@payloadcms/plugin-cloud-storage 4.0.0-internal.688c4d0 → 4.0.0-internal.77191e5

package/dist/utilities/resolveSignedURLKey.d.ts

@@ -1,4 +1,5 @@
 import type { PayloadRequest } from 'payload';
+import type { UploadReference } from '../types.js';
 type Args = {
     collectionPrefix?: string;
     collectionSlug: string;
@@ -8,17 +9,27 @@ type Args = {
     useCompositePrefixes?: boolean;
 };
 /**
- * Resolves the storage key for a clientUploads signed-URL request, deduping
+ * Resolves the storage key for an upload-instructions request, deduping
  * the filename via {@link getSafeFileName} so a duplicate upload does not
  * overwrite an existing blob.
  *
+ * A unique per-upload segment is included in the storage key so each issued
+ * key is distinct. The stored `filename` stays clean and the semantic `prefix`
+ * stays exactly what the collection configured — the per-upload entropy is
+ * persisted separately in `_objectKey`.
+ *
  * The resolved `sanitizedFilename` is returned so the browser-side handler
  * can update the form via `updateFilename`.
+ *
+ * The semantic prefix is resolved with {@link buildUploadPrefix} and the final
+ * key with {@link buildUploadStoragePathData}, so the receipt only ever signs a key
+ * beneath the configured collection prefix.
  */
 export declare function resolveSignedURLKey({ collectionPrefix, collectionSlug, docPrefix, filename, req, useCompositePrefixes, }: Args): Promise<{
-    fileKey: string;
     sanitizedDocPrefix: string;
     sanitizedFilename: string;
+    storageFilePath: string;
+    uploadReference: UploadReference;
 }>;
 export {};
 //# sourceMappingURL=resolveSignedURLKey.d.ts.map

package/dist/utilities/resolveSignedURLKey.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolveSignedURLKey.d.ts","sourceRoot":"","sources":["../../src/utilities/resolveSignedURLKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAM7C,KAAK,IAAI,GAAG;IACV,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,cAAc,CAAA;IACnB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,gBAAqB,EACrB,cAAc,EACd,SAAS,EACT,QAAQ,EACR,GAAG,EACH,oBAA4B,GAC7B,EAAE,IAAI;;;;GAgBN"}
+{"version":3,"file":"resolveSignedURLKey.d.ts","sourceRoot":"","sources":["../../src/utilities/resolveSignedURLKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAM7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAIlD,KAAK,IAAI,GAAG;IACV,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,cAAc,CAAA;IACnB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,gBAAqB,EACrB,cAAc,EACd,SAAS,EACT,QAAQ,EACR,GAAG,EACH,oBAA4B,GAC7B,EAAE,IAAI,GAAG,OAAO,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,eAAe,CAAA;CACjC,CAAC,CAyCD"}

package/dist/utilities/resolveSignedURLKey.js

@@ -1,29 +1,63 @@
-import { getSafeFileName } from 'payload/internal';
-import { getFileKey } from './getFileKey.js';
+import { randomUUID } from 'node:crypto';
+import { createClientUploadReceipt, getSafeFileName } from 'payload/internal';
+import { getSanitizedUploadFilename } from 'payload/shared';
+import { buildUploadPrefix, buildUploadStoragePathData } from './buildStoragePathData.js';
 /**
- * Resolves the storage key for a clientUploads signed-URL request, deduping
+ * Resolves the storage key for an upload-instructions request, deduping
  * the filename via {@link getSafeFileName} so a duplicate upload does not
  * overwrite an existing blob.
  *
+ * A unique per-upload segment is included in the storage key so each issued
+ * key is distinct. The stored `filename` stays clean and the semantic `prefix`
+ * stays exactly what the collection configured — the per-upload entropy is
+ * persisted separately in `_objectKey`.
+ *
  * The resolved `sanitizedFilename` is returned so the browser-side handler
  * can update the form via `updateFilename`.
+ *
+ * The semantic prefix is resolved with {@link buildUploadPrefix} and the final
+ * key with {@link buildUploadStoragePathData}, so the receipt only ever signs a key
+ * beneath the configured collection prefix.
  */ export async function resolveSignedURLKey({ collectionPrefix = '', collectionSlug, docPrefix, filename, req, useCompositePrefixes = false }) {
+    // Sanitize with the same helper generateFileData uses for the DB filename so the storage key
+    // and doc.filename stay in sync (#16694).
     const sanitizedFilename = await getSafeFileName({
         collectionSlug,
-        desiredFilename: filename,
-        prefix: docPrefix,
+        desiredFilename: getSanitizedUploadFilename(filename),
         req
     });
-    const { fileKey, sanitizedDocPrefix } = getFileKey({
+    const rawBaseDocPrefix = useCompositePrefixes ? docPrefix : docPrefix || collectionPrefix;
+    const { sanitizedDocPrefix } = buildUploadPrefix({
+        collectionPrefix,
+        docPrefix: rawBaseDocPrefix,
+        useCompositePrefixes
+    });
+    const _objectKey = randomUUID();
+    // Per-upload segment lives in the key; it is persisted in `_objectKey`, keeping `prefix` semantic.
+    const keyedDocPrefix = sanitizedDocPrefix ? `${sanitizedDocPrefix}/${_objectKey}` : _objectKey;
+    const { storageFilePath } = buildUploadStoragePathData({
         collectionPrefix,
-        docPrefix,
+        docPrefix: keyedDocPrefix,
         filename: sanitizedFilename,
         useCompositePrefixes
     });
+    const uploadReference = {
+        _objectKey,
+        prefix: sanitizedDocPrefix,
+        signedReceipt: createClientUploadReceipt({
+            _objectKey,
+            collectionSlug,
+            filename: sanitizedFilename,
+            filePrefix: sanitizedDocPrefix,
+            req,
+            storageFilePath
+        })
+    };
     return {
-        fileKey,
         sanitizedDocPrefix,
-        sanitizedFilename
+        sanitizedFilename,
+        storageFilePath,
+        uploadReference
     };
 }
 

package/dist/utilities/resolveSignedURLKey.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/resolveSignedURLKey.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport { getSafeFileName } from 'payload/internal'\n\nimport { getFileKey } from './getFileKey.js'\n\ntype Args = {\n  collectionPrefix?: string\n  collectionSlug: string\n  docPrefix?: string\n  filename: string\n  req: PayloadRequest\n  useCompositePrefixes?: boolean\n}\n\n/**\n * Resolves the storage key for a clientUploads signed-URL request, deduping\n * the filename via {@link getSafeFileName} so a duplicate upload does not\n * overwrite an existing blob.\n *\n * The resolved `sanitizedFilename` is returned so the browser-side handler\n * can update the form via `updateFilename`.\n */\nexport async function resolveSignedURLKey({\n  collectionPrefix = '',\n  collectionSlug,\n  docPrefix,\n  filename,\n  req,\n  useCompositePrefixes = false,\n}: Args) {\n  const sanitizedFilename = await getSafeFileName({\n    collectionSlug,\n    desiredFilename: filename,\n    prefix: docPrefix,\n    req,\n  })\n\n  const { fileKey, sanitizedDocPrefix } = getFileKey({\n    collectionPrefix,\n    docPrefix,\n    filename: sanitizedFilename,\n    useCompositePrefixes,\n  })\n\n  return { fileKey, sanitizedDocPrefix, sanitizedFilename }\n}\n"],"names":["getSafeFileName","getFileKey","resolveSignedURLKey","collectionPrefix","collectionSlug","docPrefix","filename","req","useCompositePrefixes","sanitizedFilename","desiredFilename","prefix","fileKey","sanitizedDocPrefix"],"mappings":"AAEA,SAASA,eAAe,QAAQ,mBAAkB;AAElD,SAASC,UAAU,QAAQ,kBAAiB;AAW5C;;;;;;;CAOC,GACD,OAAO,eAAeC,oBAAoB,EACxCC,mBAAmB,EAAE,EACrBC,cAAc,EACdC,SAAS,EACTC,QAAQ,EACRC,GAAG,EACHC,uBAAuB,KAAK,EACvB;IACL,MAAMC,oBAAoB,MAAMT,gBAAgB;QAC9CI;QACAM,iBAAiBJ;QACjBK,QAAQN;QACRE;IACF;IAEA,MAAM,EAAEK,OAAO,EAAEC,kBAAkB,EAAE,GAAGZ,WAAW;QACjDE;QACAE;QACAC,UAAUG;QACVD;IACF;IAEA,OAAO;QAAEI;QAASC;QAAoBJ;IAAkB;AAC1D"}
+{"version":3,"sources":["../../src/utilities/resolveSignedURLKey.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport { randomUUID } from 'node:crypto'\nimport { createClientUploadReceipt, getSafeFileName } from 'payload/internal'\nimport { getSanitizedUploadFilename } from 'payload/shared'\n\nimport type { UploadReference } from '../types.js'\n\nimport { buildUploadPrefix, buildUploadStoragePathData } from './buildStoragePathData.js'\n\ntype Args = {\n  collectionPrefix?: string\n  collectionSlug: string\n  docPrefix?: string\n  filename: string\n  req: PayloadRequest\n  useCompositePrefixes?: boolean\n}\n\n/**\n * Resolves the storage key for an upload-instructions request, deduping\n * the filename via {@link getSafeFileName} so a duplicate upload does not\n * overwrite an existing blob.\n *\n * A unique per-upload segment is included in the storage key so each issued\n * key is distinct. The stored `filename` stays clean and the semantic `prefix`\n * stays exactly what the collection configured — the per-upload entropy is\n * persisted separately in `_objectKey`.\n *\n * The resolved `sanitizedFilename` is returned so the browser-side handler\n * can update the form via `updateFilename`.\n *\n * The semantic prefix is resolved with {@link buildUploadPrefix} and the final\n * key with {@link buildUploadStoragePathData}, so the receipt only ever signs a key\n * beneath the configured collection prefix.\n */\nexport async function resolveSignedURLKey({\n  collectionPrefix = '',\n  collectionSlug,\n  docPrefix,\n  filename,\n  req,\n  useCompositePrefixes = false,\n}: Args): Promise<{\n  sanitizedDocPrefix: string\n  sanitizedFilename: string\n  storageFilePath: string\n  uploadReference: UploadReference\n}> {\n  // Sanitize with the same helper generateFileData uses for the DB filename so the storage key\n  // and doc.filename stay in sync (#16694).\n  const sanitizedFilename = await getSafeFileName({\n    collectionSlug,\n    desiredFilename: getSanitizedUploadFilename(filename),\n    req,\n  })\n\n  const rawBaseDocPrefix = useCompositePrefixes ? docPrefix : docPrefix || collectionPrefix\n  const { sanitizedDocPrefix } = buildUploadPrefix({\n    collectionPrefix,\n    docPrefix: rawBaseDocPrefix,\n    useCompositePrefixes,\n  })\n\n  const _objectKey = randomUUID()\n  // Per-upload segment lives in the key; it is persisted in `_objectKey`, keeping `prefix` semantic.\n  const keyedDocPrefix = sanitizedDocPrefix ? `${sanitizedDocPrefix}/${_objectKey}` : _objectKey\n\n  const { storageFilePath } = buildUploadStoragePathData({\n    collectionPrefix,\n    docPrefix: keyedDocPrefix,\n    filename: sanitizedFilename,\n    useCompositePrefixes,\n  })\n\n  const uploadReference = {\n    _objectKey,\n    prefix: sanitizedDocPrefix,\n    signedReceipt: createClientUploadReceipt({\n      _objectKey,\n      collectionSlug,\n      filename: sanitizedFilename,\n      filePrefix: sanitizedDocPrefix,\n      req,\n      storageFilePath,\n    }),\n  }\n\n  return { sanitizedDocPrefix, sanitizedFilename, storageFilePath, uploadReference }\n}\n"],"names":["randomUUID","createClientUploadReceipt","getSafeFileName","getSanitizedUploadFilename","buildUploadPrefix","buildUploadStoragePathData","resolveSignedURLKey","collectionPrefix","collectionSlug","docPrefix","filename","req","useCompositePrefixes","sanitizedFilename","desiredFilename","rawBaseDocPrefix","sanitizedDocPrefix","_objectKey","keyedDocPrefix","storageFilePath","uploadReference","prefix","signedReceipt","filePrefix"],"mappings":"AAEA,SAASA,UAAU,QAAQ,cAAa;AACxC,SAASC,yBAAyB,EAAEC,eAAe,QAAQ,mBAAkB;AAC7E,SAASC,0BAA0B,QAAQ,iBAAgB;AAI3D,SAASC,iBAAiB,EAAEC,0BAA0B,QAAQ,4BAA2B;AAWzF;;;;;;;;;;;;;;;;CAgBC,GACD,OAAO,eAAeC,oBAAoB,EACxCC,mBAAmB,EAAE,EACrBC,cAAc,EACdC,SAAS,EACTC,QAAQ,EACRC,GAAG,EACHC,uBAAuB,KAAK,EACvB;IAML,6FAA6F;IAC7F,0CAA0C;IAC1C,MAAMC,oBAAoB,MAAMX,gBAAgB;QAC9CM;QACAM,iBAAiBX,2BAA2BO;QAC5CC;IACF;IAEA,MAAMI,mBAAmBH,uBAAuBH,YAAYA,aAAaF;IACzE,MAAM,EAAES,kBAAkB,EAAE,GAAGZ,kBAAkB;QAC/CG;QACAE,WAAWM;QACXH;IACF;IAEA,MAAMK,aAAajB;IACnB,mGAAmG;IACnG,MAAMkB,iBAAiBF,qBAAqB,GAAGA,mBAAmB,CAAC,EAAEC,YAAY,GAAGA;IAEpF,MAAM,EAAEE,eAAe,EAAE,GAAGd,2BAA2B;QACrDE;QACAE,WAAWS;QACXR,UAAUG;QACVD;IACF;IAEA,MAAMQ,kBAAkB;QACtBH;QACAI,QAAQL;QACRM,eAAerB,0BAA0B;YACvCgB;YACAT;YACAE,UAAUG;YACVU,YAAYP;YACZL;YACAQ;QACF;IACF;IAEA,OAAO;QAAEH;QAAoBH;QAAmBM;QAAiBC;IAAgB;AACnF"}

package/dist/utilities/sanitizePrefix.d.ts

@@ -1,10 +1,2 @@
-/**
- * Normalizes a storage prefix for use in object keys and URLs.
- *
- * Decodes URI components once (so query-style `%2F` becomes `/`), rejects
- * values that still contain percent-encodings after decoding (e.g. `%252f`),
- * then normalizes slashes, drops `.` / `..` segments, strips leading slashes,
- * and removes control characters.
- */
-export declare function sanitizePrefix(prefix: string): string;
+export { sanitizeUploadPrefix as sanitizePrefix } from 'payload/shared';
 //# sourceMappingURL=sanitizePrefix.d.ts.map

package/dist/utilities/sanitizePrefix.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitizePrefix.d.ts","sourceRoot":"","sources":["../../src/utilities/sanitizePrefix.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAwBrD"}
+{"version":3,"file":"sanitizePrefix.d.ts","sourceRoot":"","sources":["../../src/utilities/sanitizePrefix.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/utilities/sanitizePrefix.js

@@ -1,23 +1,3 @@
-/**
- * Normalizes a storage prefix for use in object keys and URLs.
- *
- * Decodes URI components once (so query-style `%2F` becomes `/`), rejects
- * values that still contain percent-encodings after decoding (e.g. `%252f`),
- * then normalizes slashes, drops `.` / `..` segments, strips leading slashes,
- * and removes control characters.
- */ export function sanitizePrefix(prefix) {
-    let decodedPrefix;
-    try {
-        decodedPrefix = decodeURIComponent(prefix);
-    } catch  {
-        return '';
-    }
-    // Reject multi-encoded values (e.g. `%252f`) by allowing only a single decode pass.
-    if (/%[0-9a-f]{2}/i.test(decodedPrefix)) {
-        return '';
-    }
-    return decodedPrefix.replace(/\\/g, '/').split('/').filter((segment)=>segment !== '..' && segment !== '.').join('/').replace(/^\/+/, '')// eslint-disable-next-line no-control-regex
-    .replace(/[\x00-\x1f\x80-\x9f]/g, '');
-}
+export { sanitizeUploadPrefix as sanitizePrefix } from 'payload/shared';
 
 //# sourceMappingURL=sanitizePrefix.js.map

package/dist/utilities/sanitizePrefix.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/sanitizePrefix.ts"],"sourcesContent":["/**\n * Normalizes a storage prefix for use in object keys and URLs.\n *\n * Decodes URI components once (so query-style `%2F` becomes `/`), rejects\n * values that still contain percent-encodings after decoding (e.g. `%252f`),\n * then normalizes slashes, drops `.` / `..` segments, strips leading slashes,\n * and removes control characters.\n */\nexport function sanitizePrefix(prefix: string): string {\n  let decodedPrefix: string\n\n  try {\n    decodedPrefix = decodeURIComponent(prefix)\n  } catch {\n    return ''\n  }\n\n  // Reject multi-encoded values (e.g. `%252f`) by allowing only a single decode pass.\n  if (/%[0-9a-f]{2}/i.test(decodedPrefix)) {\n    return ''\n  }\n\n  return (\n    decodedPrefix\n      .replace(/\\\\/g, '/')\n      .split('/')\n      .filter((segment) => segment !== '..' && segment !== '.')\n      .join('/')\n      .replace(/^\\/+/, '')\n      // eslint-disable-next-line no-control-regex\n      .replace(/[\\x00-\\x1f\\x80-\\x9f]/g, '')\n  )\n}\n"],"names":["sanitizePrefix","prefix","decodedPrefix","decodeURIComponent","test","replace","split","filter","segment","join"],"mappings":"AAAA;;;;;;;CAOC,GACD,OAAO,SAASA,eAAeC,MAAc;IAC3C,IAAIC;IAEJ,IAAI;QACFA,gBAAgBC,mBAAmBF;IACrC,EAAE,OAAM;QACN,OAAO;IACT;IAEA,oFAAoF;IACpF,IAAI,gBAAgBG,IAAI,CAACF,gBAAgB;QACvC,OAAO;IACT;IAEA,OACEA,cACGG,OAAO,CAAC,OAAO,KACfC,KAAK,CAAC,KACNC,MAAM,CAAC,CAACC,UAAYA,YAAY,QAAQA,YAAY,KACpDC,IAAI,CAAC,KACLJ,OAAO,CAAC,QAAQ,GACjB,4CAA4C;KAC3CA,OAAO,CAAC,yBAAyB;AAExC"}
+{"version":3,"sources":["../../src/utilities/sanitizePrefix.ts"],"sourcesContent":["export { sanitizeUploadPrefix as sanitizePrefix } from 'payload/shared'\n"],"names":["sanitizeUploadPrefix","sanitizePrefix"],"mappings":"AAAA,SAASA,wBAAwBC,cAAc,QAAQ,iBAAgB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/plugin-cloud-storage",
-  "version": "4.0.0-internal.688c4d0",
+  "version": "4.0.0-internal.77191e5",
   "description": "The official cloud storage plugin for Payload CMS",
   "homepage": "https://payloadcms.com",
   "repository": {
@@ -51,18 +51,18 @@
   "dependencies": {
     "find-node-modules": "^2.1.3",
     "range-parser": "^1.2.1",
-    "@payloadcms/ui": "4.0.0-internal.688c4d0"
+    "@payloadcms/ui": "4.0.0-internal.77191e5"
   },
   "devDependencies": {
     "@types/find-node-modules": "^2.1.2",
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
-    "payload": "4.0.0-internal.688c4d0"
+    "payload": "4.0.0-internal.77191e5"
   },
   "peerDependencies": {
     "react": "^19.0.1 || ^19.1.2 || ^19.2.1",
     "react-dom": "^19.0.1 || ^19.1.2 || ^19.2.1",
-    "payload": "4.0.0-internal.688c4d0"
+    "payload": "4.0.0-internal.77191e5"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"

package/dist/admin/fields/getFields.d.ts

@@ -1,17 +0,0 @@
-import type { CollectionConfig, Field } from 'payload';
-interface Args {
-    /**
-     * When true, always insert the prefix field regardless of whether a prefix is configured.
-     */
-    alwaysInsertFields?: boolean;
-    collection: CollectionConfig;
-    prefix?: string;
-    /**
-     * When true, do not default the `prefix` field to the collection prefix; the
-     * document field holds only the document-level segment.
-     */
-    useCompositePrefixes?: boolean;
-}
-export declare const getFields: ({ alwaysInsertFields, collection, prefix, useCompositePrefixes, }: Args) => Field[];
-export {};
-//# sourceMappingURL=getFields.d.ts.map

package/dist/admin/fields/getFields.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"getFields.d.ts","sourceRoot":"","sources":["../../../src/admin/fields/getFields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAyB,MAAM,SAAS,CAAA;AAI7E,UAAU,IAAI;IACZ;;OAEG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,UAAU,EAAE,gBAAgB,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED,eAAO,MAAM,SAAS,GAAI,mEAKvB,IAAI,KAAG,KAAK,EAsHd,CAAA"}

package/dist/admin/fields/getFields.js

@@ -1,98 +0,0 @@
-import path from 'path';
-export const getFields = ({ alwaysInsertFields, collection, prefix, useCompositePrefixes = false })=>{
-    const baseURLField = {
-        name: 'url',
-        type: 'text',
-        admin: {
-            hidden: true,
-            readOnly: true
-        },
-        label: 'URL'
-    };
-    const basePrefixField = {
-        name: 'prefix',
-        type: 'text',
-        admin: {
-            hidden: true,
-            readOnly: true
-        }
-    };
-    const fields = [
-        ...collection.fields
-    ];
-    // Inject a hook into all URL fields to generate URLs
-    let existingURLFieldIndex = -1;
-    const existingURLField = fields.find((existingField, i)=>{
-        if ('name' in existingField && existingField.name === 'url') {
-            existingURLFieldIndex = i;
-            return true;
-        }
-        return false;
-    });
-    if (existingURLFieldIndex > -1) {
-        fields.splice(existingURLFieldIndex, 1);
-    }
-    fields.push({
-        ...baseURLField,
-        ...existingURLField || {}
-    });
-    if (typeof collection.upload === 'object' && collection.upload.imageSizes) {
-        let existingSizesFieldIndex = -1;
-        const existingSizesField = fields.find((existingField, i)=>{
-            if ('name' in existingField && existingField.name === 'sizes') {
-                existingSizesFieldIndex = i;
-                return true;
-            }
-            return false;
-        });
-        if (existingSizesFieldIndex > -1) {
-            fields.splice(existingSizesFieldIndex, 1);
-        }
-        const sizesField = {
-            ...existingSizesField || {},
-            name: 'sizes',
-            type: 'group',
-            admin: {
-                hidden: true
-            },
-            fields: collection.upload.imageSizes.map((size)=>{
-                const existingSizeField = existingSizesField?.fields.find((existingField)=>'name' in existingField && existingField.name === size.name);
-                const existingSizeURLField = existingSizeField?.fields.find((existingField)=>'name' in existingField && existingField.name === 'url');
-                return {
-                    ...existingSizeField,
-                    name: size.name,
-                    type: 'group',
-                    fields: [
-                        {
-                            ...existingSizeURLField || {},
-                            ...baseURLField
-                        }
-                    ]
-                };
-            })
-        };
-        fields.push(sizesField);
-    }
-    // If prefix is enabled or alwaysInsertFields is true, save it to db
-    if (typeof prefix !== 'undefined' || alwaysInsertFields) {
-        let existingPrefixFieldIndex = -1;
-        const existingPrefixField = fields.find((existingField, i)=>{
-            if ('name' in existingField && existingField.name === 'prefix') {
-                existingPrefixFieldIndex = i;
-                return true;
-            }
-            return false;
-        });
-        if (existingPrefixFieldIndex > -1) {
-            fields.splice(existingPrefixFieldIndex, 1);
-        }
-        fields.push({
-            ...basePrefixField,
-            ...existingPrefixField || {},
-            defaultValue: existingPrefixField?.defaultValue ?? (useCompositePrefixes ? '' : prefix ? path.posix.join(prefix) : '')
-        });
-    }
-    return fields;
-};
-
-//# sourceMappingURL=getFields.js.map

package/dist/admin/fields/getFields.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/admin/fields/getFields.ts"],"sourcesContent":["import type { CollectionConfig, Field, GroupField, TextField } from 'payload'\n\nimport path from 'path'\n\ninterface Args {\n  /**\n   * When true, always insert the prefix field regardless of whether a prefix is configured.\n   */\n  alwaysInsertFields?: boolean\n  collection: CollectionConfig\n  prefix?: string\n  /**\n   * When true, do not default the `prefix` field to the collection prefix; the\n   * document field holds only the document-level segment.\n   */\n  useCompositePrefixes?: boolean\n}\n\nexport const getFields = ({\n  alwaysInsertFields,\n  collection,\n  prefix,\n  useCompositePrefixes = false,\n}: Args): Field[] => {\n  const baseURLField: TextField = {\n    name: 'url',\n    type: 'text',\n    admin: {\n      hidden: true,\n      readOnly: true,\n    },\n    label: 'URL',\n  }\n\n  const basePrefixField: TextField = {\n    name: 'prefix',\n    type: 'text',\n    admin: {\n      hidden: true,\n      readOnly: true,\n    },\n  }\n\n  const fields = [...collection.fields]\n\n  // Inject a hook into all URL fields to generate URLs\n\n  let existingURLFieldIndex = -1\n\n  const existingURLField = fields.find((existingField, i) => {\n    if ('name' in existingField && existingField.name === 'url') {\n      existingURLFieldIndex = i\n      return true\n    }\n    return false\n  }) as TextField\n\n  if (existingURLFieldIndex > -1) {\n    fields.splice(existingURLFieldIndex, 1)\n  }\n\n  fields.push({\n    ...baseURLField,\n    ...(existingURLField || {}),\n  } as TextField)\n\n  if (typeof collection.upload === 'object' && collection.upload.imageSizes) {\n    let existingSizesFieldIndex = -1\n\n    const existingSizesField = fields.find((existingField, i) => {\n      if ('name' in existingField && existingField.name === 'sizes') {\n        existingSizesFieldIndex = i\n        return true\n      }\n\n      return false\n    }) as GroupField\n\n    if (existingSizesFieldIndex > -1) {\n      fields.splice(existingSizesFieldIndex, 1)\n    }\n\n    const sizesField: Field = {\n      ...(existingSizesField || {}),\n      name: 'sizes',\n      type: 'group',\n      admin: {\n        hidden: true,\n      },\n      fields: collection.upload.imageSizes.map((size) => {\n        const existingSizeField = existingSizesField?.fields.find(\n          (existingField) => 'name' in existingField && existingField.name === size.name,\n        ) as GroupField\n\n        const existingSizeURLField = existingSizeField?.fields.find(\n          (existingField) => 'name' in existingField && existingField.name === 'url',\n        ) as GroupField\n\n        return {\n          ...existingSizeField,\n          name: size.name,\n          type: 'group',\n          fields: [\n            {\n              ...(existingSizeURLField || {}),\n              ...baseURLField,\n            },\n          ],\n        } as Field\n      }),\n    }\n\n    fields.push(sizesField)\n  }\n\n  // If prefix is enabled or alwaysInsertFields is true, save it to db\n  if (typeof prefix !== 'undefined' || alwaysInsertFields) {\n    let existingPrefixFieldIndex = -1\n\n    const existingPrefixField = fields.find((existingField, i) => {\n      if ('name' in existingField && existingField.name === 'prefix') {\n        existingPrefixFieldIndex = i\n        return true\n      }\n      return false\n    }) as TextField\n\n    if (existingPrefixFieldIndex > -1) {\n      fields.splice(existingPrefixFieldIndex, 1)\n    }\n\n    fields.push({\n      ...basePrefixField,\n      ...(existingPrefixField || {}),\n      defaultValue:\n        existingPrefixField?.defaultValue ??\n        (useCompositePrefixes ? '' : prefix ? path.posix.join(prefix) : ''),\n    } as TextField)\n  }\n\n  return fields\n}\n"],"names":["path","getFields","alwaysInsertFields","collection","prefix","useCompositePrefixes","baseURLField","name","type","admin","hidden","readOnly","label","basePrefixField","fields","existingURLFieldIndex","existingURLField","find","existingField","i","splice","push","upload","imageSizes","existingSizesFieldIndex","existingSizesField","sizesField","map","size","existingSizeField","existingSizeURLField","existingPrefixFieldIndex","existingPrefixField","defaultValue","posix","join"],"mappings":"AAEA,OAAOA,UAAU,OAAM;AAgBvB,OAAO,MAAMC,YAAY,CAAC,EACxBC,kBAAkB,EAClBC,UAAU,EACVC,MAAM,EACNC,uBAAuB,KAAK,EACvB;IACL,MAAMC,eAA0B;QAC9BC,MAAM;QACNC,MAAM;QACNC,OAAO;YACLC,QAAQ;YACRC,UAAU;QACZ;QACAC,OAAO;IACT;IAEA,MAAMC,kBAA6B;QACjCN,MAAM;QACNC,MAAM;QACNC,OAAO;YACLC,QAAQ;YACRC,UAAU;QACZ;IACF;IAEA,MAAMG,SAAS;WAAIX,WAAWW,MAAM;KAAC;IAErC,qDAAqD;IAErD,IAAIC,wBAAwB,CAAC;IAE7B,MAAMC,mBAAmBF,OAAOG,IAAI,CAAC,CAACC,eAAeC;QACnD,IAAI,UAAUD,iBAAiBA,cAAcX,IAAI,KAAK,OAAO;YAC3DQ,wBAAwBI;YACxB,OAAO;QACT;QACA,OAAO;IACT;IAEA,IAAIJ,wBAAwB,CAAC,GAAG;QAC9BD,OAAOM,MAAM,CAACL,uBAAuB;IACvC;IAEAD,OAAOO,IAAI,CAAC;QACV,GAAGf,YAAY;QACf,GAAIU,oBAAoB,CAAC,CAAC;IAC5B;IAEA,IAAI,OAAOb,WAAWmB,MAAM,KAAK,YAAYnB,WAAWmB,MAAM,CAACC,UAAU,EAAE;QACzE,IAAIC,0BAA0B,CAAC;QAE/B,MAAMC,qBAAqBX,OAAOG,IAAI,CAAC,CAACC,eAAeC;YACrD,IAAI,UAAUD,iBAAiBA,cAAcX,IAAI,KAAK,SAAS;gBAC7DiB,0BAA0BL;gBAC1B,OAAO;YACT;YAEA,OAAO;QACT;QAEA,IAAIK,0BAA0B,CAAC,GAAG;YAChCV,OAAOM,MAAM,CAACI,yBAAyB;QACzC;QAEA,MAAME,aAAoB;YACxB,GAAID,sBAAsB,CAAC,CAAC;YAC5BlB,MAAM;YACNC,MAAM;YACNC,OAAO;gBACLC,QAAQ;YACV;YACAI,QAAQX,WAAWmB,MAAM,CAACC,UAAU,CAACI,GAAG,CAAC,CAACC;gBACxC,MAAMC,oBAAoBJ,oBAAoBX,OAAOG,KACnD,CAACC,gBAAkB,UAAUA,iBAAiBA,cAAcX,IAAI,KAAKqB,KAAKrB,IAAI;gBAGhF,MAAMuB,uBAAuBD,mBAAmBf,OAAOG,KACrD,CAACC,gBAAkB,UAAUA,iBAAiBA,cAAcX,IAAI,KAAK;gBAGvE,OAAO;oBACL,GAAGsB,iBAAiB;oBACpBtB,MAAMqB,KAAKrB,IAAI;oBACfC,MAAM;oBACNM,QAAQ;wBACN;4BACE,GAAIgB,wBAAwB,CAAC,CAAC;4BAC9B,GAAGxB,YAAY;wBACjB;qBACD;gBACH;YACF;QACF;QAEAQ,OAAOO,IAAI,CAACK;IACd;IAEA,oEAAoE;IACpE,IAAI,OAAOtB,WAAW,eAAeF,oBAAoB;QACvD,IAAI6B,2BAA2B,CAAC;QAEhC,MAAMC,sBAAsBlB,OAAOG,IAAI,CAAC,CAACC,eAAeC;YACtD,IAAI,UAAUD,iBAAiBA,cAAcX,IAAI,KAAK,UAAU;gBAC9DwB,2BAA2BZ;gBAC3B,OAAO;YACT;YACA,OAAO;QACT;QAEA,IAAIY,2BAA2B,CAAC,GAAG;YACjCjB,OAAOM,MAAM,CAACW,0BAA0B;QAC1C;QAEAjB,OAAOO,IAAI,CAAC;YACV,GAAGR,eAAe;YAClB,GAAImB,uBAAuB,CAAC,CAAC;YAC7BC,cACED,qBAAqBC,gBACpB5B,CAAAA,uBAAuB,KAAKD,SAASJ,KAAKkC,KAAK,CAACC,IAAI,CAAC/B,UAAU,EAAC;QACrE;IACF;IAEA,OAAOU;AACT,EAAC"}

package/dist/admin/index.d.ts

@@ -1,4 +0,0 @@
-import type { Config } from 'payload';
-import type { PluginOptions } from '../types.js';
-export declare const cloudStorage: (pluginOptions: PluginOptions) => (incomingConfig: Config) => Config;
-//# sourceMappingURL=index.d.ts.map

package/dist/admin/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAErC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAOhD,eAAO,MAAM,YAAY,GACtB,eAAe,aAAa,MAC5B,gBAAgB,MAAM,KAAG,MA+BzB,CAAA"}

package/dist/admin/index.js

@@ -1,34 +0,0 @@
-import { getFields } from './fields/getFields.js';
-// This is the admin plugin cloud-storage stubfile.
-// It only extends the config that are required by the admin UI.
-export const cloudStorage = (pluginOptions)=>(incomingConfig)=>{
-        const { alwaysInsertFields, collections: allCollectionOptions, enabled } = pluginOptions;
-        const config = {
-            ...incomingConfig
-        };
-        // If disabled and alwaysInsertFields is not true, skip processing
-        if (enabled === false && !alwaysInsertFields) {
-            return config;
-        }
-        return {
-            ...config,
-            collections: (config.collections || []).map((existingCollection)=>{
-                const options = allCollectionOptions[existingCollection.slug];
-                // Process if adapter exists OR if alwaysInsertFields is true and this collection is configured
-                if (options?.adapter || alwaysInsertFields && options) {
-                    const fields = getFields({
-                        alwaysInsertFields,
-                        collection: existingCollection,
-                        prefix: options.prefix
-                    });
-                    return {
-                        ...existingCollection,
-                        fields
-                    };
-                }
-                return existingCollection;
-            })
-        };
-    };
-
-//# sourceMappingURL=index.js.map

package/dist/admin/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/admin/index.ts"],"sourcesContent":["import type { Config } from 'payload'\n\nimport type { PluginOptions } from '../types.js'\n\nimport { getFields } from './fields/getFields.js'\n\n// This is the admin plugin cloud-storage stubfile.\n// It only extends the config that are required by the admin UI.\n\nexport const cloudStorage =\n  (pluginOptions: PluginOptions) =>\n  (incomingConfig: Config): Config => {\n    const { alwaysInsertFields, collections: allCollectionOptions, enabled } = pluginOptions\n    const config = { ...incomingConfig }\n\n    // If disabled and alwaysInsertFields is not true, skip processing\n    if (enabled === false && !alwaysInsertFields) {\n      return config\n    }\n\n    return {\n      ...config,\n      collections: (config.collections || []).map((existingCollection) => {\n        const options = allCollectionOptions[existingCollection.slug]\n\n        // Process if adapter exists OR if alwaysInsertFields is true and this collection is configured\n        if (options?.adapter || (alwaysInsertFields && options)) {\n          const fields = getFields({\n            alwaysInsertFields,\n            collection: existingCollection,\n            prefix: options.prefix,\n          })\n\n          return {\n            ...existingCollection,\n            fields,\n          }\n        }\n\n        return existingCollection\n      }),\n    }\n  }\n"],"names":["getFields","cloudStorage","pluginOptions","incomingConfig","alwaysInsertFields","collections","allCollectionOptions","enabled","config","map","existingCollection","options","slug","adapter","fields","collection","prefix"],"mappings":"AAIA,SAASA,SAAS,QAAQ,wBAAuB;AAEjD,mDAAmD;AACnD,gEAAgE;AAEhE,OAAO,MAAMC,eACX,CAACC,gBACD,CAACC;QACC,MAAM,EAAEC,kBAAkB,EAAEC,aAAaC,oBAAoB,EAAEC,OAAO,EAAE,GAAGL;QAC3E,MAAMM,SAAS;YAAE,GAAGL,cAAc;QAAC;QAEnC,kEAAkE;QAClE,IAAII,YAAY,SAAS,CAACH,oBAAoB;YAC5C,OAAOI;QACT;QAEA,OAAO;YACL,GAAGA,MAAM;YACTH,aAAa,AAACG,CAAAA,OAAOH,WAAW,IAAI,EAAE,AAAD,EAAGI,GAAG,CAAC,CAACC;gBAC3C,MAAMC,UAAUL,oBAAoB,CAACI,mBAAmBE,IAAI,CAAC;gBAE7D,+FAA+F;gBAC/F,IAAID,SAASE,WAAYT,sBAAsBO,SAAU;oBACvD,MAAMG,SAASd,UAAU;wBACvBI;wBACAW,YAAYL;wBACZM,QAAQL,QAAQK,MAAM;oBACxB;oBAEA,OAAO;wBACL,GAAGN,kBAAkB;wBACrBI;oBACF;gBACF;gBAEA,OAAOJ;YACT;QACF;IACF,EAAC"}

package/dist/utilities/getFileKey.d.ts

@@ -1,22 +0,0 @@
-type GetFileKeyArgs = {
-    collectionPrefix?: string;
-    docPrefix?: string;
-    filename: string;
-    useCompositePrefixes?: boolean;
-};
-type GetFileKeyResult = {
-    fileKey: string;
-    sanitizedCollectionPrefix: string;
-    sanitizedDocPrefix: string;
-    sanitizedFilename: string;
-};
-/**
- * Computes the file key (path) for storage.
- *
- * In non-composite mode (useCompositePrefixes: false), docPrefix overrides collectionPrefix.
- * In composite mode (useCompositePrefixes: true), both are combined.
- * Both prefixes are passed through {@link sanitizePrefix} so keys stay normalized.
- */
-export declare function getFileKey({ collectionPrefix, docPrefix, filename, useCompositePrefixes, }: GetFileKeyArgs): GetFileKeyResult;
-export {};
-//# sourceMappingURL=getFileKey.d.ts.map

package/dist/utilities/getFileKey.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"getFileKey.d.ts","sourceRoot":"","sources":["../../src/utilities/getFileKey.ts"],"names":[],"mappings":"AAKA,KAAK,cAAc,GAAG;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,KAAK,gBAAgB,GAAG;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,yBAAyB,EAAE,MAAM,CAAA;IACjC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,iBAAiB,EAAE,MAAM,CAAA;CAC1B,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,EACzB,gBAAgB,EAChB,SAAS,EACT,QAAQ,EACR,oBAA4B,GAC7B,EAAE,cAAc,GAAG,gBAAgB,CAenC"}

package/dist/utilities/getFileKey.js

@@ -1,23 +0,0 @@
-import path from 'path';
-import { sanitizeFilename } from 'payload/shared';
-import { sanitizePrefix } from './sanitizePrefix.js';
-/**
- * Computes the file key (path) for storage.
- *
- * In non-composite mode (useCompositePrefixes: false), docPrefix overrides collectionPrefix.
- * In composite mode (useCompositePrefixes: true), both are combined.
- * Both prefixes are passed through {@link sanitizePrefix} so keys stay normalized.
- */ export function getFileKey({ collectionPrefix, docPrefix, filename, useCompositePrefixes = false }) {
-    const safeCollectionPrefix = sanitizePrefix(collectionPrefix || '');
-    const safeDocPrefix = sanitizePrefix(docPrefix || '');
-    const safeFilename = sanitizeFilename(filename);
-    const fileKey = useCompositePrefixes ? path.posix.join(safeCollectionPrefix, safeDocPrefix, safeFilename) : path.posix.join(safeDocPrefix || safeCollectionPrefix, safeFilename);
-    return {
-        fileKey,
-        sanitizedCollectionPrefix: safeCollectionPrefix,
-        sanitizedDocPrefix: safeDocPrefix,
-        sanitizedFilename: safeFilename
-    };
-}
-
-//# sourceMappingURL=getFileKey.js.map

package/dist/utilities/getFileKey.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/utilities/getFileKey.ts"],"sourcesContent":["import path from 'path'\nimport { sanitizeFilename } from 'payload/shared'\n\nimport { sanitizePrefix } from './sanitizePrefix.js'\n\ntype GetFileKeyArgs = {\n  collectionPrefix?: string\n  docPrefix?: string\n  filename: string\n  useCompositePrefixes?: boolean\n}\n\ntype GetFileKeyResult = {\n  fileKey: string\n  sanitizedCollectionPrefix: string\n  sanitizedDocPrefix: string\n  sanitizedFilename: string\n}\n\n/**\n * Computes the file key (path) for storage.\n *\n * In non-composite mode (useCompositePrefixes: false), docPrefix overrides collectionPrefix.\n * In composite mode (useCompositePrefixes: true), both are combined.\n * Both prefixes are passed through {@link sanitizePrefix} so keys stay normalized.\n */\nexport function getFileKey({\n  collectionPrefix,\n  docPrefix,\n  filename,\n  useCompositePrefixes = false,\n}: GetFileKeyArgs): GetFileKeyResult {\n  const safeCollectionPrefix = sanitizePrefix(collectionPrefix || '')\n  const safeDocPrefix = sanitizePrefix(docPrefix || '')\n  const safeFilename = sanitizeFilename(filename)\n\n  const fileKey = useCompositePrefixes\n    ? path.posix.join(safeCollectionPrefix, safeDocPrefix, safeFilename)\n    : path.posix.join(safeDocPrefix || safeCollectionPrefix, safeFilename)\n\n  return {\n    fileKey,\n    sanitizedCollectionPrefix: safeCollectionPrefix,\n    sanitizedDocPrefix: safeDocPrefix,\n    sanitizedFilename: safeFilename,\n  }\n}\n"],"names":["path","sanitizeFilename","sanitizePrefix","getFileKey","collectionPrefix","docPrefix","filename","useCompositePrefixes","safeCollectionPrefix","safeDocPrefix","safeFilename","fileKey","posix","join","sanitizedCollectionPrefix","sanitizedDocPrefix","sanitizedFilename"],"mappings":"AAAA,OAAOA,UAAU,OAAM;AACvB,SAASC,gBAAgB,QAAQ,iBAAgB;AAEjD,SAASC,cAAc,QAAQ,sBAAqB;AAgBpD;;;;;;CAMC,GACD,OAAO,SAASC,WAAW,EACzBC,gBAAgB,EAChBC,SAAS,EACTC,QAAQ,EACRC,uBAAuB,KAAK,EACb;IACf,MAAMC,uBAAuBN,eAAeE,oBAAoB;IAChE,MAAMK,gBAAgBP,eAAeG,aAAa;IAClD,MAAMK,eAAeT,iBAAiBK;IAEtC,MAAMK,UAAUJ,uBACZP,KAAKY,KAAK,CAACC,IAAI,CAACL,sBAAsBC,eAAeC,gBACrDV,KAAKY,KAAK,CAACC,IAAI,CAACJ,iBAAiBD,sBAAsBE;IAE3D,OAAO;QACLC;QACAG,2BAA2BN;QAC3BO,oBAAoBN;QACpBO,mBAAmBN;IACrB;AACF"}

package/dist/utilities/getFileKey.spec.js

@@ -1,174 +0,0 @@
-import { getFileKey } from './getFileKey.js';
-import { describe, expect, it } from 'vitest';
-describe('getFileKey', ()=>{
-    describe('non-composite mode (useCompositePrefixes: false)', ()=>{
-        it('should use docPrefix when provided, ignoring collectionPrefix', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'collection',
-                docPrefix: 'document',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'document/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: 'document',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should fallback to collectionPrefix when docPrefix is empty', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'collection',
-                docPrefix: '',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'collection/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should fallback to collectionPrefix when docPrefix is undefined', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'collection',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'collection/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should return only filename when both prefixes are empty', ()=>{
-            const result = getFileKey({
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'test.png',
-                sanitizedCollectionPrefix: '',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-        });
-    });
-    describe('composite mode (useCompositePrefixes: true)', ()=>{
-        it('should combine collectionPrefix and docPrefix', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'collection',
-                docPrefix: 'document',
-                filename: 'test.png',
-                useCompositePrefixes: true
-            });
-            expect(result).toEqual({
-                fileKey: 'collection/document/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: 'document',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should work with only collectionPrefix', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'collection',
-                filename: 'test.png',
-                useCompositePrefixes: true
-            });
-            expect(result).toEqual({
-                fileKey: 'collection/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should work with only docPrefix', ()=>{
-            const result = getFileKey({
-                docPrefix: 'document',
-                filename: 'test.png',
-                useCompositePrefixes: true
-            });
-            expect(result).toEqual({
-                fileKey: 'document/test.png',
-                sanitizedCollectionPrefix: '',
-                sanitizedDocPrefix: 'document',
-                sanitizedFilename: 'test.png'
-            });
-        });
-        it('should return only filename when both prefixes are empty', ()=>{
-            const result = getFileKey({
-                filename: 'test.png',
-                useCompositePrefixes: true
-            });
-            expect(result).toEqual({
-                fileKey: 'test.png',
-                sanitizedCollectionPrefix: '',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-        });
-    });
-    describe('sanitization', ()=>{
-        it('should remove path traversal segments from collectionPrefix', ()=>{
-            const result = getFileKey({
-                collectionPrefix: '../../../etc',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'etc/test.png',
-                sanitizedCollectionPrefix: 'etc',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-            expect(result.fileKey).not.toContain('..');
-        });
-        it('should remove path traversal segments from docPrefix', ()=>{
-            const result = getFileKey({
-                docPrefix: 'a/../../outside',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'a/outside/test.png',
-                sanitizedCollectionPrefix: '',
-                sanitizedDocPrefix: 'a/outside',
-                sanitizedFilename: 'test.png'
-            });
-            expect(result.fileKey).not.toContain('..');
-        });
-        it('should remove control characters from prefixes', ()=>{
-            const result = getFileKey({
-                collectionPrefix: 'test\x00\x1fprefix',
-                filename: 'test.png',
-                useCompositePrefixes: false
-            });
-            expect(result).toEqual({
-                fileKey: 'testprefix/test.png',
-                sanitizedCollectionPrefix: 'testprefix',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'test.png'
-            });
-            expect(result.fileKey).not.toMatch(/[\x00-\x1f]/);
-        });
-        it('should sanitize both prefixes in composite mode', ()=>{
-            const result = getFileKey({
-                collectionPrefix: '../collection',
-                docPrefix: '../../doc',
-                filename: 'test.png',
-                useCompositePrefixes: true
-            });
-            expect(result).toEqual({
-                fileKey: 'collection/doc/test.png',
-                sanitizedCollectionPrefix: 'collection',
-                sanitizedDocPrefix: 'doc',
-                sanitizedFilename: 'test.png'
-            });
-            expect(result.fileKey).not.toContain('..');
-        });
-    });
-});
-
-//# sourceMappingURL=getFileKey.spec.js.map