@payloadcms/next 3.0.0-beta.13 → 3.0.0-beta.131

package/dist/routes/rest/collections/restoreVersion.js

@@ -1,32 +1,41 @@
 import httpStatus from 'http-status';
-import { restoreVersionOperation } from 'payload/operations';
-import { isNumber } from 'payload/utilities';
+import { restoreVersionOperation } from 'payload';
+import { isNumber } from 'payload/shared';
 import { headersWithCors } from '../../../utilities/headersWithCors.js';
 import { sanitizeCollectionID } from '../utilities/sanitizeCollectionID.js';
-export const restoreVersion = async ({ id: incomingID, collection, req })=>{
-    const { searchParams } = req;
-    const depth = searchParams.get('depth');
-    const id = sanitizeCollectionID({
-        id: incomingID,
-        collectionSlug: collection.config.slug,
-        payload: req.payload
-    });
-    const result = await restoreVersionOperation({
-        id,
-        collection,
-        depth: isNumber(depth) ? Number(depth) : undefined,
-        req
-    });
-    return Response.json({
-        ...result,
-        message: req.t('version:restoredSuccessfully')
-    }, {
-        headers: headersWithCors({
-            headers: new Headers(),
-            req
-        }),
-        status: httpStatus.OK
-    });
+import { sanitizePopulate } from '../utilities/sanitizePopulate.js';
+export const restoreVersion = async ({
+  id: incomingID,
+  collection,
+  req
+}) => {
+  const {
+    searchParams
+  } = req;
+  const depth = searchParams.get('depth');
+  const draft = searchParams.get('draft');
+  const id = sanitizeCollectionID({
+    id: incomingID,
+    collectionSlug: collection.config.slug,
+    payload: req.payload
+  });
+  const result = await restoreVersionOperation({
+    id,
+    collection,
+    depth: isNumber(depth) ? Number(depth) : undefined,
+    draft: draft === 'true' ? true : undefined,
+    populate: sanitizePopulate(req.query.populate),
+    req
+  });
+  return Response.json({
+    ...result,
+    message: req.t('version:restoredSuccessfully')
+  }, {
+    headers: headersWithCors({
+      headers: new Headers(),
+      req
+    }),
+    status: httpStatus.OK
+  });
 };
-
 //# sourceMappingURL=restoreVersion.js.map

package/dist/routes/rest/collections/restoreVersion.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/routes/rest/collections/restoreVersion.ts"],"sourcesContent":["import httpStatus from 'http-status'\nimport { restoreVersionOperation } from 'payload/operations'\nimport { isNumber } from 'payload/utilities'\n\nimport type { CollectionRouteHandlerWithID } from '../types.js'\n\nimport { headersWithCors } from '../../../utilities/headersWithCors.js'\nimport { sanitizeCollectionID } from '../utilities/sanitizeCollectionID.js'\n\nexport const restoreVersion: CollectionRouteHandlerWithID = async ({\n  id: incomingID,\n  collection,\n  req,\n}) => {\n  const { searchParams } = req\n  const depth = searchParams.get('depth')\n\n  const id = sanitizeCollectionID({\n    id: incomingID,\n    collectionSlug: collection.config.slug,\n    payload: req.payload,\n  })\n\n  const result = await restoreVersionOperation({\n    id,\n    collection,\n    depth: isNumber(depth) ? Number(depth) : undefined,\n    req,\n  })\n\n  return Response.json(\n    {\n      ...result,\n      message: req.t('version:restoredSuccessfully'),\n    },\n    {\n      headers: headersWithCors({\n        headers: new Headers(),\n        req,\n      }),\n      status: httpStatus.OK,\n    },\n  )\n}\n"],"names":["httpStatus","restoreVersionOperation","isNumber","headersWithCors","sanitizeCollectionID","restoreVersion","id","incomingID","collection","req","searchParams","depth","get","collectionSlug","config","slug","payload","result","Number","undefined","Response","json","message","t","headers","Headers","status","OK"],"rangeMappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;","mappings":"AAAA,OAAOA,gBAAgB,cAAa;AACpC,SAASC,uBAAuB,QAAQ,qBAAoB;AAC5D,SAASC,QAAQ,QAAQ,oBAAmB;AAI5C,SAASC,eAAe,QAAQ,wCAAuC;AACvE,SAASC,oBAAoB,QAAQ,uCAAsC;AAE3E,OAAO,MAAMC,iBAA+C,OAAO,EACjEC,IAAIC,UAAU,EACdC,UAAU,EACVC,GAAG,EACJ;IACC,MAAM,EAAEC,YAAY,EAAE,GAAGD;IACzB,MAAME,QAAQD,aAAaE,GAAG,CAAC;IAE/B,MAAMN,KAAKF,qBAAqB;QAC9BE,IAAIC;QACJM,gBAAgBL,WAAWM,MAAM,CAACC,IAAI;QACtCC,SAASP,IAAIO,OAAO;IACtB;IAEA,MAAMC,SAAS,MAAMhB,wBAAwB;QAC3CK;QACAE;QACAG,OAAOT,SAASS,SAASO,OAAOP,SAASQ;QACzCV;IACF;IAEA,OAAOW,SAASC,IAAI,CAClB;QACE,GAAGJ,MAAM;QACTK,SAASb,IAAIc,CAAC,CAAC;IACjB,GACA;QACEC,SAASrB,gBAAgB;YACvBqB,SAAS,IAAIC;YACbhB;QACF;QACAiB,QAAQ1B,WAAW2B,EAAE;IACvB;AAEJ,EAAC"}
+{"version":3,"file":"restoreVersion.js","names":["httpStatus","restoreVersionOperation","isNumber","headersWithCors","sanitizeCollectionID","sanitizePopulate","restoreVersion","id","incomingID","collection","req","searchParams","depth","get","draft","collectionSlug","config","slug","payload","result","Number","undefined","populate","query","Response","json","message","t","headers","Headers","status","OK"],"sources":["../../../../src/routes/rest/collections/restoreVersion.ts"],"sourcesContent":["import httpStatus from 'http-status'\nimport { restoreVersionOperation } from 'payload'\nimport { isNumber } from 'payload/shared'\n\nimport type { CollectionRouteHandlerWithID } from '../types.js'\n\nimport { headersWithCors } from '../../../utilities/headersWithCors.js'\nimport { sanitizeCollectionID } from '../utilities/sanitizeCollectionID.js'\nimport { sanitizePopulate } from '../utilities/sanitizePopulate.js'\n\nexport const restoreVersion: CollectionRouteHandlerWithID = async ({\n  id: incomingID,\n  collection,\n  req,\n}) => {\n  const { searchParams } = req\n  const depth = searchParams.get('depth')\n  const draft = searchParams.get('draft')\n\n  const id = sanitizeCollectionID({\n    id: incomingID,\n    collectionSlug: collection.config.slug,\n    payload: req.payload,\n  })\n\n  const result = await restoreVersionOperation({\n    id,\n    collection,\n    depth: isNumber(depth) ? Number(depth) : undefined,\n    draft: draft === 'true' ? true : undefined,\n    populate: sanitizePopulate(req.query.populate),\n    req,\n  })\n\n  return Response.json(\n    {\n      ...result,\n      message: req.t('version:restoredSuccessfully'),\n    },\n    {\n      headers: headersWithCors({\n        headers: new Headers(),\n        req,\n      }),\n      status: httpStatus.OK,\n    },\n  )\n}\n"],"mappings":"AAAA,OAAOA,UAAA,MAAgB;AACvB,SAASC,uBAAuB,QAAQ;AACxC,SAASC,QAAQ,QAAQ;AAIzB,SAASC,eAAe,QAAQ;AAChC,SAASC,oBAAoB,QAAQ;AACrC,SAASC,gBAAgB,QAAQ;AAEjC,OAAO,MAAMC,cAAA,GAA+C,MAAAA,CAAO;EACjEC,EAAA,EAAIC,UAAU;EACdC,UAAU;EACVC;AAAG,CACJ;EACC,MAAM;IAAEC;EAAY,CAAE,GAAGD,GAAA;EACzB,MAAME,KAAA,GAAQD,YAAA,CAAaE,GAAG,CAAC;EAC/B,MAAMC,KAAA,GAAQH,YAAA,CAAaE,GAAG,CAAC;EAE/B,MAAMN,EAAA,GAAKH,oBAAA,CAAqB;IAC9BG,EAAA,EAAIC,UAAA;IACJO,cAAA,EAAgBN,UAAA,CAAWO,MAAM,CAACC,IAAI;IACtCC,OAAA,EAASR,GAAA,CAAIQ;EACf;EAEA,MAAMC,MAAA,GAAS,MAAMlB,uBAAA,CAAwB;IAC3CM,EAAA;IACAE,UAAA;IACAG,KAAA,EAAOV,QAAA,CAASU,KAAA,IAASQ,MAAA,CAAOR,KAAA,IAASS,SAAA;IACzCP,KAAA,EAAOA,KAAA,KAAU,SAAS,OAAOO,SAAA;IACjCC,QAAA,EAAUjB,gBAAA,CAAiBK,GAAA,CAAIa,KAAK,CAACD,QAAQ;IAC7CZ;EACF;EAEA,OAAOc,QAAA,CAASC,IAAI,CAClB;IACE,GAAGN,MAAM;IACTO,OAAA,EAAShB,GAAA,CAAIiB,CAAC,CAAC;EACjB,GACA;IACEC,OAAA,EAASzB,eAAA,CAAgB;MACvByB,OAAA,EAAS,IAAIC,OAAA;MACbnB;IACF;IACAoB,MAAA,EAAQ9B,UAAA,CAAW+B;EACrB;AAEJ","ignoreList":[]}

package/dist/routes/rest/collections/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../src/routes/rest/collections/update.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAIzD,eAAO,MAAM,MAAM,EAAE,sBA2DpB,CAAA"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../src/routes/rest/collections/update.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAMzD,eAAO,MAAM,MAAM,EAAE,sBAmEpB,CAAA"}

package/dist/routes/rest/collections/update.js

@@ -1,48 +1,64 @@
 import { getTranslation } from '@payloadcms/translations';
 import httpStatus from 'http-status';
-import { updateOperation } from 'payload/operations';
-import { isNumber } from 'payload/utilities';
+import { updateOperation } from 'payload';
+import { isNumber } from 'payload/shared';
 import { headersWithCors } from '../../../utilities/headersWithCors.js';
-export const update = async ({ collection, req })=>{
-    const { depth, draft, where } = req.query;
-    const result = await updateOperation({
-        collection,
-        data: req.data,
-        depth: isNumber(depth) ? Number(depth) : undefined,
-        draft: draft === 'true',
-        req,
-        where
-    });
-    const headers = headersWithCors({
-        headers: new Headers(),
-        req
-    });
-    if (result.errors.length === 0) {
-        const message = req.t('general:updatedCountSuccessfully', {
-            count: result.docs.length,
-            label: getTranslation(collection.config.labels[result.docs.length > 1 ? 'plural' : 'singular'], req.i18n)
-        });
-        return Response.json({
-            ...result,
-            message
-        }, {
-            headers,
-            status: httpStatus.OK
-        });
-    }
-    const total = result.docs.length + result.errors.length;
-    const message = req.t('error:unableToUpdateCount', {
-        count: result.errors.length,
-        label: getTranslation(collection.config.labels[total > 1 ? 'plural' : 'singular'], req.i18n),
-        total
+import { sanitizePopulate } from '../utilities/sanitizePopulate.js';
+import { sanitizeSelect } from '../utilities/sanitizeSelect.js';
+export const update = async ({
+  collection,
+  req
+}) => {
+  const {
+    depth,
+    draft,
+    limit,
+    overrideLock,
+    populate,
+    select,
+    where
+  } = req.query;
+  const result = await updateOperation({
+    collection,
+    data: req.data,
+    depth: isNumber(depth) ? Number(depth) : undefined,
+    draft: draft === 'true',
+    limit: isNumber(limit) ? Number(limit) : undefined,
+    overrideLock: Boolean(overrideLock === 'true'),
+    populate: sanitizePopulate(populate),
+    req,
+    select: sanitizeSelect(select),
+    where
+  });
+  const headers = headersWithCors({
+    headers: new Headers(),
+    req
+  });
+  if (result.errors.length === 0) {
+    const message = req.t('general:updatedCountSuccessfully', {
+      count: result.docs.length,
+      label: getTranslation(collection.config.labels[result.docs.length > 1 ? 'plural' : 'singular'], req.i18n)
     });
     return Response.json({
-        ...result,
-        message
+      ...result,
+      message
     }, {
-        headers,
-        status: httpStatus.BAD_REQUEST
+      headers,
+      status: httpStatus.OK
     });
+  }
+  const total = result.docs.length + result.errors.length;
+  const message = req.t('error:unableToUpdateCount', {
+    count: result.errors.length,
+    label: getTranslation(collection.config.labels[total > 1 ? 'plural' : 'singular'], req.i18n),
+    total
+  });
+  return Response.json({
+    ...result,
+    message
+  }, {
+    headers,
+    status: httpStatus.BAD_REQUEST
+  });
 };
-
 //# sourceMappingURL=update.js.map

package/dist/routes/rest/collections/update.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/routes/rest/collections/update.ts"],"sourcesContent":["import type { Where } from 'payload/types'\n\nimport { getTranslation } from '@payloadcms/translations'\nimport httpStatus from 'http-status'\nimport { updateOperation } from 'payload/operations'\nimport { isNumber } from 'payload/utilities'\n\nimport type { CollectionRouteHandler } from '../types.js'\n\nimport { headersWithCors } from '../../../utilities/headersWithCors.js'\n\nexport const update: CollectionRouteHandler = async ({ collection, req }) => {\n  const { depth, draft, where } = req.query as {\n    depth?: string\n    draft?: string\n    where?: Where\n  }\n\n  const result = await updateOperation({\n    collection,\n    data: req.data,\n    depth: isNumber(depth) ? Number(depth) : undefined,\n    draft: draft === 'true',\n    req,\n    where,\n  })\n\n  const headers = headersWithCors({\n    headers: new Headers(),\n    req,\n  })\n\n  if (result.errors.length === 0) {\n    const message = req.t('general:updatedCountSuccessfully', {\n      count: result.docs.length,\n      label: getTranslation(\n        collection.config.labels[result.docs.length > 1 ? 'plural' : 'singular'],\n        req.i18n,\n      ),\n    })\n\n    return Response.json(\n      {\n        ...result,\n        message,\n      },\n      {\n        headers,\n        status: httpStatus.OK,\n      },\n    )\n  }\n\n  const total = result.docs.length + result.errors.length\n  const message = req.t('error:unableToUpdateCount', {\n    count: result.errors.length,\n    label: getTranslation(collection.config.labels[total > 1 ? 'plural' : 'singular'], req.i18n),\n    total,\n  })\n\n  return Response.json(\n    {\n      ...result,\n      message,\n    },\n    {\n      headers,\n      status: httpStatus.BAD_REQUEST,\n    },\n  )\n}\n"],"names":["getTranslation","httpStatus","updateOperation","isNumber","headersWithCors","update","collection","req","depth","draft","where","query","result","data","Number","undefined","headers","Headers","errors","length","message","t","count","docs","label","config","labels","i18n","Response","json","status","OK","total","BAD_REQUEST"],"rangeMappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;","mappings":"AAEA,SAASA,cAAc,QAAQ,2BAA0B;AACzD,OAAOC,gBAAgB,cAAa;AACpC,SAASC,eAAe,QAAQ,qBAAoB;AACpD,SAASC,QAAQ,QAAQ,oBAAmB;AAI5C,SAASC,eAAe,QAAQ,wCAAuC;AAEvE,OAAO,MAAMC,SAAiC,OAAO,EAAEC,UAAU,EAAEC,GAAG,EAAE;IACtE,MAAM,EAAEC,KAAK,EAAEC,KAAK,EAAEC,KAAK,EAAE,GAAGH,IAAII,KAAK;IAMzC,MAAMC,SAAS,MAAMV,gBAAgB;QACnCI;QACAO,MAAMN,IAAIM,IAAI;QACdL,OAAOL,SAASK,SAASM,OAAON,SAASO;QACzCN,OAAOA,UAAU;QACjBF;QACAG;IACF;IAEA,MAAMM,UAAUZ,gBAAgB;QAC9BY,SAAS,IAAIC;QACbV;IACF;IAEA,IAAIK,OAAOM,MAAM,CAACC,MAAM,KAAK,GAAG;QAC9B,MAAMC,UAAUb,IAAIc,CAAC,CAAC,oCAAoC;YACxDC,OAAOV,OAAOW,IAAI,CAACJ,MAAM;YACzBK,OAAOxB,eACLM,WAAWmB,MAAM,CAACC,MAAM,CAACd,OAAOW,IAAI,CAACJ,MAAM,GAAG,IAAI,WAAW,WAAW,EACxEZ,IAAIoB,IAAI;QAEZ;QAEA,OAAOC,SAASC,IAAI,CAClB;YACE,GAAGjB,MAAM;YACTQ;QACF,GACA;YACEJ;YACAc,QAAQ7B,WAAW8B,EAAE;QACvB;IAEJ;IAEA,MAAMC,QAAQpB,OAAOW,IAAI,CAACJ,MAAM,GAAGP,OAAOM,MAAM,CAACC,MAAM;IACvD,MAAMC,UAAUb,IAAIc,CAAC,CAAC,6BAA6B;QACjDC,OAAOV,OAAOM,MAAM,CAACC,MAAM;QAC3BK,OAAOxB,eAAeM,WAAWmB,MAAM,CAACC,MAAM,CAACM,QAAQ,IAAI,WAAW,WAAW,EAAEzB,IAAIoB,IAAI;QAC3FK;IACF;IAEA,OAAOJ,SAASC,IAAI,CAClB;QACE,GAAGjB,MAAM;QACTQ;IACF,GACA;QACEJ;QACAc,QAAQ7B,WAAWgC,WAAW;IAChC;AAEJ,EAAC"}
+{"version":3,"file":"update.js","names":["getTranslation","httpStatus","updateOperation","isNumber","headersWithCors","sanitizePopulate","sanitizeSelect","update","collection","req","depth","draft","limit","overrideLock","populate","select","where","query","result","data","Number","undefined","Boolean","headers","Headers","errors","length","message","t","count","docs","label","config","labels","i18n","Response","json","status","OK","total","BAD_REQUEST"],"sources":["../../../../src/routes/rest/collections/update.ts"],"sourcesContent":["import type { Where } from 'payload'\n\nimport { getTranslation } from '@payloadcms/translations'\nimport httpStatus from 'http-status'\nimport { updateOperation } from 'payload'\nimport { isNumber } from 'payload/shared'\n\nimport type { CollectionRouteHandler } from '../types.js'\n\nimport { headersWithCors } from '../../../utilities/headersWithCors.js'\nimport { sanitizePopulate } from '../utilities/sanitizePopulate.js'\nimport { sanitizeSelect } from '../utilities/sanitizeSelect.js'\n\nexport const update: CollectionRouteHandler = async ({ collection, req }) => {\n  const { depth, draft, limit, overrideLock, populate, select, where } = req.query as {\n    depth?: string\n    draft?: string\n    limit?: string\n    overrideLock?: string\n    populate?: Record<string, unknown>\n    select?: Record<string, unknown>\n    where?: Where\n  }\n\n  const result = await updateOperation({\n    collection,\n    data: req.data,\n    depth: isNumber(depth) ? Number(depth) : undefined,\n    draft: draft === 'true',\n    limit: isNumber(limit) ? Number(limit) : undefined,\n    overrideLock: Boolean(overrideLock === 'true'),\n    populate: sanitizePopulate(populate),\n    req,\n    select: sanitizeSelect(select),\n    where,\n  })\n\n  const headers = headersWithCors({\n    headers: new Headers(),\n    req,\n  })\n\n  if (result.errors.length === 0) {\n    const message = req.t('general:updatedCountSuccessfully', {\n      count: result.docs.length,\n      label: getTranslation(\n        collection.config.labels[result.docs.length > 1 ? 'plural' : 'singular'],\n        req.i18n,\n      ),\n    })\n\n    return Response.json(\n      {\n        ...result,\n        message,\n      },\n      {\n        headers,\n        status: httpStatus.OK,\n      },\n    )\n  }\n\n  const total = result.docs.length + result.errors.length\n  const message = req.t('error:unableToUpdateCount', {\n    count: result.errors.length,\n    label: getTranslation(collection.config.labels[total > 1 ? 'plural' : 'singular'], req.i18n),\n    total,\n  })\n\n  return Response.json(\n    {\n      ...result,\n      message,\n    },\n    {\n      headers,\n      status: httpStatus.BAD_REQUEST,\n    },\n  )\n}\n"],"mappings":"AAEA,SAASA,cAAc,QAAQ;AAC/B,OAAOC,UAAA,MAAgB;AACvB,SAASC,eAAe,QAAQ;AAChC,SAASC,QAAQ,QAAQ;AAIzB,SAASC,eAAe,QAAQ;AAChC,SAASC,gBAAgB,QAAQ;AACjC,SAASC,cAAc,QAAQ;AAE/B,OAAO,MAAMC,MAAA,GAAiC,MAAAA,CAAO;EAAEC,UAAU;EAAEC;AAAG,CAAE;EACtE,MAAM;IAAEC,KAAK;IAAEC,KAAK;IAAEC,KAAK;IAAEC,YAAY;IAAEC,QAAQ;IAAEC,MAAM;IAAEC;EAAK,CAAE,GAAGP,GAAA,CAAIQ,KAAK;EAUhF,MAAMC,MAAA,GAAS,MAAMhB,eAAA,CAAgB;IACnCM,UAAA;IACAW,IAAA,EAAMV,GAAA,CAAIU,IAAI;IACdT,KAAA,EAAOP,QAAA,CAASO,KAAA,IAASU,MAAA,CAAOV,KAAA,IAASW,SAAA;IACzCV,KAAA,EAAOA,KAAA,KAAU;IACjBC,KAAA,EAAOT,QAAA,CAASS,KAAA,IAASQ,MAAA,CAAOR,KAAA,IAASS,SAAA;IACzCR,YAAA,EAAcS,OAAA,CAAQT,YAAA,KAAiB;IACvCC,QAAA,EAAUT,gBAAA,CAAiBS,QAAA;IAC3BL,GAAA;IACAM,MAAA,EAAQT,cAAA,CAAeS,MAAA;IACvBC;EACF;EAEA,MAAMO,OAAA,GAAUnB,eAAA,CAAgB;IAC9BmB,OAAA,EAAS,IAAIC,OAAA;IACbf;EACF;EAEA,IAAIS,MAAA,CAAOO,MAAM,CAACC,MAAM,KAAK,GAAG;IAC9B,MAAMC,OAAA,GAAUlB,GAAA,CAAImB,CAAC,CAAC,oCAAoC;MACxDC,KAAA,EAAOX,MAAA,CAAOY,IAAI,CAACJ,MAAM;MACzBK,KAAA,EAAO/B,cAAA,CACLQ,UAAA,CAAWwB,MAAM,CAACC,MAAM,CAACf,MAAA,CAAOY,IAAI,CAACJ,MAAM,GAAG,IAAI,WAAW,WAAW,EACxEjB,GAAA,CAAIyB,IAAI;IAEZ;IAEA,OAAOC,QAAA,CAASC,IAAI,CAClB;MACE,GAAGlB,MAAM;MACTS;IACF,GACA;MACEJ,OAAA;MACAc,MAAA,EAAQpC,UAAA,CAAWqC;IACrB;EAEJ;EAEA,MAAMC,KAAA,GAAQrB,MAAA,CAAOY,IAAI,CAACJ,MAAM,GAAGR,MAAA,CAAOO,MAAM,CAACC,MAAM;EACvD,MAAMC,OAAA,GAAUlB,GAAA,CAAImB,CAAC,CAAC,6BAA6B;IACjDC,KAAA,EAAOX,MAAA,CAAOO,MAAM,CAACC,MAAM;IAC3BK,KAAA,EAAO/B,cAAA,CAAeQ,UAAA,CAAWwB,MAAM,CAACC,MAAM,CAACM,KAAA,GAAQ,IAAI,WAAW,WAAW,EAAE9B,GAAA,CAAIyB,IAAI;IAC3FK;EACF;EAEA,OAAOJ,QAAA,CAASC,IAAI,CAClB;IACE,GAAGlB,MAAM;IACTS;EACF,GACA;IACEJ,OAAA;IACAc,MAAA,EAAQpC,UAAA,CAAWuC;EACrB;AAEJ","ignoreList":[]}

package/dist/routes/rest/collections/updateByID.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updateByID.d.ts","sourceRoot":"","sources":["../../../../src/routes/rest/collections/updateByID.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;AAK/D,eAAO,MAAM,UAAU,EAAE,4BA4CxB,CAAA"}
+{"version":3,"file":"updateByID.d.ts","sourceRoot":"","sources":["../../../../src/routes/rest/collections/updateByID.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;AAO/D,eAAO,MAAM,UAAU,EAAE,4BAsDxB,CAAA"}

package/dist/routes/rest/collections/updateByID.js

@@ -1,40 +1,57 @@
 import httpStatus from 'http-status';
-import { updateByIDOperation } from 'payload/operations';
-import { isNumber } from 'payload/utilities';
+import { updateByIDOperation } from 'payload';
+import { isNumber } from 'payload/shared';
 import { headersWithCors } from '../../../utilities/headersWithCors.js';
 import { sanitizeCollectionID } from '../utilities/sanitizeCollectionID.js';
-export const updateByID = async ({ id: incomingID, collection, req })=>{
-    const { searchParams } = req;
-    const depth = searchParams.get('depth');
-    const autosave = searchParams.get('autosave') === 'true';
-    const draft = searchParams.get('draft') === 'true';
-    const id = sanitizeCollectionID({
-        id: incomingID,
-        collectionSlug: collection.config.slug,
-        payload: req.payload
-    });
-    const doc = await updateByIDOperation({
-        id,
-        autosave,
-        collection,
-        data: req.data,
-        depth: isNumber(depth) ? Number(depth) : undefined,
-        draft,
-        req
-    });
-    let message = req.t('general:updatedSuccessfully');
-    if (draft) message = req.t('version:draftSavedSuccessfully');
-    if (autosave) message = req.t('version:autosavedSuccessfully');
-    return Response.json({
-        doc,
-        message
-    }, {
-        headers: headersWithCors({
-            headers: new Headers(),
-            req
-        }),
-        status: httpStatus.OK
-    });
+import { sanitizePopulate } from '../utilities/sanitizePopulate.js';
+import { sanitizeSelect } from '../utilities/sanitizeSelect.js';
+export const updateByID = async ({
+  id: incomingID,
+  collection,
+  req
+}) => {
+  const {
+    searchParams
+  } = req;
+  const depth = searchParams.get('depth');
+  const autosave = searchParams.get('autosave') === 'true';
+  const draft = searchParams.get('draft') === 'true';
+  const overrideLock = searchParams.get('overrideLock');
+  const publishSpecificLocale = req.query.publishSpecificLocale;
+  const id = sanitizeCollectionID({
+    id: incomingID,
+    collectionSlug: collection.config.slug,
+    payload: req.payload
+  });
+  const doc = await updateByIDOperation({
+    id,
+    autosave,
+    collection,
+    data: req.data,
+    depth: isNumber(depth) ? Number(depth) : undefined,
+    draft,
+    overrideLock: Boolean(overrideLock === 'true'),
+    populate: sanitizePopulate(req.query.populate),
+    publishSpecificLocale,
+    req,
+    select: sanitizeSelect(req.query.select)
+  });
+  let message = req.t('general:updatedSuccessfully');
+  if (draft) {
+    message = req.t('version:draftSavedSuccessfully');
+  }
+  if (autosave) {
+    message = req.t('version:autosavedSuccessfully');
+  }
+  return Response.json({
+    doc,
+    message
+  }, {
+    headers: headersWithCors({
+      headers: new Headers(),
+      req
+    }),
+    status: httpStatus.OK
+  });
 };
-
 //# sourceMappingURL=updateByID.js.map

package/dist/routes/rest/collections/updateByID.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/routes/rest/collections/updateByID.ts"],"sourcesContent":["import httpStatus from 'http-status'\nimport { updateByIDOperation } from 'payload/operations'\nimport { isNumber } from 'payload/utilities'\n\nimport type { CollectionRouteHandlerWithID } from '../types.js'\n\nimport { headersWithCors } from '../../../utilities/headersWithCors.js'\nimport { sanitizeCollectionID } from '../utilities/sanitizeCollectionID.js'\n\nexport const updateByID: CollectionRouteHandlerWithID = async ({\n  id: incomingID,\n  collection,\n  req,\n}) => {\n  const { searchParams } = req\n  const depth = searchParams.get('depth')\n  const autosave = searchParams.get('autosave') === 'true'\n  const draft = searchParams.get('draft') === 'true'\n\n  const id = sanitizeCollectionID({\n    id: incomingID,\n    collectionSlug: collection.config.slug,\n    payload: req.payload,\n  })\n\n  const doc = await updateByIDOperation({\n    id,\n    autosave,\n    collection,\n    data: req.data,\n    depth: isNumber(depth) ? Number(depth) : undefined,\n    draft,\n    req,\n  })\n\n  let message = req.t('general:updatedSuccessfully')\n\n  if (draft) message = req.t('version:draftSavedSuccessfully')\n  if (autosave) message = req.t('version:autosavedSuccessfully')\n\n  return Response.json(\n    {\n      doc,\n      message,\n    },\n    {\n      headers: headersWithCors({\n        headers: new Headers(),\n        req,\n      }),\n      status: httpStatus.OK,\n    },\n  )\n}\n"],"names":["httpStatus","updateByIDOperation","isNumber","headersWithCors","sanitizeCollectionID","updateByID","id","incomingID","collection","req","searchParams","depth","get","autosave","draft","collectionSlug","config","slug","payload","doc","data","Number","undefined","message","t","Response","json","headers","Headers","status","OK"],"rangeMappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;","mappings":"AAAA,OAAOA,gBAAgB,cAAa;AACpC,SAASC,mBAAmB,QAAQ,qBAAoB;AACxD,SAASC,QAAQ,QAAQ,oBAAmB;AAI5C,SAASC,eAAe,QAAQ,wCAAuC;AACvE,SAASC,oBAAoB,QAAQ,uCAAsC;AAE3E,OAAO,MAAMC,aAA2C,OAAO,EAC7DC,IAAIC,UAAU,EACdC,UAAU,EACVC,GAAG,EACJ;IACC,MAAM,EAAEC,YAAY,EAAE,GAAGD;IACzB,MAAME,QAAQD,aAAaE,GAAG,CAAC;IAC/B,MAAMC,WAAWH,aAAaE,GAAG,CAAC,gBAAgB;IAClD,MAAME,QAAQJ,aAAaE,GAAG,CAAC,aAAa;IAE5C,MAAMN,KAAKF,qBAAqB;QAC9BE,IAAIC;QACJQ,gBAAgBP,WAAWQ,MAAM,CAACC,IAAI;QACtCC,SAAST,IAAIS,OAAO;IACtB;IAEA,MAAMC,MAAM,MAAMlB,oBAAoB;QACpCK;QACAO;QACAL;QACAY,MAAMX,IAAIW,IAAI;QACdT,OAAOT,SAASS,SAASU,OAAOV,SAASW;QACzCR;QACAL;IACF;IAEA,IAAIc,UAAUd,IAAIe,CAAC,CAAC;IAEpB,IAAIV,OAAOS,UAAUd,IAAIe,CAAC,CAAC;IAC3B,IAAIX,UAAUU,UAAUd,IAAIe,CAAC,CAAC;IAE9B,OAAOC,SAASC,IAAI,CAClB;QACEP;QACAI;IACF,GACA;QACEI,SAASxB,gBAAgB;YACvBwB,SAAS,IAAIC;YACbnB;QACF;QACAoB,QAAQ7B,WAAW8B,EAAE;IACvB;AAEJ,EAAC"}
+{"version":3,"file":"updateByID.js","names":["httpStatus","updateByIDOperation","isNumber","headersWithCors","sanitizeCollectionID","sanitizePopulate","sanitizeSelect","updateByID","id","incomingID","collection","req","searchParams","depth","get","autosave","draft","overrideLock","publishSpecificLocale","query","collectionSlug","config","slug","payload","doc","data","Number","undefined","Boolean","populate","select","message","t","Response","json","headers","Headers","status","OK"],"sources":["../../../../src/routes/rest/collections/updateByID.ts"],"sourcesContent":["import httpStatus from 'http-status'\nimport { updateByIDOperation } from 'payload'\nimport { isNumber } from 'payload/shared'\n\nimport type { CollectionRouteHandlerWithID } from '../types.js'\n\nimport { headersWithCors } from '../../../utilities/headersWithCors.js'\nimport { sanitizeCollectionID } from '../utilities/sanitizeCollectionID.js'\nimport { sanitizePopulate } from '../utilities/sanitizePopulate.js'\nimport { sanitizeSelect } from '../utilities/sanitizeSelect.js'\n\nexport const updateByID: CollectionRouteHandlerWithID = async ({\n  id: incomingID,\n  collection,\n  req,\n}) => {\n  const { searchParams } = req\n  const depth = searchParams.get('depth')\n  const autosave = searchParams.get('autosave') === 'true'\n  const draft = searchParams.get('draft') === 'true'\n  const overrideLock = searchParams.get('overrideLock')\n  const publishSpecificLocale = req.query.publishSpecificLocale as string | undefined\n\n  const id = sanitizeCollectionID({\n    id: incomingID,\n    collectionSlug: collection.config.slug,\n    payload: req.payload,\n  })\n\n  const doc = await updateByIDOperation({\n    id,\n    autosave,\n    collection,\n    data: req.data,\n    depth: isNumber(depth) ? Number(depth) : undefined,\n    draft,\n    overrideLock: Boolean(overrideLock === 'true'),\n    populate: sanitizePopulate(req.query.populate),\n    publishSpecificLocale,\n    req,\n    select: sanitizeSelect(req.query.select),\n  })\n\n  let message = req.t('general:updatedSuccessfully')\n\n  if (draft) {\n    message = req.t('version:draftSavedSuccessfully')\n  }\n  if (autosave) {\n    message = req.t('version:autosavedSuccessfully')\n  }\n\n  return Response.json(\n    {\n      doc,\n      message,\n    },\n    {\n      headers: headersWithCors({\n        headers: new Headers(),\n        req,\n      }),\n      status: httpStatus.OK,\n    },\n  )\n}\n"],"mappings":"AAAA,OAAOA,UAAA,MAAgB;AACvB,SAASC,mBAAmB,QAAQ;AACpC,SAASC,QAAQ,QAAQ;AAIzB,SAASC,eAAe,QAAQ;AAChC,SAASC,oBAAoB,QAAQ;AACrC,SAASC,gBAAgB,QAAQ;AACjC,SAASC,cAAc,QAAQ;AAE/B,OAAO,MAAMC,UAAA,GAA2C,MAAAA,CAAO;EAC7DC,EAAA,EAAIC,UAAU;EACdC,UAAU;EACVC;AAAG,CACJ;EACC,MAAM;IAAEC;EAAY,CAAE,GAAGD,GAAA;EACzB,MAAME,KAAA,GAAQD,YAAA,CAAaE,GAAG,CAAC;EAC/B,MAAMC,QAAA,GAAWH,YAAA,CAAaE,GAAG,CAAC,gBAAgB;EAClD,MAAME,KAAA,GAAQJ,YAAA,CAAaE,GAAG,CAAC,aAAa;EAC5C,MAAMG,YAAA,GAAeL,YAAA,CAAaE,GAAG,CAAC;EACtC,MAAMI,qBAAA,GAAwBP,GAAA,CAAIQ,KAAK,CAACD,qBAAqB;EAE7D,MAAMV,EAAA,GAAKJ,oBAAA,CAAqB;IAC9BI,EAAA,EAAIC,UAAA;IACJW,cAAA,EAAgBV,UAAA,CAAWW,MAAM,CAACC,IAAI;IACtCC,OAAA,EAASZ,GAAA,CAAIY;EACf;EAEA,MAAMC,GAAA,GAAM,MAAMvB,mBAAA,CAAoB;IACpCO,EAAA;IACAO,QAAA;IACAL,UAAA;IACAe,IAAA,EAAMd,GAAA,CAAIc,IAAI;IACdZ,KAAA,EAAOX,QAAA,CAASW,KAAA,IAASa,MAAA,CAAOb,KAAA,IAASc,SAAA;IACzCX,KAAA;IACAC,YAAA,EAAcW,OAAA,CAAQX,YAAA,KAAiB;IACvCY,QAAA,EAAUxB,gBAAA,CAAiBM,GAAA,CAAIQ,KAAK,CAACU,QAAQ;IAC7CX,qBAAA;IACAP,GAAA;IACAmB,MAAA,EAAQxB,cAAA,CAAeK,GAAA,CAAIQ,KAAK,CAACW,MAAM;EACzC;EAEA,IAAIC,OAAA,GAAUpB,GAAA,CAAIqB,CAAC,CAAC;EAEpB,IAAIhB,KAAA,EAAO;IACTe,OAAA,GAAUpB,GAAA,CAAIqB,CAAC,CAAC;EAClB;EACA,IAAIjB,QAAA,EAAU;IACZgB,OAAA,GAAUpB,GAAA,CAAIqB,CAAC,CAAC;EAClB;EAEA,OAAOC,QAAA,CAASC,IAAI,CAClB;IACEV,GAAA;IACAO;EACF,GACA;IACEI,OAAA,EAAShC,eAAA,CAAgB;MACvBgC,OAAA,EAAS,IAAIC,OAAA;MACbzB;IACF;IACA0B,MAAA,EAAQrC,UAAA,CAAWsC;EACrB;AAEJ","ignoreList":[]}

package/dist/routes/rest/files/checkFileAccess.d.ts

@@ -1,7 +1,7 @@
-import type { Collection, PayloadRequest } from 'payload/types';
+import type { Collection, PayloadRequest, TypeWithID } from 'payload';
 export declare function checkFileAccess({ collection, filename, req, }: {
     collection: Collection;
     filename: string;
     req: PayloadRequest;
-}): Promise<Response>;
+}): Promise<Response | TypeWithID>;
 //# sourceMappingURL=checkFileAccess.d.ts.map

package/dist/routes/rest/files/checkFileAccess.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkFileAccess.d.ts","sourceRoot":"","sources":["../../../../src/routes/rest/files/checkFileAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAS,MAAM,eAAe,CAAA;AAOtE,wBAAsB,eAAe,CAAC,EACpC,UAAU,EACV,QAAQ,EACR,GAAG,GACJ,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,cAAc,CAAA;CACpB,qBA2CA"}
+{"version":3,"file":"checkFileAccess.d.ts","sourceRoot":"","sources":["../../../../src/routes/rest/files/checkFileAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAS,MAAM,SAAS,CAAA;AAM5E,wBAAsB,eAAe,CAAC,EACpC,UAAU,EACV,QAAQ,EACR,GAAG,GACJ,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,cAAc,CAAA;CACpB,GAAG,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,CAmDjC"}

package/dist/routes/rest/files/checkFileAccess.js

@@ -1,50 +1,57 @@
-import { executeAccess } from 'payload/auth';
-import { Forbidden } from 'payload/errors';
+import { executeAccess, Forbidden } from 'payload';
 import { endpointsAreDisabled } from '../checkEndpoints.js';
-export async function checkFileAccess({ collection, filename, req }) {
-    const { config } = collection;
-    const disableEndpoints = endpointsAreDisabled({
-        endpoints: config.endpoints,
-        request: req
-    });
-    if (disableEndpoints) return disableEndpoints;
-    const accessResult = await executeAccess({
-        isReadingStaticFile: true,
-        req
-    }, config.access.read);
-    if (typeof accessResult === 'object') {
-        const queryToBuild = {
-            and: [
-                {
-                    or: [
-                        {
-                            filename: {
-                                equals: filename
-                            }
-                        }
-                    ]
-                },
-                accessResult
-            ]
-        };
-        if (config.upload.imageSizes) {
-            config.upload.imageSizes.forEach(({ name })=>{
-                queryToBuild.and[0].or.push({
-                    [`sizes.${name}.filename`]: {
-                        equals: filename
-                    }
-                });
-            });
-        }
-        const doc = await req.payload.db.findOne({
-            collection: config.slug,
-            req,
-            where: queryToBuild
+export async function checkFileAccess({
+  collection,
+  filename,
+  req
+}) {
+  const {
+    config
+  } = collection;
+  const disableEndpoints = endpointsAreDisabled({
+    endpoints: config.endpoints,
+    request: req
+  });
+  if (disableEndpoints) {
+    return disableEndpoints;
+  }
+  if (filename.includes('../') || filename.includes('..\\')) {
+    throw new Forbidden(req.t);
+  }
+  const accessResult = await executeAccess({
+    isReadingStaticFile: true,
+    req
+  }, config.access.read);
+  if (typeof accessResult === 'object') {
+    const queryToBuild = {
+      and: [{
+        or: [{
+          filename: {
+            equals: filename
+          }
+        }]
+      }, accessResult]
+    };
+    if (config.upload.imageSizes) {
+      config.upload.imageSizes.forEach(({
+        name
+      }) => {
+        queryToBuild.and[0].or.push({
+          [`sizes.${name}.filename`]: {
+            equals: filename
+          }
         });
-        if (!doc) {
-            throw new Forbidden(req.t);
-        }
+      });
+    }
+    const doc = await req.payload.db.findOne({
+      collection: config.slug,
+      req,
+      where: queryToBuild
+    });
+    if (!doc) {
+      throw new Forbidden(req.t);
     }
+    return doc;
+  }
 }
-
 //# sourceMappingURL=checkFileAccess.js.map

package/dist/routes/rest/files/checkFileAccess.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/routes/rest/files/checkFileAccess.ts"],"sourcesContent":["import type { Collection, PayloadRequest, Where } from 'payload/types'\n\nimport { executeAccess } from 'payload/auth'\nimport { Forbidden } from 'payload/errors'\n\nimport { endpointsAreDisabled } from '../checkEndpoints.js'\n\nexport async function checkFileAccess({\n  collection,\n  filename,\n  req,\n}: {\n  collection: Collection\n  filename: string\n  req: PayloadRequest\n}) {\n  const { config } = collection\n  const disableEndpoints = endpointsAreDisabled({ endpoints: config.endpoints, request: req })\n  if (disableEndpoints) return disableEndpoints\n\n  const accessResult = await executeAccess({ isReadingStaticFile: true, req }, config.access.read)\n\n  if (typeof accessResult === 'object') {\n    const queryToBuild: Where = {\n      and: [\n        {\n          or: [\n            {\n              filename: {\n                equals: filename,\n              },\n            },\n          ],\n        },\n        accessResult,\n      ],\n    }\n\n    if (config.upload.imageSizes) {\n      config.upload.imageSizes.forEach(({ name }) => {\n        queryToBuild.and[0].or.push({\n          [`sizes.${name}.filename`]: {\n            equals: filename,\n          },\n        })\n      })\n    }\n\n    const doc = await req.payload.db.findOne({\n      collection: config.slug,\n      req,\n      where: queryToBuild,\n    })\n\n    if (!doc) {\n      throw new Forbidden(req.t)\n    }\n  }\n}\n"],"names":["executeAccess","Forbidden","endpointsAreDisabled","checkFileAccess","collection","filename","req","config","disableEndpoints","endpoints","request","accessResult","isReadingStaticFile","access","read","queryToBuild","and","or","equals","upload","imageSizes","forEach","name","push","doc","payload","db","findOne","slug","where","t"],"rangeMappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;","mappings":"AAEA,SAASA,aAAa,QAAQ,eAAc;AAC5C,SAASC,SAAS,QAAQ,iBAAgB;AAE1C,SAASC,oBAAoB,QAAQ,uBAAsB;AAE3D,OAAO,eAAeC,gBAAgB,EACpCC,UAAU,EACVC,QAAQ,EACRC,GAAG,EAKJ;IACC,MAAM,EAAEC,MAAM,EAAE,GAAGH;IACnB,MAAMI,mBAAmBN,qBAAqB;QAAEO,WAAWF,OAAOE,SAAS;QAAEC,SAASJ;IAAI;IAC1F,IAAIE,kBAAkB,OAAOA;IAE7B,MAAMG,eAAe,MAAMX,cAAc;QAAEY,qBAAqB;QAAMN;IAAI,GAAGC,OAAOM,MAAM,CAACC,IAAI;IAE/F,IAAI,OAAOH,iBAAiB,UAAU;QACpC,MAAMI,eAAsB;YAC1BC,KAAK;gBACH;oBACEC,IAAI;wBACF;4BACEZ,UAAU;gCACRa,QAAQb;4BACV;wBACF;qBACD;gBACH;gBACAM;aACD;QACH;QAEA,IAAIJ,OAAOY,MAAM,CAACC,UAAU,EAAE;YAC5Bb,OAAOY,MAAM,CAACC,UAAU,CAACC,OAAO,CAAC,CAAC,EAAEC,IAAI,EAAE;gBACxCP,aAAaC,GAAG,CAAC,EAAE,CAACC,EAAE,CAACM,IAAI,CAAC;oBAC1B,CAAC,CAAC,MAAM,EAAED,KAAK,SAAS,CAAC,CAAC,EAAE;wBAC1BJ,QAAQb;oBACV;gBACF;YACF;QACF;QAEA,MAAMmB,MAAM,MAAMlB,IAAImB,OAAO,CAACC,EAAE,CAACC,OAAO,CAAC;YACvCvB,YAAYG,OAAOqB,IAAI;YACvBtB;YACAuB,OAAOd;QACT;QAEA,IAAI,CAACS,KAAK;YACR,MAAM,IAAIvB,UAAUK,IAAIwB,CAAC;QAC3B;IACF;AACF"}
+{"version":3,"file":"checkFileAccess.js","names":["executeAccess","Forbidden","endpointsAreDisabled","checkFileAccess","collection","filename","req","config","disableEndpoints","endpoints","request","includes","t","accessResult","isReadingStaticFile","access","read","queryToBuild","and","or","equals","upload","imageSizes","forEach","name","push","doc","payload","db","findOne","slug","where"],"sources":["../../../../src/routes/rest/files/checkFileAccess.ts"],"sourcesContent":["import type { Collection, PayloadRequest, TypeWithID, Where } from 'payload'\n\nimport { executeAccess, Forbidden } from 'payload'\n\nimport { endpointsAreDisabled } from '../checkEndpoints.js'\n\nexport async function checkFileAccess({\n  collection,\n  filename,\n  req,\n}: {\n  collection: Collection\n  filename: string\n  req: PayloadRequest\n}): Promise<Response | TypeWithID> {\n  const { config } = collection\n  const disableEndpoints = endpointsAreDisabled({ endpoints: config.endpoints, request: req })\n  if (disableEndpoints) {\n    return disableEndpoints\n  }\n\n  if (filename.includes('../') || filename.includes('..\\\\')) {\n    throw new Forbidden(req.t)\n  }\n\n  const accessResult = await executeAccess({ isReadingStaticFile: true, req }, config.access.read)\n\n  if (typeof accessResult === 'object') {\n    const queryToBuild: Where = {\n      and: [\n        {\n          or: [\n            {\n              filename: {\n                equals: filename,\n              },\n            },\n          ],\n        },\n        accessResult,\n      ],\n    }\n\n    if (config.upload.imageSizes) {\n      config.upload.imageSizes.forEach(({ name }) => {\n        queryToBuild.and[0].or.push({\n          [`sizes.${name}.filename`]: {\n            equals: filename,\n          },\n        })\n      })\n    }\n\n    const doc = await req.payload.db.findOne({\n      collection: config.slug,\n      req,\n      where: queryToBuild,\n    })\n\n    if (!doc) {\n      throw new Forbidden(req.t)\n    }\n\n    return doc\n  }\n}\n"],"mappings":"AAEA,SAASA,aAAa,EAAEC,SAAS,QAAQ;AAEzC,SAASC,oBAAoB,QAAQ;AAErC,OAAO,eAAeC,gBAAgB;EACpCC,UAAU;EACVC,QAAQ;EACRC;AAAG,CAKJ;EACC,MAAM;IAAEC;EAAM,CAAE,GAAGH,UAAA;EACnB,MAAMI,gBAAA,GAAmBN,oBAAA,CAAqB;IAAEO,SAAA,EAAWF,MAAA,CAAOE,SAAS;IAAEC,OAAA,EAASJ;EAAI;EAC1F,IAAIE,gBAAA,EAAkB;IACpB,OAAOA,gBAAA;EACT;EAEA,IAAIH,QAAA,CAASM,QAAQ,CAAC,UAAUN,QAAA,CAASM,QAAQ,CAAC,SAAS;IACzD,MAAM,IAAIV,SAAA,CAAUK,GAAA,CAAIM,CAAC;EAC3B;EAEA,MAAMC,YAAA,GAAe,MAAMb,aAAA,CAAc;IAAEc,mBAAA,EAAqB;IAAMR;EAAI,GAAGC,MAAA,CAAOQ,MAAM,CAACC,IAAI;EAE/F,IAAI,OAAOH,YAAA,KAAiB,UAAU;IACpC,MAAMI,YAAA,GAAsB;MAC1BC,GAAA,EAAK,CACH;QACEC,EAAA,EAAI,CACF;UACEd,QAAA,EAAU;YACRe,MAAA,EAAQf;UACV;QACF;MAEJ,GACAQ,YAAA;IAEJ;IAEA,IAAIN,MAAA,CAAOc,MAAM,CAACC,UAAU,EAAE;MAC5Bf,MAAA,CAAOc,MAAM,CAACC,UAAU,CAACC,OAAO,CAAC,CAAC;QAAEC;MAAI,CAAE;QACxCP,YAAA,CAAaC,GAAG,CAAC,EAAE,CAACC,EAAE,CAACM,IAAI,CAAC;UAC1B,CAAC,SAASD,IAAA,WAAe,GAAG;YAC1BJ,MAAA,EAAQf;UACV;QACF;MACF;IACF;IAEA,MAAMqB,GAAA,GAAM,MAAMpB,GAAA,CAAIqB,OAAO,CAACC,EAAE,CAACC,OAAO,CAAC;MACvCzB,UAAA,EAAYG,MAAA,CAAOuB,IAAI;MACvBxB,GAAA;MACAyB,KAAA,EAAOd;IACT;IAEA,IAAI,CAACS,GAAA,EAAK;MACR,MAAM,IAAIzB,SAAA,CAAUK,GAAA,CAAIM,CAAC;IAC3B;IAEA,OAAOc,GAAA;EACT;AACF","ignoreList":[]}

package/dist/routes/rest/files/getFile.d.ts

@@ -1,4 +1,4 @@
-import type { Collection, PayloadRequest } from 'payload/types';
+import type { Collection, PayloadRequest } from 'payload';
 type Args = {
     collection: Collection;
     filename: string;

package/dist/routes/rest/files/getFile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getFile.d.ts","sourceRoot":"","sources":["../../../../src/routes/rest/files/getFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAe/D,KAAK,IAAI,GAAG;IACV,UAAU,EAAE,UAAU,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AACD,eAAO,MAAM,OAAO,kCAAyC,IAAI,KAAG,QAAQ,QAAQ,CA0DnF,CAAA"}
+{"version":3,"file":"getFile.d.ts","sourceRoot":"","sources":["../../../../src/routes/rest/files/getFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAezD,KAAK,IAAI,GAAG;IACV,UAAU,EAAE,UAAU,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AACD,eAAO,MAAM,OAAO,kCAAyC,IAAI,KAAG,OAAO,CAAC,QAAQ,CAgEnF,CAAA"}

package/dist/routes/rest/files/getFile.js

@@ -1,59 +1,70 @@
-import getFileType from 'file-type';
+import { fileTypeFromFile } from 'file-type';
 import fsPromises from 'fs/promises';
 import httpStatus from 'http-status';
 import path from 'path';
-import { APIError } from 'payload/errors';
-import { streamFile } from '../../../next-stream-file/index.js';
+import { APIError } from 'payload';
+import { streamFile } from '../../../fetchAPI-stream-file/index.js';
 import { headersWithCors } from '../../../utilities/headersWithCors.js';
 import { routeError } from '../routeError.js';
 import { checkFileAccess } from './checkFileAccess.js';
 import { getFileTypeFallback } from './getFileTypeFallback.js';
-export const getFile = async ({ collection, filename, req })=>{
-    try {
-        if (!collection.config.upload) {
-            throw new APIError(`This collection is not an upload collection: ${collection.config.slug}`, httpStatus.BAD_REQUEST);
-        }
-        await checkFileAccess({
-            collection,
-            filename,
-            req
-        });
-        let response = null;
-        if (collection.config.upload.handlers?.length) {
-            for (const handler of collection.config.upload.handlers){
-                response = await handler(req, {
-                    params: {
-                        collection: collection.config.slug,
-                        filename
-                    }
-                });
-            }
-            if (response instanceof Response) return response;
-        }
-        const fileDir = collection.config.upload?.staticDir || collection.config.slug;
-        const filePath = path.resolve(`${fileDir}/${filename}`);
-        const stats = await fsPromises.stat(filePath);
-        const data = streamFile(filePath);
-        const headers = new Headers({
-            'Content-Length': stats.size + ''
-        });
-        const fileTypeResult = await getFileType.fromFile(filePath) || getFileTypeFallback(filePath);
-        headers.set('Content-Type', fileTypeResult.mime);
-        return new Response(data, {
-            headers: headersWithCors({
-                headers,
-                req
-            }),
-            status: httpStatus.OK
-        });
-    } catch (err) {
-        return routeError({
-            collection,
-            config: req.payload.config,
-            err,
-            req
+export const getFile = async ({
+  collection,
+  filename,
+  req
+}) => {
+  try {
+    if (!collection.config.upload) {
+      throw new APIError(`This collection is not an upload collection: ${collection.config.slug}`, httpStatus.BAD_REQUEST);
+    }
+    const accessResult = await checkFileAccess({
+      collection,
+      filename,
+      req
+    });
+    if (accessResult instanceof Response) {
+      return accessResult;
+    }
+    if (collection.config.upload.handlers?.length) {
+      let customResponse = null;
+      for (const handler of collection.config.upload.handlers) {
+        customResponse = await handler(req, {
+          doc: accessResult,
+          params: {
+            collection: collection.config.slug,
+            filename
+          }
         });
+      }
+      if (customResponse instanceof Response) {
+        return customResponse;
+      }
     }
+    const fileDir = collection.config.upload?.staticDir || collection.config.slug;
+    const filePath = path.resolve(`${fileDir}/${filename}`);
+    const stats = await fsPromises.stat(filePath);
+    const data = streamFile(filePath);
+    const fileTypeResult = (await fileTypeFromFile(filePath)) || getFileTypeFallback(filePath);
+    let headers = new Headers();
+    headers.set('Content-Type', fileTypeResult.mime);
+    headers.set('Content-Length', stats.size + '');
+    headers = collection.config.upload?.modifyResponseHeaders ? collection.config.upload.modifyResponseHeaders({
+      headers
+    }) : headers;
+    return new Response(data, {
+      headers: headersWithCors({
+        headers,
+        req
+      }),
+      status: httpStatus.OK
+    });
+  } catch (err) {
+    return routeError({
+      collection,
+      config: req.payload.config,
+      err,
+      req
+    });
+  }
 };
-
 //# sourceMappingURL=getFile.js.map