@jhb.software/payload-alt-text-plugin 0.7.0 → 0.8.0

package/README.md

@@ -77,16 +77,17 @@ This is also the recommended escape hatch if you hit Payload's Postgres SQL-buil
 
 ### Plugin Options
 
-| Option                       | Type                                  | Required | Description                                                                                                      |
-| ---------------------------- | ------------------------------------- | -------- | ---------------------------------------------------------------------------------------------------------------- |
-| `collections`                | `(CollectionSlug \| CollectionObj)[]` | Yes      | Collections to enable alt text generation for (see [Per-collection options](#per-collection-options))            |
-| `resolver`                   | `AltTextResolver`                     | Yes      | Alt text resolver to use (e.g., `openAIResolver`)                                                                |
-| `getImageThumbnail`          | `Function`                            | Yes      | Function to get the thumbnail URL from an image document                                                         |
-| `enabled`                    | `boolean`                             | No       | Whether to enable the plugin                                                                                     |
-| `locale`                     | `string`                              | No       | Locale for alt text generation (required when localization is disabled)                                          |
-| `maxBulkGenerateConcurrency` | `number`                              | No       | Maximum concurrent API requests for bulk operations (default: 16)                                                |
-| `fieldsOverride`             | `Function`                            | No       | Override the default fields inserted by the plugin                                                               |
-| `healthCheck`                | `boolean`                             | No       | Enable alt text health tracking: REST endpoint, cache revalidation hooks, and dashboard widget (default: `true`) |
+| Option                       | Type                                  | Required | Description                                                                                                                                                                                                                                                                                                               |
+| ---------------------------- | ------------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `collections`                | `(CollectionSlug \| CollectionObj)[]` | Yes      | Collections to enable alt text generation for (see [Per-collection options](#per-collection-options))                                                                                                                                                                                                                     |
+| `resolver`                   | `AltTextResolver`                     | Yes      | Alt text resolver to use (e.g., `openAIResolver`)                                                                                                                                                                                                                                                                         |
+| `getImageThumbnail`          | `Function`                            | Yes      | Function to get the thumbnail URL from an image document                                                                                                                                                                                                                                                                  |
+| `enabled`                    | `boolean`                             | No       | Whether to enable the plugin                                                                                                                                                                                                                                                                                              |
+| `locale`                     | `string`                              | No       | Locale for alt text generation (required when localization is disabled)                                                                                                                                                                                                                                                   |
+| `maxBulkGenerateConcurrency` | `number`                              | No       | Maximum concurrent API requests for bulk operations (default: 16)                                                                                                                                                                                                                                                         |
+| `maxBulkGenerateIds`         | `number`                              | No       | Maximum number of image IDs accepted per bulk generate request; larger requests are rejected with `400`. Duplicate IDs are collapsed before the limit is applied (default: 100)                                                                                                                                           |
+| `fieldsOverride`             | `Function`                            | No       | Override the default fields inserted by the plugin                                                                                                                                                                                                                                                                        |
+| `healthCheck`                | `boolean \| Function`                 | No       | Alt text health tracking (REST endpoint, cache revalidation hooks, dashboard widget). `false` disables it; `true` enables it gated by `access`; a `({ req }) => boolean` function enables it and gates both the endpoint and the widget — use it to restrict the collection-wide report, e.g. to admins (default: `true`) |
 
 ### Per-collection options
 
@@ -204,7 +205,7 @@ export const customResolver = (): AltTextResolver => ({
 
 ## REST API Endpoints
 
-The plugin registers the following REST API endpoints under `/api/alt-text-plugin/`. All endpoints require authentication by default (configurable via the `access` option).
+The plugin registers the following REST API endpoints under `/api/alt-text-plugin/`. All endpoints require authentication by default (configurable via the `access` option). Beyond that gate, the generate endpoints enforce each collection's own access control on the documents they read and write, and the health endpoint reports only the collections the requesting user can read (and can be gated separately via the `healthCheck` function).
 
 ### `POST /api/alt-text-plugin/generate`
 

package/dist/components/AltTextField.js

@@ -4,7 +4,7 @@ import { FieldLabel, TextareaInput, useDocumentInfo, useField } from '@payloadcm
 import { matchesMimeType } from '../utilities/mimeTypes.js';
 import { GenerateAltTextButton } from './GenerateAltTextButton.js';
 export const AltTextField = (clientProps)=>{
-    const { field, path } = clientProps;
+    const { field, path, readOnly } = clientProps;
     const supportedMimeTypes = field.admin?.custom?.supportedMimeTypes;
     const trackedMimeTypes = field.admin?.custom?.trackedMimeTypes;
     const { setValue, value } = useField({
@@ -36,11 +36,12 @@ export const AltTextField = (clientProps)=>{
             /*#__PURE__*/ _jsx("div", {
                 className: "field-type__wrap",
                 children: /*#__PURE__*/ _jsx(TextareaInput, {
-                    AfterInput: /*#__PURE__*/ _jsx(GenerateAltTextButton, {
+                    AfterInput: readOnly ? undefined : /*#__PURE__*/ _jsx(GenerateAltTextButton, {
                         supportedMimeTypes: supportedMimeTypes
                     }),
                     onChange: (e)=>setValue(e.target.value),
                     path: path,
+                    readOnly: readOnly,
                     required: required,
                     value: value
                 })

package/dist/components/AltTextField.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/AltTextField.tsx"],"sourcesContent":["'use client'\n\nimport type { TextareaFieldClientProps } from 'payload'\n\nimport { FieldLabel, TextareaInput, useDocumentInfo, useField } from '@payloadcms/ui'\n\nimport { matchesMimeType } from '../utilities/mimeTypes.js'\nimport { GenerateAltTextButton } from './GenerateAltTextButton.js'\n\nexport const AltTextField = (clientProps: TextareaFieldClientProps) => {\n  const { field, path } = clientProps\n\n  const supportedMimeTypes = field.admin?.custom?.supportedMimeTypes as string[] | undefined\n  const trackedMimeTypes = field.admin?.custom?.trackedMimeTypes as string[] | undefined\n\n  const { setValue, value } = useField<string>({ path })\n  const { id } = useDocumentInfo()\n  const { value: mimeType } = useField<string>({ path: 'mimeType' })\n\n  const isTrackedMimeType =\n    !trackedMimeTypes ||\n    trackedMimeTypes.length === 0 ||\n    (!!mimeType && matchesMimeType(mimeType, trackedMimeTypes))\n\n  if (!isTrackedMimeType) {\n    return null\n  }\n\n  // the field should be optional when the document is created\n  // (since the alt text generation can only be used once the document is created and the image uploaded)\n  const required = id ? field.required : false\n\n  return (\n    <div className=\"field-type textarea\" style={{ flex: '1 1 auto' }}>\n      <FieldLabel\n        htmlFor={`field-${path}`}\n        label={field.label}\n        localized={field.localized}\n        required={required}\n      />\n\n      <div className=\"field-type__wrap\">\n        <TextareaInput\n          AfterInput={<GenerateAltTextButton supportedMimeTypes={supportedMimeTypes} />}\n          onChange={(e: React.ChangeEvent<HTMLTextAreaElement>) => setValue(e.target.value)}\n          path={path}\n          required={required}\n          value={value}\n        />\n      </div>\n    </div>\n  )\n}\n"],"names":["FieldLabel","TextareaInput","useDocumentInfo","useField","matchesMimeType","GenerateAltTextButton","AltTextField","clientProps","field","path","supportedMimeTypes","admin","custom","trackedMimeTypes","setValue","value","id","mimeType","isTrackedMimeType","length","required","div","className","style","flex","htmlFor","label","localized","AfterInput","onChange","e","target"],"mappings":"AAAA;;AAIA,SAASA,UAAU,EAAEC,aAAa,EAAEC,eAAe,EAAEC,QAAQ,QAAQ,iBAAgB;AAErF,SAASC,eAAe,QAAQ,4BAA2B;AAC3D,SAASC,qBAAqB,QAAQ,6BAA4B;AAElE,OAAO,MAAMC,eAAe,CAACC;IAC3B,MAAM,EAAEC,KAAK,EAAEC,IAAI,EAAE,GAAGF;IAExB,MAAMG,qBAAqBF,MAAMG,KAAK,EAAEC,QAAQF;IAChD,MAAMG,mBAAmBL,MAAMG,KAAK,EAAEC,QAAQC;IAE9C,MAAM,EAAEC,QAAQ,EAAEC,KAAK,EAAE,GAAGZ,SAAiB;QAAEM;IAAK;IACpD,MAAM,EAAEO,EAAE,EAAE,GAAGd;IACf,MAAM,EAAEa,OAAOE,QAAQ,EAAE,GAAGd,SAAiB;QAAEM,MAAM;IAAW;IAEhE,MAAMS,oBACJ,CAACL,oBACDA,iBAAiBM,MAAM,KAAK,KAC3B,CAAC,CAACF,YAAYb,gBAAgBa,UAAUJ;IAE3C,IAAI,CAACK,mBAAmB;QACtB,OAAO;IACT;IAEA,4DAA4D;IAC5D,uGAAuG;IACvG,MAAME,WAAWJ,KAAKR,MAAMY,QAAQ,GAAG;IAEvC,qBACE,MAACC;QAAIC,WAAU;QAAsBC,OAAO;YAAEC,MAAM;QAAW;;0BAC7D,KAACxB;gBACCyB,SAAS,CAAC,MAAM,EAAEhB,MAAM;gBACxBiB,OAAOlB,MAAMkB,KAAK;gBAClBC,WAAWnB,MAAMmB,SAAS;gBAC1BP,UAAUA;;0BAGZ,KAACC;gBAAIC,WAAU;0BACb,cAAA,KAACrB;oBACC2B,0BAAY,KAACvB;wBAAsBK,oBAAoBA;;oBACvDmB,UAAU,CAACC,IAA8ChB,SAASgB,EAAEC,MAAM,CAAChB,KAAK;oBAChFN,MAAMA;oBACNW,UAAUA;oBACVL,OAAOA;;;;;AAKjB,EAAC"}
+{"version":3,"sources":["../../src/components/AltTextField.tsx"],"sourcesContent":["'use client'\n\nimport type { TextareaFieldClientProps } from 'payload'\n\nimport { FieldLabel, TextareaInput, useDocumentInfo, useField } from '@payloadcms/ui'\n\nimport { matchesMimeType } from '../utilities/mimeTypes.js'\nimport { GenerateAltTextButton } from './GenerateAltTextButton.js'\n\nexport const AltTextField = (clientProps: TextareaFieldClientProps) => {\n  const { field, path, readOnly } = clientProps\n\n  const supportedMimeTypes = field.admin?.custom?.supportedMimeTypes as string[] | undefined\n  const trackedMimeTypes = field.admin?.custom?.trackedMimeTypes as string[] | undefined\n\n  const { setValue, value } = useField<string>({ path })\n  const { id } = useDocumentInfo()\n  const { value: mimeType } = useField<string>({ path: 'mimeType' })\n\n  const isTrackedMimeType =\n    !trackedMimeTypes ||\n    trackedMimeTypes.length === 0 ||\n    (!!mimeType && matchesMimeType(mimeType, trackedMimeTypes))\n\n  if (!isTrackedMimeType) {\n    return null\n  }\n\n  // the field should be optional when the document is created\n  // (since the alt text generation can only be used once the document is created and the image uploaded)\n  const required = id ? field.required : false\n\n  return (\n    <div className=\"field-type textarea\" style={{ flex: '1 1 auto' }}>\n      <FieldLabel\n        htmlFor={`field-${path}`}\n        label={field.label}\n        localized={field.localized}\n        required={required}\n      />\n\n      <div className=\"field-type__wrap\">\n        <TextareaInput\n          AfterInput={\n            readOnly ? undefined : <GenerateAltTextButton supportedMimeTypes={supportedMimeTypes} />\n          }\n          onChange={(e: React.ChangeEvent<HTMLTextAreaElement>) => setValue(e.target.value)}\n          path={path}\n          readOnly={readOnly}\n          required={required}\n          value={value}\n        />\n      </div>\n    </div>\n  )\n}\n"],"names":["FieldLabel","TextareaInput","useDocumentInfo","useField","matchesMimeType","GenerateAltTextButton","AltTextField","clientProps","field","path","readOnly","supportedMimeTypes","admin","custom","trackedMimeTypes","setValue","value","id","mimeType","isTrackedMimeType","length","required","div","className","style","flex","htmlFor","label","localized","AfterInput","undefined","onChange","e","target"],"mappings":"AAAA;;AAIA,SAASA,UAAU,EAAEC,aAAa,EAAEC,eAAe,EAAEC,QAAQ,QAAQ,iBAAgB;AAErF,SAASC,eAAe,QAAQ,4BAA2B;AAC3D,SAASC,qBAAqB,QAAQ,6BAA4B;AAElE,OAAO,MAAMC,eAAe,CAACC;IAC3B,MAAM,EAAEC,KAAK,EAAEC,IAAI,EAAEC,QAAQ,EAAE,GAAGH;IAElC,MAAMI,qBAAqBH,MAAMI,KAAK,EAAEC,QAAQF;IAChD,MAAMG,mBAAmBN,MAAMI,KAAK,EAAEC,QAAQC;IAE9C,MAAM,EAAEC,QAAQ,EAAEC,KAAK,EAAE,GAAGb,SAAiB;QAAEM;IAAK;IACpD,MAAM,EAAEQ,EAAE,EAAE,GAAGf;IACf,MAAM,EAAEc,OAAOE,QAAQ,EAAE,GAAGf,SAAiB;QAAEM,MAAM;IAAW;IAEhE,MAAMU,oBACJ,CAACL,oBACDA,iBAAiBM,MAAM,KAAK,KAC3B,CAAC,CAACF,YAAYd,gBAAgBc,UAAUJ;IAE3C,IAAI,CAACK,mBAAmB;QACtB,OAAO;IACT;IAEA,4DAA4D;IAC5D,uGAAuG;IACvG,MAAME,WAAWJ,KAAKT,MAAMa,QAAQ,GAAG;IAEvC,qBACE,MAACC;QAAIC,WAAU;QAAsBC,OAAO;YAAEC,MAAM;QAAW;;0BAC7D,KAACzB;gBACC0B,SAAS,CAAC,MAAM,EAAEjB,MAAM;gBACxBkB,OAAOnB,MAAMmB,KAAK;gBAClBC,WAAWpB,MAAMoB,SAAS;gBAC1BP,UAAUA;;0BAGZ,KAACC;gBAAIC,WAAU;0BACb,cAAA,KAACtB;oBACC4B,YACEnB,WAAWoB,0BAAY,KAACzB;wBAAsBM,oBAAoBA;;oBAEpEoB,UAAU,CAACC,IAA8CjB,SAASiB,EAAEC,MAAM,CAACjB,KAAK;oBAChFP,MAAMA;oBACNC,UAAUA;oBACVW,UAAUA;oBACVL,OAAOA;;;;;AAKjB,EAAC"}

package/dist/components/AltTextHealthWidget.d.ts

@@ -1,2 +1,2 @@
 import type { WidgetServerProps } from 'payload';
-export declare function AltTextHealthWidget({ req }: WidgetServerProps): Promise<import("react").JSX.Element>;
+export declare function AltTextHealthWidget({ req }: WidgetServerProps): Promise<import("react").JSX.Element | null>;

package/dist/components/AltTextHealthWidget.js

@@ -1,13 +1,17 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { Pill } from '@payloadcms/ui/elements/Pill';
 import { formatAdminURL } from 'payload/shared';
-import { getAltTextHealthWidgetData } from '../utilities/altTextHealth.js';
+import { canViewHealthReport, getAltTextHealthWidgetData } from '../utilities/altTextHealth.js';
 import { getAltTextHealthWidgetDisplayState } from '../utilities/altTextHealthWidgetDisplay.js';
 import { getCollectionLabel } from '../utilities/getCollectionLabel.js';
 import { ArrowRightIcon } from './icons/ArrowRightIcon.js';
 import { CheckIcon } from './icons/CheckIcon.js';
 import { ImageIcon } from './icons/ImageIcon.js';
 export async function AltTextHealthWidget({ req }) {
+    // Hide the widget from users the health gate denies, matching the endpoint.
+    if (!await canViewHealthReport(req)) {
+        return null;
+    }
     const t = req.t;
     const { collections, errors, isLocalized, localeCount, totalDocs } = await getAltTextHealthWidgetData(req);
     const adminRoute = req.payload.config.routes.admin;

package/dist/components/AltTextHealthWidget.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/AltTextHealthWidget.tsx"],"sourcesContent":["import type { TFunction } from '@payloadcms/translations'\nimport type { WidgetServerProps } from 'payload'\n\nimport { Pill } from '@payloadcms/ui/elements/Pill'\nimport { formatAdminURL } from 'payload/shared'\n\nimport type { PluginAltTextTranslationKeys } from '../translations/index.js'\n\nimport { getAltTextHealthWidgetData } from '../utilities/altTextHealth.js'\nimport { getAltTextHealthWidgetDisplayState } from '../utilities/altTextHealthWidgetDisplay.js'\nimport { getCollectionLabel } from '../utilities/getCollectionLabel.js'\nimport { ArrowRightIcon } from './icons/ArrowRightIcon.js'\nimport { CheckIcon } from './icons/CheckIcon.js'\nimport { ImageIcon } from './icons/ImageIcon.js'\n\nexport async function AltTextHealthWidget({ req }: WidgetServerProps) {\n  const t = req.t as TFunction<PluginAltTextTranslationKeys>\n  const { collections, errors, isLocalized, localeCount, totalDocs } =\n    await getAltTextHealthWidgetData(req)\n  const adminRoute = req.payload.config.routes.admin\n\n  return (\n    <div\n      className=\"card\"\n      style={{\n        display: 'flex',\n        flexDirection: 'column',\n        gap: '16px',\n        height: '100%',\n      }}\n    >\n      <div style={{ display: 'flex', flexDirection: 'column', gap: '4px' }}>\n        <div style={{ alignItems: 'center', display: 'flex', gap: '0.5rem' }}>\n          <div style={{ color: 'var(--theme-elevation-500)' }}>\n            <ImageIcon />\n          </div>\n          <h3 style={{ margin: 0 }}>\n            {t('@jhb.software/payload-alt-text-plugin:altTextHealthWidget')}\n          </h3>\n        </div>\n        <p style={{ color: 'var(--theme-text)', fontSize: '14px', margin: 0, opacity: 0.75 }}>\n          {t('@jhb.software/payload-alt-text-plugin:altTextHealthDescription')}\n        </p>\n      </div>\n\n      {totalDocs === 0 && errors.length === 0 && (\n        <p style={{ color: 'var(--theme-text)', margin: 0, opacity: 0.75 }}>\n          {t('@jhb.software/payload-alt-text-plugin:noImagesFound')}\n        </p>\n      )}\n\n      {errors.length > 0 && (\n        <p style={{ color: '#92400e', fontSize: '13px', margin: 0 }}>\n          {t('@jhb.software/payload-alt-text-plugin:healthCheckPartialWarning')}\n        </p>\n      )}\n\n      <div style={{ display: 'flex', flexDirection: 'column', gap: '10px' }}>\n        {collections.map((collection) => {\n          const displayState = getAltTextHealthWidgetDisplayState(collection)\n\n          return (\n            <div\n              key={collection.collection}\n              style={{\n                alignItems: 'center',\n                background: 'var(--theme-elevation-50)',\n                border: '1px solid var(--theme-border-color)',\n                borderRadius: 'var(--style-radius-m)',\n                display: 'flex',\n                gap: '12px',\n                justifyContent: 'space-between',\n                padding: '12px 16px',\n              }}\n            >\n              <div style={{ display: 'flex', flexDirection: 'column', gap: '2px', minWidth: 0 }}>\n                <a\n                  href={formatAdminURL({\n                    adminRoute,\n                    path: `/collections/${collection.collection}`,\n                  })}\n                  style={{\n                    color: 'var(--theme-text)',\n                    fontSize: '14px',\n                    fontWeight: 500,\n                    textDecoration: 'none',\n                  }}\n                >\n                  {getCollectionLabel(\n                    collection.collection,\n                    req.payload.config.collections,\n                    req.locale,\n                  )}\n                </a>\n\n                {displayState === 'unavailable' ? (\n                  <span style={{ color: '#92400e', fontSize: '13px' }}>\n                    {t('@jhb.software/payload-alt-text-plugin:collectionCheckFailed')}\n                  </span>\n                ) : (\n                  <span style={{ fontSize: '13px', opacity: 0.7 }}>\n                    <span style={{ whiteSpace: 'nowrap' }}>\n                      {t('@jhb.software/payload-alt-text-plugin:totalImageCount', {\n                        count: collection.totalDocs,\n                      })}\n                    </span>\n                    {isLocalized && (\n                      <>\n                        {' · '}\n                        <span style={{ whiteSpace: 'nowrap' }}>\n                          {t('@jhb.software/payload-alt-text-plugin:localeCount', {\n                            count: localeCount,\n                          })}\n                        </span>\n                      </>\n                    )}\n                  </span>\n                )}\n              </div>\n\n              {displayState === 'unhealthy' &&\n              collection.invalidDocIds &&\n              collection.invalidDocIds.length > 0 ? (\n                <Pill\n                  pillStyle=\"error\"\n                  size=\"small\"\n                  to={`${formatAdminURL({\n                    adminRoute,\n                    path: `/collections/${collection.collection}`,\n                  })}?where[id][in]=${collection.invalidDocIds.join(',')}`}\n                >\n                  <div style={{ alignItems: 'center', display: 'flex', gap: '0.25rem' }}>\n                    {t('@jhb.software/payload-alt-text-plugin:statusUnhealthy', {\n                      count: collection.missingDocs + collection.partialDocs,\n                    })}\n                    <ArrowRightIcon height=\"12\" width=\"12\" />\n                  </div>\n                </Pill>\n              ) : displayState === 'healthy' ? (\n                <Pill pillStyle=\"success\" size=\"small\">\n                  <div style={{ alignItems: 'center', display: 'flex', gap: '0.25rem' }}>\n                    {t('@jhb.software/payload-alt-text-plugin:statusHealthy')}\n                    <CheckIcon height=\"12\" width=\"12\" />\n                  </div>\n                </Pill>\n              ) : displayState === 'unhealthy' ? (\n                <Pill pillStyle=\"error\" size=\"small\">\n                  {t('@jhb.software/payload-alt-text-plugin:statusUnhealthy', {\n                    count: collection.missingDocs + collection.partialDocs,\n                  })}\n                </Pill>\n              ) : (\n                <Pill pillStyle=\"warning\" size=\"small\">\n                  {t('@jhb.software/payload-alt-text-plugin:collectionCheckFailed')}\n                </Pill>\n              )}\n            </div>\n          )\n        })}\n      </div>\n    </div>\n  )\n}\n"],"names":["Pill","formatAdminURL","getAltTextHealthWidgetData","getAltTextHealthWidgetDisplayState","getCollectionLabel","ArrowRightIcon","CheckIcon","ImageIcon","AltTextHealthWidget","req","t","collections","errors","isLocalized","localeCount","totalDocs","adminRoute","payload","config","routes","admin","div","className","style","display","flexDirection","gap","height","alignItems","color","h3","margin","p","fontSize","opacity","length","map","collection","displayState","background","border","borderRadius","justifyContent","padding","minWidth","a","href","path","fontWeight","textDecoration","locale","span","whiteSpace","count","invalidDocIds","pillStyle","size","to","join","missingDocs","partialDocs","width"],"mappings":";AAGA,SAASA,IAAI,QAAQ,+BAA8B;AACnD,SAASC,cAAc,QAAQ,iBAAgB;AAI/C,SAASC,0BAA0B,QAAQ,gCAA+B;AAC1E,SAASC,kCAAkC,QAAQ,6CAA4C;AAC/F,SAASC,kBAAkB,QAAQ,qCAAoC;AACvE,SAASC,cAAc,QAAQ,4BAA2B;AAC1D,SAASC,SAAS,QAAQ,uBAAsB;AAChD,SAASC,SAAS,QAAQ,uBAAsB;AAEhD,OAAO,eAAeC,oBAAoB,EAAEC,GAAG,EAAqB;IAClE,MAAMC,IAAID,IAAIC,CAAC;IACf,MAAM,EAAEC,WAAW,EAAEC,MAAM,EAAEC,WAAW,EAAEC,WAAW,EAAEC,SAAS,EAAE,GAChE,MAAMb,2BAA2BO;IACnC,MAAMO,aAAaP,IAAIQ,OAAO,CAACC,MAAM,CAACC,MAAM,CAACC,KAAK;IAElD,qBACE,MAACC;QACCC,WAAU;QACVC,OAAO;YACLC,SAAS;YACTC,eAAe;YACfC,KAAK;YACLC,QAAQ;QACV;;0BAEA,MAACN;gBAAIE,OAAO;oBAAEC,SAAS;oBAAQC,eAAe;oBAAUC,KAAK;gBAAM;;kCACjE,MAACL;wBAAIE,OAAO;4BAAEK,YAAY;4BAAUJ,SAAS;4BAAQE,KAAK;wBAAS;;0CACjE,KAACL;gCAAIE,OAAO;oCAAEM,OAAO;gCAA6B;0CAChD,cAAA,KAACtB;;0CAEH,KAACuB;gCAAGP,OAAO;oCAAEQ,QAAQ;gCAAE;0CACpBrB,EAAE;;;;kCAGP,KAACsB;wBAAET,OAAO;4BAAEM,OAAO;4BAAqBI,UAAU;4BAAQF,QAAQ;4BAAGG,SAAS;wBAAK;kCAChFxB,EAAE;;;;YAINK,cAAc,KAAKH,OAAOuB,MAAM,KAAK,mBACpC,KAACH;gBAAET,OAAO;oBAAEM,OAAO;oBAAqBE,QAAQ;oBAAGG,SAAS;gBAAK;0BAC9DxB,EAAE;;YAINE,OAAOuB,MAAM,GAAG,mBACf,KAACH;gBAAET,OAAO;oBAAEM,OAAO;oBAAWI,UAAU;oBAAQF,QAAQ;gBAAE;0BACvDrB,EAAE;;0BAIP,KAACW;gBAAIE,OAAO;oBAAEC,SAAS;oBAAQC,eAAe;oBAAUC,KAAK;gBAAO;0BACjEf,YAAYyB,GAAG,CAAC,CAACC;oBAChB,MAAMC,eAAenC,mCAAmCkC;oBAExD,qBACE,MAAChB;wBAECE,OAAO;4BACLK,YAAY;4BACZW,YAAY;4BACZC,QAAQ;4BACRC,cAAc;4BACdjB,SAAS;4BACTE,KAAK;4BACLgB,gBAAgB;4BAChBC,SAAS;wBACX;;0CAEA,MAACtB;gCAAIE,OAAO;oCAAEC,SAAS;oCAAQC,eAAe;oCAAUC,KAAK;oCAAOkB,UAAU;gCAAE;;kDAC9E,KAACC;wCACCC,MAAM7C,eAAe;4CACnBe;4CACA+B,MAAM,CAAC,aAAa,EAAEV,WAAWA,UAAU,EAAE;wCAC/C;wCACAd,OAAO;4CACLM,OAAO;4CACPI,UAAU;4CACVe,YAAY;4CACZC,gBAAgB;wCAClB;kDAEC7C,mBACCiC,WAAWA,UAAU,EACrB5B,IAAIQ,OAAO,CAACC,MAAM,CAACP,WAAW,EAC9BF,IAAIyC,MAAM;;oCAIbZ,iBAAiB,8BAChB,KAACa;wCAAK5B,OAAO;4CAAEM,OAAO;4CAAWI,UAAU;wCAAO;kDAC/CvB,EAAE;uDAGL,MAACyC;wCAAK5B,OAAO;4CAAEU,UAAU;4CAAQC,SAAS;wCAAI;;0DAC5C,KAACiB;gDAAK5B,OAAO;oDAAE6B,YAAY;gDAAS;0DACjC1C,EAAE,yDAAyD;oDAC1D2C,OAAOhB,WAAWtB,SAAS;gDAC7B;;4CAEDF,6BACC;;oDACG;kEACD,KAACsC;wDAAK5B,OAAO;4DAAE6B,YAAY;wDAAS;kEACjC1C,EAAE,qDAAqD;4DACtD2C,OAAOvC;wDACT;;;;;;;;4BAQXwB,iBAAiB,eAClBD,WAAWiB,aAAa,IACxBjB,WAAWiB,aAAa,CAACnB,MAAM,GAAG,kBAChC,KAACnC;gCACCuD,WAAU;gCACVC,MAAK;gCACLC,IAAI,GAAGxD,eAAe;oCACpBe;oCACA+B,MAAM,CAAC,aAAa,EAAEV,WAAWA,UAAU,EAAE;gCAC/C,GAAG,eAAe,EAAEA,WAAWiB,aAAa,CAACI,IAAI,CAAC,MAAM;0CAExD,cAAA,MAACrC;oCAAIE,OAAO;wCAAEK,YAAY;wCAAUJ,SAAS;wCAAQE,KAAK;oCAAU;;wCACjEhB,EAAE,yDAAyD;4CAC1D2C,OAAOhB,WAAWsB,WAAW,GAAGtB,WAAWuB,WAAW;wCACxD;sDACA,KAACvD;4CAAesB,QAAO;4CAAKkC,OAAM;;;;iCAGpCvB,iBAAiB,0BACnB,KAACtC;gCAAKuD,WAAU;gCAAUC,MAAK;0CAC7B,cAAA,MAACnC;oCAAIE,OAAO;wCAAEK,YAAY;wCAAUJ,SAAS;wCAAQE,KAAK;oCAAU;;wCACjEhB,EAAE;sDACH,KAACJ;4CAAUqB,QAAO;4CAAKkC,OAAM;;;;iCAG/BvB,iBAAiB,4BACnB,KAACtC;gCAAKuD,WAAU;gCAAQC,MAAK;0CAC1B9C,EAAE,yDAAyD;oCAC1D2C,OAAOhB,WAAWsB,WAAW,GAAGtB,WAAWuB,WAAW;gCACxD;+CAGF,KAAC5D;gCAAKuD,WAAU;gCAAUC,MAAK;0CAC5B9C,EAAE;;;uBA1FF2B,WAAWA,UAAU;gBA+FhC;;;;AAIR"}
+{"version":3,"sources":["../../src/components/AltTextHealthWidget.tsx"],"sourcesContent":["import type { TFunction } from '@payloadcms/translations'\nimport type { WidgetServerProps } from 'payload'\n\nimport { Pill } from '@payloadcms/ui/elements/Pill'\nimport { formatAdminURL } from 'payload/shared'\n\nimport type { PluginAltTextTranslationKeys } from '../translations/index.js'\n\nimport { canViewHealthReport, getAltTextHealthWidgetData } from '../utilities/altTextHealth.js'\nimport { getAltTextHealthWidgetDisplayState } from '../utilities/altTextHealthWidgetDisplay.js'\nimport { getCollectionLabel } from '../utilities/getCollectionLabel.js'\nimport { ArrowRightIcon } from './icons/ArrowRightIcon.js'\nimport { CheckIcon } from './icons/CheckIcon.js'\nimport { ImageIcon } from './icons/ImageIcon.js'\n\nexport async function AltTextHealthWidget({ req }: WidgetServerProps) {\n  // Hide the widget from users the health gate denies, matching the endpoint.\n  if (!(await canViewHealthReport(req))) {\n    return null\n  }\n\n  const t = req.t as TFunction<PluginAltTextTranslationKeys>\n  const { collections, errors, isLocalized, localeCount, totalDocs } =\n    await getAltTextHealthWidgetData(req)\n  const adminRoute = req.payload.config.routes.admin\n\n  return (\n    <div\n      className=\"card\"\n      style={{\n        display: 'flex',\n        flexDirection: 'column',\n        gap: '16px',\n        height: '100%',\n      }}\n    >\n      <div style={{ display: 'flex', flexDirection: 'column', gap: '4px' }}>\n        <div style={{ alignItems: 'center', display: 'flex', gap: '0.5rem' }}>\n          <div style={{ color: 'var(--theme-elevation-500)' }}>\n            <ImageIcon />\n          </div>\n          <h3 style={{ margin: 0 }}>\n            {t('@jhb.software/payload-alt-text-plugin:altTextHealthWidget')}\n          </h3>\n        </div>\n        <p style={{ color: 'var(--theme-text)', fontSize: '14px', margin: 0, opacity: 0.75 }}>\n          {t('@jhb.software/payload-alt-text-plugin:altTextHealthDescription')}\n        </p>\n      </div>\n\n      {totalDocs === 0 && errors.length === 0 && (\n        <p style={{ color: 'var(--theme-text)', margin: 0, opacity: 0.75 }}>\n          {t('@jhb.software/payload-alt-text-plugin:noImagesFound')}\n        </p>\n      )}\n\n      {errors.length > 0 && (\n        <p style={{ color: '#92400e', fontSize: '13px', margin: 0 }}>\n          {t('@jhb.software/payload-alt-text-plugin:healthCheckPartialWarning')}\n        </p>\n      )}\n\n      <div style={{ display: 'flex', flexDirection: 'column', gap: '10px' }}>\n        {collections.map((collection) => {\n          const displayState = getAltTextHealthWidgetDisplayState(collection)\n\n          return (\n            <div\n              key={collection.collection}\n              style={{\n                alignItems: 'center',\n                background: 'var(--theme-elevation-50)',\n                border: '1px solid var(--theme-border-color)',\n                borderRadius: 'var(--style-radius-m)',\n                display: 'flex',\n                gap: '12px',\n                justifyContent: 'space-between',\n                padding: '12px 16px',\n              }}\n            >\n              <div style={{ display: 'flex', flexDirection: 'column', gap: '2px', minWidth: 0 }}>\n                <a\n                  href={formatAdminURL({\n                    adminRoute,\n                    path: `/collections/${collection.collection}`,\n                  })}\n                  style={{\n                    color: 'var(--theme-text)',\n                    fontSize: '14px',\n                    fontWeight: 500,\n                    textDecoration: 'none',\n                  }}\n                >\n                  {getCollectionLabel(\n                    collection.collection,\n                    req.payload.config.collections,\n                    req.locale,\n                  )}\n                </a>\n\n                {displayState === 'unavailable' ? (\n                  <span style={{ color: '#92400e', fontSize: '13px' }}>\n                    {t('@jhb.software/payload-alt-text-plugin:collectionCheckFailed')}\n                  </span>\n                ) : (\n                  <span style={{ fontSize: '13px', opacity: 0.7 }}>\n                    <span style={{ whiteSpace: 'nowrap' }}>\n                      {t('@jhb.software/payload-alt-text-plugin:totalImageCount', {\n                        count: collection.totalDocs,\n                      })}\n                    </span>\n                    {isLocalized && (\n                      <>\n                        {' · '}\n                        <span style={{ whiteSpace: 'nowrap' }}>\n                          {t('@jhb.software/payload-alt-text-plugin:localeCount', {\n                            count: localeCount,\n                          })}\n                        </span>\n                      </>\n                    )}\n                  </span>\n                )}\n              </div>\n\n              {displayState === 'unhealthy' &&\n              collection.invalidDocIds &&\n              collection.invalidDocIds.length > 0 ? (\n                <Pill\n                  pillStyle=\"error\"\n                  size=\"small\"\n                  to={`${formatAdminURL({\n                    adminRoute,\n                    path: `/collections/${collection.collection}`,\n                  })}?where[id][in]=${collection.invalidDocIds.join(',')}`}\n                >\n                  <div style={{ alignItems: 'center', display: 'flex', gap: '0.25rem' }}>\n                    {t('@jhb.software/payload-alt-text-plugin:statusUnhealthy', {\n                      count: collection.missingDocs + collection.partialDocs,\n                    })}\n                    <ArrowRightIcon height=\"12\" width=\"12\" />\n                  </div>\n                </Pill>\n              ) : displayState === 'healthy' ? (\n                <Pill pillStyle=\"success\" size=\"small\">\n                  <div style={{ alignItems: 'center', display: 'flex', gap: '0.25rem' }}>\n                    {t('@jhb.software/payload-alt-text-plugin:statusHealthy')}\n                    <CheckIcon height=\"12\" width=\"12\" />\n                  </div>\n                </Pill>\n              ) : displayState === 'unhealthy' ? (\n                <Pill pillStyle=\"error\" size=\"small\">\n                  {t('@jhb.software/payload-alt-text-plugin:statusUnhealthy', {\n                    count: collection.missingDocs + collection.partialDocs,\n                  })}\n                </Pill>\n              ) : (\n                <Pill pillStyle=\"warning\" size=\"small\">\n                  {t('@jhb.software/payload-alt-text-plugin:collectionCheckFailed')}\n                </Pill>\n              )}\n            </div>\n          )\n        })}\n      </div>\n    </div>\n  )\n}\n"],"names":["Pill","formatAdminURL","canViewHealthReport","getAltTextHealthWidgetData","getAltTextHealthWidgetDisplayState","getCollectionLabel","ArrowRightIcon","CheckIcon","ImageIcon","AltTextHealthWidget","req","t","collections","errors","isLocalized","localeCount","totalDocs","adminRoute","payload","config","routes","admin","div","className","style","display","flexDirection","gap","height","alignItems","color","h3","margin","p","fontSize","opacity","length","map","collection","displayState","background","border","borderRadius","justifyContent","padding","minWidth","a","href","path","fontWeight","textDecoration","locale","span","whiteSpace","count","invalidDocIds","pillStyle","size","to","join","missingDocs","partialDocs","width"],"mappings":";AAGA,SAASA,IAAI,QAAQ,+BAA8B;AACnD,SAASC,cAAc,QAAQ,iBAAgB;AAI/C,SAASC,mBAAmB,EAAEC,0BAA0B,QAAQ,gCAA+B;AAC/F,SAASC,kCAAkC,QAAQ,6CAA4C;AAC/F,SAASC,kBAAkB,QAAQ,qCAAoC;AACvE,SAASC,cAAc,QAAQ,4BAA2B;AAC1D,SAASC,SAAS,QAAQ,uBAAsB;AAChD,SAASC,SAAS,QAAQ,uBAAsB;AAEhD,OAAO,eAAeC,oBAAoB,EAAEC,GAAG,EAAqB;IAClE,4EAA4E;IAC5E,IAAI,CAAE,MAAMR,oBAAoBQ,MAAO;QACrC,OAAO;IACT;IAEA,MAAMC,IAAID,IAAIC,CAAC;IACf,MAAM,EAAEC,WAAW,EAAEC,MAAM,EAAEC,WAAW,EAAEC,WAAW,EAAEC,SAAS,EAAE,GAChE,MAAMb,2BAA2BO;IACnC,MAAMO,aAAaP,IAAIQ,OAAO,CAACC,MAAM,CAACC,MAAM,CAACC,KAAK;IAElD,qBACE,MAACC;QACCC,WAAU;QACVC,OAAO;YACLC,SAAS;YACTC,eAAe;YACfC,KAAK;YACLC,QAAQ;QACV;;0BAEA,MAACN;gBAAIE,OAAO;oBAAEC,SAAS;oBAAQC,eAAe;oBAAUC,KAAK;gBAAM;;kCACjE,MAACL;wBAAIE,OAAO;4BAAEK,YAAY;4BAAUJ,SAAS;4BAAQE,KAAK;wBAAS;;0CACjE,KAACL;gCAAIE,OAAO;oCAAEM,OAAO;gCAA6B;0CAChD,cAAA,KAACtB;;0CAEH,KAACuB;gCAAGP,OAAO;oCAAEQ,QAAQ;gCAAE;0CACpBrB,EAAE;;;;kCAGP,KAACsB;wBAAET,OAAO;4BAAEM,OAAO;4BAAqBI,UAAU;4BAAQF,QAAQ;4BAAGG,SAAS;wBAAK;kCAChFxB,EAAE;;;;YAINK,cAAc,KAAKH,OAAOuB,MAAM,KAAK,mBACpC,KAACH;gBAAET,OAAO;oBAAEM,OAAO;oBAAqBE,QAAQ;oBAAGG,SAAS;gBAAK;0BAC9DxB,EAAE;;YAINE,OAAOuB,MAAM,GAAG,mBACf,KAACH;gBAAET,OAAO;oBAAEM,OAAO;oBAAWI,UAAU;oBAAQF,QAAQ;gBAAE;0BACvDrB,EAAE;;0BAIP,KAACW;gBAAIE,OAAO;oBAAEC,SAAS;oBAAQC,eAAe;oBAAUC,KAAK;gBAAO;0BACjEf,YAAYyB,GAAG,CAAC,CAACC;oBAChB,MAAMC,eAAenC,mCAAmCkC;oBAExD,qBACE,MAAChB;wBAECE,OAAO;4BACLK,YAAY;4BACZW,YAAY;4BACZC,QAAQ;4BACRC,cAAc;4BACdjB,SAAS;4BACTE,KAAK;4BACLgB,gBAAgB;4BAChBC,SAAS;wBACX;;0CAEA,MAACtB;gCAAIE,OAAO;oCAAEC,SAAS;oCAAQC,eAAe;oCAAUC,KAAK;oCAAOkB,UAAU;gCAAE;;kDAC9E,KAACC;wCACCC,MAAM9C,eAAe;4CACnBgB;4CACA+B,MAAM,CAAC,aAAa,EAAEV,WAAWA,UAAU,EAAE;wCAC/C;wCACAd,OAAO;4CACLM,OAAO;4CACPI,UAAU;4CACVe,YAAY;4CACZC,gBAAgB;wCAClB;kDAEC7C,mBACCiC,WAAWA,UAAU,EACrB5B,IAAIQ,OAAO,CAACC,MAAM,CAACP,WAAW,EAC9BF,IAAIyC,MAAM;;oCAIbZ,iBAAiB,8BAChB,KAACa;wCAAK5B,OAAO;4CAAEM,OAAO;4CAAWI,UAAU;wCAAO;kDAC/CvB,EAAE;uDAGL,MAACyC;wCAAK5B,OAAO;4CAAEU,UAAU;4CAAQC,SAAS;wCAAI;;0DAC5C,KAACiB;gDAAK5B,OAAO;oDAAE6B,YAAY;gDAAS;0DACjC1C,EAAE,yDAAyD;oDAC1D2C,OAAOhB,WAAWtB,SAAS;gDAC7B;;4CAEDF,6BACC;;oDACG;kEACD,KAACsC;wDAAK5B,OAAO;4DAAE6B,YAAY;wDAAS;kEACjC1C,EAAE,qDAAqD;4DACtD2C,OAAOvC;wDACT;;;;;;;;4BAQXwB,iBAAiB,eAClBD,WAAWiB,aAAa,IACxBjB,WAAWiB,aAAa,CAACnB,MAAM,GAAG,kBAChC,KAACpC;gCACCwD,WAAU;gCACVC,MAAK;gCACLC,IAAI,GAAGzD,eAAe;oCACpBgB;oCACA+B,MAAM,CAAC,aAAa,EAAEV,WAAWA,UAAU,EAAE;gCAC/C,GAAG,eAAe,EAAEA,WAAWiB,aAAa,CAACI,IAAI,CAAC,MAAM;0CAExD,cAAA,MAACrC;oCAAIE,OAAO;wCAAEK,YAAY;wCAAUJ,SAAS;wCAAQE,KAAK;oCAAU;;wCACjEhB,EAAE,yDAAyD;4CAC1D2C,OAAOhB,WAAWsB,WAAW,GAAGtB,WAAWuB,WAAW;wCACxD;sDACA,KAACvD;4CAAesB,QAAO;4CAAKkC,OAAM;;;;iCAGpCvB,iBAAiB,0BACnB,KAACvC;gCAAKwD,WAAU;gCAAUC,MAAK;0CAC7B,cAAA,MAACnC;oCAAIE,OAAO;wCAAEK,YAAY;wCAAUJ,SAAS;wCAAQE,KAAK;oCAAU;;wCACjEhB,EAAE;sDACH,KAACJ;4CAAUqB,QAAO;4CAAKkC,OAAM;;;;iCAG/BvB,iBAAiB,4BACnB,KAACvC;gCAAKwD,WAAU;gCAAQC,MAAK;0CAC1B9C,EAAE,yDAAyD;oCAC1D2C,OAAOhB,WAAWsB,WAAW,GAAGtB,WAAWuB,WAAW;gCACxD;+CAGF,KAAC7D;gCAAKwD,WAAU;gCAAUC,MAAK;0CAC5B9C,EAAE;;;uBA1FF2B,WAAWA,UAAU;gBA+FhC;;;;AAIR"}

package/dist/components/BulkGenerateAltTextsButton.js

@@ -1,6 +1,6 @@
 'use client';
 import { jsx as _jsx } from "react/jsx-runtime";
-import { Button, toast, useConfig, useSelection, useTranslation } from '@payloadcms/ui';
+import { Button, toast, useAuth, useConfig, useSelection, useTranslation } from '@payloadcms/ui';
 import { useRouter } from 'next/navigation.js';
 import { useTransition } from 'react';
 import { Lightning } from './icons/Lightning.js';
@@ -8,7 +8,9 @@ import { Spinner } from './icons/Spinner.js';
 export function BulkGenerateAltTextsButton({ collectionSlug }) {
     const { t } = useTranslation();
     const [isPending, startTransition] = useTransition();
+    const { permissions } = useAuth();
     const { selected, setSelection } = useSelection();
+    const canUpdateCollection = Boolean(permissions?.collections?.[collectionSlug]?.update);
     const { config: { routes: { api: apiRoute }, serverURL } } = useConfig();
     const selectedIds = Array.from(selected.entries()).filter(([, isSelected])=>isSelected).map(([id])=>id);
     const router = useRouter();
@@ -58,7 +60,7 @@ export function BulkGenerateAltTextsButton({ collectionSlug }) {
             }
         });
     };
-    return selectedIds.length > 0 && /*#__PURE__*/ _jsx("div", {
+    return canUpdateCollection && selectedIds.length > 0 && /*#__PURE__*/ _jsx("div", {
         className: "m-0",
         style: {
             display: 'flex',

package/dist/components/BulkGenerateAltTextsButton.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/BulkGenerateAltTextsButton.tsx"],"sourcesContent":["'use client'\n\nimport { Button, toast, useConfig, useSelection, useTranslation } from '@payloadcms/ui'\nimport { useRouter } from 'next/navigation.js'\nimport { useTransition } from 'react'\n\nimport type {\n  PluginAltTextTranslationKeys,\n  PluginAltTextTranslations,\n} from '../translations/index.js'\n\nimport { Lightning } from './icons/Lightning.js'\nimport { Spinner } from './icons/Spinner.js'\n\nexport function BulkGenerateAltTextsButton({ collectionSlug }: { collectionSlug: string }) {\n  const { t } = useTranslation<PluginAltTextTranslations, PluginAltTextTranslationKeys>()\n  const [isPending, startTransition] = useTransition()\n  const { selected, setSelection } = useSelection()\n  const {\n    config: {\n      routes: { api: apiRoute },\n      serverURL,\n    },\n  } = useConfig()\n\n  const selectedIds = Array.from(selected.entries())\n    .filter(([, isSelected]) => isSelected)\n    .map(([id]) => id) as string[]\n\n  const router = useRouter()\n\n  const handleGenerateAltTexts = () => {\n    startTransition(async () => {\n      if (!collectionSlug) {\n        throw new Error('Collection slug is required')\n      }\n\n      try {\n        const response = await fetch(\n          `${serverURL ?? ''}${apiRoute}/alt-text-plugin/generate/bulk`,\n          {\n            body: JSON.stringify({\n              collection: collectionSlug,\n              ids: selectedIds,\n            }),\n            method: 'POST',\n          },\n        )\n\n        if (!response.ok) {\n          toast.error(t('@jhb.software/payload-alt-text-plugin:failedToGenerate'))\n          return\n        }\n\n        const data = (await response.json()) as {\n          erroredDocs: string[]\n          totalDocs: number\n          updatedDocs: number\n        }\n\n        if (data.erroredDocs.length > 0) {\n          toast.error(\n            t('@jhb.software/payload-alt-text-plugin:failedToGenerateForXImages', {\n              count: data.erroredDocs.length,\n            }),\n          )\n        }\n\n        // in case not all images were updated, show a warning instead of a success message:\n        if (data.updatedDocs === data.totalDocs) {\n          toast.success(\n            t('@jhb.software/payload-alt-text-plugin:xOfYImagesUpdated', {\n              total: data.totalDocs,\n              updated: data.updatedDocs,\n            }),\n          )\n        } else {\n          toast.warning(\n            t('@jhb.software/payload-alt-text-plugin:xOfYImagesUpdated', {\n              total: data.totalDocs,\n              updated: data.updatedDocs,\n            }),\n          )\n        }\n\n        // deselect all previously selected images\n        for (const id of selectedIds) {\n          setSelection(id)\n        }\n\n        router.refresh()\n      } catch (error) {\n        console.error('Error generating alt text:', error)\n        toast.error(t('@jhb.software/payload-alt-text-plugin:errorGeneratingAltText'))\n      }\n    })\n  }\n\n  return (\n    selectedIds.length > 0 && (\n      <div className=\"m-0\" style={{ display: 'flex', justifyContent: 'right' }}>\n        <Button\n          className=\"m-0\"\n          disabled={isPending || selectedIds.length === 0}\n          icon={isPending ? <Spinner /> : <Lightning />}\n          onClick={handleGenerateAltTexts}\n        >\n          {t('@jhb.software/payload-alt-text-plugin:generateAltTextFor', {\n            count: selectedIds.length,\n          })}\n        </Button>\n      </div>\n    )\n  )\n}\n"],"names":["Button","toast","useConfig","useSelection","useTranslation","useRouter","useTransition","Lightning","Spinner","BulkGenerateAltTextsButton","collectionSlug","t","isPending","startTransition","selected","setSelection","config","routes","api","apiRoute","serverURL","selectedIds","Array","from","entries","filter","isSelected","map","id","router","handleGenerateAltTexts","Error","response","fetch","body","JSON","stringify","collection","ids","method","ok","error","data","json","erroredDocs","length","count","updatedDocs","totalDocs","success","total","updated","warning","refresh","console","div","className","style","display","justifyContent","disabled","icon","onClick"],"mappings":"AAAA;;AAEA,SAASA,MAAM,EAAEC,KAAK,EAAEC,SAAS,EAAEC,YAAY,EAAEC,cAAc,QAAQ,iBAAgB;AACvF,SAASC,SAAS,QAAQ,qBAAoB;AAC9C,SAASC,aAAa,QAAQ,QAAO;AAOrC,SAASC,SAAS,QAAQ,uBAAsB;AAChD,SAASC,OAAO,QAAQ,qBAAoB;AAE5C,OAAO,SAASC,2BAA2B,EAAEC,cAAc,EAA8B;IACvF,MAAM,EAAEC,CAAC,EAAE,GAAGP;IACd,MAAM,CAACQ,WAAWC,gBAAgB,GAAGP;IACrC,MAAM,EAAEQ,QAAQ,EAAEC,YAAY,EAAE,GAAGZ;IACnC,MAAM,EACJa,QAAQ,EACNC,QAAQ,EAAEC,KAAKC,QAAQ,EAAE,EACzBC,SAAS,EACV,EACF,GAAGlB;IAEJ,MAAMmB,cAAcC,MAAMC,IAAI,CAACT,SAASU,OAAO,IAC5CC,MAAM,CAAC,CAAC,GAAGC,WAAW,GAAKA,YAC3BC,GAAG,CAAC,CAAC,CAACC,GAAG,GAAKA;IAEjB,MAAMC,SAASxB;IAEf,MAAMyB,yBAAyB;QAC7BjB,gBAAgB;YACd,IAAI,CAACH,gBAAgB;gBACnB,MAAM,IAAIqB,MAAM;YAClB;YAEA,IAAI;gBACF,MAAMC,WAAW,MAAMC,MACrB,GAAGb,aAAa,KAAKD,SAAS,8BAA8B,CAAC,EAC7D;oBACEe,MAAMC,KAAKC,SAAS,CAAC;wBACnBC,YAAY3B;wBACZ4B,KAAKjB;oBACP;oBACAkB,QAAQ;gBACV;gBAGF,IAAI,CAACP,SAASQ,EAAE,EAAE;oBAChBvC,MAAMwC,KAAK,CAAC9B,EAAE;oBACd;gBACF;gBAEA,MAAM+B,OAAQ,MAAMV,SAASW,IAAI;gBAMjC,IAAID,KAAKE,WAAW,CAACC,MAAM,GAAG,GAAG;oBAC/B5C,MAAMwC,KAAK,CACT9B,EAAE,oEAAoE;wBACpEmC,OAAOJ,KAAKE,WAAW,CAACC,MAAM;oBAChC;gBAEJ;gBAEA,oFAAoF;gBACpF,IAAIH,KAAKK,WAAW,KAAKL,KAAKM,SAAS,EAAE;oBACvC/C,MAAMgD,OAAO,CACXtC,EAAE,2DAA2D;wBAC3DuC,OAAOR,KAAKM,SAAS;wBACrBG,SAAST,KAAKK,WAAW;oBAC3B;gBAEJ,OAAO;oBACL9C,MAAMmD,OAAO,CACXzC,EAAE,2DAA2D;wBAC3DuC,OAAOR,KAAKM,SAAS;wBACrBG,SAAST,KAAKK,WAAW;oBAC3B;gBAEJ;gBAEA,0CAA0C;gBAC1C,KAAK,MAAMnB,MAAMP,YAAa;oBAC5BN,aAAaa;gBACf;gBAEAC,OAAOwB,OAAO;YAChB,EAAE,OAAOZ,OAAO;gBACda,QAAQb,KAAK,CAAC,8BAA8BA;gBAC5CxC,MAAMwC,KAAK,CAAC9B,EAAE;YAChB;QACF;IACF;IAEA,OACEU,YAAYwB,MAAM,GAAG,mBACnB,KAACU;QAAIC,WAAU;QAAMC,OAAO;YAAEC,SAAS;YAAQC,gBAAgB;QAAQ;kBACrE,cAAA,KAAC3D;YACCwD,WAAU;YACVI,UAAUhD,aAAaS,YAAYwB,MAAM,KAAK;YAC9CgB,MAAMjD,0BAAY,KAACJ,6BAAa,KAACD;YACjCuD,SAAShC;sBAERnB,EAAE,4DAA4D;gBAC7DmC,OAAOzB,YAAYwB,MAAM;YAC3B;;;AAKV"}
+{"version":3,"sources":["../../src/components/BulkGenerateAltTextsButton.tsx"],"sourcesContent":["'use client'\n\nimport { Button, toast, useAuth, useConfig, useSelection, useTranslation } from '@payloadcms/ui'\nimport { useRouter } from 'next/navigation.js'\nimport { useTransition } from 'react'\n\nimport type {\n  PluginAltTextTranslationKeys,\n  PluginAltTextTranslations,\n} from '../translations/index.js'\n\nimport { Lightning } from './icons/Lightning.js'\nimport { Spinner } from './icons/Spinner.js'\n\nexport function BulkGenerateAltTextsButton({ collectionSlug }: { collectionSlug: string }) {\n  const { t } = useTranslation<PluginAltTextTranslations, PluginAltTextTranslationKeys>()\n  const [isPending, startTransition] = useTransition()\n  const { permissions } = useAuth()\n  const { selected, setSelection } = useSelection()\n\n  const canUpdateCollection = Boolean(permissions?.collections?.[collectionSlug]?.update)\n  const {\n    config: {\n      routes: { api: apiRoute },\n      serverURL,\n    },\n  } = useConfig()\n\n  const selectedIds = Array.from(selected.entries())\n    .filter(([, isSelected]) => isSelected)\n    .map(([id]) => id) as string[]\n\n  const router = useRouter()\n\n  const handleGenerateAltTexts = () => {\n    startTransition(async () => {\n      if (!collectionSlug) {\n        throw new Error('Collection slug is required')\n      }\n\n      try {\n        const response = await fetch(\n          `${serverURL ?? ''}${apiRoute}/alt-text-plugin/generate/bulk`,\n          {\n            body: JSON.stringify({\n              collection: collectionSlug,\n              ids: selectedIds,\n            }),\n            method: 'POST',\n          },\n        )\n\n        if (!response.ok) {\n          toast.error(t('@jhb.software/payload-alt-text-plugin:failedToGenerate'))\n          return\n        }\n\n        const data = (await response.json()) as {\n          erroredDocs: string[]\n          totalDocs: number\n          updatedDocs: number\n        }\n\n        if (data.erroredDocs.length > 0) {\n          toast.error(\n            t('@jhb.software/payload-alt-text-plugin:failedToGenerateForXImages', {\n              count: data.erroredDocs.length,\n            }),\n          )\n        }\n\n        // in case not all images were updated, show a warning instead of a success message:\n        if (data.updatedDocs === data.totalDocs) {\n          toast.success(\n            t('@jhb.software/payload-alt-text-plugin:xOfYImagesUpdated', {\n              total: data.totalDocs,\n              updated: data.updatedDocs,\n            }),\n          )\n        } else {\n          toast.warning(\n            t('@jhb.software/payload-alt-text-plugin:xOfYImagesUpdated', {\n              total: data.totalDocs,\n              updated: data.updatedDocs,\n            }),\n          )\n        }\n\n        // deselect all previously selected images\n        for (const id of selectedIds) {\n          setSelection(id)\n        }\n\n        router.refresh()\n      } catch (error) {\n        console.error('Error generating alt text:', error)\n        toast.error(t('@jhb.software/payload-alt-text-plugin:errorGeneratingAltText'))\n      }\n    })\n  }\n\n  return (\n    canUpdateCollection &&\n    selectedIds.length > 0 && (\n      <div className=\"m-0\" style={{ display: 'flex', justifyContent: 'right' }}>\n        <Button\n          className=\"m-0\"\n          disabled={isPending || selectedIds.length === 0}\n          icon={isPending ? <Spinner /> : <Lightning />}\n          onClick={handleGenerateAltTexts}\n        >\n          {t('@jhb.software/payload-alt-text-plugin:generateAltTextFor', {\n            count: selectedIds.length,\n          })}\n        </Button>\n      </div>\n    )\n  )\n}\n"],"names":["Button","toast","useAuth","useConfig","useSelection","useTranslation","useRouter","useTransition","Lightning","Spinner","BulkGenerateAltTextsButton","collectionSlug","t","isPending","startTransition","permissions","selected","setSelection","canUpdateCollection","Boolean","collections","update","config","routes","api","apiRoute","serverURL","selectedIds","Array","from","entries","filter","isSelected","map","id","router","handleGenerateAltTexts","Error","response","fetch","body","JSON","stringify","collection","ids","method","ok","error","data","json","erroredDocs","length","count","updatedDocs","totalDocs","success","total","updated","warning","refresh","console","div","className","style","display","justifyContent","disabled","icon","onClick"],"mappings":"AAAA;;AAEA,SAASA,MAAM,EAAEC,KAAK,EAAEC,OAAO,EAAEC,SAAS,EAAEC,YAAY,EAAEC,cAAc,QAAQ,iBAAgB;AAChG,SAASC,SAAS,QAAQ,qBAAoB;AAC9C,SAASC,aAAa,QAAQ,QAAO;AAOrC,SAASC,SAAS,QAAQ,uBAAsB;AAChD,SAASC,OAAO,QAAQ,qBAAoB;AAE5C,OAAO,SAASC,2BAA2B,EAAEC,cAAc,EAA8B;IACvF,MAAM,EAAEC,CAAC,EAAE,GAAGP;IACd,MAAM,CAACQ,WAAWC,gBAAgB,GAAGP;IACrC,MAAM,EAAEQ,WAAW,EAAE,GAAGb;IACxB,MAAM,EAAEc,QAAQ,EAAEC,YAAY,EAAE,GAAGb;IAEnC,MAAMc,sBAAsBC,QAAQJ,aAAaK,aAAa,CAACT,eAAe,EAAEU;IAChF,MAAM,EACJC,QAAQ,EACNC,QAAQ,EAAEC,KAAKC,QAAQ,EAAE,EACzBC,SAAS,EACV,EACF,GAAGvB;IAEJ,MAAMwB,cAAcC,MAAMC,IAAI,CAACb,SAASc,OAAO,IAC5CC,MAAM,CAAC,CAAC,GAAGC,WAAW,GAAKA,YAC3BC,GAAG,CAAC,CAAC,CAACC,GAAG,GAAKA;IAEjB,MAAMC,SAAS7B;IAEf,MAAM8B,yBAAyB;QAC7BtB,gBAAgB;YACd,IAAI,CAACH,gBAAgB;gBACnB,MAAM,IAAI0B,MAAM;YAClB;YAEA,IAAI;gBACF,MAAMC,WAAW,MAAMC,MACrB,GAAGb,aAAa,KAAKD,SAAS,8BAA8B,CAAC,EAC7D;oBACEe,MAAMC,KAAKC,SAAS,CAAC;wBACnBC,YAAYhC;wBACZiC,KAAKjB;oBACP;oBACAkB,QAAQ;gBACV;gBAGF,IAAI,CAACP,SAASQ,EAAE,EAAE;oBAChB7C,MAAM8C,KAAK,CAACnC,EAAE;oBACd;gBACF;gBAEA,MAAMoC,OAAQ,MAAMV,SAASW,IAAI;gBAMjC,IAAID,KAAKE,WAAW,CAACC,MAAM,GAAG,GAAG;oBAC/BlD,MAAM8C,KAAK,CACTnC,EAAE,oEAAoE;wBACpEwC,OAAOJ,KAAKE,WAAW,CAACC,MAAM;oBAChC;gBAEJ;gBAEA,oFAAoF;gBACpF,IAAIH,KAAKK,WAAW,KAAKL,KAAKM,SAAS,EAAE;oBACvCrD,MAAMsD,OAAO,CACX3C,EAAE,2DAA2D;wBAC3D4C,OAAOR,KAAKM,SAAS;wBACrBG,SAAST,KAAKK,WAAW;oBAC3B;gBAEJ,OAAO;oBACLpD,MAAMyD,OAAO,CACX9C,EAAE,2DAA2D;wBAC3D4C,OAAOR,KAAKM,SAAS;wBACrBG,SAAST,KAAKK,WAAW;oBAC3B;gBAEJ;gBAEA,0CAA0C;gBAC1C,KAAK,MAAMnB,MAAMP,YAAa;oBAC5BV,aAAaiB;gBACf;gBAEAC,OAAOwB,OAAO;YAChB,EAAE,OAAOZ,OAAO;gBACda,QAAQb,KAAK,CAAC,8BAA8BA;gBAC5C9C,MAAM8C,KAAK,CAACnC,EAAE;YAChB;QACF;IACF;IAEA,OACEM,uBACAS,YAAYwB,MAAM,GAAG,mBACnB,KAACU;QAAIC,WAAU;QAAMC,OAAO;YAAEC,SAAS;YAAQC,gBAAgB;QAAQ;kBACrE,cAAA,KAACjE;YACC8D,WAAU;YACVI,UAAUrD,aAAac,YAAYwB,MAAM,KAAK;YAC9CgB,MAAMtD,0BAAY,KAACJ,6BAAa,KAACD;YACjC4D,SAAShC;sBAERxB,EAAE,4DAA4D;gBAC7DwC,OAAOzB,YAAYwB,MAAM;YAC3B;;;AAKV"}

package/dist/components/GenerateAltTextButton.d.ts

@@ -1,3 +1,3 @@
 export declare function GenerateAltTextButton({ supportedMimeTypes }: {
     supportedMimeTypes?: string[];
-}): import("react").JSX.Element;
+}): import("react").JSX.Element | null;

package/dist/components/GenerateAltTextButton.js

@@ -6,7 +6,7 @@ import { Lightning } from './icons/Lightning.js';
 import { Spinner } from './icons/Spinner.js';
 export function GenerateAltTextButton({ supportedMimeTypes }) {
     const { t } = useTranslation();
-    const { id, collectionSlug } = useDocumentInfo();
+    const { id, collectionSlug, docPermissions } = useDocumentInfo();
     const locale = useLocale();
     const [isPending, startTransition] = useTransition();
     const { config: { routes: { api: apiRoute }, serverURL } } = useConfig();
@@ -20,6 +20,11 @@ export function GenerateAltTextButton({ supportedMimeTypes }) {
         path: 'mimeType'
     });
     const isUnsupportedMimeType = !!mimeType && !!supportedMimeTypes && !supportedMimeTypes.includes(mimeType);
+    // Hide the generate button from users who cannot update the document — the
+    // generated alt text would not be persistable by them anyway.
+    if (!docPermissions?.update) {
+        return null;
+    }
     const handleGenerateAltText = ()=>{
         if (!collectionSlug || !id) {
             toast.error(t('@jhb.software/payload-alt-text-plugin:cannotGenerateMissingFields'));

package/dist/components/GenerateAltTextButton.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/GenerateAltTextButton.tsx"],"sourcesContent":["'use client'\n\nimport {\n  Button,\n  toast,\n  useConfig,\n  useDocumentInfo,\n  useField,\n  useLocale,\n  useTranslation,\n} from '@payloadcms/ui'\nimport { useTransition } from 'react'\n\nimport type {\n  PluginAltTextTranslationKeys,\n  PluginAltTextTranslations,\n} from '../translations/index.js'\n\nimport { Lightning } from './icons/Lightning.js'\nimport { Spinner } from './icons/Spinner.js'\n\nexport function GenerateAltTextButton({ supportedMimeTypes }: { supportedMimeTypes?: string[] }) {\n  const { t } = useTranslation<PluginAltTextTranslations, PluginAltTextTranslationKeys>()\n  const { id, collectionSlug } = useDocumentInfo()\n  const locale = useLocale()\n  const [isPending, startTransition] = useTransition()\n  const {\n    config: {\n      routes: { api: apiRoute },\n      serverURL,\n    },\n  } = useConfig()\n\n  const { setValue: setKeywords } = useField<string>({ path: 'keywords' })\n  const { setValue: setAltText } = useField<string>({ path: 'alt' })\n  const { value: mimeType } = useField<string>({ path: 'mimeType' })\n\n  const isUnsupportedMimeType =\n    !!mimeType && !!supportedMimeTypes && !supportedMimeTypes.includes(mimeType)\n\n  const handleGenerateAltText = () => {\n    if (!collectionSlug || !id) {\n      toast.error(t('@jhb.software/payload-alt-text-plugin:cannotGenerateMissingFields'))\n      throw new Error('Missing required fields')\n    }\n\n    startTransition(async () => {\n      try {\n        const response = await fetch(`${serverURL ?? ''}${apiRoute}/alt-text-plugin/generate`, {\n          body: JSON.stringify({\n            id: id as string,\n            collection: collectionSlug,\n            locale: locale?.code ?? null, // sent null when localization is disabled\n          }),\n          method: 'POST',\n        })\n\n        if (!response.ok) {\n          let errorMessage = t('@jhb.software/payload-alt-text-plugin:failedToGenerate')\n          try {\n            const errorData = (await response.json()) as { error: string }\n            errorMessage = errorData.error\n          } catch (error) {\n            console.error('Error generating alt text:', error)\n          }\n\n          toast.error(errorMessage)\n          return\n        }\n\n        const data = (await response.json()) as {\n          altText: string\n          keywords: string[]\n        }\n\n        if (data.altText && data.keywords) {\n          setAltText(data.altText)\n          setKeywords(data.keywords)\n          toast.success(t('@jhb.software/payload-alt-text-plugin:altTextGeneratedSuccess'))\n        } else {\n          toast.error(t('@jhb.software/payload-alt-text-plugin:noAltTextGenerated'))\n        }\n      } catch (error) {\n        console.error('Error generating alt text:', error)\n        toast.error(t('@jhb.software/payload-alt-text-plugin:errorGeneratingAltText'))\n      }\n    })\n  }\n\n  return (\n    <div style={{ display: 'flex', gap: '20px', marginTop: '10px' }}>\n      <div style={{ color: 'var(--theme-elevation-400)', flex: '1' }}>\n        <p>{t('@jhb.software/payload-alt-text-plugin:altTextDescription')}</p>\n        <ol style={{ margin: '10px 0', paddingLeft: '20px' }}>\n          <li>{t('@jhb.software/payload-alt-text-plugin:altTextRequirement1')}</li>\n          <li>{t('@jhb.software/payload-alt-text-plugin:altTextRequirement2')}</li>\n          <li>{t('@jhb.software/payload-alt-text-plugin:altTextRequirement3')}</li>\n        </ol>\n      </div>\n      <div style={{ alignItems: 'center', display: 'flex' }}>\n        <Button\n          disabled={isPending || !id || isUnsupportedMimeType}\n          icon={isPending ? <Spinner /> : <Lightning />}\n          onClick={handleGenerateAltText}\n          tooltip={\n            isUnsupportedMimeType\n              ? t('@jhb.software/payload-alt-text-plugin:unsupportedMimeType', { mimeType })\n              : !id\n                ? t('@jhb.software/payload-alt-text-plugin:pleaseSaveDocumentFirst')\n                : undefined\n          }\n        >\n          {t('@jhb.software/payload-alt-text-plugin:generateAltText')}\n        </Button>\n      </div>\n    </div>\n  )\n}\n"],"names":["Button","toast","useConfig","useDocumentInfo","useField","useLocale","useTranslation","useTransition","Lightning","Spinner","GenerateAltTextButton","supportedMimeTypes","t","id","collectionSlug","locale","isPending","startTransition","config","routes","api","apiRoute","serverURL","setValue","setKeywords","path","setAltText","value","mimeType","isUnsupportedMimeType","includes","handleGenerateAltText","error","Error","response","fetch","body","JSON","stringify","collection","code","method","ok","errorMessage","errorData","json","console","data","altText","keywords","success","div","style","display","gap","marginTop","color","flex","p","ol","margin","paddingLeft","li","alignItems","disabled","icon","onClick","tooltip","undefined"],"mappings":"AAAA;;AAEA,SACEA,MAAM,EACNC,KAAK,EACLC,SAAS,EACTC,eAAe,EACfC,QAAQ,EACRC,SAAS,EACTC,cAAc,QACT,iBAAgB;AACvB,SAASC,aAAa,QAAQ,QAAO;AAOrC,SAASC,SAAS,QAAQ,uBAAsB;AAChD,SAASC,OAAO,QAAQ,qBAAoB;AAE5C,OAAO,SAASC,sBAAsB,EAAEC,kBAAkB,EAAqC;IAC7F,MAAM,EAAEC,CAAC,EAAE,GAAGN;IACd,MAAM,EAAEO,EAAE,EAAEC,cAAc,EAAE,GAAGX;IAC/B,MAAMY,SAASV;IACf,MAAM,CAACW,WAAWC,gBAAgB,GAAGV;IACrC,MAAM,EACJW,QAAQ,EACNC,QAAQ,EAAEC,KAAKC,QAAQ,EAAE,EACzBC,SAAS,EACV,EACF,GAAGpB;IAEJ,MAAM,EAAEqB,UAAUC,WAAW,EAAE,GAAGpB,SAAiB;QAAEqB,MAAM;IAAW;IACtE,MAAM,EAAEF,UAAUG,UAAU,EAAE,GAAGtB,SAAiB;QAAEqB,MAAM;IAAM;IAChE,MAAM,EAAEE,OAAOC,QAAQ,EAAE,GAAGxB,SAAiB;QAAEqB,MAAM;IAAW;IAEhE,MAAMI,wBACJ,CAAC,CAACD,YAAY,CAAC,CAACjB,sBAAsB,CAACA,mBAAmBmB,QAAQ,CAACF;IAErE,MAAMG,wBAAwB;QAC5B,IAAI,CAACjB,kBAAkB,CAACD,IAAI;YAC1BZ,MAAM+B,KAAK,CAACpB,EAAE;YACd,MAAM,IAAIqB,MAAM;QAClB;QAEAhB,gBAAgB;YACd,IAAI;gBACF,MAAMiB,WAAW,MAAMC,MAAM,GAAGb,aAAa,KAAKD,SAAS,yBAAyB,CAAC,EAAE;oBACrFe,MAAMC,KAAKC,SAAS,CAAC;wBACnBzB,IAAIA;wBACJ0B,YAAYzB;wBACZC,QAAQA,QAAQyB,QAAQ;oBAC1B;oBACAC,QAAQ;gBACV;gBAEA,IAAI,CAACP,SAASQ,EAAE,EAAE;oBAChB,IAAIC,eAAe/B,EAAE;oBACrB,IAAI;wBACF,MAAMgC,YAAa,MAAMV,SAASW,IAAI;wBACtCF,eAAeC,UAAUZ,KAAK;oBAChC,EAAE,OAAOA,OAAO;wBACdc,QAAQd,KAAK,CAAC,8BAA8BA;oBAC9C;oBAEA/B,MAAM+B,KAAK,CAACW;oBACZ;gBACF;gBAEA,MAAMI,OAAQ,MAAMb,SAASW,IAAI;gBAKjC,IAAIE,KAAKC,OAAO,IAAID,KAAKE,QAAQ,EAAE;oBACjCvB,WAAWqB,KAAKC,OAAO;oBACvBxB,YAAYuB,KAAKE,QAAQ;oBACzBhD,MAAMiD,OAAO,CAACtC,EAAE;gBAClB,OAAO;oBACLX,MAAM+B,KAAK,CAACpB,EAAE;gBAChB;YACF,EAAE,OAAOoB,OAAO;gBACdc,QAAQd,KAAK,CAAC,8BAA8BA;gBAC5C/B,MAAM+B,KAAK,CAACpB,EAAE;YAChB;QACF;IACF;IAEA,qBACE,MAACuC;QAAIC,OAAO;YAAEC,SAAS;YAAQC,KAAK;YAAQC,WAAW;QAAO;;0BAC5D,MAACJ;gBAAIC,OAAO;oBAAEI,OAAO;oBAA8BC,MAAM;gBAAI;;kCAC3D,KAACC;kCAAG9C,EAAE;;kCACN,MAAC+C;wBAAGP,OAAO;4BAAEQ,QAAQ;4BAAUC,aAAa;wBAAO;;0CACjD,KAACC;0CAAIlD,EAAE;;0CACP,KAACkD;0CAAIlD,EAAE;;0CACP,KAACkD;0CAAIlD,EAAE;;;;;;0BAGX,KAACuC;gBAAIC,OAAO;oBAAEW,YAAY;oBAAUV,SAAS;gBAAO;0BAClD,cAAA,KAACrD;oBACCgE,UAAUhD,aAAa,CAACH,MAAMgB;oBAC9BoC,MAAMjD,0BAAY,KAACP,6BAAa,KAACD;oBACjC0D,SAASnC;oBACToC,SACEtC,wBACIjB,EAAE,6DAA6D;wBAAEgB;oBAAS,KAC1E,CAACf,KACCD,EAAE,mEACFwD;8BAGPxD,EAAE;;;;;AAKb"}
+{"version":3,"sources":["../../src/components/GenerateAltTextButton.tsx"],"sourcesContent":["'use client'\n\nimport {\n  Button,\n  toast,\n  useConfig,\n  useDocumentInfo,\n  useField,\n  useLocale,\n  useTranslation,\n} from '@payloadcms/ui'\nimport { useTransition } from 'react'\n\nimport type {\n  PluginAltTextTranslationKeys,\n  PluginAltTextTranslations,\n} from '../translations/index.js'\n\nimport { Lightning } from './icons/Lightning.js'\nimport { Spinner } from './icons/Spinner.js'\n\nexport function GenerateAltTextButton({ supportedMimeTypes }: { supportedMimeTypes?: string[] }) {\n  const { t } = useTranslation<PluginAltTextTranslations, PluginAltTextTranslationKeys>()\n  const { id, collectionSlug, docPermissions } = useDocumentInfo()\n  const locale = useLocale()\n  const [isPending, startTransition] = useTransition()\n  const {\n    config: {\n      routes: { api: apiRoute },\n      serverURL,\n    },\n  } = useConfig()\n\n  const { setValue: setKeywords } = useField<string>({ path: 'keywords' })\n  const { setValue: setAltText } = useField<string>({ path: 'alt' })\n  const { value: mimeType } = useField<string>({ path: 'mimeType' })\n\n  const isUnsupportedMimeType =\n    !!mimeType && !!supportedMimeTypes && !supportedMimeTypes.includes(mimeType)\n\n  // Hide the generate button from users who cannot update the document — the\n  // generated alt text would not be persistable by them anyway.\n  if (!docPermissions?.update) {\n    return null\n  }\n\n  const handleGenerateAltText = () => {\n    if (!collectionSlug || !id) {\n      toast.error(t('@jhb.software/payload-alt-text-plugin:cannotGenerateMissingFields'))\n      throw new Error('Missing required fields')\n    }\n\n    startTransition(async () => {\n      try {\n        const response = await fetch(`${serverURL ?? ''}${apiRoute}/alt-text-plugin/generate`, {\n          body: JSON.stringify({\n            id: id as string,\n            collection: collectionSlug,\n            locale: locale?.code ?? null, // sent null when localization is disabled\n          }),\n          method: 'POST',\n        })\n\n        if (!response.ok) {\n          let errorMessage = t('@jhb.software/payload-alt-text-plugin:failedToGenerate')\n          try {\n            const errorData = (await response.json()) as { error: string }\n            errorMessage = errorData.error\n          } catch (error) {\n            console.error('Error generating alt text:', error)\n          }\n\n          toast.error(errorMessage)\n          return\n        }\n\n        const data = (await response.json()) as {\n          altText: string\n          keywords: string[]\n        }\n\n        if (data.altText && data.keywords) {\n          setAltText(data.altText)\n          setKeywords(data.keywords)\n          toast.success(t('@jhb.software/payload-alt-text-plugin:altTextGeneratedSuccess'))\n        } else {\n          toast.error(t('@jhb.software/payload-alt-text-plugin:noAltTextGenerated'))\n        }\n      } catch (error) {\n        console.error('Error generating alt text:', error)\n        toast.error(t('@jhb.software/payload-alt-text-plugin:errorGeneratingAltText'))\n      }\n    })\n  }\n\n  return (\n    <div style={{ display: 'flex', gap: '20px', marginTop: '10px' }}>\n      <div style={{ color: 'var(--theme-elevation-400)', flex: '1' }}>\n        <p>{t('@jhb.software/payload-alt-text-plugin:altTextDescription')}</p>\n        <ol style={{ margin: '10px 0', paddingLeft: '20px' }}>\n          <li>{t('@jhb.software/payload-alt-text-plugin:altTextRequirement1')}</li>\n          <li>{t('@jhb.software/payload-alt-text-plugin:altTextRequirement2')}</li>\n          <li>{t('@jhb.software/payload-alt-text-plugin:altTextRequirement3')}</li>\n        </ol>\n      </div>\n      <div style={{ alignItems: 'center', display: 'flex' }}>\n        <Button\n          disabled={isPending || !id || isUnsupportedMimeType}\n          icon={isPending ? <Spinner /> : <Lightning />}\n          onClick={handleGenerateAltText}\n          tooltip={\n            isUnsupportedMimeType\n              ? t('@jhb.software/payload-alt-text-plugin:unsupportedMimeType', { mimeType })\n              : !id\n                ? t('@jhb.software/payload-alt-text-plugin:pleaseSaveDocumentFirst')\n                : undefined\n          }\n        >\n          {t('@jhb.software/payload-alt-text-plugin:generateAltText')}\n        </Button>\n      </div>\n    </div>\n  )\n}\n"],"names":["Button","toast","useConfig","useDocumentInfo","useField","useLocale","useTranslation","useTransition","Lightning","Spinner","GenerateAltTextButton","supportedMimeTypes","t","id","collectionSlug","docPermissions","locale","isPending","startTransition","config","routes","api","apiRoute","serverURL","setValue","setKeywords","path","setAltText","value","mimeType","isUnsupportedMimeType","includes","update","handleGenerateAltText","error","Error","response","fetch","body","JSON","stringify","collection","code","method","ok","errorMessage","errorData","json","console","data","altText","keywords","success","div","style","display","gap","marginTop","color","flex","p","ol","margin","paddingLeft","li","alignItems","disabled","icon","onClick","tooltip","undefined"],"mappings":"AAAA;;AAEA,SACEA,MAAM,EACNC,KAAK,EACLC,SAAS,EACTC,eAAe,EACfC,QAAQ,EACRC,SAAS,EACTC,cAAc,QACT,iBAAgB;AACvB,SAASC,aAAa,QAAQ,QAAO;AAOrC,SAASC,SAAS,QAAQ,uBAAsB;AAChD,SAASC,OAAO,QAAQ,qBAAoB;AAE5C,OAAO,SAASC,sBAAsB,EAAEC,kBAAkB,EAAqC;IAC7F,MAAM,EAAEC,CAAC,EAAE,GAAGN;IACd,MAAM,EAAEO,EAAE,EAAEC,cAAc,EAAEC,cAAc,EAAE,GAAGZ;IAC/C,MAAMa,SAASX;IACf,MAAM,CAACY,WAAWC,gBAAgB,GAAGX;IACrC,MAAM,EACJY,QAAQ,EACNC,QAAQ,EAAEC,KAAKC,QAAQ,EAAE,EACzBC,SAAS,EACV,EACF,GAAGrB;IAEJ,MAAM,EAAEsB,UAAUC,WAAW,EAAE,GAAGrB,SAAiB;QAAEsB,MAAM;IAAW;IACtE,MAAM,EAAEF,UAAUG,UAAU,EAAE,GAAGvB,SAAiB;QAAEsB,MAAM;IAAM;IAChE,MAAM,EAAEE,OAAOC,QAAQ,EAAE,GAAGzB,SAAiB;QAAEsB,MAAM;IAAW;IAEhE,MAAMI,wBACJ,CAAC,CAACD,YAAY,CAAC,CAAClB,sBAAsB,CAACA,mBAAmBoB,QAAQ,CAACF;IAErE,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,CAACd,gBAAgBiB,QAAQ;QAC3B,OAAO;IACT;IAEA,MAAMC,wBAAwB;QAC5B,IAAI,CAACnB,kBAAkB,CAACD,IAAI;YAC1BZ,MAAMiC,KAAK,CAACtB,EAAE;YACd,MAAM,IAAIuB,MAAM;QAClB;QAEAjB,gBAAgB;YACd,IAAI;gBACF,MAAMkB,WAAW,MAAMC,MAAM,GAAGd,aAAa,KAAKD,SAAS,yBAAyB,CAAC,EAAE;oBACrFgB,MAAMC,KAAKC,SAAS,CAAC;wBACnB3B,IAAIA;wBACJ4B,YAAY3B;wBACZE,QAAQA,QAAQ0B,QAAQ;oBAC1B;oBACAC,QAAQ;gBACV;gBAEA,IAAI,CAACP,SAASQ,EAAE,EAAE;oBAChB,IAAIC,eAAejC,EAAE;oBACrB,IAAI;wBACF,MAAMkC,YAAa,MAAMV,SAASW,IAAI;wBACtCF,eAAeC,UAAUZ,KAAK;oBAChC,EAAE,OAAOA,OAAO;wBACdc,QAAQd,KAAK,CAAC,8BAA8BA;oBAC9C;oBAEAjC,MAAMiC,KAAK,CAACW;oBACZ;gBACF;gBAEA,MAAMI,OAAQ,MAAMb,SAASW,IAAI;gBAKjC,IAAIE,KAAKC,OAAO,IAAID,KAAKE,QAAQ,EAAE;oBACjCxB,WAAWsB,KAAKC,OAAO;oBACvBzB,YAAYwB,KAAKE,QAAQ;oBACzBlD,MAAMmD,OAAO,CAACxC,EAAE;gBAClB,OAAO;oBACLX,MAAMiC,KAAK,CAACtB,EAAE;gBAChB;YACF,EAAE,OAAOsB,OAAO;gBACdc,QAAQd,KAAK,CAAC,8BAA8BA;gBAC5CjC,MAAMiC,KAAK,CAACtB,EAAE;YAChB;QACF;IACF;IAEA,qBACE,MAACyC;QAAIC,OAAO;YAAEC,SAAS;YAAQC,KAAK;YAAQC,WAAW;QAAO;;0BAC5D,MAACJ;gBAAIC,OAAO;oBAAEI,OAAO;oBAA8BC,MAAM;gBAAI;;kCAC3D,KAACC;kCAAGhD,EAAE;;kCACN,MAACiD;wBAAGP,OAAO;4BAAEQ,QAAQ;4BAAUC,aAAa;wBAAO;;0CACjD,KAACC;0CAAIpD,EAAE;;0CACP,KAACoD;0CAAIpD,EAAE;;0CACP,KAACoD;0CAAIpD,EAAE;;;;;;0BAGX,KAACyC;gBAAIC,OAAO;oBAAEW,YAAY;oBAAUV,SAAS;gBAAO;0BAClD,cAAA,KAACvD;oBACCkE,UAAUjD,aAAa,CAACJ,MAAMiB;oBAC9BqC,MAAMlD,0BAAY,KAACR,6BAAa,KAACD;oBACjC4D,SAASnC;oBACToC,SACEvC,wBACIlB,EAAE,6DAA6D;wBAAEiB;oBAAS,KAC1E,CAAChB,KACCD,EAAE,mEACF0D;8BAGP1D,EAAE;;;;;AAKb"}

package/dist/endpoints/bulkGenerateAltTexts.js

@@ -1,4 +1,5 @@
 import pMap from 'p-map';
+import { APIError, Forbidden } from 'payload';
 import { ZodError } from 'zod';
 import { localesFromConfig } from '../utilities/localesFromConfig.js';
 import { matchesMimeType } from '../utilities/mimeTypes.js';
@@ -29,6 +30,17 @@ import { bulkGenerateAltTextsRequestSchema, formatZodError } from './schemas.js'
                     status: 500
                 });
             }
+            // Treat the configured collections as an allowlist. Reject any other
+            // collection before touching the Local API, so the endpoint can only ever
+            // operate on the upload collections the plugin manages.
+            const collectionConfig = pluginConfig.collections.find((entry)=>entry.slug === collection);
+            if (!collectionConfig) {
+                return Response.json({
+                    error: `Collection "${collection}" is not managed by the alt text plugin.`
+                }, {
+                    status: 403
+                });
+            }
             if (!pluginConfig.resolver) {
                 return Response.json({
                     error: 'No alt text resolver configured'
@@ -37,6 +49,19 @@ import { bulkGenerateAltTextsRequestSchema, formatZodError } from './schemas.js'
                 });
             }
             const concurrency = pluginConfig.maxBulkGenerateConcurrency;
+            // De-duplicate so the same image is never generated (and billed) twice,
+            // then bound the batch so a single request cannot fan out into an
+            // unbounded number of paid resolver calls.
+            const uniqueIds = [
+                ...new Set(ids)
+            ];
+            if (uniqueIds.length > pluginConfig.maxBulkGenerateIds) {
+                return Response.json({
+                    error: `Too many ids: ${uniqueIds.length} exceeds the maximum of ${pluginConfig.maxBulkGenerateIds} per request.`
+                }, {
+                    status: 400
+                });
+            }
             // determine target locales based on config
             const locales = localesFromConfig(req.payload.config);
             const targetLocales = locales ?? [
@@ -49,7 +74,7 @@ import { bulkGenerateAltTextsRequestSchema, formatZodError } from './schemas.js'
                     status: 500
                 });
             }
-            await pMap(ids, async (id)=>{
+            await pMap(uniqueIds, async (id)=>{
                 try {
                     await generateAndUpdateAltText({
                         id,
@@ -60,8 +85,15 @@ import { bulkGenerateAltTextsRequestSchema, formatZodError } from './schemas.js'
                         req
                     });
                     updatedDocs++;
-                    console.log(`${updatedDocs}/${ids.length} updated (${Math.round(updatedDocs / ids.length * 100)}%)`);
+                    console.log(`${updatedDocs}/${uniqueIds.length} updated (${Math.round(updatedDocs / uniqueIds.length * 100)}%)`);
                 } catch (error) {
+                    // A Forbidden means the user has no read/update access to the
+                    // collection at all — it applies to every id, so fail the whole
+                    // request with a real 403 instead of silently listing all ids as
+                    // errored. Row-level NotFound stays a per-doc error (partial success).
+                    if (error instanceof Forbidden) {
+                        throw error;
+                    }
                     console.error(`Error generating alt text for ${id}:`, error);
                     erroredDocs.push(id);
                 }
@@ -73,7 +105,7 @@ import { bulkGenerateAltTextsRequestSchema, formatZodError } from './schemas.js'
             }
             return Response.json({
                 erroredDocs,
-                totalDocs: ids.length,
+                totalDocs: uniqueIds.length,
                 updatedDocs
             });
         } catch (error) {
@@ -82,6 +114,15 @@ import { bulkGenerateAltTextsRequestSchema, formatZodError } from './schemas.js'
                     status: 400
                 });
             }
+            // Surface Payload access errors (Forbidden 403) with their real status so
+            // an agent gets an accurate, non-retryable signal instead of a 500.
+            if (error instanceof APIError) {
+                return Response.json({
+                    error: error.message
+                }, {
+                    status: error.status
+                });
+            }
             console.error('Error in bulk generation:', error);
             return Response.json({
                 error: `Error generating alt text: ${error instanceof Error ? error.message : 'Unknown error'}`
@@ -94,14 +135,20 @@ async function generateAndUpdateAltText({ id, collection, locales, payload, plug
     const imageDoc = await payload.findByID({
         id,
         collection,
-        depth: 0
+        depth: 0,
+        // Run under the requesting user's access, not Payload's default
+        // `overrideAccess: true`, so collection-level access control applies.
+        overrideAccess: false,
+        user: req.user
     });
     if (!imageDoc) {
         throw new Error('Image not found');
     }
     const mimeType = 'mimeType' in imageDoc && typeof imageDoc.mimeType === 'string' ? imageDoc.mimeType : undefined;
+    // The handler validates `collection` against the configured collections before
+    // reaching this helper, so a matching entry is guaranteed.
     const collectionConfig = pluginConfig.collections.find((entry)=>entry.slug === collection);
-    if (mimeType && collectionConfig && !matchesMimeType(mimeType, collectionConfig.mimeTypes)) {
+    if (mimeType && !matchesMimeType(mimeType, collectionConfig.mimeTypes)) {
         throw new Error(`Alt text is not tracked for files of type "${mimeType}" in the "${collection}" collection. Tracked types: ${collectionConfig.mimeTypes.join(', ')}.`);
     }
     if (mimeType && pluginConfig.resolver.supportedMimeTypes && !pluginConfig.resolver.supportedMimeTypes.includes(mimeType)) {
@@ -127,7 +174,11 @@ async function generateAndUpdateAltText({ id, collection, locales, payload, plug
                     alt: localeResult.altText,
                     keywords: localeResult.keywords
                 },
-                locale
+                locale,
+                // Run under the requesting user's access, not Payload's default
+                // `overrideAccess: true`, so collection-level access control applies.
+                overrideAccess: false,
+                user: req.user
             });
         }
     }

package/dist/endpoints/bulkGenerateAltTexts.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/endpoints/bulkGenerateAltTexts.ts"],"sourcesContent":["import type { BasePayload, CollectionSlug, PayloadHandler, PayloadRequest } from 'payload'\n\nimport pMap from 'p-map'\nimport { ZodError } from 'zod'\n\nimport type { AltTextPluginConfig } from '../types/AltTextPluginConfig.js'\n\nimport { localesFromConfig } from '../utilities/localesFromConfig.js'\nimport { matchesMimeType } from '../utilities/mimeTypes.js'\nimport { bulkGenerateAltTextsRequestSchema, formatZodError } from './schemas.js'\n\n/**\n * Generates and updates alt text for multiple images in all locales.\n */\nexport const bulkGenerateAltTextsEndpoint =\n  (access: AltTextPluginConfig['access']): PayloadHandler =>\n  async (req: PayloadRequest) => {\n    try {\n      if (!(await access({ req }))) {\n        return Response.json({ error: 'Unauthorized' }, { status: 401 })\n      }\n\n      const data = 'json' in req && typeof req.json === 'function' ? await req.json() : null\n\n      const { collection, ids } = bulkGenerateAltTextsRequestSchema.parse(data)\n\n      let updatedDocs = 0\n      const erroredDocs: (number | string)[] = []\n\n      // Get plugin config from payload config\n      const pluginConfig = req.payload.config.custom?.altTextPluginConfig as\n        | AltTextPluginConfig\n        | undefined\n\n      if (!pluginConfig) {\n        return Response.json({ error: 'Plugin config not found' }, { status: 500 })\n      }\n\n      if (!pluginConfig.resolver) {\n        return Response.json({ error: 'No alt text resolver configured' }, { status: 500 })\n      }\n\n      const concurrency = pluginConfig.maxBulkGenerateConcurrency\n\n      // determine target locales based on config\n      const locales = localesFromConfig(req.payload.config)\n      const targetLocales = locales ?? [pluginConfig.locale!]\n      if (!targetLocales) {\n        return Response.json(\n          {\n            error:\n              'Could not determine target locales for alt text generation. Please check your plugin configuration.',\n          },\n          { status: 500 },\n        )\n      }\n\n      await pMap(\n        ids,\n        async (id) => {\n          try {\n            await generateAndUpdateAltText({\n              id,\n              collection,\n              locales: targetLocales,\n              payload: req.payload,\n              pluginConfig,\n              req,\n            })\n            updatedDocs++\n            console.log(\n              `${updatedDocs}/${ids.length} updated (${Math.round((updatedDocs / ids.length) * 100)}%)`,\n            )\n          } catch (error) {\n            console.error(`Error generating alt text for ${id}:`, error)\n            erroredDocs.push(id)\n          }\n        },\n        { concurrency },\n      )\n\n      if (erroredDocs.length > 0) {\n        console.error(`Failed for: ${erroredDocs.join(', ')}`)\n      }\n\n      return Response.json({\n        erroredDocs,\n        totalDocs: ids.length,\n        updatedDocs,\n      })\n    } catch (error) {\n      if (error instanceof ZodError) {\n        return Response.json(formatZodError(error), { status: 400 })\n      }\n      console.error('Error in bulk generation:', error)\n      return Response.json(\n        {\n          error: `Error generating alt text: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        },\n        { status: 500 },\n      )\n    }\n  }\n\nasync function generateAndUpdateAltText({\n  id,\n  collection,\n  locales,\n  payload,\n  pluginConfig,\n  req,\n}: {\n  collection: CollectionSlug\n  id: number | string\n  locales: string[]\n  payload: BasePayload\n  pluginConfig: AltTextPluginConfig\n  req: PayloadRequest\n}) {\n  const imageDoc = await payload.findByID({\n    id,\n    collection,\n    depth: 0,\n  })\n\n  if (!imageDoc) {\n    throw new Error('Image not found')\n  }\n\n  const mimeType =\n    'mimeType' in imageDoc && typeof imageDoc.mimeType === 'string' ? imageDoc.mimeType : undefined\n\n  const collectionConfig = pluginConfig.collections.find((entry) => entry.slug === collection)\n\n  if (mimeType && collectionConfig && !matchesMimeType(mimeType, collectionConfig.mimeTypes)) {\n    throw new Error(\n      `Alt text is not tracked for files of type \"${mimeType}\" in the \"${collection}\" collection. Tracked types: ${collectionConfig.mimeTypes.join(', ')}.`,\n    )\n  }\n\n  if (\n    mimeType &&\n    pluginConfig.resolver.supportedMimeTypes &&\n    !pluginConfig.resolver.supportedMimeTypes.includes(mimeType)\n  ) {\n    throw new Error(\n      `Alt text generation is not supported for files of type \"${mimeType}\". Supported types: ${pluginConfig.resolver.supportedMimeTypes.join(', ')}.`,\n    )\n  }\n\n  const imageThumbnailUrl = pluginConfig.getImageThumbnail(imageDoc)\n\n  const result = await pluginConfig.resolver.resolveBulk({\n    filename:\n      'filename' in imageDoc && typeof imageDoc.filename === 'string'\n        ? imageDoc.filename\n        : undefined,\n    imageThumbnailUrl,\n    locales,\n    req,\n  })\n\n  if (!result.success) {\n    throw new Error(result.error || 'Failed to generate alt text')\n  }\n\n  for (const locale of locales) {\n    const localeResult = result.results[locale]\n    if (localeResult) {\n      await payload.update({\n        id,\n        collection,\n        data: {\n          alt: localeResult.altText,\n          keywords: localeResult.keywords,\n        },\n        locale,\n      })\n    }\n  }\n}\n"],"names":["pMap","ZodError","localesFromConfig","matchesMimeType","bulkGenerateAltTextsRequestSchema","formatZodError","bulkGenerateAltTextsEndpoint","access","req","Response","json","error","status","data","collection","ids","parse","updatedDocs","erroredDocs","pluginConfig","payload","config","custom","altTextPluginConfig","resolver","concurrency","maxBulkGenerateConcurrency","locales","targetLocales","locale","id","generateAndUpdateAltText","console","log","length","Math","round","push","join","totalDocs","Error","message","imageDoc","findByID","depth","mimeType","undefined","collectionConfig","collections","find","entry","slug","mimeTypes","supportedMimeTypes","includes","imageThumbnailUrl","getImageThumbnail","result","resolveBulk","filename","success","localeResult","results","update","alt","altText","keywords"],"mappings":"AAEA,OAAOA,UAAU,QAAO;AACxB,SAASC,QAAQ,QAAQ,MAAK;AAI9B,SAASC,iBAAiB,QAAQ,oCAAmC;AACrE,SAASC,eAAe,QAAQ,4BAA2B;AAC3D,SAASC,iCAAiC,EAAEC,cAAc,QAAQ,eAAc;AAEhF;;CAEC,GACD,OAAO,MAAMC,+BACX,CAACC,SACD,OAAOC;QACL,IAAI;YACF,IAAI,CAAE,MAAMD,OAAO;gBAAEC;YAAI,IAAK;gBAC5B,OAAOC,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAe,GAAG;oBAAEC,QAAQ;gBAAI;YAChE;YAEA,MAAMC,OAAO,UAAUL,OAAO,OAAOA,IAAIE,IAAI,KAAK,aAAa,MAAMF,IAAIE,IAAI,KAAK;YAElF,MAAM,EAAEI,UAAU,EAAEC,GAAG,EAAE,GAAGX,kCAAkCY,KAAK,CAACH;YAEpE,IAAII,cAAc;YAClB,MAAMC,cAAmC,EAAE;YAE3C,wCAAwC;YACxC,MAAMC,eAAeX,IAAIY,OAAO,CAACC,MAAM,CAACC,MAAM,EAAEC;YAIhD,IAAI,CAACJ,cAAc;gBACjB,OAAOV,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAA0B,GAAG;oBAAEC,QAAQ;gBAAI;YAC3E;YAEA,IAAI,CAACO,aAAaK,QAAQ,EAAE;gBAC1B,OAAOf,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAkC,GAAG;oBAAEC,QAAQ;gBAAI;YACnF;YAEA,MAAMa,cAAcN,aAAaO,0BAA0B;YAE3D,2CAA2C;YAC3C,MAAMC,UAAUzB,kBAAkBM,IAAIY,OAAO,CAACC,MAAM;YACpD,MAAMO,gBAAgBD,WAAW;gBAACR,aAAaU,MAAM;aAAE;YACvD,IAAI,CAACD,eAAe;gBAClB,OAAOnB,SAASC,IAAI,CAClB;oBACEC,OACE;gBACJ,GACA;oBAAEC,QAAQ;gBAAI;YAElB;YAEA,MAAMZ,KACJe,KACA,OAAOe;gBACL,IAAI;oBACF,MAAMC,yBAAyB;wBAC7BD;wBACAhB;wBACAa,SAASC;wBACTR,SAASZ,IAAIY,OAAO;wBACpBD;wBACAX;oBACF;oBACAS;oBACAe,QAAQC,GAAG,CACT,GAAGhB,YAAY,CAAC,EAAEF,IAAImB,MAAM,CAAC,UAAU,EAAEC,KAAKC,KAAK,CAAC,AAACnB,cAAcF,IAAImB,MAAM,GAAI,KAAK,EAAE,CAAC;gBAE7F,EAAE,OAAOvB,OAAO;oBACdqB,QAAQrB,KAAK,CAAC,CAAC,8BAA8B,EAAEmB,GAAG,CAAC,CAAC,EAAEnB;oBACtDO,YAAYmB,IAAI,CAACP;gBACnB;YACF,GACA;gBAAEL;YAAY;YAGhB,IAAIP,YAAYgB,MAAM,GAAG,GAAG;gBAC1BF,QAAQrB,KAAK,CAAC,CAAC,YAAY,EAAEO,YAAYoB,IAAI,CAAC,OAAO;YACvD;YAEA,OAAO7B,SAASC,IAAI,CAAC;gBACnBQ;gBACAqB,WAAWxB,IAAImB,MAAM;gBACrBjB;YACF;QACF,EAAE,OAAON,OAAO;YACd,IAAIA,iBAAiBV,UAAU;gBAC7B,OAAOQ,SAASC,IAAI,CAACL,eAAeM,QAAQ;oBAAEC,QAAQ;gBAAI;YAC5D;YACAoB,QAAQrB,KAAK,CAAC,6BAA6BA;YAC3C,OAAOF,SAASC,IAAI,CAClB;gBACEC,OAAO,CAAC,2BAA2B,EAAEA,iBAAiB6B,QAAQ7B,MAAM8B,OAAO,GAAG,iBAAiB;YACjG,GACA;gBAAE7B,QAAQ;YAAI;QAElB;IACF,EAAC;AAEH,eAAemB,yBAAyB,EACtCD,EAAE,EACFhB,UAAU,EACVa,OAAO,EACPP,OAAO,EACPD,YAAY,EACZX,GAAG,EAQJ;IACC,MAAMkC,WAAW,MAAMtB,QAAQuB,QAAQ,CAAC;QACtCb;QACAhB;QACA8B,OAAO;IACT;IAEA,IAAI,CAACF,UAAU;QACb,MAAM,IAAIF,MAAM;IAClB;IAEA,MAAMK,WACJ,cAAcH,YAAY,OAAOA,SAASG,QAAQ,KAAK,WAAWH,SAASG,QAAQ,GAAGC;IAExF,MAAMC,mBAAmB5B,aAAa6B,WAAW,CAACC,IAAI,CAAC,CAACC,QAAUA,MAAMC,IAAI,KAAKrC;IAEjF,IAAI+B,YAAYE,oBAAoB,CAAC5C,gBAAgB0C,UAAUE,iBAAiBK,SAAS,GAAG;QAC1F,MAAM,IAAIZ,MACR,CAAC,2CAA2C,EAAEK,SAAS,UAAU,EAAE/B,WAAW,6BAA6B,EAAEiC,iBAAiBK,SAAS,CAACd,IAAI,CAAC,MAAM,CAAC,CAAC;IAEzJ;IAEA,IACEO,YACA1B,aAAaK,QAAQ,CAAC6B,kBAAkB,IACxC,CAAClC,aAAaK,QAAQ,CAAC6B,kBAAkB,CAACC,QAAQ,CAACT,WACnD;QACA,MAAM,IAAIL,MACR,CAAC,wDAAwD,EAAEK,SAAS,oBAAoB,EAAE1B,aAAaK,QAAQ,CAAC6B,kBAAkB,CAACf,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpJ;IAEA,MAAMiB,oBAAoBpC,aAAaqC,iBAAiB,CAACd;IAEzD,MAAMe,SAAS,MAAMtC,aAAaK,QAAQ,CAACkC,WAAW,CAAC;QACrDC,UACE,cAAcjB,YAAY,OAAOA,SAASiB,QAAQ,KAAK,WACnDjB,SAASiB,QAAQ,GACjBb;QACNS;QACA5B;QACAnB;IACF;IAEA,IAAI,CAACiD,OAAOG,OAAO,EAAE;QACnB,MAAM,IAAIpB,MAAMiB,OAAO9C,KAAK,IAAI;IAClC;IAEA,KAAK,MAAMkB,UAAUF,QAAS;QAC5B,MAAMkC,eAAeJ,OAAOK,OAAO,CAACjC,OAAO;QAC3C,IAAIgC,cAAc;YAChB,MAAMzC,QAAQ2C,MAAM,CAAC;gBACnBjC;gBACAhB;gBACAD,MAAM;oBACJmD,KAAKH,aAAaI,OAAO;oBACzBC,UAAUL,aAAaK,QAAQ;gBACjC;gBACArC;YACF;QACF;IACF;AACF"}
+{"version":3,"sources":["../../src/endpoints/bulkGenerateAltTexts.ts"],"sourcesContent":["import type { BasePayload, CollectionSlug, PayloadHandler, PayloadRequest } from 'payload'\n\nimport pMap from 'p-map'\nimport { APIError, Forbidden } from 'payload'\nimport { ZodError } from 'zod'\n\nimport type { AltTextPluginConfig } from '../types/AltTextPluginConfig.js'\n\nimport { localesFromConfig } from '../utilities/localesFromConfig.js'\nimport { matchesMimeType } from '../utilities/mimeTypes.js'\nimport { bulkGenerateAltTextsRequestSchema, formatZodError } from './schemas.js'\n\n/**\n * Generates and updates alt text for multiple images in all locales.\n */\nexport const bulkGenerateAltTextsEndpoint =\n  (access: AltTextPluginConfig['access']): PayloadHandler =>\n  async (req: PayloadRequest) => {\n    try {\n      if (!(await access({ req }))) {\n        return Response.json({ error: 'Unauthorized' }, { status: 401 })\n      }\n\n      const data = 'json' in req && typeof req.json === 'function' ? await req.json() : null\n\n      const { collection, ids } = bulkGenerateAltTextsRequestSchema.parse(data)\n\n      let updatedDocs = 0\n      const erroredDocs: (number | string)[] = []\n\n      // Get plugin config from payload config\n      const pluginConfig = req.payload.config.custom?.altTextPluginConfig as\n        | AltTextPluginConfig\n        | undefined\n\n      if (!pluginConfig) {\n        return Response.json({ error: 'Plugin config not found' }, { status: 500 })\n      }\n\n      // Treat the configured collections as an allowlist. Reject any other\n      // collection before touching the Local API, so the endpoint can only ever\n      // operate on the upload collections the plugin manages.\n      const collectionConfig = pluginConfig.collections.find((entry) => entry.slug === collection)\n\n      if (!collectionConfig) {\n        return Response.json(\n          { error: `Collection \"${collection}\" is not managed by the alt text plugin.` },\n          { status: 403 },\n        )\n      }\n\n      if (!pluginConfig.resolver) {\n        return Response.json({ error: 'No alt text resolver configured' }, { status: 500 })\n      }\n\n      const concurrency = pluginConfig.maxBulkGenerateConcurrency\n\n      // De-duplicate so the same image is never generated (and billed) twice,\n      // then bound the batch so a single request cannot fan out into an\n      // unbounded number of paid resolver calls.\n      const uniqueIds = [...new Set(ids)]\n\n      if (uniqueIds.length > pluginConfig.maxBulkGenerateIds) {\n        return Response.json(\n          {\n            error: `Too many ids: ${uniqueIds.length} exceeds the maximum of ${pluginConfig.maxBulkGenerateIds} per request.`,\n          },\n          { status: 400 },\n        )\n      }\n\n      // determine target locales based on config\n      const locales = localesFromConfig(req.payload.config)\n      const targetLocales = locales ?? [pluginConfig.locale!]\n      if (!targetLocales) {\n        return Response.json(\n          {\n            error:\n              'Could not determine target locales for alt text generation. Please check your plugin configuration.',\n          },\n          { status: 500 },\n        )\n      }\n\n      await pMap(\n        uniqueIds,\n        async (id) => {\n          try {\n            await generateAndUpdateAltText({\n              id,\n              collection,\n              locales: targetLocales,\n              payload: req.payload,\n              pluginConfig,\n              req,\n            })\n            updatedDocs++\n            console.log(\n              `${updatedDocs}/${uniqueIds.length} updated (${Math.round((updatedDocs / uniqueIds.length) * 100)}%)`,\n            )\n          } catch (error) {\n            // A Forbidden means the user has no read/update access to the\n            // collection at all — it applies to every id, so fail the whole\n            // request with a real 403 instead of silently listing all ids as\n            // errored. Row-level NotFound stays a per-doc error (partial success).\n            if (error instanceof Forbidden) {\n              throw error\n            }\n            console.error(`Error generating alt text for ${id}:`, error)\n            erroredDocs.push(id)\n          }\n        },\n        { concurrency },\n      )\n\n      if (erroredDocs.length > 0) {\n        console.error(`Failed for: ${erroredDocs.join(', ')}`)\n      }\n\n      return Response.json({\n        erroredDocs,\n        totalDocs: uniqueIds.length,\n        updatedDocs,\n      })\n    } catch (error) {\n      if (error instanceof ZodError) {\n        return Response.json(formatZodError(error), { status: 400 })\n      }\n      // Surface Payload access errors (Forbidden 403) with their real status so\n      // an agent gets an accurate, non-retryable signal instead of a 500.\n      if (error instanceof APIError) {\n        return Response.json({ error: error.message }, { status: error.status })\n      }\n      console.error('Error in bulk generation:', error)\n      return Response.json(\n        {\n          error: `Error generating alt text: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        },\n        { status: 500 },\n      )\n    }\n  }\n\nasync function generateAndUpdateAltText({\n  id,\n  collection,\n  locales,\n  payload,\n  pluginConfig,\n  req,\n}: {\n  collection: CollectionSlug\n  id: number | string\n  locales: string[]\n  payload: BasePayload\n  pluginConfig: AltTextPluginConfig\n  req: PayloadRequest\n}) {\n  const imageDoc = await payload.findByID({\n    id,\n    collection,\n    depth: 0,\n    // Run under the requesting user's access, not Payload's default\n    // `overrideAccess: true`, so collection-level access control applies.\n    overrideAccess: false,\n    user: req.user,\n  })\n\n  if (!imageDoc) {\n    throw new Error('Image not found')\n  }\n\n  const mimeType =\n    'mimeType' in imageDoc && typeof imageDoc.mimeType === 'string' ? imageDoc.mimeType : undefined\n\n  // The handler validates `collection` against the configured collections before\n  // reaching this helper, so a matching entry is guaranteed.\n  const collectionConfig = pluginConfig.collections.find((entry) => entry.slug === collection)!\n\n  if (mimeType && !matchesMimeType(mimeType, collectionConfig.mimeTypes)) {\n    throw new Error(\n      `Alt text is not tracked for files of type \"${mimeType}\" in the \"${collection}\" collection. Tracked types: ${collectionConfig.mimeTypes.join(', ')}.`,\n    )\n  }\n\n  if (\n    mimeType &&\n    pluginConfig.resolver.supportedMimeTypes &&\n    !pluginConfig.resolver.supportedMimeTypes.includes(mimeType)\n  ) {\n    throw new Error(\n      `Alt text generation is not supported for files of type \"${mimeType}\". Supported types: ${pluginConfig.resolver.supportedMimeTypes.join(', ')}.`,\n    )\n  }\n\n  const imageThumbnailUrl = pluginConfig.getImageThumbnail(imageDoc)\n\n  const result = await pluginConfig.resolver.resolveBulk({\n    filename:\n      'filename' in imageDoc && typeof imageDoc.filename === 'string'\n        ? imageDoc.filename\n        : undefined,\n    imageThumbnailUrl,\n    locales,\n    req,\n  })\n\n  if (!result.success) {\n    throw new Error(result.error || 'Failed to generate alt text')\n  }\n\n  for (const locale of locales) {\n    const localeResult = result.results[locale]\n    if (localeResult) {\n      await payload.update({\n        id,\n        collection,\n        data: {\n          alt: localeResult.altText,\n          keywords: localeResult.keywords,\n        },\n        locale,\n        // Run under the requesting user's access, not Payload's default\n        // `overrideAccess: true`, so collection-level access control applies.\n        overrideAccess: false,\n        user: req.user,\n      })\n    }\n  }\n}\n"],"names":["pMap","APIError","Forbidden","ZodError","localesFromConfig","matchesMimeType","bulkGenerateAltTextsRequestSchema","formatZodError","bulkGenerateAltTextsEndpoint","access","req","Response","json","error","status","data","collection","ids","parse","updatedDocs","erroredDocs","pluginConfig","payload","config","custom","altTextPluginConfig","collectionConfig","collections","find","entry","slug","resolver","concurrency","maxBulkGenerateConcurrency","uniqueIds","Set","length","maxBulkGenerateIds","locales","targetLocales","locale","id","generateAndUpdateAltText","console","log","Math","round","push","join","totalDocs","message","Error","imageDoc","findByID","depth","overrideAccess","user","mimeType","undefined","mimeTypes","supportedMimeTypes","includes","imageThumbnailUrl","getImageThumbnail","result","resolveBulk","filename","success","localeResult","results","update","alt","altText","keywords"],"mappings":"AAEA,OAAOA,UAAU,QAAO;AACxB,SAASC,QAAQ,EAAEC,SAAS,QAAQ,UAAS;AAC7C,SAASC,QAAQ,QAAQ,MAAK;AAI9B,SAASC,iBAAiB,QAAQ,oCAAmC;AACrE,SAASC,eAAe,QAAQ,4BAA2B;AAC3D,SAASC,iCAAiC,EAAEC,cAAc,QAAQ,eAAc;AAEhF;;CAEC,GACD,OAAO,MAAMC,+BACX,CAACC,SACD,OAAOC;QACL,IAAI;YACF,IAAI,CAAE,MAAMD,OAAO;gBAAEC;YAAI,IAAK;gBAC5B,OAAOC,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAe,GAAG;oBAAEC,QAAQ;gBAAI;YAChE;YAEA,MAAMC,OAAO,UAAUL,OAAO,OAAOA,IAAIE,IAAI,KAAK,aAAa,MAAMF,IAAIE,IAAI,KAAK;YAElF,MAAM,EAAEI,UAAU,EAAEC,GAAG,EAAE,GAAGX,kCAAkCY,KAAK,CAACH;YAEpE,IAAII,cAAc;YAClB,MAAMC,cAAmC,EAAE;YAE3C,wCAAwC;YACxC,MAAMC,eAAeX,IAAIY,OAAO,CAACC,MAAM,CAACC,MAAM,EAAEC;YAIhD,IAAI,CAACJ,cAAc;gBACjB,OAAOV,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAA0B,GAAG;oBAAEC,QAAQ;gBAAI;YAC3E;YAEA,qEAAqE;YACrE,0EAA0E;YAC1E,wDAAwD;YACxD,MAAMY,mBAAmBL,aAAaM,WAAW,CAACC,IAAI,CAAC,CAACC,QAAUA,MAAMC,IAAI,KAAKd;YAEjF,IAAI,CAACU,kBAAkB;gBACrB,OAAOf,SAASC,IAAI,CAClB;oBAAEC,OAAO,CAAC,YAAY,EAAEG,WAAW,wCAAwC,CAAC;gBAAC,GAC7E;oBAAEF,QAAQ;gBAAI;YAElB;YAEA,IAAI,CAACO,aAAaU,QAAQ,EAAE;gBAC1B,OAAOpB,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAkC,GAAG;oBAAEC,QAAQ;gBAAI;YACnF;YAEA,MAAMkB,cAAcX,aAAaY,0BAA0B;YAE3D,wEAAwE;YACxE,kEAAkE;YAClE,2CAA2C;YAC3C,MAAMC,YAAY;mBAAI,IAAIC,IAAIlB;aAAK;YAEnC,IAAIiB,UAAUE,MAAM,GAAGf,aAAagB,kBAAkB,EAAE;gBACtD,OAAO1B,SAASC,IAAI,CAClB;oBACEC,OAAO,CAAC,cAAc,EAAEqB,UAAUE,MAAM,CAAC,wBAAwB,EAAEf,aAAagB,kBAAkB,CAAC,aAAa,CAAC;gBACnH,GACA;oBAAEvB,QAAQ;gBAAI;YAElB;YAEA,2CAA2C;YAC3C,MAAMwB,UAAUlC,kBAAkBM,IAAIY,OAAO,CAACC,MAAM;YACpD,MAAMgB,gBAAgBD,WAAW;gBAACjB,aAAamB,MAAM;aAAE;YACvD,IAAI,CAACD,eAAe;gBAClB,OAAO5B,SAASC,IAAI,CAClB;oBACEC,OACE;gBACJ,GACA;oBAAEC,QAAQ;gBAAI;YAElB;YAEA,MAAMd,KACJkC,WACA,OAAOO;gBACL,IAAI;oBACF,MAAMC,yBAAyB;wBAC7BD;wBACAzB;wBACAsB,SAASC;wBACTjB,SAASZ,IAAIY,OAAO;wBACpBD;wBACAX;oBACF;oBACAS;oBACAwB,QAAQC,GAAG,CACT,GAAGzB,YAAY,CAAC,EAAEe,UAAUE,MAAM,CAAC,UAAU,EAAES,KAAKC,KAAK,CAAC,AAAC3B,cAAce,UAAUE,MAAM,GAAI,KAAK,EAAE,CAAC;gBAEzG,EAAE,OAAOvB,OAAO;oBACd,8DAA8D;oBAC9D,gEAAgE;oBAChE,iEAAiE;oBACjE,uEAAuE;oBACvE,IAAIA,iBAAiBX,WAAW;wBAC9B,MAAMW;oBACR;oBACA8B,QAAQ9B,KAAK,CAAC,CAAC,8BAA8B,EAAE4B,GAAG,CAAC,CAAC,EAAE5B;oBACtDO,YAAY2B,IAAI,CAACN;gBACnB;YACF,GACA;gBAAET;YAAY;YAGhB,IAAIZ,YAAYgB,MAAM,GAAG,GAAG;gBAC1BO,QAAQ9B,KAAK,CAAC,CAAC,YAAY,EAAEO,YAAY4B,IAAI,CAAC,OAAO;YACvD;YAEA,OAAOrC,SAASC,IAAI,CAAC;gBACnBQ;gBACA6B,WAAWf,UAAUE,MAAM;gBAC3BjB;YACF;QACF,EAAE,OAAON,OAAO;YACd,IAAIA,iBAAiBV,UAAU;gBAC7B,OAAOQ,SAASC,IAAI,CAACL,eAAeM,QAAQ;oBAAEC,QAAQ;gBAAI;YAC5D;YACA,0EAA0E;YAC1E,oEAAoE;YACpE,IAAID,iBAAiBZ,UAAU;gBAC7B,OAAOU,SAASC,IAAI,CAAC;oBAAEC,OAAOA,MAAMqC,OAAO;gBAAC,GAAG;oBAAEpC,QAAQD,MAAMC,MAAM;gBAAC;YACxE;YACA6B,QAAQ9B,KAAK,CAAC,6BAA6BA;YAC3C,OAAOF,SAASC,IAAI,CAClB;gBACEC,OAAO,CAAC,2BAA2B,EAAEA,iBAAiBsC,QAAQtC,MAAMqC,OAAO,GAAG,iBAAiB;YACjG,GACA;gBAAEpC,QAAQ;YAAI;QAElB;IACF,EAAC;AAEH,eAAe4B,yBAAyB,EACtCD,EAAE,EACFzB,UAAU,EACVsB,OAAO,EACPhB,OAAO,EACPD,YAAY,EACZX,GAAG,EAQJ;IACC,MAAM0C,WAAW,MAAM9B,QAAQ+B,QAAQ,CAAC;QACtCZ;QACAzB;QACAsC,OAAO;QACP,gEAAgE;QAChE,sEAAsE;QACtEC,gBAAgB;QAChBC,MAAM9C,IAAI8C,IAAI;IAChB;IAEA,IAAI,CAACJ,UAAU;QACb,MAAM,IAAID,MAAM;IAClB;IAEA,MAAMM,WACJ,cAAcL,YAAY,OAAOA,SAASK,QAAQ,KAAK,WAAWL,SAASK,QAAQ,GAAGC;IAExF,+EAA+E;IAC/E,2DAA2D;IAC3D,MAAMhC,mBAAmBL,aAAaM,WAAW,CAACC,IAAI,CAAC,CAACC,QAAUA,MAAMC,IAAI,KAAKd;IAEjF,IAAIyC,YAAY,CAACpD,gBAAgBoD,UAAU/B,iBAAiBiC,SAAS,GAAG;QACtE,MAAM,IAAIR,MACR,CAAC,2CAA2C,EAAEM,SAAS,UAAU,EAAEzC,WAAW,6BAA6B,EAAEU,iBAAiBiC,SAAS,CAACX,IAAI,CAAC,MAAM,CAAC,CAAC;IAEzJ;IAEA,IACES,YACApC,aAAaU,QAAQ,CAAC6B,kBAAkB,IACxC,CAACvC,aAAaU,QAAQ,CAAC6B,kBAAkB,CAACC,QAAQ,CAACJ,WACnD;QACA,MAAM,IAAIN,MACR,CAAC,wDAAwD,EAAEM,SAAS,oBAAoB,EAAEpC,aAAaU,QAAQ,CAAC6B,kBAAkB,CAACZ,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpJ;IAEA,MAAMc,oBAAoBzC,aAAa0C,iBAAiB,CAACX;IAEzD,MAAMY,SAAS,MAAM3C,aAAaU,QAAQ,CAACkC,WAAW,CAAC;QACrDC,UACE,cAAcd,YAAY,OAAOA,SAASc,QAAQ,KAAK,WACnDd,SAASc,QAAQ,GACjBR;QACNI;QACAxB;QACA5B;IACF;IAEA,IAAI,CAACsD,OAAOG,OAAO,EAAE;QACnB,MAAM,IAAIhB,MAAMa,OAAOnD,KAAK,IAAI;IAClC;IAEA,KAAK,MAAM2B,UAAUF,QAAS;QAC5B,MAAM8B,eAAeJ,OAAOK,OAAO,CAAC7B,OAAO;QAC3C,IAAI4B,cAAc;YAChB,MAAM9C,QAAQgD,MAAM,CAAC;gBACnB7B;gBACAzB;gBACAD,MAAM;oBACJwD,KAAKH,aAAaI,OAAO;oBACzBC,UAAUL,aAAaK,QAAQ;gBACjC;gBACAjC;gBACA,gEAAgE;gBAChE,sEAAsE;gBACtEe,gBAAgB;gBAChBC,MAAM9C,IAAI8C,IAAI;YAChB;QACF;IACF;AACF"}

package/dist/endpoints/generateAltText.js

@@ -1,3 +1,4 @@
+import { APIError } from 'payload';
 import { ZodError } from 'zod';
 import { matchesMimeType } from '../utilities/mimeTypes.js';
 import { formatZodError, generateAltTextRequestSchema } from './schemas.js';
@@ -22,10 +23,33 @@ import { formatZodError, generateAltTextRequestSchema } from './schemas.js';
             }
             const data = 'json' in req && typeof req.json === 'function' ? await req.json() : null;
             const { id, collection, locale, update } = generateAltTextRequestSchema.parse(data);
+            const pluginConfig = req.payload.config.custom?.altTextPluginConfig;
+            if (!pluginConfig) {
+                return Response.json({
+                    error: 'Plugin config not found'
+                }, {
+                    status: 500
+                });
+            }
+            // Treat the configured collections as an allowlist. Reject any other
+            // collection before touching the Local API, so the endpoint can only ever
+            // operate on the upload collections the plugin manages.
+            const collectionConfig = pluginConfig.collections.find((entry)=>entry.slug === collection);
+            if (!collectionConfig) {
+                return Response.json({
+                    error: `Collection "${collection}" is not managed by the alt text plugin.`
+                }, {
+                    status: 403
+                });
+            }
             const imageDoc = await req.payload.findByID({
                 id,
                 collection,
-                depth: 0
+                depth: 0,
+                // Run under the requesting user's access, not Payload's default
+                // `overrideAccess: true`, so collection-level access control applies.
+                overrideAccess: false,
+                user: req.user
             });
             if (!imageDoc) {
                 return Response.json({
@@ -34,14 +58,6 @@ import { formatZodError, generateAltTextRequestSchema } from './schemas.js';
                     status: 404
                 });
             }
-            const pluginConfig = req.payload.config.custom?.altTextPluginConfig;
-            if (!pluginConfig) {
-                return Response.json({
-                    error: 'Plugin config not found'
-                }, {
-                    status: 500
-                });
-            }
             if (!pluginConfig.getImageThumbnail) {
                 return Response.json({
                     error: 'getImageThumbnail function not configured'
@@ -57,8 +73,7 @@ import { formatZodError, generateAltTextRequestSchema } from './schemas.js';
                 });
             }
             const mimeType = 'mimeType' in imageDoc && typeof imageDoc.mimeType === 'string' ? imageDoc.mimeType : undefined;
-            const collectionConfig = pluginConfig.collections.find((entry)=>entry.slug === collection);
-            if (mimeType && collectionConfig && !matchesMimeType(mimeType, collectionConfig.mimeTypes)) {
+            if (mimeType && !matchesMimeType(mimeType, collectionConfig.mimeTypes)) {
                 return Response.json({
                     error: `Alt text is not tracked for files of type "${mimeType}" in the "${collection}" collection. Tracked types: ${collectionConfig.mimeTypes.join(', ')}.`
                 }, {
@@ -72,6 +87,16 @@ import { formatZodError, generateAltTextRequestSchema } from './schemas.js';
                     status: 400
                 });
             }
+            // When localization is enabled, the requested locale must be one of the
+            // configured locales. Reject anything else before it can be written to an
+            // unconfigured locale or interpolated into the resolver's prompt.
+            if (locale != null && pluginConfig.locales.length > 0 && !pluginConfig.locales.includes(locale)) {
+                return Response.json({
+                    error: `Locale "${locale}" is not configured. Configured locales: ${pluginConfig.locales.join(', ')}.`
+                }, {
+                    status: 400
+                });
+            }
             // determine target locale
             const targetLocale = locale ?? pluginConfig.locale;
             if (!targetLocale) {
@@ -103,7 +128,11 @@ import { formatZodError, generateAltTextRequestSchema } from './schemas.js';
                         alt: result.result.altText,
                         keywords: result.result.keywords
                     },
-                    locale: targetLocale
+                    locale: targetLocale,
+                    // Run under the requesting user's access, not Payload's default
+                    // `overrideAccess: true`, so collection-level access control applies.
+                    overrideAccess: false,
+                    user: req.user
                 });
             }
             return Response.json({
@@ -117,6 +146,16 @@ import { formatZodError, generateAltTextRequestSchema } from './schemas.js';
                     status: 400
                 });
             }
+            // Surface Payload access errors (Forbidden 403 / NotFound 404) with their
+            // real status so an agent gets an accurate, non-retryable signal instead
+            // of a misleading 500.
+            if (error instanceof APIError) {
+                return Response.json({
+                    error: error.message
+                }, {
+                    status: error.status
+                });
+            }
             console.error('Error generating alt text:', error);
             return Response.json({
                 error: `Error generating alt text: ${error instanceof Error ? error.message : 'Unknown error'}`

package/dist/endpoints/generateAltText.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/endpoints/generateAltText.ts"],"sourcesContent":["import type { PayloadHandler, PayloadRequest } from 'payload'\n\nimport { ZodError } from 'zod'\n\nimport type { AltTextPluginConfig } from '../types/AltTextPluginConfig.js'\n\nimport { matchesMimeType } from '../utilities/mimeTypes.js'\nimport { formatZodError, generateAltTextRequestSchema } from './schemas.js'\n\n/**\n * Generates alt text for a single image using the configured resolver.\n *\n * By default, returns the result without updating the document (preview mode).\n * Pass `update: true` in the request body to also persist the generated alt text\n * and keywords to the document — useful for programmatic/agent workflows.\n *\n * The response always includes the `id` and `collection` for easy correlation.\n */\nexport const generateAltTextEndpoint =\n  (access: AltTextPluginConfig['access']): PayloadHandler =>\n  async (req: PayloadRequest) => {\n    try {\n      if (!(await access({ req }))) {\n        return Response.json({ error: 'Unauthorized' }, { status: 401 })\n      }\n\n      const data = 'json' in req && typeof req.json === 'function' ? await req.json() : null\n\n      const { id, collection, locale, update } = generateAltTextRequestSchema.parse(data)\n\n      const imageDoc = await req.payload.findByID({\n        id,\n        collection,\n        depth: 0,\n      })\n\n      if (!imageDoc) {\n        return Response.json({ error: 'Image not found' }, { status: 404 })\n      }\n\n      const pluginConfig = req.payload.config.custom?.altTextPluginConfig as\n        | AltTextPluginConfig\n        | undefined\n\n      if (!pluginConfig) {\n        return Response.json({ error: 'Plugin config not found' }, { status: 500 })\n      }\n\n      if (!pluginConfig.getImageThumbnail) {\n        return Response.json(\n          { error: 'getImageThumbnail function not configured' },\n          { status: 500 },\n        )\n      }\n\n      if (!pluginConfig.resolver) {\n        return Response.json({ error: 'No alt text resolver configured' }, { status: 500 })\n      }\n\n      const mimeType =\n        'mimeType' in imageDoc && typeof imageDoc.mimeType === 'string'\n          ? imageDoc.mimeType\n          : undefined\n\n      const collectionConfig = pluginConfig.collections.find((entry) => entry.slug === collection)\n\n      if (mimeType && collectionConfig && !matchesMimeType(mimeType, collectionConfig.mimeTypes)) {\n        return Response.json(\n          {\n            error: `Alt text is not tracked for files of type \"${mimeType}\" in the \"${collection}\" collection. Tracked types: ${collectionConfig.mimeTypes.join(', ')}.`,\n          },\n          { status: 400 },\n        )\n      }\n\n      if (\n        mimeType &&\n        pluginConfig.resolver.supportedMimeTypes &&\n        !pluginConfig.resolver.supportedMimeTypes.includes(mimeType)\n      ) {\n        return Response.json(\n          {\n            error: `Alt text generation is not supported for files of type \"${mimeType}\". Supported types: ${pluginConfig.resolver.supportedMimeTypes.join(', ')}.`,\n          },\n          { status: 400 },\n        )\n      }\n\n      // determine target locale\n      const targetLocale = locale ?? pluginConfig.locale\n      if (!targetLocale) {\n        return Response.json(\n          {\n            error:\n              'Could not determine target locale for alt text generation. Please check your plugin configuration.',\n          },\n          { status: 500 },\n        )\n      }\n\n      const imageThumbnailUrl = pluginConfig.getImageThumbnail(imageDoc)\n\n      const result = await pluginConfig.resolver.resolve({\n        filename:\n          'filename' in imageDoc && typeof imageDoc.filename === 'string'\n            ? imageDoc.filename\n            : undefined,\n        imageThumbnailUrl,\n        locale: targetLocale,\n        req,\n      })\n\n      if (!result.success) {\n        return Response.json(\n          { error: result.error || 'Failed to generate alt text' },\n          { status: 500 },\n        )\n      }\n\n      if (update) {\n        await req.payload.update({\n          id,\n          collection,\n          data: {\n            alt: result.result.altText,\n            keywords: result.result.keywords,\n          },\n          locale: targetLocale,\n        })\n      }\n\n      return Response.json({ id, collection, ...result.result })\n    } catch (error) {\n      if (error instanceof ZodError) {\n        return Response.json(formatZodError(error), { status: 400 })\n      }\n      console.error('Error generating alt text:', error)\n      return Response.json(\n        {\n          error: `Error generating alt text: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        },\n        { status: 500 },\n      )\n    }\n  }\n"],"names":["ZodError","matchesMimeType","formatZodError","generateAltTextRequestSchema","generateAltTextEndpoint","access","req","Response","json","error","status","data","id","collection","locale","update","parse","imageDoc","payload","findByID","depth","pluginConfig","config","custom","altTextPluginConfig","getImageThumbnail","resolver","mimeType","undefined","collectionConfig","collections","find","entry","slug","mimeTypes","join","supportedMimeTypes","includes","targetLocale","imageThumbnailUrl","result","resolve","filename","success","alt","altText","keywords","console","Error","message"],"mappings":"AAEA,SAASA,QAAQ,QAAQ,MAAK;AAI9B,SAASC,eAAe,QAAQ,4BAA2B;AAC3D,SAASC,cAAc,EAAEC,4BAA4B,QAAQ,eAAc;AAE3E;;;;;;;;CAQC,GACD,OAAO,MAAMC,0BACX,CAACC,SACD,OAAOC;QACL,IAAI;YACF,IAAI,CAAE,MAAMD,OAAO;gBAAEC;YAAI,IAAK;gBAC5B,OAAOC,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAe,GAAG;oBAAEC,QAAQ;gBAAI;YAChE;YAEA,MAAMC,OAAO,UAAUL,OAAO,OAAOA,IAAIE,IAAI,KAAK,aAAa,MAAMF,IAAIE,IAAI,KAAK;YAElF,MAAM,EAAEI,EAAE,EAAEC,UAAU,EAAEC,MAAM,EAAEC,MAAM,EAAE,GAAGZ,6BAA6Ba,KAAK,CAACL;YAE9E,MAAMM,WAAW,MAAMX,IAAIY,OAAO,CAACC,QAAQ,CAAC;gBAC1CP;gBACAC;gBACAO,OAAO;YACT;YAEA,IAAI,CAACH,UAAU;gBACb,OAAOV,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAkB,GAAG;oBAAEC,QAAQ;gBAAI;YACnE;YAEA,MAAMW,eAAef,IAAIY,OAAO,CAACI,MAAM,CAACC,MAAM,EAAEC;YAIhD,IAAI,CAACH,cAAc;gBACjB,OAAOd,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAA0B,GAAG;oBAAEC,QAAQ;gBAAI;YAC3E;YAEA,IAAI,CAACW,aAAaI,iBAAiB,EAAE;gBACnC,OAAOlB,SAASC,IAAI,CAClB;oBAAEC,OAAO;gBAA4C,GACrD;oBAAEC,QAAQ;gBAAI;YAElB;YAEA,IAAI,CAACW,aAAaK,QAAQ,EAAE;gBAC1B,OAAOnB,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAkC,GAAG;oBAAEC,QAAQ;gBAAI;YACnF;YAEA,MAAMiB,WACJ,cAAcV,YAAY,OAAOA,SAASU,QAAQ,KAAK,WACnDV,SAASU,QAAQ,GACjBC;YAEN,MAAMC,mBAAmBR,aAAaS,WAAW,CAACC,IAAI,CAAC,CAACC,QAAUA,MAAMC,IAAI,KAAKpB;YAEjF,IAAIc,YAAYE,oBAAoB,CAAC5B,gBAAgB0B,UAAUE,iBAAiBK,SAAS,GAAG;gBAC1F,OAAO3B,SAASC,IAAI,CAClB;oBACEC,OAAO,CAAC,2CAA2C,EAAEkB,SAAS,UAAU,EAAEd,WAAW,6BAA6B,EAAEgB,iBAAiBK,SAAS,CAACC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC9J,GACA;oBAAEzB,QAAQ;gBAAI;YAElB;YAEA,IACEiB,YACAN,aAAaK,QAAQ,CAACU,kBAAkB,IACxC,CAACf,aAAaK,QAAQ,CAACU,kBAAkB,CAACC,QAAQ,CAACV,WACnD;gBACA,OAAOpB,SAASC,IAAI,CAClB;oBACEC,OAAO,CAAC,wDAAwD,EAAEkB,SAAS,oBAAoB,EAAEN,aAAaK,QAAQ,CAACU,kBAAkB,CAACD,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzJ,GACA;oBAAEzB,QAAQ;gBAAI;YAElB;YAEA,0BAA0B;YAC1B,MAAM4B,eAAexB,UAAUO,aAAaP,MAAM;YAClD,IAAI,CAACwB,cAAc;gBACjB,OAAO/B,SAASC,IAAI,CAClB;oBACEC,OACE;gBACJ,GACA;oBAAEC,QAAQ;gBAAI;YAElB;YAEA,MAAM6B,oBAAoBlB,aAAaI,iBAAiB,CAACR;YAEzD,MAAMuB,SAAS,MAAMnB,aAAaK,QAAQ,CAACe,OAAO,CAAC;gBACjDC,UACE,cAAczB,YAAY,OAAOA,SAASyB,QAAQ,KAAK,WACnDzB,SAASyB,QAAQ,GACjBd;gBACNW;gBACAzB,QAAQwB;gBACRhC;YACF;YAEA,IAAI,CAACkC,OAAOG,OAAO,EAAE;gBACnB,OAAOpC,SAASC,IAAI,CAClB;oBAAEC,OAAO+B,OAAO/B,KAAK,IAAI;gBAA8B,GACvD;oBAAEC,QAAQ;gBAAI;YAElB;YAEA,IAAIK,QAAQ;gBACV,MAAMT,IAAIY,OAAO,CAACH,MAAM,CAAC;oBACvBH;oBACAC;oBACAF,MAAM;wBACJiC,KAAKJ,OAAOA,MAAM,CAACK,OAAO;wBAC1BC,UAAUN,OAAOA,MAAM,CAACM,QAAQ;oBAClC;oBACAhC,QAAQwB;gBACV;YACF;YAEA,OAAO/B,SAASC,IAAI,CAAC;gBAAEI;gBAAIC;gBAAY,GAAG2B,OAAOA,MAAM;YAAC;QAC1D,EAAE,OAAO/B,OAAO;YACd,IAAIA,iBAAiBT,UAAU;gBAC7B,OAAOO,SAASC,IAAI,CAACN,eAAeO,QAAQ;oBAAEC,QAAQ;gBAAI;YAC5D;YACAqC,QAAQtC,KAAK,CAAC,8BAA8BA;YAC5C,OAAOF,SAASC,IAAI,CAClB;gBACEC,OAAO,CAAC,2BAA2B,EAAEA,iBAAiBuC,QAAQvC,MAAMwC,OAAO,GAAG,iBAAiB;YACjG,GACA;gBAAEvC,QAAQ;YAAI;QAElB;IACF,EAAC"}
+{"version":3,"sources":["../../src/endpoints/generateAltText.ts"],"sourcesContent":["import type { PayloadHandler, PayloadRequest } from 'payload'\n\nimport { APIError } from 'payload'\nimport { ZodError } from 'zod'\n\nimport type { AltTextPluginConfig } from '../types/AltTextPluginConfig.js'\n\nimport { matchesMimeType } from '../utilities/mimeTypes.js'\nimport { formatZodError, generateAltTextRequestSchema } from './schemas.js'\n\n/**\n * Generates alt text for a single image using the configured resolver.\n *\n * By default, returns the result without updating the document (preview mode).\n * Pass `update: true` in the request body to also persist the generated alt text\n * and keywords to the document — useful for programmatic/agent workflows.\n *\n * The response always includes the `id` and `collection` for easy correlation.\n */\nexport const generateAltTextEndpoint =\n  (access: AltTextPluginConfig['access']): PayloadHandler =>\n  async (req: PayloadRequest) => {\n    try {\n      if (!(await access({ req }))) {\n        return Response.json({ error: 'Unauthorized' }, { status: 401 })\n      }\n\n      const data = 'json' in req && typeof req.json === 'function' ? await req.json() : null\n\n      const { id, collection, locale, update } = generateAltTextRequestSchema.parse(data)\n\n      const pluginConfig = req.payload.config.custom?.altTextPluginConfig as\n        | AltTextPluginConfig\n        | undefined\n\n      if (!pluginConfig) {\n        return Response.json({ error: 'Plugin config not found' }, { status: 500 })\n      }\n\n      // Treat the configured collections as an allowlist. Reject any other\n      // collection before touching the Local API, so the endpoint can only ever\n      // operate on the upload collections the plugin manages.\n      const collectionConfig = pluginConfig.collections.find((entry) => entry.slug === collection)\n\n      if (!collectionConfig) {\n        return Response.json(\n          { error: `Collection \"${collection}\" is not managed by the alt text plugin.` },\n          { status: 403 },\n        )\n      }\n\n      const imageDoc = await req.payload.findByID({\n        id,\n        collection,\n        depth: 0,\n        // Run under the requesting user's access, not Payload's default\n        // `overrideAccess: true`, so collection-level access control applies.\n        overrideAccess: false,\n        user: req.user,\n      })\n\n      if (!imageDoc) {\n        return Response.json({ error: 'Image not found' }, { status: 404 })\n      }\n\n      if (!pluginConfig.getImageThumbnail) {\n        return Response.json(\n          { error: 'getImageThumbnail function not configured' },\n          { status: 500 },\n        )\n      }\n\n      if (!pluginConfig.resolver) {\n        return Response.json({ error: 'No alt text resolver configured' }, { status: 500 })\n      }\n\n      const mimeType =\n        'mimeType' in imageDoc && typeof imageDoc.mimeType === 'string'\n          ? imageDoc.mimeType\n          : undefined\n\n      if (mimeType && !matchesMimeType(mimeType, collectionConfig.mimeTypes)) {\n        return Response.json(\n          {\n            error: `Alt text is not tracked for files of type \"${mimeType}\" in the \"${collection}\" collection. Tracked types: ${collectionConfig.mimeTypes.join(', ')}.`,\n          },\n          { status: 400 },\n        )\n      }\n\n      if (\n        mimeType &&\n        pluginConfig.resolver.supportedMimeTypes &&\n        !pluginConfig.resolver.supportedMimeTypes.includes(mimeType)\n      ) {\n        return Response.json(\n          {\n            error: `Alt text generation is not supported for files of type \"${mimeType}\". Supported types: ${pluginConfig.resolver.supportedMimeTypes.join(', ')}.`,\n          },\n          { status: 400 },\n        )\n      }\n\n      // When localization is enabled, the requested locale must be one of the\n      // configured locales. Reject anything else before it can be written to an\n      // unconfigured locale or interpolated into the resolver's prompt.\n      if (\n        locale != null &&\n        pluginConfig.locales.length > 0 &&\n        !pluginConfig.locales.includes(locale)\n      ) {\n        return Response.json(\n          {\n            error: `Locale \"${locale}\" is not configured. Configured locales: ${pluginConfig.locales.join(', ')}.`,\n          },\n          { status: 400 },\n        )\n      }\n\n      // determine target locale\n      const targetLocale = locale ?? pluginConfig.locale\n      if (!targetLocale) {\n        return Response.json(\n          {\n            error:\n              'Could not determine target locale for alt text generation. Please check your plugin configuration.',\n          },\n          { status: 500 },\n        )\n      }\n\n      const imageThumbnailUrl = pluginConfig.getImageThumbnail(imageDoc)\n\n      const result = await pluginConfig.resolver.resolve({\n        filename:\n          'filename' in imageDoc && typeof imageDoc.filename === 'string'\n            ? imageDoc.filename\n            : undefined,\n        imageThumbnailUrl,\n        locale: targetLocale,\n        req,\n      })\n\n      if (!result.success) {\n        return Response.json(\n          { error: result.error || 'Failed to generate alt text' },\n          { status: 500 },\n        )\n      }\n\n      if (update) {\n        await req.payload.update({\n          id,\n          collection,\n          data: {\n            alt: result.result.altText,\n            keywords: result.result.keywords,\n          },\n          locale: targetLocale,\n          // Run under the requesting user's access, not Payload's default\n          // `overrideAccess: true`, so collection-level access control applies.\n          overrideAccess: false,\n          user: req.user,\n        })\n      }\n\n      return Response.json({ id, collection, ...result.result })\n    } catch (error) {\n      if (error instanceof ZodError) {\n        return Response.json(formatZodError(error), { status: 400 })\n      }\n      // Surface Payload access errors (Forbidden 403 / NotFound 404) with their\n      // real status so an agent gets an accurate, non-retryable signal instead\n      // of a misleading 500.\n      if (error instanceof APIError) {\n        return Response.json({ error: error.message }, { status: error.status })\n      }\n      console.error('Error generating alt text:', error)\n      return Response.json(\n        {\n          error: `Error generating alt text: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        },\n        { status: 500 },\n      )\n    }\n  }\n"],"names":["APIError","ZodError","matchesMimeType","formatZodError","generateAltTextRequestSchema","generateAltTextEndpoint","access","req","Response","json","error","status","data","id","collection","locale","update","parse","pluginConfig","payload","config","custom","altTextPluginConfig","collectionConfig","collections","find","entry","slug","imageDoc","findByID","depth","overrideAccess","user","getImageThumbnail","resolver","mimeType","undefined","mimeTypes","join","supportedMimeTypes","includes","locales","length","targetLocale","imageThumbnailUrl","result","resolve","filename","success","alt","altText","keywords","message","console","Error"],"mappings":"AAEA,SAASA,QAAQ,QAAQ,UAAS;AAClC,SAASC,QAAQ,QAAQ,MAAK;AAI9B,SAASC,eAAe,QAAQ,4BAA2B;AAC3D,SAASC,cAAc,EAAEC,4BAA4B,QAAQ,eAAc;AAE3E;;;;;;;;CAQC,GACD,OAAO,MAAMC,0BACX,CAACC,SACD,OAAOC;QACL,IAAI;YACF,IAAI,CAAE,MAAMD,OAAO;gBAAEC;YAAI,IAAK;gBAC5B,OAAOC,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAe,GAAG;oBAAEC,QAAQ;gBAAI;YAChE;YAEA,MAAMC,OAAO,UAAUL,OAAO,OAAOA,IAAIE,IAAI,KAAK,aAAa,MAAMF,IAAIE,IAAI,KAAK;YAElF,MAAM,EAAEI,EAAE,EAAEC,UAAU,EAAEC,MAAM,EAAEC,MAAM,EAAE,GAAGZ,6BAA6Ba,KAAK,CAACL;YAE9E,MAAMM,eAAeX,IAAIY,OAAO,CAACC,MAAM,CAACC,MAAM,EAAEC;YAIhD,IAAI,CAACJ,cAAc;gBACjB,OAAOV,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAA0B,GAAG;oBAAEC,QAAQ;gBAAI;YAC3E;YAEA,qEAAqE;YACrE,0EAA0E;YAC1E,wDAAwD;YACxD,MAAMY,mBAAmBL,aAAaM,WAAW,CAACC,IAAI,CAAC,CAACC,QAAUA,MAAMC,IAAI,KAAKb;YAEjF,IAAI,CAACS,kBAAkB;gBACrB,OAAOf,SAASC,IAAI,CAClB;oBAAEC,OAAO,CAAC,YAAY,EAAEI,WAAW,wCAAwC,CAAC;gBAAC,GAC7E;oBAAEH,QAAQ;gBAAI;YAElB;YAEA,MAAMiB,WAAW,MAAMrB,IAAIY,OAAO,CAACU,QAAQ,CAAC;gBAC1ChB;gBACAC;gBACAgB,OAAO;gBACP,gEAAgE;gBAChE,sEAAsE;gBACtEC,gBAAgB;gBAChBC,MAAMzB,IAAIyB,IAAI;YAChB;YAEA,IAAI,CAACJ,UAAU;gBACb,OAAOpB,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAkB,GAAG;oBAAEC,QAAQ;gBAAI;YACnE;YAEA,IAAI,CAACO,aAAae,iBAAiB,EAAE;gBACnC,OAAOzB,SAASC,IAAI,CAClB;oBAAEC,OAAO;gBAA4C,GACrD;oBAAEC,QAAQ;gBAAI;YAElB;YAEA,IAAI,CAACO,aAAagB,QAAQ,EAAE;gBAC1B,OAAO1B,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAkC,GAAG;oBAAEC,QAAQ;gBAAI;YACnF;YAEA,MAAMwB,WACJ,cAAcP,YAAY,OAAOA,SAASO,QAAQ,KAAK,WACnDP,SAASO,QAAQ,GACjBC;YAEN,IAAID,YAAY,CAACjC,gBAAgBiC,UAAUZ,iBAAiBc,SAAS,GAAG;gBACtE,OAAO7B,SAASC,IAAI,CAClB;oBACEC,OAAO,CAAC,2CAA2C,EAAEyB,SAAS,UAAU,EAAErB,WAAW,6BAA6B,EAAES,iBAAiBc,SAAS,CAACC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC9J,GACA;oBAAE3B,QAAQ;gBAAI;YAElB;YAEA,IACEwB,YACAjB,aAAagB,QAAQ,CAACK,kBAAkB,IACxC,CAACrB,aAAagB,QAAQ,CAACK,kBAAkB,CAACC,QAAQ,CAACL,WACnD;gBACA,OAAO3B,SAASC,IAAI,CAClB;oBACEC,OAAO,CAAC,wDAAwD,EAAEyB,SAAS,oBAAoB,EAAEjB,aAAagB,QAAQ,CAACK,kBAAkB,CAACD,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzJ,GACA;oBAAE3B,QAAQ;gBAAI;YAElB;YAEA,wEAAwE;YACxE,0EAA0E;YAC1E,kEAAkE;YAClE,IACEI,UAAU,QACVG,aAAauB,OAAO,CAACC,MAAM,GAAG,KAC9B,CAACxB,aAAauB,OAAO,CAACD,QAAQ,CAACzB,SAC/B;gBACA,OAAOP,SAASC,IAAI,CAClB;oBACEC,OAAO,CAAC,QAAQ,EAAEK,OAAO,yCAAyC,EAAEG,aAAauB,OAAO,CAACH,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxG,GACA;oBAAE3B,QAAQ;gBAAI;YAElB;YAEA,0BAA0B;YAC1B,MAAMgC,eAAe5B,UAAUG,aAAaH,MAAM;YAClD,IAAI,CAAC4B,cAAc;gBACjB,OAAOnC,SAASC,IAAI,CAClB;oBACEC,OACE;gBACJ,GACA;oBAAEC,QAAQ;gBAAI;YAElB;YAEA,MAAMiC,oBAAoB1B,aAAae,iBAAiB,CAACL;YAEzD,MAAMiB,SAAS,MAAM3B,aAAagB,QAAQ,CAACY,OAAO,CAAC;gBACjDC,UACE,cAAcnB,YAAY,OAAOA,SAASmB,QAAQ,KAAK,WACnDnB,SAASmB,QAAQ,GACjBX;gBACNQ;gBACA7B,QAAQ4B;gBACRpC;YACF;YAEA,IAAI,CAACsC,OAAOG,OAAO,EAAE;gBACnB,OAAOxC,SAASC,IAAI,CAClB;oBAAEC,OAAOmC,OAAOnC,KAAK,IAAI;gBAA8B,GACvD;oBAAEC,QAAQ;gBAAI;YAElB;YAEA,IAAIK,QAAQ;gBACV,MAAMT,IAAIY,OAAO,CAACH,MAAM,CAAC;oBACvBH;oBACAC;oBACAF,MAAM;wBACJqC,KAAKJ,OAAOA,MAAM,CAACK,OAAO;wBAC1BC,UAAUN,OAAOA,MAAM,CAACM,QAAQ;oBAClC;oBACApC,QAAQ4B;oBACR,gEAAgE;oBAChE,sEAAsE;oBACtEZ,gBAAgB;oBAChBC,MAAMzB,IAAIyB,IAAI;gBAChB;YACF;YAEA,OAAOxB,SAASC,IAAI,CAAC;gBAAEI;gBAAIC;gBAAY,GAAG+B,OAAOA,MAAM;YAAC;QAC1D,EAAE,OAAOnC,OAAO;YACd,IAAIA,iBAAiBT,UAAU;gBAC7B,OAAOO,SAASC,IAAI,CAACN,eAAeO,QAAQ;oBAAEC,QAAQ;gBAAI;YAC5D;YACA,0EAA0E;YAC1E,yEAAyE;YACzE,uBAAuB;YACvB,IAAID,iBAAiBV,UAAU;gBAC7B,OAAOQ,SAASC,IAAI,CAAC;oBAAEC,OAAOA,MAAM0C,OAAO;gBAAC,GAAG;oBAAEzC,QAAQD,MAAMC,MAAM;gBAAC;YACxE;YACA0C,QAAQ3C,KAAK,CAAC,8BAA8BA;YAC5C,OAAOF,SAASC,IAAI,CAClB;gBACEC,OAAO,CAAC,2BAA2B,EAAEA,iBAAiB4C,QAAQ5C,MAAM0C,OAAO,GAAG,iBAAiB;YACjG,GACA;gBAAEzC,QAAQ;YAAI;QAElB;IACF,EAAC"}

package/dist/plugin.js

@@ -30,16 +30,22 @@ export const payloadAltTextPlugin = (incomingPluginConfig)=>(incomingConfig)=>{
         const locales = config.localization ? config.localization.locales.map((localeConfig)=>typeof localeConfig === 'string' ? localeConfig : localeConfig.code) : [];
         const enableHealthCheck = incomingPluginConfig.healthCheck !== false;
         const normalizedCollections = normalizeCollectionsConfig(incomingPluginConfig.collections);
+        const access = incomingPluginConfig.access ?? (({ req })=>!!req.user);
+        // A function form of `healthCheck` doubles as the health report's access
+        // gate; otherwise it falls back to the shared `access`.
+        const healthCheckAccess = typeof incomingPluginConfig.healthCheck === 'function' ? incomingPluginConfig.healthCheck : access;
         const pluginConfig = {
-            access: incomingPluginConfig.access ?? (({ req })=>!!req.user),
+            access,
             collections: normalizedCollections,
             enabled: incomingPluginConfig.enabled ?? true,
             fieldsOverride: incomingPluginConfig.fieldsOverride,
             getImageThumbnail: incomingPluginConfig.getImageThumbnail,
             healthCheck: enableHealthCheck,
+            healthCheckAccess,
             locale: incomingPluginConfig.locale,
             locales,
             maxBulkGenerateConcurrency: incomingPluginConfig.maxBulkGenerateConcurrency ?? 16,
+            maxBulkGenerateIds: incomingPluginConfig.maxBulkGenerateIds ?? 100,
             resolver: incomingPluginConfig.resolver
         };
         // Validate locale requirement for non-localized mode
@@ -152,7 +158,7 @@ export const payloadAltTextPlugin = (incomingPluginConfig)=>(incomingConfig)=>{
                 },
                 ...enableHealthCheck ? [
                     {
-                        handler: altTextHealthEndpoint(pluginConfig.access),
+                        handler: altTextHealthEndpoint(pluginConfig.healthCheckAccess),
                         method: 'get',
                         path: '/alt-text-plugin/health'
                     }

package/dist/plugin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/plugin.ts"],"sourcesContent":["import type { Config, Widget } from 'payload'\n\nimport type {\n  AltTextPluginConfig,\n  IncomingAltTextPluginConfig,\n} from './types/AltTextPluginConfig.js'\n\nimport { altTextHealthEndpoint } from './endpoints/altTextHealth.js'\nimport { bulkGenerateAltTextsEndpoint } from './endpoints/bulkGenerateAltTexts.js'\nimport { generateAltTextEndpoint } from './endpoints/generateAltText.js'\nimport { altTextField } from './fields/altTextField.js'\nimport { keywordsField } from './fields/keywordsField.js'\nimport {\n  createRevalidateAltTextHealthAfterChangeHook,\n  createRevalidateAltTextHealthAfterDeleteHook,\n} from './hooks/revalidateAltTextHealth.js'\nimport { translations } from './translations/index.js'\nimport { normalizeCollectionsConfig } from './utilities/mimeTypes.js'\nimport { deepMergeSimple } from './utils/deepMergeSimple.js'\n\nconst altTextHealthWidgetDefinition = {\n  slug: 'alt-text-health',\n  // `Component` was renamed from `ComponentPath` in Payload 3.79.0. Set both for backward compatibility.\n  Component: '@jhb.software/payload-alt-text-plugin/server#AltTextHealthWidget',\n  ComponentPath: '@jhb.software/payload-alt-text-plugin/server#AltTextHealthWidget',\n  label: {\n    de: 'Alternativtexte Zustand',\n    en: 'Alt text health',\n  },\n  maxWidth: 'full',\n  minWidth: 'medium',\n} satisfies { ComponentPath: string } & Widget\n\nexport const payloadAltTextPlugin =\n  (incomingPluginConfig: IncomingAltTextPluginConfig) =>\n  (incomingConfig: Config): Config => {\n    const config = { ...incomingConfig }\n\n    // If the plugin is disabled, return the config without modifying it\n    if (incomingPluginConfig.enabled === false) {\n      return config\n    }\n\n    const locales = config.localization\n      ? config.localization.locales.map((localeConfig) =>\n          typeof localeConfig === 'string' ? localeConfig : localeConfig.code,\n        )\n      : []\n\n    const enableHealthCheck = incomingPluginConfig.healthCheck !== false\n\n    const normalizedCollections = normalizeCollectionsConfig(incomingPluginConfig.collections)\n\n    const pluginConfig: AltTextPluginConfig = {\n      access: incomingPluginConfig.access ?? (({ req }) => !!req.user),\n      collections: normalizedCollections,\n      enabled: incomingPluginConfig.enabled ?? true,\n      fieldsOverride: incomingPluginConfig.fieldsOverride,\n      getImageThumbnail: incomingPluginConfig.getImageThumbnail,\n      healthCheck: enableHealthCheck,\n      locale: incomingPluginConfig.locale,\n      locales,\n      maxBulkGenerateConcurrency: incomingPluginConfig.maxBulkGenerateConcurrency ?? 16,\n      resolver: incomingPluginConfig.resolver,\n    }\n\n    // Validate locale requirement for non-localized mode\n    if (locales.length === 0 && !incomingPluginConfig.locale) {\n      throw new Error(\n        'The alt-text plugin requires a \"locale\" option when Payload localization is disabled. ' +\n          'Please add { locale: \"en\" } (or your preferred locale) to your plugin configuration.',\n      )\n    }\n\n    const collectionConfigBySlug = new Map<string, (typeof normalizedCollections)[number]>(\n      normalizedCollections.map((entry) => [entry.slug, entry]),\n    )\n\n    // Ensure collections array exists\n    config.collections = config.collections || []\n\n    // Map over collections and inject AI alt text fields into specified ones\n    config.collections = config.collections.map((collectionConfig) => {\n      const altTextCollectionConfig = collectionConfigBySlug.get(collectionConfig.slug)\n\n      if (altTextCollectionConfig) {\n        if (!collectionConfig.upload) {\n          console.warn(\n            `AI Alt Text Plugin: Collection \"${collectionConfig.slug}\" is not an upload collection. Skipping field injection.`,\n          )\n          return collectionConfig\n        }\n\n        const defaultFields = [\n          altTextField({\n            localized: Boolean(config.localization),\n            supportedMimeTypes: pluginConfig.resolver.supportedMimeTypes,\n            trackedMimeTypes: altTextCollectionConfig.mimeTypes,\n            validate: altTextCollectionConfig.validate,\n          }),\n          keywordsField({\n            localized: Boolean(config.localization),\n          }),\n        ]\n\n        const fields =\n          incomingPluginConfig.fieldsOverride &&\n          typeof incomingPluginConfig.fieldsOverride === 'function'\n            ? incomingPluginConfig.fieldsOverride({ defaultFields })\n            : defaultFields\n\n        return {\n          ...collectionConfig,\n          admin: {\n            ...collectionConfig.admin,\n            components: {\n              ...(collectionConfig.admin?.components ?? {}),\n              // TODO: use the beforeBulkAction custom component slot once available: https://github.com/payloadcms/payload/pull/11719\n              beforeListTable: [\n                ...(collectionConfig.admin?.components?.beforeListTable ?? []),\n                {\n                  path: '@jhb.software/payload-alt-text-plugin/client#BulkGenerateAltTextsButton',\n                  props: {\n                    collectionSlug: collectionConfig.slug,\n                  },\n                },\n              ],\n            },\n            // enhance the search by adding the filename, keywords and alt fields (if the user has not provided their own listSearchableFields)\n            listSearchableFields: collectionConfig.admin?.listSearchableFields ?? [\n              'filename',\n              'keywords',\n              'alt',\n            ],\n          },\n          fields: [...(collectionConfig.fields ?? []), ...fields],\n          hooks: {\n            ...collectionConfig.hooks,\n            ...(enableHealthCheck && {\n              afterChange: [\n                ...(collectionConfig.hooks?.afterChange ?? []),\n                createRevalidateAltTextHealthAfterChangeHook(collectionConfig.slug),\n              ],\n              afterDelete: [\n                ...(collectionConfig.hooks?.afterDelete ?? []),\n                createRevalidateAltTextHealthAfterDeleteHook(collectionConfig.slug),\n              ],\n            }),\n          },\n        }\n      }\n\n      return collectionConfig\n    })\n\n    const existingWidgets = config.admin?.dashboard?.widgets ?? []\n    const widgets =\n      !enableHealthCheck || existingWidgets.some((widget) => widget.slug === 'alt-text-health')\n        ? existingWidgets\n        : [...existingWidgets, altTextHealthWidgetDefinition]\n\n    return {\n      ...config,\n      admin: {\n        ...config.admin,\n        dashboard: {\n          ...config.admin?.dashboard,\n          widgets,\n        },\n      },\n      custom: {\n        ...config.custom,\n        // Make plugin config available in hooks/actions\n        altTextPluginConfig: pluginConfig,\n      },\n      endpoints: [\n        ...(config.endpoints ?? []),\n        {\n          handler: generateAltTextEndpoint(pluginConfig.access),\n          method: 'post',\n          path: '/alt-text-plugin/generate',\n        },\n        {\n          handler: bulkGenerateAltTextsEndpoint(pluginConfig.access),\n          method: 'post',\n          path: '/alt-text-plugin/generate/bulk',\n        },\n        ...(enableHealthCheck\n          ? [\n              {\n                handler: altTextHealthEndpoint(pluginConfig.access),\n                method: 'get' as const,\n                path: '/alt-text-plugin/health',\n              },\n            ]\n          : []),\n      ],\n      i18n: {\n        ...config.i18n,\n        translations: deepMergeSimple(translations, incomingConfig.i18n?.translations ?? {}),\n      },\n    }\n  }\n"],"names":["altTextHealthEndpoint","bulkGenerateAltTextsEndpoint","generateAltTextEndpoint","altTextField","keywordsField","createRevalidateAltTextHealthAfterChangeHook","createRevalidateAltTextHealthAfterDeleteHook","translations","normalizeCollectionsConfig","deepMergeSimple","altTextHealthWidgetDefinition","slug","Component","ComponentPath","label","de","en","maxWidth","minWidth","payloadAltTextPlugin","incomingPluginConfig","incomingConfig","config","enabled","locales","localization","map","localeConfig","code","enableHealthCheck","healthCheck","normalizedCollections","collections","pluginConfig","access","req","user","fieldsOverride","getImageThumbnail","locale","maxBulkGenerateConcurrency","resolver","length","Error","collectionConfigBySlug","Map","entry","collectionConfig","altTextCollectionConfig","get","upload","console","warn","defaultFields","localized","Boolean","supportedMimeTypes","trackedMimeTypes","mimeTypes","validate","fields","admin","components","beforeListTable","path","props","collectionSlug","listSearchableFields","hooks","afterChange","afterDelete","existingWidgets","dashboard","widgets","some","widget","custom","altTextPluginConfig","endpoints","handler","method","i18n"],"mappings":"AAOA,SAASA,qBAAqB,QAAQ,+BAA8B;AACpE,SAASC,4BAA4B,QAAQ,sCAAqC;AAClF,SAASC,uBAAuB,QAAQ,iCAAgC;AACxE,SAASC,YAAY,QAAQ,2BAA0B;AACvD,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SACEC,4CAA4C,EAC5CC,4CAA4C,QACvC,qCAAoC;AAC3C,SAASC,YAAY,QAAQ,0BAAyB;AACtD,SAASC,0BAA0B,QAAQ,2BAA0B;AACrE,SAASC,eAAe,QAAQ,6BAA4B;AAE5D,MAAMC,gCAAgC;IACpCC,MAAM;IACN,uGAAuG;IACvGC,WAAW;IACXC,eAAe;IACfC,OAAO;QACLC,IAAI;QACJC,IAAI;IACN;IACAC,UAAU;IACVC,UAAU;AACZ;AAEA,OAAO,MAAMC,uBACX,CAACC,uBACD,CAACC;QACC,MAAMC,SAAS;YAAE,GAAGD,cAAc;QAAC;QAEnC,oEAAoE;QACpE,IAAID,qBAAqBG,OAAO,KAAK,OAAO;YAC1C,OAAOD;QACT;QAEA,MAAME,UAAUF,OAAOG,YAAY,GAC/BH,OAAOG,YAAY,CAACD,OAAO,CAACE,GAAG,CAAC,CAACC,eAC/B,OAAOA,iBAAiB,WAAWA,eAAeA,aAAaC,IAAI,IAErE,EAAE;QAEN,MAAMC,oBAAoBT,qBAAqBU,WAAW,KAAK;QAE/D,MAAMC,wBAAwBvB,2BAA2BY,qBAAqBY,WAAW;QAEzF,MAAMC,eAAoC;YACxCC,QAAQd,qBAAqBc,MAAM,IAAK,CAAA,CAAC,EAAEC,GAAG,EAAE,GAAK,CAAC,CAACA,IAAIC,IAAI,AAAD;YAC9DJ,aAAaD;YACbR,SAASH,qBAAqBG,OAAO,IAAI;YACzCc,gBAAgBjB,qBAAqBiB,cAAc;YACnDC,mBAAmBlB,qBAAqBkB,iBAAiB;YACzDR,aAAaD;YACbU,QAAQnB,qBAAqBmB,MAAM;YACnCf;YACAgB,4BAA4BpB,qBAAqBoB,0BAA0B,IAAI;YAC/EC,UAAUrB,qBAAqBqB,QAAQ;QACzC;QAEA,qDAAqD;QACrD,IAAIjB,QAAQkB,MAAM,KAAK,KAAK,CAACtB,qBAAqBmB,MAAM,EAAE;YACxD,MAAM,IAAII,MACR,2FACE;QAEN;QAEA,MAAMC,yBAAyB,IAAIC,IACjCd,sBAAsBL,GAAG,CAAC,CAACoB,QAAU;gBAACA,MAAMnC,IAAI;gBAAEmC;aAAM;QAG1D,kCAAkC;QAClCxB,OAAOU,WAAW,GAAGV,OAAOU,WAAW,IAAI,EAAE;QAE7C,yEAAyE;QACzEV,OAAOU,WAAW,GAAGV,OAAOU,WAAW,CAACN,GAAG,CAAC,CAACqB;YAC3C,MAAMC,0BAA0BJ,uBAAuBK,GAAG,CAACF,iBAAiBpC,IAAI;YAEhF,IAAIqC,yBAAyB;gBAC3B,IAAI,CAACD,iBAAiBG,MAAM,EAAE;oBAC5BC,QAAQC,IAAI,CACV,CAAC,gCAAgC,EAAEL,iBAAiBpC,IAAI,CAAC,wDAAwD,CAAC;oBAEpH,OAAOoC;gBACT;gBAEA,MAAMM,gBAAgB;oBACpBlD,aAAa;wBACXmD,WAAWC,QAAQjC,OAAOG,YAAY;wBACtC+B,oBAAoBvB,aAAaQ,QAAQ,CAACe,kBAAkB;wBAC5DC,kBAAkBT,wBAAwBU,SAAS;wBACnDC,UAAUX,wBAAwBW,QAAQ;oBAC5C;oBACAvD,cAAc;wBACZkD,WAAWC,QAAQjC,OAAOG,YAAY;oBACxC;iBACD;gBAED,MAAMmC,SACJxC,qBAAqBiB,cAAc,IACnC,OAAOjB,qBAAqBiB,cAAc,KAAK,aAC3CjB,qBAAqBiB,cAAc,CAAC;oBAAEgB;gBAAc,KACpDA;gBAEN,OAAO;oBACL,GAAGN,gBAAgB;oBACnBc,OAAO;wBACL,GAAGd,iBAAiBc,KAAK;wBACzBC,YAAY;4BACV,GAAIf,iBAAiBc,KAAK,EAAEC,cAAc,CAAC,CAAC;4BAC5C,wHAAwH;4BACxHC,iBAAiB;mCACXhB,iBAAiBc,KAAK,EAAEC,YAAYC,mBAAmB,EAAE;gCAC7D;oCACEC,MAAM;oCACNC,OAAO;wCACLC,gBAAgBnB,iBAAiBpC,IAAI;oCACvC;gCACF;6BACD;wBACH;wBACA,mIAAmI;wBACnIwD,sBAAsBpB,iBAAiBc,KAAK,EAAEM,wBAAwB;4BACpE;4BACA;4BACA;yBACD;oBACH;oBACAP,QAAQ;2BAAKb,iBAAiBa,MAAM,IAAI,EAAE;2BAAMA;qBAAO;oBACvDQ,OAAO;wBACL,GAAGrB,iBAAiBqB,KAAK;wBACzB,GAAIvC,qBAAqB;4BACvBwC,aAAa;mCACPtB,iBAAiBqB,KAAK,EAAEC,eAAe,EAAE;gCAC7ChE,6CAA6C0C,iBAAiBpC,IAAI;6BACnE;4BACD2D,aAAa;mCACPvB,iBAAiBqB,KAAK,EAAEE,eAAe,EAAE;gCAC7ChE,6CAA6CyC,iBAAiBpC,IAAI;6BACnE;wBACH,CAAC;oBACH;gBACF;YACF;YAEA,OAAOoC;QACT;QAEA,MAAMwB,kBAAkBjD,OAAOuC,KAAK,EAAEW,WAAWC,WAAW,EAAE;QAC9D,MAAMA,UACJ,CAAC5C,qBAAqB0C,gBAAgBG,IAAI,CAAC,CAACC,SAAWA,OAAOhE,IAAI,KAAK,qBACnE4D,kBACA;eAAIA;YAAiB7D;SAA8B;QAEzD,OAAO;YACL,GAAGY,MAAM;YACTuC,OAAO;gBACL,GAAGvC,OAAOuC,KAAK;gBACfW,WAAW;oBACT,GAAGlD,OAAOuC,KAAK,EAAEW,SAAS;oBAC1BC;gBACF;YACF;YACAG,QAAQ;gBACN,GAAGtD,OAAOsD,MAAM;gBAChB,gDAAgD;gBAChDC,qBAAqB5C;YACvB;YACA6C,WAAW;mBACLxD,OAAOwD,SAAS,IAAI,EAAE;gBAC1B;oBACEC,SAAS7E,wBAAwB+B,aAAaC,MAAM;oBACpD8C,QAAQ;oBACRhB,MAAM;gBACR;gBACA;oBACEe,SAAS9E,6BAA6BgC,aAAaC,MAAM;oBACzD8C,QAAQ;oBACRhB,MAAM;gBACR;mBACInC,oBACA;oBACE;wBACEkD,SAAS/E,sBAAsBiC,aAAaC,MAAM;wBAClD8C,QAAQ;wBACRhB,MAAM;oBACR;iBACD,GACD,EAAE;aACP;YACDiB,MAAM;gBACJ,GAAG3D,OAAO2D,IAAI;gBACd1E,cAAcE,gBAAgBF,cAAcc,eAAe4D,IAAI,EAAE1E,gBAAgB,CAAC;YACpF;QACF;IACF,EAAC"}
+{"version":3,"sources":["../src/plugin.ts"],"sourcesContent":["import type { Config, Widget } from 'payload'\n\nimport type {\n  AltTextPluginConfig,\n  IncomingAltTextPluginConfig,\n} from './types/AltTextPluginConfig.js'\n\nimport { altTextHealthEndpoint } from './endpoints/altTextHealth.js'\nimport { bulkGenerateAltTextsEndpoint } from './endpoints/bulkGenerateAltTexts.js'\nimport { generateAltTextEndpoint } from './endpoints/generateAltText.js'\nimport { altTextField } from './fields/altTextField.js'\nimport { keywordsField } from './fields/keywordsField.js'\nimport {\n  createRevalidateAltTextHealthAfterChangeHook,\n  createRevalidateAltTextHealthAfterDeleteHook,\n} from './hooks/revalidateAltTextHealth.js'\nimport { translations } from './translations/index.js'\nimport { normalizeCollectionsConfig } from './utilities/mimeTypes.js'\nimport { deepMergeSimple } from './utils/deepMergeSimple.js'\n\nconst altTextHealthWidgetDefinition = {\n  slug: 'alt-text-health',\n  // `Component` was renamed from `ComponentPath` in Payload 3.79.0. Set both for backward compatibility.\n  Component: '@jhb.software/payload-alt-text-plugin/server#AltTextHealthWidget',\n  ComponentPath: '@jhb.software/payload-alt-text-plugin/server#AltTextHealthWidget',\n  label: {\n    de: 'Alternativtexte Zustand',\n    en: 'Alt text health',\n  },\n  maxWidth: 'full',\n  minWidth: 'medium',\n} satisfies { ComponentPath: string } & Widget\n\nexport const payloadAltTextPlugin =\n  (incomingPluginConfig: IncomingAltTextPluginConfig) =>\n  (incomingConfig: Config): Config => {\n    const config = { ...incomingConfig }\n\n    // If the plugin is disabled, return the config without modifying it\n    if (incomingPluginConfig.enabled === false) {\n      return config\n    }\n\n    const locales = config.localization\n      ? config.localization.locales.map((localeConfig) =>\n          typeof localeConfig === 'string' ? localeConfig : localeConfig.code,\n        )\n      : []\n\n    const enableHealthCheck = incomingPluginConfig.healthCheck !== false\n\n    const normalizedCollections = normalizeCollectionsConfig(incomingPluginConfig.collections)\n\n    const access = incomingPluginConfig.access ?? (({ req }) => !!req.user)\n\n    // A function form of `healthCheck` doubles as the health report's access\n    // gate; otherwise it falls back to the shared `access`.\n    const healthCheckAccess =\n      typeof incomingPluginConfig.healthCheck === 'function'\n        ? incomingPluginConfig.healthCheck\n        : access\n\n    const pluginConfig: AltTextPluginConfig = {\n      access,\n      collections: normalizedCollections,\n      enabled: incomingPluginConfig.enabled ?? true,\n      fieldsOverride: incomingPluginConfig.fieldsOverride,\n      getImageThumbnail: incomingPluginConfig.getImageThumbnail,\n      healthCheck: enableHealthCheck,\n      healthCheckAccess,\n      locale: incomingPluginConfig.locale,\n      locales,\n      maxBulkGenerateConcurrency: incomingPluginConfig.maxBulkGenerateConcurrency ?? 16,\n      maxBulkGenerateIds: incomingPluginConfig.maxBulkGenerateIds ?? 100,\n      resolver: incomingPluginConfig.resolver,\n    }\n\n    // Validate locale requirement for non-localized mode\n    if (locales.length === 0 && !incomingPluginConfig.locale) {\n      throw new Error(\n        'The alt-text plugin requires a \"locale\" option when Payload localization is disabled. ' +\n          'Please add { locale: \"en\" } (or your preferred locale) to your plugin configuration.',\n      )\n    }\n\n    const collectionConfigBySlug = new Map<string, (typeof normalizedCollections)[number]>(\n      normalizedCollections.map((entry) => [entry.slug, entry]),\n    )\n\n    // Ensure collections array exists\n    config.collections = config.collections || []\n\n    // Map over collections and inject AI alt text fields into specified ones\n    config.collections = config.collections.map((collectionConfig) => {\n      const altTextCollectionConfig = collectionConfigBySlug.get(collectionConfig.slug)\n\n      if (altTextCollectionConfig) {\n        if (!collectionConfig.upload) {\n          console.warn(\n            `AI Alt Text Plugin: Collection \"${collectionConfig.slug}\" is not an upload collection. Skipping field injection.`,\n          )\n          return collectionConfig\n        }\n\n        const defaultFields = [\n          altTextField({\n            localized: Boolean(config.localization),\n            supportedMimeTypes: pluginConfig.resolver.supportedMimeTypes,\n            trackedMimeTypes: altTextCollectionConfig.mimeTypes,\n            validate: altTextCollectionConfig.validate,\n          }),\n          keywordsField({\n            localized: Boolean(config.localization),\n          }),\n        ]\n\n        const fields =\n          incomingPluginConfig.fieldsOverride &&\n          typeof incomingPluginConfig.fieldsOverride === 'function'\n            ? incomingPluginConfig.fieldsOverride({ defaultFields })\n            : defaultFields\n\n        return {\n          ...collectionConfig,\n          admin: {\n            ...collectionConfig.admin,\n            components: {\n              ...(collectionConfig.admin?.components ?? {}),\n              // TODO: use the beforeBulkAction custom component slot once available: https://github.com/payloadcms/payload/pull/11719\n              beforeListTable: [\n                ...(collectionConfig.admin?.components?.beforeListTable ?? []),\n                {\n                  path: '@jhb.software/payload-alt-text-plugin/client#BulkGenerateAltTextsButton',\n                  props: {\n                    collectionSlug: collectionConfig.slug,\n                  },\n                },\n              ],\n            },\n            // enhance the search by adding the filename, keywords and alt fields (if the user has not provided their own listSearchableFields)\n            listSearchableFields: collectionConfig.admin?.listSearchableFields ?? [\n              'filename',\n              'keywords',\n              'alt',\n            ],\n          },\n          fields: [...(collectionConfig.fields ?? []), ...fields],\n          hooks: {\n            ...collectionConfig.hooks,\n            ...(enableHealthCheck && {\n              afterChange: [\n                ...(collectionConfig.hooks?.afterChange ?? []),\n                createRevalidateAltTextHealthAfterChangeHook(collectionConfig.slug),\n              ],\n              afterDelete: [\n                ...(collectionConfig.hooks?.afterDelete ?? []),\n                createRevalidateAltTextHealthAfterDeleteHook(collectionConfig.slug),\n              ],\n            }),\n          },\n        }\n      }\n\n      return collectionConfig\n    })\n\n    const existingWidgets = config.admin?.dashboard?.widgets ?? []\n    const widgets =\n      !enableHealthCheck || existingWidgets.some((widget) => widget.slug === 'alt-text-health')\n        ? existingWidgets\n        : [...existingWidgets, altTextHealthWidgetDefinition]\n\n    return {\n      ...config,\n      admin: {\n        ...config.admin,\n        dashboard: {\n          ...config.admin?.dashboard,\n          widgets,\n        },\n      },\n      custom: {\n        ...config.custom,\n        // Make plugin config available in hooks/actions\n        altTextPluginConfig: pluginConfig,\n      },\n      endpoints: [\n        ...(config.endpoints ?? []),\n        {\n          handler: generateAltTextEndpoint(pluginConfig.access),\n          method: 'post',\n          path: '/alt-text-plugin/generate',\n        },\n        {\n          handler: bulkGenerateAltTextsEndpoint(pluginConfig.access),\n          method: 'post',\n          path: '/alt-text-plugin/generate/bulk',\n        },\n        ...(enableHealthCheck\n          ? [\n              {\n                handler: altTextHealthEndpoint(pluginConfig.healthCheckAccess),\n                method: 'get' as const,\n                path: '/alt-text-plugin/health',\n              },\n            ]\n          : []),\n      ],\n      i18n: {\n        ...config.i18n,\n        translations: deepMergeSimple(translations, incomingConfig.i18n?.translations ?? {}),\n      },\n    }\n  }\n"],"names":["altTextHealthEndpoint","bulkGenerateAltTextsEndpoint","generateAltTextEndpoint","altTextField","keywordsField","createRevalidateAltTextHealthAfterChangeHook","createRevalidateAltTextHealthAfterDeleteHook","translations","normalizeCollectionsConfig","deepMergeSimple","altTextHealthWidgetDefinition","slug","Component","ComponentPath","label","de","en","maxWidth","minWidth","payloadAltTextPlugin","incomingPluginConfig","incomingConfig","config","enabled","locales","localization","map","localeConfig","code","enableHealthCheck","healthCheck","normalizedCollections","collections","access","req","user","healthCheckAccess","pluginConfig","fieldsOverride","getImageThumbnail","locale","maxBulkGenerateConcurrency","maxBulkGenerateIds","resolver","length","Error","collectionConfigBySlug","Map","entry","collectionConfig","altTextCollectionConfig","get","upload","console","warn","defaultFields","localized","Boolean","supportedMimeTypes","trackedMimeTypes","mimeTypes","validate","fields","admin","components","beforeListTable","path","props","collectionSlug","listSearchableFields","hooks","afterChange","afterDelete","existingWidgets","dashboard","widgets","some","widget","custom","altTextPluginConfig","endpoints","handler","method","i18n"],"mappings":"AAOA,SAASA,qBAAqB,QAAQ,+BAA8B;AACpE,SAASC,4BAA4B,QAAQ,sCAAqC;AAClF,SAASC,uBAAuB,QAAQ,iCAAgC;AACxE,SAASC,YAAY,QAAQ,2BAA0B;AACvD,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SACEC,4CAA4C,EAC5CC,4CAA4C,QACvC,qCAAoC;AAC3C,SAASC,YAAY,QAAQ,0BAAyB;AACtD,SAASC,0BAA0B,QAAQ,2BAA0B;AACrE,SAASC,eAAe,QAAQ,6BAA4B;AAE5D,MAAMC,gCAAgC;IACpCC,MAAM;IACN,uGAAuG;IACvGC,WAAW;IACXC,eAAe;IACfC,OAAO;QACLC,IAAI;QACJC,IAAI;IACN;IACAC,UAAU;IACVC,UAAU;AACZ;AAEA,OAAO,MAAMC,uBACX,CAACC,uBACD,CAACC;QACC,MAAMC,SAAS;YAAE,GAAGD,cAAc;QAAC;QAEnC,oEAAoE;QACpE,IAAID,qBAAqBG,OAAO,KAAK,OAAO;YAC1C,OAAOD;QACT;QAEA,MAAME,UAAUF,OAAOG,YAAY,GAC/BH,OAAOG,YAAY,CAACD,OAAO,CAACE,GAAG,CAAC,CAACC,eAC/B,OAAOA,iBAAiB,WAAWA,eAAeA,aAAaC,IAAI,IAErE,EAAE;QAEN,MAAMC,oBAAoBT,qBAAqBU,WAAW,KAAK;QAE/D,MAAMC,wBAAwBvB,2BAA2BY,qBAAqBY,WAAW;QAEzF,MAAMC,SAASb,qBAAqBa,MAAM,IAAK,CAAA,CAAC,EAAEC,GAAG,EAAE,GAAK,CAAC,CAACA,IAAIC,IAAI,AAAD;QAErE,yEAAyE;QACzE,wDAAwD;QACxD,MAAMC,oBACJ,OAAOhB,qBAAqBU,WAAW,KAAK,aACxCV,qBAAqBU,WAAW,GAChCG;QAEN,MAAMI,eAAoC;YACxCJ;YACAD,aAAaD;YACbR,SAASH,qBAAqBG,OAAO,IAAI;YACzCe,gBAAgBlB,qBAAqBkB,cAAc;YACnDC,mBAAmBnB,qBAAqBmB,iBAAiB;YACzDT,aAAaD;YACbO;YACAI,QAAQpB,qBAAqBoB,MAAM;YACnChB;YACAiB,4BAA4BrB,qBAAqBqB,0BAA0B,IAAI;YAC/EC,oBAAoBtB,qBAAqBsB,kBAAkB,IAAI;YAC/DC,UAAUvB,qBAAqBuB,QAAQ;QACzC;QAEA,qDAAqD;QACrD,IAAInB,QAAQoB,MAAM,KAAK,KAAK,CAACxB,qBAAqBoB,MAAM,EAAE;YACxD,MAAM,IAAIK,MACR,2FACE;QAEN;QAEA,MAAMC,yBAAyB,IAAIC,IACjChB,sBAAsBL,GAAG,CAAC,CAACsB,QAAU;gBAACA,MAAMrC,IAAI;gBAAEqC;aAAM;QAG1D,kCAAkC;QAClC1B,OAAOU,WAAW,GAAGV,OAAOU,WAAW,IAAI,EAAE;QAE7C,yEAAyE;QACzEV,OAAOU,WAAW,GAAGV,OAAOU,WAAW,CAACN,GAAG,CAAC,CAACuB;YAC3C,MAAMC,0BAA0BJ,uBAAuBK,GAAG,CAACF,iBAAiBtC,IAAI;YAEhF,IAAIuC,yBAAyB;gBAC3B,IAAI,CAACD,iBAAiBG,MAAM,EAAE;oBAC5BC,QAAQC,IAAI,CACV,CAAC,gCAAgC,EAAEL,iBAAiBtC,IAAI,CAAC,wDAAwD,CAAC;oBAEpH,OAAOsC;gBACT;gBAEA,MAAMM,gBAAgB;oBACpBpD,aAAa;wBACXqD,WAAWC,QAAQnC,OAAOG,YAAY;wBACtCiC,oBAAoBrB,aAAaM,QAAQ,CAACe,kBAAkB;wBAC5DC,kBAAkBT,wBAAwBU,SAAS;wBACnDC,UAAUX,wBAAwBW,QAAQ;oBAC5C;oBACAzD,cAAc;wBACZoD,WAAWC,QAAQnC,OAAOG,YAAY;oBACxC;iBACD;gBAED,MAAMqC,SACJ1C,qBAAqBkB,cAAc,IACnC,OAAOlB,qBAAqBkB,cAAc,KAAK,aAC3ClB,qBAAqBkB,cAAc,CAAC;oBAAEiB;gBAAc,KACpDA;gBAEN,OAAO;oBACL,GAAGN,gBAAgB;oBACnBc,OAAO;wBACL,GAAGd,iBAAiBc,KAAK;wBACzBC,YAAY;4BACV,GAAIf,iBAAiBc,KAAK,EAAEC,cAAc,CAAC,CAAC;4BAC5C,wHAAwH;4BACxHC,iBAAiB;mCACXhB,iBAAiBc,KAAK,EAAEC,YAAYC,mBAAmB,EAAE;gCAC7D;oCACEC,MAAM;oCACNC,OAAO;wCACLC,gBAAgBnB,iBAAiBtC,IAAI;oCACvC;gCACF;6BACD;wBACH;wBACA,mIAAmI;wBACnI0D,sBAAsBpB,iBAAiBc,KAAK,EAAEM,wBAAwB;4BACpE;4BACA;4BACA;yBACD;oBACH;oBACAP,QAAQ;2BAAKb,iBAAiBa,MAAM,IAAI,EAAE;2BAAMA;qBAAO;oBACvDQ,OAAO;wBACL,GAAGrB,iBAAiBqB,KAAK;wBACzB,GAAIzC,qBAAqB;4BACvB0C,aAAa;mCACPtB,iBAAiBqB,KAAK,EAAEC,eAAe,EAAE;gCAC7ClE,6CAA6C4C,iBAAiBtC,IAAI;6BACnE;4BACD6D,aAAa;mCACPvB,iBAAiBqB,KAAK,EAAEE,eAAe,EAAE;gCAC7ClE,6CAA6C2C,iBAAiBtC,IAAI;6BACnE;wBACH,CAAC;oBACH;gBACF;YACF;YAEA,OAAOsC;QACT;QAEA,MAAMwB,kBAAkBnD,OAAOyC,KAAK,EAAEW,WAAWC,WAAW,EAAE;QAC9D,MAAMA,UACJ,CAAC9C,qBAAqB4C,gBAAgBG,IAAI,CAAC,CAACC,SAAWA,OAAOlE,IAAI,KAAK,qBACnE8D,kBACA;eAAIA;YAAiB/D;SAA8B;QAEzD,OAAO;YACL,GAAGY,MAAM;YACTyC,OAAO;gBACL,GAAGzC,OAAOyC,KAAK;gBACfW,WAAW;oBACT,GAAGpD,OAAOyC,KAAK,EAAEW,SAAS;oBAC1BC;gBACF;YACF;YACAG,QAAQ;gBACN,GAAGxD,OAAOwD,MAAM;gBAChB,gDAAgD;gBAChDC,qBAAqB1C;YACvB;YACA2C,WAAW;mBACL1D,OAAO0D,SAAS,IAAI,EAAE;gBAC1B;oBACEC,SAAS/E,wBAAwBmC,aAAaJ,MAAM;oBACpDiD,QAAQ;oBACRhB,MAAM;gBACR;gBACA;oBACEe,SAAShF,6BAA6BoC,aAAaJ,MAAM;oBACzDiD,QAAQ;oBACRhB,MAAM;gBACR;mBACIrC,oBACA;oBACE;wBACEoD,SAASjF,sBAAsBqC,aAAaD,iBAAiB;wBAC7D8C,QAAQ;wBACRhB,MAAM;oBACR;iBACD,GACD,EAAE;aACP;YACDiB,MAAM;gBACJ,GAAG7D,OAAO6D,IAAI;gBACd5E,cAAcE,gBAAgBF,cAAcc,eAAe8D,IAAI,EAAE5E,gBAAgB,CAAC;YACpF;QACF;IACF,EAAC"}

package/dist/types/AltTextPluginConfig.d.ts

@@ -45,12 +45,22 @@ export type IncomingAltTextPluginConfig = {
      */
     getImageThumbnail: (doc: Record<string, unknown>) => string;
     /**
-     * Enable alt text health tracking (REST endpoint, cache revalidation hooks, and dashboard widget).
-     * Set to `false` to disable the entire feature.
+     * Controls the alt text health feature (REST endpoint, cache revalidation hooks, and dashboard widget).
+     *
+     * - `false` disables the entire feature.
+     * - `true` enables it, gated by `access`.
+     * - A function enables it and gates both the endpoint and the dashboard widget
+     *   with that access check — use this to restrict the collection-wide report
+     *   more strictly than the per-document generate endpoints (e.g. to admins).
+     *
+     * Regardless of the gate, the report is always filtered to the collections the
+     * requesting user can read.
      *
      * @default true
      */
-    healthCheck?: boolean;
+    healthCheck?: ((args: {
+        req: PayloadRequest;
+    }) => boolean | Promise<boolean>) | boolean;
     /**
      * The locale to generate alt texts in when localization is disabled.
      *
@@ -64,6 +74,16 @@ export type IncomingAltTextPluginConfig = {
      * @default 16
      */
     maxBulkGenerateConcurrency?: number;
+    /**
+     * Maximum number of image IDs accepted in a single bulk generate request.
+     * Requests exceeding this are rejected with `400`. Duplicate IDs are collapsed
+     * before the limit is applied, so each image counts once.
+     *
+     * Raise it for large libraries that need to process more images per request.
+     *
+     * @default 100
+     */
+    maxBulkGenerateIds?: number;
     /** The resolver to use for generating alt text (e.g., openAIResolver) */
     resolver: AltTextResolver;
 };
@@ -85,12 +105,18 @@ export type AltTextPluginConfig = {
     getImageThumbnail: (doc: Record<string, unknown>) => string;
     /** Whether alt text health tracking is enabled. */
     healthCheck: boolean;
+    /** Access control for the health endpoint. Defaults to `access`. */
+    healthCheckAccess: (args: {
+        req: PayloadRequest;
+    }) => boolean | Promise<boolean>;
     /** The locale to generate alt texts in when localization is disabled. */
     locale?: string;
     /** The locales to generate alt texts for. */
     locales: string[];
     /** Maximum number of concurrent API requests for bulk generate operations. */
     maxBulkGenerateConcurrency: number;
+    /** Maximum number of image IDs accepted per bulk generate request. */
+    maxBulkGenerateIds: number;
     /** The resolver to use for generating alt text */
     resolver: AltTextResolver;
 };

package/dist/types/AltTextPluginConfig.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/types/AltTextPluginConfig.ts"],"sourcesContent":["import type { Field, PayloadRequest } from 'payload'\n\nimport type { AltTextResolver } from '../resolvers/types.js'\nimport type {\n  AltTextCollectionConfig,\n  IncomingCollectionsConfig,\n  NormalizedAltTextCollectionConfig,\n} from '../utilities/mimeTypes.js'\n\nexport type { AltTextCollectionConfig, NormalizedAltTextCollectionConfig }\n\n/** Configuration options for the alt text plugin. */\nexport type IncomingAltTextPluginConfig = {\n  /**\n   * Custom access control for plugin endpoints.\n   * Return `true` to allow access, `false` to deny.\n   *\n   * @default ({ req }) => !!req.user — requires authentication\n   */\n  access?: (args: { req: PayloadRequest }) => boolean | Promise<boolean>\n\n  /**\n   * Collections to enable the plugin for.\n   *\n   * Each entry may be a bare collection slug or an object with a `slug` and an\n   * optional `mimeTypes` array restricting which MIME types are tracked,\n   * validated, and generated. Bare slugs default to `['image/*']`.\n   *\n   * @example\n   * ```typescript\n   * collections: [\n   *   'images', // shorthand — defaults to ['image/*']\n   *   { slug: 'media', mimeTypes: ['image/*', 'application/pdf'] },\n   * ]\n   * ```\n   */\n  collections: IncomingCollectionsConfig\n\n  /** Whether the plugin is enabled. */\n  enabled?: boolean\n\n  /** Override the default fields inserted by the plugin via a function that receives the default fields and returns the new fields */\n  fieldsOverride?: (args: { defaultFields: Field[] }) => Field[]\n\n  /**\n   * Function to get the thumbnail URL of an image document.\n   * This URL will be sent to the LLM for analysis.\n   *\n   * @remarks\n   * - The URL must be publicly accessible so the LLM can fetch it\n   * - Use a thumbnail/preview version of the image when possible (e.g. from the sizes field)\n   */\n  getImageThumbnail: (doc: Record<string, unknown>) => string\n\n  /**\n   * Enable alt text health tracking (REST endpoint, cache revalidation hooks, and dashboard widget).\n   * Set to `false` to disable the entire feature.\n   *\n   * @default true\n   */\n  healthCheck?: boolean\n\n  /**\n   * The locale to generate alt texts in when localization is disabled.\n   *\n   * Required when localization is disabled, ignored when localization is enabled.\n   * @example 'en'\n   */\n  locale?: string\n\n  /**\n   * Maximum number of concurrent API requests for bulk generate operations.\n   *\n   * @default 16\n   */\n  maxBulkGenerateConcurrency?: number\n\n  /** The resolver to use for generating alt text (e.g., openAIResolver) */\n  resolver: AltTextResolver\n}\n\n/** Configuration of the alt text plugin after defaults have been applied. */\nexport type AltTextPluginConfig = {\n  /** Access control for plugin endpoints. */\n  access: (args: { req: PayloadRequest }) => boolean | Promise<boolean>\n\n  /** Collections with resolved MIME type filters. */\n  collections: NormalizedAltTextCollectionConfig[]\n\n  /** Whether the plugin is enabled. */\n  enabled: boolean\n\n  /** Override the default fields inserted by the plugin via a function that receives the default fields and returns the new fields */\n  fieldsOverride?: (args: { defaultFields: Field[] }) => Field[]\n\n  /** Function to get the thumbnail URL of an image document. */\n  getImageThumbnail: (doc: Record<string, unknown>) => string\n\n  /** Whether alt text health tracking is enabled. */\n  healthCheck: boolean\n\n  /** The locale to generate alt texts in when localization is disabled. */\n  locale?: string\n\n  /** The locales to generate alt texts for. */\n  locales: string[]\n\n  /** Maximum number of concurrent API requests for bulk generate operations. */\n  maxBulkGenerateConcurrency: number\n\n  /** The resolver to use for generating alt text */\n  resolver: AltTextResolver\n}\n"],"names":[],"mappings":"AAiFA,2EAA2E,GAC3E,WA8BC"}
+{"version":3,"sources":["../../src/types/AltTextPluginConfig.ts"],"sourcesContent":["import type { Field, PayloadRequest } from 'payload'\n\nimport type { AltTextResolver } from '../resolvers/types.js'\nimport type {\n  AltTextCollectionConfig,\n  IncomingCollectionsConfig,\n  NormalizedAltTextCollectionConfig,\n} from '../utilities/mimeTypes.js'\n\nexport type { AltTextCollectionConfig, NormalizedAltTextCollectionConfig }\n\n/** Configuration options for the alt text plugin. */\nexport type IncomingAltTextPluginConfig = {\n  /**\n   * Custom access control for plugin endpoints.\n   * Return `true` to allow access, `false` to deny.\n   *\n   * @default ({ req }) => !!req.user — requires authentication\n   */\n  access?: (args: { req: PayloadRequest }) => boolean | Promise<boolean>\n\n  /**\n   * Collections to enable the plugin for.\n   *\n   * Each entry may be a bare collection slug or an object with a `slug` and an\n   * optional `mimeTypes` array restricting which MIME types are tracked,\n   * validated, and generated. Bare slugs default to `['image/*']`.\n   *\n   * @example\n   * ```typescript\n   * collections: [\n   *   'images', // shorthand — defaults to ['image/*']\n   *   { slug: 'media', mimeTypes: ['image/*', 'application/pdf'] },\n   * ]\n   * ```\n   */\n  collections: IncomingCollectionsConfig\n\n  /** Whether the plugin is enabled. */\n  enabled?: boolean\n\n  /** Override the default fields inserted by the plugin via a function that receives the default fields and returns the new fields */\n  fieldsOverride?: (args: { defaultFields: Field[] }) => Field[]\n\n  /**\n   * Function to get the thumbnail URL of an image document.\n   * This URL will be sent to the LLM for analysis.\n   *\n   * @remarks\n   * - The URL must be publicly accessible so the LLM can fetch it\n   * - Use a thumbnail/preview version of the image when possible (e.g. from the sizes field)\n   */\n  getImageThumbnail: (doc: Record<string, unknown>) => string\n\n  /**\n   * Controls the alt text health feature (REST endpoint, cache revalidation hooks, and dashboard widget).\n   *\n   * - `false` disables the entire feature.\n   * - `true` enables it, gated by `access`.\n   * - A function enables it and gates both the endpoint and the dashboard widget\n   *   with that access check — use this to restrict the collection-wide report\n   *   more strictly than the per-document generate endpoints (e.g. to admins).\n   *\n   * Regardless of the gate, the report is always filtered to the collections the\n   * requesting user can read.\n   *\n   * @default true\n   */\n  healthCheck?: ((args: { req: PayloadRequest }) => boolean | Promise<boolean>) | boolean\n\n  /**\n   * The locale to generate alt texts in when localization is disabled.\n   *\n   * Required when localization is disabled, ignored when localization is enabled.\n   * @example 'en'\n   */\n  locale?: string\n\n  /**\n   * Maximum number of concurrent API requests for bulk generate operations.\n   *\n   * @default 16\n   */\n  maxBulkGenerateConcurrency?: number\n\n  /**\n   * Maximum number of image IDs accepted in a single bulk generate request.\n   * Requests exceeding this are rejected with `400`. Duplicate IDs are collapsed\n   * before the limit is applied, so each image counts once.\n   *\n   * Raise it for large libraries that need to process more images per request.\n   *\n   * @default 100\n   */\n  maxBulkGenerateIds?: number\n\n  /** The resolver to use for generating alt text (e.g., openAIResolver) */\n  resolver: AltTextResolver\n}\n\n/** Configuration of the alt text plugin after defaults have been applied. */\nexport type AltTextPluginConfig = {\n  /** Access control for plugin endpoints. */\n  access: (args: { req: PayloadRequest }) => boolean | Promise<boolean>\n\n  /** Collections with resolved MIME type filters. */\n  collections: NormalizedAltTextCollectionConfig[]\n\n  /** Whether the plugin is enabled. */\n  enabled: boolean\n\n  /** Override the default fields inserted by the plugin via a function that receives the default fields and returns the new fields */\n  fieldsOverride?: (args: { defaultFields: Field[] }) => Field[]\n\n  /** Function to get the thumbnail URL of an image document. */\n  getImageThumbnail: (doc: Record<string, unknown>) => string\n\n  /** Whether alt text health tracking is enabled. */\n  healthCheck: boolean\n\n  /** Access control for the health endpoint. Defaults to `access`. */\n  healthCheckAccess: (args: { req: PayloadRequest }) => boolean | Promise<boolean>\n\n  /** The locale to generate alt texts in when localization is disabled. */\n  locale?: string\n\n  /** The locales to generate alt texts for. */\n  locales: string[]\n\n  /** Maximum number of concurrent API requests for bulk generate operations. */\n  maxBulkGenerateConcurrency: number\n\n  /** Maximum number of image IDs accepted per bulk generate request. */\n  maxBulkGenerateIds: number\n\n  /** The resolver to use for generating alt text */\n  resolver: AltTextResolver\n}\n"],"names":[],"mappings":"AAoGA,2EAA2E,GAC3E,WAoCC"}

package/dist/utilities/altTextHealth.d.ts

@@ -33,5 +33,19 @@ export type AltTextHealthWidgetData = {
     totalDocs: number;
 };
 export declare const getAltTextHealthCollectionTag: (collectionSlug: string) => string;
+/**
+ * Filters a shared, elevated-access health scan down to the collections the
+ * requesting user may read. The scan is computed once with `overrideAccess: true`
+ * so it stays complete and cacheable; access is applied per request at
+ * collection granularity, matching the aggregate's altitude.
+ */
+export declare function filterScanByReadAccess(req: PayloadRequest, scan: AltTextHealthScan): Promise<AltTextHealthScan>;
+/**
+ * Whether the requesting user may view the health report at all, per the
+ * configured `healthCheck` access gate. The dashboard widget uses this to hide
+ * itself, mirroring the gate enforced on the health endpoint.
+ */
+export declare function canViewHealthReport(req: PayloadRequest): Promise<boolean>;
+export declare function toWidgetData(scan: AltTextHealthScan): AltTextHealthWidgetData;
 export declare function getAltTextHealth(req: PayloadRequest): Promise<AltTextHealthScan>;
 export declare function getAltTextHealthWidgetData(req: PayloadRequest): Promise<AltTextHealthWidgetData>;

package/dist/utilities/altTextHealth.js

@@ -141,11 +141,55 @@ async function getAltTextHealthScan(req) {
     });
     return getCachedHealthScan();
 }
-export async function getAltTextHealth(req) {
-    return getAltTextHealthScan(req);
+/**
+ * Whether `req.user` is allowed to read the given collection at the collection
+ * level. The collection's `read` access is evaluated with the request; `false`
+ * denies, while `true` or a scoped `Where` constraint grants visibility of the
+ * collection's health aggregate. A thrown access function (e.g. `Forbidden`)
+ * counts as denied so a restricted collection never leaks.
+ */ async function userCanReadCollection(req, slug) {
+    const readAccess = req.payload.collections?.[slug]?.config.access?.read;
+    if (typeof readAccess !== 'function') {
+        return true;
+    }
+    try {
+        return await readAccess({
+            req
+        }) !== false;
+    } catch  {
+        return false;
+    }
 }
-export async function getAltTextHealthWidgetData(req) {
-    const scan = await getAltTextHealthScan(req);
+/**
+ * Filters a shared, elevated-access health scan down to the collections the
+ * requesting user may read. The scan is computed once with `overrideAccess: true`
+ * so it stays complete and cacheable; access is applied per request at
+ * collection granularity, matching the aggregate's altitude.
+ */ export async function filterScanByReadAccess(req, scan) {
+    const visibility = await Promise.all(scan.collections.map((collection)=>userCanReadCollection(req, collection.collection)));
+    const collections = scan.collections.filter((_, index)=>visibility[index]);
+    const allowedSlugs = new Set(collections.map((collection)=>collection.collection));
+    const errors = scan.errors.filter((error)=>!error.collection || allowedSlugs.has(error.collection));
+    return {
+        ...scan,
+        collections,
+        errors
+    };
+}
+/**
+ * Whether the requesting user may view the health report at all, per the
+ * configured `healthCheck` access gate. The dashboard widget uses this to hide
+ * itself, mirroring the gate enforced on the health endpoint.
+ */ export async function canViewHealthReport(req) {
+    const pluginConfig = req.payload.config.custom?.altTextPluginConfig;
+    if (!pluginConfig) {
+        return false;
+    }
+    return pluginConfig.healthCheckAccess({
+        req
+    });
+}
+export function toWidgetData(scan) {
     return {
         collections: scan.collections,
         errors: scan.errors,
@@ -154,5 +198,11 @@ export async function getAltTextHealthWidgetData(req) {
         totalDocs: scan.collections.reduce((total, c)=>total + c.totalDocs, 0)
     };
 }
+export async function getAltTextHealth(req) {
+    return filterScanByReadAccess(req, await getAltTextHealthScan(req));
+}
+export async function getAltTextHealthWidgetData(req) {
+    return toWidgetData(await filterScanByReadAccess(req, await getAltTextHealthScan(req)));
+}
 
 //# sourceMappingURL=altTextHealth.js.map

package/dist/utilities/altTextHealth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/altTextHealth.ts"],"sourcesContent":["import type { Payload, PayloadRequest } from 'payload'\n\nimport { unstable_cache } from 'next/cache.js'\n\nimport type {\n  AltTextPluginConfig,\n  NormalizedAltTextCollectionConfig,\n} from '../types/AltTextPluginConfig.js'\n\nimport { createCachedAltTextHealthScan } from './altTextHealthCache.js'\nimport { localesFromConfig } from './localesFromConfig.js'\nimport { buildMimeTypeWhere } from './mimeTypes.js'\nimport { summarizeCollection } from './summarizeCollection.js'\n\nexport const ALT_TEXT_HEALTH_PLUGIN_SLUG = 'alt-text'\nexport const ALT_TEXT_HEALTH_CACHE_TTL = 3600\nexport const ALT_TEXT_HEALTH_GLOBAL_TAG = 'alt-text-health'\n\nexport type AltTextHealthErrorCode =\n  | 'ALT_TEXT_COLLECTION_READ_FAILED'\n  | 'ALT_TEXT_PLUGIN_CONFIG_MISSING'\n\nexport type AltTextHealthError = {\n  code: AltTextHealthErrorCode\n  collection?: string\n  message: string\n  operation?: 'find'\n}\n\nexport type AltTextHealthScanCollection = {\n  collection: string\n  completeDocs: number\n  error?: AltTextHealthError\n  invalidDocIds: (number | string)[] | undefined\n  missingDocs: number\n  partialDocs: number\n  totalDocs: number\n}\n\nexport type AltTextHealthScan = {\n  checkedAt: string\n  collections: AltTextHealthScanCollection[]\n  errors: AltTextHealthError[]\n  isLocalized: boolean\n  localeCodes: string[]\n}\n\nexport type AltTextHealthWidgetData = {\n  collections: AltTextHealthScanCollection[]\n  errors: AltTextHealthError[]\n  isLocalized: boolean\n  localeCount: number\n  totalDocs: number\n}\n\ntype AltTextHealthComputationArgs = {\n  collections: NormalizedAltTextCollectionConfig[]\n  isLocalized: boolean\n  localeCodes: string[]\n  payload: Payload\n}\n\nconst createUnknownScan = ({\n  error,\n  isLocalized,\n  localeCodes,\n}: {\n  error: AltTextHealthScan['errors'][number]\n  isLocalized: boolean\n  localeCodes: string[]\n}): AltTextHealthScan => ({\n  checkedAt: new Date().toISOString(),\n  collections: [],\n  errors: [error],\n  isLocalized,\n  localeCodes,\n})\n\nconst createCollectionReadError = (collection: string, message: string) => ({\n  code: 'ALT_TEXT_COLLECTION_READ_FAILED' as const,\n  collection,\n  message,\n  operation: 'find' as const,\n})\n\nconst PAGE_SIZE = 500\n\nasync function fetchAllDocs(\n  payload: Payload,\n  collection: string,\n  isLocalized: boolean,\n  mimeTypes: readonly string[],\n): Promise<{ alt: unknown; id: number | string }[]> {\n  const where = buildMimeTypeWhere(mimeTypes)\n  if (!where) {\n    return []\n  }\n\n  const docs: { alt: unknown; id: number | string }[] = []\n  let page = 1\n  let hasMore = true\n\n  while (hasMore) {\n    const result = await payload.find({\n      collection,\n      depth: 0,\n      fallbackLocale: isLocalized ? false : undefined,\n      limit: PAGE_SIZE,\n      locale: isLocalized ? 'all' : undefined,\n      overrideAccess: true,\n      page,\n      select: {\n        alt: true,\n      },\n      where,\n    })\n\n    for (const doc of result.docs) {\n      docs.push({\n        id: doc.id,\n        alt: 'alt' in doc ? doc.alt : undefined,\n      })\n    }\n\n    hasMore = result.hasNextPage\n    page++\n  }\n\n  return docs\n}\n\nasync function computeAltTextHealthScan({\n  collections,\n  isLocalized,\n  localeCodes,\n  payload,\n}: AltTextHealthComputationArgs): Promise<AltTextHealthScan> {\n  const collectionSummaries = await Promise.all(\n    collections.map(async ({ slug, mimeTypes }): Promise<AltTextHealthScanCollection> => {\n      try {\n        const docs = await fetchAllDocs(payload, slug, isLocalized, mimeTypes)\n\n        return summarizeCollection({\n          collection: slug,\n          docs,\n          isLocalized,\n          localeCodes,\n        })\n      } catch (error) {\n        const message = error instanceof Error ? error.message : 'Unknown error'\n        const collectionError = createCollectionReadError(slug, message)\n\n        payload.logger.error({\n          collection: slug,\n          err: error,\n          msg: 'Alt text health check failed while reading a collection.',\n          operation: 'find',\n          plugin: ALT_TEXT_HEALTH_PLUGIN_SLUG,\n        })\n\n        return {\n          collection: slug,\n          completeDocs: 0,\n          error: collectionError,\n          invalidDocIds: undefined,\n          missingDocs: 0,\n          partialDocs: 0,\n          totalDocs: 0,\n        }\n      }\n    }),\n  )\n\n  const errors = collectionSummaries\n    .filter((summary) => summary.error)\n    .map((summary) => summary.error!)\n\n  return {\n    checkedAt: new Date().toISOString(),\n    collections: collectionSummaries,\n    errors,\n    isLocalized,\n    localeCodes,\n  }\n}\n\nexport const getAltTextHealthCollectionTag = (collectionSlug: string): string =>\n  `${ALT_TEXT_HEALTH_GLOBAL_TAG}:${collectionSlug}`\n\nasync function getAltTextHealthScan(req: PayloadRequest): Promise<AltTextHealthScan> {\n  const { payload } = req\n  const pluginConfig = payload.config.custom?.altTextPluginConfig as AltTextPluginConfig | undefined\n  const localeCodes =\n    localesFromConfig(payload.config) ?? (pluginConfig?.locale ? [pluginConfig.locale] : [])\n  const isLocalized = Boolean(payload.config.localization)\n\n  if (!pluginConfig) {\n    return createUnknownScan({\n      error: {\n        code: 'ALT_TEXT_PLUGIN_CONFIG_MISSING',\n        message: 'Alt text plugin config not found',\n      },\n      isLocalized,\n      localeCodes,\n    })\n  }\n\n  const collections = pluginConfig.collections\n\n  const cacheKeyParts = [\n    ALT_TEXT_HEALTH_GLOBAL_TAG,\n    [...collections]\n      .map(({ slug, mimeTypes }) => `${slug}:${[...mimeTypes].sort().join('|')}`)\n      .sort()\n      .join(','),\n    localeCodes.join(','),\n  ]\n\n  const tags = [\n    ALT_TEXT_HEALTH_GLOBAL_TAG,\n    ...new Set(collections.map(({ slug }) => getAltTextHealthCollectionTag(slug))),\n  ]\n\n  const getCachedHealthScan = createCachedAltTextHealthScan({\n    cacheFactory: unstable_cache,\n    cacheKeyParts,\n    compute: async () =>\n      computeAltTextHealthScan({\n        collections,\n        isLocalized,\n        localeCodes,\n        payload,\n      }),\n    revalidate: ALT_TEXT_HEALTH_CACHE_TTL,\n    tags,\n  })\n\n  return getCachedHealthScan()\n}\n\nexport async function getAltTextHealth(req: PayloadRequest): Promise<AltTextHealthScan> {\n  return getAltTextHealthScan(req)\n}\n\nexport async function getAltTextHealthWidgetData(\n  req: PayloadRequest,\n): Promise<AltTextHealthWidgetData> {\n  const scan = await getAltTextHealthScan(req)\n\n  return {\n    collections: scan.collections,\n    errors: scan.errors,\n    isLocalized: scan.isLocalized,\n    localeCount: scan.localeCodes.length,\n    totalDocs: scan.collections.reduce((total, c) => total + c.totalDocs, 0),\n  }\n}\n"],"names":["unstable_cache","createCachedAltTextHealthScan","localesFromConfig","buildMimeTypeWhere","summarizeCollection","ALT_TEXT_HEALTH_PLUGIN_SLUG","ALT_TEXT_HEALTH_CACHE_TTL","ALT_TEXT_HEALTH_GLOBAL_TAG","createUnknownScan","error","isLocalized","localeCodes","checkedAt","Date","toISOString","collections","errors","createCollectionReadError","collection","message","code","operation","PAGE_SIZE","fetchAllDocs","payload","mimeTypes","where","docs","page","hasMore","result","find","depth","fallbackLocale","undefined","limit","locale","overrideAccess","select","alt","doc","push","id","hasNextPage","computeAltTextHealthScan","collectionSummaries","Promise","all","map","slug","Error","collectionError","logger","err","msg","plugin","completeDocs","invalidDocIds","missingDocs","partialDocs","totalDocs","filter","summary","getAltTextHealthCollectionTag","collectionSlug","getAltTextHealthScan","req","pluginConfig","config","custom","altTextPluginConfig","Boolean","localization","cacheKeyParts","sort","join","tags","Set","getCachedHealthScan","cacheFactory","compute","revalidate","getAltTextHealth","getAltTextHealthWidgetData","scan","localeCount","length","reduce","total","c"],"mappings":"AAEA,SAASA,cAAc,QAAQ,gBAAe;AAO9C,SAASC,6BAA6B,QAAQ,0BAAyB;AACvE,SAASC,iBAAiB,QAAQ,yBAAwB;AAC1D,SAASC,kBAAkB,QAAQ,iBAAgB;AACnD,SAASC,mBAAmB,QAAQ,2BAA0B;AAE9D,OAAO,MAAMC,8BAA8B,WAAU;AACrD,OAAO,MAAMC,4BAA4B,KAAI;AAC7C,OAAO,MAAMC,6BAA6B,kBAAiB;AA8C3D,MAAMC,oBAAoB,CAAC,EACzBC,KAAK,EACLC,WAAW,EACXC,WAAW,EAKZ,GAAyB,CAAA;QACxBC,WAAW,IAAIC,OAAOC,WAAW;QACjCC,aAAa,EAAE;QACfC,QAAQ;YAACP;SAAM;QACfC;QACAC;IACF,CAAA;AAEA,MAAMM,4BAA4B,CAACC,YAAoBC,UAAqB,CAAA;QAC1EC,MAAM;QACNF;QACAC;QACAE,WAAW;IACb,CAAA;AAEA,MAAMC,YAAY;AAElB,eAAeC,aACbC,OAAgB,EAChBN,UAAkB,EAClBR,WAAoB,EACpBe,SAA4B;IAE5B,MAAMC,QAAQvB,mBAAmBsB;IACjC,IAAI,CAACC,OAAO;QACV,OAAO,EAAE;IACX;IAEA,MAAMC,OAAgD,EAAE;IACxD,IAAIC,OAAO;IACX,IAAIC,UAAU;IAEd,MAAOA,QAAS;QACd,MAAMC,SAAS,MAAMN,QAAQO,IAAI,CAAC;YAChCb;YACAc,OAAO;YACPC,gBAAgBvB,cAAc,QAAQwB;YACtCC,OAAOb;YACPc,QAAQ1B,cAAc,QAAQwB;YAC9BG,gBAAgB;YAChBT;YACAU,QAAQ;gBACNC,KAAK;YACP;YACAb;QACF;QAEA,KAAK,MAAMc,OAAOV,OAAOH,IAAI,CAAE;YAC7BA,KAAKc,IAAI,CAAC;gBACRC,IAAIF,IAAIE,EAAE;gBACVH,KAAK,SAASC,MAAMA,IAAID,GAAG,GAAGL;YAChC;QACF;QAEAL,UAAUC,OAAOa,WAAW;QAC5Bf;IACF;IAEA,OAAOD;AACT;AAEA,eAAeiB,yBAAyB,EACtC7B,WAAW,EACXL,WAAW,EACXC,WAAW,EACXa,OAAO,EACsB;IAC7B,MAAMqB,sBAAsB,MAAMC,QAAQC,GAAG,CAC3ChC,YAAYiC,GAAG,CAAC,OAAO,EAAEC,IAAI,EAAExB,SAAS,EAAE;QACxC,IAAI;YACF,MAAME,OAAO,MAAMJ,aAAaC,SAASyB,MAAMvC,aAAae;YAE5D,OAAOrB,oBAAoB;gBACzBc,YAAY+B;gBACZtB;gBACAjB;gBACAC;YACF;QACF,EAAE,OAAOF,OAAO;YACd,MAAMU,UAAUV,iBAAiByC,QAAQzC,MAAMU,OAAO,GAAG;YACzD,MAAMgC,kBAAkBlC,0BAA0BgC,MAAM9B;YAExDK,QAAQ4B,MAAM,CAAC3C,KAAK,CAAC;gBACnBS,YAAY+B;gBACZI,KAAK5C;gBACL6C,KAAK;gBACLjC,WAAW;gBACXkC,QAAQlD;YACV;YAEA,OAAO;gBACLa,YAAY+B;gBACZO,cAAc;gBACd/C,OAAO0C;gBACPM,eAAevB;gBACfwB,aAAa;gBACbC,aAAa;gBACbC,WAAW;YACb;QACF;IACF;IAGF,MAAM5C,SAAS6B,oBACZgB,MAAM,CAAC,CAACC,UAAYA,QAAQrD,KAAK,EACjCuC,GAAG,CAAC,CAACc,UAAYA,QAAQrD,KAAK;IAEjC,OAAO;QACLG,WAAW,IAAIC,OAAOC,WAAW;QACjCC,aAAa8B;QACb7B;QACAN;QACAC;IACF;AACF;AAEA,OAAO,MAAMoD,gCAAgC,CAACC,iBAC5C,GAAGzD,2BAA2B,CAAC,EAAEyD,gBAAgB,CAAA;AAEnD,eAAeC,qBAAqBC,GAAmB;IACrD,MAAM,EAAE1C,OAAO,EAAE,GAAG0C;IACpB,MAAMC,eAAe3C,QAAQ4C,MAAM,CAACC,MAAM,EAAEC;IAC5C,MAAM3D,cACJT,kBAAkBsB,QAAQ4C,MAAM,KAAMD,CAAAA,cAAc/B,SAAS;QAAC+B,aAAa/B,MAAM;KAAC,GAAG,EAAE,AAAD;IACxF,MAAM1B,cAAc6D,QAAQ/C,QAAQ4C,MAAM,CAACI,YAAY;IAEvD,IAAI,CAACL,cAAc;QACjB,OAAO3D,kBAAkB;YACvBC,OAAO;gBACLW,MAAM;gBACND,SAAS;YACX;YACAT;YACAC;QACF;IACF;IAEA,MAAMI,cAAcoD,aAAapD,WAAW;IAE5C,MAAM0D,gBAAgB;QACpBlE;QACA;eAAIQ;SAAY,CACbiC,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAExB,SAAS,EAAE,GAAK,GAAGwB,KAAK,CAAC,EAAE;mBAAIxB;aAAU,CAACiD,IAAI,GAAGC,IAAI,CAAC,MAAM,EACzED,IAAI,GACJC,IAAI,CAAC;QACRhE,YAAYgE,IAAI,CAAC;KAClB;IAED,MAAMC,OAAO;QACXrE;WACG,IAAIsE,IAAI9D,YAAYiC,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAKc,8BAA8Bd;KACxE;IAED,MAAM6B,sBAAsB7E,8BAA8B;QACxD8E,cAAc/E;QACdyE;QACAO,SAAS,UACPpC,yBAAyB;gBACvB7B;gBACAL;gBACAC;gBACAa;YACF;QACFyD,YAAY3E;QACZsE;IACF;IAEA,OAAOE;AACT;AAEA,OAAO,eAAeI,iBAAiBhB,GAAmB;IACxD,OAAOD,qBAAqBC;AAC9B;AAEA,OAAO,eAAeiB,2BACpBjB,GAAmB;IAEnB,MAAMkB,OAAO,MAAMnB,qBAAqBC;IAExC,OAAO;QACLnD,aAAaqE,KAAKrE,WAAW;QAC7BC,QAAQoE,KAAKpE,MAAM;QACnBN,aAAa0E,KAAK1E,WAAW;QAC7B2E,aAAaD,KAAKzE,WAAW,CAAC2E,MAAM;QACpC1B,WAAWwB,KAAKrE,WAAW,CAACwE,MAAM,CAAC,CAACC,OAAOC,IAAMD,QAAQC,EAAE7B,SAAS,EAAE;IACxE;AACF"}
+{"version":3,"sources":["../../src/utilities/altTextHealth.ts"],"sourcesContent":["import type { Payload, PayloadRequest } from 'payload'\n\nimport { unstable_cache } from 'next/cache.js'\n\nimport type {\n  AltTextPluginConfig,\n  NormalizedAltTextCollectionConfig,\n} from '../types/AltTextPluginConfig.js'\n\nimport { createCachedAltTextHealthScan } from './altTextHealthCache.js'\nimport { localesFromConfig } from './localesFromConfig.js'\nimport { buildMimeTypeWhere } from './mimeTypes.js'\nimport { summarizeCollection } from './summarizeCollection.js'\n\nexport const ALT_TEXT_HEALTH_PLUGIN_SLUG = 'alt-text'\nexport const ALT_TEXT_HEALTH_CACHE_TTL = 3600\nexport const ALT_TEXT_HEALTH_GLOBAL_TAG = 'alt-text-health'\n\nexport type AltTextHealthErrorCode =\n  | 'ALT_TEXT_COLLECTION_READ_FAILED'\n  | 'ALT_TEXT_PLUGIN_CONFIG_MISSING'\n\nexport type AltTextHealthError = {\n  code: AltTextHealthErrorCode\n  collection?: string\n  message: string\n  operation?: 'find'\n}\n\nexport type AltTextHealthScanCollection = {\n  collection: string\n  completeDocs: number\n  error?: AltTextHealthError\n  invalidDocIds: (number | string)[] | undefined\n  missingDocs: number\n  partialDocs: number\n  totalDocs: number\n}\n\nexport type AltTextHealthScan = {\n  checkedAt: string\n  collections: AltTextHealthScanCollection[]\n  errors: AltTextHealthError[]\n  isLocalized: boolean\n  localeCodes: string[]\n}\n\nexport type AltTextHealthWidgetData = {\n  collections: AltTextHealthScanCollection[]\n  errors: AltTextHealthError[]\n  isLocalized: boolean\n  localeCount: number\n  totalDocs: number\n}\n\ntype AltTextHealthComputationArgs = {\n  collections: NormalizedAltTextCollectionConfig[]\n  isLocalized: boolean\n  localeCodes: string[]\n  payload: Payload\n}\n\nconst createUnknownScan = ({\n  error,\n  isLocalized,\n  localeCodes,\n}: {\n  error: AltTextHealthScan['errors'][number]\n  isLocalized: boolean\n  localeCodes: string[]\n}): AltTextHealthScan => ({\n  checkedAt: new Date().toISOString(),\n  collections: [],\n  errors: [error],\n  isLocalized,\n  localeCodes,\n})\n\nconst createCollectionReadError = (collection: string, message: string) => ({\n  code: 'ALT_TEXT_COLLECTION_READ_FAILED' as const,\n  collection,\n  message,\n  operation: 'find' as const,\n})\n\nconst PAGE_SIZE = 500\n\nasync function fetchAllDocs(\n  payload: Payload,\n  collection: string,\n  isLocalized: boolean,\n  mimeTypes: readonly string[],\n): Promise<{ alt: unknown; id: number | string }[]> {\n  const where = buildMimeTypeWhere(mimeTypes)\n  if (!where) {\n    return []\n  }\n\n  const docs: { alt: unknown; id: number | string }[] = []\n  let page = 1\n  let hasMore = true\n\n  while (hasMore) {\n    const result = await payload.find({\n      collection,\n      depth: 0,\n      fallbackLocale: isLocalized ? false : undefined,\n      limit: PAGE_SIZE,\n      locale: isLocalized ? 'all' : undefined,\n      overrideAccess: true,\n      page,\n      select: {\n        alt: true,\n      },\n      where,\n    })\n\n    for (const doc of result.docs) {\n      docs.push({\n        id: doc.id,\n        alt: 'alt' in doc ? doc.alt : undefined,\n      })\n    }\n\n    hasMore = result.hasNextPage\n    page++\n  }\n\n  return docs\n}\n\nasync function computeAltTextHealthScan({\n  collections,\n  isLocalized,\n  localeCodes,\n  payload,\n}: AltTextHealthComputationArgs): Promise<AltTextHealthScan> {\n  const collectionSummaries = await Promise.all(\n    collections.map(async ({ slug, mimeTypes }): Promise<AltTextHealthScanCollection> => {\n      try {\n        const docs = await fetchAllDocs(payload, slug, isLocalized, mimeTypes)\n\n        return summarizeCollection({\n          collection: slug,\n          docs,\n          isLocalized,\n          localeCodes,\n        })\n      } catch (error) {\n        const message = error instanceof Error ? error.message : 'Unknown error'\n        const collectionError = createCollectionReadError(slug, message)\n\n        payload.logger.error({\n          collection: slug,\n          err: error,\n          msg: 'Alt text health check failed while reading a collection.',\n          operation: 'find',\n          plugin: ALT_TEXT_HEALTH_PLUGIN_SLUG,\n        })\n\n        return {\n          collection: slug,\n          completeDocs: 0,\n          error: collectionError,\n          invalidDocIds: undefined,\n          missingDocs: 0,\n          partialDocs: 0,\n          totalDocs: 0,\n        }\n      }\n    }),\n  )\n\n  const errors = collectionSummaries\n    .filter((summary) => summary.error)\n    .map((summary) => summary.error!)\n\n  return {\n    checkedAt: new Date().toISOString(),\n    collections: collectionSummaries,\n    errors,\n    isLocalized,\n    localeCodes,\n  }\n}\n\nexport const getAltTextHealthCollectionTag = (collectionSlug: string): string =>\n  `${ALT_TEXT_HEALTH_GLOBAL_TAG}:${collectionSlug}`\n\nasync function getAltTextHealthScan(req: PayloadRequest): Promise<AltTextHealthScan> {\n  const { payload } = req\n  const pluginConfig = payload.config.custom?.altTextPluginConfig as AltTextPluginConfig | undefined\n  const localeCodes =\n    localesFromConfig(payload.config) ?? (pluginConfig?.locale ? [pluginConfig.locale] : [])\n  const isLocalized = Boolean(payload.config.localization)\n\n  if (!pluginConfig) {\n    return createUnknownScan({\n      error: {\n        code: 'ALT_TEXT_PLUGIN_CONFIG_MISSING',\n        message: 'Alt text plugin config not found',\n      },\n      isLocalized,\n      localeCodes,\n    })\n  }\n\n  const collections = pluginConfig.collections\n\n  const cacheKeyParts = [\n    ALT_TEXT_HEALTH_GLOBAL_TAG,\n    [...collections]\n      .map(({ slug, mimeTypes }) => `${slug}:${[...mimeTypes].sort().join('|')}`)\n      .sort()\n      .join(','),\n    localeCodes.join(','),\n  ]\n\n  const tags = [\n    ALT_TEXT_HEALTH_GLOBAL_TAG,\n    ...new Set(collections.map(({ slug }) => getAltTextHealthCollectionTag(slug))),\n  ]\n\n  const getCachedHealthScan = createCachedAltTextHealthScan({\n    cacheFactory: unstable_cache,\n    cacheKeyParts,\n    compute: async () =>\n      computeAltTextHealthScan({\n        collections,\n        isLocalized,\n        localeCodes,\n        payload,\n      }),\n    revalidate: ALT_TEXT_HEALTH_CACHE_TTL,\n    tags,\n  })\n\n  return getCachedHealthScan()\n}\n\n/**\n * Whether `req.user` is allowed to read the given collection at the collection\n * level. The collection's `read` access is evaluated with the request; `false`\n * denies, while `true` or a scoped `Where` constraint grants visibility of the\n * collection's health aggregate. A thrown access function (e.g. `Forbidden`)\n * counts as denied so a restricted collection never leaks.\n */\nasync function userCanReadCollection(req: PayloadRequest, slug: string): Promise<boolean> {\n  const readAccess = req.payload.collections?.[slug]?.config.access?.read\n\n  if (typeof readAccess !== 'function') {\n    return true\n  }\n\n  try {\n    return (await readAccess({ req })) !== false\n  } catch {\n    return false\n  }\n}\n\n/**\n * Filters a shared, elevated-access health scan down to the collections the\n * requesting user may read. The scan is computed once with `overrideAccess: true`\n * so it stays complete and cacheable; access is applied per request at\n * collection granularity, matching the aggregate's altitude.\n */\nexport async function filterScanByReadAccess(\n  req: PayloadRequest,\n  scan: AltTextHealthScan,\n): Promise<AltTextHealthScan> {\n  const visibility = await Promise.all(\n    scan.collections.map((collection) => userCanReadCollection(req, collection.collection)),\n  )\n\n  const collections = scan.collections.filter((_, index) => visibility[index])\n  const allowedSlugs = new Set(collections.map((collection) => collection.collection))\n  const errors = scan.errors.filter(\n    (error) => !error.collection || allowedSlugs.has(error.collection),\n  )\n\n  return { ...scan, collections, errors }\n}\n\n/**\n * Whether the requesting user may view the health report at all, per the\n * configured `healthCheck` access gate. The dashboard widget uses this to hide\n * itself, mirroring the gate enforced on the health endpoint.\n */\nexport async function canViewHealthReport(req: PayloadRequest): Promise<boolean> {\n  const pluginConfig = req.payload.config.custom?.altTextPluginConfig as\n    | AltTextPluginConfig\n    | undefined\n\n  if (!pluginConfig) {\n    return false\n  }\n\n  return pluginConfig.healthCheckAccess({ req })\n}\n\nexport function toWidgetData(scan: AltTextHealthScan): AltTextHealthWidgetData {\n  return {\n    collections: scan.collections,\n    errors: scan.errors,\n    isLocalized: scan.isLocalized,\n    localeCount: scan.localeCodes.length,\n    totalDocs: scan.collections.reduce((total, c) => total + c.totalDocs, 0),\n  }\n}\n\nexport async function getAltTextHealth(req: PayloadRequest): Promise<AltTextHealthScan> {\n  return filterScanByReadAccess(req, await getAltTextHealthScan(req))\n}\n\nexport async function getAltTextHealthWidgetData(\n  req: PayloadRequest,\n): Promise<AltTextHealthWidgetData> {\n  return toWidgetData(await filterScanByReadAccess(req, await getAltTextHealthScan(req)))\n}\n"],"names":["unstable_cache","createCachedAltTextHealthScan","localesFromConfig","buildMimeTypeWhere","summarizeCollection","ALT_TEXT_HEALTH_PLUGIN_SLUG","ALT_TEXT_HEALTH_CACHE_TTL","ALT_TEXT_HEALTH_GLOBAL_TAG","createUnknownScan","error","isLocalized","localeCodes","checkedAt","Date","toISOString","collections","errors","createCollectionReadError","collection","message","code","operation","PAGE_SIZE","fetchAllDocs","payload","mimeTypes","where","docs","page","hasMore","result","find","depth","fallbackLocale","undefined","limit","locale","overrideAccess","select","alt","doc","push","id","hasNextPage","computeAltTextHealthScan","collectionSummaries","Promise","all","map","slug","Error","collectionError","logger","err","msg","plugin","completeDocs","invalidDocIds","missingDocs","partialDocs","totalDocs","filter","summary","getAltTextHealthCollectionTag","collectionSlug","getAltTextHealthScan","req","pluginConfig","config","custom","altTextPluginConfig","Boolean","localization","cacheKeyParts","sort","join","tags","Set","getCachedHealthScan","cacheFactory","compute","revalidate","userCanReadCollection","readAccess","access","read","filterScanByReadAccess","scan","visibility","_","index","allowedSlugs","has","canViewHealthReport","healthCheckAccess","toWidgetData","localeCount","length","reduce","total","c","getAltTextHealth","getAltTextHealthWidgetData"],"mappings":"AAEA,SAASA,cAAc,QAAQ,gBAAe;AAO9C,SAASC,6BAA6B,QAAQ,0BAAyB;AACvE,SAASC,iBAAiB,QAAQ,yBAAwB;AAC1D,SAASC,kBAAkB,QAAQ,iBAAgB;AACnD,SAASC,mBAAmB,QAAQ,2BAA0B;AAE9D,OAAO,MAAMC,8BAA8B,WAAU;AACrD,OAAO,MAAMC,4BAA4B,KAAI;AAC7C,OAAO,MAAMC,6BAA6B,kBAAiB;AA8C3D,MAAMC,oBAAoB,CAAC,EACzBC,KAAK,EACLC,WAAW,EACXC,WAAW,EAKZ,GAAyB,CAAA;QACxBC,WAAW,IAAIC,OAAOC,WAAW;QACjCC,aAAa,EAAE;QACfC,QAAQ;YAACP;SAAM;QACfC;QACAC;IACF,CAAA;AAEA,MAAMM,4BAA4B,CAACC,YAAoBC,UAAqB,CAAA;QAC1EC,MAAM;QACNF;QACAC;QACAE,WAAW;IACb,CAAA;AAEA,MAAMC,YAAY;AAElB,eAAeC,aACbC,OAAgB,EAChBN,UAAkB,EAClBR,WAAoB,EACpBe,SAA4B;IAE5B,MAAMC,QAAQvB,mBAAmBsB;IACjC,IAAI,CAACC,OAAO;QACV,OAAO,EAAE;IACX;IAEA,MAAMC,OAAgD,EAAE;IACxD,IAAIC,OAAO;IACX,IAAIC,UAAU;IAEd,MAAOA,QAAS;QACd,MAAMC,SAAS,MAAMN,QAAQO,IAAI,CAAC;YAChCb;YACAc,OAAO;YACPC,gBAAgBvB,cAAc,QAAQwB;YACtCC,OAAOb;YACPc,QAAQ1B,cAAc,QAAQwB;YAC9BG,gBAAgB;YAChBT;YACAU,QAAQ;gBACNC,KAAK;YACP;YACAb;QACF;QAEA,KAAK,MAAMc,OAAOV,OAAOH,IAAI,CAAE;YAC7BA,KAAKc,IAAI,CAAC;gBACRC,IAAIF,IAAIE,EAAE;gBACVH,KAAK,SAASC,MAAMA,IAAID,GAAG,GAAGL;YAChC;QACF;QAEAL,UAAUC,OAAOa,WAAW;QAC5Bf;IACF;IAEA,OAAOD;AACT;AAEA,eAAeiB,yBAAyB,EACtC7B,WAAW,EACXL,WAAW,EACXC,WAAW,EACXa,OAAO,EACsB;IAC7B,MAAMqB,sBAAsB,MAAMC,QAAQC,GAAG,CAC3ChC,YAAYiC,GAAG,CAAC,OAAO,EAAEC,IAAI,EAAExB,SAAS,EAAE;QACxC,IAAI;YACF,MAAME,OAAO,MAAMJ,aAAaC,SAASyB,MAAMvC,aAAae;YAE5D,OAAOrB,oBAAoB;gBACzBc,YAAY+B;gBACZtB;gBACAjB;gBACAC;YACF;QACF,EAAE,OAAOF,OAAO;YACd,MAAMU,UAAUV,iBAAiByC,QAAQzC,MAAMU,OAAO,GAAG;YACzD,MAAMgC,kBAAkBlC,0BAA0BgC,MAAM9B;YAExDK,QAAQ4B,MAAM,CAAC3C,KAAK,CAAC;gBACnBS,YAAY+B;gBACZI,KAAK5C;gBACL6C,KAAK;gBACLjC,WAAW;gBACXkC,QAAQlD;YACV;YAEA,OAAO;gBACLa,YAAY+B;gBACZO,cAAc;gBACd/C,OAAO0C;gBACPM,eAAevB;gBACfwB,aAAa;gBACbC,aAAa;gBACbC,WAAW;YACb;QACF;IACF;IAGF,MAAM5C,SAAS6B,oBACZgB,MAAM,CAAC,CAACC,UAAYA,QAAQrD,KAAK,EACjCuC,GAAG,CAAC,CAACc,UAAYA,QAAQrD,KAAK;IAEjC,OAAO;QACLG,WAAW,IAAIC,OAAOC,WAAW;QACjCC,aAAa8B;QACb7B;QACAN;QACAC;IACF;AACF;AAEA,OAAO,MAAMoD,gCAAgC,CAACC,iBAC5C,GAAGzD,2BAA2B,CAAC,EAAEyD,gBAAgB,CAAA;AAEnD,eAAeC,qBAAqBC,GAAmB;IACrD,MAAM,EAAE1C,OAAO,EAAE,GAAG0C;IACpB,MAAMC,eAAe3C,QAAQ4C,MAAM,CAACC,MAAM,EAAEC;IAC5C,MAAM3D,cACJT,kBAAkBsB,QAAQ4C,MAAM,KAAMD,CAAAA,cAAc/B,SAAS;QAAC+B,aAAa/B,MAAM;KAAC,GAAG,EAAE,AAAD;IACxF,MAAM1B,cAAc6D,QAAQ/C,QAAQ4C,MAAM,CAACI,YAAY;IAEvD,IAAI,CAACL,cAAc;QACjB,OAAO3D,kBAAkB;YACvBC,OAAO;gBACLW,MAAM;gBACND,SAAS;YACX;YACAT;YACAC;QACF;IACF;IAEA,MAAMI,cAAcoD,aAAapD,WAAW;IAE5C,MAAM0D,gBAAgB;QACpBlE;QACA;eAAIQ;SAAY,CACbiC,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAExB,SAAS,EAAE,GAAK,GAAGwB,KAAK,CAAC,EAAE;mBAAIxB;aAAU,CAACiD,IAAI,GAAGC,IAAI,CAAC,MAAM,EACzED,IAAI,GACJC,IAAI,CAAC;QACRhE,YAAYgE,IAAI,CAAC;KAClB;IAED,MAAMC,OAAO;QACXrE;WACG,IAAIsE,IAAI9D,YAAYiC,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAKc,8BAA8Bd;KACxE;IAED,MAAM6B,sBAAsB7E,8BAA8B;QACxD8E,cAAc/E;QACdyE;QACAO,SAAS,UACPpC,yBAAyB;gBACvB7B;gBACAL;gBACAC;gBACAa;YACF;QACFyD,YAAY3E;QACZsE;IACF;IAEA,OAAOE;AACT;AAEA;;;;;;CAMC,GACD,eAAeI,sBAAsBhB,GAAmB,EAAEjB,IAAY;IACpE,MAAMkC,aAAajB,IAAI1C,OAAO,CAACT,WAAW,EAAE,CAACkC,KAAK,EAAEmB,OAAOgB,QAAQC;IAEnE,IAAI,OAAOF,eAAe,YAAY;QACpC,OAAO;IACT;IAEA,IAAI;QACF,OAAO,AAAC,MAAMA,WAAW;YAAEjB;QAAI,OAAQ;IACzC,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAeoB,uBACpBpB,GAAmB,EACnBqB,IAAuB;IAEvB,MAAMC,aAAa,MAAM1C,QAAQC,GAAG,CAClCwC,KAAKxE,WAAW,CAACiC,GAAG,CAAC,CAAC9B,aAAegE,sBAAsBhB,KAAKhD,WAAWA,UAAU;IAGvF,MAAMH,cAAcwE,KAAKxE,WAAW,CAAC8C,MAAM,CAAC,CAAC4B,GAAGC,QAAUF,UAAU,CAACE,MAAM;IAC3E,MAAMC,eAAe,IAAId,IAAI9D,YAAYiC,GAAG,CAAC,CAAC9B,aAAeA,WAAWA,UAAU;IAClF,MAAMF,SAASuE,KAAKvE,MAAM,CAAC6C,MAAM,CAC/B,CAACpD,QAAU,CAACA,MAAMS,UAAU,IAAIyE,aAAaC,GAAG,CAACnF,MAAMS,UAAU;IAGnE,OAAO;QAAE,GAAGqE,IAAI;QAAExE;QAAaC;IAAO;AACxC;AAEA;;;;CAIC,GACD,OAAO,eAAe6E,oBAAoB3B,GAAmB;IAC3D,MAAMC,eAAeD,IAAI1C,OAAO,CAAC4C,MAAM,CAACC,MAAM,EAAEC;IAIhD,IAAI,CAACH,cAAc;QACjB,OAAO;IACT;IAEA,OAAOA,aAAa2B,iBAAiB,CAAC;QAAE5B;IAAI;AAC9C;AAEA,OAAO,SAAS6B,aAAaR,IAAuB;IAClD,OAAO;QACLxE,aAAawE,KAAKxE,WAAW;QAC7BC,QAAQuE,KAAKvE,MAAM;QACnBN,aAAa6E,KAAK7E,WAAW;QAC7BsF,aAAaT,KAAK5E,WAAW,CAACsF,MAAM;QACpCrC,WAAW2B,KAAKxE,WAAW,CAACmF,MAAM,CAAC,CAACC,OAAOC,IAAMD,QAAQC,EAAExC,SAAS,EAAE;IACxE;AACF;AAEA,OAAO,eAAeyC,iBAAiBnC,GAAmB;IACxD,OAAOoB,uBAAuBpB,KAAK,MAAMD,qBAAqBC;AAChE;AAEA,OAAO,eAAeoC,2BACpBpC,GAAmB;IAEnB,OAAO6B,aAAa,MAAMT,uBAAuBpB,KAAK,MAAMD,qBAAqBC;AACnF"}

package/package.json

@@ -1,9 +1,12 @@
 {
   "name": "@jhb.software/payload-alt-text-plugin",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "A Payload CMS plugin that adds AI-powered alt text generation for images.",
   "bugs": "https://github.com/jhb-software/payload-plugins/issues",
-  "repository": "https://github.com/jhb-software/payload-plugins",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/jhb-software/payload-plugins"
+  },
   "keywords": [
     "payload",
     "plugin",
@@ -17,30 +20,31 @@
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "dependencies": {
-    "openai": "^6.37.0",
+    "openai": "^6.44.0",
     "p-map": "^7.0.4",
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@payloadcms/translations": "^3.84.1",
-    "@payloadcms/ui": "^3.84.1",
+    "@payloadcms/translations": "^3.85.1",
+    "@payloadcms/ui": "^3.85.1",
     "next": "^15.0.0 || ^16.0.0",
-    "payload": "^3.84.1",
-    "react": "19.2.6",
-    "react-dom": "19.2.6"
+    "payload": "^3.85.1",
+    "react": "19.2.7",
+    "react-dom": "19.2.7"
   },
   "devDependencies": {
     "@payloadcms/eslint-config": "^3.28.0",
-    "@payloadcms/translations": "^3.84.1",
+    "@payloadcms/translations": "^3.85.1",
     "@swc/cli": "^0.8.1",
-    "@swc/core": "^1.15.33",
-    "@types/react": "19.2.14",
+    "@swc/core": "^1.15.41",
+    "@types/react": "19.2.17",
     "@types/react-dom": "19.2.3",
     "copyfiles": "2.4.1",
     "eslint": "^9.39.4",
-    "prettier": "^3.8.3",
+    "prettier": "^3.8.4",
     "rimraf": "6.1.3",
-    "typescript": "^6.0.3"
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.9"
   },
   "files": [
     "dist"
@@ -75,8 +79,7 @@
     "format": "prettier --write src \"*.{json,md,js,mjs,cjs}\"",
     "lint": "eslint src",
     "lint:fix": "eslint src --fix",
-    "test": "node --experimental-strip-types --test test/*.test.ts",
-    "test:health": "node --experimental-strip-types --test test/altTextHealth.test.ts",
+    "test": "vitest run",
     "typecheck": "tsc --noEmit"
   }
 }