@payloadcms/next 3.91.0-internal.6e3dc85 → 4.0.0-beta.0

package/dist/utilities/initReq.spec.js

@@ -1,240 +0,0 @@
-import { getAccessResults } from 'payload';
-import { beforeEach, describe, expect, it, vi } from 'vitest';
-const mocks = vi.hoisted(() => ({
-  applyUserReadAccess: vi.fn(async ({
-    req,
-    user
-  }) => {
-    mocks.readAccessCalls += 1;
-    if (!mocks.readAccessSucceeds) {
-      throw new Error('User read access failed');
-    }
-    const userWithReadAccess = {
-      ...user,
-      requestLocale: req.locale
-    };
-    delete userWithReadAccess.authorizationRole;
-    return userWithReadAccess;
-  }),
-  authenticationSucceeds: true,
-  cacheStores: new Map(),
-  executeAuthStrategies: vi.fn(async () => ({
-    responseHeaders: new Headers({
-      'x-auth': 'authenticated'
-    }),
-    user: mocks.authenticationSucceeds ? {
-      authorizationRole: 'admin',
-      collection: 'users',
-      id: 'user-id'
-    } : null
-  })),
-  readAccessCalls: 0,
-  readAccessSucceeds: true
-}));
-vi.mock('@payloadcms/translations', () => ({
-  initI18n: vi.fn(async () => ({
-    dateFNSKey: 'en-US',
-    fallbackLanguage: 'en',
-    language: 'en',
-    t: key => key,
-    translations: {}
-  }))
-}));
-vi.mock('next/headers.js', () => ({
-  headers: vi.fn(async () => new Headers())
-}));
-vi.mock('payload', async importOriginal => {
-  const payloadModule = await importOriginal();
-  return {
-    ...payloadModule,
-    createLocalReq: vi.fn(async (options, payload) => {
-      const request = options.req ?? {};
-      const url = new URL(options.urlSuffix ?? '/', 'http://localhost');
-      const user = options.user ?? request.user ?? null;
-      return {
-        ...request,
-        context: options.context ?? request.context ?? {},
-        fallbackLocale: options.fallbackLocale,
-        headers: request.headers ?? new Headers(),
-        locale: options.locale ?? request.locale ?? request.query?.locale ?? 'en',
-        pathname: request.pathname ?? url.pathname,
-        payload,
-        query: request.query ?? {},
-        responseHeaders: request.responseHeaders ?? new Headers(),
-        url: request.url ?? url.href,
-        user: user && !user.collection ? {
-          ...user,
-          collection: payload.config.admin.user
-        } : user
-      };
-    }),
-    executeAuthStrategies: mocks.executeAuthStrategies,
-    getAccessResults: vi.fn(async ({
-      req
-    }) => ({
-      canAccessAdmin: req.user?.authorizationRole === 'admin'
-    })),
-    getPayload: vi.fn(async () => ({
-      collections: {
-        users: {
-          config: {
-            auth: {
-              depth: 0
-            },
-            slug: 'users'
-          }
-        }
-      },
-      config: {
-        admin: {
-          user: 'users'
-        },
-        i18n: {
-          fallbackLanguage: 'en',
-          supportedLanguages: {
-            en: {}
-          },
-          translations: {}
-        }
-      },
-      logger: {
-        error: vi.fn()
-      }
-    })),
-    getRequestLanguage: vi.fn(() => 'en')
-  };
-});
-vi.mock('payload/internal', () => ({
-  applyUserReadAccess: mocks.applyUserReadAccess
-}));
-vi.mock('./getRequestLocale.js', () => ({
-  getRequestLocale: vi.fn(async ({
-    req
-  }) => ({
-    code: req.locale ?? 'en'
-  }))
-}));
-vi.mock('./selectiveCache.js', () => ({
-  selectiveCache: namespace => ({
-    get: async (factory, ...args) => {
-      let cacheEntry = mocks.cacheStores.get(namespace);
-      if (!cacheEntry) {
-        cacheEntry = {
-          children: new Map()
-        };
-        mocks.cacheStores.set(namespace, cacheEntry);
-      }
-      for (const arg of args) {
-        let child = cacheEntry.children.get(arg);
-        if (!child) {
-          child = {
-            children: new Map()
-          };
-          cacheEntry.children.set(arg, child);
-        }
-        cacheEntry = child;
-      }
-      if (!('value' in cacheEntry)) {
-        cacheEntry.value = await factory();
-      }
-      return cacheEntry.value;
-    }
-  })
-}));
-import { initReq } from './initReq.js';
-describe('initReq', () => {
-  beforeEach(() => {
-    mocks.authenticationSucceeds = true;
-    mocks.applyUserReadAccess.mockClear();
-    mocks.cacheStores.clear();
-    mocks.executeAuthStrategies.mockClear();
-    mocks.readAccessCalls = 0;
-    mocks.readAccessSucceeds = true;
-  });
-  it('should authenticate once and apply user read access for each request shape', async () => {
-    const first = await initReq({
-      configPromise: {},
-      importMap: {},
-      key: 'shared-request',
-      overrides: {
-        locale: 'en'
-      }
-    });
-    const second = await initReq({
-      configPromise: {},
-      importMap: {},
-      key: 'shared-request',
-      overrides: {
-        locale: 'fr'
-      }
-    });
-    expect(mocks.executeAuthStrategies).toHaveBeenCalledOnce();
-    expect(mocks.readAccessCalls).toBe(2);
-    expect(first.user).toMatchObject({
-      requestLocale: 'en'
-    });
-    expect(second.user).toMatchObject({
-      requestLocale: 'fr'
-    });
-    expect(first.req.user).toHaveProperty('authorizationRole', 'admin');
-    expect(second.req.user).toHaveProperty('authorizationRole', 'admin');
-  });
-  it('should preserve complete fields for subsequent access checks', async () => {
-    const result = await initReq({
-      configPromise: {},
-      importMap: {},
-      key: 'subsequent-access'
-    });
-    const subsequentPermissions = await getAccessResults({
-      req: result.req
-    });
-    expect(result.req.user).toHaveProperty('authorizationRole', 'admin');
-    expect(result.user).not.toHaveProperty('authorizationRole');
-    expect(subsequentPermissions.canAccessAdmin).toBe(true);
-  });
-  it('should clear authentication when client user processing fails', async () => {
-    mocks.readAccessSucceeds = false;
-    const result = await initReq({
-      configPromise: {},
-      importMap: {},
-      key: 'failed-user-read'
-    });
-    expect(result.user).toBeNull();
-    expect(result.req.user).toBeNull();
-    expect(result.permissions.canAccessAdmin).toBe(false);
-  });
-  it('should preserve an explicit user override without applying read access', async () => {
-    const user = {
-      authorizationRole: 'admin',
-      collection: 'users',
-      id: 'override-user'
-    };
-    const result = await initReq({
-      configPromise: {},
-      importMap: {},
-      key: 'user-override',
-      overrides: {
-        user
-      }
-    });
-    expect(mocks.applyUserReadAccess).not.toHaveBeenCalled();
-    expect(result.user).toBe(user);
-    expect(result.req.user).toBe(user);
-    expect(result.permissions.canAccessAdmin).toBe(true);
-  });
-  it('should preserve an explicit top-level null user override', async () => {
-    const result = await initReq({
-      configPromise: {},
-      importMap: {},
-      key: 'top-level-null-user-override',
-      overrides: {
-        user: null
-      }
-    });
-    expect(mocks.applyUserReadAccess).not.toHaveBeenCalled();
-    expect(result.user).toBeNull();
-    expect(result.req.user).toBeNull();
-    expect(result.permissions.canAccessAdmin).toBe(false);
-  });
-});
-//# sourceMappingURL=initReq.spec.js.map

package/dist/utilities/initReq.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"initReq.spec.js","names":["getAccessResults","beforeEach","describe","expect","it","vi","mocks","hoisted","applyUserReadAccess","fn","req","user","readAccessCalls","readAccessSucceeds","Error","userWithReadAccess","requestLocale","locale","authorizationRole","authenticationSucceeds","cacheStores","Map","executeAuthStrategies","responseHeaders","Headers","collection","id","mock","initI18n","dateFNSKey","fallbackLanguage","language","t","key","translations","headers","importOriginal","payloadModule","createLocalReq","options","payload","request","url","URL","urlSuffix","context","fallbackLocale","query","pathname","href","config","admin","canAccessAdmin","getPayload","collections","users","auth","depth","slug","i18n","supportedLanguages","en","logger","error","getRequestLanguage","getRequestLocale","code","selectiveCache","namespace","get","factory","args","cacheEntry","children","set","arg","child","value","initReq","mockClear","clear","first","configPromise","importMap","overrides","second","toHaveBeenCalledOnce","toBe","toMatchObject","toHaveProperty","result","subsequentPermissions","not","toBeNull","permissions","toHaveBeenCalled"],"sources":["../../src/utilities/initReq.spec.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport { getAccessResults } from 'payload'\nimport { beforeEach, describe, expect, it, vi } from 'vitest'\n\ntype CacheEntry = {\n  children: Map<unknown, CacheEntry>\n  value?: object\n}\n\nconst mocks = vi.hoisted(() => ({\n  applyUserReadAccess: vi.fn(\n    async ({ req, user }: { req: PayloadRequest; user: NonNullable<PayloadRequest['user']> }) => {\n      mocks.readAccessCalls += 1\n\n      if (!mocks.readAccessSucceeds) {\n        throw new Error('User read access failed')\n      }\n\n      const userWithReadAccess = {\n        ...user,\n        requestLocale: req.locale,\n      }\n\n      delete userWithReadAccess.authorizationRole\n\n      return userWithReadAccess\n    },\n  ),\n  authenticationSucceeds: true,\n  cacheStores: new Map<string, CacheEntry>(),\n  executeAuthStrategies: vi.fn(async () => ({\n    responseHeaders: new Headers({ 'x-auth': 'authenticated' }),\n    user: mocks.authenticationSucceeds\n      ? {\n          authorizationRole: 'admin',\n          collection: 'users',\n          id: 'user-id',\n        }\n      : null,\n  })),\n  readAccessCalls: 0,\n  readAccessSucceeds: true,\n}))\n\nvi.mock('@payloadcms/translations', () => ({\n  initI18n: vi.fn(async () => ({\n    dateFNSKey: 'en-US',\n    fallbackLanguage: 'en',\n    language: 'en',\n    t: (key: string) => key,\n    translations: {},\n  })),\n}))\n\nvi.mock('next/headers.js', () => ({\n  headers: vi.fn(async () => new Headers()),\n}))\n\nvi.mock('payload', async (importOriginal) => {\n  const payloadModule = await importOriginal<typeof import('payload')>()\n\n  return {\n    ...payloadModule,\n    createLocalReq: vi.fn(async (options, payload) => {\n      const request = options.req ?? {}\n      const url = new URL(options.urlSuffix ?? '/', 'http://localhost')\n      const user = options.user ?? request.user ?? null\n\n      return {\n        ...request,\n        context: options.context ?? request.context ?? {},\n        fallbackLocale: options.fallbackLocale,\n        headers: request.headers ?? new Headers(),\n        locale: options.locale ?? request.locale ?? request.query?.locale ?? 'en',\n        pathname: request.pathname ?? url.pathname,\n        payload,\n        query: request.query ?? {},\n        responseHeaders: request.responseHeaders ?? new Headers(),\n        url: request.url ?? url.href,\n        user: user && !user.collection ? { ...user, collection: payload.config.admin.user } : user,\n      }\n    }),\n    executeAuthStrategies: mocks.executeAuthStrategies,\n    getAccessResults: vi.fn(async ({ req }: { req: PayloadRequest }) => ({\n      canAccessAdmin: req.user?.authorizationRole === 'admin',\n    })),\n    getPayload: vi.fn(async () => ({\n      collections: {\n        users: {\n          config: {\n            auth: { depth: 0 },\n            slug: 'users',\n          },\n        },\n      },\n      config: {\n        admin: { user: 'users' },\n        i18n: {\n          fallbackLanguage: 'en',\n          supportedLanguages: { en: {} },\n          translations: {},\n        },\n      },\n      logger: { error: vi.fn() },\n    })),\n    getRequestLanguage: vi.fn(() => 'en'),\n  }\n})\n\nvi.mock('payload/internal', () => ({\n  applyUserReadAccess: mocks.applyUserReadAccess,\n}))\n\nvi.mock('./getRequestLocale.js', () => ({\n  getRequestLocale: vi.fn(async ({ req }: { req: PayloadRequest }) => ({\n    code: req.locale ?? 'en',\n  })),\n}))\n\nvi.mock('./selectiveCache.js', () => ({\n  selectiveCache: (namespace: string) => ({\n    get: async (factory: () => Promise<object>, ...args: unknown[]) => {\n      let cacheEntry = mocks.cacheStores.get(namespace)\n\n      if (!cacheEntry) {\n        cacheEntry = { children: new Map() }\n        mocks.cacheStores.set(namespace, cacheEntry)\n      }\n\n      for (const arg of args) {\n        let child = cacheEntry.children.get(arg)\n\n        if (!child) {\n          child = { children: new Map() }\n          cacheEntry.children.set(arg, child)\n        }\n\n        cacheEntry = child\n      }\n\n      if (!('value' in cacheEntry)) {\n        cacheEntry.value = await factory()\n      }\n\n      return cacheEntry.value\n    },\n  }),\n}))\n\nimport { initReq } from './initReq.js'\n\ndescribe('initReq', () => {\n  beforeEach(() => {\n    mocks.authenticationSucceeds = true\n    mocks.applyUserReadAccess.mockClear()\n    mocks.cacheStores.clear()\n    mocks.executeAuthStrategies.mockClear()\n    mocks.readAccessCalls = 0\n    mocks.readAccessSucceeds = true\n  })\n\n  it('should authenticate once and apply user read access for each request shape', async () => {\n    const first = await initReq({\n      configPromise: {} as never,\n      importMap: {},\n      key: 'shared-request',\n      overrides: { locale: 'en' },\n    })\n    const second = await initReq({\n      configPromise: {} as never,\n      importMap: {},\n      key: 'shared-request',\n      overrides: { locale: 'fr' },\n    })\n\n    expect(mocks.executeAuthStrategies).toHaveBeenCalledOnce()\n    expect(mocks.readAccessCalls).toBe(2)\n    expect(first.user).toMatchObject({ requestLocale: 'en' })\n    expect(second.user).toMatchObject({ requestLocale: 'fr' })\n    expect(first.req.user).toHaveProperty('authorizationRole', 'admin')\n    expect(second.req.user).toHaveProperty('authorizationRole', 'admin')\n  })\n\n  it('should preserve complete fields for subsequent access checks', async () => {\n    const result = await initReq({\n      configPromise: {} as never,\n      importMap: {},\n      key: 'subsequent-access',\n    })\n\n    const subsequentPermissions = await getAccessResults({ req: result.req })\n\n    expect(result.req.user).toHaveProperty('authorizationRole', 'admin')\n    expect(result.user).not.toHaveProperty('authorizationRole')\n    expect(subsequentPermissions.canAccessAdmin).toBe(true)\n  })\n\n  it('should clear authentication when client user processing fails', async () => {\n    mocks.readAccessSucceeds = false\n\n    const result = await initReq({\n      configPromise: {} as never,\n      importMap: {},\n      key: 'failed-user-read',\n    })\n\n    expect(result.user).toBeNull()\n    expect(result.req.user).toBeNull()\n    expect(result.permissions.canAccessAdmin).toBe(false)\n  })\n\n  it('should preserve an explicit user override without applying read access', async () => {\n    const user = { authorizationRole: 'admin', collection: 'users', id: 'override-user' }\n\n    const result = await initReq({\n      configPromise: {} as never,\n      importMap: {},\n      key: 'user-override',\n      overrides: { user },\n    })\n\n    expect(mocks.applyUserReadAccess).not.toHaveBeenCalled()\n    expect(result.user).toBe(user)\n    expect(result.req.user).toBe(user)\n    expect(result.permissions.canAccessAdmin).toBe(true)\n  })\n\n  it('should preserve an explicit top-level null user override', async () => {\n    const result = await initReq({\n      configPromise: {} as never,\n      importMap: {},\n      key: 'top-level-null-user-override',\n      overrides: { user: null },\n    })\n\n    expect(mocks.applyUserReadAccess).not.toHaveBeenCalled()\n    expect(result.user).toBeNull()\n    expect(result.req.user).toBeNull()\n    expect(result.permissions.canAccessAdmin).toBe(false)\n  })\n})\n"],"mappings":"AAEA,SAASA,gBAAgB,QAAQ;AACjC,SAASC,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ;AAOrD,MAAMC,KAAA,GAAQD,EAAA,CAAGE,OAAO,CAAC,OAAO;EAC9BC,mBAAA,EAAqBH,EAAA,CAAGI,EAAE,CACxB,OAAO;IAAEC,GAAG;IAAEC;EAAI,CAAsE;IACtFL,KAAA,CAAMM,eAAe,IAAI;IAEzB,IAAI,CAACN,KAAA,CAAMO,kBAAkB,EAAE;MAC7B,MAAM,IAAIC,KAAA,CAAM;IAClB;IAEA,MAAMC,kBAAA,GAAqB;MACzB,GAAGJ,IAAI;MACPK,aAAA,EAAeN,GAAA,CAAIO;IACrB;IAEA,OAAOF,kBAAA,CAAmBG,iBAAiB;IAE3C,OAAOH,kBAAA;EACT;EAEFI,sBAAA,EAAwB;EACxBC,WAAA,EAAa,IAAIC,GAAA;EACjBC,qBAAA,EAAuBjB,EAAA,CAAGI,EAAE,CAAC,aAAa;IACxCc,eAAA,EAAiB,IAAIC,OAAA,CAAQ;MAAE,UAAU;IAAgB;IACzDb,IAAA,EAAML,KAAA,CAAMa,sBAAsB,GAC9B;MACED,iBAAA,EAAmB;MACnBO,UAAA,EAAY;MACZC,EAAA,EAAI;IACN,IACA;EACN;EACAd,eAAA,EAAiB;EACjBC,kBAAA,EAAoB;AACtB;AAEAR,EAAA,CAAGsB,IAAI,CAAC,4BAA4B,OAAO;EACzCC,QAAA,EAAUvB,EAAA,CAAGI,EAAE,CAAC,aAAa;IAC3BoB,UAAA,EAAY;IACZC,gBAAA,EAAkB;IAClBC,QAAA,EAAU;IACVC,CAAA,EAAIC,GAAA,IAAgBA,GAAA;IACpBC,YAAA,EAAc,CAAC;EACjB;AACF;AAEA7B,EAAA,CAAGsB,IAAI,CAAC,mBAAmB,OAAO;EAChCQ,OAAA,EAAS9B,EAAA,CAAGI,EAAE,CAAC,YAAY,IAAIe,OAAA;AACjC;AAEAnB,EAAA,CAAGsB,IAAI,CAAC,WAAW,MAAOS,cAAA;EACxB,MAAMC,aAAA,GAAgB,MAAMD,cAAA;EAE5B,OAAO;IACL,GAAGC,aAAa;IAChBC,cAAA,EAAgBjC,EAAA,CAAGI,EAAE,CAAC,OAAO8B,OAAA,EAASC,OAAA;MACpC,MAAMC,OAAA,GAAUF,OAAA,CAAQ7B,GAAG,IAAI,CAAC;MAChC,MAAMgC,GAAA,GAAM,IAAIC,GAAA,CAAIJ,OAAA,CAAQK,SAAS,IAAI,KAAK;MAC9C,MAAMjC,IAAA,GAAO4B,OAAA,CAAQ5B,IAAI,IAAI8B,OAAA,CAAQ9B,IAAI,IAAI;MAE7C,OAAO;QACL,GAAG8B,OAAO;QACVI,OAAA,EAASN,OAAA,CAAQM,OAAO,IAAIJ,OAAA,CAAQI,OAAO,IAAI,CAAC;QAChDC,cAAA,EAAgBP,OAAA,CAAQO,cAAc;QACtCX,OAAA,EAASM,OAAA,CAAQN,OAAO,IAAI,IAAIX,OAAA;QAChCP,MAAA,EAAQsB,OAAA,CAAQtB,MAAM,IAAIwB,OAAA,CAAQxB,MAAM,IAAIwB,OAAA,CAAQM,KAAK,EAAE9B,MAAA,IAAU;QACrE+B,QAAA,EAAUP,OAAA,CAAQO,QAAQ,IAAIN,GAAA,CAAIM,QAAQ;QAC1CR,OAAA;QACAO,KAAA,EAAON,OAAA,CAAQM,KAAK,IAAI,CAAC;QACzBxB,eAAA,EAAiBkB,OAAA,CAAQlB,eAAe,IAAI,IAAIC,OAAA;QAChDkB,GAAA,EAAKD,OAAA,CAAQC,GAAG,IAAIA,GAAA,CAAIO,IAAI;QAC5BtC,IAAA,EAAMA,IAAA,IAAQ,CAACA,IAAA,CAAKc,UAAU,GAAG;UAAE,GAAGd,IAAI;UAAEc,UAAA,EAAYe,OAAA,CAAQU,MAAM,CAACC,KAAK,CAACxC;QAAK,IAAIA;MACxF;IACF;IACAW,qBAAA,EAAuBhB,KAAA,CAAMgB,qBAAqB;IAClDtB,gBAAA,EAAkBK,EAAA,CAAGI,EAAE,CAAC,OAAO;MAAEC;IAAG,CAA2B,MAAM;MACnE0C,cAAA,EAAgB1C,GAAA,CAAIC,IAAI,EAAEO,iBAAA,KAAsB;IAClD;IACAmC,UAAA,EAAYhD,EAAA,CAAGI,EAAE,CAAC,aAAa;MAC7B6C,WAAA,EAAa;QACXC,KAAA,EAAO;UACLL,MAAA,EAAQ;YACNM,IAAA,EAAM;cAAEC,KAAA,EAAO;YAAE;YACjBC,IAAA,EAAM;UACR;QACF;MACF;MACAR,MAAA,EAAQ;QACNC,KAAA,EAAO;UAAExC,IAAA,EAAM;QAAQ;QACvBgD,IAAA,EAAM;UACJ7B,gBAAA,EAAkB;UAClB8B,kBAAA,EAAoB;YAAEC,EAAA,EAAI,CAAC;UAAE;UAC7B3B,YAAA,EAAc,CAAC;QACjB;MACF;MACA4B,MAAA,EAAQ;QAAEC,KAAA,EAAO1D,EAAA,CAAGI,EAAE;MAAG;IAC3B;IACAuD,kBAAA,EAAoB3D,EAAA,CAAGI,EAAE,CAAC,MAAM;EAClC;AACF;AAEAJ,EAAA,CAAGsB,IAAI,CAAC,oBAAoB,OAAO;EACjCnB,mBAAA,EAAqBF,KAAA,CAAME;AAC7B;AAEAH,EAAA,CAAGsB,IAAI,CAAC,yBAAyB,OAAO;EACtCsC,gBAAA,EAAkB5D,EAAA,CAAGI,EAAE,CAAC,OAAO;IAAEC;EAAG,CAA2B,MAAM;IACnEwD,IAAA,EAAMxD,GAAA,CAAIO,MAAM,IAAI;EACtB;AACF;AAEAZ,EAAA,CAAGsB,IAAI,CAAC,uBAAuB,OAAO;EACpCwC,cAAA,EAAiBC,SAAA,KAAuB;IACtCC,GAAA,EAAK,MAAAA,CAAOC,OAAA,EAAgC,GAAGC,IAAA;MAC7C,IAAIC,UAAA,GAAalE,KAAA,CAAMc,WAAW,CAACiD,GAAG,CAACD,SAAA;MAEvC,IAAI,CAACI,UAAA,EAAY;QACfA,UAAA,GAAa;UAAEC,QAAA,EAAU,IAAIpD,GAAA;QAAM;QACnCf,KAAA,CAAMc,WAAW,CAACsD,GAAG,CAACN,SAAA,EAAWI,UAAA;MACnC;MAEA,KAAK,MAAMG,GAAA,IAAOJ,IAAA,EAAM;QACtB,IAAIK,KAAA,GAAQJ,UAAA,CAAWC,QAAQ,CAACJ,GAAG,CAACM,GAAA;QAEpC,IAAI,CAACC,KAAA,EAAO;UACVA,KAAA,GAAQ;YAAEH,QAAA,EAAU,IAAIpD,GAAA;UAAM;UAC9BmD,UAAA,CAAWC,QAAQ,CAACC,GAAG,CAACC,GAAA,EAAKC,KAAA;QAC/B;QAEAJ,UAAA,GAAaI,KAAA;MACf;MAEA,IAAI,EAAE,WAAWJ,UAAS,GAAI;QAC5BA,UAAA,CAAWK,KAAK,GAAG,MAAMP,OAAA;MAC3B;MAEA,OAAOE,UAAA,CAAWK,KAAK;IACzB;EACF;AACF;AAEA,SAASC,OAAO,QAAQ;AAExB5E,QAAA,CAAS,WAAW;EAClBD,UAAA,CAAW;IACTK,KAAA,CAAMa,sBAAsB,GAAG;IAC/Bb,KAAA,CAAME,mBAAmB,CAACuE,SAAS;IACnCzE,KAAA,CAAMc,WAAW,CAAC4D,KAAK;IACvB1E,KAAA,CAAMgB,qBAAqB,CAACyD,SAAS;IACrCzE,KAAA,CAAMM,eAAe,GAAG;IACxBN,KAAA,CAAMO,kBAAkB,GAAG;EAC7B;EAEAT,EAAA,CAAG,8EAA8E;IAC/E,MAAM6E,KAAA,GAAQ,MAAMH,OAAA,CAAQ;MAC1BI,aAAA,EAAe,CAAC;MAChBC,SAAA,EAAW,CAAC;MACZlD,GAAA,EAAK;MACLmD,SAAA,EAAW;QAAEnE,MAAA,EAAQ;MAAK;IAC5B;IACA,MAAMoE,MAAA,GAAS,MAAMP,OAAA,CAAQ;MAC3BI,aAAA,EAAe,CAAC;MAChBC,SAAA,EAAW,CAAC;MACZlD,GAAA,EAAK;MACLmD,SAAA,EAAW;QAAEnE,MAAA,EAAQ;MAAK;IAC5B;IAEAd,MAAA,CAAOG,KAAA,CAAMgB,qBAAqB,EAAEgE,oBAAoB;IACxDnF,MAAA,CAAOG,KAAA,CAAMM,eAAe,EAAE2E,IAAI,CAAC;IACnCpF,MAAA,CAAO8E,KAAA,CAAMtE,IAAI,EAAE6E,aAAa,CAAC;MAAExE,aAAA,EAAe;IAAK;IACvDb,MAAA,CAAOkF,MAAA,CAAO1E,IAAI,EAAE6E,aAAa,CAAC;MAAExE,aAAA,EAAe;IAAK;IACxDb,MAAA,CAAO8E,KAAA,CAAMvE,GAAG,CAACC,IAAI,EAAE8E,cAAc,CAAC,qBAAqB;IAC3DtF,MAAA,CAAOkF,MAAA,CAAO3E,GAAG,CAACC,IAAI,EAAE8E,cAAc,CAAC,qBAAqB;EAC9D;EAEArF,EAAA,CAAG,gEAAgE;IACjE,MAAMsF,MAAA,GAAS,MAAMZ,OAAA,CAAQ;MAC3BI,aAAA,EAAe,CAAC;MAChBC,SAAA,EAAW,CAAC;MACZlD,GAAA,EAAK;IACP;IAEA,MAAM0D,qBAAA,GAAwB,MAAM3F,gBAAA,CAAiB;MAAEU,GAAA,EAAKgF,MAAA,CAAOhF;IAAI;IAEvEP,MAAA,CAAOuF,MAAA,CAAOhF,GAAG,CAACC,IAAI,EAAE8E,cAAc,CAAC,qBAAqB;IAC5DtF,MAAA,CAAOuF,MAAA,CAAO/E,IAAI,EAAEiF,GAAG,CAACH,cAAc,CAAC;IACvCtF,MAAA,CAAOwF,qBAAA,CAAsBvC,cAAc,EAAEmC,IAAI,CAAC;EACpD;EAEAnF,EAAA,CAAG,iEAAiE;IAClEE,KAAA,CAAMO,kBAAkB,GAAG;IAE3B,MAAM6E,MAAA,GAAS,MAAMZ,OAAA,CAAQ;MAC3BI,aAAA,EAAe,CAAC;MAChBC,SAAA,EAAW,CAAC;MACZlD,GAAA,EAAK;IACP;IAEA9B,MAAA,CAAOuF,MAAA,CAAO/E,IAAI,EAAEkF,QAAQ;IAC5B1F,MAAA,CAAOuF,MAAA,CAAOhF,GAAG,CAACC,IAAI,EAAEkF,QAAQ;IAChC1F,MAAA,CAAOuF,MAAA,CAAOI,WAAW,CAAC1C,cAAc,EAAEmC,IAAI,CAAC;EACjD;EAEAnF,EAAA,CAAG,0EAA0E;IAC3E,MAAMO,IAAA,GAAO;MAAEO,iBAAA,EAAmB;MAASO,UAAA,EAAY;MAASC,EAAA,EAAI;IAAgB;IAEpF,MAAMgE,MAAA,GAAS,MAAMZ,OAAA,CAAQ;MAC3BI,aAAA,EAAe,CAAC;MAChBC,SAAA,EAAW,CAAC;MACZlD,GAAA,EAAK;MACLmD,SAAA,EAAW;QAAEzE;MAAK;IACpB;IAEAR,MAAA,CAAOG,KAAA,CAAME,mBAAmB,EAAEoF,GAAG,CAACG,gBAAgB;IACtD5F,MAAA,CAAOuF,MAAA,CAAO/E,IAAI,EAAE4E,IAAI,CAAC5E,IAAA;IACzBR,MAAA,CAAOuF,MAAA,CAAOhF,GAAG,CAACC,IAAI,EAAE4E,IAAI,CAAC5E,IAAA;IAC7BR,MAAA,CAAOuF,MAAA,CAAOI,WAAW,CAAC1C,cAAc,EAAEmC,IAAI,CAAC;EACjD;EAEAnF,EAAA,CAAG,4DAA4D;IAC7D,MAAMsF,MAAA,GAAS,MAAMZ,OAAA,CAAQ;MAC3BI,aAAA,EAAe,CAAC;MAChBC,SAAA,EAAW,CAAC;MACZlD,GAAA,EAAK;MACLmD,SAAA,EAAW;QAAEzE,IAAA,EAAM;MAAK;IAC1B;IAEAR,MAAA,CAAOG,KAAA,CAAME,mBAAmB,EAAEoF,GAAG,CAACG,gBAAgB;IACtD5F,MAAA,CAAOuF,MAAA,CAAO/E,IAAI,EAAEkF,QAAQ;IAC5B1F,MAAA,CAAOuF,MAAA,CAAOhF,GAAG,CAACC,IAAI,EAAEkF,QAAQ;IAChC1F,MAAA,CAAOuF,MAAA,CAAOI,WAAW,CAAC1C,cAAc,EAAEmC,IAAI,CAAC;EACjD;AACF","ignoreList":[]}

package/dist/utilities/isCustomAdminView.d.ts

@@ -1,10 +0,0 @@
-import type { SanitizedConfig } from 'payload';
-/**
- * Returns an array of views marked with 'public: true' in the config
- */
-export declare const isCustomAdminView: ({ adminRoute, config, route, }: {
-    adminRoute: string;
-    config: SanitizedConfig;
-    route: string;
-}) => boolean;
-//# sourceMappingURL=isCustomAdminView.d.ts.map

package/dist/utilities/isCustomAdminView.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"isCustomAdminView.d.ts","sourceRoot":"","sources":["../../src/utilities/isCustomAdminView.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAI9C;;GAEG;AACH,eAAO,MAAM,iBAAiB,mCAI3B;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,eAAe,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;CACd,KAAG,OAuBH,CAAA"}

package/dist/utilities/isCustomAdminView.js

@@ -1,31 +0,0 @@
-import { getRouteWithoutAdmin } from './getRouteWithoutAdmin.js';
-/**
- * Returns an array of views marked with 'public: true' in the config
- */
-export const isCustomAdminView = ({
-  adminRoute,
-  config,
-  route
-}) => {
-  if (config.admin?.components?.views) {
-    const isPublicAdminRoute = Object.entries(config.admin.components.views).some(([_, view]) => {
-      const routeWithoutAdmin = getRouteWithoutAdmin({
-        adminRoute,
-        route
-      });
-      if (view.exact) {
-        if (routeWithoutAdmin === view.path) {
-          return true;
-        }
-      } else {
-        if (view.path && view.path !== '/' && (routeWithoutAdmin === view.path || routeWithoutAdmin.startsWith(view.path + '/'))) {
-          return true;
-        }
-      }
-      return false;
-    });
-    return isPublicAdminRoute;
-  }
-  return false;
-};
-//# sourceMappingURL=isCustomAdminView.js.map

package/dist/utilities/isCustomAdminView.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isCustomAdminView.js","names":["getRouteWithoutAdmin","isCustomAdminView","adminRoute","config","route","admin","components","views","isPublicAdminRoute","Object","entries","some","_","view","routeWithoutAdmin","exact","path","startsWith"],"sources":["../../src/utilities/isCustomAdminView.ts"],"sourcesContent":["import type { SanitizedConfig } from 'payload'\n\nimport { getRouteWithoutAdmin } from './getRouteWithoutAdmin.js'\n\n/**\n * Returns an array of views marked with 'public: true' in the config\n */\nexport const isCustomAdminView = ({\n  adminRoute,\n  config,\n  route,\n}: {\n  adminRoute: string\n  config: SanitizedConfig\n  route: string\n}): boolean => {\n  if (config.admin?.components?.views) {\n    const isPublicAdminRoute = Object.entries(config.admin.components.views).some(([_, view]) => {\n      const routeWithoutAdmin = getRouteWithoutAdmin({ adminRoute, route })\n\n      if (view.exact) {\n        if (routeWithoutAdmin === view.path) {\n          return true\n        }\n      } else {\n        if (\n          view.path &&\n          view.path !== '/' &&\n          (routeWithoutAdmin === view.path || routeWithoutAdmin.startsWith(view.path + '/'))\n        ) {\n          return true\n        }\n      }\n      return false\n    })\n    return isPublicAdminRoute\n  }\n  return false\n}\n"],"mappings":"AAEA,SAASA,oBAAoB,QAAQ;AAErC;;;AAGA,OAAO,MAAMC,iBAAA,GAAoBA,CAAC;EAChCC,UAAU;EACVC,MAAM;EACNC;AAAK,CAKN;EACC,IAAID,MAAA,CAAOE,KAAK,EAAEC,UAAA,EAAYC,KAAA,EAAO;IACnC,MAAMC,kBAAA,GAAqBC,MAAA,CAAOC,OAAO,CAACP,MAAA,CAAOE,KAAK,CAACC,UAAU,CAACC,KAAK,EAAEI,IAAI,CAAC,CAAC,CAACC,CAAA,EAAGC,IAAA,CAAK;MACtF,MAAMC,iBAAA,GAAoBd,oBAAA,CAAqB;QAAEE,UAAA;QAAYE;MAAM;MAEnE,IAAIS,IAAA,CAAKE,KAAK,EAAE;QACd,IAAID,iBAAA,KAAsBD,IAAA,CAAKG,IAAI,EAAE;UACnC,OAAO;QACT;MACF,OAAO;QACL,IACEH,IAAA,CAAKG,IAAI,IACTH,IAAA,CAAKG,IAAI,KAAK,QACbF,iBAAA,KAAsBD,IAAA,CAAKG,IAAI,IAAIF,iBAAA,CAAkBG,UAAU,CAACJ,IAAA,CAAKG,IAAI,GAAG,IAAG,GAChF;UACA,OAAO;QACT;MACF;MACA,OAAO;IACT;IACA,OAAOR,kBAAA;EACT;EACA,OAAO;AACT","ignoreList":[]}

package/dist/utilities/isCustomAdminView.spec.js

@@ -1,90 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { isCustomAdminView } from './isCustomAdminView.js';
-describe('isCustomAdminView', () => {
-  const adminRoute = '/admin';
-  const configWithCustomDashboard = {
-    admin: {
-      components: {
-        views: {
-          dashboard: {
-            path: '/'
-          }
-        }
-      }
-    }
-  };
-  it('should not bypass admin access for the root admin route even with a custom dashboard view', () => {
-    // The root path '/' maps to the dashboard — it is not a public custom view.
-    // canAccessAdmin must still be enforced for the admin root.
-    const result = isCustomAdminView({
-      adminRoute,
-      config: configWithCustomDashboard,
-      route: '/admin'
-    });
-    expect(result).toBe(false);
-  });
-  it('should not match collection routes as custom dashboard views when dashboard path is "/"', () => {
-    const result = isCustomAdminView({
-      adminRoute,
-      config: configWithCustomDashboard,
-      route: '/admin/collections/tickets'
-    });
-    expect(result).toBe(false);
-  });
-  it('should not match document routes as custom dashboard views when dashboard path is "/"', () => {
-    const result = isCustomAdminView({
-      adminRoute,
-      config: configWithCustomDashboard,
-      route: '/admin/collections/tickets/123'
-    });
-    expect(result).toBe(false);
-  });
-  it('should return false when no custom views are configured', () => {
-    const config = {};
-    const result = isCustomAdminView({
-      adminRoute,
-      config,
-      route: '/admin/collections/tickets'
-    });
-    expect(result).toBe(false);
-  });
-  it('should return true for a custom view with a non-root path', () => {
-    const config = {
-      admin: {
-        components: {
-          views: {
-            myCustomView: {
-              path: '/my-custom-view'
-            }
-          }
-        }
-      }
-    };
-    const result = isCustomAdminView({
-      adminRoute,
-      config,
-      route: '/admin/my-custom-view'
-    });
-    expect(result).toBe(true);
-  });
-  it('should not match collection routes when a non-root custom view path is set', () => {
-    const config = {
-      admin: {
-        components: {
-          views: {
-            myCustomView: {
-              path: '/my-custom-view'
-            }
-          }
-        }
-      }
-    };
-    const result = isCustomAdminView({
-      adminRoute,
-      config,
-      route: '/admin/collections/tickets'
-    });
-    expect(result).toBe(false);
-  });
-});
-//# sourceMappingURL=isCustomAdminView.spec.js.map

package/dist/utilities/isCustomAdminView.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isCustomAdminView.spec.js","names":["describe","expect","it","isCustomAdminView","adminRoute","configWithCustomDashboard","admin","components","views","dashboard","path","result","config","route","toBe","myCustomView"],"sources":["../../src/utilities/isCustomAdminView.spec.ts"],"sourcesContent":["import type { SanitizedConfig } from 'payload'\n\nimport { describe, expect, it } from 'vitest'\n\nimport { isCustomAdminView } from './isCustomAdminView.js'\n\ndescribe('isCustomAdminView', () => {\n  const adminRoute = '/admin'\n\n  const configWithCustomDashboard = {\n    admin: {\n      components: {\n        views: {\n          dashboard: {\n            path: '/',\n          },\n        },\n      },\n    },\n  } as unknown as SanitizedConfig\n\n  it('should not bypass admin access for the root admin route even with a custom dashboard view', () => {\n    // The root path '/' maps to the dashboard — it is not a public custom view.\n    // canAccessAdmin must still be enforced for the admin root.\n    const result = isCustomAdminView({\n      adminRoute,\n      config: configWithCustomDashboard,\n      route: '/admin',\n    })\n\n    expect(result).toBe(false)\n  })\n\n  it('should not match collection routes as custom dashboard views when dashboard path is \"/\"', () => {\n    const result = isCustomAdminView({\n      adminRoute,\n      config: configWithCustomDashboard,\n      route: '/admin/collections/tickets',\n    })\n\n    expect(result).toBe(false)\n  })\n\n  it('should not match document routes as custom dashboard views when dashboard path is \"/\"', () => {\n    const result = isCustomAdminView({\n      adminRoute,\n      config: configWithCustomDashboard,\n      route: '/admin/collections/tickets/123',\n    })\n\n    expect(result).toBe(false)\n  })\n\n  it('should return false when no custom views are configured', () => {\n    const config = {} as SanitizedConfig\n\n    const result = isCustomAdminView({\n      adminRoute,\n      config,\n      route: '/admin/collections/tickets',\n    })\n\n    expect(result).toBe(false)\n  })\n\n  it('should return true for a custom view with a non-root path', () => {\n    const config = {\n      admin: {\n        components: {\n          views: {\n            myCustomView: {\n              path: '/my-custom-view',\n            },\n          },\n        },\n      },\n    } as unknown as SanitizedConfig\n\n    const result = isCustomAdminView({\n      adminRoute,\n      config,\n      route: '/admin/my-custom-view',\n    })\n\n    expect(result).toBe(true)\n  })\n\n  it('should not match collection routes when a non-root custom view path is set', () => {\n    const config = {\n      admin: {\n        components: {\n          views: {\n            myCustomView: {\n              path: '/my-custom-view',\n            },\n          },\n        },\n      },\n    } as unknown as SanitizedConfig\n\n    const result = isCustomAdminView({\n      adminRoute,\n      config,\n      route: '/admin/collections/tickets',\n    })\n\n    expect(result).toBe(false)\n  })\n})\n"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ;AAErC,SAASC,iBAAiB,QAAQ;AAElCH,QAAA,CAAS,qBAAqB;EAC5B,MAAMI,UAAA,GAAa;EAEnB,MAAMC,yBAAA,GAA4B;IAChCC,KAAA,EAAO;MACLC,UAAA,EAAY;QACVC,KAAA,EAAO;UACLC,SAAA,EAAW;YACTC,IAAA,EAAM;UACR;QACF;MACF;IACF;EACF;EAEAR,EAAA,CAAG,6FAA6F;IAC9F;IACA;IACA,MAAMS,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA,EAAQP,yBAAA;MACRQ,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;EAEAZ,EAAA,CAAG,2FAA2F;IAC5F,MAAMS,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA,EAAQP,yBAAA;MACRQ,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;EAEAZ,EAAA,CAAG,yFAAyF;IAC1F,MAAMS,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA,EAAQP,yBAAA;MACRQ,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;EAEAZ,EAAA,CAAG,2DAA2D;IAC5D,MAAMU,MAAA,GAAS,CAAC;IAEhB,MAAMD,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA;MACAC,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;EAEAZ,EAAA,CAAG,6DAA6D;IAC9D,MAAMU,MAAA,GAAS;MACbN,KAAA,EAAO;QACLC,UAAA,EAAY;UACVC,KAAA,EAAO;YACLO,YAAA,EAAc;cACZL,IAAA,EAAM;YACR;UACF;QACF;MACF;IACF;IAEA,MAAMC,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA;MACAC,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;EAEAZ,EAAA,CAAG,8EAA8E;IAC/E,MAAMU,MAAA,GAAS;MACbN,KAAA,EAAO;QACLC,UAAA,EAAY;UACVC,KAAA,EAAO;YACLO,YAAA,EAAc;cACZL,IAAA,EAAM;YACR;UACF;QACF;MACF;IACF;IAEA,MAAMC,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA;MACAC,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;AACF","ignoreList":[]}

package/dist/utilities/isPublicAdminRoute.d.ts

@@ -1,7 +0,0 @@
-import type { SanitizedConfig } from 'payload';
-export declare const isPublicAdminRoute: ({ adminRoute, config, route, }: {
-    adminRoute: string;
-    config: SanitizedConfig;
-    route: string;
-}) => boolean;
-//# sourceMappingURL=isPublicAdminRoute.d.ts.map

package/dist/utilities/isPublicAdminRoute.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"isPublicAdminRoute.d.ts","sourceRoot":"","sources":["../../src/utilities/isPublicAdminRoute.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAmB9C,eAAO,MAAM,kBAAkB,mCAI5B;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,eAAe,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;CACd,KAAG,OAuBH,CAAA"}

package/dist/utilities/isPublicAdminRoute.js

@@ -1,27 +0,0 @@
-import { getRouteWithoutAdmin } from './getRouteWithoutAdmin.js';
-// Routes that are accessible without admin authentication
-const publicAdminRoutes = ['createFirstUser', 'forgot', 'login', 'logout', 'forgot', 'inactivity', 'unauthorized', 'reset'];
-export const isPublicAdminRoute = ({
-  adminRoute,
-  config,
-  route
-}) => {
-  const routeWithoutAdmin = getRouteWithoutAdmin({
-    adminRoute,
-    route
-  });
-  const routeSegments = routeWithoutAdmin.split('/').filter(Boolean);
-  const isVerifyRoute = routeSegments.length === 3 && routeSegments[1] === 'verify' && config.collections.some(collection => collection.slug === routeSegments[0] && Boolean(collection.auth));
-  if (isVerifyRoute) {
-    return true;
-  }
-  return publicAdminRoutes.some(routeSegment => {
-    const segment = config.admin?.routes?.[routeSegment] || routeSegment;
-    if (routeWithoutAdmin.startsWith(segment)) {
-      return true;
-    } else {
-      return false;
-    }
-  });
-};
-//# sourceMappingURL=isPublicAdminRoute.js.map

package/dist/utilities/isPublicAdminRoute.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isPublicAdminRoute.js","names":["getRouteWithoutAdmin","publicAdminRoutes","isPublicAdminRoute","adminRoute","config","route","routeWithoutAdmin","routeSegments","split","filter","Boolean","isVerifyRoute","length","collections","some","collection","slug","auth","routeSegment","segment","admin","routes","startsWith"],"sources":["../../src/utilities/isPublicAdminRoute.ts"],"sourcesContent":["import type { SanitizedConfig } from 'payload'\n\nimport { getRouteWithoutAdmin } from './getRouteWithoutAdmin.js'\n\n// Routes that are accessible without admin authentication\nconst publicAdminRoutes: (keyof Pick<\n  SanitizedConfig['admin']['routes'],\n  'createFirstUser' | 'forgot' | 'inactivity' | 'login' | 'logout' | 'reset' | 'unauthorized'\n>)[] = [\n  'createFirstUser',\n  'forgot',\n  'login',\n  'logout',\n  'forgot',\n  'inactivity',\n  'unauthorized',\n  'reset',\n]\n\nexport const isPublicAdminRoute = ({\n  adminRoute,\n  config,\n  route,\n}: {\n  adminRoute: string\n  config: SanitizedConfig\n  route: string\n}): boolean => {\n  const routeWithoutAdmin = getRouteWithoutAdmin({ adminRoute, route })\n  const routeSegments = routeWithoutAdmin.split('/').filter(Boolean)\n  const isVerifyRoute =\n    routeSegments.length === 3 &&\n    routeSegments[1] === 'verify' &&\n    config.collections.some(\n      (collection) => collection.slug === routeSegments[0] && Boolean(collection.auth),\n    )\n\n  if (isVerifyRoute) {\n    return true\n  }\n\n  return publicAdminRoutes.some((routeSegment) => {\n    const segment = config.admin?.routes?.[routeSegment] || routeSegment\n\n    if (routeWithoutAdmin.startsWith(segment)) {\n      return true\n    } else {\n      return false\n    }\n  })\n}\n"],"mappings":"AAEA,SAASA,oBAAoB,QAAQ;AAErC;AACA,MAAMC,iBAAA,GAGC,CACL,mBACA,UACA,SACA,UACA,UACA,cACA,gBACA,QACD;AAED,OAAO,MAAMC,kBAAA,GAAqBA,CAAC;EACjCC,UAAU;EACVC,MAAM;EACNC;AAAK,CAKN;EACC,MAAMC,iBAAA,GAAoBN,oBAAA,CAAqB;IAAEG,UAAA;IAAYE;EAAM;EACnE,MAAME,aAAA,GAAgBD,iBAAA,CAAkBE,KAAK,CAAC,KAAKC,MAAM,CAACC,OAAA;EAC1D,MAAMC,aAAA,GACJJ,aAAA,CAAcK,MAAM,KAAK,KACzBL,aAAa,CAAC,EAAE,KAAK,YACrBH,MAAA,CAAOS,WAAW,CAACC,IAAI,CACpBC,UAAA,IAAeA,UAAA,CAAWC,IAAI,KAAKT,aAAa,CAAC,EAAE,IAAIG,OAAA,CAAQK,UAAA,CAAWE,IAAI;EAGnF,IAAIN,aAAA,EAAe;IACjB,OAAO;EACT;EAEA,OAAOV,iBAAA,CAAkBa,IAAI,CAAEI,YAAA;IAC7B,MAAMC,OAAA,GAAUf,MAAA,CAAOgB,KAAK,EAAEC,MAAA,GAASH,YAAA,CAAa,IAAIA,YAAA;IAExD,IAAIZ,iBAAA,CAAkBgB,UAAU,CAACH,OAAA,GAAU;MACzC,OAAO;IACT,OAAO;MACL,OAAO;IACT;EACF;AACF","ignoreList":[]}

package/dist/utilities/isPublicAdminRoute.spec.js

@@ -1,34 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { isPublicAdminRoute } from './isPublicAdminRoute.js';
-describe('isPublicAdminRoute', () => {
-  const config = {
-    collections: [{
-      auth: true,
-      slug: 'users'
-    }, {
-      slug: 'pages'
-    }]
-  };
-  it('should allow collection verification routes', () => {
-    expect(isPublicAdminRoute({
-      adminRoute: '/admin',
-      config,
-      route: '/admin/users/verify/token'
-    })).toBe(true);
-  });
-  it('should not allow verification routes for collections without auth', () => {
-    expect(isPublicAdminRoute({
-      adminRoute: '/admin',
-      config,
-      route: '/admin/pages/verify/token'
-    })).toBe(false);
-  });
-  it('should not allow unrelated routes containing the verification segment', () => {
-    expect(isPublicAdminRoute({
-      adminRoute: '/admin',
-      config,
-      route: '/admin/custom/verify/dashboard'
-    })).toBe(false);
-  });
-});
-//# sourceMappingURL=isPublicAdminRoute.spec.js.map

package/dist/utilities/isPublicAdminRoute.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isPublicAdminRoute.spec.js","names":["describe","expect","it","isPublicAdminRoute","config","collections","auth","slug","adminRoute","route","toBe"],"sources":["../../src/utilities/isPublicAdminRoute.spec.ts"],"sourcesContent":["import type { SanitizedConfig } from 'payload'\n\nimport { describe, expect, it } from 'vitest'\n\nimport { isPublicAdminRoute } from './isPublicAdminRoute.js'\n\ndescribe('isPublicAdminRoute', () => {\n  const config = {\n    collections: [{ auth: true, slug: 'users' }, { slug: 'pages' }],\n  } as unknown as SanitizedConfig\n\n  it('should allow collection verification routes', () => {\n    expect(\n      isPublicAdminRoute({\n        adminRoute: '/admin',\n        config,\n        route: '/admin/users/verify/token',\n      }),\n    ).toBe(true)\n  })\n\n  it('should not allow verification routes for collections without auth', () => {\n    expect(\n      isPublicAdminRoute({\n        adminRoute: '/admin',\n        config,\n        route: '/admin/pages/verify/token',\n      }),\n    ).toBe(false)\n  })\n\n  it('should not allow unrelated routes containing the verification segment', () => {\n    expect(\n      isPublicAdminRoute({\n        adminRoute: '/admin',\n        config,\n        route: '/admin/custom/verify/dashboard',\n      }),\n    ).toBe(false)\n  })\n})\n"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ;AAErC,SAASC,kBAAkB,QAAQ;AAEnCH,QAAA,CAAS,sBAAsB;EAC7B,MAAMI,MAAA,GAAS;IACbC,WAAA,EAAa,CAAC;MAAEC,IAAA,EAAM;MAAMC,IAAA,EAAM;IAAQ,GAAG;MAAEA,IAAA,EAAM;IAAQ;EAC/D;EAEAL,EAAA,CAAG,+CAA+C;IAChDD,MAAA,CACEE,kBAAA,CAAmB;MACjBK,UAAA,EAAY;MACZJ,MAAA;MACAK,KAAA,EAAO;IACT,IACAC,IAAI,CAAC;EACT;EAEAR,EAAA,CAAG,qEAAqE;IACtED,MAAA,CACEE,kBAAA,CAAmB;MACjBK,UAAA,EAAY;MACZJ,MAAA;MACAK,KAAA,EAAO;IACT,IACAC,IAAI,CAAC;EACT;EAEAR,EAAA,CAAG,yEAAyE;IAC1ED,MAAA,CACEE,kBAAA,CAAmB;MACjBK,UAAA,EAAY;MACZJ,MAAA;MACAK,KAAA,EAAO;IACT,IACAC,IAAI,CAAC;EACT;AACF","ignoreList":[]}

package/dist/utilities/meta.d.ts

@@ -1,6 +0,0 @@
-import type { Metadata } from 'next';
-import type { MetaConfig } from 'payload';
-export declare const generateMetadata: (args: {
-    serverURL: string;
-} & MetaConfig) => Promise<Metadata>;
-//# sourceMappingURL=meta.d.ts.map

package/dist/utilities/meta.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"meta.d.ts","sourceRoot":"","sources":["../../src/utilities/meta.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAEpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAkDzC,eAAO,MAAM,gBAAgB,SACrB;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,KACvC,OAAO,CAAC,QAAQ,CAwFlB,CAAA"}

package/dist/utilities/meta.js

@@ -1,105 +0,0 @@
-import { payloadFaviconDark, payloadFaviconLight, staticOGImage } from '@payloadcms/ui/assets';
-import * as qs from 'qs-esm';
-const appendTitleSuffix = (title, suffix) => {
-  if (!suffix || !title) {
-    return title ?? undefined;
-  }
-  if (typeof title === 'string') {
-    return `${title} ${suffix}`;
-  }
-  if ('default' in title) {
-    return {
-      default: `${title.default} ${suffix}`,
-      template: `${title.template} ${suffix}`
-    };
-  }
-  if ('template' in title) {
-    return {
-      absolute: `${title.absolute} ${suffix}`,
-      template: title.template !== null ? `${title.template} ${suffix}` : null
-    };
-  }
-  return {
-    absolute: `${title.absolute} ${suffix}`
-  };
-};
-const getTitleString = title => {
-  if (!title) {
-    return undefined;
-  }
-  if (typeof title === 'string') {
-    return title;
-  }
-  if ('absolute' in title) {
-    return title.absolute;
-  }
-  return title.default;
-};
-const defaultOpenGraph = {
-  description: 'Payload is a headless CMS and application framework built with TypeScript, Node.js, and React.',
-  siteName: 'Payload App',
-  title: 'Payload App'
-};
-export const generateMetadata = async args => {
-  const {
-    defaultOGImageType,
-    serverURL,
-    titleSuffix,
-    ...rest
-  } = args;
-  /**
-  * @todo find a way to remove the type assertion here.
-  * It is a result of needing to `DeepCopy` the `MetaConfig` type from Payload.
-  * This is required for the `DeepRequired` from `Config` to `SanitizedConfig`.
-  */
-  const incomingMetadata = rest;
-  const icons = incomingMetadata.icons || [{
-    type: 'image/png',
-    rel: 'icon',
-    sizes: '32x32',
-    url: typeof payloadFaviconDark === 'object' ? payloadFaviconDark?.src : payloadFaviconDark
-  }, {
-    type: 'image/png',
-    media: '(prefers-color-scheme: dark)',
-    rel: 'icon',
-    sizes: '32x32',
-    url: typeof payloadFaviconLight === 'object' ? payloadFaviconLight?.src : payloadFaviconLight
-  }];
-  const metaTitle = appendTitleSuffix(incomingMetadata.title, titleSuffix);
-  const titleStringForOg = typeof incomingMetadata.openGraph?.title === 'string' ? incomingMetadata.openGraph.title : getTitleString(incomingMetadata.title);
-  const ogTitle = [titleStringForOg, titleSuffix].filter(Boolean).join(' ');
-  const mergedOpenGraph = {
-    ...(defaultOpenGraph || {}),
-    ...(defaultOGImageType === 'dynamic' ? {
-      images: [{
-        alt: ogTitle,
-        height: 630,
-        url: `/api/og${qs.stringify({
-          description: incomingMetadata.openGraph?.description || defaultOpenGraph.description,
-          title: ogTitle
-        }, {
-          addQueryPrefix: true
-        })}`,
-        width: 1200
-      }]
-    } : {}),
-    ...(defaultOGImageType === 'static' ? {
-      images: [{
-        alt: ogTitle,
-        height: 480,
-        url: typeof staticOGImage === 'object' ? staticOGImage?.src : staticOGImage,
-        width: 640
-      }]
-    } : {}),
-    title: ogTitle,
-    ...(incomingMetadata.openGraph || {})
-  };
-  return Promise.resolve({
-    ...incomingMetadata,
-    icons,
-    metadataBase: new URL(serverURL || process.env.PAYLOAD_PUBLIC_SERVER_URL || `http://localhost:${process.env.PORT || 3000}`),
-    openGraph: mergedOpenGraph,
-    title: metaTitle
-  });
-};
-//# sourceMappingURL=meta.js.map

package/dist/utilities/meta.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"meta.js","names":["payloadFaviconDark","payloadFaviconLight","staticOGImage","qs","appendTitleSuffix","title","suffix","undefined","default","template","absolute","getTitleString","defaultOpenGraph","description","siteName","generateMetadata","args","defaultOGImageType","serverURL","titleSuffix","rest","incomingMetadata","icons","type","rel","sizes","url","src","media","metaTitle","titleStringForOg","openGraph","ogTitle","filter","Boolean","join","mergedOpenGraph","images","alt","height","stringify","addQueryPrefix","width","Promise","resolve","metadataBase","URL","process","env","PAYLOAD_PUBLIC_SERVER_URL","PORT"],"sources":["../../src/utilities/meta.ts"],"sourcesContent":["import type { Metadata } from 'next'\nimport type { Icon } from 'next/dist/lib/metadata/types/metadata-types.js'\nimport type { MetaConfig } from 'payload'\n\nimport { payloadFaviconDark, payloadFaviconLight, staticOGImage } from '@payloadcms/ui/assets'\nimport * as qs from 'qs-esm'\n\nconst appendTitleSuffix = (\n  title: Metadata['title'],\n  suffix: string | undefined,\n): Metadata['title'] => {\n  if (!suffix || !title) {\n    return title ?? undefined\n  }\n  if (typeof title === 'string') {\n    return `${title} ${suffix}`\n  }\n\n  if ('default' in title) {\n    return { default: `${title.default} ${suffix}`, template: `${title.template} ${suffix}` }\n  }\n\n  if ('template' in title) {\n    return {\n      absolute: `${title.absolute} ${suffix}`,\n      template: title.template !== null ? `${title.template} ${suffix}` : null,\n    }\n  }\n\n  return { absolute: `${title.absolute} ${suffix}` }\n}\n\nconst getTitleString = (title: Metadata['title']): string | undefined => {\n  if (!title) {\n    return undefined\n  }\n  if (typeof title === 'string') {\n    return title\n  }\n  if ('absolute' in title) {\n    return title.absolute\n  }\n  return title.default\n}\n\nconst defaultOpenGraph: Metadata['openGraph'] = {\n  description:\n    'Payload is a headless CMS and application framework built with TypeScript, Node.js, and React.',\n  siteName: 'Payload App',\n  title: 'Payload App',\n}\n\nexport const generateMetadata = async (\n  args: { serverURL: string } & MetaConfig,\n): Promise<Metadata> => {\n  const { defaultOGImageType, serverURL, titleSuffix, ...rest } = args\n\n  /**\n   * @todo find a way to remove the type assertion here.\n   * It is a result of needing to `DeepCopy` the `MetaConfig` type from Payload.\n   * This is required for the `DeepRequired` from `Config` to `SanitizedConfig`.\n   */\n  const incomingMetadata = rest as Metadata\n\n  const icons: Metadata['icons'] =\n    incomingMetadata.icons ||\n    ([\n      {\n        type: 'image/png',\n        rel: 'icon',\n        sizes: '32x32',\n        url: typeof payloadFaviconDark === 'object' ? payloadFaviconDark?.src : payloadFaviconDark,\n      },\n      {\n        type: 'image/png',\n        media: '(prefers-color-scheme: dark)',\n        rel: 'icon',\n        sizes: '32x32',\n        url:\n          typeof payloadFaviconLight === 'object' ? payloadFaviconLight?.src : payloadFaviconLight,\n      },\n    ] satisfies Array<Icon>)\n\n  const metaTitle: Metadata['title'] = appendTitleSuffix(incomingMetadata.title, titleSuffix)\n\n  const titleStringForOg: string | undefined =\n    typeof incomingMetadata.openGraph?.title === 'string'\n      ? incomingMetadata.openGraph.title\n      : getTitleString(incomingMetadata.title)\n\n  const ogTitle = [titleStringForOg, titleSuffix].filter(Boolean).join(' ')\n\n  const mergedOpenGraph: Metadata['openGraph'] = {\n    ...(defaultOpenGraph || {}),\n    ...(defaultOGImageType === 'dynamic'\n      ? {\n          images: [\n            {\n              alt: ogTitle,\n              height: 630,\n              url: `/api/og${qs.stringify(\n                {\n                  description:\n                    incomingMetadata.openGraph?.description || defaultOpenGraph.description,\n                  title: ogTitle,\n                },\n                {\n                  addQueryPrefix: true,\n                },\n              )}`,\n              width: 1200,\n            },\n          ],\n        }\n      : {}),\n    ...(defaultOGImageType === 'static'\n      ? {\n          images: [\n            {\n              alt: ogTitle,\n              height: 480,\n              url: typeof staticOGImage === 'object' ? staticOGImage?.src : staticOGImage,\n              width: 640,\n            },\n          ],\n        }\n      : {}),\n    title: ogTitle,\n    ...(incomingMetadata.openGraph || {}),\n  }\n\n  return Promise.resolve({\n    ...incomingMetadata,\n    icons,\n    metadataBase: new URL(\n      serverURL ||\n        process.env.PAYLOAD_PUBLIC_SERVER_URL ||\n        `http://localhost:${process.env.PORT || 3000}`,\n    ),\n    openGraph: mergedOpenGraph,\n    title: metaTitle,\n  })\n}\n"],"mappings":"AAIA,SAASA,kBAAkB,EAAEC,mBAAmB,EAAEC,aAAa,QAAQ;AACvE,YAAYC,EAAA,MAAQ;AAEpB,MAAMC,iBAAA,GAAoBA,CACxBC,KAAA,EACAC,MAAA;EAEA,IAAI,CAACA,MAAA,IAAU,CAACD,KAAA,EAAO;IACrB,OAAOA,KAAA,IAASE,SAAA;EAClB;EACA,IAAI,OAAOF,KAAA,KAAU,UAAU;IAC7B,OAAO,GAAGA,KAAA,IAASC,MAAA,EAAQ;EAC7B;EAEA,IAAI,aAAaD,KAAA,EAAO;IACtB,OAAO;MAAEG,OAAA,EAAS,GAAGH,KAAA,CAAMG,OAAO,IAAIF,MAAA,EAAQ;MAAEG,QAAA,EAAU,GAAGJ,KAAA,CAAMI,QAAQ,IAAIH,MAAA;IAAS;EAC1F;EAEA,IAAI,cAAcD,KAAA,EAAO;IACvB,OAAO;MACLK,QAAA,EAAU,GAAGL,KAAA,CAAMK,QAAQ,IAAIJ,MAAA,EAAQ;MACvCG,QAAA,EAAUJ,KAAA,CAAMI,QAAQ,KAAK,OAAO,GAAGJ,KAAA,CAAMI,QAAQ,IAAIH,MAAA,EAAQ,GAAG;IACtE;EACF;EAEA,OAAO;IAAEI,QAAA,EAAU,GAAGL,KAAA,CAAMK,QAAQ,IAAIJ,MAAA;EAAS;AACnD;AAEA,MAAMK,cAAA,GAAkBN,KAAA;EACtB,IAAI,CAACA,KAAA,EAAO;IACV,OAAOE,SAAA;EACT;EACA,IAAI,OAAOF,KAAA,KAAU,UAAU;IAC7B,OAAOA,KAAA;EACT;EACA,IAAI,cAAcA,KAAA,EAAO;IACvB,OAAOA,KAAA,CAAMK,QAAQ;EACvB;EACA,OAAOL,KAAA,CAAMG,OAAO;AACtB;AAEA,MAAMI,gBAAA,GAA0C;EAC9CC,WAAA,EACE;EACFC,QAAA,EAAU;EACVT,KAAA,EAAO;AACT;AAEA,OAAO,MAAMU,gBAAA,GAAmB,MAC9BC,IAAA;EAEA,MAAM;IAAEC,kBAAkB;IAAEC,SAAS;IAAEC,WAAW;IAAE,GAAGC;EAAA,CAAM,GAAGJ,IAAA;EAEhE;;;;;EAKA,MAAMK,gBAAA,GAAmBD,IAAA;EAEzB,MAAME,KAAA,GACJD,gBAAA,CAAiBC,KAAK,IACrB,CACC;IACEC,IAAA,EAAM;IACNC,GAAA,EAAK;IACLC,KAAA,EAAO;IACPC,GAAA,EAAK,OAAO1B,kBAAA,KAAuB,WAAWA,kBAAA,EAAoB2B,GAAA,GAAM3B;EAC1E,GACA;IACEuB,IAAA,EAAM;IACNK,KAAA,EAAO;IACPJ,GAAA,EAAK;IACLC,KAAA,EAAO;IACPC,GAAA,EACE,OAAOzB,mBAAA,KAAwB,WAAWA,mBAAA,EAAqB0B,GAAA,GAAM1B;EACzE,EACD;EAEH,MAAM4B,SAAA,GAA+BzB,iBAAA,CAAkBiB,gBAAA,CAAiBhB,KAAK,EAAEc,WAAA;EAE/E,MAAMW,gBAAA,GACJ,OAAOT,gBAAA,CAAiBU,SAAS,EAAE1B,KAAA,KAAU,WACzCgB,gBAAA,CAAiBU,SAAS,CAAC1B,KAAK,GAChCM,cAAA,CAAeU,gBAAA,CAAiBhB,KAAK;EAE3C,MAAM2B,OAAA,GAAU,CAACF,gBAAA,EAAkBX,WAAA,CAAY,CAACc,MAAM,CAACC,OAAA,EAASC,IAAI,CAAC;EAErE,MAAMC,eAAA,GAAyC;IAC7C,IAAIxB,gBAAA,IAAoB,CAAC,CAAC;IAC1B,IAAIK,kBAAA,KAAuB,YACvB;MACEoB,MAAA,EAAQ,CACN;QACEC,GAAA,EAAKN,OAAA;QACLO,MAAA,EAAQ;QACRb,GAAA,EAAK,UAAUvB,EAAA,CAAGqC,SAAS,CACzB;UACE3B,WAAA,EACEQ,gBAAA,CAAiBU,SAAS,EAAElB,WAAA,IAAeD,gBAAA,CAAiBC,WAAW;UACzER,KAAA,EAAO2B;QACT,GACA;UACES,cAAA,EAAgB;QAClB,IACC;QACHC,KAAA,EAAO;MACT;IAEJ,IACA,CAAC,CAAC;IACN,IAAIzB,kBAAA,KAAuB,WACvB;MACEoB,MAAA,EAAQ,CACN;QACEC,GAAA,EAAKN,OAAA;QACLO,MAAA,EAAQ;QACRb,GAAA,EAAK,OAAOxB,aAAA,KAAkB,WAAWA,aAAA,EAAeyB,GAAA,GAAMzB,aAAA;QAC9DwC,KAAA,EAAO;MACT;IAEJ,IACA,CAAC,CAAC;IACNrC,KAAA,EAAO2B,OAAA;IACP,IAAIX,gBAAA,CAAiBU,SAAS,IAAI,CAAC,CAAC;EACtC;EAEA,OAAOY,OAAA,CAAQC,OAAO,CAAC;IACrB,GAAGvB,gBAAgB;IACnBC,KAAA;IACAuB,YAAA,EAAc,IAAIC,GAAA,CAChB5B,SAAA,IACE6B,OAAA,CAAQC,GAAG,CAACC,yBAAyB,IACrC,oBAAoBF,OAAA,CAAQC,GAAG,CAACE,IAAI,IAAI,MAAM;IAElDnB,SAAA,EAAWK,eAAA;IACX/B,KAAA,EAAOwB;EACT;AACF","ignoreList":[]}