@payload-onpage/plugin 0.0.0-stage → 0.1.0

package/dist/http.js

@@ -0,0 +1,53 @@
+/** Request helpers shared by the endpoints. */
+import { parseRefKey, safePath } from '@payload-onpage/core';
+/** The site origin: `serverURL` when configured, else the request's own origin. */
+export function originOf(req) {
+    const configured = req.payload.config.serverURL;
+    if (configured)
+        return configured.replace(/\/$/, '');
+    try {
+        return new URL(req.url ?? '').origin;
+    }
+    catch {
+        const host = req.headers.get('x-forwarded-host') ?? req.headers.get('host') ?? 'localhost';
+        const proto = req.headers.get('x-forwarded-proto') ?? 'http';
+        return `${proto}://${host}`;
+    }
+}
+export const isSecure = (req) => originOf(req).startsWith('https:');
+export const queryOf = (req) => new URL(req.url ?? '/', 'http://localhost').searchParams;
+export const text = (body, status) => new Response(body, {
+    status,
+    headers: { 'content-type': 'text/plain; charset=utf-8', 'cache-control': 'no-store' },
+});
+export const json = (body, status = 200) => Response.json(body, { status, headers: { 'cache-control': 'private, no-store' } });
+/** Redirect to a same-origin path (anything unsafe becomes "/"). 303 turns a POST into a GET. */
+export const redirectTo = (req, path, status = 303) => Response.redirect(new URL(safePath(path) ?? '/', originOf(req)), status);
+/**
+ * CSRF guard for state-changing endpoints: a POST from this site (Origin, or
+ * Sec-Fetch-Site when Origin is absent). Returns an error response or null.
+ */
+export function rejectCrossSite(req) {
+    if (req.method?.toUpperCase() !== 'POST')
+        return text('Method not allowed', 405);
+    const origin = req.headers.get('origin');
+    if (origin)
+        return origin === originOf(req) ? null : text('Cross-site request refused', 403);
+    const site = req.headers.get('sec-fetch-site');
+    return site === 'same-origin' || site === 'none' ? null : text('Cross-site request refused', 403);
+}
+/** A document ref from `kind`, `slug`, `id` query/body values. */
+export function readRef(values) {
+    const slug = typeof values.slug === 'string' ? values.slug : '';
+    if (!slug)
+        return null;
+    if (values.kind === 'global')
+        return { kind: 'global', slug };
+    const id = values.id;
+    if (typeof id === 'number')
+        return { kind: 'collection', slug, id };
+    if (typeof id !== 'string' || !id)
+        return null;
+    return parseRefKey(`c:${slug}:${id}`);
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAe,MAAM,sBAAsB,CAAA;AAGzE,mFAAmF;AACnF,MAAM,UAAU,QAAQ,CAAC,GAAmB;IAC1C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAA;IAC/C,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACpD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,WAAW,CAAA;QAC1F,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAA;QAC5D,OAAO,GAAG,KAAK,MAAM,IAAI,EAAE,CAAA;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAmB,EAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;AAE5F,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAmB,EAAmB,EAAE,CAC9D,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,YAAY,CAAA;AAE1D,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,MAAc,EAAY,EAAE,CAC7D,IAAI,QAAQ,CAAC,IAAI,EAAE;IACjB,MAAM;IACN,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,eAAe,EAAE,UAAU,EAAE;CACtF,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAY,EAAE,CAC5D,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAA;AAEpF,iGAAiG;AACjG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAmB,EAAE,IAAa,EAAE,SAAoB,GAAG,EAAY,EAAE,CAClG,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;AAE1E;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAmB;IACjD,IAAI,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAA;IAChF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACxC,IAAI,MAAM;QAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAA;IAC5F,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC9C,OAAO,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAA;AACnG,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,OAAO,CAAC,MAAwD;IAC9E,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IAC7D,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAA;IACpB,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IACnE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IAC9C,OAAO,WAAW,CAAC,KAAK,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+import type { Plugin } from 'payload';
+import { type OnPageOptions } from './options.ts';
+export declare function onpage(options: OnPageOptions): Plugin;
+export type { OnPageDocOptions, OnPageOptions } from './options.ts';
+export { canEditDocument, canUseOnPage } from './access.ts';
+export { createPreviewToken, verifyPreviewToken, type PreviewTokenPayload } from './tokens.ts';
+export { serializeFields, type SerializeContext } from './schema.ts';
+export { wantsMarkers } from './hooks.ts';
+export { translations } from './translations.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAA0C,MAAM,EAAE,MAAM,SAAS,CAAA;AAG7E,OAAO,EAAgC,KAAK,aAAa,EAAE,MAAM,cAAc,CAAA;AAwB/E,wBAAgB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAwHrD;AAED,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAC9F,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/index.js

@@ -0,0 +1,148 @@
+/**
+ * @payload-onpage/plugin — the Payload side of payload-onpage.
+ *
+ *   plugins: [onpage({ collections: ['pages'], globals: ['header'], session: nextSession() })]
+ *
+ * Adds the endpoints in ./endpoints, auto-mapping on reads that ask for it,
+ * marker stripping and a stale-write guard on every write, and "Edit on page" /
+ * "Copy preview link" controls in the admin. Saves from the editor go through
+ * Payload's REST API, so access control, hooks, validation, drafts and versions
+ * apply unchanged.
+ */
+import { DEFAULTS } from '@payload-onpage/core';
+import { createEndpoints } from "./endpoints.js";
+import { encodeOnRead, guardStaleWrite, stripMarkers } from "./hooks.js";
+import { normalizeEntries } from "./options.js";
+import { serializeFields } from "./schema.js";
+import { translations } from "./translations.js";
+const APPLIED = 'payload-onpage';
+/** Ours first; the site's own translations (any language, any key) win. */
+function mergeTranslations(ours, theirs) {
+    const out = { ...ours };
+    for (const [lang, table] of Object.entries((theirs ?? {}))) {
+        const mine = out[lang] ?? {};
+        out[lang] = {
+            ...mine,
+            ...table,
+            onpage: { ...mine.onpage, ...(table.onpage ?? {}) },
+        };
+    }
+    return out;
+}
+export function onpage(options) {
+    return (incoming) => {
+        if (options.enabled === false || incoming.custom?.[APPLIED])
+            return incoming;
+        const prefix = options.routePrefix ?? DEFAULTS.routePrefix;
+        const apiRoute = incoming.routes?.api ?? DEFAULTS.apiRoute;
+        const entries = [
+            ...normalizeEntries(options.collections, 'collection'),
+            ...normalizeEntries(options.globals, 'global'),
+        ];
+        const byKey = new Map(entries.map((e) => [`${e.kind}:${e.slug}`, e]));
+        const withHooks = (cfg, entry) => {
+            let fields;
+            // Encoding only needs names, types and editors: serialize once, lazily, without request context.
+            const lazyFields = () => (fields ??= serializeFields(cfg.fields, { blocks: incoming.blocks }));
+            const hooks = { ...(cfg.hooks ?? {}) };
+            hooks.beforeValidate = [...(hooks.beforeValidate ?? []), stripMarkers];
+            hooks.beforeChange = [...(hooks.beforeChange ?? []), stripMarkers, guardStaleWrite];
+            hooks.afterRead = [
+                ...(hooks.afterRead ?? []),
+                encodeOnRead({
+                    kind: entry.kind,
+                    slug: cfg.slug,
+                    fields: lazyFields,
+                    only: entry.options.fields,
+                    filter: options.encode,
+                }),
+            ];
+            return { ...cfg, hooks };
+        };
+        const control = (kind, slug) => ({
+            path: '@payload-onpage/plugin/admin#OnPageAdminControls',
+            clientProps: { kind, slug, prefix },
+        });
+        const withCollectionAdmin = (c) => {
+            const edit = c.admin?.components?.edit ?? {};
+            return {
+                ...c,
+                admin: {
+                    ...c.admin,
+                    components: {
+                        ...c.admin?.components,
+                        edit: {
+                            ...edit,
+                            beforeDocumentControls: [
+                                ...(edit.beforeDocumentControls ?? []),
+                                control('collection', c.slug),
+                            ],
+                        },
+                    },
+                },
+            };
+        };
+        const withGlobalAdmin = (g) => {
+            const elements = g.admin?.components?.elements ?? {};
+            return {
+                ...g,
+                admin: {
+                    ...g.admin,
+                    components: {
+                        ...g.admin?.components,
+                        elements: {
+                            ...elements,
+                            beforeDocumentControls: [
+                                ...(elements.beforeDocumentControls ?? []),
+                                control('global', g.slug),
+                            ],
+                        },
+                    },
+                },
+            };
+        };
+        const missing = entries.filter((e) => e.kind === 'global'
+            ? !incoming.globals?.some((g) => g.slug === e.slug)
+            : !incoming.collections?.some((c) => c.slug === e.slug));
+        if (missing.length) {
+            throw new Error(`payload-onpage: unknown ${missing.map((e) => `${e.kind} "${e.slug}"`).join(', ')}`);
+        }
+        return {
+            ...incoming,
+            custom: { ...incoming.custom, [APPLIED]: true },
+            i18n: {
+                ...incoming.i18n,
+                translations: mergeTranslations(translations, incoming.i18n?.translations),
+            },
+            collections: (incoming.collections ?? []).map((c) => {
+                const entry = byKey.get(`collection:${c.slug}`);
+                return entry ? withCollectionAdmin(withHooks(c, entry)) : c;
+            }),
+            globals: (incoming.globals ?? []).map((g) => {
+                const entry = byKey.get(`global:${g.slug}`);
+                return entry ? withGlobalAdmin(withHooks(g, entry)) : g;
+            }),
+            endpoints: [
+                ...(incoming.endpoints ?? []),
+                ...createEndpoints({
+                    options,
+                    prefix,
+                    apiRoute,
+                    entry: (kind, slug) => byKey.get(`${kind}:${slug}`),
+                }),
+            ],
+            onInit: async (payload) => {
+                if (process.env.NODE_ENV === 'production' && !payload.config.serverURL) {
+                    payload.logger.warn('payload-onpage: set `serverURL` in production so redirects, preview links and Secure cookies use the public origin.');
+                }
+                await incoming.onInit?.(payload);
+            },
+        };
+    };
+}
+export { canEditDocument, canUseOnPage } from "./access.js";
+export { createPreviewToken, verifyPreviewToken } from "./tokens.js";
+export { serializeFields } from "./schema.js";
+export { wantsMarkers } from "./hooks.js";
+export { translations } from "./translations.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAAoB,MAAM,sBAAsB,CAAA;AAEjE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACxE,OAAO,EAAE,gBAAgB,EAAkC,MAAM,cAAc,CAAA;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,MAAM,OAAO,GAAG,gBAAgB,CAAA;AAGhC,2EAA2E;AAC3E,SAAS,iBAAiB,CACxB,IAAkB,EAClB,MAAe;IAEf,MAAM,GAAG,GAAiB,EAAE,GAAG,IAAI,EAAE,CAAA;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,EAAE,CAAiB,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAC5B,GAAG,CAAC,IAAI,CAAC,GAAG;YACV,GAAG,IAAI;YACP,GAAG,KAAK;YACR,MAAM,EAAE,EAAE,GAAI,IAAI,CAAC,MAAiB,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;SAChE,CAAA;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAAsB;IAC3C,OAAO,CAAC,QAAgB,EAAU,EAAE;QAClC,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC;YAAE,OAAO,QAAQ,CAAA;QAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAA;QAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAA;QAC1D,MAAM,OAAO,GAAG;YACd,GAAG,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC;YACtD,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC;SAC/C,CAAA;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAErE,MAAM,SAAS,GAAG,CAA4C,GAAM,EAAE,KAAY,EAAK,EAAE;YACvF,IAAI,MAAiC,CAAA;YACrC,iGAAiG;YACjG,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;YAC9F,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAA+B,CAAA;YACnE,KAAK,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,CAAA;YACtE,KAAK,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,eAAe,CAAC,CAAA;YACnF,KAAK,CAAC,SAAS,GAAG;gBAChB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;gBAC1B,YAAY,CAAC;oBACX,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,UAAU;oBAClB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;oBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC;aACH,CAAA;YACD,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,CAAA;QAC1B,CAAC,CAAA;QAED,MAAM,OAAO,GAAG,CAAC,IAAmB,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC;YACtD,IAAI,EAAE,kDAAkD;YACxD,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC,CAAC,CAAA;QAEF,MAAM,mBAAmB,GAAG,CAAC,CAAmB,EAAoB,EAAE;YACpE,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAA;YAC5C,OAAO;gBACL,GAAG,CAAC;gBACJ,KAAK,EAAE;oBACL,GAAG,CAAC,CAAC,KAAK;oBACV,UAAU,EAAE;wBACV,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU;wBACtB,IAAI,EAAE;4BACJ,GAAG,IAAI;4BACP,sBAAsB,EAAE;gCACtB,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC;gCACtC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC;6BAC9B;yBACF;qBACF;iBACF;aACF,CAAA;QACH,CAAC,CAAA;QACD,MAAM,eAAe,GAAG,CAAC,CAAe,EAAgB,EAAE;YACxD,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,CAAA;YACpD,OAAO;gBACL,GAAG,CAAC;gBACJ,KAAK,EAAE;oBACL,GAAG,CAAC,CAAC,KAAK;oBACV,UAAU,EAAE;wBACV,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU;wBACtB,QAAQ,EAAE;4BACR,GAAG,QAAQ;4BACX,sBAAsB,EAAE;gCACtB,GAAG,CAAC,QAAQ,CAAC,sBAAsB,IAAI,EAAE,CAAC;gCAC1C,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC;6BAC1B;yBACF;qBACF;iBACF;aACF,CAAA;QACH,CAAC,CAAA;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACnC,CAAC,CAAC,IAAI,KAAK,QAAQ;YACjB,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC;YACnD,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAC1D,CAAA;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,2BAA2B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpF,CAAA;QACH,CAAC;QAED,OAAO;YACL,GAAG,QAAQ;YACX,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE;YAC/C,IAAI,EAAE;gBACJ,GAAG,QAAQ,CAAC,IAAI;gBAChB,YAAY,EAAE,iBAAiB,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;aAC3E;YACD,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC7D,CAAC,CAAC;YACF,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC3C,OAAO,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACzD,CAAC,CAAC;YACF,SAAS,EAAE;gBACT,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC;gBAC7B,GAAG,eAAe,CAAC;oBACjB,OAAO;oBACP,MAAM;oBACN,QAAQ;oBACR,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;iBACpD,CAAC;aACH;YACD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACxB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACvE,OAAO,CAAC,MAAM,CAAC,IAAI,CACjB,qHAAqH,CACtH,CAAA;gBACH,CAAC;gBACD,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAA;YAClC,CAAC;SACF,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AAGD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAA4B,MAAM,aAAa,CAAA;AAC9F,OAAO,EAAE,eAAe,EAAyB,MAAM,aAAa,CAAA;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/options.d.ts

@@ -0,0 +1,59 @@
+import type { DocRef, EncodeFilter, SessionAdapter } from '@payload-onpage/core';
+import type { PayloadRequest } from 'payload';
+export interface OnPageDocOptions {
+    /** Top-level fields editable on the page. Default: every top-level field the user may update. */
+    fields?: string[];
+    /**
+     * The site path that shows this document. Default for collections: the
+     * collection's `admin.preview` URL, else `/${doc.slug}`. Globals: "/".
+     */
+    url?: (args: {
+        doc: Record<string, unknown>;
+        locale?: string;
+        req: PayloadRequest;
+    }) => string | null | Promise<string | null>;
+}
+export interface OnPageOptions {
+    collections?: string[] | Record<string, OnPageDocOptions | true>;
+    globals?: string[] | Record<string, OnPageDocOptions | true>;
+    /**
+     * Who may use on-page editing (`ref` undefined) and edit a given document.
+     * Default: users of the admin user collection, with the document's own
+     * `update` access (evaluated by Payload, including row-level rules).
+     */
+    access?: (args: {
+        req: PayloadRequest;
+        ref?: DocRef;
+    }) => boolean | Promise<boolean>;
+    /** Framework adapter that switches edit/preview mode (e.g. `nextSession()`). Required for the enter/exit/preview endpoints. */
+    session?: SessionAdapter;
+    /** Narrow which strings get auto-mapping markers. */
+    encode?: EncodeFilter;
+    /** Lifetime of shareable preview links, in seconds. Default 1 day. */
+    previewLinkTTL?: number;
+    /** Extra check when a preview link is opened (e.g. a revocation list). Return false to refuse it. */
+    validatePreviewLink?: (args: {
+        req: PayloadRequest;
+        ref: DocRef;
+        path: string;
+        issuedAt: number;
+        id: string;
+    }) => boolean | Promise<boolean>;
+    /**
+     * Secret for preview links and the preview cookie. Default: Payload's `secret`
+     * (`PAYLOAD_SECRET`). The Next.js proxy must be given the same value.
+     */
+    secret?: string;
+    /** Auth cookie an editor's session is bound to. Default `${cookiePrefix}-token` ("payload-token"). */
+    authCookie?: string;
+    /** Endpoint prefix under the API route. Default "/onpage". */
+    routePrefix?: string;
+    enabled?: boolean;
+}
+export interface Entry {
+    kind: 'collection' | 'global';
+    slug: string;
+    options: OnPageDocOptions;
+}
+export declare const normalizeEntries: (input: OnPageOptions["collections"], kind: Entry["kind"]) => Entry[];
+//# sourceMappingURL=options.d.ts.map

package/dist/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAChF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,iGAAiG;IACjG,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB;;;OAGG;IACH,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE;QACX,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,GAAG,EAAE,cAAc,CAAA;KACpB,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CAC7C;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAChE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAC5D;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,cAAc,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACpF,+HAA+H;IAC/H,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB,qDAAqD;IACrD,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,qGAAqG;IACrG,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE;QAC3B,GAAG,EAAE,cAAc,CAAA;QACnB,GAAG,EAAE,MAAM,CAAA;QACX,IAAI,EAAE,MAAM,CAAA;QACZ,QAAQ,EAAE,MAAM,CAAA;QAChB,EAAE,EAAE,MAAM,CAAA;KACX,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,sGAAsG;IACtG,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,YAAY,GAAG,QAAQ,CAAA;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,gBAAgB,CAAA;CAC1B;AAED,eAAO,MAAM,gBAAgB,GAC3B,OAAO,aAAa,CAAC,aAAa,CAAC,EACnC,MAAM,KAAK,CAAC,MAAM,CAAC,KAClB,KAAK,EAG4F,CAAA"}

package/dist/options.js

@@ -0,0 +1,4 @@
+export const normalizeEntries = (input, kind) => Array.isArray(input)
+    ? input.map((slug) => ({ kind, slug, options: {} }))
+    : Object.entries(input ?? {}).map(([slug, o]) => ({ kind, slug, options: o === true ? {} : o }));
+//# sourceMappingURL=options.js.map

package/dist/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AA0DA,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAmC,EACnC,IAAmB,EACV,EAAE,CACX,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAClB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA"}

package/dist/paths.d.ts

@@ -0,0 +1,11 @@
+/** Where a document lives on the site. */
+import { type DocRef } from '@payload-onpage/core';
+import type { PayloadRequest } from 'payload';
+import type { Entry } from './options.ts';
+/**
+ * The site path that shows a document: the entry's `url` option, else the
+ * collection's `admin.preview` URL, else `/<slug>`; globals default to "/".
+ * Absolute URLs must be same-origin. Returns null when there's no page.
+ */
+export declare function resolvePath(req: PayloadRequest, ref: DocRef, entry: Entry, locale?: string): Promise<string | null>;
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,OAAO,EAAY,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AAEzC;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA0CxB"}

package/dist/paths.js

@@ -0,0 +1,58 @@
+/** Where a document lives on the site. */
+import { safePath } from '@payload-onpage/core';
+import { originOf } from "./http.js";
+/**
+ * The site path that shows a document: the entry's `url` option, else the
+ * collection's `admin.preview` URL, else `/<slug>`; globals default to "/".
+ * Absolute URLs must be same-origin. Returns null when there's no page.
+ */
+export async function resolvePath(req, ref, entry, locale) {
+    const localeArg = locale ? { locale: locale } : {};
+    const doc = ref.kind === 'global'
+        ? await req.payload
+            .findGlobal({
+            slug: ref.slug,
+            draft: true,
+            depth: 0,
+            overrideAccess: true,
+            ...localeArg,
+        })
+            .catch(() => null)
+        : await req.payload
+            .findByID({
+            collection: ref.slug,
+            id: ref.id,
+            draft: true,
+            depth: 0,
+            overrideAccess: true,
+            ...localeArg,
+        })
+            .catch(() => null);
+    if (!doc)
+        return null;
+    let url;
+    if (entry.options.url)
+        url = await entry.options.url({ doc, locale, req });
+    else if (ref.kind === 'collection') {
+        const preview = req.payload.collections[ref.slug]?.config.admin?.preview;
+        if (preview)
+            url = await preview(doc, { locale: locale ?? '', req, token: null });
+        if (!url && typeof doc.slug === 'string')
+            url = `/${doc.slug.replace(/^\/+/, '')}`;
+    }
+    else
+        url = '/';
+    if (!url)
+        return null;
+    const origin = originOf(req);
+    try {
+        const u = new URL(url, origin);
+        if (u.origin !== origin)
+            return null;
+        return safePath(u.pathname + u.search);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,OAAO,EAAE,QAAQ,EAAe,MAAM,sBAAsB,CAAA;AAE5D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAGpC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAmB,EACnB,GAAW,EACX,KAAY,EACZ,MAAe;IAEf,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3D,MAAM,GAAG,GACP,GAAG,CAAC,IAAI,KAAK,QAAQ;QACnB,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO;aACd,UAAU,CAAC;YACV,IAAI,EAAE,GAAG,CAAC,IAAa;YACvB,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,CAAC;YACR,cAAc,EAAE,IAAI;YACpB,GAAG,SAAS;SACb,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO;aACd,QAAQ,CAAC;YACR,UAAU,EAAE,GAAG,CAAC,IAAa;YAC7B,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,CAAC;YACR,cAAc,EAAE,IAAI;YACpB,GAAG,SAAS;SACb,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IAErB,IAAI,GAA8B,CAAA;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG;QAAE,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;SACrE,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAA;QACxE,IAAI,OAAO;YAAE,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACjF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAA;IACpF,CAAC;;QAAM,GAAG,GAAG,GAAG,CAAA;IAChB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IAErB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC9B,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA;QACpC,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/schema.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Builds the editor's JSON schema from Payload field configs, using Payload's
+ * own field predicates and translations. Payload's client config can't be used
+ * instead: it strips `defaultValue` and `custom`, which the editor needs.
+ */
+import { getTranslation } from '@payloadcms/translations';
+import type { DocumentSchema, SchemaField } from '@payload-onpage/core';
+import type { Block, Field, PayloadRequest, SanitizedFieldsPermissions } from 'payload';
+type I18nLike = Parameters<typeof getTranslation>[1];
+type Permissions = SanitizedFieldsPermissions | undefined;
+export interface SerializeContext {
+    /** Translates labels into the admin language. Without it, plain-string labels or the field name are used. */
+    i18n?: I18nLike;
+    /** Global blocks (`config.blocks`), to resolve `blockReferences`. */
+    blocks?: Block[];
+    /** Field-level permissions: fields the user can't update are left out. */
+    permissions?: Permissions;
+    /** Collects function defaults to evaluate for this request. */
+    defaults?: {
+        req: PayloadRequest;
+        pending: Promise<void>[];
+    };
+}
+/**
+ * Serialize Payload field configs into the editor schema. Presentational
+ * containers (row, collapsible, unnamed group/tab) are flattened into their
+ * parent; named tabs become groups; hidden, disabled, virtual, system and
+ * join/ui fields are left out.
+ */
+export declare function serializeFields(fields: Field[] | undefined, ctx?: SerializeContext): SchemaField[];
+/** Every collection a relationship or upload field in `fields` points to. */
+export declare function relationTargets(fields: SchemaField[], into?: Set<string>): Set<string>;
+export type { DocumentSchema };
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,cAAc,EAAe,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACpF,OAAO,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAA;AAsCvF,KAAK,QAAQ,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;AAEpD,KAAK,WAAW,GAAG,0BAA0B,GAAG,SAAS,CAAA;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,6GAA6G;IAC7G,IAAI,CAAC,EAAE,QAAQ,CAAA;IACf,qEAAqE;IACrE,MAAM,CAAC,EAAE,KAAK,EAAE,CAAA;IAChB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,cAAc,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAA;KAAE,CAAA;CAC7D;AAyDD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,EAC3B,GAAG,GAAE,gBAAqB,GACzB,WAAW,EAAE,CAgHf;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,cAAoB,GAAG,GAAG,CAAC,MAAM,CAAC,CAS5F;AAED,YAAY,EAAE,cAAc,EAAE,CAAA"}

package/dist/schema.js

@@ -0,0 +1,209 @@
+/**
+ * Builds the editor's JSON schema from Payload field configs, using Payload's
+ * own field predicates and translations. Payload's client config can't be used
+ * instead: it strips `defaultValue` and `custom`, which the editor needs.
+ */
+import { getTranslation } from '@payloadcms/translations';
+import { getDefaultValue } from 'payload';
+import { fieldAffectsData, fieldIsHiddenOrDisabled, fieldIsVirtual, tabHasName, formatLabels, toWords, } from 'payload/shared';
+/** Fields Payload manages itself; never editable on the page. */
+const SYSTEM_FIELDS = new Set(['id', 'createdAt', 'updatedAt', '_status', 'deletedAt']);
+/** Data fields with no meaningful on-page value. */
+const SKIP_TYPES = new Set(['join', 'ui']);
+const label = (value, fallback, ctx) => {
+    if (value == null || value === false)
+        return fallback;
+    if (typeof value === 'string')
+        return value || fallback;
+    if (!ctx.i18n)
+        return fallback;
+    try {
+        const out = getTranslation(value, ctx.i18n);
+        return typeof out === 'string' && out ? out : fallback;
+    }
+    catch {
+        return fallback;
+    }
+};
+/** Sanitized permissions: `true` = everything; a missing entry = denied. */
+function childPermissions(perms, name) {
+    if (perms === undefined || perms === true)
+        return perms;
+    const entry = perms[name];
+    if (!entry)
+        return false;
+    if (entry === true)
+        return true;
+    if (entry.update !== true)
+        return false;
+    return entry.fields ?? true;
+}
+function blockPermissions(perms, name, slug) {
+    if (perms === undefined || perms === true)
+        return perms;
+    const entry = perms[name];
+    if (!entry || entry === true)
+        return true;
+    const block = entry.blocks?.[slug];
+    // No block-level rule: the blocks field's own permission (already checked) applies.
+    if (!block || block === true)
+        return true;
+    return block.fields ?? true;
+}
+const isJsonSafe = (v) => {
+    if (v === undefined || typeof v === 'function')
+        return false;
+    try {
+        JSON.stringify(v);
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+function serializeBlock(block, perms, ctx) {
+    return {
+        slug: block.slug,
+        labels: {
+            singular: label(block.labels?.singular, toWords(block.slug), ctx),
+            plural: label(block.labels?.plural, toWords(block.slug), ctx),
+        },
+        fields: serializeFields(block.fields, { ...ctx, permissions: perms }),
+    };
+}
+/**
+ * Serialize Payload field configs into the editor schema. Presentational
+ * containers (row, collapsible, unnamed group/tab) are flattened into their
+ * parent; named tabs become groups; hidden, disabled, virtual, system and
+ * join/ui fields are left out.
+ */
+export function serializeFields(fields, ctx = {}) {
+    const out = [];
+    for (const f of fields ?? []) {
+        if (!f || typeof f !== 'object' || SKIP_TYPES.has(f.type))
+            continue;
+        if (f.type === 'tabs') {
+            for (const tab of f.tabs ?? []) {
+                if (!tabHasName(tab)) {
+                    out.push(...serializeFields(tab.fields, ctx));
+                    continue;
+                }
+                const perms = childPermissions(ctx.permissions, tab.name);
+                if (perms === false)
+                    continue;
+                out.push({
+                    name: tab.name,
+                    type: 'group',
+                    label: label(tab.label, toWords(tab.name), ctx),
+                    fields: serializeFields(tab.fields, { ...ctx, permissions: perms }),
+                    ...(tab.localized ? { localized: true } : {}),
+                });
+            }
+            continue;
+        }
+        if (!fieldAffectsData(f)) {
+            // row, collapsible, unnamed group: their children belong to the parent.
+            if ('fields' in f && Array.isArray(f.fields))
+                out.push(...serializeFields(f.fields, ctx));
+            continue;
+        }
+        // Hidden from the admin (admin.hidden) or the API (hidden), disabled, virtual: not editable here either.
+        if (SYSTEM_FIELDS.has(f.name) ||
+            fieldIsHiddenOrDisabled(f) ||
+            fieldIsVirtual(f) ||
+            f.admin?.hidden)
+            continue;
+        const perms = childPermissions(ctx.permissions, f.name);
+        if (perms === false)
+            continue;
+        // Field is a large union; read the optional, type-specific properties through one loose view.
+        const anyField = f;
+        const field = {
+            name: f.name,
+            type: f.type,
+            label: label(anyField.label, toWords(f.name), ctx),
+        };
+        if (anyField.localized)
+            field.localized = true;
+        if (anyField.required)
+            field.required = true;
+        if (anyField.hasMany)
+            field.hasMany = true;
+        if (typeof anyField.defaultValue === 'function') {
+            if (ctx.defaults) {
+                const { req, pending } = ctx.defaults;
+                pending.push(getDefaultValue({
+                    defaultValue: anyField.defaultValue,
+                    locale: req.locale ?? undefined,
+                    req,
+                    user: req.user,
+                })
+                    .then((v) => {
+                    if (isJsonSafe(v))
+                        field.defaultValue = v;
+                })
+                    .catch(() => undefined));
+            }
+        }
+        else if (isJsonSafe(anyField.defaultValue)) {
+            field.defaultValue = anyField.defaultValue;
+        }
+        const description = label(anyField.admin?.description, '', ctx);
+        if (description)
+            field.description = description;
+        if (Array.isArray(anyField.options)) {
+            field.options = anyField.options.map((o) => typeof o === 'string'
+                ? { label: o, value: o }
+                : {
+                    label: label(o.label, String(o.value), ctx),
+                    value: String(o.value),
+                });
+        }
+        if (anyField.relationTo)
+            field.relationTo = anyField.relationTo;
+        for (const k of ['minRows', 'maxRows', 'min', 'max']) {
+            const n = anyField[k];
+            if (typeof n === 'number')
+                field[k] = n;
+        }
+        const editor = anyField.admin?.custom?.onpage?.editor ?? anyField.custom?.onpage?.editor;
+        if (typeof editor === 'string')
+            field.editor = editor;
+        const picker = anyField.admin?.date?.pickerAppearance;
+        if (typeof picker === 'string')
+            field.pickerAppearance = picker;
+        const childCtx = { ...ctx, permissions: perms };
+        if (f.type === 'group' || f.type === 'array')
+            field.fields = serializeFields(f.fields, childCtx);
+        if (f.type === 'array') {
+            const fallback = formatLabels(f.name);
+            field.labels = {
+                singular: label(anyField.labels?.singular, fallback.singular, ctx),
+                plural: label(anyField.labels?.plural, fallback.plural, ctx),
+            };
+        }
+        if (f.type === 'blocks') {
+            const refs = (f.blockReferences ?? [])
+                .map((b) => (typeof b === 'string' ? ctx.blocks?.find((x) => x.slug === b) : b))
+                .filter((b) => !!b);
+            field.blocks = [...(f.blocks ?? []), ...refs].map((b) => serializeBlock(b, blockPermissions(ctx.permissions, f.name, b.slug), ctx));
+        }
+        out.push(field);
+    }
+    return out;
+}
+/** Every collection a relationship or upload field in `fields` points to. */
+export function relationTargets(fields, into = new Set()) {
+    for (const f of fields) {
+        if ((f.type === 'relationship' || f.type === 'upload') && f.relationTo) {
+            for (const slug of Array.isArray(f.relationTo) ? f.relationTo : [f.relationTo])
+                into.add(slug);
+        }
+        if (f.fields)
+            relationTargets(f.fields, into);
+        for (const b of f.blocks ?? [])
+            relationTargets(b.fields, into);
+    }
+    return into;
+}
+//# sourceMappingURL=schema.js.map