@next-buildr/payload 2.0.0 → 3.0.0-rc.0

package/dist/plugin/access.d.ts

@@ -15,5 +15,12 @@ export declare const isApiKeyRequest: (req: PayloadRequest) => boolean;
  * make uses the caller's `req` with `overrideAccess: false`.
  */
 export declare function allowed(options: Pick<ResolvedOptions, 'access' | 'mcp'>, action: Action, req: PayloadRequest): Promise<boolean>;
+/**
+ * Whether the request may save author code (ADR-026): the plugin `authorCode` option, `false` by
+ * default, as a boolean or a function of the request (which sees `req.user`, so it decides what an
+ * unauthenticated Local API call may do). An API-key request never may, whatever the option says
+ * (an agent is not a trusted editor); a function that throws or returns anything but `true` means no.
+ */
+export declare function authorCodePermitted(options: Pick<ResolvedOptions, 'authorCode'>, req: PayloadRequest): Promise<boolean>;
 export declare function permissionsOf(options: Pick<ResolvedOptions, 'access' | 'mcp'>, req: PayloadRequest): Promise<Permissions>;
 //# sourceMappingURL=access.d.ts.map

package/dist/plugin/access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/plugin/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,iBAAiB,CAAC;AAE5D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;CACtC;AAED,qGAAqG;AACrG,eAAO,MAAM,eAAe,QAAS,cAAc,KAAG,OAC4B,CAAC;AAKnF;;;;;GAKG;AACH,wBAAsB,OAAO,CAC3B,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,KAAK,CAAC,EAChD,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,KAAK,CAAC,EAChD,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,WAAW,CAAC,CAOtB"}
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/plugin/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,iBAAiB,CAAC;AAE5D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;CACtC;AAED,qGAAqG;AACrG,eAAO,MAAM,eAAe,QAAS,cAAc,KAAG,OAC4B,CAAC;AAKnF;;;;;GAKG;AACH,wBAAsB,OAAO,CAC3B,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,KAAK,CAAC,EAChD,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,EAC5C,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,KAAK,CAAC,EAChD,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,WAAW,CAAC,CAOtB"}

package/dist/plugin/access.js

@@ -22,6 +22,25 @@ export async function allowed(options, action, req) {
     const check = options.access[action];
     return check === undefined ? true : Boolean(await check({ req }));
 }
+/**
+ * Whether the request may save author code (ADR-026): the plugin `authorCode` option, `false` by
+ * default, as a boolean or a function of the request (which sees `req.user`, so it decides what an
+ * unauthenticated Local API call may do). An API-key request never may, whatever the option says
+ * (an agent is not a trusted editor); a function that throws or returns anything but `true` means no.
+ */
+export async function authorCodePermitted(options, req) {
+    if (isApiKeyRequest(req))
+        return false;
+    const setting = options.authorCode;
+    if (typeof setting === 'boolean')
+        return setting;
+    try {
+        return (await setting({ req })) === true;
+    }
+    catch {
+        return false;
+    }
+}
 export async function permissionsOf(options, req) {
     const [canEdit, canPublish, canUnlockTemplates] = await Promise.all([
         allowed(options, 'edit', req),

package/dist/plugin/collections/templates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/plugin/collections/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EAGtB,MAAM,SAAS,CAAC;AAKjB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAmErD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,GAAG,gBAAgB,CA8CnB"}
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/plugin/collections/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EAGtB,MAAM,SAAS,CAAC;AAKjB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AA0ErD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,GAAG,gBAAgB,CA8CnB"}

package/dist/plugin/collections/templates.js

@@ -1,6 +1,6 @@
 import { ValidationError, } from 'payload';
 import { TEMPLATES_COLLECTION } from '../../data/resolve-layout.js';
-import { allowed } from '../access.js';
+import { allowed, authorCodePermitted } from '../access.js';
 import { describeDiagnostics, processLayout } from '../hooks/process-layout.js';
 import { configuredLocales } from '../locales.js';
 const isRecord = (value) => typeof value === 'object' && value !== null;
@@ -49,12 +49,18 @@ const singleDefault = async ({ data, originalDoc, req }) => {
     return data;
 };
 /** A stored layout is validated like the builder's: an invalid document never reaches the database. */
-const templateLayoutHook = (options) => ({ value, req }) => {
+const templateLayoutHook = (options) => async ({ value, req, originalDoc, operation }) => {
     if (value === undefined || value === null)
         return value;
     const result = processLayout(value, {
-        ...options,
+        registry: options.registry,
+        limits: options.limits,
         locales: configuredLocales(req.payload.config),
+        allowAuthorCode: await authorCodePermitted(options, req),
+        // A new template has no stored layout (on a duplicate, `originalDoc` is the source document).
+        previous: operation === 'create'
+            ? undefined
+            : originalDoc?.['layout'],
     });
     if (!result.ok) {
         throw new ValidationError({

package/dist/plugin/endpoints/context.d.ts

@@ -1,6 +1,7 @@
 import type { PayloadRequest } from 'payload';
 import type { SchemaOptions, SchemaSource } from '../../data/index.ts';
 import { type Action } from '../access.ts';
+import type { CaptchaGate, CaptchaVerifier } from '../forms/captcha.ts';
 import type { RateLimiter } from '../forms/rate-limit.ts';
 import type { LocaleArgs } from '../locales.ts';
 import type { ResolvedOptions } from '../options.ts';
@@ -13,6 +14,13 @@ export interface EndpointEnv {
     readonly options: ResolvedOptions;
     /** Limits form submissions (present when forms are enabled). */
     readonly rateLimiter?: RateLimiter | undefined;
+    /** Internal dependencies, instantiated once per plugin; never a public verifier option. */
+    readonly captcha?: {
+        readonly verifier: CaptchaVerifier;
+        readonly rateLimiter: RateLimiter;
+        readonly gate: CaptchaGate;
+        readonly hostnames: readonly string[];
+    } | undefined;
     /** Limits the writes of API-key requests (present when `mcp.enabled`). */
     readonly writeLimiter?: RateLimiter | undefined;
 }

package/dist/plugin/endpoints/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/plugin/endpoints/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,KAAK,MAAM,EAAyC,MAAM,cAAc,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIrD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,4CAA4C;AAC5C,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,gEAAgE;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAC/C,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACjD;AAED,MAAM,MAAM,OAAO,CAAC,CAAC,IACjB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;AAExD,wGAAwG;AACxG,eAAO,MAAM,SAAS,QAAS,WAAW,cAAc,MAAM,KAAG,OAEgC,CAAC;AAElG;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,WAAW,EAChB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAQ/B;AAED,mGAAmG;AACnG,eAAO,MAAM,YAAY,QAAS,cAAc,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAGvE,CAAC;AAEH;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMxF;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAanF;AAED,8GAA8G;AAC9G,wBAAgB,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAQvF;AAED,gDAAgD;AAChD,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAE3C,iGAAiG;AACjG,wBAAgB,SAAS,CACvB,GAAG,EAAE,WAAW,EAChB,GAAG,EAAE,cAAc,GAClB;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAalD;AAED,gEAAgE;AAChE,wBAAsB,MAAM,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAM3E;AAED,uEAAuE;AACvE,eAAO,MAAM,OAAO,QAAS,WAAW,UAAU,MAAM,OAAO,cAAc,KAAG,OAAO,CAAC,OAAO,CAC1D,CAAC;AAEtC,qFAAqF;AACrF,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE;IACP,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;CACnC,GACL,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAgB3C;AAED,uEAAuE;AACvE,eAAO,MAAM,UAAU,QAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MACa,CAAC"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/plugin/endpoints/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,KAAK,MAAM,EAAyC,MAAM,cAAc,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIrD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,4CAA4C;AAC5C,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,gEAAgE;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAC/C,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,CAAC,EACb;QACE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;QACnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;QAClC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;KACvC,GACD,SAAS,CAAC;IACd,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACjD;AAED,MAAM,MAAM,OAAO,CAAC,CAAC,IACjB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;AAExD,wGAAwG;AACxG,eAAO,MAAM,SAAS,QAAS,WAAW,cAAc,MAAM,KAAG,OAEgC,CAAC;AAElG;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,WAAW,EAChB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAQ/B;AAED,mGAAmG;AACnG,eAAO,MAAM,YAAY,QAAS,cAAc,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAGvE,CAAC;AAEH;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMxF;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAanF;AAED,8GAA8G;AAC9G,wBAAgB,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAQvF;AAED,gDAAgD;AAChD,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAE3C,iGAAiG;AACjG,wBAAgB,SAAS,CACvB,GAAG,EAAE,WAAW,EAChB,GAAG,EAAE,cAAc,GAClB;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAalD;AAED,gEAAgE;AAChE,wBAAsB,MAAM,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAM3E;AAED,uEAAuE;AACvE,eAAO,MAAM,OAAO,QAAS,WAAW,UAAU,MAAM,OAAO,cAAc,KAAG,OAAO,CAAC,OAAO,CAC1D,CAAC;AAEtC,qFAAqF;AACrF,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE;IACP,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;CACnC,GACL,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAgB3C;AAED,uEAAuE;AACvE,eAAO,MAAM,UAAU,QAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MACa,CAAC"}

package/dist/plugin/endpoints/forms-captcha.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=forms-captcha.test.d.ts.map

package/dist/plugin/endpoints/forms-captcha.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms-captcha.test.d.ts","sourceRoot":"","sources":["../../../src/plugin/endpoints/forms-captcha.test.ts"],"names":[],"mappings":""}