@humaan/payload-storage-imagekit 2.6.1 → 2.7.0

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { Adapter, CollectionOptions } from '@payloadcms/plugin-cloud-storage/types'\nimport type {\n  CollectionSlug,\n  Config,\n  PayloadRequest,\n  TypeWithID,\n  UploadCollectionSlug,\n  Where,\n} from 'payload'\n\nimport ImageKit, { toFile } from '@imagekit/nodejs'\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\nimport path from 'node:path'\n\nimport { getImageKitUploadAuthPath, isImageKitClientUploadContext } from './clientUploads.js'\nimport { createImageKitUploadAuthHandler } from './endpoints/createImageKitUploadAuthHandler.js'\nimport {\n  getAdminThumbnailURL,\n  getPrivateAdminThumbnailURL,\n  isPdfMimeType,\n  isVideoMimeType,\n} from './getAdminThumbnailURL.js'\nimport { getImageKitThumbnailSrc, getVideoPosterSrc } from './imageTransforms.js'\n\nexport type ImageKitCollectionOptions = {\n  /**\n   * Override Payload's native focal-point picker (`upload.focalPoint`) for this\n   * collection.\n   */\n  focalPoint?: boolean\n  /**\n   * Upload files in this collection as ImageKit private files (`isPrivateFile: true`)\n   * and deliver them only through short-lived signed URLs, behind Payload access control.\n   */\n  private?: boolean\n}\ntype ImageKitCollectionConfig = ImageKitCollectionOptions | true\ntype ImageKitCollectionMap = Partial<Record<UploadCollectionSlug, ImageKitCollectionConfig>>\n\nconst DEFAULT_SIGNED_URL_EXPIRES_IN = 900\n// Payload's file-type detector samples this many bytes when validating binary uploads.\nconst FILE_TYPE_DETECTION_SIZE = 4100\nconst FILE_TYPE_DETECTION_RANGE = `bytes=0-${FILE_TYPE_DETECTION_SIZE - 1}`\n\nconst PRIVATE_COLLECTION_DESCRIPTION =\n  'Files in this collection are uploaded to ImageKit as private files and delivered through short-lived signed URLs.'\n\nconst isPrivateCollectionConfig = (value: ImageKitCollectionConfig | undefined): boolean =>\n  value !== true && typeof value === 'object' && value?.private === true\n\n/**\n * Whether a specific document is private. The flag stored on the document at upload time\n * (`imagekit.isPrivate`) is the source of truth — a file's privacy on ImageKit is fixed\n * when it is uploaded and does not change if the collection's `private` setting changes\n * later. Falls back to the collection setting for documents uploaded before this flag existed.\n */\nconst isDocumentPrivate = (doc: unknown, collectionIsPrivate: boolean): boolean => {\n  const stored = (doc as { imagekit?: { isPrivate?: boolean } } | undefined)?.imagekit?.isPrivate\n\n  return typeof stored === 'boolean' ? stored : collectionIsPrivate\n}\ntype ImageKitReference = {\n  imagekit?: {\n    fileId?: string\n    isPrivate?: boolean\n    thumbnailUrl?: string\n    url?: string\n  }\n}\n\ntype UploadDocumentData = {\n  thumbnailURL?: string\n} & ImageKitReference\n\nexport type PayloadStorageImageKitConfig = {\n  alwaysInsertFields?: boolean\n  clientUploads?: boolean\n  collections: ImageKitCollectionMap\n  disablePayloadAccessControl?: true\n  enabled?: boolean\n  /**\n   * Broad default for Payload's native focal-point picker (`upload.focalPoint`)\n   * on every configured collection. Focal points are disabled by default for\n   * configured collections, so prefer collection-level `focalPoint: true` for\n   * image collections. A collection's own `upload.focalPoint` still takes\n   * precedence.\n   */\n  focalPoint?: boolean\n  folder: string\n  privateKey: string\n  publicKey: string\n  /**\n   * Expiry (in seconds) applied to signed URLs generated for private collections.\n   * Defaults to 900 (15 minutes). URLs are signed fresh on every request, so a short\n   * window is safe.\n   */\n  signedUrlExpiresIn?: number\n  urlEndpoint: string\n}\n\nconst normalizeFolder = (folder: string): string => {\n  const normalized = folder.trim().replace(/^\\/+|\\/+$/g, '')\n\n  if (!normalized) {\n    throw new Error('imagekitStorage: `folder` is required.')\n  }\n\n  return `/${normalized}`\n}\n\nconst getCollectionFolder = (rootFolder: string, collectionSlug: string): string =>\n  path.posix.join(rootFolder, collectionSlug)\n\nconst getFilePath = (rootFolder: string, collectionSlug: string, filename: string): string =>\n  path.posix.join(getCollectionFolder(rootFolder, collectionSlug), filename)\n\nconst findImageKitFileId = async (\n  imagekit: ImageKit,\n  filePath: string,\n): Promise<string | undefined> => {\n  const parentPath = path.posix.dirname(filePath)\n  const name = path.posix.basename(filePath)\n\n  const limit = 100\n\n  for (let skip = 0; ; skip += limit) {\n    const assets = await imagekit.assets.list({\n      type: 'file',\n      limit,\n      path: parentPath === '/' ? '/' : `${parentPath}/`,\n      skip,\n    })\n\n    const found = assets.find(\n      (asset) => 'fileId' in asset && asset.filePath === filePath && asset.name === name,\n    )\n\n    if (found && 'fileId' in found) {\n      return found.fileId\n    }\n\n    if (assets.length < limit) {\n      break\n    }\n  }\n\n  return undefined\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === 'object'\n\nconst getStoredImageKitURL = (doc: unknown): string | undefined => {\n  const storedURL = (doc as ImageKitReference | undefined)?.imagekit?.url\n\n  return typeof storedURL === 'string' && storedURL.trim().length > 0 ? storedURL : undefined\n}\n\nconst hasStoredImageKitURL = (doc: unknown): boolean => !!getStoredImageKitURL(doc)\n\nconst findUploadDocumentByFilename = async ({\n  collection,\n  filename,\n  prefix,\n  req,\n}: {\n  collection: string\n  filename: string\n  prefix?: string\n  req: PayloadRequest\n}): Promise<null | TypeWithID> => {\n  const constraints: Where[] = [\n    {\n      filename: {\n        equals: filename,\n      },\n    },\n  ]\n\n  if (typeof prefix === 'string') {\n    constraints.push({\n      prefix: {\n        equals: prefix,\n      },\n    })\n  }\n\n  return req.payload.db.findOne({\n    collection,\n    req,\n    where: {\n      and: constraints,\n    },\n  })\n}\n\nconst applyClientUploadContextToData = <T extends UploadDocumentData>(\n  data: T,\n  clientUploadContext: unknown,\n  buildThumbnailURL: (data: T) => string = getAdminThumbnailURL,\n  isPrivate = false,\n): T => {\n  if (!isImageKitClientUploadContext(clientUploadContext)) {\n    return data\n  }\n\n  data.imagekit = {\n    fileId: clientUploadContext.fileId,\n    // Record the collection's privacy at upload time; this is the file's permanent\n    // ImageKit status and the source of truth for delivery.\n    isPrivate,\n    thumbnailUrl: clientUploadContext.thumbnailUrl,\n    url: clientUploadContext.url,\n  }\n\n  // Preserve the admin preview when the original file was already uploaded client-side.\n  data.thumbnailURL = buildThumbnailURL(data)\n\n  return data\n}\n\nconst imagekitAdapter = ({\n  apiRoute,\n  client,\n  clientUploads,\n  privateSlugs,\n  rootFolder,\n  signedUrlExpiresIn,\n  urlEndpoint,\n}: {\n  apiRoute: string\n  client: ImageKit\n  clientUploads?: boolean\n  privateSlugs: Set<string>\n  rootFolder: string\n  signedUrlExpiresIn: number\n  urlEndpoint: string\n}): Adapter => {\n  const fetchUploadedFile = async (fileURL: string, range?: string): Promise<Response> => {\n    const response = range\n      ? await fetch(fileURL, {\n          headers: {\n            Range: range,\n          },\n        })\n      : await fetch(fileURL)\n\n    if (!response.ok) {\n      throw new Error(\n        `imagekitStorage: failed to fetch uploaded file from ImageKit (${response.status}).`,\n      )\n    }\n\n    return response\n  }\n\n  const fetchUploadedFilePrefix = async ({\n    fileSize,\n    fileURL,\n    mimeType,\n  }: {\n    fileSize: number\n    fileURL: string\n    mimeType: string\n  }): Promise<Response> => {\n    const response = await fetchUploadedFile(fileURL, FILE_TYPE_DETECTION_RANGE)\n    const contentLength = Number(response.headers.get('Content-Length'))\n    const contentRange = response.headers.get('Content-Range')\n    const rangeMatch = contentRange?.match(/^bytes 0-(\\d+)\\/(\\d+)$/)\n    const rangeEnd = rangeMatch ? Number(rangeMatch[1]) : Number.NaN\n    const totalSize = rangeMatch ? Number(rangeMatch[2]) : Number.NaN\n    const expectedLength = Math.min(fileSize, FILE_TYPE_DETECTION_SIZE)\n\n    if (\n      response.status !== 206 ||\n      !rangeMatch ||\n      !Number.isSafeInteger(contentLength) ||\n      contentLength !== expectedLength ||\n      !Number.isSafeInteger(rangeEnd) ||\n      rangeEnd + 1 !== contentLength ||\n      totalSize !== fileSize\n    ) {\n      await response.body?.cancel()\n      throw new Error('imagekitStorage: ImageKit returned an invalid video range response.')\n    }\n\n    const filePrefix = await response.arrayBuffer()\n\n    if (filePrefix.byteLength !== contentLength) {\n      throw new Error('imagekitStorage: ImageKit returned an invalid video range body.')\n    }\n\n    return new Response(filePrefix, {\n      headers: {\n        'Content-Length': String(filePrefix.byteLength),\n        'Content-Type': mimeType,\n      },\n      status: 200,\n    })\n  }\n\n  return ({ collection }) => {\n    const isPrivate = privateSlugs.has(collection.slug)\n\n    // Sign a relative ImageKit path against the configured urlEndpoint. We always sign\n    // a computed path (never a stored absolute URL) because ImageKit's signature is\n    // derived from the path after stripping urlEndpoint, so the host must match.\n    const buildSignedURL = (src: string, tr?: null | string): string =>\n      client.helper.buildSrc({\n        expiresIn: signedUrlExpiresIn,\n        signed: true,\n        src,\n        transformation: tr ? [{ raw: tr }] : undefined,\n        urlEndpoint,\n      })\n\n    const buildThumbnailURL = (doc: UploadDocumentData): string =>\n      isDocumentPrivate(doc, isPrivate)\n        ? getPrivateAdminThumbnailURL(doc, collection.slug, apiRoute)\n        : getAdminThumbnailURL(doc)\n\n    return {\n      name: 'imagekit',\n      clientUploads,\n      fields: [\n        {\n          name: 'imagekit',\n          type: 'group',\n          admin: {\n            condition: (data) => hasStoredImageKitURL(data),\n            disableListColumn: true,\n            disableListFilter: true,\n          },\n          fields: [\n            {\n              name: 'fileId',\n              type: 'text',\n              admin: {\n                hidden: true,\n              },\n            },\n            {\n              name: 'url',\n              type: 'text',\n              admin: {\n                readOnly: true,\n              },\n              label: 'URL',\n            },\n            {\n              name: 'isPrivate',\n              type: 'checkbox',\n              admin: {\n                condition: (_data, siblingData) =>\n                  isDocumentPrivate({ imagekit: siblingData }, isPrivate),\n                description:\n                  \"Indicates whether this file was uploaded to ImageKit as private. Private files are delivered through signed URLs. Changes to this collection's private option in payload.config only affect future uploads.\",\n                readOnly: true,\n              },\n              label: 'Private file',\n            },\n            {\n              name: 'signedUrl',\n              type: 'text',\n              admin: {\n                // Only relevant for private files; the plain `url` works directly for public ones.\n                condition: (_data, siblingData) =>\n                  isDocumentPrivate({ imagekit: siblingData }, isPrivate),\n                description: `Temporary signed URL for reaching this private file directly on ImageKit. Expires ${signedUrlExpiresIn} seconds after load and is regenerated on every read. Note: anyone with this URL can access the file until it expires — it is not gated by Payload access control.`,\n                readOnly: true,\n              },\n              hooks: {\n                // Computed server-side on read so it is always freshly signed and never persisted.\n                afterRead: [\n                  ({ data, siblingData }) => {\n                    if (!isDocumentPrivate({ imagekit: siblingData }, isPrivate)) {\n                      return undefined\n                    }\n\n                    const filename = (data as { filename?: string } | undefined)?.filename\n\n                    if (!filename) {\n                      return undefined\n                    }\n\n                    return buildSignedURL(getFilePath(rootFolder, collection.slug, filename))\n                  },\n                ],\n              },\n              label: 'Signed URL',\n              virtual: true,\n            },\n            {\n              name: 'thumbnailUrl',\n              type: 'text',\n              admin: {\n                hidden: true,\n              },\n            },\n          ],\n          interfaceName: 'imagekitFields',\n          label: 'ImageKit',\n        },\n      ],\n      generateURL: ({ filename }) =>\n        client.helper.buildSrc({\n          src: getFilePath(rootFolder, collection.slug, filename),\n          urlEndpoint,\n        }),\n      handleDelete: async ({ doc, filename }) => {\n        const storedFileId = (doc as ImageKitReference & typeof doc).imagekit?.fileId\n        const fileId =\n          storedFileId ||\n          (await findImageKitFileId(client, getFilePath(rootFolder, collection.slug, filename)))\n\n        if (!fileId) {\n          return\n        }\n\n        await client.files.delete(fileId)\n      },\n      handleUpload: async ({ clientUploadContext, data, file }) => {\n        if (isImageKitClientUploadContext(clientUploadContext)) {\n          return applyClientUploadContextToData(\n            data,\n            clientUploadContext,\n            buildThumbnailURL,\n            isPrivate,\n          )\n        }\n\n        const uploadFile = await toFile(file.buffer, file.filename, { type: file.mimeType })\n\n        const uploaded = await client.files.upload({\n          file: uploadFile,\n          fileName: file.filename,\n          folder: getCollectionFolder(rootFolder, collection.slug),\n          useUniqueFileName: false,\n          ...(isPrivate ? { isPrivateFile: true } : {}),\n        })\n\n        data.imagekit = {\n          fileId: uploaded.fileId,\n          isPrivate,\n          thumbnailUrl: uploaded.thumbnailUrl,\n          url: uploaded.url,\n        }\n\n        // Set the root-level thumbnailURL that Payload's admin interface expects.\n        // `buildThumbnailURL` needs the filename, which Payload may not have copied onto\n        // `data` yet at this point, so fall back to the uploaded file's name.\n        data.thumbnailURL = buildThumbnailURL({\n          ...data,\n          filename: (data as { filename?: string }).filename || file.filename,\n        })\n\n        return data\n      },\n      staticHandler: async (req, args) => {\n        const requestURL = new URL(req.url || 'http://localhost')\n        const tr = requestURL.searchParams.get('tr')\n        const hasClientUploadContext = 'clientUploadContext' in args.params\n\n        if (hasClientUploadContext) {\n          const clientUploadContext = args.params.clientUploadContext\n\n          if (!isImageKitClientUploadContext(clientUploadContext)) {\n            throw new Error('imagekitStorage: client upload context is invalid.')\n          }\n\n          const expectedFilePath = getFilePath(\n            rootFolder,\n            args.params.collection,\n            args.params.filename,\n          )\n          const fileId = clientUploadContext.fileId\n\n          if (typeof fileId !== 'string' || !fileId) {\n            throw new Error('imagekitStorage: client upload is missing its file ID.')\n          }\n\n          const uploadedFile = await client.files.get(fileId)\n          const uploadedFileMime = uploadedFile.mime\n          const uploadedFileSize = uploadedFile.size\n          const metadataMatchesUpload =\n            uploadedFile.fileId === fileId &&\n            uploadedFile.filePath === expectedFilePath &&\n            uploadedFile.name === args.params.filename &&\n            typeof uploadedFileMime === 'string' &&\n            typeof uploadedFile.url === 'string' &&\n            typeof uploadedFileSize === 'number' &&\n            Number.isSafeInteger(uploadedFileSize) &&\n            uploadedFileSize > 0 &&\n            Boolean(uploadedFile.isPrivateFile) === isPrivate &&\n            (typeof clientUploadContext.size !== 'number' ||\n              uploadedFileSize === clientUploadContext.size)\n\n          if (\n            !metadataMatchesUpload ||\n            typeof uploadedFileMime !== 'string' ||\n            typeof uploadedFileSize !== 'number'\n          ) {\n            throw new Error('imagekitStorage: client upload metadata did not match.')\n          }\n\n          // Replace browser-provided values before hooks persist the upload context.\n          Object.assign(clientUploadContext, {\n            name: uploadedFile.name,\n            fileId: uploadedFile.fileId,\n            filePath: uploadedFile.filePath,\n            fileType: uploadedFile.fileType,\n            mimeType: uploadedFileMime,\n            size: uploadedFileSize,\n            thumbnailUrl: uploadedFile.thumbnail,\n            url: uploadedFile.url,\n          })\n\n          const verifiedFileURL = isPrivate\n            ? buildSignedURL(expectedFilePath, tr)\n            : client.helper.buildSrc({\n                src: expectedFilePath,\n                urlEndpoint,\n              })\n\n          if (isVideoMimeType(uploadedFileMime)) {\n            return fetchUploadedFilePrefix({\n              fileSize: uploadedFileSize,\n              fileURL: verifiedFileURL,\n              mimeType: uploadedFileMime,\n            })\n          }\n\n          return fetchUploadedFile(verifiedFileURL)\n        }\n\n        const doc =\n          args.doc ||\n          (await findUploadDocumentByFilename({\n            collection: args.params.collection,\n            filename: args.params.filename,\n            prefix: args.params.prefix,\n            req,\n          }))\n\n        // Sign based on the document's stored status, not the collection's current\n        // setting, so files keep working if the collection's privacy is changed later.\n        if (isDocumentPrivate(doc, isPrivate)) {\n          const mimeType = (doc as { mimeType?: string } | null)?.mimeType\n          let signSrc = getFilePath(rootFolder, args.params.collection, args.params.filename)\n\n          // A `tr` request for a video/PDF is a thumbnail request (the plain transform\n          // can't render a preview); serve ImageKit's generated thumbnail instead.\n          if (tr && isVideoMimeType(mimeType)) {\n            signSrc = getVideoPosterSrc(signSrc)\n          } else if (tr && isPdfMimeType(mimeType)) {\n            signSrc = getImageKitThumbnailSrc(signSrc)\n          }\n\n          return Response.redirect(buildSignedURL(signSrc, tr), 302)\n        }\n\n        const imageKitURL = client.helper.buildSrc({\n          src:\n            getStoredImageKitURL(doc) ||\n            getFilePath(rootFolder, args.params.collection, args.params.filename),\n          transformation: tr ? [{ raw: tr }] : undefined,\n          urlEndpoint,\n        })\n\n        return Response.redirect(imageKitURL, 302)\n      },\n    }\n  }\n}\n\nconst toCloudStorageCollections = (\n  collections: ImageKitCollectionMap,\n  adapter: Adapter,\n  privateSlugs: Set<string>,\n  disablePayloadAccessControl?: true,\n): Partial<Record<CollectionSlug, CollectionOptions>> => {\n  const mappedCollections: Partial<Record<CollectionSlug, CollectionOptions>> = {}\n\n  for (const collectionSlug of Object.keys(collections)) {\n    mappedCollections[collectionSlug] = {\n      adapter,\n      disableLocalStorage: true,\n      // Private files require Payload access control so URLs can be signed at serve time.\n      disablePayloadAccessControl: privateSlugs.has(collectionSlug)\n        ? undefined\n        : disablePayloadAccessControl,\n    }\n  }\n\n  return mappedCollections\n}\n\nexport const imagekitStorage =\n  (pluginOptions: PayloadStorageImageKitConfig) =>\n  (config: Config): Config => {\n    const {\n      alwaysInsertFields,\n      clientUploads,\n      collections,\n      disablePayloadAccessControl,\n      enabled,\n      focalPoint,\n      folder,\n      privateKey,\n      publicKey,\n      signedUrlExpiresIn: signedUrlExpiresInOption,\n      urlEndpoint,\n    } = pluginOptions\n\n    if (!privateKey?.trim()) {\n      throw new Error('imagekitStorage: `privateKey` is required.')\n    }\n\n    if (!publicKey?.trim()) {\n      throw new Error('imagekitStorage: `publicKey` is required.')\n    }\n\n    if (!urlEndpoint?.trim()) {\n      throw new Error('imagekitStorage: `urlEndpoint` is required.')\n    }\n\n    if (!collections || Object.keys(collections).length === 0) {\n      throw new Error('imagekitStorage: `collections` must include at least one upload collection.')\n    }\n\n    const privateSlugs = new Set(\n      Object.entries(collections)\n        .filter(([, value]) => isPrivateCollectionConfig(value))\n        .map(([slug]) => slug),\n    )\n\n    if (disablePayloadAccessControl && privateSlugs.size > 0) {\n      throw new Error(\n        'imagekitStorage: `disablePayloadAccessControl` cannot be used with private collections. Private files require Payload access control to remain enabled so URLs can be signed at serve time.',\n      )\n    }\n\n    const signedUrlExpiresIn =\n      typeof signedUrlExpiresInOption === 'number' && signedUrlExpiresInOption > 0\n        ? signedUrlExpiresInOption\n        : DEFAULT_SIGNED_URL_EXPIRES_IN\n    const apiRoute = config.routes?.api ?? '/api'\n\n    const rootFolder = normalizeFolder(folder)\n\n    const imageKitClient = new ImageKit({ privateKey })\n    const adapter = imagekitAdapter({\n      apiRoute,\n      client: imageKitClient,\n      clientUploads,\n      privateSlugs,\n      rootFolder,\n      signedUrlExpiresIn,\n      urlEndpoint,\n    })\n\n    const configuredSlugs = new Set(Object.keys(collections))\n    const configWithCropDisabled: Config = {\n      ...config,\n      collections: (config.collections || []).map((collection) => {\n        if (!configuredSlugs.has(collection.slug)) {\n          return collection\n        }\n\n        const isCollectionPrivate = privateSlugs.has(collection.slug)\n        const buildThumbnailURL = (doc: unknown): string =>\n          isDocumentPrivate(doc, isCollectionPrivate)\n            ? getPrivateAdminThumbnailURL(doc, collection.slug, apiRoute)\n            : getAdminThumbnailURL(doc)\n\n        const beforeDocumentControls =\n          collection.admin?.components?.edit?.beforeDocumentControls || []\n        const collectionOptions = collections[collection.slug]\n        const collectionFocalPoint =\n          collectionOptions !== true &&\n          typeof collectionOptions === 'object' &&\n          typeof collectionOptions.focalPoint === 'boolean'\n            ? collectionOptions.focalPoint\n            : undefined\n\n        // Surface a \"this is a private collection\" note in the list and edit views.\n        // Preserve an existing string description by appending; leave custom\n        // component descriptions untouched.\n        const existingDescription = collection.admin?.description\n        const baseAdmin = isCollectionPrivate\n          ? {\n              ...(collection.admin || {}),\n              description:\n                typeof existingDescription === 'string' && existingDescription.trim().length > 0\n                  ? `${existingDescription} ${PRIVATE_COLLECTION_DESCRIPTION}`\n                  : (existingDescription ?? PRIVATE_COLLECTION_DESCRIPTION),\n            }\n          : collection.admin\n\n        return {\n          ...collection,\n          admin: clientUploads\n            ? {\n                ...(baseAdmin || {}),\n                components: {\n                  ...(collection.admin?.components || {}),\n                  edit: {\n                    ...(collection.admin?.components?.edit || {}),\n                    beforeDocumentControls: [\n                      ...beforeDocumentControls,\n                      {\n                        clientProps: {\n                          authPath: getImageKitUploadAuthPath(collection.slug),\n                          collectionSlug: collection.slug,\n                          folder: getCollectionFolder(rootFolder, collection.slug),\n                          isPrivate: isCollectionPrivate,\n                          publicKey,\n                        },\n                        path: '@humaan/payload-storage-imagekit/client#ImageKitUploadHandler',\n                      },\n                    ],\n                  },\n                },\n              }\n            : baseAdmin,\n          hooks: {\n            ...(collection.hooks || {}),\n            beforeChange: [\n              ...(collection.hooks?.beforeChange || []),\n              ({ data, req }) => {\n                if (!isRecord(data) || !req.file?.clientUploadContext) {\n                  return data\n                }\n\n                return applyClientUploadContextToData(\n                  data,\n                  req.file.clientUploadContext,\n                  buildThumbnailURL,\n                  isCollectionPrivate,\n                )\n              },\n            ],\n          },\n          upload: {\n            // Focal points are opt-in for configured collections. Plugin-level\n            // and collection-level options can override this default; a\n            // collection's own `upload.focalPoint` still wins because it is\n            // spread in afterwards.\n            focalPoint: false,\n            ...(typeof focalPoint === 'boolean' ? { focalPoint } : {}),\n            ...(typeof collectionFocalPoint === 'boolean'\n              ? { focalPoint: collectionFocalPoint }\n              : {}),\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            adminThumbnail: ({ doc }) => buildThumbnailURL(doc),\n            crop: false,\n          },\n        }\n      }),\n      endpoints: clientUploads\n        ? [\n            ...(config.endpoints || []),\n            {\n              handler: createImageKitUploadAuthHandler({\n                client: imageKitClient,\n                collections,\n              }),\n              method: 'get',\n              path: `${getImageKitUploadAuthPath(':collection')}`,\n            },\n          ]\n        : config.endpoints,\n    }\n\n    return cloudStoragePlugin({\n      alwaysInsertFields,\n      collections: toCloudStorageCollections(\n        collections,\n        adapter,\n        privateSlugs,\n        disablePayloadAccessControl,\n      ),\n      enabled,\n    })(configWithCropDisabled)\n  }\n\nexport { migrateFolder } from './migrate.js'\nexport type { MigrateFolderOptions, MigrationJobResult } from './migrate.js'\n\n// Backward-compatible alias\nexport const payloadStorageImagekit = imagekitStorage\nexport const payloadStorageImageKit = imagekitStorage\n\nexport type PayloadStorageImagekitConfig = PayloadStorageImageKitConfig\n"],"names":["ImageKit","toFile","cloudStoragePlugin","path","getImageKitUploadAuthPath","isImageKitClientUploadContext","createImageKitUploadAuthHandler","getAdminThumbnailURL","getPrivateAdminThumbnailURL","isPdfMimeType","isVideoMimeType","getImageKitThumbnailSrc","getVideoPosterSrc","DEFAULT_SIGNED_URL_EXPIRES_IN","FILE_TYPE_DETECTION_SIZE","FILE_TYPE_DETECTION_RANGE","PRIVATE_COLLECTION_DESCRIPTION","isPrivateCollectionConfig","value","private","isDocumentPrivate","doc","collectionIsPrivate","stored","imagekit","isPrivate","normalizeFolder","folder","normalized","trim","replace","Error","getCollectionFolder","rootFolder","collectionSlug","posix","join","getFilePath","filename","findImageKitFileId","filePath","parentPath","dirname","name","basename","limit","skip","assets","list","type","found","find","asset","fileId","length","undefined","isRecord","getStoredImageKitURL","storedURL","url","hasStoredImageKitURL","findUploadDocumentByFilename","collection","prefix","req","constraints","equals","push","payload","db","findOne","where","and","applyClientUploadContextToData","data","clientUploadContext","buildThumbnailURL","thumbnailUrl","thumbnailURL","imagekitAdapter","apiRoute","client","clientUploads","privateSlugs","signedUrlExpiresIn","urlEndpoint","fetchUploadedFile","fileURL","range","response","fetch","headers","Range","ok","status","fetchUploadedFilePrefix","fileSize","mimeType","contentLength","Number","get","contentRange","rangeMatch","match","rangeEnd","NaN","totalSize","expectedLength","Math","min","isSafeInteger","body","cancel","filePrefix","arrayBuffer","byteLength","Response","String","has","slug","buildSignedURL","src","tr","helper","buildSrc","expiresIn","signed","transformation","raw","fields","admin","condition","disableListColumn","disableListFilter","hidden","readOnly","label","_data","siblingData","description","hooks","afterRead","virtual","interfaceName","generateURL","handleDelete","storedFileId","files","delete","handleUpload","file","uploadFile","buffer","uploaded","upload","fileName","useUniqueFileName","isPrivateFile","staticHandler","args","requestURL","URL","searchParams","hasClientUploadContext","params","expectedFilePath","uploadedFile","uploadedFileMime","mime","uploadedFileSize","size","metadataMatchesUpload","Boolean","Object","assign","fileType","thumbnail","verifiedFileURL","signSrc","redirect","imageKitURL","toCloudStorageCollections","collections","adapter","disablePayloadAccessControl","mappedCollections","keys","disableLocalStorage","imagekitStorage","pluginOptions","config","alwaysInsertFields","enabled","focalPoint","privateKey","publicKey","signedUrlExpiresInOption","Set","entries","filter","map","routes","api","imageKitClient","configuredSlugs","configWithCropDisabled","isCollectionPrivate","beforeDocumentControls","components","edit","collectionOptions","collectionFocalPoint","existingDescription","baseAdmin","clientProps","authPath","beforeChange","adminThumbnail","crop","endpoints","handler","method","migrateFolder","payloadStorageImagekit","payloadStorageImageKit"],"mappings":"AAUA,OAAOA,YAAYC,MAAM,QAAQ,mBAAkB;AACnD,SAASC,kBAAkB,QAAQ,mCAAkC;AACrE,OAAOC,UAAU,YAAW;AAE5B,SAASC,yBAAyB,EAAEC,6BAA6B,QAAQ,qBAAoB;AAC7F,SAASC,+BAA+B,QAAQ,iDAAgD;AAChG,SACEC,oBAAoB,EACpBC,2BAA2B,EAC3BC,aAAa,EACbC,eAAe,QACV,4BAA2B;AAClC,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,uBAAsB;AAiBjF,MAAMC,gCAAgC;AACtC,uFAAuF;AACvF,MAAMC,2BAA2B;AACjC,MAAMC,4BAA4B,CAAC,QAAQ,EAAED,2BAA2B,GAAG;AAE3E,MAAME,iCACJ;AAEF,MAAMC,4BAA4B,CAACC,QACjCA,UAAU,QAAQ,OAAOA,UAAU,YAAYA,OAAOC,YAAY;AAEpE;;;;;CAKC,GACD,MAAMC,oBAAoB,CAACC,KAAcC;IACvC,MAAMC,SAAUF,KAA4DG,UAAUC;IAEtF,OAAO,OAAOF,WAAW,YAAYA,SAASD;AAChD;AAwCA,MAAMI,kBAAkB,CAACC;IACvB,MAAMC,aAAaD,OAAOE,IAAI,GAAGC,OAAO,CAAC,cAAc;IAEvD,IAAI,CAACF,YAAY;QACf,MAAM,IAAIG,MAAM;IAClB;IAEA,OAAO,CAAC,CAAC,EAAEH,YAAY;AACzB;AAEA,MAAMI,sBAAsB,CAACC,YAAoBC,iBAC/C/B,KAAKgC,KAAK,CAACC,IAAI,CAACH,YAAYC;AAE9B,MAAMG,cAAc,CAACJ,YAAoBC,gBAAwBI,WAC/DnC,KAAKgC,KAAK,CAACC,IAAI,CAACJ,oBAAoBC,YAAYC,iBAAiBI;AAEnE,MAAMC,qBAAqB,OACzBf,UACAgB;IAEA,MAAMC,aAAatC,KAAKgC,KAAK,CAACO,OAAO,CAACF;IACtC,MAAMG,OAAOxC,KAAKgC,KAAK,CAACS,QAAQ,CAACJ;IAEjC,MAAMK,QAAQ;IAEd,IAAK,IAAIC,OAAO,IAAKA,QAAQD,MAAO;QAClC,MAAME,SAAS,MAAMvB,SAASuB,MAAM,CAACC,IAAI,CAAC;YACxCC,MAAM;YACNJ;YACA1C,MAAMsC,eAAe,MAAM,MAAM,GAAGA,WAAW,CAAC,CAAC;YACjDK;QACF;QAEA,MAAMI,QAAQH,OAAOI,IAAI,CACvB,CAACC,QAAU,YAAYA,SAASA,MAAMZ,QAAQ,KAAKA,YAAYY,MAAMT,IAAI,KAAKA;QAGhF,IAAIO,SAAS,YAAYA,OAAO;YAC9B,OAAOA,MAAMG,MAAM;QACrB;QAEA,IAAIN,OAAOO,MAAM,GAAGT,OAAO;YACzB;QACF;IACF;IAEA,OAAOU;AACT;AAEA,MAAMC,WAAW,CAACtC,QAChB,CAAC,CAACA,SAAS,OAAOA,UAAU;AAE9B,MAAMuC,uBAAuB,CAACpC;IAC5B,MAAMqC,YAAarC,KAAuCG,UAAUmC;IAEpE,OAAO,OAAOD,cAAc,YAAYA,UAAU7B,IAAI,GAAGyB,MAAM,GAAG,IAAII,YAAYH;AACpF;AAEA,MAAMK,uBAAuB,CAACvC,MAA0B,CAAC,CAACoC,qBAAqBpC;AAE/E,MAAMwC,+BAA+B,OAAO,EAC1CC,UAAU,EACVxB,QAAQ,EACRyB,MAAM,EACNC,GAAG,EAMJ;IACC,MAAMC,cAAuB;QAC3B;YACE3B,UAAU;gBACR4B,QAAQ5B;YACV;QACF;KACD;IAED,IAAI,OAAOyB,WAAW,UAAU;QAC9BE,YAAYE,IAAI,CAAC;YACfJ,QAAQ;gBACNG,QAAQH;YACV;QACF;IACF;IAEA,OAAOC,IAAII,OAAO,CAACC,EAAE,CAACC,OAAO,CAAC;QAC5BR;QACAE;QACAO,OAAO;YACLC,KAAKP;QACP;IACF;AACF;AAEA,MAAMQ,iCAAiC,CACrCC,MACAC,qBACAC,oBAAyCrE,oBAAoB,EAC7DkB,YAAY,KAAK;IAEjB,IAAI,CAACpB,8BAA8BsE,sBAAsB;QACvD,OAAOD;IACT;IAEAA,KAAKlD,QAAQ,GAAG;QACd6B,QAAQsB,oBAAoBtB,MAAM;QAClC,+EAA+E;QAC/E,wDAAwD;QACxD5B;QACAoD,cAAcF,oBAAoBE,YAAY;QAC9ClB,KAAKgB,oBAAoBhB,GAAG;IAC9B;IAEA,sFAAsF;IACtFe,KAAKI,YAAY,GAAGF,kBAAkBF;IAEtC,OAAOA;AACT;AAEA,MAAMK,kBAAkB,CAAC,EACvBC,QAAQ,EACRC,MAAM,EACNC,aAAa,EACbC,YAAY,EACZlD,UAAU,EACVmD,kBAAkB,EAClBC,WAAW,EASZ;IACC,MAAMC,oBAAoB,OAAOC,SAAiBC;QAChD,MAAMC,WAAWD,QACb,MAAME,MAAMH,SAAS;YACnBI,SAAS;gBACPC,OAAOJ;YACT;QACF,KACA,MAAME,MAAMH;QAEhB,IAAI,CAACE,SAASI,EAAE,EAAE;YAChB,MAAM,IAAI9D,MACR,CAAC,8DAA8D,EAAE0D,SAASK,MAAM,CAAC,EAAE,CAAC;QAExF;QAEA,OAAOL;IACT;IAEA,MAAMM,0BAA0B,OAAO,EACrCC,QAAQ,EACRT,OAAO,EACPU,QAAQ,EAKT;QACC,MAAMR,WAAW,MAAMH,kBAAkBC,SAASxE;QAClD,MAAMmF,gBAAgBC,OAAOV,SAASE,OAAO,CAACS,GAAG,CAAC;QAClD,MAAMC,eAAeZ,SAASE,OAAO,CAACS,GAAG,CAAC;QAC1C,MAAME,aAAaD,cAAcE,MAAM;QACvC,MAAMC,WAAWF,aAAaH,OAAOG,UAAU,CAAC,EAAE,IAAIH,OAAOM,GAAG;QAChE,MAAMC,YAAYJ,aAAaH,OAAOG,UAAU,CAAC,EAAE,IAAIH,OAAOM,GAAG;QACjE,MAAME,iBAAiBC,KAAKC,GAAG,CAACb,UAAUlF;QAE1C,IACE2E,SAASK,MAAM,KAAK,OACpB,CAACQ,cACD,CAACH,OAAOW,aAAa,CAACZ,kBACtBA,kBAAkBS,kBAClB,CAACR,OAAOW,aAAa,CAACN,aACtBA,WAAW,MAAMN,iBACjBQ,cAAcV,UACd;YACA,MAAMP,SAASsB,IAAI,EAAEC;YACrB,MAAM,IAAIjF,MAAM;QAClB;QAEA,MAAMkF,aAAa,MAAMxB,SAASyB,WAAW;QAE7C,IAAID,WAAWE,UAAU,KAAKjB,eAAe;YAC3C,MAAM,IAAInE,MAAM;QAClB;QAEA,OAAO,IAAIqF,SAASH,YAAY;YAC9BtB,SAAS;gBACP,kBAAkB0B,OAAOJ,WAAWE,UAAU;gBAC9C,gBAAgBlB;YAClB;YACAH,QAAQ;QACV;IACF;IAEA,OAAO,CAAC,EAAEhC,UAAU,EAAE;QACpB,MAAMrC,YAAY0D,aAAamC,GAAG,CAACxD,WAAWyD,IAAI;QAElD,mFAAmF;QACnF,gFAAgF;QAChF,6EAA6E;QAC7E,MAAMC,iBAAiB,CAACC,KAAaC,KACnCzC,OAAO0C,MAAM,CAACC,QAAQ,CAAC;gBACrBC,WAAWzC;gBACX0C,QAAQ;gBACRL;gBACAM,gBAAgBL,KAAK;oBAAC;wBAAEM,KAAKN;oBAAG;iBAAE,GAAGnE;gBACrC8B;YACF;QAEF,MAAMT,oBAAoB,CAACvD,MACzBD,kBAAkBC,KAAKI,aACnBjB,4BAA4Ba,KAAKyC,WAAWyD,IAAI,EAAEvC,YAClDzE,qBAAqBc;QAE3B,OAAO;YACLsB,MAAM;YACNuC;YACA+C,QAAQ;gBACN;oBACEtF,MAAM;oBACNM,MAAM;oBACNiF,OAAO;wBACLC,WAAW,CAACzD,OAASd,qBAAqBc;wBAC1C0D,mBAAmB;wBACnBC,mBAAmB;oBACrB;oBACAJ,QAAQ;wBACN;4BACEtF,MAAM;4BACNM,MAAM;4BACNiF,OAAO;gCACLI,QAAQ;4BACV;wBACF;wBACA;4BACE3F,MAAM;4BACNM,MAAM;4BACNiF,OAAO;gCACLK,UAAU;4BACZ;4BACAC,OAAO;wBACT;wBACA;4BACE7F,MAAM;4BACNM,MAAM;4BACNiF,OAAO;gCACLC,WAAW,CAACM,OAAOC,cACjBtH,kBAAkB;wCAAEI,UAAUkH;oCAAY,GAAGjH;gCAC/CkH,aACE;gCACFJ,UAAU;4BACZ;4BACAC,OAAO;wBACT;wBACA;4BACE7F,MAAM;4BACNM,MAAM;4BACNiF,OAAO;gCACL,mFAAmF;gCACnFC,WAAW,CAACM,OAAOC,cACjBtH,kBAAkB;wCAAEI,UAAUkH;oCAAY,GAAGjH;gCAC/CkH,aAAa,CAAC,kFAAkF,EAAEvD,mBAAmB,kKAAkK,CAAC;gCACxRmD,UAAU;4BACZ;4BACAK,OAAO;gCACL,mFAAmF;gCACnFC,WAAW;oCACT,CAAC,EAAEnE,IAAI,EAAEgE,WAAW,EAAE;wCACpB,IAAI,CAACtH,kBAAkB;4CAAEI,UAAUkH;wCAAY,GAAGjH,YAAY;4CAC5D,OAAO8B;wCACT;wCAEA,MAAMjB,WAAYoC,MAA4CpC;wCAE9D,IAAI,CAACA,UAAU;4CACb,OAAOiB;wCACT;wCAEA,OAAOiE,eAAenF,YAAYJ,YAAY6B,WAAWyD,IAAI,EAAEjF;oCACjE;iCACD;4BACH;4BACAkG,OAAO;4BACPM,SAAS;wBACX;wBACA;4BACEnG,MAAM;4BACNM,MAAM;4BACNiF,OAAO;gCACLI,QAAQ;4BACV;wBACF;qBACD;oBACDS,eAAe;oBACfP,OAAO;gBACT;aACD;YACDQ,aAAa,CAAC,EAAE1G,QAAQ,EAAE,GACxB2C,OAAO0C,MAAM,CAACC,QAAQ,CAAC;oBACrBH,KAAKpF,YAAYJ,YAAY6B,WAAWyD,IAAI,EAAEjF;oBAC9C+C;gBACF;YACF4D,cAAc,OAAO,EAAE5H,GAAG,EAAEiB,QAAQ,EAAE;gBACpC,MAAM4G,eAAe,AAAC7H,IAAuCG,QAAQ,EAAE6B;gBACvE,MAAMA,SACJ6F,gBACC,MAAM3G,mBAAmB0C,QAAQ5C,YAAYJ,YAAY6B,WAAWyD,IAAI,EAAEjF;gBAE7E,IAAI,CAACe,QAAQ;oBACX;gBACF;gBAEA,MAAM4B,OAAOkE,KAAK,CAACC,MAAM,CAAC/F;YAC5B;YACAgG,cAAc,OAAO,EAAE1E,mBAAmB,EAAED,IAAI,EAAE4E,IAAI,EAAE;gBACtD,IAAIjJ,8BAA8BsE,sBAAsB;oBACtD,OAAOF,+BACLC,MACAC,qBACAC,mBACAnD;gBAEJ;gBAEA,MAAM8H,aAAa,MAAMtJ,OAAOqJ,KAAKE,MAAM,EAAEF,KAAKhH,QAAQ,EAAE;oBAAEW,MAAMqG,KAAKrD,QAAQ;gBAAC;gBAElF,MAAMwD,WAAW,MAAMxE,OAAOkE,KAAK,CAACO,MAAM,CAAC;oBACzCJ,MAAMC;oBACNI,UAAUL,KAAKhH,QAAQ;oBACvBX,QAAQK,oBAAoBC,YAAY6B,WAAWyD,IAAI;oBACvDqC,mBAAmB;oBACnB,GAAInI,YAAY;wBAAEoI,eAAe;oBAAK,IAAI,CAAC,CAAC;gBAC9C;gBAEAnF,KAAKlD,QAAQ,GAAG;oBACd6B,QAAQoG,SAASpG,MAAM;oBACvB5B;oBACAoD,cAAc4E,SAAS5E,YAAY;oBACnClB,KAAK8F,SAAS9F,GAAG;gBACnB;gBAEA,0EAA0E;gBAC1E,iFAAiF;gBACjF,sEAAsE;gBACtEe,KAAKI,YAAY,GAAGF,kBAAkB;oBACpC,GAAGF,IAAI;oBACPpC,UAAU,AAACoC,KAA+BpC,QAAQ,IAAIgH,KAAKhH,QAAQ;gBACrE;gBAEA,OAAOoC;YACT;YACAoF,eAAe,OAAO9F,KAAK+F;gBACzB,MAAMC,aAAa,IAAIC,IAAIjG,IAAIL,GAAG,IAAI;gBACtC,MAAM+D,KAAKsC,WAAWE,YAAY,CAAC9D,GAAG,CAAC;gBACvC,MAAM+D,yBAAyB,yBAAyBJ,KAAKK,MAAM;gBAEnE,IAAID,wBAAwB;oBAC1B,MAAMxF,sBAAsBoF,KAAKK,MAAM,CAACzF,mBAAmB;oBAE3D,IAAI,CAACtE,8BAA8BsE,sBAAsB;wBACvD,MAAM,IAAI5C,MAAM;oBAClB;oBAEA,MAAMsI,mBAAmBhI,YACvBJ,YACA8H,KAAKK,MAAM,CAACtG,UAAU,EACtBiG,KAAKK,MAAM,CAAC9H,QAAQ;oBAEtB,MAAMe,SAASsB,oBAAoBtB,MAAM;oBAEzC,IAAI,OAAOA,WAAW,YAAY,CAACA,QAAQ;wBACzC,MAAM,IAAItB,MAAM;oBAClB;oBAEA,MAAMuI,eAAe,MAAMrF,OAAOkE,KAAK,CAAC/C,GAAG,CAAC/C;oBAC5C,MAAMkH,mBAAmBD,aAAaE,IAAI;oBAC1C,MAAMC,mBAAmBH,aAAaI,IAAI;oBAC1C,MAAMC,wBACJL,aAAajH,MAAM,KAAKA,UACxBiH,aAAa9H,QAAQ,KAAK6H,oBAC1BC,aAAa3H,IAAI,KAAKoH,KAAKK,MAAM,CAAC9H,QAAQ,IAC1C,OAAOiI,qBAAqB,YAC5B,OAAOD,aAAa3G,GAAG,KAAK,YAC5B,OAAO8G,qBAAqB,YAC5BtE,OAAOW,aAAa,CAAC2D,qBACrBA,mBAAmB,KACnBG,QAAQN,aAAaT,aAAa,MAAMpI,aACvC,CAAA,OAAOkD,oBAAoB+F,IAAI,KAAK,YACnCD,qBAAqB9F,oBAAoB+F,IAAI,AAAD;oBAEhD,IACE,CAACC,yBACD,OAAOJ,qBAAqB,YAC5B,OAAOE,qBAAqB,UAC5B;wBACA,MAAM,IAAI1I,MAAM;oBAClB;oBAEA,2EAA2E;oBAC3E8I,OAAOC,MAAM,CAACnG,qBAAqB;wBACjChC,MAAM2H,aAAa3H,IAAI;wBACvBU,QAAQiH,aAAajH,MAAM;wBAC3Bb,UAAU8H,aAAa9H,QAAQ;wBAC/BuI,UAAUT,aAAaS,QAAQ;wBAC/B9E,UAAUsE;wBACVG,MAAMD;wBACN5F,cAAcyF,aAAaU,SAAS;wBACpCrH,KAAK2G,aAAa3G,GAAG;oBACvB;oBAEA,MAAMsH,kBAAkBxJ,YACpB+F,eAAe6C,kBAAkB3C,MACjCzC,OAAO0C,MAAM,CAACC,QAAQ,CAAC;wBACrBH,KAAK4C;wBACLhF;oBACF;oBAEJ,IAAI3E,gBAAgB6J,mBAAmB;wBACrC,OAAOxE,wBAAwB;4BAC7BC,UAAUyE;4BACVlF,SAAS0F;4BACThF,UAAUsE;wBACZ;oBACF;oBAEA,OAAOjF,kBAAkB2F;gBAC3B;gBAEA,MAAM5J,MACJ0I,KAAK1I,GAAG,IACP,MAAMwC,6BAA6B;oBAClCC,YAAYiG,KAAKK,MAAM,CAACtG,UAAU;oBAClCxB,UAAUyH,KAAKK,MAAM,CAAC9H,QAAQ;oBAC9ByB,QAAQgG,KAAKK,MAAM,CAACrG,MAAM;oBAC1BC;gBACF;gBAEF,2EAA2E;gBAC3E,+EAA+E;gBAC/E,IAAI5C,kBAAkBC,KAAKI,YAAY;oBACrC,MAAMwE,WAAY5E,KAAsC4E;oBACxD,IAAIiF,UAAU7I,YAAYJ,YAAY8H,KAAKK,MAAM,CAACtG,UAAU,EAAEiG,KAAKK,MAAM,CAAC9H,QAAQ;oBAElF,6EAA6E;oBAC7E,yEAAyE;oBACzE,IAAIoF,MAAMhH,gBAAgBuF,WAAW;wBACnCiF,UAAUtK,kBAAkBsK;oBAC9B,OAAO,IAAIxD,MAAMjH,cAAcwF,WAAW;wBACxCiF,UAAUvK,wBAAwBuK;oBACpC;oBAEA,OAAO9D,SAAS+D,QAAQ,CAAC3D,eAAe0D,SAASxD,KAAK;gBACxD;gBAEA,MAAM0D,cAAcnG,OAAO0C,MAAM,CAACC,QAAQ,CAAC;oBACzCH,KACEhE,qBAAqBpC,QACrBgB,YAAYJ,YAAY8H,KAAKK,MAAM,CAACtG,UAAU,EAAEiG,KAAKK,MAAM,CAAC9H,QAAQ;oBACtEyF,gBAAgBL,KAAK;wBAAC;4BAAEM,KAAKN;wBAAG;qBAAE,GAAGnE;oBACrC8B;gBACF;gBAEA,OAAO+B,SAAS+D,QAAQ,CAACC,aAAa;YACxC;QACF;IACF;AACF;AAEA,MAAMC,4BAA4B,CAChCC,aACAC,SACApG,cACAqG;IAEA,MAAMC,oBAAwE,CAAC;IAE/E,KAAK,MAAMvJ,kBAAkB2I,OAAOa,IAAI,CAACJ,aAAc;QACrDG,iBAAiB,CAACvJ,eAAe,GAAG;YAClCqJ;YACAI,qBAAqB;YACrB,oFAAoF;YACpFH,6BAA6BrG,aAAamC,GAAG,CAACpF,kBAC1CqB,YACAiI;QACN;IACF;IAEA,OAAOC;AACT;AAEA,OAAO,MAAMG,kBACX,CAACC,gBACD,CAACC;QACC,MAAM,EACJC,kBAAkB,EAClB7G,aAAa,EACboG,WAAW,EACXE,2BAA2B,EAC3BQ,OAAO,EACPC,UAAU,EACVtK,MAAM,EACNuK,UAAU,EACVC,SAAS,EACT/G,oBAAoBgH,wBAAwB,EAC5C/G,WAAW,EACZ,GAAGwG;QAEJ,IAAI,CAACK,YAAYrK,QAAQ;YACvB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAACoK,WAAWtK,QAAQ;YACtB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAACsD,aAAaxD,QAAQ;YACxB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAACuJ,eAAeT,OAAOa,IAAI,CAACJ,aAAahI,MAAM,KAAK,GAAG;YACzD,MAAM,IAAIvB,MAAM;QAClB;QAEA,MAAMoD,eAAe,IAAIkH,IACvBxB,OAAOyB,OAAO,CAAChB,aACZiB,MAAM,CAAC,CAAC,GAAGrL,MAAM,GAAKD,0BAA0BC,QAChDsL,GAAG,CAAC,CAAC,CAACjF,KAAK,GAAKA;QAGrB,IAAIiE,+BAA+BrG,aAAauF,IAAI,GAAG,GAAG;YACxD,MAAM,IAAI3I,MACR;QAEJ;QAEA,MAAMqD,qBACJ,OAAOgH,6BAA6B,YAAYA,2BAA2B,IACvEA,2BACAvL;QACN,MAAMmE,WAAW8G,OAAOW,MAAM,EAAEC,OAAO;QAEvC,MAAMzK,aAAaP,gBAAgBC;QAEnC,MAAMgL,iBAAiB,IAAI3M,SAAS;YAAEkM;QAAW;QACjD,MAAMX,UAAUxG,gBAAgB;YAC9BC;YACAC,QAAQ0H;YACRzH;YACAC;YACAlD;YACAmD;YACAC;QACF;QAEA,MAAMuH,kBAAkB,IAAIP,IAAIxB,OAAOa,IAAI,CAACJ;QAC5C,MAAMuB,yBAAiC;YACrC,GAAGf,MAAM;YACTR,aAAa,AAACQ,CAAAA,OAAOR,WAAW,IAAI,EAAE,AAAD,EAAGkB,GAAG,CAAC,CAAC1I;gBAC3C,IAAI,CAAC8I,gBAAgBtF,GAAG,CAACxD,WAAWyD,IAAI,GAAG;oBACzC,OAAOzD;gBACT;gBAEA,MAAMgJ,sBAAsB3H,aAAamC,GAAG,CAACxD,WAAWyD,IAAI;gBAC5D,MAAM3C,oBAAoB,CAACvD,MACzBD,kBAAkBC,KAAKyL,uBACnBtM,4BAA4Ba,KAAKyC,WAAWyD,IAAI,EAAEvC,YAClDzE,qBAAqBc;gBAE3B,MAAM0L,yBACJjJ,WAAWoE,KAAK,EAAE8E,YAAYC,MAAMF,0BAA0B,EAAE;gBAClE,MAAMG,oBAAoB5B,WAAW,CAACxH,WAAWyD,IAAI,CAAC;gBACtD,MAAM4F,uBACJD,sBAAsB,QACtB,OAAOA,sBAAsB,YAC7B,OAAOA,kBAAkBjB,UAAU,KAAK,YACpCiB,kBAAkBjB,UAAU,GAC5B1I;gBAEN,4EAA4E;gBAC5E,qEAAqE;gBACrE,oCAAoC;gBACpC,MAAM6J,sBAAsBtJ,WAAWoE,KAAK,EAAES;gBAC9C,MAAM0E,YAAYP,sBACd;oBACE,GAAIhJ,WAAWoE,KAAK,IAAI,CAAC,CAAC;oBAC1BS,aACE,OAAOyE,wBAAwB,YAAYA,oBAAoBvL,IAAI,GAAGyB,MAAM,GAAG,IAC3E,GAAG8J,oBAAoB,CAAC,EAAEpM,gCAAgC,GACzDoM,uBAAuBpM;gBAChC,IACA8C,WAAWoE,KAAK;gBAEpB,OAAO;oBACL,GAAGpE,UAAU;oBACboE,OAAOhD,gBACH;wBACE,GAAImI,aAAa,CAAC,CAAC;wBACnBL,YAAY;4BACV,GAAIlJ,WAAWoE,KAAK,EAAE8E,cAAc,CAAC,CAAC;4BACtCC,MAAM;gCACJ,GAAInJ,WAAWoE,KAAK,EAAE8E,YAAYC,QAAQ,CAAC,CAAC;gCAC5CF,wBAAwB;uCACnBA;oCACH;wCACEO,aAAa;4CACXC,UAAUnN,0BAA0B0D,WAAWyD,IAAI;4CACnDrF,gBAAgB4B,WAAWyD,IAAI;4CAC/B5F,QAAQK,oBAAoBC,YAAY6B,WAAWyD,IAAI;4CACvD9F,WAAWqL;4CACXX;wCACF;wCACAhM,MAAM;oCACR;iCACD;4BACH;wBACF;oBACF,IACAkN;oBACJzE,OAAO;wBACL,GAAI9E,WAAW8E,KAAK,IAAI,CAAC,CAAC;wBAC1B4E,cAAc;+BACR1J,WAAW8E,KAAK,EAAE4E,gBAAgB,EAAE;4BACxC,CAAC,EAAE9I,IAAI,EAAEV,GAAG,EAAE;gCACZ,IAAI,CAACR,SAASkB,SAAS,CAACV,IAAIsF,IAAI,EAAE3E,qBAAqB;oCACrD,OAAOD;gCACT;gCAEA,OAAOD,+BACLC,MACAV,IAAIsF,IAAI,CAAC3E,mBAAmB,EAC5BC,mBACAkI;4BAEJ;yBACD;oBACH;oBACApD,QAAQ;wBACN,mEAAmE;wBACnE,4DAA4D;wBAC5D,gEAAgE;wBAChE,wBAAwB;wBACxBuC,YAAY;wBACZ,GAAI,OAAOA,eAAe,YAAY;4BAAEA;wBAAW,IAAI,CAAC,CAAC;wBACzD,GAAI,OAAOkB,yBAAyB,YAChC;4BAAElB,YAAYkB;wBAAqB,IACnC,CAAC,CAAC;wBACN,GAAI,OAAOrJ,WAAW4F,MAAM,KAAK,WAAW5F,WAAW4F,MAAM,GAAG,CAAC,CAAC;wBAClE+D,gBAAgB,CAAC,EAAEpM,GAAG,EAAE,GAAKuD,kBAAkBvD;wBAC/CqM,MAAM;oBACR;gBACF;YACF;YACAC,WAAWzI,gBACP;mBACM4G,OAAO6B,SAAS,IAAI,EAAE;gBAC1B;oBACEC,SAAStN,gCAAgC;wBACvC2E,QAAQ0H;wBACRrB;oBACF;oBACAuC,QAAQ;oBACR1N,MAAM,GAAGC,0BAA0B,gBAAgB;gBACrD;aACD,GACD0L,OAAO6B,SAAS;QACtB;QAEA,OAAOzN,mBAAmB;YACxB6L;YACAT,aAAaD,0BACXC,aACAC,SACApG,cACAqG;YAEFQ;QACF,GAAGa;IACL,EAAC;AAEH,SAASiB,aAAa,QAAQ,eAAc;AAG5C,4BAA4B;AAC5B,OAAO,MAAMC,yBAAyBnC,gBAAe;AACrD,OAAO,MAAMoC,yBAAyBpC,gBAAe"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {\n  Adapter,\n  ClientUploadsConfig,\n  CollectionOptions,\n} from '@payloadcms/plugin-cloud-storage/types'\nimport type {\n  CollectionConfig,\n  CollectionSlug,\n  Config,\n  PayloadRequest,\n  TypeWithID,\n  UploadCollectionSlug,\n  Where,\n} from 'payload'\n\nimport ImageKit, { toFile } from '@imagekit/nodejs'\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\nimport {\n  buildStoragePathData,\n  buildUploadStoragePathData,\n  getStorageFilePath,\n  initClientUploads,\n} from '@payloadcms/plugin-cloud-storage/utilities'\nimport { openAsBlob } from 'node:fs'\nimport path from 'node:path'\nimport { APIError } from 'payload'\nimport {\n  getRangeRequestInfo,\n  isXmlMimeType,\n  UPLOAD_CONTENT_SECURITY_POLICY,\n} from 'payload/internal'\nimport { validateMimeType } from 'payload/shared'\n\nimport type { VerifiedImageKitUpload } from './clientUploadVerification.js'\n\nimport { imageKitUploadAuthPath, isImageKitReceiptContext } from './clientUploads.js'\nimport {\n  createImageKitClientUploadVerifier,\n  getClientUploadStorageFilePath,\n} from './clientUploadVerification.js'\nimport { createImageKitUploadAuthHandler } from './endpoints/createImageKitUploadAuthHandler.js'\nimport {\n  getAdminThumbnailURL,\n  getPrivateAdminThumbnailURL,\n  isPdfMimeType,\n  isVideoMimeType,\n} from './getAdminThumbnailURL.js'\nimport { getImageKitThumbnailSrc, getVideoPosterSrc } from './imageTransforms.js'\n\nexport type ImageKitCollectionOptions = {\n  /**\n   * Override Payload's native focal-point picker (`upload.focalPoint`) for this\n   * collection.\n   */\n  focalPoint?: boolean\n  /**\n   * Upload files in this collection as ImageKit private files (`isPrivateFile: true`)\n   * and deliver them only through short-lived signed URLs, behind Payload access control.\n   */\n  private?: boolean\n}\ntype ImageKitCollectionConfig = ImageKitCollectionOptions | true\ntype ImageKitCollectionMap = Partial<Record<UploadCollectionSlug, ImageKitCollectionConfig>>\n\nconst DEFAULT_SIGNED_URL_EXPIRES_IN = 900\n/**\n * ImageKit re-encodes some uploads and serves the smaller derivative from the plain\n * delivery URL — a 1.9 MB MP4 can come back as 868 KB. That is exactly what we want\n * for visitors, but not when reading the file back to verify a client upload: the\n * bytes and the byte count would both belong to a file ImageKit's API never reported.\n * `orig-true` asks for the untouched original and does not disable optimisation for\n * anyone else.\n */\nconst ORIGINAL_FILE_TRANSFORMATION = 'orig-true'\n\nconst PRIVATE_COLLECTION_DESCRIPTION =\n  'Files in this collection are uploaded to ImageKit as private files and delivered through short-lived signed URLs.'\n\nconst isPrivateCollectionConfig = (value: ImageKitCollectionConfig | undefined): boolean =>\n  value !== true && typeof value === 'object' && value?.private === true\n\nconst XML_FAMILY_MIME_TYPES = ['application/xml', 'image/svg+xml', 'text/xml']\n\nconst collectionCanStoreXml = (collection: CollectionConfig): boolean => {\n  const upload = collection.upload\n\n  if (!upload || upload === true) {\n    return Boolean(upload)\n  }\n\n  // Payload skips MIME and content restrictions when this escape hatch is enabled.\n  if (upload.allowRestrictedFileTypes) {\n    return true\n  }\n\n  const allowedMimeTypes = upload.mimeTypes\n\n  return (\n    !allowedMimeTypes?.length ||\n    allowedMimeTypes.some((mimeType) => mimeType.includes('*') || isXmlMimeType(mimeType)) ||\n    XML_FAMILY_MIME_TYPES.some((mimeType) => validateMimeType(mimeType, allowedMimeTypes))\n  )\n}\n\n/**\n * Whether a specific document is private. The flag stored on the document at upload time\n * (`imagekit.isPrivate`) is the source of truth — a file's privacy on ImageKit is fixed\n * when it is uploaded and does not change if the collection's `private` setting changes\n * later. Falls back to the collection setting for documents uploaded before this flag existed.\n */\nconst isDocumentPrivate = (doc: unknown, collectionIsPrivate: boolean): boolean => {\n  const stored = (doc as { imagekit?: { isPrivate?: boolean } } | undefined)?.imagekit?.isPrivate\n\n  return typeof stored === 'boolean' ? stored : collectionIsPrivate\n}\ntype ImageKitReference = {\n  imagekit?: {\n    fileId?: string\n    isPrivate?: boolean\n    thumbnailUrl?: string\n    url?: string\n  }\n}\n\ntype UploadDocumentData = {\n  thumbnailURL?: string\n} & ImageKitReference\n\nexport type PayloadStorageImageKitConfig = {\n  alwaysInsertFields?: boolean\n  clientUploads?: ClientUploadsConfig\n  collections: ImageKitCollectionMap\n  disablePayloadAccessControl?: true\n  enabled?: boolean\n  /**\n   * Broad default for Payload's native focal-point picker (`upload.focalPoint`)\n   * on every configured collection. Focal points are disabled by default for\n   * configured collections, so prefer collection-level `focalPoint: true` for\n   * image collections. A collection's own `upload.focalPoint` still takes\n   * precedence.\n   */\n  focalPoint?: boolean\n  folder: string\n  privateKey: string\n  publicKey: string\n  /**\n   * Expiry (in seconds) applied to signed URLs generated for private collections.\n   * Defaults to 900 (15 minutes). URLs are signed fresh on every request, so a short\n   * window is safe.\n   */\n  signedUrlExpiresIn?: number\n  urlEndpoint: string\n}\n\nconst normalizeFolder = (folder: string): string => {\n  const normalized = folder.trim().replace(/^\\/+|\\/+$/g, '')\n\n  if (!normalized) {\n    throw new Error('imagekitStorage: `folder` is required.')\n  }\n\n  return `/${normalized}`\n}\n\nconst getCollectionFolder = (rootFolder: string, collectionSlug: string): string =>\n  path.posix.join(rootFolder, collectionSlug)\n\nconst findImageKitFileId = async (\n  imagekit: ImageKit,\n  filePath: string,\n): Promise<string | undefined> => {\n  const parentPath = path.posix.dirname(filePath)\n  const name = path.posix.basename(filePath)\n\n  const limit = 100\n\n  for (let skip = 0; ; skip += limit) {\n    const assets = await imagekit.assets.list({\n      type: 'file',\n      limit,\n      path: parentPath === '/' ? '/' : `${parentPath}/`,\n      skip,\n    })\n\n    const found = assets.find(\n      (asset) => 'fileId' in asset && asset.filePath === filePath && asset.name === name,\n    )\n\n    if (found && 'fileId' in found) {\n      return found.fileId\n    }\n\n    if (assets.length < limit) {\n      break\n    }\n  }\n\n  return undefined\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === 'object'\n\nconst getStoredImageKitURL = (doc: unknown): string | undefined => {\n  const storedURL = (doc as ImageKitReference | undefined)?.imagekit?.url\n\n  return typeof storedURL === 'string' && storedURL.trim().length > 0 ? storedURL : undefined\n}\n\nconst hasStoredImageKitURL = (doc: unknown): boolean => !!getStoredImageKitURL(doc)\n\nconst findUploadDocumentByFilename = async ({\n  collection,\n  filename,\n  prefix,\n  req,\n}: {\n  collection: string\n  filename: string\n  prefix?: string\n  req: PayloadRequest\n}): Promise<null | TypeWithID> => {\n  const constraints: Where[] = [\n    {\n      filename: {\n        equals: filename,\n      },\n    },\n  ]\n\n  if (typeof prefix === 'string') {\n    constraints.push({\n      prefix: {\n        equals: prefix,\n      },\n    })\n  }\n\n  return req.payload.db.findOne({\n    collection,\n    req,\n    where: {\n      and: constraints,\n    },\n  })\n}\n\nconst applyVerifiedClientUploadToData = <T extends UploadDocumentData>(\n  data: T,\n  uploaded: VerifiedImageKitUpload,\n  buildThumbnailURL: (data: T) => string = getAdminThumbnailURL,\n  isPrivate: boolean,\n): T => {\n  data.imagekit = {\n    fileId: uploaded.fileId,\n    isPrivate,\n    thumbnailUrl: uploaded.thumbnailUrl,\n    url: uploaded.url,\n  }\n\n  // Preserve the admin preview when the original file was already uploaded client-side.\n  data.thumbnailURL = buildThumbnailURL(data)\n\n  return data\n}\n\nconst imagekitAdapter = ({\n  apiRoute,\n  client,\n  clientUploads,\n  privateSlugs,\n  rootFolder,\n  signedUrlExpiresIn,\n  urlEndpoint,\n  verifyClientUpload,\n}: {\n  apiRoute: string\n  client: ImageKit\n  clientUploads?: ClientUploadsConfig\n  privateSlugs: Set<string>\n  rootFolder: string\n  signedUrlExpiresIn: number\n  urlEndpoint: string\n  verifyClientUpload: ReturnType<typeof createImageKitClientUploadVerifier>\n}): Adapter => {\n  const fetchUploadedFile = async ({\n    fileSize,\n    fileURL,\n    mimeType,\n    range,\n  }: {\n    fileSize: number\n    fileURL: string\n    mimeType: string\n    range?: null | string\n  }): Promise<Response> => {\n    const rangeResult = getRangeRequestInfo({ fileSize, rangeHeader: range ?? null })\n\n    if (rangeResult.type === 'invalid') {\n      return new Response(null, {\n        headers: new Headers(rangeResult.headers),\n        status: rangeResult.status,\n      })\n    }\n\n    const normalizedRange =\n      rangeResult.type === 'partial'\n        ? `bytes=${rangeResult.rangeStart}-${rangeResult.rangeEnd}`\n        : undefined\n    // Payload cancels image probes after reading a bounded prefix. Next.js memoizes\n    // GET responses by teeing their streams; cancelling one branch can then wait\n    // forever for its unread cached sibling. An explicit signal opts out of that\n    // memoization, while no-store also excludes these reads from the data cache.\n    const response = await fetch(fileURL, {\n      cache: 'no-store',\n      ...(normalizedRange ? { headers: { Range: normalizedRange } } : {}),\n      signal: new AbortController().signal,\n    })\n\n    if (!response.ok || response.status !== rangeResult.status) {\n      void response.body?.cancel().catch(() => undefined)\n      throw new Error(\n        `imagekitStorage: ImageKit returned an unexpected file response (${response.status}).`,\n      )\n    }\n\n    const upstreamLength = response.headers.get('Content-Length')\n    const expectedLength = rangeResult.headers['Content-Length']\n    const upstreamRange = response.headers.get('Content-Range')\n    const expectedRange =\n      rangeResult.type === 'partial' ? rangeResult.headers['Content-Range'] : undefined\n\n    if (\n      (upstreamLength !== null && upstreamLength !== expectedLength) ||\n      (expectedRange && upstreamRange !== expectedRange)\n    ) {\n      void response.body?.cancel().catch(() => undefined)\n      throw new Error('imagekitStorage: ImageKit returned mismatched file content metadata.')\n    }\n\n    const headers = new Headers(rangeResult.headers)\n    headers.set('Content-Type', mimeType)\n    if (isXmlMimeType(mimeType)) {\n      headers.set('Content-Security-Policy', UPLOAD_CONTENT_SECURITY_POLICY)\n    }\n\n    return new Response(response.body, {\n      headers,\n      status: response.status,\n    })\n  }\n\n  return ({ collection, prefix = getCollectionFolder(rootFolder, collection.slug) }) => {\n    const isPrivate = privateSlugs.has(collection.slug)\n\n    // Sign a relative ImageKit path against the configured urlEndpoint. We always sign\n    // a computed path (never a stored absolute URL) because ImageKit's signature is\n    // derived from the path after stripping urlEndpoint, so the host must match.\n    const buildSignedURL = (src: string, tr?: null | string): string =>\n      client.helper.buildSrc({\n        expiresIn: signedUrlExpiresIn,\n        signed: true,\n        src,\n        transformation: tr ? [{ raw: tr }] : undefined,\n        urlEndpoint,\n      })\n\n    const buildThumbnailURL = (doc: UploadDocumentData): string =>\n      isDocumentPrivate(doc, isPrivate)\n        ? getPrivateAdminThumbnailURL(doc, collection.slug, apiRoute)\n        : getAdminThumbnailURL(doc)\n\n    return {\n      name: 'imagekit',\n      clientUploads,\n      fields: [\n        {\n          name: 'imagekit',\n          type: 'group',\n          admin: {\n            condition: (data) => hasStoredImageKitURL(data),\n            disableListColumn: true,\n            disableListFilter: true,\n          },\n          fields: [\n            {\n              name: 'fileId',\n              type: 'text',\n              admin: {\n                hidden: true,\n              },\n            },\n            {\n              name: 'url',\n              type: 'text',\n              admin: {\n                readOnly: true,\n              },\n              label: 'URL',\n            },\n            {\n              name: 'isPrivate',\n              type: 'checkbox',\n              admin: {\n                condition: (_data, siblingData) =>\n                  isDocumentPrivate({ imagekit: siblingData }, isPrivate),\n                description:\n                  \"Indicates whether this file was uploaded to ImageKit as private. Private files are delivered through signed URLs. Changes to this collection's private option in payload.config only affect future uploads.\",\n                readOnly: true,\n              },\n              label: 'Private file',\n            },\n            {\n              name: 'signedUrl',\n              type: 'text',\n              admin: {\n                // Only relevant for private files; the plain `url` works directly for public ones.\n                condition: (_data, siblingData) =>\n                  isDocumentPrivate({ imagekit: siblingData }, isPrivate),\n                description: `Temporary signed URL for reaching this private file directly on ImageKit. Expires ${signedUrlExpiresIn} seconds after load and is regenerated on every read. Note: anyone with this URL can access the file until it expires — it is not gated by Payload access control.`,\n                readOnly: true,\n              },\n              hooks: {\n                // Computed server-side on read so it is always freshly signed and never persisted.\n                afterRead: [\n                  ({ data, siblingData }) => {\n                    if (!isDocumentPrivate({ imagekit: siblingData }, isPrivate)) {\n                      return undefined\n                    }\n\n                    const filename = (data as { filename?: string } | undefined)?.filename\n\n                    if (!filename) {\n                      return undefined\n                    }\n\n                    const source = (data || {}) as { _objectKey?: string; prefix?: string }\n                    const documentPrefix = path.posix.join(\n                      source.prefix || prefix,\n                      source._objectKey || '',\n                    )\n                    const storageFilePath = buildStoragePathData({\n                      collectionPrefix: prefix,\n                      docPrefix: documentPrefix,\n                      filename,\n                    }).storageFilePath\n\n                    return buildSignedURL(`/${storageFilePath}`)\n                  },\n                ],\n              },\n              label: 'Signed URL',\n              virtual: true,\n            },\n            {\n              name: 'thumbnailUrl',\n              type: 'text',\n              admin: {\n                hidden: true,\n              },\n            },\n          ],\n          interfaceName: 'imagekitFields',\n          label: 'ImageKit',\n        },\n      ],\n      generateURL: ({ filename, prefix: documentPrefix = '' }) =>\n        client.helper.buildSrc({\n          src: `/${buildStoragePathData({\n            collectionPrefix: prefix,\n            docPrefix: documentPrefix,\n            filename,\n          }).storageFilePath}`,\n          urlEndpoint,\n        }),\n      handleDelete: async ({ doc, storageFilePath }) => {\n        const storedFileId = (doc as ImageKitReference & typeof doc).imagekit?.fileId\n        const fileId =\n          storedFileId || (await findImageKitFileId(client, `/${storageFilePath.replace(/^\\/+/, '')}`))\n\n        if (!fileId) {\n          return\n        }\n\n        await client.files.delete(fileId)\n      },\n      handleUpload: async ({ clientUploadContext, data, file, storageFilePath }) => {\n        if (clientUploadContext) {\n          const uploaded = await verifyClientUpload({\n            collectionSlug: collection.slug,\n            context: clientUploadContext,\n          })\n\n          return applyVerifiedClientUploadToData(data, uploaded, buildThumbnailURL, isPrivate)\n        }\n\n        // ImageKit's `toFile()` consumes async iterables before starting the request. A file-backed\n        // Blob keeps temporary-file uploads lazy so FormData can stream them from disk instead.\n        const uploadSource = file.tempFilePath\n          ? await openAsBlob(file.tempFilePath, { type: file.mimeType })\n          : file.buffer\n        const uploadFile = await toFile(uploadSource, file.filename, { type: file.mimeType })\n        const uploadFolder = path.posix.dirname(`/${storageFilePath.replace(/^\\/+/, '')}`)\n        const uploadFilename = path.posix.basename(storageFilePath)\n\n        const uploaded = await client.files.upload({\n          file: uploadFile,\n          fileName: uploadFilename,\n          folder: uploadFolder,\n          useUniqueFileName: false,\n          ...(isPrivate ? { isPrivateFile: true } : {}),\n        })\n\n        data.imagekit = {\n          fileId: uploaded.fileId,\n          isPrivate,\n          thumbnailUrl: uploaded.thumbnailUrl,\n          url: uploaded.url,\n        }\n\n        // Set the root-level thumbnailURL that Payload's admin interface expects.\n        // `buildThumbnailURL` needs the filename, which Payload may not have copied onto\n        // `data` yet at this point, so fall back to the uploaded file's name.\n        data.thumbnailURL = buildThumbnailURL({\n          ...data,\n          filename: (data as { filename?: string }).filename || uploadFilename,\n        })\n\n        return data\n      },\n      requiresClientUploadReceipt: true,\n      staticHandler: async (req, args) => {\n        const requestURL = new URL(req.url || 'http://localhost')\n        const tr = requestURL.searchParams.get('tr')\n        const hasClientUploadContext = 'clientUploadContext' in args.params\n\n        if (hasClientUploadContext) {\n          const clientUploadContext = args.params.clientUploadContext\n\n          if (!isImageKitReceiptContext(clientUploadContext)) {\n            throw new APIError('Invalid ImageKit client upload context.', 400)\n          }\n\n          const uploadedFile = await verifyClientUpload({\n            collectionSlug: collection.slug,\n            context: clientUploadContext,\n          })\n          const expectedFilePath = getClientUploadStorageFilePath({\n            collectionPrefix: prefix,\n            context: clientUploadContext,\n          })\n          const verifiedFileURL = isPrivate\n            ? buildSignedURL(`/${expectedFilePath}`, ORIGINAL_FILE_TRANSFORMATION)\n            : client.helper.buildSrc({\n                src: `/${expectedFilePath}`,\n                transformation: [{ raw: ORIGINAL_FILE_TRANSFORMATION }],\n                urlEndpoint,\n              })\n\n          return fetchUploadedFile({\n            fileSize: uploadedFile.size,\n            fileURL: verifiedFileURL,\n            mimeType: uploadedFile.mimeType,\n            range: req.headers.get('Range'),\n          })\n        }\n\n        const doc =\n          args.doc ||\n          (await findUploadDocumentByFilename({\n            collection: args.params.collection,\n            filename: args.params.filename,\n            prefix: args.params.prefix,\n            req,\n          }))\n\n        const storageFilePath = await getStorageFilePath({\n          collection,\n          collectionPrefix: prefix,\n          doc: doc || undefined,\n          filename: args.params.filename,\n          prefixQueryParam: args.params.prefix,\n          req,\n        })\n        const imageKitPath = `/${storageFilePath.replace(/^\\/+/, '')}`\n        const mimeType = (doc as { mimeType?: string } | null)?.mimeType\n\n        // XML-family uploads (including SVG) must pass through Payload so its CSP is\n        // present even when ImageKit uses a custom, same-origin delivery domain.\n        if (typeof mimeType === 'string' && isXmlMimeType(mimeType)) {\n          const filesize = (doc as { filesize?: number } | null)?.filesize\n\n          if (typeof filesize !== 'number' || !Number.isSafeInteger(filesize) || filesize < 0) {\n            throw new APIError('Stored ImageKit file metadata is incomplete.', 500)\n          }\n\n          const fileURL = isDocumentPrivate(doc, isPrivate)\n            ? buildSignedURL(imageKitPath, ORIGINAL_FILE_TRANSFORMATION)\n            : client.helper.buildSrc({\n                src: imageKitPath,\n                transformation: [{ raw: ORIGINAL_FILE_TRANSFORMATION }],\n                urlEndpoint,\n              })\n\n          return fetchUploadedFile({\n            fileSize: filesize,\n            fileURL,\n            mimeType,\n            range: req.headers.get('Range'),\n          })\n        }\n\n        // Sign based on the document's stored status, not the collection's current\n        // setting, so files keep working if the collection's privacy is changed later.\n        if (isDocumentPrivate(doc, isPrivate)) {\n          let signSrc = imageKitPath\n\n          // A `tr` request for a video/PDF is a thumbnail request (the plain transform\n          // can't render a preview); serve ImageKit's generated thumbnail instead.\n          if (tr && isVideoMimeType(mimeType)) {\n            signSrc = getVideoPosterSrc(signSrc)\n          } else if (tr && isPdfMimeType(mimeType)) {\n            signSrc = getImageKitThumbnailSrc(signSrc)\n          }\n\n          return Response.redirect(buildSignedURL(signSrc, tr), 302)\n        }\n\n        const imageKitURL = client.helper.buildSrc({\n          src:\n            getStoredImageKitURL(doc) ||\n            imageKitPath,\n          transformation: tr ? [{ raw: tr }] : undefined,\n          urlEndpoint,\n        })\n\n        return Response.redirect(imageKitURL, 302)\n      },\n    }\n  }\n}\n\nconst toCloudStorageCollections = (\n  collections: ImageKitCollectionMap,\n  adapter: Adapter,\n  privateSlugs: Set<string>,\n  rootFolder: string,\n  disablePayloadAccessControl?: true,\n): Partial<Record<CollectionSlug, CollectionOptions>> => {\n  const mappedCollections: Partial<Record<CollectionSlug, CollectionOptions>> = {}\n\n  for (const collectionSlug of Object.keys(collections)) {\n    mappedCollections[collectionSlug] = {\n      adapter,\n      disableLocalStorage: true,\n      // Private files require Payload access control so URLs can be signed at serve time.\n      disablePayloadAccessControl: privateSlugs.has(collectionSlug)\n        ? undefined\n        : disablePayloadAccessControl,\n      prefix: getCollectionFolder(rootFolder, collectionSlug),\n    }\n  }\n\n  return mappedCollections\n}\n\nexport const imagekitStorage =\n  (pluginOptions: PayloadStorageImageKitConfig) =>\n  (config: Config): Config => {\n    const {\n      alwaysInsertFields,\n      clientUploads,\n      collections,\n      disablePayloadAccessControl,\n      enabled,\n      focalPoint,\n      folder,\n      privateKey,\n      publicKey,\n      signedUrlExpiresIn: signedUrlExpiresInOption,\n      urlEndpoint,\n    } = pluginOptions\n\n    if (!privateKey?.trim()) {\n      throw new Error('imagekitStorage: `privateKey` is required.')\n    }\n\n    if (!publicKey?.trim()) {\n      throw new Error('imagekitStorage: `publicKey` is required.')\n    }\n\n    if (!urlEndpoint?.trim()) {\n      throw new Error('imagekitStorage: `urlEndpoint` is required.')\n    }\n\n    if (!collections || Object.keys(collections).length === 0) {\n      throw new Error('imagekitStorage: `collections` must include at least one upload collection.')\n    }\n\n    const privateSlugs = new Set(\n      Object.entries(collections)\n        .filter(([, value]) => isPrivateCollectionConfig(value))\n        .map(([slug]) => slug),\n    )\n    const configuredSlugs = new Set(Object.keys(collections))\n\n    if (disablePayloadAccessControl && privateSlugs.size > 0) {\n      throw new Error(\n        'imagekitStorage: `disablePayloadAccessControl` cannot be used with private collections. Private files require Payload access control to remain enabled so URLs can be signed at serve time.',\n      )\n    }\n\n    if (disablePayloadAccessControl) {\n      const xmlCollectionSlugs = (config.collections || [])\n        .filter(\n          (collection) =>\n            configuredSlugs.has(collection.slug) && collectionCanStoreXml(collection),\n        )\n        .map((collection) => collection.slug)\n\n      if (xmlCollectionSlugs.length > 0) {\n        throw new Error(\n          `imagekitStorage: \\`disablePayloadAccessControl\\` cannot be used with collections that can store XML-family files (${xmlCollectionSlugs.join(', ')}). XML-family files require Payload's file route so its Content Security Policy is applied. Configure a MIME allow list that excludes SVG/XML, or keep Payload access control enabled.`,\n        )\n      }\n    }\n\n    const signedUrlExpiresIn =\n      typeof signedUrlExpiresInOption === 'number' && signedUrlExpiresInOption > 0\n        ? signedUrlExpiresInOption\n        : DEFAULT_SIGNED_URL_EXPIRES_IN\n    const apiRoute = config.routes?.api ?? '/api'\n\n    const rootFolder = normalizeFolder(folder)\n\n    const imageKitClient = new ImageKit({ privateKey })\n    const collectionSecurity = Object.fromEntries(\n      (config.collections || [])\n        .filter((collection) => configuredSlugs.has(collection.slug))\n        .map((collection) => [\n          collection.slug,\n          {\n            collection,\n            isPrivate: privateSlugs.has(collection.slug),\n            prefix: getCollectionFolder(rootFolder, collection.slug),\n          },\n        ]),\n    )\n    const verifyClientUpload = createImageKitClientUploadVerifier({\n      client: imageKitClient,\n      collections: collectionSecurity,\n    })\n    const adapter = imagekitAdapter({\n      apiRoute,\n      client: imageKitClient,\n      clientUploads,\n      privateSlugs,\n      rootFolder,\n      signedUrlExpiresIn,\n      urlEndpoint,\n      verifyClientUpload,\n    })\n\n    const configWithCropDisabled: Config = {\n      ...config,\n      collections: (config.collections || []).map((collection) => {\n        if (!configuredSlugs.has(collection.slug)) {\n          return collection\n        }\n\n        const isCollectionPrivate = privateSlugs.has(collection.slug)\n        const buildThumbnailURL = (doc: unknown): string =>\n          isDocumentPrivate(doc, isCollectionPrivate)\n            ? getPrivateAdminThumbnailURL(doc, collection.slug, apiRoute)\n            : getAdminThumbnailURL(doc)\n\n        const collectionOptions = collections[collection.slug]\n        const collectionFocalPoint =\n          collectionOptions !== true &&\n          typeof collectionOptions === 'object' &&\n          typeof collectionOptions.focalPoint === 'boolean'\n            ? collectionOptions.focalPoint\n            : undefined\n\n        // Surface a \"this is a private collection\" note in the list and edit views.\n        // Preserve an existing string description by appending; leave custom\n        // component descriptions untouched.\n        const existingDescription = collection.admin?.description\n        const baseAdmin = isCollectionPrivate\n          ? {\n              ...(collection.admin || {}),\n              description:\n                typeof existingDescription === 'string' && existingDescription.trim().length > 0\n                  ? `${existingDescription} ${PRIVATE_COLLECTION_DESCRIPTION}`\n                  : (existingDescription ?? PRIVATE_COLLECTION_DESCRIPTION),\n            }\n          : collection.admin\n\n        return {\n          ...collection,\n          admin: baseAdmin,\n          hooks: {\n            ...(collection.hooks || {}),\n            beforeChange: [\n              ...(collection.hooks?.beforeChange || []),\n              async ({ data, req }) => {\n                if (!isRecord(data) || !req.file?.clientUploadContext) {\n                  return data\n                }\n\n                const context = req.file.clientUploadContext\n                const requestMimeType = req.file.mimetype.split(';', 1)[0]?.trim().toLowerCase()\n                if (\n                  !isImageKitReceiptContext(context) ||\n                  context.filename !== data.filename ||\n                  context.filename !== req.file.name ||\n                  context.expectedMimeType !== requestMimeType ||\n                  // Payload can clear req.file.size when preparing an in-memory image.\n                  // generateFileData preserves the original size on the document.\n                  context.expectedSize !== data.filesize\n                ) {\n                  throw new APIError('ImageKit client upload reference does not match this request.', 400)\n                }\n\n                const uploaded = await verifyClientUpload({\n                  collectionSlug: collection.slug,\n                  context,\n                })\n                // A provider file can only be claimed once, including through legacy receipts.\n                // The unique file ID index also rejects concurrent claims.\n                const existing = await req.payload.db.findOne({\n                  collection: collection.slug,\n                  req,\n                  where: {\n                    'imagekit.fileId': {\n                      equals: uploaded.fileId,\n                    },\n                  },\n                })\n                if (existing) {\n                  throw new APIError('This ImageKit client upload receipt has already been used.', 400)\n                }\n\n                data.filename = uploaded.name\n                data.filesize = uploaded.size\n                data.mimeType = uploaded.mimeType\n\n                return applyVerifiedClientUploadToData(\n                  data,\n                  uploaded,\n                  buildThumbnailURL,\n                  isCollectionPrivate,\n                )\n              },\n            ],\n            beforeOperation: [\n              ...(collection.hooks?.beforeOperation || []),\n              ({ args, operation, req }) => {\n                if (\n                  (operation !== 'create' && operation !== 'update') ||\n                  req.context?.skipCloudStorage ||\n                  !req.file ||\n                  req.file.clientUploadContext ||\n                  !('data' in args) ||\n                  !isRecord(args.data) ||\n                  typeof args.data.prefix !== 'string'\n                ) {\n                  return args\n                }\n\n                // Payload checks filename uniqueness before cloud storage's beforeChange\n                // normalizes the prefix. Use the persisted form during that lookup too.\n                args.data.prefix = buildUploadStoragePathData({\n                  collectionPrefix: getCollectionFolder(rootFolder, collection.slug),\n                  docPrefix: args.data.prefix,\n                  filename: req.file.name,\n                }).sanitizedDocPrefix\n                return args\n              },\n            ],\n          },\n          upload: {\n            // Focal points are opt-in for configured collections. Plugin-level\n            // and collection-level options can override this default; a\n            // collection's own `upload.focalPoint` still wins because it is\n            // spread in afterwards.\n            focalPoint: false,\n            ...(typeof focalPoint === 'boolean' ? { focalPoint } : {}),\n            ...(typeof collectionFocalPoint === 'boolean'\n              ? { focalPoint: collectionFocalPoint }\n              : {}),\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            adminThumbnail: ({ doc }) => buildThumbnailURL(doc),\n            crop: false,\n          },\n        }\n      }),\n    }\n\n    const uploadCollections = Object.fromEntries(\n      Object.keys(collections).map((collectionSlug) => [\n        collectionSlug,\n        {\n          isPrivate: privateSlugs.has(collectionSlug),\n          prefix: getCollectionFolder(rootFolder, collectionSlug),\n        },\n      ]),\n    ) as Partial<\n      Record<UploadCollectionSlug, { isPrivate: boolean; prefix: string }>\n    >\n\n    initClientUploads({\n      clientHandler: '@humaan/payload-storage-imagekit/client#ImageKitUploadHandler',\n      collections: uploadCollections,\n      config: configWithCropDisabled,\n      enabled: enabled !== false && Boolean(clientUploads),\n      serverHandler: createImageKitUploadAuthHandler({\n        access: typeof clientUploads === 'object' ? clientUploads.access : undefined,\n        collections: uploadCollections,\n        privateKey,\n        publicKey,\n        verifyClientUpload,\n      }),\n      serverHandlerPath: imageKitUploadAuthPath,\n    })\n\n    const output = cloudStoragePlugin({\n      alwaysInsertFields,\n      collections: toCloudStorageCollections(\n        collections,\n        adapter,\n        privateSlugs,\n        rootFolder,\n        disablePayloadAccessControl,\n      ),\n      enabled,\n    })(configWithCropDisabled)\n\n    // Make the provider identity unique at persistence time to reject concurrent receipt replays.\n    // Keep the legacy object key index for existing uploads.\n    output.collections = (output.collections || []).map((collection) => {\n      if (!configuredSlugs.has(collection.slug)) {\n        return collection\n      }\n\n      return {\n        ...collection,\n        fields: collection.fields.map((field) => {\n          if ('name' in field && field.name === '_objectKey') {\n            return { ...field, unique: true }\n          }\n          if (field.type === 'group' && 'name' in field && field.name === 'imagekit') {\n            return {\n              ...field,\n              fields: field.fields.map((metadataField) =>\n                'name' in metadataField && metadataField.name === 'fileId'\n                  ? { ...metadataField, unique: true }\n                  : metadataField,\n              ),\n            }\n          }\n          return field\n        }),\n      }\n    })\n\n    return output\n  }\n\nexport { migrateFolder } from './migrate.js'\nexport type { MigrateFolderOptions, MigrationJobResult } from './migrate.js'\n\n// Backward-compatible alias\nexport const payloadStorageImagekit = imagekitStorage\nexport const payloadStorageImageKit = imagekitStorage\n\nexport type PayloadStorageImagekitConfig = PayloadStorageImageKitConfig\n"],"names":["ImageKit","toFile","cloudStoragePlugin","buildStoragePathData","buildUploadStoragePathData","getStorageFilePath","initClientUploads","openAsBlob","path","APIError","getRangeRequestInfo","isXmlMimeType","UPLOAD_CONTENT_SECURITY_POLICY","validateMimeType","imageKitUploadAuthPath","isImageKitReceiptContext","createImageKitClientUploadVerifier","getClientUploadStorageFilePath","createImageKitUploadAuthHandler","getAdminThumbnailURL","getPrivateAdminThumbnailURL","isPdfMimeType","isVideoMimeType","getImageKitThumbnailSrc","getVideoPosterSrc","DEFAULT_SIGNED_URL_EXPIRES_IN","ORIGINAL_FILE_TRANSFORMATION","PRIVATE_COLLECTION_DESCRIPTION","isPrivateCollectionConfig","value","private","XML_FAMILY_MIME_TYPES","collectionCanStoreXml","collection","upload","Boolean","allowRestrictedFileTypes","allowedMimeTypes","mimeTypes","length","some","mimeType","includes","isDocumentPrivate","doc","collectionIsPrivate","stored","imagekit","isPrivate","normalizeFolder","folder","normalized","trim","replace","Error","getCollectionFolder","rootFolder","collectionSlug","posix","join","findImageKitFileId","filePath","parentPath","dirname","name","basename","limit","skip","assets","list","type","found","find","asset","fileId","undefined","isRecord","getStoredImageKitURL","storedURL","url","hasStoredImageKitURL","findUploadDocumentByFilename","filename","prefix","req","constraints","equals","push","payload","db","findOne","where","and","applyVerifiedClientUploadToData","data","uploaded","buildThumbnailURL","thumbnailUrl","thumbnailURL","imagekitAdapter","apiRoute","client","clientUploads","privateSlugs","signedUrlExpiresIn","urlEndpoint","verifyClientUpload","fetchUploadedFile","fileSize","fileURL","range","rangeResult","rangeHeader","Response","headers","Headers","status","normalizedRange","rangeStart","rangeEnd","response","fetch","cache","Range","signal","AbortController","ok","body","cancel","catch","upstreamLength","get","expectedLength","upstreamRange","expectedRange","set","slug","has","buildSignedURL","src","tr","helper","buildSrc","expiresIn","signed","transformation","raw","fields","admin","condition","disableListColumn","disableListFilter","hidden","readOnly","label","_data","siblingData","description","hooks","afterRead","source","documentPrefix","_objectKey","storageFilePath","collectionPrefix","docPrefix","virtual","interfaceName","generateURL","handleDelete","storedFileId","files","delete","handleUpload","clientUploadContext","file","context","uploadSource","tempFilePath","buffer","uploadFile","uploadFolder","uploadFilename","fileName","useUniqueFileName","isPrivateFile","requiresClientUploadReceipt","staticHandler","args","requestURL","URL","searchParams","hasClientUploadContext","params","uploadedFile","expectedFilePath","verifiedFileURL","size","prefixQueryParam","imageKitPath","filesize","Number","isSafeInteger","signSrc","redirect","imageKitURL","toCloudStorageCollections","collections","adapter","disablePayloadAccessControl","mappedCollections","Object","keys","disableLocalStorage","imagekitStorage","pluginOptions","config","alwaysInsertFields","enabled","focalPoint","privateKey","publicKey","signedUrlExpiresInOption","Set","entries","filter","map","configuredSlugs","xmlCollectionSlugs","routes","api","imageKitClient","collectionSecurity","fromEntries","configWithCropDisabled","isCollectionPrivate","collectionOptions","collectionFocalPoint","existingDescription","baseAdmin","beforeChange","requestMimeType","mimetype","split","toLowerCase","expectedMimeType","expectedSize","existing","beforeOperation","operation","skipCloudStorage","sanitizedDocPrefix","adminThumbnail","crop","uploadCollections","clientHandler","serverHandler","access","serverHandlerPath","output","field","unique","metadataField","migrateFolder","payloadStorageImagekit","payloadStorageImageKit"],"mappings":"AAeA,OAAOA,YAAYC,MAAM,QAAQ,mBAAkB;AACnD,SAASC,kBAAkB,QAAQ,mCAAkC;AACrE,SACEC,oBAAoB,EACpBC,0BAA0B,EAC1BC,kBAAkB,EAClBC,iBAAiB,QACZ,6CAA4C;AACnD,SAASC,UAAU,QAAQ,UAAS;AACpC,OAAOC,UAAU,YAAW;AAC5B,SAASC,QAAQ,QAAQ,UAAS;AAClC,SACEC,mBAAmB,EACnBC,aAAa,EACbC,8BAA8B,QACzB,mBAAkB;AACzB,SAASC,gBAAgB,QAAQ,iBAAgB;AAIjD,SAASC,sBAAsB,EAAEC,wBAAwB,QAAQ,qBAAoB;AACrF,SACEC,kCAAkC,EAClCC,8BAA8B,QACzB,gCAA+B;AACtC,SAASC,+BAA+B,QAAQ,iDAAgD;AAChG,SACEC,oBAAoB,EACpBC,2BAA2B,EAC3BC,aAAa,EACbC,eAAe,QACV,4BAA2B;AAClC,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,uBAAsB;AAiBjF,MAAMC,gCAAgC;AACtC;;;;;;;CAOC,GACD,MAAMC,+BAA+B;AAErC,MAAMC,iCACJ;AAEF,MAAMC,4BAA4B,CAACC,QACjCA,UAAU,QAAQ,OAAOA,UAAU,YAAYA,OAAOC,YAAY;AAEpE,MAAMC,wBAAwB;IAAC;IAAmB;IAAiB;CAAW;AAE9E,MAAMC,wBAAwB,CAACC;IAC7B,MAAMC,SAASD,WAAWC,MAAM;IAEhC,IAAI,CAACA,UAAUA,WAAW,MAAM;QAC9B,OAAOC,QAAQD;IACjB;IAEA,iFAAiF;IACjF,IAAIA,OAAOE,wBAAwB,EAAE;QACnC,OAAO;IACT;IAEA,MAAMC,mBAAmBH,OAAOI,SAAS;IAEzC,OACE,CAACD,kBAAkBE,UACnBF,iBAAiBG,IAAI,CAAC,CAACC,WAAaA,SAASC,QAAQ,CAAC,QAAQ/B,cAAc8B,cAC5EV,sBAAsBS,IAAI,CAAC,CAACC,WAAa5B,iBAAiB4B,UAAUJ;AAExE;AAEA;;;;;CAKC,GACD,MAAMM,oBAAoB,CAACC,KAAcC;IACvC,MAAMC,SAAUF,KAA4DG,UAAUC;IAEtF,OAAO,OAAOF,WAAW,YAAYA,SAASD;AAChD;AAwCA,MAAMI,kBAAkB,CAACC;IACvB,MAAMC,aAAaD,OAAOE,IAAI,GAAGC,OAAO,CAAC,cAAc;IAEvD,IAAI,CAACF,YAAY;QACf,MAAM,IAAIG,MAAM;IAClB;IAEA,OAAO,CAAC,CAAC,EAAEH,YAAY;AACzB;AAEA,MAAMI,sBAAsB,CAACC,YAAoBC,iBAC/CjD,KAAKkD,KAAK,CAACC,IAAI,CAACH,YAAYC;AAE9B,MAAMG,qBAAqB,OACzBb,UACAc;IAEA,MAAMC,aAAatD,KAAKkD,KAAK,CAACK,OAAO,CAACF;IACtC,MAAMG,OAAOxD,KAAKkD,KAAK,CAACO,QAAQ,CAACJ;IAEjC,MAAMK,QAAQ;IAEd,IAAK,IAAIC,OAAO,IAAKA,QAAQD,MAAO;QAClC,MAAME,SAAS,MAAMrB,SAASqB,MAAM,CAACC,IAAI,CAAC;YACxCC,MAAM;YACNJ;YACA1D,MAAMsD,eAAe,MAAM,MAAM,GAAGA,WAAW,CAAC,CAAC;YACjDK;QACF;QAEA,MAAMI,QAAQH,OAAOI,IAAI,CACvB,CAACC,QAAU,YAAYA,SAASA,MAAMZ,QAAQ,KAAKA,YAAYY,MAAMT,IAAI,KAAKA;QAGhF,IAAIO,SAAS,YAAYA,OAAO;YAC9B,OAAOA,MAAMG,MAAM;QACrB;QAEA,IAAIN,OAAO7B,MAAM,GAAG2B,OAAO;YACzB;QACF;IACF;IAEA,OAAOS;AACT;AAEA,MAAMC,WAAW,CAAC/C,QAChB,CAAC,CAACA,SAAS,OAAOA,UAAU;AAE9B,MAAMgD,uBAAuB,CAACjC;IAC5B,MAAMkC,YAAalC,KAAuCG,UAAUgC;IAEpE,OAAO,OAAOD,cAAc,YAAYA,UAAU1B,IAAI,GAAGb,MAAM,GAAG,IAAIuC,YAAYH;AACpF;AAEA,MAAMK,uBAAuB,CAACpC,MAA0B,CAAC,CAACiC,qBAAqBjC;AAE/E,MAAMqC,+BAA+B,OAAO,EAC1ChD,UAAU,EACViD,QAAQ,EACRC,MAAM,EACNC,GAAG,EAMJ;IACC,MAAMC,cAAuB;QAC3B;YACEH,UAAU;gBACRI,QAAQJ;YACV;QACF;KACD;IAED,IAAI,OAAOC,WAAW,UAAU;QAC9BE,YAAYE,IAAI,CAAC;YACfJ,QAAQ;gBACNG,QAAQH;YACV;QACF;IACF;IAEA,OAAOC,IAAII,OAAO,CAACC,EAAE,CAACC,OAAO,CAAC;QAC5BzD;QACAmD;QACAO,OAAO;YACLC,KAAKP;QACP;IACF;AACF;AAEA,MAAMQ,kCAAkC,CACtCC,MACAC,UACAC,oBAAyC7E,oBAAoB,EAC7D6B;IAEA8C,KAAK/C,QAAQ,GAAG;QACd2B,QAAQqB,SAASrB,MAAM;QACvB1B;QACAiD,cAAcF,SAASE,YAAY;QACnClB,KAAKgB,SAAShB,GAAG;IACnB;IAEA,sFAAsF;IACtFe,KAAKI,YAAY,GAAGF,kBAAkBF;IAEtC,OAAOA;AACT;AAEA,MAAMK,kBAAkB,CAAC,EACvBC,QAAQ,EACRC,MAAM,EACNC,aAAa,EACbC,YAAY,EACZ/C,UAAU,EACVgD,kBAAkB,EAClBC,WAAW,EACXC,kBAAkB,EAUnB;IACC,MAAMC,oBAAoB,OAAO,EAC/BC,QAAQ,EACRC,OAAO,EACPpE,QAAQ,EACRqE,KAAK,EAMN;QACC,MAAMC,cAAcrG,oBAAoB;YAAEkG;YAAUI,aAAaF,SAAS;QAAK;QAE/E,IAAIC,YAAYzC,IAAI,KAAK,WAAW;YAClC,OAAO,IAAI2C,SAAS,MAAM;gBACxBC,SAAS,IAAIC,QAAQJ,YAAYG,OAAO;gBACxCE,QAAQL,YAAYK,MAAM;YAC5B;QACF;QAEA,MAAMC,kBACJN,YAAYzC,IAAI,KAAK,YACjB,CAAC,MAAM,EAAEyC,YAAYO,UAAU,CAAC,CAAC,EAAEP,YAAYQ,QAAQ,EAAE,GACzD5C;QACN,gFAAgF;QAChF,6EAA6E;QAC7E,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM6C,WAAW,MAAMC,MAAMZ,SAAS;YACpCa,OAAO;YACP,GAAIL,kBAAkB;gBAAEH,SAAS;oBAAES,OAAON;gBAAgB;YAAE,IAAI,CAAC,CAAC;YAClEO,QAAQ,IAAIC,kBAAkBD,MAAM;QACtC;QAEA,IAAI,CAACJ,SAASM,EAAE,IAAIN,SAASJ,MAAM,KAAKL,YAAYK,MAAM,EAAE;YAC1D,KAAKI,SAASO,IAAI,EAAEC,SAASC,MAAM,IAAMtD;YACzC,MAAM,IAAIrB,MACR,CAAC,gEAAgE,EAAEkE,SAASJ,MAAM,CAAC,EAAE,CAAC;QAE1F;QAEA,MAAMc,iBAAiBV,SAASN,OAAO,CAACiB,GAAG,CAAC;QAC5C,MAAMC,iBAAiBrB,YAAYG,OAAO,CAAC,iBAAiB;QAC5D,MAAMmB,gBAAgBb,SAASN,OAAO,CAACiB,GAAG,CAAC;QAC3C,MAAMG,gBACJvB,YAAYzC,IAAI,KAAK,YAAYyC,YAAYG,OAAO,CAAC,gBAAgB,GAAGvC;QAE1E,IACE,AAACuD,mBAAmB,QAAQA,mBAAmBE,kBAC9CE,iBAAiBD,kBAAkBC,eACpC;YACA,KAAKd,SAASO,IAAI,EAAEC,SAASC,MAAM,IAAMtD;YACzC,MAAM,IAAIrB,MAAM;QAClB;QAEA,MAAM4D,UAAU,IAAIC,QAAQJ,YAAYG,OAAO;QAC/CA,QAAQqB,GAAG,CAAC,gBAAgB9F;QAC5B,IAAI9B,cAAc8B,WAAW;YAC3ByE,QAAQqB,GAAG,CAAC,2BAA2B3H;QACzC;QAEA,OAAO,IAAIqG,SAASO,SAASO,IAAI,EAAE;YACjCb;YACAE,QAAQI,SAASJ,MAAM;QACzB;IACF;IAEA,OAAO,CAAC,EAAEnF,UAAU,EAAEkD,SAAS5B,oBAAoBC,YAAYvB,WAAWuG,IAAI,CAAC,EAAE;QAC/E,MAAMxF,YAAYuD,aAAakC,GAAG,CAACxG,WAAWuG,IAAI;QAElD,mFAAmF;QACnF,gFAAgF;QAChF,6EAA6E;QAC7E,MAAME,iBAAiB,CAACC,KAAaC,KACnCvC,OAAOwC,MAAM,CAACC,QAAQ,CAAC;gBACrBC,WAAWvC;gBACXwC,QAAQ;gBACRL;gBACAM,gBAAgBL,KAAK;oBAAC;wBAAEM,KAAKN;oBAAG;iBAAE,GAAGjE;gBACrC8B;YACF;QAEF,MAAMT,oBAAoB,CAACpD,MACzBD,kBAAkBC,KAAKI,aACnB5B,4BAA4BwB,KAAKX,WAAWuG,IAAI,EAAEpC,YAClDjF,qBAAqByB;QAE3B,OAAO;YACLoB,MAAM;YACNsC;YACA6C,QAAQ;gBACN;oBACEnF,MAAM;oBACNM,MAAM;oBACN8E,OAAO;wBACLC,WAAW,CAACvD,OAASd,qBAAqBc;wBAC1CwD,mBAAmB;wBACnBC,mBAAmB;oBACrB;oBACAJ,QAAQ;wBACN;4BACEnF,MAAM;4BACNM,MAAM;4BACN8E,OAAO;gCACLI,QAAQ;4BACV;wBACF;wBACA;4BACExF,MAAM;4BACNM,MAAM;4BACN8E,OAAO;gCACLK,UAAU;4BACZ;4BACAC,OAAO;wBACT;wBACA;4BACE1F,MAAM;4BACNM,MAAM;4BACN8E,OAAO;gCACLC,WAAW,CAACM,OAAOC,cACjBjH,kBAAkB;wCAAEI,UAAU6G;oCAAY,GAAG5G;gCAC/C6G,aACE;gCACFJ,UAAU;4BACZ;4BACAC,OAAO;wBACT;wBACA;4BACE1F,MAAM;4BACNM,MAAM;4BACN8E,OAAO;gCACL,mFAAmF;gCACnFC,WAAW,CAACM,OAAOC,cACjBjH,kBAAkB;wCAAEI,UAAU6G;oCAAY,GAAG5G;gCAC/C6G,aAAa,CAAC,kFAAkF,EAAErD,mBAAmB,kKAAkK,CAAC;gCACxRiD,UAAU;4BACZ;4BACAK,OAAO;gCACL,mFAAmF;gCACnFC,WAAW;oCACT,CAAC,EAAEjE,IAAI,EAAE8D,WAAW,EAAE;wCACpB,IAAI,CAACjH,kBAAkB;4CAAEI,UAAU6G;wCAAY,GAAG5G,YAAY;4CAC5D,OAAO2B;wCACT;wCAEA,MAAMO,WAAYY,MAA4CZ;wCAE9D,IAAI,CAACA,UAAU;4CACb,OAAOP;wCACT;wCAEA,MAAMqF,SAAUlE,QAAQ,CAAC;wCACzB,MAAMmE,iBAAiBzJ,KAAKkD,KAAK,CAACC,IAAI,CACpCqG,OAAO7E,MAAM,IAAIA,QACjB6E,OAAOE,UAAU,IAAI;wCAEvB,MAAMC,kBAAkBhK,qBAAqB;4CAC3CiK,kBAAkBjF;4CAClBkF,WAAWJ;4CACX/E;wCACF,GAAGiF,eAAe;wCAElB,OAAOzB,eAAe,CAAC,CAAC,EAAEyB,iBAAiB;oCAC7C;iCACD;4BACH;4BACAT,OAAO;4BACPY,SAAS;wBACX;wBACA;4BACEtG,MAAM;4BACNM,MAAM;4BACN8E,OAAO;gCACLI,QAAQ;4BACV;wBACF;qBACD;oBACDe,eAAe;oBACfb,OAAO;gBACT;aACD;YACDc,aAAa,CAAC,EAAEtF,QAAQ,EAAEC,QAAQ8E,iBAAiB,EAAE,EAAE,GACrD5D,OAAOwC,MAAM,CAACC,QAAQ,CAAC;oBACrBH,KAAK,CAAC,CAAC,EAAExI,qBAAqB;wBAC5BiK,kBAAkBjF;wBAClBkF,WAAWJ;wBACX/E;oBACF,GAAGiF,eAAe,EAAE;oBACpB1D;gBACF;YACFgE,cAAc,OAAO,EAAE7H,GAAG,EAAEuH,eAAe,EAAE;gBAC3C,MAAMO,eAAe,AAAC9H,IAAuCG,QAAQ,EAAE2B;gBACvE,MAAMA,SACJgG,gBAAiB,MAAM9G,mBAAmByC,QAAQ,CAAC,CAAC,EAAE8D,gBAAgB9G,OAAO,CAAC,QAAQ,KAAK;gBAE7F,IAAI,CAACqB,QAAQ;oBACX;gBACF;gBAEA,MAAM2B,OAAOsE,KAAK,CAACC,MAAM,CAAClG;YAC5B;YACAmG,cAAc,OAAO,EAAEC,mBAAmB,EAAEhF,IAAI,EAAEiF,IAAI,EAAEZ,eAAe,EAAE;gBACvE,IAAIW,qBAAqB;oBACvB,MAAM/E,WAAW,MAAMW,mBAAmB;wBACxCjD,gBAAgBxB,WAAWuG,IAAI;wBAC/BwC,SAASF;oBACX;oBAEA,OAAOjF,gCAAgCC,MAAMC,UAAUC,mBAAmBhD;gBAC5E;gBAEA,4FAA4F;gBAC5F,wFAAwF;gBACxF,MAAMiI,eAAeF,KAAKG,YAAY,GAClC,MAAM3K,WAAWwK,KAAKG,YAAY,EAAE;oBAAE5G,MAAMyG,KAAKtI,QAAQ;gBAAC,KAC1DsI,KAAKI,MAAM;gBACf,MAAMC,aAAa,MAAMnL,OAAOgL,cAAcF,KAAK7F,QAAQ,EAAE;oBAAEZ,MAAMyG,KAAKtI,QAAQ;gBAAC;gBACnF,MAAM4I,eAAe7K,KAAKkD,KAAK,CAACK,OAAO,CAAC,CAAC,CAAC,EAAEoG,gBAAgB9G,OAAO,CAAC,QAAQ,KAAK;gBACjF,MAAMiI,iBAAiB9K,KAAKkD,KAAK,CAACO,QAAQ,CAACkG;gBAE3C,MAAMpE,WAAW,MAAMM,OAAOsE,KAAK,CAACzI,MAAM,CAAC;oBACzC6I,MAAMK;oBACNG,UAAUD;oBACVpI,QAAQmI;oBACRG,mBAAmB;oBACnB,GAAIxI,YAAY;wBAAEyI,eAAe;oBAAK,IAAI,CAAC,CAAC;gBAC9C;gBAEA3F,KAAK/C,QAAQ,GAAG;oBACd2B,QAAQqB,SAASrB,MAAM;oBACvB1B;oBACAiD,cAAcF,SAASE,YAAY;oBACnClB,KAAKgB,SAAShB,GAAG;gBACnB;gBAEA,0EAA0E;gBAC1E,iFAAiF;gBACjF,sEAAsE;gBACtEe,KAAKI,YAAY,GAAGF,kBAAkB;oBACpC,GAAGF,IAAI;oBACPZ,UAAU,AAACY,KAA+BZ,QAAQ,IAAIoG;gBACxD;gBAEA,OAAOxF;YACT;YACA4F,6BAA6B;YAC7BC,eAAe,OAAOvG,KAAKwG;gBACzB,MAAMC,aAAa,IAAIC,IAAI1G,IAAIL,GAAG,IAAI;gBACtC,MAAM6D,KAAKiD,WAAWE,YAAY,CAAC5D,GAAG,CAAC;gBACvC,MAAM6D,yBAAyB,yBAAyBJ,KAAKK,MAAM;gBAEnE,IAAID,wBAAwB;oBAC1B,MAAMlB,sBAAsBc,KAAKK,MAAM,CAACnB,mBAAmB;oBAE3D,IAAI,CAAC/J,yBAAyB+J,sBAAsB;wBAClD,MAAM,IAAIrK,SAAS,2CAA2C;oBAChE;oBAEA,MAAMyL,eAAe,MAAMxF,mBAAmB;wBAC5CjD,gBAAgBxB,WAAWuG,IAAI;wBAC/BwC,SAASF;oBACX;oBACA,MAAMqB,mBAAmBlL,+BAA+B;wBACtDmJ,kBAAkBjF;wBAClB6F,SAASF;oBACX;oBACA,MAAMsB,kBAAkBpJ,YACpB0F,eAAe,CAAC,CAAC,EAAEyD,kBAAkB,EAAEzK,gCACvC2E,OAAOwC,MAAM,CAACC,QAAQ,CAAC;wBACrBH,KAAK,CAAC,CAAC,EAAEwD,kBAAkB;wBAC3BlD,gBAAgB;4BAAC;gCAAEC,KAAKxH;4BAA6B;yBAAE;wBACvD+E;oBACF;oBAEJ,OAAOE,kBAAkB;wBACvBC,UAAUsF,aAAaG,IAAI;wBAC3BxF,SAASuF;wBACT3J,UAAUyJ,aAAazJ,QAAQ;wBAC/BqE,OAAO1B,IAAI8B,OAAO,CAACiB,GAAG,CAAC;oBACzB;gBACF;gBAEA,MAAMvF,MACJgJ,KAAKhJ,GAAG,IACP,MAAMqC,6BAA6B;oBAClChD,YAAY2J,KAAKK,MAAM,CAAChK,UAAU;oBAClCiD,UAAU0G,KAAKK,MAAM,CAAC/G,QAAQ;oBAC9BC,QAAQyG,KAAKK,MAAM,CAAC9G,MAAM;oBAC1BC;gBACF;gBAEF,MAAM+E,kBAAkB,MAAM9J,mBAAmB;oBAC/C4B;oBACAmI,kBAAkBjF;oBAClBvC,KAAKA,OAAO+B;oBACZO,UAAU0G,KAAKK,MAAM,CAAC/G,QAAQ;oBAC9BoH,kBAAkBV,KAAKK,MAAM,CAAC9G,MAAM;oBACpCC;gBACF;gBACA,MAAMmH,eAAe,CAAC,CAAC,EAAEpC,gBAAgB9G,OAAO,CAAC,QAAQ,KAAK;gBAC9D,MAAMZ,WAAYG,KAAsCH;gBAExD,6EAA6E;gBAC7E,yEAAyE;gBACzE,IAAI,OAAOA,aAAa,YAAY9B,cAAc8B,WAAW;oBAC3D,MAAM+J,WAAY5J,KAAsC4J;oBAExD,IAAI,OAAOA,aAAa,YAAY,CAACC,OAAOC,aAAa,CAACF,aAAaA,WAAW,GAAG;wBACnF,MAAM,IAAI/L,SAAS,gDAAgD;oBACrE;oBAEA,MAAMoG,UAAUlE,kBAAkBC,KAAKI,aACnC0F,eAAe6D,cAAc7K,gCAC7B2E,OAAOwC,MAAM,CAACC,QAAQ,CAAC;wBACrBH,KAAK4D;wBACLtD,gBAAgB;4BAAC;gCAAEC,KAAKxH;4BAA6B;yBAAE;wBACvD+E;oBACF;oBAEJ,OAAOE,kBAAkB;wBACvBC,UAAU4F;wBACV3F;wBACApE;wBACAqE,OAAO1B,IAAI8B,OAAO,CAACiB,GAAG,CAAC;oBACzB;gBACF;gBAEA,2EAA2E;gBAC3E,+EAA+E;gBAC/E,IAAIxF,kBAAkBC,KAAKI,YAAY;oBACrC,IAAI2J,UAAUJ;oBAEd,6EAA6E;oBAC7E,yEAAyE;oBACzE,IAAI3D,MAAMtH,gBAAgBmB,WAAW;wBACnCkK,UAAUnL,kBAAkBmL;oBAC9B,OAAO,IAAI/D,MAAMvH,cAAcoB,WAAW;wBACxCkK,UAAUpL,wBAAwBoL;oBACpC;oBAEA,OAAO1F,SAAS2F,QAAQ,CAAClE,eAAeiE,SAAS/D,KAAK;gBACxD;gBAEA,MAAMiE,cAAcxG,OAAOwC,MAAM,CAACC,QAAQ,CAAC;oBACzCH,KACE9D,qBAAqBjC,QACrB2J;oBACFtD,gBAAgBL,KAAK;wBAAC;4BAAEM,KAAKN;wBAAG;qBAAE,GAAGjE;oBACrC8B;gBACF;gBAEA,OAAOQ,SAAS2F,QAAQ,CAACC,aAAa;YACxC;QACF;IACF;AACF;AAEA,MAAMC,4BAA4B,CAChCC,aACAC,SACAzG,cACA/C,YACAyJ;IAEA,MAAMC,oBAAwE,CAAC;IAE/E,KAAK,MAAMzJ,kBAAkB0J,OAAOC,IAAI,CAACL,aAAc;QACrDG,iBAAiB,CAACzJ,eAAe,GAAG;YAClCuJ;YACAK,qBAAqB;YACrB,oFAAoF;YACpFJ,6BAA6B1G,aAAakC,GAAG,CAAChF,kBAC1CkB,YACAsI;YACJ9H,QAAQ5B,oBAAoBC,YAAYC;QAC1C;IACF;IAEA,OAAOyJ;AACT;AAEA,OAAO,MAAMI,kBACX,CAACC,gBACD,CAACC;QACC,MAAM,EACJC,kBAAkB,EAClBnH,aAAa,EACbyG,WAAW,EACXE,2BAA2B,EAC3BS,OAAO,EACPC,UAAU,EACVzK,MAAM,EACN0K,UAAU,EACVC,SAAS,EACTrH,oBAAoBsH,wBAAwB,EAC5CrH,WAAW,EACZ,GAAG8G;QAEJ,IAAI,CAACK,YAAYxK,QAAQ;YACvB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAACuK,WAAWzK,QAAQ;YACtB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAACmD,aAAarD,QAAQ;YACxB,MAAM,IAAIE,MAAM;QAClB;QAEA,IAAI,CAACyJ,eAAeI,OAAOC,IAAI,CAACL,aAAaxK,MAAM,KAAK,GAAG;YACzD,MAAM,IAAIe,MAAM;QAClB;QAEA,MAAMiD,eAAe,IAAIwH,IACvBZ,OAAOa,OAAO,CAACjB,aACZkB,MAAM,CAAC,CAAC,GAAGpM,MAAM,GAAKD,0BAA0BC,QAChDqM,GAAG,CAAC,CAAC,CAAC1F,KAAK,GAAKA;QAErB,MAAM2F,kBAAkB,IAAIJ,IAAIZ,OAAOC,IAAI,CAACL;QAE5C,IAAIE,+BAA+B1G,aAAa8F,IAAI,GAAG,GAAG;YACxD,MAAM,IAAI/I,MACR;QAEJ;QAEA,IAAI2J,6BAA6B;YAC/B,MAAMmB,qBAAqB,AAACZ,CAAAA,OAAOT,WAAW,IAAI,EAAE,AAAD,EAChDkB,MAAM,CACL,CAAChM,aACCkM,gBAAgB1F,GAAG,CAACxG,WAAWuG,IAAI,KAAKxG,sBAAsBC,aAEjEiM,GAAG,CAAC,CAACjM,aAAeA,WAAWuG,IAAI;YAEtC,IAAI4F,mBAAmB7L,MAAM,GAAG,GAAG;gBACjC,MAAM,IAAIe,MACR,CAAC,kHAAkH,EAAE8K,mBAAmBzK,IAAI,CAAC,MAAM,sLAAsL,CAAC;YAE9U;QACF;QAEA,MAAM6C,qBACJ,OAAOsH,6BAA6B,YAAYA,2BAA2B,IACvEA,2BACArM;QACN,MAAM2E,WAAWoH,OAAOa,MAAM,EAAEC,OAAO;QAEvC,MAAM9K,aAAaP,gBAAgBC;QAEnC,MAAMqL,iBAAiB,IAAIvO,SAAS;YAAE4N;QAAW;QACjD,MAAMY,qBAAqBrB,OAAOsB,WAAW,CAC3C,AAACjB,CAAAA,OAAOT,WAAW,IAAI,EAAE,AAAD,EACrBkB,MAAM,CAAC,CAAChM,aAAekM,gBAAgB1F,GAAG,CAACxG,WAAWuG,IAAI,GAC1D0F,GAAG,CAAC,CAACjM,aAAe;gBACnBA,WAAWuG,IAAI;gBACf;oBACEvG;oBACAe,WAAWuD,aAAakC,GAAG,CAACxG,WAAWuG,IAAI;oBAC3CrD,QAAQ5B,oBAAoBC,YAAYvB,WAAWuG,IAAI;gBACzD;aACD;QAEL,MAAM9B,qBAAqB1F,mCAAmC;YAC5DqF,QAAQkI;YACRxB,aAAayB;QACf;QACA,MAAMxB,UAAU7G,gBAAgB;YAC9BC;YACAC,QAAQkI;YACRjI;YACAC;YACA/C;YACAgD;YACAC;YACAC;QACF;QAEA,MAAMgI,yBAAiC;YACrC,GAAGlB,MAAM;YACTT,aAAa,AAACS,CAAAA,OAAOT,WAAW,IAAI,EAAE,AAAD,EAAGmB,GAAG,CAAC,CAACjM;gBAC3C,IAAI,CAACkM,gBAAgB1F,GAAG,CAACxG,WAAWuG,IAAI,GAAG;oBACzC,OAAOvG;gBACT;gBAEA,MAAM0M,sBAAsBpI,aAAakC,GAAG,CAACxG,WAAWuG,IAAI;gBAC5D,MAAMxC,oBAAoB,CAACpD,MACzBD,kBAAkBC,KAAK+L,uBACnBvN,4BAA4BwB,KAAKX,WAAWuG,IAAI,EAAEpC,YAClDjF,qBAAqByB;gBAE3B,MAAMgM,oBAAoB7B,WAAW,CAAC9K,WAAWuG,IAAI,CAAC;gBACtD,MAAMqG,uBACJD,sBAAsB,QACtB,OAAOA,sBAAsB,YAC7B,OAAOA,kBAAkBjB,UAAU,KAAK,YACpCiB,kBAAkBjB,UAAU,GAC5BhJ;gBAEN,4EAA4E;gBAC5E,qEAAqE;gBACrE,oCAAoC;gBACpC,MAAMmK,sBAAsB7M,WAAWmH,KAAK,EAAES;gBAC9C,MAAMkF,YAAYJ,sBACd;oBACE,GAAI1M,WAAWmH,KAAK,IAAI,CAAC,CAAC;oBAC1BS,aACE,OAAOiF,wBAAwB,YAAYA,oBAAoB1L,IAAI,GAAGb,MAAM,GAAG,IAC3E,GAAGuM,oBAAoB,CAAC,EAAEnN,gCAAgC,GACzDmN,uBAAuBnN;gBAChC,IACAM,WAAWmH,KAAK;gBAEpB,OAAO;oBACL,GAAGnH,UAAU;oBACbmH,OAAO2F;oBACPjF,OAAO;wBACL,GAAI7H,WAAW6H,KAAK,IAAI,CAAC,CAAC;wBAC1BkF,cAAc;+BACR/M,WAAW6H,KAAK,EAAEkF,gBAAgB,EAAE;4BACxC,OAAO,EAAElJ,IAAI,EAAEV,GAAG,EAAE;gCAClB,IAAI,CAACR,SAASkB,SAAS,CAACV,IAAI2F,IAAI,EAAED,qBAAqB;oCACrD,OAAOhF;gCACT;gCAEA,MAAMkF,UAAU5F,IAAI2F,IAAI,CAACD,mBAAmB;gCAC5C,MAAMmE,kBAAkB7J,IAAI2F,IAAI,CAACmE,QAAQ,CAACC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE/L,OAAOgM;gCACnE,IACE,CAACrO,yBAAyBiK,YAC1BA,QAAQ9F,QAAQ,KAAKY,KAAKZ,QAAQ,IAClC8F,QAAQ9F,QAAQ,KAAKE,IAAI2F,IAAI,CAAC/G,IAAI,IAClCgH,QAAQqE,gBAAgB,KAAKJ,mBAC7B,qEAAqE;gCACrE,gEAAgE;gCAChEjE,QAAQsE,YAAY,KAAKxJ,KAAK0G,QAAQ,EACtC;oCACA,MAAM,IAAI/L,SAAS,iEAAiE;gCACtF;gCAEA,MAAMsF,WAAW,MAAMW,mBAAmB;oCACxCjD,gBAAgBxB,WAAWuG,IAAI;oCAC/BwC;gCACF;gCACA,+EAA+E;gCAC/E,2DAA2D;gCAC3D,MAAMuE,WAAW,MAAMnK,IAAII,OAAO,CAACC,EAAE,CAACC,OAAO,CAAC;oCAC5CzD,YAAYA,WAAWuG,IAAI;oCAC3BpD;oCACAO,OAAO;wCACL,mBAAmB;4CACjBL,QAAQS,SAASrB,MAAM;wCACzB;oCACF;gCACF;gCACA,IAAI6K,UAAU;oCACZ,MAAM,IAAI9O,SAAS,8DAA8D;gCACnF;gCAEAqF,KAAKZ,QAAQ,GAAGa,SAAS/B,IAAI;gCAC7B8B,KAAK0G,QAAQ,GAAGzG,SAASsG,IAAI;gCAC7BvG,KAAKrD,QAAQ,GAAGsD,SAAStD,QAAQ;gCAEjC,OAAOoD,gCACLC,MACAC,UACAC,mBACA2I;4BAEJ;yBACD;wBACDa,iBAAiB;+BACXvN,WAAW6H,KAAK,EAAE0F,mBAAmB,EAAE;4BAC3C,CAAC,EAAE5D,IAAI,EAAE6D,SAAS,EAAErK,GAAG,EAAE;gCACvB,IACE,AAACqK,cAAc,YAAYA,cAAc,YACzCrK,IAAI4F,OAAO,EAAE0E,oBACb,CAACtK,IAAI2F,IAAI,IACT3F,IAAI2F,IAAI,CAACD,mBAAmB,IAC5B,CAAE,CAAA,UAAUc,IAAG,KACf,CAAChH,SAASgH,KAAK9F,IAAI,KACnB,OAAO8F,KAAK9F,IAAI,CAACX,MAAM,KAAK,UAC5B;oCACA,OAAOyG;gCACT;gCAEA,yEAAyE;gCACzE,wEAAwE;gCACxEA,KAAK9F,IAAI,CAACX,MAAM,GAAG/E,2BAA2B;oCAC5CgK,kBAAkB7G,oBAAoBC,YAAYvB,WAAWuG,IAAI;oCACjE6B,WAAWuB,KAAK9F,IAAI,CAACX,MAAM;oCAC3BD,UAAUE,IAAI2F,IAAI,CAAC/G,IAAI;gCACzB,GAAG2L,kBAAkB;gCACrB,OAAO/D;4BACT;yBACD;oBACH;oBACA1J,QAAQ;wBACN,mEAAmE;wBACnE,4DAA4D;wBAC5D,gEAAgE;wBAChE,wBAAwB;wBACxByL,YAAY;wBACZ,GAAI,OAAOA,eAAe,YAAY;4BAAEA;wBAAW,IAAI,CAAC,CAAC;wBACzD,GAAI,OAAOkB,yBAAyB,YAChC;4BAAElB,YAAYkB;wBAAqB,IACnC,CAAC,CAAC;wBACN,GAAI,OAAO5M,WAAWC,MAAM,KAAK,WAAWD,WAAWC,MAAM,GAAG,CAAC,CAAC;wBAClE0N,gBAAgB,CAAC,EAAEhN,GAAG,EAAE,GAAKoD,kBAAkBpD;wBAC/CiN,MAAM;oBACR;gBACF;YACF;QACF;QAEA,MAAMC,oBAAoB3C,OAAOsB,WAAW,CAC1CtB,OAAOC,IAAI,CAACL,aAAamB,GAAG,CAAC,CAACzK,iBAAmB;gBAC/CA;gBACA;oBACET,WAAWuD,aAAakC,GAAG,CAAChF;oBAC5B0B,QAAQ5B,oBAAoBC,YAAYC;gBAC1C;aACD;QAKHnD,kBAAkB;YAChByP,eAAe;YACfhD,aAAa+C;YACbtC,QAAQkB;YACRhB,SAASA,YAAY,SAASvL,QAAQmE;YACtC0J,eAAe9O,gCAAgC;gBAC7C+O,QAAQ,OAAO3J,kBAAkB,WAAWA,cAAc2J,MAAM,GAAGtL;gBACnEoI,aAAa+C;gBACblC;gBACAC;gBACAnH;YACF;YACAwJ,mBAAmBpP;QACrB;QAEA,MAAMqP,SAASjQ,mBAAmB;YAChCuN;YACAV,aAAaD,0BACXC,aACAC,SACAzG,cACA/C,YACAyJ;YAEFS;QACF,GAAGgB;QAEH,8FAA8F;QAC9F,yDAAyD;QACzDyB,OAAOpD,WAAW,GAAG,AAACoD,CAAAA,OAAOpD,WAAW,IAAI,EAAE,AAAD,EAAGmB,GAAG,CAAC,CAACjM;YACnD,IAAI,CAACkM,gBAAgB1F,GAAG,CAACxG,WAAWuG,IAAI,GAAG;gBACzC,OAAOvG;YACT;YAEA,OAAO;gBACL,GAAGA,UAAU;gBACbkH,QAAQlH,WAAWkH,MAAM,CAAC+E,GAAG,CAAC,CAACkC;oBAC7B,IAAI,UAAUA,SAASA,MAAMpM,IAAI,KAAK,cAAc;wBAClD,OAAO;4BAAE,GAAGoM,KAAK;4BAAEC,QAAQ;wBAAK;oBAClC;oBACA,IAAID,MAAM9L,IAAI,KAAK,WAAW,UAAU8L,SAASA,MAAMpM,IAAI,KAAK,YAAY;wBAC1E,OAAO;4BACL,GAAGoM,KAAK;4BACRjH,QAAQiH,MAAMjH,MAAM,CAAC+E,GAAG,CAAC,CAACoC,gBACxB,UAAUA,iBAAiBA,cAActM,IAAI,KAAK,WAC9C;oCAAE,GAAGsM,aAAa;oCAAED,QAAQ;gCAAK,IACjCC;wBAER;oBACF;oBACA,OAAOF;gBACT;YACF;QACF;QAEA,OAAOD;IACT,EAAC;AAEH,SAASI,aAAa,QAAQ,eAAc;AAG5C,4BAA4B;AAC5B,OAAO,MAAMC,yBAAyBlD,gBAAe;AACrD,OAAO,MAAMmD,yBAAyBnD,gBAAe"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@humaan/payload-storage-imagekit",
-  "version": "2.6.1",
+  "version": "2.7.0",
   "description": "ImageKit storage adapter plugin for Payload CMS uploads",
   "license": "MIT",
   "type": "module",
@@ -36,47 +36,46 @@
     "dist"
   ],
   "devDependencies": {
-    "@eslint/eslintrc": "^3.3.6",
-    "@payloadcms/db-mongodb": "3.87.1",
-    "@payloadcms/db-postgres": "3.87.1",
-    "@payloadcms/db-sqlite": "3.87.1",
+    "@eslint/eslintrc": "^3.3.7",
+    "@payloadcms/db-mongodb": "3.90.1",
+    "@payloadcms/db-postgres": "3.90.1",
+    "@payloadcms/db-sqlite": "3.90.1",
     "@payloadcms/eslint-config": "3.28.0",
-    "@payloadcms/next": "3.87.1",
-    "@payloadcms/plugin-cloud-storage": "3.87.1",
-    "@payloadcms/richtext-lexical": "3.87.1",
-    "@payloadcms/ui": "3.87.1",
-    "@playwright/test": "1.62.1",
+    "@payloadcms/next": "3.90.1",
+    "@payloadcms/plugin-cloud-storage": "3.90.1",
+    "@payloadcms/richtext-lexical": "3.90.1",
+    "@payloadcms/ui": "3.90.1",
     "@swc-node/register": "1.12.1",
     "@swc/cli": "0.8.1",
-    "@types/node": "26.2.0",
-    "@types/react": "19.2.18",
-    "@types/react-dom": "19.2.4",
-    "conventional-changelog": "8.1.1",
-    "conventional-changelog-conventionalcommits": "10.2.1",
+    "@types/node": "26.6.2",
+    "@types/react": "19.3.0",
+    "@types/react-dom": "19.3.0",
+    "conventional-changelog": "8.1.3",
+    "conventional-changelog-conventionalcommits": "10.4.0",
     "copyfiles": "2.4.1",
     "cross-env": "10.1.0",
-    "eslint": "^9.39.4",
-    "eslint-config-next": "16.3.0",
-    "graphql": "^17.0.2",
+    "eslint": "^9.39.5",
+    "eslint-config-next": "16.3.5",
+    "graphql": "^16.14.2",
     "mongodb-memory-server": "11.2.0",
-    "next": "16.3.0",
-    "open": "^11.0.0",
-    "payload": "3.87.1",
-    "prettier": "^3.9.6",
-    "qs-esm": "8.0.1",
-    "react": "19.2.8",
-    "react-dom": "19.2.8",
+    "next": "16.3.5",
+    "open": "^11.0.4",
+    "payload": "3.90.1",
+    "prettier": "^3.9.8",
+    "qs-esm": "8.0.2",
+    "react": "19.3.0",
+    "react-dom": "19.3.0",
     "rimraf": "6.1.3",
-    "sharp": "0.35.3",
+    "sharp": "0.35.4",
     "sort-package-json": "^4.0.0",
     "typescript": "6.0.3",
-    "vite": "8.2.1",
+    "vite": "8.3.0",
     "vite-tsconfig-paths": "6.1.1",
-    "vitest": "4.1.10"
+    "vitest": "4.1.11"
   },
   "peerDependencies": {
-    "@payloadcms/plugin-cloud-storage": ">=3.85.1 <4.0.0",
-    "payload": ">=3.80.0 <4.0.0"
+    "@payloadcms/plugin-cloud-storage": ">=3.90.1 <4.0.0",
+    "payload": ">=3.90.1 <4.0.0"
   },
   "engines": {
     "node": ">=24.15.0 <25"
@@ -86,7 +85,7 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@imagekit/nodejs": "^7.10.0"
+    "@imagekit/nodejs": "^7.12.1"
   },
   "scripts": {
     "build": "pnpm clean && pnpm copyfiles && pnpm build:types && pnpm build:swc",
@@ -104,8 +103,8 @@
     "lint": "eslint",
     "lint:fix": "eslint ./src --fix",
     "release:bump": "node scripts/bump-release.mjs",
-    "test": "pnpm test:int && pnpm test:e2e",
-    "test:e2e": "playwright test",
+    "test": "pnpm test:int",
+    "test:imagekit": "vitest --run dev/imagekit.integration.spec.ts",
     "test:int": "vitest"
   }
 }