAmC,WAAW;oBACTpC,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAoC,WAAW;oBACTrC,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;YACF;YACAD,QAAQ;gBACNC,YAAY;YACd;YACAC,MAAM;gBACJD,YAAY;YACd;YACAE,QAAQ;gBACNF,YAAY;YACd;YACAG,QAAQ;gBACNH,YAAY;YACd;QACF;QAEAL,oBAAoB;YAClBU,gBAAgB;YAChBC,aAAa;gBACXC,MAAMX;YACR;QACF;QACAF,OAAOE,aAAaY,aAAa,CAAC;YAChCX,QAAQ;gBACN0B,IAAI;gBACJG,MAAM;gBACNK,KAAK;gBACLG,sBAAsB;oBACpBrC,QAAQ;wBACNiC,KAAK;4BACH7B,MAAM;wBACR;wBACAe,IAAI;4BACFf,MAAM;wBACR;oBACF;oBACAA,MAAM;gBACR;gBACAY,QAAQ;gBACRsB,WAAW;gBACXC,WAAW;YACb;YACArC,QAAQ;YACRE,MAAM;YACNC,QAAQ;YACRC,QAAQ;QACV;IACF;IAEAV,GAAG,wDAAwD;QACzD,kGAAkG;QAClG,MAAMG,cAA6C;YACjDC,QAAQ;gBACN0B,IAAI;oBACFxB,QAAQ;wBACNC,YAAY;oBACd;oBACAH,QAAQ;wBACN2B,IAAI;4BACFzB,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;wBACAyB,KAAK;4BACH1B,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACA0B,MAAM;oBACJ7B,QAAQ;wBACN8B,KAAK;4BACH5B,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;wBACA4B,SAAS;4BACP7B,QAAQ;gCACNC,YAAY;4BACd;4BACAa,QAAQ;gCACNgB,SAAS;oCACPhC,QAAQ;wCACNiC,KAAK;4CACH/B,QAAQ;gDACNC,YAAY;4CACd;4CACAC,MAAM;gDACJD,YAAY;4CACd;4CACAE,QAAQ;gDACNF,YAAY;4CACd;wCACF;wCACAgB,IAAI;4CACFjB,QAAQ;gDACNC,YAAY;4CACd;4CACAC,MAAM;gDACJD,YAAY;4CACd;4CACAE,QAAQ;gDACNF,YAAY;4CACd;wCACF;wCACAiB,WAAW;4CACTlB,QAAQ;gDACNC,YAAY;4CACd;4CACAC,MAAM;gDACJD,YAAY;4CACd;4CACAE,QAAQ;gDACNF,YAAY;4CACd;wCACF;oCACF;oCACAD,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;4BACF;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAD,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACA+B,KAAK;oBACHhC,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAa,QAAQ;oBACNd,QAAQ;wBACNC,YAAY;oBACd;oBACAa,QAAQ;wBACNgB,SAAS;4BACPhC,QAAQ;gCACNiC,KAAK;oCACH/B,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAgB,IAAI;oCACFjB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;gCACAiB,WAAW;oCACTlB,QAAQ;wCACNC,YAAY;oCACd;oCACAC,MAAM;wCACJD,YAAY;oCACd;oCACAE,QAAQ;wCACNF,YAAY;oCACd;gCACF;4BACF;4BACAD,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAmC,WAAW;oBACTpC,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;gBACAoC,WAAW;oBACTrC,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;YACF;YACAD,QAAQ;gBACNC,YAAY;YACd;YACAC,MAAM;gBACJD,YAAY;YACd;YACAE,QAAQ;gBACNF,YAAY;YACd;YACAG,QAAQ;gBACNH,YAAY;YACd;QACF;QAEAL,oBAAoB;YAClBU,gBAAgB;YAChBC,aAAa;gBACXC,MAAMX;YACR;QACF;QACAF,OAAOE,aAAaY,aAAa,CAAC;YAChCX,QAAQ;YACRE,QAAQ;YACRE,MAAM;YACNC,QAAQ;YACRC,QAAQ;QACV;IACF;AACF;AAEAX,SAAS,uBAAuB;IAC9BC,GAAG,kDAAkD;QACnD,MAAMG,cAA2B;YAC/BS,gBAAgB;YAChBC,aAAa;gBACX+B,2BAA2B;oBACzBxC,QAAQ;wBACNa,MAAM;4BACJX,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAD,QAAQ;wBACNC,YAAY;oBACd;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;oBACAG,QAAQ;wBACNH,YAAY;oBACd;gBACF;YACF;YACAsC,SAAS;gBACPC,MAAM;oBACJ1C,QAAQ;wBACN2C,YAAY;4BACVzC,QAAQ;gCACNC,YAAY;4BACd;4BACAC,MAAM;gCACJD,YAAY;4BACd;4BACAE,QAAQ;gCACNF,YAAY;4BACd;wBACF;oBACF;oBACAC,MAAM;wBACJD,YAAY;oBACd;oBACAE,QAAQ;wBACNF,YAAY;oBACd;gBACF;YACF;QACF;QAEA,MAAMyC,uBAAuB9C,oBAAoBC;QAEjDF,OAAO+C,sBAAsBjC,aAAa,CAAC,CAAC;IAC9C;AACF"}

package/dist/utilities/sanitizePopulateParam.d.ts

@@ -0,0 +1,6 @@
+import type { PopulateType } from '../types/index.js';
+/**
+ * Sanitizes REST populate query to PopulateType
+ */
+export declare const sanitizePopulateParam: (unsanitizedPopulate: unknown) => PopulateType | undefined;
+//# sourceMappingURL=sanitizePopulateParam.d.ts.map

package/dist/utilities/sanitizePopulateParam.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizePopulateParam.d.ts","sourceRoot":"","sources":["../../src/utilities/sanitizePopulateParam.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAIrD;;GAEG;AACH,eAAO,MAAM,qBAAqB,wBAAyB,OAAO,KAAG,YAAY,GAAG,SAYnF,CAAA"}

package/dist/utilities/sanitizePopulateParam.js

@@ -0,0 +1,15 @@
+import { sanitizeSelectParam } from './sanitizeSelectParam.js';
+/**
+ * Sanitizes REST populate query to PopulateType
+ */ export const sanitizePopulateParam = (unsanitizedPopulate)=>{
+    if (!unsanitizedPopulate || typeof unsanitizedPopulate !== 'object') {
+        return;
+    }
+    for(const k in unsanitizedPopulate){
+        ;
+        unsanitizedPopulate[k] = sanitizeSelectParam(unsanitizedPopulate[k]);
+    }
+    return unsanitizedPopulate;
+};
+
+//# sourceMappingURL=sanitizePopulateParam.js.map

package/dist/utilities/sanitizePopulateParam.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/sanitizePopulateParam.ts"],"sourcesContent":["import type { PopulateType } from '../types/index.js'\n\nimport { sanitizeSelectParam } from './sanitizeSelectParam.js'\n\n/**\n * Sanitizes REST populate query to PopulateType\n */\nexport const sanitizePopulateParam = (unsanitizedPopulate: unknown): PopulateType | undefined => {\n  if (!unsanitizedPopulate || typeof unsanitizedPopulate !== 'object') {\n    return\n  }\n\n  for (const k in unsanitizedPopulate) {\n    ;(unsanitizedPopulate as Record<string, any>)[k] = sanitizeSelectParam(\n      unsanitizedPopulate[k as keyof typeof unsanitizedPopulate],\n    )\n  }\n\n  return unsanitizedPopulate as PopulateType\n}\n"],"names":["sanitizeSelectParam","sanitizePopulateParam","unsanitizedPopulate","k"],"mappings":"AAEA,SAASA,mBAAmB,QAAQ,2BAA0B;AAE9D;;CAEC,GACD,OAAO,MAAMC,wBAAwB,CAACC;IACpC,IAAI,CAACA,uBAAuB,OAAOA,wBAAwB,UAAU;QACnE;IACF;IAEA,IAAK,MAAMC,KAAKD,oBAAqB;;QACjCA,mBAA2C,CAACC,EAAE,GAAGH,oBACjDE,mBAAmB,CAACC,EAAsC;IAE9D;IAEA,OAAOD;AACT,EAAC"}

package/dist/utilities/sanitizeSelect.d.ts

@@ -0,0 +1,9 @@
+import type { FlattenedField } from '../fields/config/types.js';
+import type { SelectType } from '../types/index.js';
+export declare const sanitizeSelect: ({ fields, forceSelect, select, versions, }: {
+    fields: FlattenedField[];
+    forceSelect?: SelectType;
+    select?: SelectType;
+    versions?: boolean;
+}) => SelectType | undefined;
+//# sourceMappingURL=sanitizeSelect.d.ts.map

package/dist/utilities/sanitizeSelect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizeSelect.d.ts","sourceRoot":"","sources":["../../src/utilities/sanitizeSelect.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,KAAK,EAAqB,UAAU,EAAE,MAAM,mBAAmB,CAAA;AA+GtE,eAAO,MAAM,cAAc,+CAKxB;IACD,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,WAAW,CAAC,EAAE,UAAU,CAAA;IACxB,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,KAAG,UAAU,GAAG,SA2ChB,CAAA"}

package/dist/utilities/sanitizeSelect.js

@@ -0,0 +1,121 @@
+import { deepMergeSimple } from '@payloadcms/translations/utilities';
+import { getSelectMode } from './getSelectMode.js';
+// Transform post.title -> post, post.category.title -> post
+const stripVirtualPathToCurrentCollection = ({ fields, path, versions })=>{
+    const resultSegments = [];
+    if (versions) {
+        resultSegments.push('version');
+        const versionField = fields.find((each)=>each.name === 'version');
+        if (versionField && versionField.type === 'group') {
+            fields = versionField.flattenedFields;
+        }
+    }
+    for (const segment of path.split('.')){
+        const field = fields.find((each)=>each.name === segment);
+        if (!field) {
+            continue;
+        }
+        resultSegments.push(segment);
+        if (field.type === 'relationship' || field.type === 'upload') {
+            return resultSegments.join('.');
+        }
+    }
+    return resultSegments.join('.');
+};
+const getAllVirtualRelations = ({ fields })=>{
+    const result = [];
+    for (const field of fields){
+        if ('virtual' in field && typeof field.virtual === 'string') {
+            result.push(field.virtual);
+        } else if (field.type === 'group' || field.type === 'tab') {
+            const nestedResult = getAllVirtualRelations({
+                fields: field.flattenedFields
+            });
+            for (const nestedItem of nestedResult){
+                result.push(nestedItem);
+            }
+        }
+    }
+    return result;
+};
+const resolveVirtualRelationsToSelect = ({ fields, selectValue, topLevelFields, versions })=>{
+    const result = [];
+    if (selectValue === true) {
+        for (const item of getAllVirtualRelations({
+            fields
+        })){
+            result.push(stripVirtualPathToCurrentCollection({
+                fields: topLevelFields,
+                path: item,
+                versions
+            }));
+        }
+    } else {
+        for(const fieldName in selectValue){
+            const field = fields.find((each)=>each.name === fieldName);
+            if (!field) {
+                continue;
+            }
+            if ('virtual' in field && typeof field.virtual === 'string') {
+                result.push(stripVirtualPathToCurrentCollection({
+                    fields: topLevelFields,
+                    path: field.virtual,
+                    versions
+                }));
+            } else if (field.type === 'group' || field.type === 'tab') {
+                for (const item of resolveVirtualRelationsToSelect({
+                    fields: field.flattenedFields,
+                    selectValue: selectValue[fieldName],
+                    topLevelFields,
+                    versions
+                })){
+                    result.push(stripVirtualPathToCurrentCollection({
+                        fields: topLevelFields,
+                        path: item,
+                        versions
+                    }));
+                }
+            }
+        }
+    }
+    return result;
+};
+export const sanitizeSelect = ({ fields, forceSelect, select, versions })=>{
+    if (!select) {
+        return select;
+    }
+    const selectMode = getSelectMode(select);
+    if (selectMode === 'exclude') {
+        return select;
+    }
+    if (forceSelect) {
+        select = deepMergeSimple(select, forceSelect);
+    }
+    if (select) {
+        const virtualRelations = resolveVirtualRelationsToSelect({
+            fields,
+            selectValue: select,
+            topLevelFields: fields,
+            versions: versions ?? false
+        });
+        for (const path of virtualRelations){
+            let currentRef = select;
+            const segments = path.split('.');
+            for(let i = 0; i < segments.length; i++){
+                const isLast = segments.length - 1 === i;
+                const segment = segments[i];
+                if (isLast) {
+                    currentRef[segment] = true;
+                } else {
+                    if (!(segment in currentRef)) {
+                        currentRef[segment] = {};
+                        currentRef = currentRef[segment];
+                    }
+                }
+            }
+        }
+    }
+    return select;
+};
+
+//# sourceMappingURL=sanitizeSelect.js.map

package/dist/utilities/sanitizeSelect.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/sanitizeSelect.ts"],"sourcesContent":["import { deepMergeSimple } from '@payloadcms/translations/utilities'\n\nimport type { FlattenedField } from '../fields/config/types.js'\nimport type { SelectIncludeType, SelectType } from '../types/index.js'\n\nimport { getSelectMode } from './getSelectMode.js'\n\n// Transform post.title -> post, post.category.title -> post\nconst stripVirtualPathToCurrentCollection = ({\n  fields,\n  path,\n  versions,\n}: {\n  fields: FlattenedField[]\n  path: string\n  versions: boolean\n}) => {\n  const resultSegments: string[] = []\n\n  if (versions) {\n    resultSegments.push('version')\n    const versionField = fields.find((each) => each.name === 'version')\n\n    if (versionField && versionField.type === 'group') {\n      fields = versionField.flattenedFields\n    }\n  }\n\n  for (const segment of path.split('.')) {\n    const field = fields.find((each) => each.name === segment)\n\n    if (!field) {\n      continue\n    }\n\n    resultSegments.push(segment)\n\n    if (field.type === 'relationship' || field.type === 'upload') {\n      return resultSegments.join('.')\n    }\n  }\n\n  return resultSegments.join('.')\n}\n\nconst getAllVirtualRelations = ({ fields }: { fields: FlattenedField[] }) => {\n  const result: string[] = []\n\n  for (const field of fields) {\n    if ('virtual' in field && typeof field.virtual === 'string') {\n      result.push(field.virtual)\n    } else if (field.type === 'group' || field.type === 'tab') {\n      const nestedResult = getAllVirtualRelations({ fields: field.flattenedFields })\n\n      for (const nestedItem of nestedResult) {\n        result.push(nestedItem)\n      }\n    }\n  }\n\n  return result\n}\n\nconst resolveVirtualRelationsToSelect = ({\n  fields,\n  selectValue,\n  topLevelFields,\n  versions,\n}: {\n  fields: FlattenedField[]\n  selectValue: SelectIncludeType | true\n  topLevelFields: FlattenedField[]\n  versions: boolean\n}) => {\n  const result: string[] = []\n  if (selectValue === true) {\n    for (const item of getAllVirtualRelations({ fields })) {\n      result.push(\n        stripVirtualPathToCurrentCollection({ fields: topLevelFields, path: item, versions }),\n      )\n    }\n  } else {\n    for (const fieldName in selectValue) {\n      const field = fields.find((each) => each.name === fieldName)\n      if (!field) {\n        continue\n      }\n\n      if ('virtual' in field && typeof field.virtual === 'string') {\n        result.push(\n          stripVirtualPathToCurrentCollection({\n            fields: topLevelFields,\n            path: field.virtual,\n            versions,\n          }),\n        )\n      } else if (field.type === 'group' || field.type === 'tab') {\n        for (const item of resolveVirtualRelationsToSelect({\n          fields: field.flattenedFields,\n          selectValue: selectValue[fieldName]!,\n          topLevelFields,\n          versions,\n        })) {\n          result.push(\n            stripVirtualPathToCurrentCollection({ fields: topLevelFields, path: item, versions }),\n          )\n        }\n      }\n    }\n  }\n\n  return result\n}\n\nexport const sanitizeSelect = ({\n  fields,\n  forceSelect,\n  select,\n  versions,\n}: {\n  fields: FlattenedField[]\n  forceSelect?: SelectType\n  select?: SelectType\n  versions?: boolean\n}): SelectType | undefined => {\n  if (!select) {\n    return select\n  }\n\n  const selectMode = getSelectMode(select)\n\n  if (selectMode === 'exclude') {\n    return select\n  }\n\n  if (forceSelect) {\n    select = deepMergeSimple(select, forceSelect)\n  }\n\n  if (select) {\n    const virtualRelations = resolveVirtualRelationsToSelect({\n      fields,\n      selectValue: select as SelectIncludeType,\n      topLevelFields: fields,\n      versions: versions ?? false,\n    })\n\n    for (const path of virtualRelations) {\n      let currentRef = select\n      const segments = path.split('.')\n      for (let i = 0; i < segments.length; i++) {\n        const isLast = segments.length - 1 === i\n        const segment = segments[i]!\n\n        if (isLast) {\n          currentRef[segment] = true\n        } else {\n          if (!(segment in currentRef)) {\n            currentRef[segment] = {}\n            currentRef = currentRef[segment]\n          }\n        }\n      }\n    }\n  }\n\n  return select\n}\n"],"names":["deepMergeSimple","getSelectMode","stripVirtualPathToCurrentCollection","fields","path","versions","resultSegments","push","versionField","find","each","name","type","flattenedFields","segment","split","field","join","getAllVirtualRelations","result","virtual","nestedResult","nestedItem","resolveVirtualRelationsToSelect","selectValue","topLevelFields","item","fieldName","sanitizeSelect","forceSelect","select","selectMode","virtualRelations","currentRef","segments","i","length","isLast"],"mappings":"AAAA,SAASA,eAAe,QAAQ,qCAAoC;AAKpE,SAASC,aAAa,QAAQ,qBAAoB;AAElD,4DAA4D;AAC5D,MAAMC,sCAAsC,CAAC,EAC3CC,MAAM,EACNC,IAAI,EACJC,QAAQ,EAKT;IACC,MAAMC,iBAA2B,EAAE;IAEnC,IAAID,UAAU;QACZC,eAAeC,IAAI,CAAC;QACpB,MAAMC,eAAeL,OAAOM,IAAI,CAAC,CAACC,OAASA,KAAKC,IAAI,KAAK;QAEzD,IAAIH,gBAAgBA,aAAaI,IAAI,KAAK,SAAS;YACjDT,SAASK,aAAaK,eAAe;QACvC;IACF;IAEA,KAAK,MAAMC,WAAWV,KAAKW,KAAK,CAAC,KAAM;QACrC,MAAMC,QAAQb,OAAOM,IAAI,CAAC,CAACC,OAASA,KAAKC,IAAI,KAAKG;QAElD,IAAI,CAACE,OAAO;YACV;QACF;QAEAV,eAAeC,IAAI,CAACO;QAEpB,IAAIE,MAAMJ,IAAI,KAAK,kBAAkBI,MAAMJ,IAAI,KAAK,UAAU;YAC5D,OAAON,eAAeW,IAAI,CAAC;QAC7B;IACF;IAEA,OAAOX,eAAeW,IAAI,CAAC;AAC7B;AAEA,MAAMC,yBAAyB,CAAC,EAAEf,MAAM,EAAgC;IACtE,MAAMgB,SAAmB,EAAE;IAE3B,KAAK,MAAMH,SAASb,OAAQ;QAC1B,IAAI,aAAaa,SAAS,OAAOA,MAAMI,OAAO,KAAK,UAAU;YAC3DD,OAAOZ,IAAI,CAACS,MAAMI,OAAO;QAC3B,OAAO,IAAIJ,MAAMJ,IAAI,KAAK,WAAWI,MAAMJ,IAAI,KAAK,OAAO;YACzD,MAAMS,eAAeH,uBAAuB;gBAAEf,QAAQa,MAAMH,eAAe;YAAC;YAE5E,KAAK,MAAMS,cAAcD,aAAc;gBACrCF,OAAOZ,IAAI,CAACe;YACd;QACF;IACF;IAEA,OAAOH;AACT;AAEA,MAAMI,kCAAkC,CAAC,EACvCpB,MAAM,EACNqB,WAAW,EACXC,cAAc,EACdpB,QAAQ,EAMT;IACC,MAAMc,SAAmB,EAAE;IAC3B,IAAIK,gBAAgB,MAAM;QACxB,KAAK,MAAME,QAAQR,uBAAuB;YAAEf;QAAO,GAAI;YACrDgB,OAAOZ,IAAI,CACTL,oCAAoC;gBAAEC,QAAQsB;gBAAgBrB,MAAMsB;gBAAMrB;YAAS;QAEvF;IACF,OAAO;QACL,IAAK,MAAMsB,aAAaH,YAAa;YACnC,MAAMR,QAAQb,OAAOM,IAAI,CAAC,CAACC,OAASA,KAAKC,IAAI,KAAKgB;YAClD,IAAI,CAACX,OAAO;gBACV;YACF;YAEA,IAAI,aAAaA,SAAS,OAAOA,MAAMI,OAAO,KAAK,UAAU;gBAC3DD,OAAOZ,IAAI,CACTL,oCAAoC;oBAClCC,QAAQsB;oBACRrB,MAAMY,MAAMI,OAAO;oBACnBf;gBACF;YAEJ,OAAO,IAAIW,MAAMJ,IAAI,KAAK,WAAWI,MAAMJ,IAAI,KAAK,OAAO;gBACzD,KAAK,MAAMc,QAAQH,gCAAgC;oBACjDpB,QAAQa,MAAMH,eAAe;oBAC7BW,aAAaA,WAAW,CAACG,UAAU;oBACnCF;oBACApB;gBACF,GAAI;oBACFc,OAAOZ,IAAI,CACTL,oCAAoC;wBAAEC,QAAQsB;wBAAgBrB,MAAMsB;wBAAMrB;oBAAS;gBAEvF;YACF;QACF;IACF;IAEA,OAAOc;AACT;AAEA,OAAO,MAAMS,iBAAiB,CAAC,EAC7BzB,MAAM,EACN0B,WAAW,EACXC,MAAM,EACNzB,QAAQ,EAMT;IACC,IAAI,CAACyB,QAAQ;QACX,OAAOA;IACT;IAEA,MAAMC,aAAa9B,cAAc6B;IAEjC,IAAIC,eAAe,WAAW;QAC5B,OAAOD;IACT;IAEA,IAAID,aAAa;QACfC,SAAS9B,gBAAgB8B,QAAQD;IACnC;IAEA,IAAIC,QAAQ;QACV,MAAME,mBAAmBT,gCAAgC;YACvDpB;YACAqB,aAAaM;YACbL,gBAAgBtB;YAChBE,UAAUA,YAAY;QACxB;QAEA,KAAK,MAAMD,QAAQ4B,iBAAkB;YACnC,IAAIC,aAAaH;YACjB,MAAMI,WAAW9B,KAAKW,KAAK,CAAC;YAC5B,IAAK,IAAIoB,IAAI,GAAGA,IAAID,SAASE,MAAM,EAAED,IAAK;gBACxC,MAAME,SAASH,SAASE,MAAM,GAAG,MAAMD;gBACvC,MAAMrB,UAAUoB,QAAQ,CAACC,EAAE;gBAE3B,IAAIE,QAAQ;oBACVJ,UAAU,CAACnB,QAAQ,GAAG;gBACxB,OAAO;oBACL,IAAI,CAAEA,CAAAA,WAAWmB,UAAS,GAAI;wBAC5BA,UAAU,CAACnB,QAAQ,GAAG,CAAC;wBACvBmB,aAAaA,UAAU,CAACnB,QAAQ;oBAClC;gBACF;YACF;QACF;IACF;IAEA,OAAOgB;AACT,EAAC"}

package/dist/utilities/sanitizeSelectParam.d.ts

@@ -0,0 +1,6 @@
+import type { SelectType } from '../types/index.js';
+/**
+ * Sanitizes REST select query to SelectType
+ */
+export declare const sanitizeSelectParam: (unsanitizedSelect: unknown) => SelectType | undefined;
+//# sourceMappingURL=sanitizeSelectParam.d.ts.map

package/dist/utilities/sanitizeSelectParam.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizeSelectParam.d.ts","sourceRoot":"","sources":["../../src/utilities/sanitizeSelectParam.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAEnD;;GAEG;AACH,eAAO,MAAM,mBAAmB,sBAAuB,OAAO,KAAG,UAAU,GAAG,SAe7E,CAAA"}

package/dist/utilities/sanitizeSelectParam.js

@@ -0,0 +1,21 @@
+/**
+ * Sanitizes REST select query to SelectType
+ */ export const sanitizeSelectParam = (unsanitizedSelect)=>{
+    if (unsanitizedSelect && typeof unsanitizedSelect === 'object') {
+        for(const _k in unsanitizedSelect){
+            const k = _k;
+            if (unsanitizedSelect[k] === 'true') {
+                ;
+                unsanitizedSelect[k] = true;
+            } else if (unsanitizedSelect[k] === 'false') {
+                ;
+                unsanitizedSelect[k] = false;
+            } else if (typeof unsanitizedSelect[k] === 'object') {
+                sanitizeSelectParam(unsanitizedSelect[k]);
+            }
+        }
+    }
+    return unsanitizedSelect;
+};
+
+//# sourceMappingURL=sanitizeSelectParam.js.map

package/dist/utilities/sanitizeSelectParam.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/sanitizeSelectParam.ts"],"sourcesContent":["import type { SelectType } from '../types/index.js'\n\n/**\n * Sanitizes REST select query to SelectType\n */\nexport const sanitizeSelectParam = (unsanitizedSelect: unknown): SelectType | undefined => {\n  if (unsanitizedSelect && typeof unsanitizedSelect === 'object') {\n    for (const _k in unsanitizedSelect) {\n      const k = _k as keyof typeof unsanitizedSelect\n      if (unsanitizedSelect[k] === 'true') {\n        ;(unsanitizedSelect as Record<string, any>)[k] = true\n      } else if (unsanitizedSelect[k] === 'false') {\n        ;(unsanitizedSelect as Record<string, any>)[k] = false\n      } else if (typeof unsanitizedSelect[k] === 'object') {\n        sanitizeSelectParam(unsanitizedSelect[k])\n      }\n    }\n  }\n\n  return unsanitizedSelect as SelectType\n}\n"],"names":["sanitizeSelectParam","unsanitizedSelect","_k","k"],"mappings":"AAEA;;CAEC,GACD,OAAO,MAAMA,sBAAsB,CAACC;IAClC,IAAIA,qBAAqB,OAAOA,sBAAsB,UAAU;QAC9D,IAAK,MAAMC,MAAMD,kBAAmB;YAClC,MAAME,IAAID;YACV,IAAID,iBAAiB,CAACE,EAAE,KAAK,QAAQ;;gBACjCF,iBAAyC,CAACE,EAAE,GAAG;YACnD,OAAO,IAAIF,iBAAiB,CAACE,EAAE,KAAK,SAAS;;gBACzCF,iBAAyC,CAACE,EAAE,GAAG;YACnD,OAAO,IAAI,OAAOF,iBAAiB,CAACE,EAAE,KAAK,UAAU;gBACnDH,oBAAoBC,iBAAiB,CAACE,EAAE;YAC1C;QACF;IACF;IAEA,OAAOF;AACT,EAAC"}

package/dist/utilities/sanitizeSortParams.d.ts

@@ -0,0 +1,2 @@
+export declare const sanitizeSortParams: (sort: unknown) => string[] | undefined;
+//# sourceMappingURL=sanitizeSortParams.d.ts.map

package/dist/utilities/sanitizeSortParams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizeSortParams.d.ts","sourceRoot":"","sources":["../../src/utilities/sanitizeSortParams.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB,SAAU,OAAO,KAAG,MAAM,EAAE,GAAG,SAU7D,CAAA"}

package/dist/utilities/sanitizeSortParams.js

@@ -0,0 +1,11 @@
+export const sanitizeSortParams = (sort)=>{
+    if (typeof sort === 'string') {
+        return sort.split(',');
+    }
+    if (Array.isArray(sort) && sort.every((value)=>typeof value === 'string')) {
+        return sort;
+    }
+    return undefined;
+};
+
+//# sourceMappingURL=sanitizeSortParams.js.map

package/dist/utilities/sanitizeSortParams.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/sanitizeSortParams.ts"],"sourcesContent":["export const sanitizeSortParams = (sort: unknown): string[] | undefined => {\n  if (typeof sort === 'string') {\n    return sort.split(',')\n  }\n\n  if (Array.isArray(sort) && sort.every((value) => typeof value === 'string')) {\n    return sort\n  }\n\n  return undefined\n}\n"],"names":["sanitizeSortParams","sort","split","Array","isArray","every","value","undefined"],"mappings":"AAAA,OAAO,MAAMA,qBAAqB,CAACC;IACjC,IAAI,OAAOA,SAAS,UAAU;QAC5B,OAAOA,KAAKC,KAAK,CAAC;IACpB;IAEA,IAAIC,MAAMC,OAAO,CAACH,SAASA,KAAKI,KAAK,CAAC,CAACC,QAAU,OAAOA,UAAU,WAAW;QAC3E,OAAOL;IACT;IAEA,OAAOM;AACT,EAAC"}

package/dist/utilities/sanitizeUrl.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Sanitizes a URL to ensure only allowed protocols are used.
+ * Allows: http, https, mailto, tel, relative paths, and fragment (#) URLs.
+ * Returns '#' for any URL with a disallowed protocol (e.g. javascript:, data:).
+ */
+export declare function sanitizeUrl(url: string): string;
+//# sourceMappingURL=sanitizeUrl.d.ts.map

package/dist/utilities/sanitizeUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizeUrl.d.ts","sourceRoot":"","sources":["../../src/utilities/sanitizeUrl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgC/C"}

package/dist/utilities/sanitizeUrl.js

@@ -0,0 +1,28 @@
+/**
+ * Sanitizes a URL to ensure only allowed protocols are used.
+ * Allows: http, https, mailto, tel, relative paths, and fragment (#) URLs.
+ * Returns '#' for any URL with a disallowed protocol (e.g. javascript:, data:).
+ */ export function sanitizeUrl(url) {
+    if (!url) {
+        return '';
+    }
+    const trimmed = url.trim();
+    // eslint-disable-next-line no-control-regex
+    const cleaned = trimmed.replace(/[\x00-\x1f\x7f]/g, '');
+    if (cleaned.startsWith('#')) {
+        return cleaned;
+    }
+    if (cleaned.startsWith('/') || cleaned.startsWith('./') || cleaned.startsWith('../')) {
+        return cleaned;
+    }
+    const protocolMatch = cleaned.match(/^([a-z][a-z0-9+\-.]*):(?=.)/i);
+    if (protocolMatch) {
+        const protocol = protocolMatch[1].toLowerCase();
+        if (protocol !== 'http' && protocol !== 'https' && protocol !== 'mailto' && protocol !== 'tel') {
+            return '#';
+        }
+    }
+    return cleaned;
+}
+
+//# sourceMappingURL=sanitizeUrl.js.map

package/dist/utilities/sanitizeUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/sanitizeUrl.ts"],"sourcesContent":["/**\n * Sanitizes a URL to ensure only allowed protocols are used.\n * Allows: http, https, mailto, tel, relative paths, and fragment (#) URLs.\n * Returns '#' for any URL with a disallowed protocol (e.g. javascript:, data:).\n */\nexport function sanitizeUrl(url: string): string {\n  if (!url) {\n    return ''\n  }\n\n  const trimmed = url.trim()\n\n  // eslint-disable-next-line no-control-regex\n  const cleaned = trimmed.replace(/[\\x00-\\x1f\\x7f]/g, '')\n\n  if (cleaned.startsWith('#')) {\n    return cleaned\n  }\n\n  if (cleaned.startsWith('/') || cleaned.startsWith('./') || cleaned.startsWith('../')) {\n    return cleaned\n  }\n\n  const protocolMatch = cleaned.match(/^([a-z][a-z0-9+\\-.]*):(?=.)/i)\n  if (protocolMatch) {\n    const protocol = protocolMatch[1]!.toLowerCase()\n    if (\n      protocol !== 'http' &&\n      protocol !== 'https' &&\n      protocol !== 'mailto' &&\n      protocol !== 'tel'\n    ) {\n      return '#'\n    }\n  }\n\n  return cleaned\n}\n"],"names":["sanitizeUrl","url","trimmed","trim","cleaned","replace","startsWith","protocolMatch","match","protocol","toLowerCase"],"mappings":"AAAA;;;;CAIC,GACD,OAAO,SAASA,YAAYC,GAAW;IACrC,IAAI,CAACA,KAAK;QACR,OAAO;IACT;IAEA,MAAMC,UAAUD,IAAIE,IAAI;IAExB,4CAA4C;IAC5C,MAAMC,UAAUF,QAAQG,OAAO,CAAC,oBAAoB;IAEpD,IAAID,QAAQE,UAAU,CAAC,MAAM;QAC3B,OAAOF;IACT;IAEA,IAAIA,QAAQE,UAAU,CAAC,QAAQF,QAAQE,UAAU,CAAC,SAASF,QAAQE,UAAU,CAAC,QAAQ;QACpF,OAAOF;IACT;IAEA,MAAMG,gBAAgBH,QAAQI,KAAK,CAAC;IACpC,IAAID,eAAe;QACjB,MAAME,WAAWF,aAAa,CAAC,EAAE,CAAEG,WAAW;QAC9C,IACED,aAAa,UACbA,aAAa,WACbA,aAAa,YACbA,aAAa,OACb;YACA,OAAO;QACT;IACF;IAEA,OAAOL;AACT"}

package/dist/utilities/sanitizeUserDataForEmail.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Sanitizes user data for emails to prevent injection of HTML, executable code, or other malicious content.
+ * This function ensures the content is safe by:
+ * - Removing HTML tags
+ * - Removing control characters
+ * - Normalizing whitespace
+ * - Escaping special HTML characters
+ * - Allowing only letters, numbers, spaces, and basic punctuation
+ * - Limiting length (default 100 characters)
+ *
+ * @param data - data to sanitize
+ * @param maxLength - maximum allowed length (default is 100)
+ * @returns a sanitized string safe to include in email content
+ */
+export declare function sanitizeUserDataForEmail(data: unknown, maxLength?: number): string;
+//# sourceMappingURL=sanitizeUserDataForEmail.d.ts.map

package/dist/utilities/sanitizeUserDataForEmail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizeUserDataForEmail.d.ts","sourceRoot":"","sources":["../../src/utilities/sanitizeUserDataForEmail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,SAAM,GAAG,MAAM,CA4D/E"}

package/dist/utilities/sanitizeUserDataForEmail.js

@@ -0,0 +1,57 @@
+/**
+ * Sanitizes user data for emails to prevent injection of HTML, executable code, or other malicious content.
+ * This function ensures the content is safe by:
+ * - Removing HTML tags
+ * - Removing control characters
+ * - Normalizing whitespace
+ * - Escaping special HTML characters
+ * - Allowing only letters, numbers, spaces, and basic punctuation
+ * - Limiting length (default 100 characters)
+ *
+ * @param data - data to sanitize
+ * @param maxLength - maximum allowed length (default is 100)
+ * @returns a sanitized string safe to include in email content
+ */ export function sanitizeUserDataForEmail(data, maxLength = 100) {
+    if (typeof data !== 'string') {
+        return '';
+    }
+    // Decode HTML numeric entities like < or <
+    const decodedEntities = data.replace(/&#x([0-9a-fA-F]+);/g, (_, hex)=>String.fromCharCode(parseInt(hex, 16))).replace(/&#(\d+);/g, (_, dec)=>String.fromCharCode(parseInt(dec, 10)));
+    // Remove HTML tags
+    const noTags = decodedEntities.replace(/<[^>]+>/g, '');
+    const noInvisible = noTags.replace(/[\u200B-\u200F\u2028-\u202F\u2060-\u206F\uFEFF]/g, '');
+    // Remove control characters except common whitespace
+    const noControls = [
+        ...noInvisible
+    ].filter((char)=>{
+        const code = char.charCodeAt(0);
+        return code >= 32 || // printable and above
+        code === 9 || // tab
+        code === 10 || // new line
+        code === 13 // return
+        ;
+    }).join('');
+    // Remove '(?' and backticks `
+    let noInjectionSyntax = noControls.replace(/\(\?/g, '').replace(/`/g, '');
+    // {{...}} remove braces but keep inner content
+    noInjectionSyntax = noInjectionSyntax.replace(/\{\{(.*?)\}\}/g, '$1');
+    // Escape special HTML characters
+    const escaped = noInjectionSyntax.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+    // Normalize whitespace to single space
+    const normalizedWhitespace = escaped.replace(/\s+/g, ' ');
+    // Allow:
+    // - Unicode letters (\p{L})
+    // - Unicode numbers (\p{N})
+    // - Unicode marks (\p{M}, e.g. accents)
+    // - Unicode spaces (\p{Zs})
+    // - Punctuation: common ascii + inverted ! and ?
+    const allowedPunctuation = " .,!?'" + '"¡¿、！（）〆-';
+    // Escape regex special characters
+    const escapedPunct = allowedPunctuation.replace(/[[\]\\^$*+?.()|{}]/g, '\\$&');
+    const pattern = `[^\\p{L}\\p{N}\\p{M}\\p{Zs}${escapedPunct}]`;
+    const cleaned = normalizedWhitespace.replace(new RegExp(pattern, 'gu'), '');
+    // Trim and limit length, trim again to remove trailing spaces
+    return cleaned.slice(0, maxLength).trim();
+}
+
+//# sourceMappingURL=sanitizeUserDataForEmail.js.map

package/dist/utilities/sanitizeUserDataForEmail.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/sanitizeUserDataForEmail.ts"],"sourcesContent":["/**\n * Sanitizes user data for emails to prevent injection of HTML, executable code, or other malicious content.\n * This function ensures the content is safe by:\n * - Removing HTML tags\n * - Removing control characters\n * - Normalizing whitespace\n * - Escaping special HTML characters\n * - Allowing only letters, numbers, spaces, and basic punctuation\n * - Limiting length (default 100 characters)\n *\n * @param data - data to sanitize\n * @param maxLength - maximum allowed length (default is 100)\n * @returns a sanitized string safe to include in email content\n */\nexport function sanitizeUserDataForEmail(data: unknown, maxLength = 100): string {\n  if (typeof data !== 'string') {\n    return ''\n  }\n\n  // Decode HTML numeric entities like &#x3C; or &#60;\n  const decodedEntities = data\n    .replace(/&#x([0-9a-fA-F]+);/g, (_, hex) => String.fromCharCode(parseInt(hex, 16)))\n    .replace(/&#(\\d+);/g, (_, dec) => String.fromCharCode(parseInt(dec, 10)))\n\n  // Remove HTML tags\n  const noTags = decodedEntities.replace(/<[^>]+>/g, '')\n\n  const noInvisible = noTags.replace(/[\\u200B-\\u200F\\u2028-\\u202F\\u2060-\\u206F\\uFEFF]/g, '')\n\n  // Remove control characters except common whitespace\n  const noControls = [...noInvisible]\n    .filter((char) => {\n      const code = char.charCodeAt(0)\n      return (\n        code >= 32 || // printable and above\n        code === 9 || // tab\n        code === 10 || // new line\n        code === 13 // return\n      )\n    })\n    .join('')\n\n  // Remove '(?' and backticks `\n  let noInjectionSyntax = noControls.replace(/\\(\\?/g, '').replace(/`/g, '')\n\n  // {{...}} remove braces but keep inner content\n  noInjectionSyntax = noInjectionSyntax.replace(/\\{\\{(.*?)\\}\\}/g, '$1')\n\n  // Escape special HTML characters\n  const escaped = noInjectionSyntax\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n\n  // Normalize whitespace to single space\n  const normalizedWhitespace = escaped.replace(/\\s+/g, ' ')\n\n  // Allow:\n  // - Unicode letters (\\p{L})\n  // - Unicode numbers (\\p{N})\n  // - Unicode marks (\\p{M}, e.g. accents)\n  // - Unicode spaces (\\p{Zs})\n  // - Punctuation: common ascii + inverted ! and ?\n  const allowedPunctuation = \" .,!?'\" + '\"¡¿、！（）〆-'\n\n  // Escape regex special characters\n  const escapedPunct = allowedPunctuation.replace(/[[\\]\\\\^$*+?.()|{}]/g, '\\\\$&')\n\n  const pattern = `[^\\\\p{L}\\\\p{N}\\\\p{M}\\\\p{Zs}${escapedPunct}]`\n\n  const cleaned = normalizedWhitespace.replace(new RegExp(pattern, 'gu'), '')\n\n  // Trim and limit length, trim again to remove trailing spaces\n  return cleaned.slice(0, maxLength).trim()\n}\n"],"names":["sanitizeUserDataForEmail","data","maxLength","decodedEntities","replace","_","hex","String","fromCharCode","parseInt","dec","noTags","noInvisible","noControls","filter","char","code","charCodeAt","join","noInjectionSyntax","escaped","normalizedWhitespace","allowedPunctuation","escapedPunct","pattern","cleaned","RegExp","slice","trim"],"mappings":"AAAA;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASA,yBAAyBC,IAAa,EAAEC,YAAY,GAAG;IACrE,IAAI,OAAOD,SAAS,UAAU;QAC5B,OAAO;IACT;IAEA,oDAAoD;IACpD,MAAME,kBAAkBF,KACrBG,OAAO,CAAC,uBAAuB,CAACC,GAAGC,MAAQC,OAAOC,YAAY,CAACC,SAASH,KAAK,MAC7EF,OAAO,CAAC,aAAa,CAACC,GAAGK,MAAQH,OAAOC,YAAY,CAACC,SAASC,KAAK;IAEtE,mBAAmB;IACnB,MAAMC,SAASR,gBAAgBC,OAAO,CAAC,YAAY;IAEnD,MAAMQ,cAAcD,OAAOP,OAAO,CAAC,oDAAoD;IAEvF,qDAAqD;IACrD,MAAMS,aAAa;WAAID;KAAY,CAChCE,MAAM,CAAC,CAACC;QACP,MAAMC,OAAOD,KAAKE,UAAU,CAAC;QAC7B,OACED,QAAQ,MAAM,sBAAsB;QACpCA,SAAS,KAAK,MAAM;QACpBA,SAAS,MAAM,WAAW;QAC1BA,SAAS,GAAG,SAAS;;IAEzB,GACCE,IAAI,CAAC;IAER,8BAA8B;IAC9B,IAAIC,oBAAoBN,WAAWT,OAAO,CAAC,SAAS,IAAIA,OAAO,CAAC,MAAM;IAEtE,+CAA+C;IAC/Ce,oBAAoBA,kBAAkBf,OAAO,CAAC,kBAAkB;IAEhE,iCAAiC;IACjC,MAAMgB,UAAUD,kBACbf,OAAO,CAAC,MAAM,SACdA,OAAO,CAAC,MAAM,QACdA,OAAO,CAAC,MAAM;IAEjB,uCAAuC;IACvC,MAAMiB,uBAAuBD,QAAQhB,OAAO,CAAC,QAAQ;IAErD,SAAS;IACT,4BAA4B;IAC5B,4BAA4B;IAC5B,wCAAwC;IACxC,4BAA4B;IAC5B,iDAAiD;IACjD,MAAMkB,qBAAqB,WAAW;IAEtC,kCAAkC;IAClC,MAAMC,eAAeD,mBAAmBlB,OAAO,CAAC,uBAAuB;IAEvE,MAAMoB,UAAU,CAAC,2BAA2B,EAAED,aAAa,CAAC,CAAC;IAE7D,MAAME,UAAUJ,qBAAqBjB,OAAO,CAAC,IAAIsB,OAAOF,SAAS,OAAO;IAExE,8DAA8D;IAC9D,OAAOC,QAAQE,KAAK,CAAC,GAAGzB,WAAW0B,IAAI;AACzC"}