@payloadcms/plugin-cloud-storage 4.0.0-canary.33 → 4.0.0-canary.34

package/dist/utilities/resolveSignedURLKey.spec.js

@@ -0,0 +1,74 @@
+import { createClientUploadReceipt, getSafeFileName } from 'payload/internal';
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import { resolveSignedURLKey } from './resolveSignedURLKey.js';
+vi.mock('payload/internal', ()=>({
+        createClientUploadReceipt: vi.fn(()=>'receipt'),
+        getSafeFileName: vi.fn(async ({ desiredFilename })=>desiredFilename)
+    }));
+describe('resolveSignedURLKey', ()=>{
+    beforeEach(()=>{
+        vi.clearAllMocks();
+    });
+    it('checks the normalized filename before resolving the storage key', async ()=>{
+        vi.mocked(getSafeFileName).mockResolvedValueOnce('photo-1.png');
+        const result = await resolveSignedURLKey({
+            collectionPrefix: 'media',
+            collectionSlug: 'uploads',
+            filename: 'nested\\folder/photo.png',
+            req: {}
+        });
+        expect(getSafeFileName).toHaveBeenCalledWith({
+            collectionSlug: 'uploads',
+            desiredFilename: 'photo.png',
+            req: {}
+        });
+        expect(createClientUploadReceipt).toHaveBeenCalledWith({
+            _objectKey: expect.stringMatching(/^[0-9a-f-]+$/),
+            collectionSlug: 'uploads',
+            filePrefix: 'media',
+            filename: 'photo-1.png',
+            req: {},
+            storageFilePath: expect.stringMatching(/^media\/[0-9a-f-]+\/photo-1\.png$/)
+        });
+        expect(result).toEqual({
+            sanitizedDocPrefix: 'media',
+            sanitizedFilename: 'photo-1.png',
+            storageFilePath: expect.stringMatching(/^media\/[0-9a-f-]+\/photo-1\.png$/),
+            uploadReference: {
+                _objectKey: expect.stringMatching(/^[0-9a-f-]+$/),
+                prefix: 'media',
+                signedReceipt: 'receipt'
+            }
+        });
+    });
+    it('should mint the receipt for a key contained by the collection prefix', async ()=>{
+        vi.mocked(getSafeFileName).mockResolvedValueOnce('photo-1.jpg');
+        const result = await resolveSignedURLKey({
+            collectionPrefix: 'media',
+            collectionSlug: 'media',
+            docPrefix: 'media-archive',
+            filename: 'photo.jpg',
+            req: {}
+        });
+        expect(createClientUploadReceipt).toHaveBeenCalledWith({
+            _objectKey: expect.stringMatching(/^[0-9a-f-]+$/),
+            collectionSlug: 'media',
+            filePrefix: result.sanitizedDocPrefix,
+            filename: 'photo-1.jpg',
+            req: {},
+            storageFilePath: result.storageFilePath
+        });
+        expect(result).toEqual({
+            sanitizedDocPrefix: 'media/media-archive',
+            sanitizedFilename: 'photo-1.jpg',
+            storageFilePath: expect.stringMatching(/^media\/media-archive\/[0-9a-f-]+\/photo-1\.jpg$/),
+            uploadReference: {
+                _objectKey: expect.stringMatching(/^[0-9a-f-]+$/),
+                prefix: 'media/media-archive',
+                signedReceipt: 'receipt'
+            }
+        });
+    });
+});
+
+//# sourceMappingURL=resolveSignedURLKey.spec.js.map

package/dist/utilities/resolveSignedURLKey.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/resolveSignedURLKey.spec.ts"],"sourcesContent":["import { createClientUploadReceipt, getSafeFileName } from 'payload/internal'\nimport { beforeEach, describe, expect, it, vi } from 'vitest'\n\nimport { resolveSignedURLKey } from './resolveSignedURLKey.js'\n\nvi.mock('payload/internal', () => ({\n  createClientUploadReceipt: vi.fn(() => 'receipt'),\n  getSafeFileName: vi.fn(async ({ desiredFilename }) => desiredFilename),\n}))\n\ndescribe('resolveSignedURLKey', () => {\n  beforeEach(() => {\n    vi.clearAllMocks()\n  })\n\n  it('checks the normalized filename before resolving the storage key', async () => {\n    vi.mocked(getSafeFileName).mockResolvedValueOnce('photo-1.png')\n\n    const result = await resolveSignedURLKey({\n      collectionPrefix: 'media',\n      collectionSlug: 'uploads',\n      filename: 'nested\\\\folder/photo.png',\n      req: {} as never,\n    })\n\n    expect(getSafeFileName).toHaveBeenCalledWith({\n      collectionSlug: 'uploads',\n      desiredFilename: 'photo.png',\n      req: {},\n    })\n    expect(createClientUploadReceipt).toHaveBeenCalledWith({\n      _objectKey: expect.stringMatching(/^[0-9a-f-]+$/),\n      collectionSlug: 'uploads',\n      filePrefix: 'media',\n      filename: 'photo-1.png',\n      req: {},\n      storageFilePath: expect.stringMatching(/^media\\/[0-9a-f-]+\\/photo-1\\.png$/),\n    })\n    expect(result).toEqual({\n      sanitizedDocPrefix: 'media',\n      sanitizedFilename: 'photo-1.png',\n      storageFilePath: expect.stringMatching(/^media\\/[0-9a-f-]+\\/photo-1\\.png$/),\n      uploadReference: {\n        _objectKey: expect.stringMatching(/^[0-9a-f-]+$/),\n        prefix: 'media',\n        signedReceipt: 'receipt',\n      },\n    })\n  })\n\n  it('should mint the receipt for a key contained by the collection prefix', async () => {\n    vi.mocked(getSafeFileName).mockResolvedValueOnce('photo-1.jpg')\n\n    const result = await resolveSignedURLKey({\n      collectionPrefix: 'media',\n      collectionSlug: 'media',\n      docPrefix: 'media-archive',\n      filename: 'photo.jpg',\n      req: {} as never,\n    })\n\n    expect(createClientUploadReceipt).toHaveBeenCalledWith({\n      _objectKey: expect.stringMatching(/^[0-9a-f-]+$/),\n      collectionSlug: 'media',\n      filePrefix: result.sanitizedDocPrefix,\n      filename: 'photo-1.jpg',\n      req: {},\n      storageFilePath: result.storageFilePath,\n    })\n    expect(result).toEqual({\n      sanitizedDocPrefix: 'media/media-archive',\n      sanitizedFilename: 'photo-1.jpg',\n      storageFilePath: expect.stringMatching(/^media\\/media-archive\\/[0-9a-f-]+\\/photo-1\\.jpg$/),\n      uploadReference: {\n        _objectKey: expect.stringMatching(/^[0-9a-f-]+$/),\n        prefix: 'media/media-archive',\n        signedReceipt: 'receipt',\n      },\n    })\n  })\n})\n"],"names":["createClientUploadReceipt","getSafeFileName","beforeEach","describe","expect","it","vi","resolveSignedURLKey","mock","fn","desiredFilename","clearAllMocks","mocked","mockResolvedValueOnce","result","collectionPrefix","collectionSlug","filename","req","toHaveBeenCalledWith","_objectKey","stringMatching","filePrefix","storageFilePath","toEqual","sanitizedDocPrefix","sanitizedFilename","uploadReference","prefix","signedReceipt","docPrefix"],"mappings":"AAAA,SAASA,yBAAyB,EAAEC,eAAe,QAAQ,mBAAkB;AAC7E,SAASC,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAE7D,SAASC,mBAAmB,QAAQ,2BAA0B;AAE9DD,GAAGE,IAAI,CAAC,oBAAoB,IAAO,CAAA;QACjCR,2BAA2BM,GAAGG,EAAE,CAAC,IAAM;QACvCR,iBAAiBK,GAAGG,EAAE,CAAC,OAAO,EAAEC,eAAe,EAAE,GAAKA;IACxD,CAAA;AAEAP,SAAS,uBAAuB;IAC9BD,WAAW;QACTI,GAAGK,aAAa;IAClB;IAEAN,GAAG,mEAAmE;QACpEC,GAAGM,MAAM,CAACX,iBAAiBY,qBAAqB,CAAC;QAEjD,MAAMC,SAAS,MAAMP,oBAAoB;YACvCQ,kBAAkB;YAClBC,gBAAgB;YAChBC,UAAU;YACVC,KAAK,CAAC;QACR;QAEAd,OAAOH,iBAAiBkB,oBAAoB,CAAC;YAC3CH,gBAAgB;YAChBN,iBAAiB;YACjBQ,KAAK,CAAC;QACR;QACAd,OAAOJ,2BAA2BmB,oBAAoB,CAAC;YACrDC,YAAYhB,OAAOiB,cAAc,CAAC;YAClCL,gBAAgB;YAChBM,YAAY;YACZL,UAAU;YACVC,KAAK,CAAC;YACNK,iBAAiBnB,OAAOiB,cAAc,CAAC;QACzC;QACAjB,OAAOU,QAAQU,OAAO,CAAC;YACrBC,oBAAoB;YACpBC,mBAAmB;YACnBH,iBAAiBnB,OAAOiB,cAAc,CAAC;YACvCM,iBAAiB;gBACfP,YAAYhB,OAAOiB,cAAc,CAAC;gBAClCO,QAAQ;gBACRC,eAAe;YACjB;QACF;IACF;IAEAxB,GAAG,wEAAwE;QACzEC,GAAGM,MAAM,CAACX,iBAAiBY,qBAAqB,CAAC;QAEjD,MAAMC,SAAS,MAAMP,oBAAoB;YACvCQ,kBAAkB;YAClBC,gBAAgB;YAChBc,WAAW;YACXb,UAAU;YACVC,KAAK,CAAC;QACR;QAEAd,OAAOJ,2BAA2BmB,oBAAoB,CAAC;YACrDC,YAAYhB,OAAOiB,cAAc,CAAC;YAClCL,gBAAgB;YAChBM,YAAYR,OAAOW,kBAAkB;YACrCR,UAAU;YACVC,KAAK,CAAC;YACNK,iBAAiBT,OAAOS,eAAe;QACzC;QACAnB,OAAOU,QAAQU,OAAO,CAAC;YACrBC,oBAAoB;YACpBC,mBAAmB;YACnBH,iBAAiBnB,OAAOiB,cAAc,CAAC;YACvCM,iBAAiB;gBACfP,YAAYhB,OAAOiB,cAAc,CAAC;gBAClCO,QAAQ;gBACRC,eAAe;YACjB;QACF;IACF;AACF"}

package/dist/utilities/sanitizePrefix.d.ts

@@ -1,10 +1,2 @@
-/**
- * Normalizes a storage prefix for use in object keys and URLs.
- *
- * Decodes URI components once (so query-style `%2F` becomes `/`), rejects
- * values that still contain percent-encodings after decoding (e.g. `%252f`),
- * then normalizes slashes, drops `.` / `..` segments, strips leading slashes,
- * and removes control characters.
- */
-export declare function sanitizePrefix(prefix: string): string;
+export { sanitizeUploadPrefix as sanitizePrefix } from 'payload/shared';
 //# sourceMappingURL=sanitizePrefix.d.ts.map

package/dist/utilities/sanitizePrefix.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitizePrefix.d.ts","sourceRoot":"","sources":["../../src/utilities/sanitizePrefix.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAwBrD"}
+{"version":3,"file":"sanitizePrefix.d.ts","sourceRoot":"","sources":["../../src/utilities/sanitizePrefix.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/utilities/sanitizePrefix.js

@@ -1,23 +1,3 @@
-/**
- * Normalizes a storage prefix for use in object keys and URLs.
- *
- * Decodes URI components once (so query-style `%2F` becomes `/`), rejects
- * values that still contain percent-encodings after decoding (e.g. `%252f`),
- * then normalizes slashes, drops `.` / `..` segments, strips leading slashes,
- * and removes control characters.
- */ export function sanitizePrefix(prefix) {
-    let decodedPrefix;
-    try {
-        decodedPrefix = decodeURIComponent(prefix);
-    } catch  {
-        return '';
-    }
-    // Reject multi-encoded values (e.g. `%252f`) by allowing only a single decode pass.
-    if (/%[0-9a-f]{2}/i.test(decodedPrefix)) {
-        return '';
-    }
-    return decodedPrefix.replace(/\\/g, '/').split('/').filter((segment)=>segment !== '..' && segment !== '.').join('/').replace(/^\/+/, '')// eslint-disable-next-line no-control-regex
-    .replace(/[\x00-\x1f\x80-\x9f]/g, '');
-}
+export { sanitizeUploadPrefix as sanitizePrefix } from 'payload/shared';
 
 //# sourceMappingURL=sanitizePrefix.js.map

package/dist/utilities/sanitizePrefix.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/sanitizePrefix.ts"],"sourcesContent":["/**\n * Normalizes a storage prefix for use in object keys and URLs.\n *\n * Decodes URI components once (so query-style `%2F` becomes `/`), rejects\n * values that still contain percent-encodings after decoding (e.g. `%252f`),\n * then normalizes slashes, drops `.` / `..` segments, strips leading slashes,\n * and removes control characters.\n */\nexport function sanitizePrefix(prefix: string): string {\n  let decodedPrefix: string\n\n  try {\n    decodedPrefix = decodeURIComponent(prefix)\n  } catch {\n    return ''\n  }\n\n  // Reject multi-encoded values (e.g. `%252f`) by allowing only a single decode pass.\n  if (/%[0-9a-f]{2}/i.test(decodedPrefix)) {\n    return ''\n  }\n\n  return (\n    decodedPrefix\n      .replace(/\\\\/g, '/')\n      .split('/')\n      .filter((segment) => segment !== '..' && segment !== '.')\n      .join('/')\n      .replace(/^\\/+/, '')\n      // eslint-disable-next-line no-control-regex\n      .replace(/[\\x00-\\x1f\\x80-\\x9f]/g, '')\n  )\n}\n"],"names":["sanitizePrefix","prefix","decodedPrefix","decodeURIComponent","test","replace","split","filter","segment","join"],"mappings":"AAAA;;;;;;;CAOC,GACD,OAAO,SAASA,eAAeC,MAAc;IAC3C,IAAIC;IAEJ,IAAI;QACFA,gBAAgBC,mBAAmBF;IACrC,EAAE,OAAM;QACN,OAAO;IACT;IAEA,oFAAoF;IACpF,IAAI,gBAAgBG,IAAI,CAACF,gBAAgB;QACvC,OAAO;IACT;IAEA,OACEA,cACGG,OAAO,CAAC,OAAO,KACfC,KAAK,CAAC,KACNC,MAAM,CAAC,CAACC,UAAYA,YAAY,QAAQA,YAAY,KACpDC,IAAI,CAAC,KACLJ,OAAO,CAAC,QAAQ,GACjB,4CAA4C;KAC3CA,OAAO,CAAC,yBAAyB;AAExC"}
+{"version":3,"sources":["../../src/utilities/sanitizePrefix.ts"],"sourcesContent":["export { sanitizeUploadPrefix as sanitizePrefix } from 'payload/shared'\n"],"names":["sanitizeUploadPrefix","sanitizePrefix"],"mappings":"AAAA,SAASA,wBAAwBC,cAAc,QAAQ,iBAAgB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/plugin-cloud-storage",
-  "version": "4.0.0-canary.33",
+  "version": "4.0.0-canary.34",
   "description": "The official cloud storage plugin for Payload CMS",
   "homepage": "https://payloadcms.com",
   "repository": {
@@ -51,18 +51,18 @@
   "dependencies": {
     "find-node-modules": "^2.1.3",
     "range-parser": "^1.2.1",
-    "@payloadcms/ui": "4.0.0-canary.33"
+    "@payloadcms/ui": "4.0.0-canary.34"
   },
   "devDependencies": {
     "@types/find-node-modules": "^2.1.2",
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
-    "payload": "4.0.0-canary.33"
+    "payload": "4.0.0-canary.34"
   },
   "peerDependencies": {
     "react": "^19.0.1 || ^19.1.2 || ^19.2.1",
     "react-dom": "^19.0.1 || ^19.1.2 || ^19.2.1",
-    "payload": "4.0.0-canary.33"
+    "payload": "4.0.0-canary.34"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"

package/dist/utilities/getFileKey.d.ts

@@ -1,22 +0,0 @@
-type GetFileKeyArgs = {
-    collectionPrefix?: string;
-    docPrefix?: string;
-    filename: string;
-    useCompositePrefixes?: boolean;
-};
-type GetFileKeyResult = {
-    fileKey: string;
-    sanitizedCollectionPrefix: string;
-    sanitizedDocPrefix: string;
-    sanitizedFilename: string;
-};
-/**
- * Computes the file key (path) for storage.
- *
- * In non-composite mode (useCompositePrefixes: false), docPrefix overrides collectionPrefix.
- * In composite mode (useCompositePrefixes: true), both are combined.
- * Both prefixes are passed through {@link sanitizePrefix} so keys stay normalized.
- */
-export declare function getFileKey({ collectionPrefix, docPrefix, filename, useCompositePrefixes, }: GetFileKeyArgs): GetFileKeyResult;
-export {};
-//# sourceMappingURL=getFileKey.d.ts.map

package/dist/utilities/getFileKey.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"getFileKey.d.ts","sourceRoot":"","sources":["../../src/utilities/getFileKey.ts"],"names":[],"mappings":"AAKA,KAAK,cAAc,GAAG;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,KAAK,gBAAgB,GAAG;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,yBAAyB,EAAE,MAAM,CAAA;IACjC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,iBAAiB,EAAE,MAAM,CAAA;CAC1B,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,EACzB,gBAAgB,EAChB,SAAS,EACT,QAAQ,EACR,oBAA4B,GAC7B,EAAE,cAAc,GAAG,gBAAgB,CAenC"}

package/dist/utilities/getFileKey.js

@@ -1,23 +0,0 @@
-import path from 'path';
-import { sanitizeFilename } from 'payload/shared';
-import { sanitizePrefix } from './sanitizePrefix.js';
-/**
- * Computes the file key (path) for storage.
- *
- * In non-composite mode (useCompositePrefixes: false), docPrefix overrides collectionPrefix.
- * In composite mode (useCompositePrefixes: true), both are combined.
- * Both prefixes are passed through {@link sanitizePrefix} so keys stay normalized.
- */ export function getFileKey({ collectionPrefix, docPrefix, filename, useCompositePrefixes = false }) {
-    const safeCollectionPrefix = sanitizePrefix(collectionPrefix || '');
-    const safeDocPrefix = sanitizePrefix(docPrefix || '');
-    const safeFilename = sanitizeFilename(filename);
-    const fileKey = useCompositePrefixes ? path.posix.join(safeCollectionPrefix, safeDocPrefix, safeFilename) : path.posix.join(safeDocPrefix || safeCollectionPrefix, safeFilename);
-    return {
-        fileKey,
-        sanitizedCollectionPrefix: safeCollectionPrefix,
-        sanitizedDocPrefix: safeDocPrefix,
-        sanitizedFilename: safeFilename
-    };
-}
-
-//# sourceMappingURL=getFileKey.js.map

package/dist/utilities/getFileKey.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/utilities/getFileKey.ts"],"sourcesContent":["import path from 'path'\nimport { sanitizeFilename } from 'payload/shared'\n\nimport { sanitizePrefix } from './sanitizePrefix.js'\n\ntype GetFileKeyArgs = {\n  collectionPrefix?: string\n  docPrefix?: string\n  filename: string\n  useCompositePrefixes?: boolean\n}\n\ntype GetFileKeyResult = {\n  fileKey: string\n  sanitizedCollectionPrefix: string\n  sanitizedDocPrefix: string\n  sanitizedFilename: string\n}\n\n/**\n * Computes the file key (path) for storage.\n *\n * In non-composite mode (useCompositePrefixes: false), docPrefix overrides collectionPrefix.\n * In composite mode (useCompositePrefixes: true), both are combined.\n * Both prefixes are passed through {@link sanitizePrefix} so keys stay normalized.\n */\nexport function getFileKey({\n  collectionPrefix,\n  docPrefix,\n  filename,\n  useCompositePrefixes = false,\n}: GetFileKeyArgs): GetFileKeyResult {\n  const safeCollectionPrefix = sanitizePrefix(collectionPrefix || '')\n  const safeDocPrefix = sanitizePrefix(docPrefix || '')\n  const safeFilename = sanitizeFilename(filename)\n\n  const fileKey = useCompositePrefixes\n    ? path.posix.join(safeCollectionPrefix, safeDocPrefix, safeFilename)\n    : path.posix.join(safeDocPrefix || safeCollectionPrefix, safeFilename)\n\n  return {\n    fileKey,\n    sanitizedCollectionPrefix: safeCollectionPrefix,\n    sanitizedDocPrefix: safeDocPrefix,\n    sanitizedFilename: safeFilename,\n  }\n}\n"],"names":["path","sanitizeFilename","sanitizePrefix","getFileKey","collectionPrefix","docPrefix","filename","useCompositePrefixes","safeCollectionPrefix","safeDocPrefix","safeFilename","fileKey","posix","join","sanitizedCollectionPrefix","sanitizedDocPrefix","sanitizedFilename"],"mappings":"AAAA,OAAOA,UAAU,OAAM;AACvB,SAASC,gBAAgB,QAAQ,iBAAgB;AAEjD,SAASC,cAAc,QAAQ,sBAAqB;AAgBpD;;;;;;CAMC,GACD,OAAO,SAASC,WAAW,EACzBC,gBAAgB,EAChBC,SAAS,EACTC,QAAQ,EACRC,uBAAuB,KAAK,EACb;IACf,MAAMC,uBAAuBN,eAAeE,oBAAoB;IAChE,MAAMK,gBAAgBP,eAAeG,aAAa;IAClD,MAAMK,eAAeT,iBAAiBK;IAEtC,MAAMK,UAAUJ,uBACZP,KAAKY,KAAK,CAACC,IAAI,CAACL,sBAAsBC,eAAeC,gBACrDV,KAAKY,KAAK,CAACC,IAAI,CAACJ,iBAAiBD,sBAAsBE;IAE3D,OAAO;QACLC;QACAG,2BAA2BN;QAC3BO,oBAAoBN;QACpBO,mBAAmBN;IACrB;AACF"}

package/dist/utilities/getFileKey.spec.js

@@ -1,174 +0,0 @@
-import { getFileKey } from './getFileKey.js';
-import { describe, expect, it } from 'vitest';
-describe('getFileKey', ()=>{
-    describe('non-composite mode (useCompositePrefixes: false)', ()=>{
-        it('should use docPrefix when provided, ignoring collectionPrefix', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'collection',
-                docPrefix: 'document',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'document/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: 'document',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should fallback to collectionPrefix when docPrefix is empty', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'collection',
-                docPrefix: '',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'collection/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should fallback to collectionPrefix when docPrefix is undefined', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'collection',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'collection/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should return only filename when both prefixes are empty', ()=>{
-            const result = getFileKey({
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'test.png',
-                sanitizedCollectionPrefix: '',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-        });
-    });
-    describe('composite mode (useCompositePrefixes: true)', ()=>{
-        it('should combine collectionPrefix and docPrefix', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'collection',
-                docPrefix: 'document',
-                filename: 'test.png',
-                useCompositePrefixes: true
-            });
-            expect(result).toEqual({
-                fileKey: 'collection/document/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: 'document',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should work with only collectionPrefix', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'collection',
-                filename: 'test.png',
-                useCompositePrefixes: true
-            });
-            expect(result).toEqual({
-                fileKey: 'collection/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should work with only docPrefix', ()=>{
-            const result = getFileKey({
-                docPrefix: 'document',
-                filename: 'test.png',
-                useCompositePrefixes: true
-            });
-            expect(result).toEqual({
-                fileKey: 'document/test.png',
-                sanitizedCollectionPrefix: '',
-                sanitizedDocPrefix: 'document',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should return only filename when both prefixes are empty', ()=>{
-            const result = getFileKey({
-                filename: 'test.png',
-                useCompositePrefixes: true
-            });
-            expect(result).toEqual({
-                fileKey: 'test.png',
-                sanitizedCollectionPrefix: '',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-        });
-    });
-    describe('sanitization', ()=>{
-        it('should remove path traversal segments from collectionPrefix', ()=>{
-            const result = getFileKey({
-                collectionPrefix: '../../../etc',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'etc/test.png',
-                sanitizedCollectionPrefix: 'etc',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-            expect(result.fileKey).not.toContain('..');
-        });
-        it('should remove path traversal segments from docPrefix', ()=>{
-            const result = getFileKey({
-                docPrefix: 'a/../../outside',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'a/outside/test.png',
-                sanitizedCollectionPrefix: '',
-                sanitizedDocPrefix: 'a/outside',
-                sanitizedFilename: 'test.png'
-            });
-            expect(result.fileKey).not.toContain('..');
-        });
-        it('should remove control characters from prefixes', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'test\x00\x1fprefix',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'testprefix/test.png',
-                sanitizedCollectionPrefix: 'testprefix',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-            expect(result.fileKey).not.toMatch(/[\x00-\x1f]/);
-        });
-        it('should sanitize both prefixes in composite mode', ()=>{
-            const result = getFileKey({
-                collectionPrefix: '../collection',
-                docPrefix: '../../doc',
-                filename: 'test.png',
-                useCompositePrefixes: true
-            });
-            expect(result).toEqual({
-                fileKey: 'collection/doc/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: 'doc',
-                sanitizedFilename: 'test.png'
-            });
-            expect(result.fileKey).not.toContain('..');
-        });
-    });
-});
-
-//# sourceMappingURL=getFileKey.spec.js.map

package/dist/utilities/getFileKey.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/utilities/getFileKey.spec.ts"],"sourcesContent":["import { getFileKey } from './getFileKey.js'\nimport { describe, expect, it } from 'vitest'\n\ndescribe('getFileKey', () => {\n  describe('non-composite mode (useCompositePrefixes: false)', () => {\n    it('should use docPrefix when provided, ignoring collectionPrefix', () => {\n      const result = getFileKey({\n        collectionPrefix: 'collection',\n        docPrefix: 'document',\n        filename: 'test.png',\n        useCompositePrefixes: false,\n      })\n      expect(result).toEqual({\n        fileKey: 'document/test.png',\n        sanitizedCollectionPrefix: 'collection',\n        sanitizedDocPrefix: 'document',\n        sanitizedFilename: 'test.png',\n      })\n    })\n\n    it('should fallback to collectionPrefix when docPrefix is empty', () => {\n      const result = getFileKey({\n        collectionPrefix: 'collection',\n        docPrefix: '',\n        filename: 'test.png',\n        useCompositePrefixes: false,\n      })\n      expect(result).toEqual({\n        fileKey: 'collection/test.png',\n        sanitizedCollectionPrefix: 'collection',\n        sanitizedDocPrefix: '',\n        sanitizedFilename: 'test.png',\n      })\n    })\n\n    it('should fallback to collectionPrefix when docPrefix is undefined', () => {\n      const result = getFileKey({\n        collectionPrefix: 'collection',\n        filename: 'test.png',\n        useCompositePrefixes: false,\n      })\n      expect(result).toEqual({\n        fileKey: 'collection/test.png',\n        sanitizedCollectionPrefix: 'collection',\n        sanitizedDocPrefix: '',\n        sanitizedFilename: 'test.png',\n      })\n    })\n\n    it('should return only filename when both prefixes are empty', () => {\n      const result = getFileKey({\n        filename: 'test.png',\n        useCompositePrefixes: false,\n      })\n      expect(result).toEqual({\n        fileKey: 'test.png',\n        sanitizedCollectionPrefix: '',\n        sanitizedDocPrefix: '',\n        sanitizedFilename: 'test.png',\n      })\n    })\n  })\n\n  describe('composite mode (useCompositePrefixes: true)', () => {\n    it('should combine collectionPrefix and docPrefix', () => {\n      const result = getFileKey({\n        collectionPrefix: 'collection',\n        docPrefix: 'document',\n        filename: 'test.png',\n        useCompositePrefixes: true,\n      })\n      expect(result).toEqual({\n        fileKey: 'collection/document/test.png',\n        sanitizedCollectionPrefix: 'collection',\n        sanitizedDocPrefix: 'document',\n        sanitizedFilename: 'test.png',\n      })\n    })\n\n    it('should work with only collectionPrefix', () => {\n      const result = getFileKey({\n        collectionPrefix: 'collection',\n        filename: 'test.png',\n        useCompositePrefixes: true,\n      })\n      expect(result).toEqual({\n        fileKey: 'collection/test.png',\n        sanitizedCollectionPrefix: 'collection',\n        sanitizedDocPrefix: '',\n        sanitizedFilename: 'test.png',\n      })\n    })\n\n    it('should work with only docPrefix', () => {\n      const result = getFileKey({\n        docPrefix: 'document',\n        filename: 'test.png',\n        useCompositePrefixes: true,\n      })\n      expect(result).toEqual({\n        fileKey: 'document/test.png',\n        sanitizedCollectionPrefix: '',\n        sanitizedDocPrefix: 'document',\n        sanitizedFilename: 'test.png',\n      })\n    })\n\n    it('should return only filename when both prefixes are empty', () => {\n      const result = getFileKey({\n        filename: 'test.png',\n        useCompositePrefixes: true,\n      })\n      expect(result).toEqual({\n        fileKey: 'test.png',\n        sanitizedCollectionPrefix: '',\n        sanitizedDocPrefix: '',\n        sanitizedFilename: 'test.png',\n      })\n    })\n  })\n\n  describe('sanitization', () => {\n    it('should remove path traversal segments from collectionPrefix', () => {\n      const result = getFileKey({\n        collectionPrefix: '../../../etc',\n        filename: 'test.png',\n        useCompositePrefixes: false,\n      })\n      expect(result).toEqual({\n        fileKey: 'etc/test.png',\n        sanitizedCollectionPrefix: 'etc',\n        sanitizedDocPrefix: '',\n        sanitizedFilename: 'test.png',\n      })\n      expect(result.fileKey).not.toContain('..')\n    })\n\n    it('should remove path traversal segments from docPrefix', () => {\n      const result = getFileKey({\n        docPrefix: 'a/../../outside',\n        filename: 'test.png',\n        useCompositePrefixes: false,\n      })\n      expect(result).toEqual({\n        fileKey: 'a/outside/test.png',\n        sanitizedCollectionPrefix: '',\n        sanitizedDocPrefix: 'a/outside',\n        sanitizedFilename: 'test.png',\n      })\n      expect(result.fileKey).not.toContain('..')\n    })\n\n    it('should remove control characters from prefixes', () => {\n      const result = getFileKey({\n        collectionPrefix: 'test\\x00\\x1fprefix',\n        filename: 'test.png',\n        useCompositePrefixes: false,\n      })\n      expect(result).toEqual({\n        fileKey: 'testprefix/test.png',\n        sanitizedCollectionPrefix: 'testprefix',\n        sanitizedDocPrefix: '',\n        sanitizedFilename: 'test.png',\n      })\n      expect(result.fileKey).not.toMatch(/[\\x00-\\x1f]/)\n    })\n\n    it('should sanitize both prefixes in composite mode', () => {\n      const result = getFileKey({\n        collectionPrefix: '../collection',\n        docPrefix: '../../doc',\n        filename: 'test.png',\n        useCompositePrefixes: true,\n      })\n      expect(result).toEqual({\n        fileKey: 'collection/doc/test.png',\n        sanitizedCollectionPrefix: 'collection',\n        sanitizedDocPrefix: 'doc',\n        sanitizedFilename: 'test.png',\n      })\n      expect(result.fileKey).not.toContain('..')\n    })\n  })\n})\n"],"names":["getFileKey","describe","expect","it","result","collectionPrefix","docPrefix","filename","useCompositePrefixes","toEqual","fileKey","sanitizedCollectionPrefix","sanitizedDocPrefix","sanitizedFilename","not","toContain","toMatch"],"mappings":"AAAA,SAASA,UAAU,QAAQ,kBAAiB;AAC5C,SAASC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7CF,SAAS,cAAc;IACrBA,SAAS,oDAAoD;QAC3DE,GAAG,iEAAiE;YAClE,MAAMC,SAASJ,WAAW;gBACxBK,kBAAkB;gBAClBC,WAAW;gBACXC,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;QACF;QAEAV,GAAG,+DAA+D;YAChE,MAAMC,SAASJ,WAAW;gBACxBK,kBAAkB;gBAClBC,WAAW;gBACXC,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;QACF;QAEAV,GAAG,mEAAmE;YACpE,MAAMC,SAASJ,WAAW;gBACxBK,kBAAkB;gBAClBE,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;QACF;QAEAV,GAAG,4DAA4D;YAC7D,MAAMC,SAASJ,WAAW;gBACxBO,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;QACF;IACF;IAEAZ,SAAS,+CAA+C;QACtDE,GAAG,iDAAiD;YAClD,MAAMC,SAASJ,WAAW;gBACxBK,kBAAkB;gBAClBC,WAAW;gBACXC,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;QACF;QAEAV,GAAG,0CAA0C;YAC3C,MAAMC,SAASJ,WAAW;gBACxBK,kBAAkB;gBAClBE,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;QACF;QAEAV,GAAG,mCAAmC;YACpC,MAAMC,SAASJ,WAAW;gBACxBM,WAAW;gBACXC,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;QACF;QAEAV,GAAG,4DAA4D;YAC7D,MAAMC,SAASJ,WAAW;gBACxBO,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;QACF;IACF;IAEAZ,SAAS,gBAAgB;QACvBE,GAAG,+DAA+D;YAChE,MAAMC,SAASJ,WAAW;gBACxBK,kBAAkB;gBAClBE,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;YACAX,OAAOE,OAAOM,OAAO,EAAEI,GAAG,CAACC,SAAS,CAAC;QACvC;QAEAZ,GAAG,wDAAwD;YACzD,MAAMC,SAASJ,WAAW;gBACxBM,WAAW;gBACXC,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;YACAX,OAAOE,OAAOM,OAAO,EAAEI,GAAG,CAACC,SAAS,CAAC;QACvC;QAEAZ,GAAG,kDAAkD;YACnD,MAAMC,SAASJ,WAAW;gBACxBK,kBAAkB;gBAClBE,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;YACAX,OAAOE,OAAOM,OAAO,EAAEI,GAAG,CAACE,OAAO,CAAC;QACrC;QAEAb,GAAG,mDAAmD;YACpD,MAAMC,SAASJ,WAAW;gBACxBK,kBAAkB;gBAClBC,WAAW;gBACXC,UAAU;gBACVC,sBAAsB;YACxB;YACAN,OAAOE,QAAQK,OAAO,CAAC;gBACrBC,SAAS;gBACTC,2BAA2B;gBAC3BC,oBAAoB;gBACpBC,mBAAmB;YACrB;YACAX,OAAOE,OAAOM,OAAO,EAAEI,GAAG,CAACC,SAAS,CAAC;QACvC;IACF;AACF"}