@payloadcms/plugin-multi-tenant 4.0.0-internal.8ba6b5b → 4.0.0-internal.934870d

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/types.ts"],"sourcesContent":["import type { AcceptedLanguages } from '@payloadcms/translations'\nimport type {\n  AccessArgs,\n  AccessResult,\n  ArrayField,\n  CollectionConfig,\n  CollectionSlug,\n  Field,\n  RelationshipField,\n  SingleRelationshipField,\n  User,\n} from 'payload'\n\nexport type MultiTenantPluginConfig = {\n  /**\n   * After a tenant is deleted, the plugin will attempt to clean up related documents\n   * - removing documents with the tenant ID\n   * - removing the tenant from users\n   *\n   * @default true\n   */\n  cleanupAfterTenantDelete?: boolean\n  /**\n   * Automatically\n   */\n  collections: {\n    [key in CollectionSlug]?: {\n      /**\n       * Override the access result from the collection access control functions\n       *\n       * The function receives:\n       *  - accessResult: the original result from the access control function\n       *  - accessKey: 'read', 'create', 'update', 'delete', 'readVersions', or 'unlock'\n       *  - ...restOfAccessArgs: the original arguments passed to the access control function\n       */\n      accessResultOverride?: CollectionAccessResultOverride\n      /**\n       * Opt out of adding the tenant field and place\n       * it manually using the `tenantField` export from the plugin\n       */\n      customTenantField?: boolean\n      /**\n       * Set to `true` if you want the collection to behave as a global\n       *\n       * @default false\n       */\n      isGlobal?: boolean\n      /**\n       * Overrides for the tenant field, will override the entire tenantField configuration\n       */\n      tenantFieldOverrides?: CollectionTenantFieldConfigOverrides\n      /**\n       * Set to `false` if you want to manually apply the baseListFilter\n       * Set to `false` if you want to manually apply the baseFilter\n       *\n       * @default true\n       */\n      useBaseFilter?: boolean\n      /**\n       * @deprecated Use `useBaseFilter` instead. If both are defined,\n       * `useBaseFilter` will take precedence. This property remains only\n       * for backward compatibility and may be removed in a future version.\n       *\n       * Originally, `baseListFilter` was intended to filter only the List View\n       * in the admin panel. However, base filtering is often required in other areas\n       * such as internal link relationships in the Lexical editor.\n       *\n       * @default true\n       */\n      useBaseListFilter?: boolean\n      /**\n       * Set to `false` if you want to handle collection access manually without the multi-tenant constraints applied\n       *\n       * @default true\n       */\n      useTenantAccess?: boolean\n    }\n  }\n  /**\n   * Enables debug mode\n   * - Makes the tenant field visible in the admin UI within applicable collections\n   *\n   * @default false\n   */\n  debug?: boolean\n  /**\n   * Enables the multi-tenant plugin\n   *\n   * @default true\n   */\n  enabled?: boolean\n  /**\n   * Localization for the plugin\n   */\n  i18n?: {\n    translations: {\n      [key in AcceptedLanguages]?: {\n        /**\n         * Shown inside 3 dot menu on edit document view\n         *\n         * @default 'Assign Tenant'\n         */\n        'assign-tenant-button-label'?: string\n        /**\n         * Shown as the title of the assign tenant modal\n         *\n         * @default 'Assign \"{{title}}\"'\n         */\n        'assign-tenant-modal-title'?: string\n        /**\n         * Shown as the label for the assigned tenant field in the assign tenant modal\n         *\n         * @default 'Assigned Tenant'\n         */\n        'field-assignedTenant-label'?: string\n        /**\n         * Shown as the label for the global tenant selector in the admin UI\n         *\n         * @default 'Filter by Tenant'\n         */\n        'nav-tenantSelector-label'?: string\n      }\n    }\n  }\n  /**\n   * Field configuration for the field added to all tenant enabled collections\n   */\n  tenantField?: RootTenantFieldConfigOverrides\n  /**\n   * Field configuration for the field added to the users collection\n   *\n   * If `includeDefaultField` is `false`, you must include the field on your users collection manually\n   * This is useful if you want to customize the field or place the field in a specific location\n   */\n  tenantsArrayField?:\n    | {\n        /**\n         * Access configuration for the array field\n         */\n        arrayFieldAccess?: ArrayField['access']\n        /**\n         * Name of the array field\n         *\n         * @default 'tenants'\n         */\n        arrayFieldName?: string\n        /**\n         * Name of the tenant field\n         *\n         * @default 'tenant'\n         */\n        arrayTenantFieldName?: string\n        /**\n         * When `includeDefaultField` is `true`, the field will be added to the users collection automatically\n         */\n        includeDefaultField?: true\n        /**\n         * Additional fields to include on the tenants array field\n         */\n        rowFields?: Field[]\n        /**\n         * Access configuration for the tenant field\n         */\n        tenantFieldAccess?: RelationshipField['access']\n      }\n    | {\n        arrayFieldAccess?: never\n        arrayFieldName?: string\n        arrayTenantFieldName?: string\n        /**\n         * When `includeDefaultField` is `false`, you must include the field on your users collection manually\n         */\n        includeDefaultField?: false\n        rowFields?: never\n        tenantFieldAccess?: never\n      }\n  /**\n   * Customize tenant selector label\n   *\n   * Either a string or an object where the keys are i18n codes and the values are the string labels\n   *\n   * @deprecated Use `i18n.translations` instead.\n   */\n  tenantSelectorLabel?:\n    | Partial<{\n        [key in AcceptedLanguages]?: string\n      }>\n    | string\n  /**\n   * The slug for the tenant collection\n   *\n   * @default 'tenants'\n   */\n  tenantsSlug?: string\n  /**\n   * Function that determines if a user has access to _all_ tenants\n   *\n   * Useful for super-admin type users\n   */\n  userHasAccessToAllTenants?: (user: User) => boolean\n  /**\n   * Override the access result on the users collection access control functions\n   *\n   * The function receives:\n   *  - accessResult: the original result from the access control function\n   *  - accessKey: 'read', 'create', 'update', 'delete', 'readVersions', or 'unlock'\n   *  - ...restOfAccessArgs: the original arguments passed to the access control function\n   */\n  usersAccessResultOverride?: CollectionAccessResultOverride\n  /**\n   * Opt out of adding access constraints to the tenants collection\n   */\n  useTenantsCollectionAccess?: boolean\n  /**\n   * Opt out including the baseListFilter to filter tenants by selected tenant\n   */\n  useTenantsListFilter?: boolean\n\n  /**\n   * Opt out including the baseListFilter to filter users by selected tenant\n   */\n  useUsersTenantFilter?: boolean\n}\n\nexport type RootTenantFieldConfigOverrides = Partial<\n  Omit<\n    SingleRelationshipField,\n    | '_sanitized'\n    | 'hidden'\n    | 'index'\n    | 'localized'\n    | 'max'\n    | 'maxRows'\n    | 'min'\n    | 'minRows'\n    | 'relationTo'\n    | 'required'\n    | 'type'\n    | 'unique'\n    | 'virtual'\n  >\n>\n\nexport type CollectionTenantFieldConfigOverrides = Partial<\n  Omit<RootTenantFieldConfigOverrides, 'name'>\n>\n\nexport type Tenant<IDType = number | string> = {\n  id: IDType\n  name: string\n}\n\nexport type UserWithTenantsField = {\n  tenants?:\n    | {\n        tenant: number | string | Tenant\n      }[]\n    | null\n} & User\n\ntype AllAccessKeysT<T extends readonly string[]> = T[number] extends keyof Omit<\n  Required<CollectionConfig>['access'],\n  'admin'\n>\n  ? keyof Omit<Required<CollectionConfig>['access'], 'admin'> extends T[number]\n    ? T\n    : never\n  : never\n\nexport type AllAccessKeys = AllAccessKeysT<\n  ['create', 'read', 'update', 'delete', 'readVersions', 'unlock']\n>\n\nexport type CollectionAccessResultOverride = ({\n  accessKey,\n  accessResult,\n}: {\n  accessKey: AllAccessKeys[number]\n  accessResult: AccessResult\n} & AccessArgs) => AccessResult | Promise<AccessResult>\n"],"names":[],"mappings":"AAiRA,WAMuD"}
+{"version":3,"sources":["../src/types.ts"],"sourcesContent":["import type { AcceptedLanguages } from '@payloadcms/translations'\nimport type {\n  AccessArgs,\n  AccessResult,\n  ArrayField,\n  CollectionConfig,\n  CollectionSlug,\n  Field,\n  RelationshipField,\n  SingleRelationshipField,\n  User,\n} from 'payload'\n\nexport type TenantValue = (number | string)[] | (number | string)\n\nexport type MultiTenantPluginConfig = {\n  /**\n   * After a tenant is deleted, the plugin will attempt to clean up related documents\n   * - removing documents with the tenant ID\n   * - removing the tenant from users\n   *\n   * @default true\n   */\n  cleanupAfterTenantDelete?: boolean\n  /**\n   * Automatically\n   */\n  collections: {\n    [key in CollectionSlug]?: {\n      /**\n       * Override the access result from the collection access control functions\n       *\n       * The function receives:\n       *  - accessResult: the original result from the access control function\n       *  - accessKey: 'read', 'create', 'update', 'delete', 'readVersions', 'unlock', or 'validate'\n       *  - ...restOfAccessArgs: the original arguments passed to the access control function\n       */\n      accessResultOverride?: CollectionAccessResultOverride\n      /**\n       * Opt out of adding the tenant field and place\n       * it manually using the `tenantField` export from the plugin\n       */\n      customTenantField?: boolean\n      /**\n       * Set to `true` if you want the collection to behave as a global\n       *\n       * @default false\n       */\n      isGlobal?: boolean\n      /**\n       * Overrides for the tenant field, will override the entire tenantField configuration\n       */\n      tenantFieldOverrides?: CollectionTenantFieldConfigOverrides\n      /**\n       * Set to `false` if you want to manually apply the baseListFilter\n       * Set to `false` if you want to manually apply the baseFilter\n       *\n       * @default true\n       */\n      useBaseFilter?: boolean\n      /**\n       * @deprecated Use `useBaseFilter` instead. If both are defined,\n       * `useBaseFilter` will take precedence. This property remains only\n       * for backward compatibility and may be removed in a future version.\n       *\n       * Originally, `baseListFilter` was intended to filter only the List View\n       * in the admin panel. However, base filtering is often required in other areas\n       * such as internal link relationships in the Lexical editor.\n       *\n       * @default true\n       */\n      useBaseListFilter?: boolean\n      /**\n       * Set to `false` if you want to handle collection access manually without the multi-tenant constraints applied\n       *\n       * @default true\n       */\n      useTenantAccess?: boolean\n    }\n  }\n  /**\n   * Enables debug mode\n   * - Makes the tenant field visible in the admin UI within applicable collections\n   *\n   * @default false\n   */\n  debug?: boolean\n  /**\n   * Enables the multi-tenant plugin\n   *\n   * @default true\n   */\n  enabled?: boolean\n  /**\n   * Localization for the plugin\n   */\n  i18n?: {\n    translations: {\n      [key in AcceptedLanguages]?: {\n        /**\n         * Shown inside 3 dot menu on edit document view\n         *\n         * @default 'Assign Tenant'\n         */\n        'assign-tenant-button-label'?: string\n        /**\n         * Shown as the title of the assign tenant modal\n         *\n         * @default 'Assign \"{{title}}\"'\n         */\n        'assign-tenant-modal-title'?: string\n        /**\n         * Shown as the label for the assigned tenant field in the assign tenant modal\n         *\n         * @default 'Assigned Tenant'\n         */\n        'field-assignedTenant-label'?: string\n        /**\n         * Shown as the label for the global tenant selector in the admin UI\n         *\n         * @default 'Filter by Tenant'\n         */\n        'nav-tenantSelector-label'?: string\n      }\n    }\n  }\n  /**\n   * Field configuration for the field added to all tenant enabled collections\n   */\n  tenantField?: RootTenantFieldConfigOverrides\n  /**\n   * Field configuration for the field added to the users collection\n   *\n   * If `includeDefaultField` is `false`, you must include the field on your users collection manually\n   * This is useful if you want to customize the field or place the field in a specific location\n   */\n  tenantsArrayField?:\n    | {\n        /**\n         * Access configuration for the array field\n         */\n        arrayFieldAccess?: ArrayField['access']\n        /**\n         * Name of the array field\n         *\n         * @default 'tenants'\n         */\n        arrayFieldName?: string\n        /**\n         * Name of the tenant field\n         *\n         * @default 'tenant'\n         */\n        arrayTenantFieldName?: string\n        /**\n         * When `includeDefaultField` is `true`, the field will be added to the users collection automatically\n         */\n        includeDefaultField?: true\n        /**\n         * Additional fields to include on the tenants array field\n         */\n        rowFields?: Field[]\n        /**\n         * Access configuration for the tenant field\n         */\n        tenantFieldAccess?: RelationshipField['access']\n      }\n    | {\n        arrayFieldAccess?: never\n        arrayFieldName?: string\n        arrayTenantFieldName?: string\n        /**\n         * When `includeDefaultField` is `false`, you must include the field on your users collection manually\n         */\n        includeDefaultField?: false\n        rowFields?: never\n        tenantFieldAccess?: never\n      }\n  /**\n   * Customize tenant selector label\n   *\n   * Either a string or an object where the keys are i18n codes and the values are the string labels\n   *\n   * @deprecated Use `i18n.translations` instead.\n   */\n  tenantSelectorLabel?:\n    | Partial<{\n        [key in AcceptedLanguages]?: string\n      }>\n    | string\n  /**\n   * The slug for the tenant collection\n   *\n   * @default 'tenants'\n   */\n  tenantsSlug?: string\n  /**\n   * Function that determines if a user has access to _all_ tenants\n   *\n   * Useful for super-admin type users\n   */\n  userHasAccessToAllTenants?: (user: User) => boolean\n  /**\n   * Override the access result on the users collection access control functions\n   *\n   * The function receives:\n   *  - accessResult: the original result from the access control function\n   *  - accessKey: 'read', 'create', 'update', 'delete', 'readVersions', 'unlock', or 'validate'\n   *  - ...restOfAccessArgs: the original arguments passed to the access control function\n   */\n  usersAccessResultOverride?: CollectionAccessResultOverride\n  /**\n   * Opt out of adding access constraints to the tenants collection\n   */\n  useTenantsCollectionAccess?: boolean\n  /**\n   * Opt out including the baseListFilter to filter tenants by selected tenant\n   */\n  useTenantsListFilter?: boolean\n\n  /**\n   * Opt out including the baseListFilter to filter users by selected tenant\n   */\n  useUsersTenantFilter?: boolean\n}\n\nexport type RootTenantFieldConfigOverrides = Partial<\n  Omit<\n    SingleRelationshipField,\n    | '_sanitized'\n    | 'hidden'\n    | 'index'\n    | 'localized'\n    | 'max'\n    | 'maxRows'\n    | 'min'\n    | 'minRows'\n    | 'relationTo'\n    | 'required'\n    | 'type'\n    | 'unique'\n    | 'virtual'\n  >\n>\n\nexport type CollectionTenantFieldConfigOverrides = Partial<\n  Omit<RootTenantFieldConfigOverrides, 'name'>\n>\n\nexport type Tenant<IDType = number | string> = {\n  id: IDType\n  name: string\n}\n\nexport type UserWithTenantsField = {\n  tenants?:\n    | {\n        tenant: number | string | Tenant\n      }[]\n    | null\n} & User\n\ntype AllAccessKeysT<T extends readonly string[]> = T[number] extends keyof Omit<\n  Required<CollectionConfig>['access'],\n  'admin'\n>\n  ? keyof Omit<Required<CollectionConfig>['access'], 'admin'> extends T[number]\n    ? T\n    : never\n  : never\n\nexport type AllAccessKeys = AllAccessKeysT<\n  ['create', 'read', 'update', 'delete', 'readVersions', 'unlock', 'validate']\n>\n\nexport type CollectionAccessResultOverride = ({\n  accessKey,\n  accessResult,\n}: {\n  accessKey: AllAccessKeys[number]\n  accessResult: AccessResult\n} & AccessArgs) => AccessResult | Promise<AccessResult>\n"],"names":[],"mappings":"AAmRA,WAMuD"}

package/dist/utilities/addCollectionAccess.d.ts

@@ -1,7 +1,7 @@
-import type { CollectionConfig } from 'payload';
+import type { CollectionConfig, Config } from 'payload';
 import type { AllAccessKeys, MultiTenantPluginConfig } from '../types.js';
 export declare const collectionAccessKeys: AllAccessKeys;
-type Args = {
+export type TenantAccessConfig = {
     accessResultCallback?: MultiTenantPluginConfig['usersAccessResultOverride'];
     adminUsersSlug: string;
     collection: CollectionConfig;
@@ -10,10 +10,8 @@ type Args = {
     tenantsArrayTenantFieldName?: string;
     userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants'];
 };
-/**
- * Adds tenant access constraint to collection
- * - constrains access a users assigned tenants
- */
-export declare const addCollectionAccess: ({ accessResultCallback, adminUsersSlug, collection, fieldName, tenantsArrayFieldName, tenantsArrayTenantFieldName, userHasAccessToAllTenants, }: Args) => void;
-export {};
+export declare const addCollectionAccess: ({ config, scopes, }: {
+    config: Config;
+    scopes: TenantAccessConfig[];
+}) => void;
 //# sourceMappingURL=addCollectionAccess.d.ts.map

package/dist/utilities/addCollectionAccess.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"addCollectionAccess.d.ts","sourceRoot":"","sources":["../../src/utilities/addCollectionAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAE/C,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAIzE,eAAO,MAAM,oBAAoB,EAAE,aAOzB,CAAA;AAEV,KAAK,IAAI,GAAG;IACV,oBAAoB,CAAC,EAAE,uBAAuB,CAAC,2BAA2B,CAAC,CAAA;IAC3E,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,yBAAyB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC,2BAA2B,CAAC,CAAA;CAC1F,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,iJAQjC,IAAI,KAAG,IAiBT,CAAA"}
+{"version":3,"file":"addCollectionAccess.d.ts","sourceRoot":"","sources":["../../src/utilities/addCollectionAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA4B,gBAAgB,EAAE,MAAM,EAAe,MAAM,SAAS,CAAA;AAE9F,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAIzE,eAAO,MAAM,oBAAoB,EAAE,aAQzB,CAAA;AAEV,MAAM,MAAM,kBAAkB,GAAG;IAC/B,oBAAoB,CAAC,EAAE,uBAAuB,CAAC,2BAA2B,CAAC,CAAA;IAC3E,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,yBAAyB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC,2BAA2B,CAAC,CAAA;CAC1F,CAAA;AA2ED,eAAO,MAAM,mBAAmB,wBAG7B;IACD,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,kBAAkB,EAAE,CAAA;CAC7B,KAAG,IAgDH,CAAA"}

package/dist/utilities/addCollectionAccess.js

@@ -1,32 +1,110 @@
-import { withTenantAccess } from './withTenantAccess.js';
+import { getTenantAccess } from './getTenantAccess.js';
 export const collectionAccessKeys = [
     'create',
     'read',
     'update',
     'delete',
     'readVersions',
-    'unlock'
+    'unlock',
+    'validate'
 ];
-/**
- * Adds tenant access constraint to collection
- * - constrains access a users assigned tenants
- */ export const addCollectionAccess = ({ accessResultCallback, adminUsersSlug, collection, fieldName, tenantsArrayFieldName, tenantsArrayTenantFieldName, userHasAccessToAllTenants })=>{
-    collectionAccessKeys.forEach((key)=>{
-        if (!collection.access) {
-            collection.access = {};
-        }
-        collection.access[key] = withTenantAccess({
-            accessFunction: collection.access?.[key],
-            accessKey: key,
-            accessResultCallback,
-            adminUsersSlug,
-            collection,
-            fieldName: key === 'readVersions' ? `version.${fieldName}` : fieldName,
-            tenantsArrayFieldName,
-            tenantsArrayTenantFieldName,
-            userHasAccessToAllTenants
-        });
+const getTenantAccessResult = ({ accessKey, accessResult, accessResultCallback, adminUsersSlug, args, collection, fieldName, tenantsArrayFieldName, tenantsArrayTenantFieldName, userHasAccessToAllTenants })=>{
+    const finish = (result)=>accessResultCallback ? accessResultCallback({
+            accessKey,
+            accessResult: result,
+            ...args
+        }) : result;
+    if (!accessResult) {
+        return finish(false);
+    }
+    const user = args.req.user;
+    if (!user || user.collection !== adminUsersSlug || userHasAccessToAllTenants(user)) {
+        return finish(accessResult);
+    }
+    const tenantConstraint = getTenantAccess({
+        fieldName,
+        tenantsArrayFieldName,
+        tenantsArrayTenantFieldName,
+        user
+    });
+    if (tenantConstraint[fieldName]?.in.length === 0) {
+        return finish(collection.slug === user.collection ? {
+            id: {
+                equals: user.id
+            }
+        } : false);
+    }
+    const tenantResult = collection.slug === user.collection ? {
+        or: [
+            {
+                id: {
+                    equals: user.id
+                }
+            },
+            tenantConstraint
+        ]
+    } : tenantConstraint;
+    return finish(accessResult === true ? tenantResult : {
+        and: [
+            accessResult,
+            tenantResult
+        ]
     });
 };
+const wrapCollectionAccess = (scope)=>{
+    scope.collection.access ??= {};
+    const updateAccessFallback = scope.collection.access.update;
+    for (const accessKey of collectionAccessKeys){
+        // A collection without its own `validate` access is governed by `update`, matching core's
+        // fallback contract, rather than the generic "any authenticated user" default below.
+        const accessFunction = scope.collection.access[accessKey] ?? (accessKey === 'validate' ? updateAccessFallback : undefined) ?? (({ req })=>Boolean(req.user));
+        scope.collection.access[accessKey] = async (args)=>getTenantAccessResult({
+                ...scope,
+                accessKey,
+                accessResult: await accessFunction(args),
+                args,
+                fieldName: accessKey === 'readVersions' ? `version.${scope.fieldName}` : scope.fieldName
+            });
+    }
+};
+export const addCollectionAccess = ({ config, scopes })=>{
+    const baseAccessScopes = new Map();
+    for (const scope of scopes){
+        if (scope.accessResultCallback) {
+            wrapCollectionAccess(scope);
+        } else {
+            baseAccessScopes.set(scope.collection.slug, scope);
+        }
+    }
+    if (!baseAccessScopes.size) {
+        return;
+    }
+    config.baseAccess ??= {};
+    config.baseAccess.collections ??= {};
+    const originalBaseAccess = {
+        ...config.baseAccess.collections
+    };
+    for (const accessKey of collectionAccessKeys){
+        const baseAccessFunction = originalBaseAccess[accessKey] ?? (accessKey === 'validate' ? originalBaseAccess.update : undefined);
+        config.baseAccess.collections[accessKey] = async (args)=>{
+            const baseResult = baseAccessFunction ? await baseAccessFunction(args) : true;
+            const scope = baseAccessScopes.get(args.slug);
+            if (!baseResult || !scope) {
+                return baseResult;
+            }
+            if (accessKey === 'create' && typeof baseResult === 'object') {
+                return baseResult;
+            }
+            const tenantResult = await getTenantAccessResult({
+                ...scope,
+                accessKey,
+                accessResult: baseResult,
+                args,
+                fieldName: accessKey === 'readVersions' ? `version.${scope.fieldName}` : scope.fieldName
+            });
+            return accessKey === 'create' ? Boolean(tenantResult) : tenantResult;
+        };
+    }
+};
 
 //# sourceMappingURL=addCollectionAccess.js.map

package/dist/utilities/addCollectionAccess.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/addCollectionAccess.ts"],"sourcesContent":["import type { CollectionConfig } from 'payload'\n\nimport type { AllAccessKeys, MultiTenantPluginConfig } from '../types.js'\n\nimport { withTenantAccess } from './withTenantAccess.js'\n\nexport const collectionAccessKeys: AllAccessKeys = [\n  'create',\n  'read',\n  'update',\n  'delete',\n  'readVersions',\n  'unlock',\n] as const\n\ntype Args = {\n  accessResultCallback?: MultiTenantPluginConfig['usersAccessResultOverride']\n  adminUsersSlug: string\n  collection: CollectionConfig\n  fieldName: string\n  tenantsArrayFieldName?: string\n  tenantsArrayTenantFieldName?: string\n  userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants']\n}\n\n/**\n * Adds tenant access constraint to collection\n * - constrains access a users assigned tenants\n */\nexport const addCollectionAccess = ({\n  accessResultCallback,\n  adminUsersSlug,\n  collection,\n  fieldName,\n  tenantsArrayFieldName,\n  tenantsArrayTenantFieldName,\n  userHasAccessToAllTenants,\n}: Args): void => {\n  collectionAccessKeys.forEach((key) => {\n    if (!collection.access) {\n      collection.access = {}\n    }\n    collection.access[key] = withTenantAccess({\n      accessFunction: collection.access?.[key],\n      accessKey: key,\n      accessResultCallback,\n      adminUsersSlug,\n      collection,\n      fieldName: key === 'readVersions' ? `version.${fieldName}` : fieldName,\n      tenantsArrayFieldName,\n      tenantsArrayTenantFieldName,\n      userHasAccessToAllTenants,\n    })\n  })\n}\n"],"names":["withTenantAccess","collectionAccessKeys","addCollectionAccess","accessResultCallback","adminUsersSlug","collection","fieldName","tenantsArrayFieldName","tenantsArrayTenantFieldName","userHasAccessToAllTenants","forEach","key","access","accessFunction","accessKey"],"mappings":"AAIA,SAASA,gBAAgB,QAAQ,wBAAuB;AAExD,OAAO,MAAMC,uBAAsC;IACjD;IACA;IACA;IACA;IACA;IACA;CACD,CAAS;AAYV;;;CAGC,GACD,OAAO,MAAMC,sBAAsB,CAAC,EAClCC,oBAAoB,EACpBC,cAAc,EACdC,UAAU,EACVC,SAAS,EACTC,qBAAqB,EACrBC,2BAA2B,EAC3BC,yBAAyB,EACpB;IACLR,qBAAqBS,OAAO,CAAC,CAACC;QAC5B,IAAI,CAACN,WAAWO,MAAM,EAAE;YACtBP,WAAWO,MAAM,GAAG,CAAC;QACvB;QACAP,WAAWO,MAAM,CAACD,IAAI,GAAGX,iBAAiB;YACxCa,gBAAgBR,WAAWO,MAAM,EAAE,CAACD,IAAI;YACxCG,WAAWH;YACXR;YACAC;YACAC;YACAC,WAAWK,QAAQ,iBAAiB,CAAC,QAAQ,EAAEL,WAAW,GAAGA;YAC7DC;YACAC;YACAC;QACF;IACF;AACF,EAAC"}
+{"version":3,"sources":["../../src/utilities/addCollectionAccess.ts"],"sourcesContent":["import type { AccessArgs, AccessResult, CollectionConfig, Config, User, Where } from 'payload'\n\nimport type { AllAccessKeys, MultiTenantPluginConfig } from '../types.js'\n\nimport { getTenantAccess } from './getTenantAccess.js'\n\nexport const collectionAccessKeys: AllAccessKeys = [\n  'create',\n  'read',\n  'update',\n  'delete',\n  'readVersions',\n  'unlock',\n  'validate',\n] as const\n\nexport type TenantAccessConfig = {\n  accessResultCallback?: MultiTenantPluginConfig['usersAccessResultOverride']\n  adminUsersSlug: string\n  collection: CollectionConfig\n  fieldName: string\n  tenantsArrayFieldName?: string\n  tenantsArrayTenantFieldName?: string\n  userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants']\n}\n\nconst getTenantAccessResult = ({\n  accessKey,\n  accessResult,\n  accessResultCallback,\n  adminUsersSlug,\n  args,\n  collection,\n  fieldName,\n  tenantsArrayFieldName,\n  tenantsArrayTenantFieldName,\n  userHasAccessToAllTenants,\n}: {\n  accessKey: AllAccessKeys[number]\n  accessResult: AccessResult\n  args: AccessArgs\n} & TenantAccessConfig): AccessResult | Promise<AccessResult> => {\n  const finish = (result: AccessResult): AccessResult | Promise<AccessResult> =>\n    accessResultCallback\n      ? accessResultCallback({ accessKey, accessResult: result, ...args })\n      : result\n\n  if (!accessResult) {\n    return finish(false)\n  }\n\n  const user = args.req.user\n\n  if (!user || user.collection !== adminUsersSlug || userHasAccessToAllTenants(user as User)) {\n    return finish(accessResult)\n  }\n\n  const tenantConstraint = getTenantAccess({\n    fieldName,\n    tenantsArrayFieldName,\n    tenantsArrayTenantFieldName,\n    user,\n  })\n\n  if (tenantConstraint[fieldName]?.in.length === 0) {\n    return finish(collection.slug === user.collection ? { id: { equals: user.id } } : false)\n  }\n\n  const tenantResult: Where =\n    collection.slug === user.collection\n      ? { or: [{ id: { equals: user.id } }, tenantConstraint] }\n      : tenantConstraint\n\n  return finish(accessResult === true ? tenantResult : { and: [accessResult, tenantResult] })\n}\n\nconst wrapCollectionAccess = (scope: TenantAccessConfig): void => {\n  scope.collection.access ??= {}\n  const updateAccessFallback = scope.collection.access.update\n\n  for (const accessKey of collectionAccessKeys) {\n    // A collection without its own `validate` access is governed by `update`, matching core's\n    // fallback contract, rather than the generic \"any authenticated user\" default below.\n    const accessFunction =\n      scope.collection.access[accessKey] ??\n      (accessKey === 'validate' ? updateAccessFallback : undefined) ??\n      (({ req }: AccessArgs) => Boolean(req.user))\n\n    scope.collection.access[accessKey] = async (args) =>\n      getTenantAccessResult({\n        ...scope,\n        accessKey,\n        accessResult: await accessFunction(args),\n        args,\n        fieldName: accessKey === 'readVersions' ? `version.${scope.fieldName}` : scope.fieldName,\n      })\n  }\n}\n\nexport const addCollectionAccess = ({\n  config,\n  scopes,\n}: {\n  config: Config\n  scopes: TenantAccessConfig[]\n}): void => {\n  const baseAccessScopes = new Map<string, TenantAccessConfig>()\n\n  for (const scope of scopes) {\n    if (scope.accessResultCallback) {\n      wrapCollectionAccess(scope)\n    } else {\n      baseAccessScopes.set(scope.collection.slug, scope)\n    }\n  }\n\n  if (!baseAccessScopes.size) {\n    return\n  }\n\n  config.baseAccess ??= {}\n  config.baseAccess.collections ??= {}\n\n  const originalBaseAccess = { ...config.baseAccess.collections }\n\n  for (const accessKey of collectionAccessKeys) {\n    const baseAccessFunction =\n      originalBaseAccess[accessKey] ??\n      (accessKey === 'validate' ? originalBaseAccess.update : undefined)\n\n    config.baseAccess.collections[accessKey] = async (args) => {\n      const baseResult = baseAccessFunction ? await baseAccessFunction(args) : true\n      const scope = baseAccessScopes.get(args.slug)\n\n      if (!baseResult || !scope) {\n        return baseResult\n      }\n\n      if (accessKey === 'create' && typeof baseResult === 'object') {\n        return baseResult\n      }\n\n      const tenantResult = await getTenantAccessResult({\n        ...scope,\n        accessKey,\n        accessResult: baseResult,\n        args,\n        fieldName: accessKey === 'readVersions' ? `version.${scope.fieldName}` : scope.fieldName,\n      })\n\n      return accessKey === 'create' ? Boolean(tenantResult) : tenantResult\n    }\n  }\n}\n"],"names":["getTenantAccess","collectionAccessKeys","getTenantAccessResult","accessKey","accessResult","accessResultCallback","adminUsersSlug","args","collection","fieldName","tenantsArrayFieldName","tenantsArrayTenantFieldName","userHasAccessToAllTenants","finish","result","user","req","tenantConstraint","in","length","slug","id","equals","tenantResult","or","and","wrapCollectionAccess","scope","access","updateAccessFallback","update","accessFunction","undefined","Boolean","addCollectionAccess","config","scopes","baseAccessScopes","Map","set","size","baseAccess","collections","originalBaseAccess","baseAccessFunction","baseResult","get"],"mappings":"AAIA,SAASA,eAAe,QAAQ,uBAAsB;AAEtD,OAAO,MAAMC,uBAAsC;IACjD;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAS;AAYV,MAAMC,wBAAwB,CAAC,EAC7BC,SAAS,EACTC,YAAY,EACZC,oBAAoB,EACpBC,cAAc,EACdC,IAAI,EACJC,UAAU,EACVC,SAAS,EACTC,qBAAqB,EACrBC,2BAA2B,EAC3BC,yBAAyB,EAKL;IACpB,MAAMC,SAAS,CAACC,SACdT,uBACIA,qBAAqB;YAAEF;YAAWC,cAAcU;YAAQ,GAAGP,IAAI;QAAC,KAChEO;IAEN,IAAI,CAACV,cAAc;QACjB,OAAOS,OAAO;IAChB;IAEA,MAAME,OAAOR,KAAKS,GAAG,CAACD,IAAI;IAE1B,IAAI,CAACA,QAAQA,KAAKP,UAAU,KAAKF,kBAAkBM,0BAA0BG,OAAe;QAC1F,OAAOF,OAAOT;IAChB;IAEA,MAAMa,mBAAmBjB,gBAAgB;QACvCS;QACAC;QACAC;QACAI;IACF;IAEA,IAAIE,gBAAgB,CAACR,UAAU,EAAES,GAAGC,WAAW,GAAG;QAChD,OAAON,OAAOL,WAAWY,IAAI,KAAKL,KAAKP,UAAU,GAAG;YAAEa,IAAI;gBAAEC,QAAQP,KAAKM,EAAE;YAAC;QAAE,IAAI;IACpF;IAEA,MAAME,eACJf,WAAWY,IAAI,KAAKL,KAAKP,UAAU,GAC/B;QAAEgB,IAAI;YAAC;gBAAEH,IAAI;oBAAEC,QAAQP,KAAKM,EAAE;gBAAC;YAAE;YAAGJ;SAAiB;IAAC,IACtDA;IAEN,OAAOJ,OAAOT,iBAAiB,OAAOmB,eAAe;QAAEE,KAAK;YAACrB;YAAcmB;SAAa;IAAC;AAC3F;AAEA,MAAMG,uBAAuB,CAACC;IAC5BA,MAAMnB,UAAU,CAACoB,MAAM,KAAK,CAAC;IAC7B,MAAMC,uBAAuBF,MAAMnB,UAAU,CAACoB,MAAM,CAACE,MAAM;IAE3D,KAAK,MAAM3B,aAAaF,qBAAsB;QAC5C,0FAA0F;QAC1F,qFAAqF;QACrF,MAAM8B,iBACJJ,MAAMnB,UAAU,CAACoB,MAAM,CAACzB,UAAU,IACjCA,CAAAA,cAAc,aAAa0B,uBAAuBG,SAAQ,KAC1D,CAAA,CAAC,EAAEhB,GAAG,EAAc,GAAKiB,QAAQjB,IAAID,IAAI,CAAA;QAE5CY,MAAMnB,UAAU,CAACoB,MAAM,CAACzB,UAAU,GAAG,OAAOI,OAC1CL,sBAAsB;gBACpB,GAAGyB,KAAK;gBACRxB;gBACAC,cAAc,MAAM2B,eAAexB;gBACnCA;gBACAE,WAAWN,cAAc,iBAAiB,CAAC,QAAQ,EAAEwB,MAAMlB,SAAS,EAAE,GAAGkB,MAAMlB,SAAS;YAC1F;IACJ;AACF;AAEA,OAAO,MAAMyB,sBAAsB,CAAC,EAClCC,MAAM,EACNC,MAAM,EAIP;IACC,MAAMC,mBAAmB,IAAIC;IAE7B,KAAK,MAAMX,SAASS,OAAQ;QAC1B,IAAIT,MAAMtB,oBAAoB,EAAE;YAC9BqB,qBAAqBC;QACvB,OAAO;YACLU,iBAAiBE,GAAG,CAACZ,MAAMnB,UAAU,CAACY,IAAI,EAAEO;QAC9C;IACF;IAEA,IAAI,CAACU,iBAAiBG,IAAI,EAAE;QAC1B;IACF;IAEAL,OAAOM,UAAU,KAAK,CAAC;IACvBN,OAAOM,UAAU,CAACC,WAAW,KAAK,CAAC;IAEnC,MAAMC,qBAAqB;QAAE,GAAGR,OAAOM,UAAU,CAACC,WAAW;IAAC;IAE9D,KAAK,MAAMvC,aAAaF,qBAAsB;QAC5C,MAAM2C,qBACJD,kBAAkB,CAACxC,UAAU,IAC5BA,CAAAA,cAAc,aAAawC,mBAAmBb,MAAM,GAAGE,SAAQ;QAElEG,OAAOM,UAAU,CAACC,WAAW,CAACvC,UAAU,GAAG,OAAOI;YAChD,MAAMsC,aAAaD,qBAAqB,MAAMA,mBAAmBrC,QAAQ;YACzE,MAAMoB,QAAQU,iBAAiBS,GAAG,CAACvC,KAAKa,IAAI;YAE5C,IAAI,CAACyB,cAAc,CAAClB,OAAO;gBACzB,OAAOkB;YACT;YAEA,IAAI1C,cAAc,YAAY,OAAO0C,eAAe,UAAU;gBAC5D,OAAOA;YACT;YAEA,MAAMtB,eAAe,MAAMrB,sBAAsB;gBAC/C,GAAGyB,KAAK;gBACRxB;gBACAC,cAAcyC;gBACdtC;gBACAE,WAAWN,cAAc,iBAAiB,CAAC,QAAQ,EAAEwB,MAAMlB,SAAS,EAAE,GAAGkB,MAAMlB,SAAS;YAC1F;YAEA,OAAON,cAAc,WAAW8B,QAAQV,gBAAgBA;QAC1D;IACF;AACF,EAAC"}

package/dist/utilities/combineFilters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"combineFilters.d.ts","sourceRoot":"","sources":["../../src/utilities/combineFilters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAS,MAAM,SAAS,CAAA;AAEhD,KAAK,IAAI,GAAG;IACV,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,YAAY,EAAE,UAAU,CAAA;CACzB,CAAA;AACD;;;;GAIG;AACH,eAAO,MAAM,cAAc,GACxB,8BAA8B,IAAI,KAAG,UA8BrC,CAAA"}
+{"version":3,"file":"combineFilters.d.ts","sourceRoot":"","sources":["../../src/utilities/combineFilters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAS,MAAM,SAAS,CAAA;AAEhD,KAAK,IAAI,GAAG;IACV,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,YAAY,EAAE,UAAU,CAAA;CACzB,CAAA;AACD;;;;GAIG;AACH,eAAO,MAAM,cAAc,iCACM,IAAI,KAAG,UA8BrC,CAAA"}

package/dist/utilities/extractID.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extractID.d.ts","sourceRoot":"","sources":["../../src/utilities/extractID.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC,eAAO,MAAM,SAAS,GAAI,MAAM,SAAS,MAAM,GAAG,MAAM,EACtD,YAAY,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAClC,MAMF,CAAA"}
+{"version":3,"file":"extractID.d.ts","sourceRoot":"","sources":["../../src/utilities/extractID.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC,eAAO,MAAM,SAAS,GAAI,MAAM,SAAS,MAAM,GAAG,MAAM,cAC1C,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAClC,MAMF,CAAA"}

package/dist/utilities/generateCookie.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generateCookie.d.ts","sourceRoot":"","sources":["../../src/utilities/generateCookie.ts"],"names":[],"mappings":"AAAA,KAAK,aAAa,GAAG;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,IAAI,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,oBAAoB,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAA;IACpC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,KAAK,YAAY,GAAG;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAA;IACpC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1B,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,oBAAoB,GAAG,OAAO,EAC3D,MAAM,aAAa,KAClB,oBAAoB,SAAS,IAAI,GAAG,YAAY,GAAG,MA6ErD,CAAA"}
+{"version":3,"file":"generateCookie.d.ts","sourceRoot":"","sources":["../../src/utilities/generateCookie.ts"],"names":[],"mappings":"AAAA,KAAK,aAAa,GAAG;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,IAAI,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,oBAAoB,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAA;IACpC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,KAAK,YAAY,GAAG;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAA;IACpC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1B,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,oBAAoB,GAAG,OAAO,QACrD,aAAa,KAClB,oBAAoB,SAAS,IAAI,GAAG,YAAY,GAAG,MA6ErD,CAAA"}

package/dist/utilities/getCollectionIDType.d.ts

@@ -3,6 +3,6 @@ type Args = {
     collectionSlug: CollectionSlug;
     payload: Payload;
 };
-export declare const getCollectionIDType: ({ collectionSlug, payload }: Args) => "number" | "text";
+export declare const getCollectionIDType: ({ collectionSlug, payload }: Args) => 'number' | 'text';
 export {};
 //# sourceMappingURL=getCollectionIDType.d.ts.map

package/dist/utilities/getCollectionIDType.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getCollectionIDType.d.ts","sourceRoot":"","sources":["../../src/utilities/getCollectionIDType.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEtD,KAAK,IAAI,GAAG;IACV,cAAc,EAAE,cAAc,CAAA;IAC9B,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AACD,eAAO,MAAM,mBAAmB,GAAI,6BAA6B,IAAI,KAAG,QAAQ,GAAG,MAElF,CAAA"}
+{"version":3,"file":"getCollectionIDType.d.ts","sourceRoot":"","sources":["../../src/utilities/getCollectionIDType.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEtD,KAAK,IAAI,GAAG;IACV,cAAc,EAAE,cAAc,CAAA;IAC9B,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AACD,eAAO,MAAM,mBAAmB,gCAAiC,IAAI,KAAG,QAAQ,GAAG,MAElF,CAAA"}

package/dist/utilities/getGlobalViewRedirect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getGlobalViewRedirect.d.ts","sourceRoot":"","sources":["../../src/utilities/getGlobalViewRedirect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAItE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAM1D,KAAK,IAAI,GAAG;IACV;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,aAAa,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,eAAe,EAAE,MAAM,CAAA;IACvB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,2BAA2B,EAAE,MAAM,CAAA;IACnC,qBAAqB,EAAE,MAAM,CAAA;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,yBAAyB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC,2BAA2B,CAAC,CAAA;IACzF,IAAI,EAAE,SAAS,CAAA;CAChB,CAAA;AACD,wBAAsB,qBAAqB,CAAC,EAC1C,IAAI,EAAE,cAAc,EACpB,KAAK,EACL,OAAO,EACP,OAAO,EACP,MAAM,EACN,eAAe,EACf,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,EACrB,UAAU,EACV,IAAI,EACJ,yBAAyB,EACzB,IAAI,GACL,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmG/B"}
+{"version":3,"file":"getGlobalViewRedirect.d.ts","sourceRoot":"","sources":["../../src/utilities/getGlobalViewRedirect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAItE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAM1D,KAAK,IAAI,GAAG;IACV;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,aAAa,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,eAAe,EAAE,MAAM,CAAA;IACvB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,2BAA2B,EAAE,MAAM,CAAA;IACnC,qBAAqB,EAAE,MAAM,CAAA;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,yBAAyB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC,2BAA2B,CAAC,CAAA;IACzF,IAAI,EAAE,SAAS,CAAA;CAChB,CAAA;AACD,wBAAsB,qBAAqB,CAAC,EAC1C,IAAI,EAAE,cAAc,EACpB,KAAK,EACL,OAAO,EACP,OAAO,EACP,MAAM,EACN,eAAe,EACf,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,EACrB,UAAU,EACV,IAAI,EACJ,yBAAyB,EACzB,IAAI,GACL,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoG/B"}

package/dist/utilities/getGlobalViewRedirect.js

@@ -30,6 +30,7 @@ export async function getGlobalViewRedirect({ slug: collectionSlug, docID, heade
                 collection: collectionSlug,
                 depth: 0,
                 limit: 1,
+                overrideAccess: true,
                 pagination: false,
                 select: {
                     id: true
@@ -113,6 +114,7 @@ export async function getGlobalViewRedirect({ slug: collectionSlug, docID, heade
                 },
                 depth: 0,
                 draft: true,
+                overrideAccess: true,
                 select: {
                     id: true
                 }

package/dist/utilities/getGlobalViewRedirect.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/getGlobalViewRedirect.ts"],"sourcesContent":["import type { Payload, ServerAdapter, User, ViewTypes } from 'payload'\n\nimport { formatAdminURL, hasAutosaveEnabled } from 'payload/shared'\n\nimport type { MultiTenantPluginConfig } from '../types.js'\n\nimport { getCollectionIDType } from './getCollectionIDType.js'\nimport { getTenantFromCookie } from './getTenantFromCookie.js'\nimport { getTenantOptions } from './getTenantOptions.js'\n\ntype Args = {\n  /**\n   * This is no longer needed and is handled internally.\n   *\n   * @deprecated\n   */\n  basePath?: string\n  docID?: number | string\n  headers: Headers\n  payload: Payload\n  server: ServerAdapter\n  slug: string\n  tenantFieldName: string\n  tenantsArrayFieldName: string\n  tenantsArrayTenantFieldName: string\n  tenantsCollectionSlug: string\n  useAsTitle: string\n  user?: User\n  userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants']\n  view: ViewTypes\n}\nexport async function getGlobalViewRedirect({\n  slug: collectionSlug,\n  docID,\n  headers,\n  payload,\n  server,\n  tenantFieldName,\n  tenantsArrayFieldName,\n  tenantsArrayTenantFieldName,\n  tenantsCollectionSlug,\n  useAsTitle,\n  user,\n  userHasAccessToAllTenants,\n  view,\n}: Args): Promise<string | void> {\n  const idType = getCollectionIDType({\n    collectionSlug: tenantsCollectionSlug,\n    payload,\n  })\n  let tenant = getTenantFromCookie(headers, idType)\n  let redirectRoute: `/${string}` | void = undefined\n\n  if (!user) {\n    return server.unauthorized()\n  }\n\n  if (!tenant) {\n    const tenantOptions = await getTenantOptions({\n      payload,\n      tenantsArrayFieldName,\n      tenantsArrayTenantFieldName,\n      tenantsCollectionSlug,\n      useAsTitle,\n      user,\n      userHasAccessToAllTenants,\n    })\n\n    tenant = tenantOptions[0]?.value || null\n  }\n\n  if (tenant) {\n    try {\n      const globalTenantDocQuery = await payload.find({\n        collection: collectionSlug,\n        depth: 0,\n        limit: 1,\n        pagination: false,\n        select: {\n          id: true,\n        },\n        where: {\n          [tenantFieldName]: {\n            in: [tenant],\n          },\n        },\n      })\n\n      const globalTenantDocID = globalTenantDocQuery?.docs?.[0]?.id\n\n      if (view === 'document') {\n        // global tenant document edit view\n        if (globalTenantDocID && docID !== globalTenantDocID) {\n          // tenant document already exists but does not match current route docID\n          // redirect to matching tenant docID from query\n          redirectRoute = `/collections/${collectionSlug}/${globalTenantDocID}`\n        } else if (docID && !globalTenantDocID) {\n          // a docID was found in the route but no global document with this tenant exists\n          // so we need to generate a redirect to the create route\n          redirectRoute = await generateCreateRedirect({\n            collectionSlug,\n            payload,\n            tenantID: tenant,\n          })\n        }\n      } else if (view === 'list') {\n        // global tenant document list view\n        if (globalTenantDocID) {\n          // tenant document exists, redirect from list view to the document edit view\n          redirectRoute = `/collections/${collectionSlug}/${globalTenantDocID}`\n        } else {\n          // no matching document was found for the current tenant\n          // so we need to generate a redirect to the create route\n          redirectRoute = await generateCreateRedirect({\n            collectionSlug,\n            payload,\n            tenantID: tenant,\n          })\n        }\n      }\n    } catch (e: unknown) {\n      const prefix = `${e && typeof e === 'object' && 'message' in e && typeof e.message === 'string' ? `${e.message} - ` : ''}`\n      payload.logger.error(e, `${prefix}Multi Tenant Redirect Error`)\n    }\n  } else {\n    // no tenants were found, redirect to the admin view\n    return formatAdminURL({\n      adminRoute: payload.config.routes.admin,\n      path: '',\n      serverURL: payload.config.serverURL,\n    })\n  }\n\n  if (redirectRoute) {\n    return formatAdminURL({\n      adminRoute: payload.config.routes.admin,\n      path: redirectRoute,\n      serverURL: payload.config.serverURL,\n    })\n  }\n\n  // no redirect is needed\n  // the current route is valid\n  return undefined\n}\n\ntype GenerateCreateArgs = {\n  collectionSlug: string\n  payload: Payload\n  tenantID: number | string\n}\n/**\n * Generate a redirect URL for creating a new document in a multi-tenant collection.\n *\n * If autosave is enabled on the collection, we need to create the document and then redirect to it.\n * Otherwise we can redirect to the default create route.\n */\nasync function generateCreateRedirect({\n  collectionSlug,\n  payload,\n  tenantID,\n}: GenerateCreateArgs): Promise<`/${string}` | undefined> {\n  const collectionConfig = payload.collections[collectionSlug]?.config\n  if (hasAutosaveEnabled(collectionConfig!)) {\n    // Autosave is enabled, create a document first\n    try {\n      const doc = await payload.create({\n        collection: collectionSlug,\n        data: {\n          tenant: tenantID,\n        },\n        depth: 0,\n        draft: true,\n        select: {\n          id: true,\n        },\n      })\n      return `/collections/${collectionSlug}/${doc.id}`\n    } catch (error) {\n      payload.logger.error(\n        error,\n        `Error creating autosave global multi tenant document for ${collectionSlug}`,\n      )\n    }\n\n    return '/'\n  }\n\n  // Autosave is not enabled, redirect to default create route\n  return `/collections/${collectionSlug}/create`\n}\n"],"names":["formatAdminURL","hasAutosaveEnabled","getCollectionIDType","getTenantFromCookie","getTenantOptions","getGlobalViewRedirect","slug","collectionSlug","docID","headers","payload","server","tenantFieldName","tenantsArrayFieldName","tenantsArrayTenantFieldName","tenantsCollectionSlug","useAsTitle","user","userHasAccessToAllTenants","view","idType","tenant","redirectRoute","undefined","unauthorized","tenantOptions","value","globalTenantDocQuery","find","collection","depth","limit","pagination","select","id","where","in","globalTenantDocID","docs","generateCreateRedirect","tenantID","e","prefix","message","logger","error","adminRoute","config","routes","admin","path","serverURL","collectionConfig","collections","doc","create","data","draft"],"mappings":"AAEA,SAASA,cAAc,EAAEC,kBAAkB,QAAQ,iBAAgB;AAInE,SAASC,mBAAmB,QAAQ,2BAA0B;AAC9D,SAASC,mBAAmB,QAAQ,2BAA0B;AAC9D,SAASC,gBAAgB,QAAQ,wBAAuB;AAuBxD,OAAO,eAAeC,sBAAsB,EAC1CC,MAAMC,cAAc,EACpBC,KAAK,EACLC,OAAO,EACPC,OAAO,EACPC,MAAM,EACNC,eAAe,EACfC,qBAAqB,EACrBC,2BAA2B,EAC3BC,qBAAqB,EACrBC,UAAU,EACVC,IAAI,EACJC,yBAAyB,EACzBC,IAAI,EACC;IACL,MAAMC,SAASlB,oBAAoB;QACjCK,gBAAgBQ;QAChBL;IACF;IACA,IAAIW,SAASlB,oBAAoBM,SAASW;IAC1C,IAAIE,gBAAqCC;IAEzC,IAAI,CAACN,MAAM;QACT,OAAON,OAAOa,YAAY;IAC5B;IAEA,IAAI,CAACH,QAAQ;QACX,MAAMI,gBAAgB,MAAMrB,iBAAiB;YAC3CM;YACAG;YACAC;YACAC;YACAC;YACAC;YACAC;QACF;QAEAG,SAASI,aAAa,CAAC,EAAE,EAAEC,SAAS;IACtC;IAEA,IAAIL,QAAQ;QACV,IAAI;YACF,MAAMM,uBAAuB,MAAMjB,QAAQkB,IAAI,CAAC;gBAC9CC,YAAYtB;gBACZuB,OAAO;gBACPC,OAAO;gBACPC,YAAY;gBACZC,QAAQ;oBACNC,IAAI;gBACN;gBACAC,OAAO;oBACL,CAACvB,gBAAgB,EAAE;wBACjBwB,IAAI;4BAACf;yBAAO;oBACd;gBACF;YACF;YAEA,MAAMgB,oBAAoBV,sBAAsBW,MAAM,CAAC,EAAE,EAAEJ;YAE3D,IAAIf,SAAS,YAAY;gBACvB,mCAAmC;gBACnC,IAAIkB,qBAAqB7B,UAAU6B,mBAAmB;oBACpD,wEAAwE;oBACxE,+CAA+C;oBAC/Cf,gBAAgB,CAAC,aAAa,EAAEf,eAAe,CAAC,EAAE8B,mBAAmB;gBACvE,OAAO,IAAI7B,SAAS,CAAC6B,mBAAmB;oBACtC,gFAAgF;oBAChF,wDAAwD;oBACxDf,gBAAgB,MAAMiB,uBAAuB;wBAC3ChC;wBACAG;wBACA8B,UAAUnB;oBACZ;gBACF;YACF,OAAO,IAAIF,SAAS,QAAQ;gBAC1B,mCAAmC;gBACnC,IAAIkB,mBAAmB;oBACrB,4EAA4E;oBAC5Ef,gBAAgB,CAAC,aAAa,EAAEf,eAAe,CAAC,EAAE8B,mBAAmB;gBACvE,OAAO;oBACL,wDAAwD;oBACxD,wDAAwD;oBACxDf,gBAAgB,MAAMiB,uBAAuB;wBAC3ChC;wBACAG;wBACA8B,UAAUnB;oBACZ;gBACF;YACF;QACF,EAAE,OAAOoB,GAAY;YACnB,MAAMC,SAAS,GAAGD,KAAK,OAAOA,MAAM,YAAY,aAAaA,KAAK,OAAOA,EAAEE,OAAO,KAAK,WAAW,GAAGF,EAAEE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI;YAC1HjC,QAAQkC,MAAM,CAACC,KAAK,CAACJ,GAAG,GAAGC,OAAO,2BAA2B,CAAC;QAChE;IACF,OAAO;QACL,oDAAoD;QACpD,OAAO1C,eAAe;YACpB8C,YAAYpC,QAAQqC,MAAM,CAACC,MAAM,CAACC,KAAK;YACvCC,MAAM;YACNC,WAAWzC,QAAQqC,MAAM,CAACI,SAAS;QACrC;IACF;IAEA,IAAI7B,eAAe;QACjB,OAAOtB,eAAe;YACpB8C,YAAYpC,QAAQqC,MAAM,CAACC,MAAM,CAACC,KAAK;YACvCC,MAAM5B;YACN6B,WAAWzC,QAAQqC,MAAM,CAACI,SAAS;QACrC;IACF;IAEA,wBAAwB;IACxB,6BAA6B;IAC7B,OAAO5B;AACT;AAOA;;;;;CAKC,GACD,eAAegB,uBAAuB,EACpChC,cAAc,EACdG,OAAO,EACP8B,QAAQ,EACW;IACnB,MAAMY,mBAAmB1C,QAAQ2C,WAAW,CAAC9C,eAAe,EAAEwC;IAC9D,IAAI9C,mBAAmBmD,mBAAoB;QACzC,+CAA+C;QAC/C,IAAI;YACF,MAAME,MAAM,MAAM5C,QAAQ6C,MAAM,CAAC;gBAC/B1B,YAAYtB;gBACZiD,MAAM;oBACJnC,QAAQmB;gBACV;gBACAV,OAAO;gBACP2B,OAAO;gBACPxB,QAAQ;oBACNC,IAAI;gBACN;YACF;YACA,OAAO,CAAC,aAAa,EAAE3B,eAAe,CAAC,EAAE+C,IAAIpB,EAAE,EAAE;QACnD,EAAE,OAAOW,OAAO;YACdnC,QAAQkC,MAAM,CAACC,KAAK,CAClBA,OACA,CAAC,yDAAyD,EAAEtC,gBAAgB;QAEhF;QAEA,OAAO;IACT;IAEA,4DAA4D;IAC5D,OAAO,CAAC,aAAa,EAAEA,eAAe,OAAO,CAAC;AAChD"}
+{"version":3,"sources":["../../src/utilities/getGlobalViewRedirect.ts"],"sourcesContent":["import type { Payload, ServerAdapter, User, ViewTypes } from 'payload'\n\nimport { formatAdminURL, hasAutosaveEnabled } from 'payload/shared'\n\nimport type { MultiTenantPluginConfig } from '../types.js'\n\nimport { getCollectionIDType } from './getCollectionIDType.js'\nimport { getTenantFromCookie } from './getTenantFromCookie.js'\nimport { getTenantOptions } from './getTenantOptions.js'\n\ntype Args = {\n  /**\n   * This is no longer needed and is handled internally.\n   *\n   * @deprecated\n   */\n  basePath?: string\n  docID?: number | string\n  headers: Headers\n  payload: Payload\n  server: ServerAdapter\n  slug: string\n  tenantFieldName: string\n  tenantsArrayFieldName: string\n  tenantsArrayTenantFieldName: string\n  tenantsCollectionSlug: string\n  useAsTitle: string\n  user?: User\n  userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants']\n  view: ViewTypes\n}\nexport async function getGlobalViewRedirect({\n  slug: collectionSlug,\n  docID,\n  headers,\n  payload,\n  server,\n  tenantFieldName,\n  tenantsArrayFieldName,\n  tenantsArrayTenantFieldName,\n  tenantsCollectionSlug,\n  useAsTitle,\n  user,\n  userHasAccessToAllTenants,\n  view,\n}: Args): Promise<string | void> {\n  const idType = getCollectionIDType({\n    collectionSlug: tenantsCollectionSlug,\n    payload,\n  })\n  let tenant = getTenantFromCookie(headers, idType)\n  let redirectRoute: `/${string}` | void = undefined\n\n  if (!user) {\n    return server.unauthorized()\n  }\n\n  if (!tenant) {\n    const tenantOptions = await getTenantOptions({\n      payload,\n      tenantsArrayFieldName,\n      tenantsArrayTenantFieldName,\n      tenantsCollectionSlug,\n      useAsTitle,\n      user,\n      userHasAccessToAllTenants,\n    })\n\n    tenant = tenantOptions[0]?.value || null\n  }\n\n  if (tenant) {\n    try {\n      const globalTenantDocQuery = await payload.find({\n        collection: collectionSlug,\n        depth: 0,\n        limit: 1,\n        overrideAccess: true,\n        pagination: false,\n        select: {\n          id: true,\n        },\n        where: {\n          [tenantFieldName]: {\n            in: [tenant],\n          },\n        },\n      })\n\n      const globalTenantDocID = globalTenantDocQuery?.docs?.[0]?.id\n\n      if (view === 'document') {\n        // global tenant document edit view\n        if (globalTenantDocID && docID !== globalTenantDocID) {\n          // tenant document already exists but does not match current route docID\n          // redirect to matching tenant docID from query\n          redirectRoute = `/collections/${collectionSlug}/${globalTenantDocID}`\n        } else if (docID && !globalTenantDocID) {\n          // a docID was found in the route but no global document with this tenant exists\n          // so we need to generate a redirect to the create route\n          redirectRoute = await generateCreateRedirect({\n            collectionSlug,\n            payload,\n            tenantID: tenant,\n          })\n        }\n      } else if (view === 'list') {\n        // global tenant document list view\n        if (globalTenantDocID) {\n          // tenant document exists, redirect from list view to the document edit view\n          redirectRoute = `/collections/${collectionSlug}/${globalTenantDocID}`\n        } else {\n          // no matching document was found for the current tenant\n          // so we need to generate a redirect to the create route\n          redirectRoute = await generateCreateRedirect({\n            collectionSlug,\n            payload,\n            tenantID: tenant,\n          })\n        }\n      }\n    } catch (e: unknown) {\n      const prefix = `${e && typeof e === 'object' && 'message' in e && typeof e.message === 'string' ? `${e.message} - ` : ''}`\n      payload.logger.error(e, `${prefix}Multi Tenant Redirect Error`)\n    }\n  } else {\n    // no tenants were found, redirect to the admin view\n    return formatAdminURL({\n      adminRoute: payload.config.routes.admin,\n      path: '',\n      serverURL: payload.config.serverURL,\n    })\n  }\n\n  if (redirectRoute) {\n    return formatAdminURL({\n      adminRoute: payload.config.routes.admin,\n      path: redirectRoute,\n      serverURL: payload.config.serverURL,\n    })\n  }\n\n  // no redirect is needed\n  // the current route is valid\n  return undefined\n}\n\ntype GenerateCreateArgs = {\n  collectionSlug: string\n  payload: Payload\n  tenantID: number | string\n}\n/**\n * Generate a redirect URL for creating a new document in a multi-tenant collection.\n *\n * If autosave is enabled on the collection, we need to create the document and then redirect to it.\n * Otherwise we can redirect to the default create route.\n */\nasync function generateCreateRedirect({\n  collectionSlug,\n  payload,\n  tenantID,\n}: GenerateCreateArgs): Promise<`/${string}` | undefined> {\n  const collectionConfig = payload.collections[collectionSlug]?.config\n  if (hasAutosaveEnabled(collectionConfig!)) {\n    // Autosave is enabled, create a document first\n    try {\n      const doc = await payload.create({\n        collection: collectionSlug,\n        data: {\n          tenant: tenantID,\n        },\n        depth: 0,\n        draft: true,\n        overrideAccess: true,\n        select: {\n          id: true,\n        },\n      })\n      return `/collections/${collectionSlug}/${doc.id}`\n    } catch (error) {\n      payload.logger.error(\n        error,\n        `Error creating autosave global multi tenant document for ${collectionSlug}`,\n      )\n    }\n\n    return '/'\n  }\n\n  // Autosave is not enabled, redirect to default create route\n  return `/collections/${collectionSlug}/create`\n}\n"],"names":["formatAdminURL","hasAutosaveEnabled","getCollectionIDType","getTenantFromCookie","getTenantOptions","getGlobalViewRedirect","slug","collectionSlug","docID","headers","payload","server","tenantFieldName","tenantsArrayFieldName","tenantsArrayTenantFieldName","tenantsCollectionSlug","useAsTitle","user","userHasAccessToAllTenants","view","idType","tenant","redirectRoute","undefined","unauthorized","tenantOptions","value","globalTenantDocQuery","find","collection","depth","limit","overrideAccess","pagination","select","id","where","in","globalTenantDocID","docs","generateCreateRedirect","tenantID","e","prefix","message","logger","error","adminRoute","config","routes","admin","path","serverURL","collectionConfig","collections","doc","create","data","draft"],"mappings":"AAEA,SAASA,cAAc,EAAEC,kBAAkB,QAAQ,iBAAgB;AAInE,SAASC,mBAAmB,QAAQ,2BAA0B;AAC9D,SAASC,mBAAmB,QAAQ,2BAA0B;AAC9D,SAASC,gBAAgB,QAAQ,wBAAuB;AAuBxD,OAAO,eAAeC,sBAAsB,EAC1CC,MAAMC,cAAc,EACpBC,KAAK,EACLC,OAAO,EACPC,OAAO,EACPC,MAAM,EACNC,eAAe,EACfC,qBAAqB,EACrBC,2BAA2B,EAC3BC,qBAAqB,EACrBC,UAAU,EACVC,IAAI,EACJC,yBAAyB,EACzBC,IAAI,EACC;IACL,MAAMC,SAASlB,oBAAoB;QACjCK,gBAAgBQ;QAChBL;IACF;IACA,IAAIW,SAASlB,oBAAoBM,SAASW;IAC1C,IAAIE,gBAAqCC;IAEzC,IAAI,CAACN,MAAM;QACT,OAAON,OAAOa,YAAY;IAC5B;IAEA,IAAI,CAACH,QAAQ;QACX,MAAMI,gBAAgB,MAAMrB,iBAAiB;YAC3CM;YACAG;YACAC;YACAC;YACAC;YACAC;YACAC;QACF;QAEAG,SAASI,aAAa,CAAC,EAAE,EAAEC,SAAS;IACtC;IAEA,IAAIL,QAAQ;QACV,IAAI;YACF,MAAMM,uBAAuB,MAAMjB,QAAQkB,IAAI,CAAC;gBAC9CC,YAAYtB;gBACZuB,OAAO;gBACPC,OAAO;gBACPC,gBAAgB;gBAChBC,YAAY;gBACZC,QAAQ;oBACNC,IAAI;gBACN;gBACAC,OAAO;oBACL,CAACxB,gBAAgB,EAAE;wBACjByB,IAAI;4BAAChB;yBAAO;oBACd;gBACF;YACF;YAEA,MAAMiB,oBAAoBX,sBAAsBY,MAAM,CAAC,EAAE,EAAEJ;YAE3D,IAAIhB,SAAS,YAAY;gBACvB,mCAAmC;gBACnC,IAAImB,qBAAqB9B,UAAU8B,mBAAmB;oBACpD,wEAAwE;oBACxE,+CAA+C;oBAC/ChB,gBAAgB,CAAC,aAAa,EAAEf,eAAe,CAAC,EAAE+B,mBAAmB;gBACvE,OAAO,IAAI9B,SAAS,CAAC8B,mBAAmB;oBACtC,gFAAgF;oBAChF,wDAAwD;oBACxDhB,gBAAgB,MAAMkB,uBAAuB;wBAC3CjC;wBACAG;wBACA+B,UAAUpB;oBACZ;gBACF;YACF,OAAO,IAAIF,SAAS,QAAQ;gBAC1B,mCAAmC;gBACnC,IAAImB,mBAAmB;oBACrB,4EAA4E;oBAC5EhB,gBAAgB,CAAC,aAAa,EAAEf,eAAe,CAAC,EAAE+B,mBAAmB;gBACvE,OAAO;oBACL,wDAAwD;oBACxD,wDAAwD;oBACxDhB,gBAAgB,MAAMkB,uBAAuB;wBAC3CjC;wBACAG;wBACA+B,UAAUpB;oBACZ;gBACF;YACF;QACF,EAAE,OAAOqB,GAAY;YACnB,MAAMC,SAAS,GAAGD,KAAK,OAAOA,MAAM,YAAY,aAAaA,KAAK,OAAOA,EAAEE,OAAO,KAAK,WAAW,GAAGF,EAAEE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI;YAC1HlC,QAAQmC,MAAM,CAACC,KAAK,CAACJ,GAAG,GAAGC,OAAO,2BAA2B,CAAC;QAChE;IACF,OAAO;QACL,oDAAoD;QACpD,OAAO3C,eAAe;YACpB+C,YAAYrC,QAAQsC,MAAM,CAACC,MAAM,CAACC,KAAK;YACvCC,MAAM;YACNC,WAAW1C,QAAQsC,MAAM,CAACI,SAAS;QACrC;IACF;IAEA,IAAI9B,eAAe;QACjB,OAAOtB,eAAe;YACpB+C,YAAYrC,QAAQsC,MAAM,CAACC,MAAM,CAACC,KAAK;YACvCC,MAAM7B;YACN8B,WAAW1C,QAAQsC,MAAM,CAACI,SAAS;QACrC;IACF;IAEA,wBAAwB;IACxB,6BAA6B;IAC7B,OAAO7B;AACT;AAOA;;;;;CAKC,GACD,eAAeiB,uBAAuB,EACpCjC,cAAc,EACdG,OAAO,EACP+B,QAAQ,EACW;IACnB,MAAMY,mBAAmB3C,QAAQ4C,WAAW,CAAC/C,eAAe,EAAEyC;IAC9D,IAAI/C,mBAAmBoD,mBAAoB;QACzC,+CAA+C;QAC/C,IAAI;YACF,MAAME,MAAM,MAAM7C,QAAQ8C,MAAM,CAAC;gBAC/B3B,YAAYtB;gBACZkD,MAAM;oBACJpC,QAAQoB;gBACV;gBACAX,OAAO;gBACP4B,OAAO;gBACP1B,gBAAgB;gBAChBE,QAAQ;oBACNC,IAAI;gBACN;YACF;YACA,OAAO,CAAC,aAAa,EAAE5B,eAAe,CAAC,EAAEgD,IAAIpB,EAAE,EAAE;QACnD,EAAE,OAAOW,OAAO;YACdpC,QAAQmC,MAAM,CAACC,KAAK,CAClBA,OACA,CAAC,yDAAyD,EAAEvC,gBAAgB;QAEhF;QAEA,OAAO;IACT;IAEA,4DAA4D;IAC5D,OAAO,CAAC,aAAa,EAAEA,eAAe,OAAO,CAAC;AAChD"}

package/dist/utilities/getTenantIDsFromValue.d.ts

@@ -0,0 +1,2 @@
+export declare const getTenantIDsFromValue: (value: unknown) => string[];
+//# sourceMappingURL=getTenantIDsFromValue.d.ts.map

package/dist/utilities/getTenantIDsFromValue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getTenantIDsFromValue.d.ts","sourceRoot":"","sources":["../../src/utilities/getTenantIDsFromValue.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,qBAAqB,UAAW,OAAO,KAAG,MAAM,EAU5D,CAAA"}

package/dist/utilities/getTenantIDsFromValue.js

@@ -0,0 +1,14 @@
+import { extractID } from './extractID.js';
+export const getTenantIDsFromValue = (value)=>{
+    if (value === undefined || value === null) {
+        return [];
+    }
+    return (Array.isArray(value) ? value : [
+        value
+    ]).map((entry)=>{
+        const id = entry === null || entry === undefined ? undefined : extractID(entry);
+        return typeof id === 'number' || typeof id === 'string' ? String(id) : '';
+    });
+};
+
+//# sourceMappingURL=getTenantIDsFromValue.js.map

package/dist/utilities/getTenantIDsFromValue.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/getTenantIDsFromValue.ts"],"sourcesContent":["import type { Tenant } from '../types.js'\n\nimport { extractID } from './extractID.js'\n\nexport const getTenantIDsFromValue = (value: unknown): string[] => {\n  if (value === undefined || value === null) {\n    return []\n  }\n\n  return (Array.isArray(value) ? value : [value]).map((entry) => {\n    const id = entry === null || entry === undefined ? undefined : extractID(entry as Tenant)\n\n    return typeof id === 'number' || typeof id === 'string' ? String(id) : ''\n  })\n}\n"],"names":["extractID","getTenantIDsFromValue","value","undefined","Array","isArray","map","entry","id","String"],"mappings":"AAEA,SAASA,SAAS,QAAQ,iBAAgB;AAE1C,OAAO,MAAMC,wBAAwB,CAACC;IACpC,IAAIA,UAAUC,aAAaD,UAAU,MAAM;QACzC,OAAO,EAAE;IACX;IAEA,OAAO,AAACE,CAAAA,MAAMC,OAAO,CAACH,SAASA,QAAQ;QAACA;KAAM,AAAD,EAAGI,GAAG,CAAC,CAACC;QACnD,MAAMC,KAAKD,UAAU,QAAQA,UAAUJ,YAAYA,YAAYH,UAAUO;QAEzE,OAAO,OAAOC,OAAO,YAAY,OAAOA,OAAO,WAAWC,OAAOD,MAAM;IACzE;AACF,EAAC"}

package/dist/utilities/getTenantOptions.d.ts

@@ -7,6 +7,6 @@ export declare const getTenantOptions: ({ payload, tenantsArrayFieldName, tenant
     tenantsCollectionSlug: string;
     useAsTitle: string;
     user: User;
-    userHasAccessToAllTenants: Required<MultiTenantPluginConfig>["userHasAccessToAllTenants"];
+    userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants'];
 }) => Promise<OptionObject[]>;
 //# sourceMappingURL=getTenantOptions.d.ts.map

package/dist/utilities/getTenantOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getTenantOptions.d.ts","sourceRoot":"","sources":["../../src/utilities/getTenantOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAE1D,eAAO,MAAM,gBAAgB,GAAU,sIAQpC;IACD,OAAO,EAAE,OAAO,CAAA;IAChB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,2BAA2B,EAAE,MAAM,CAAA;IACnC,qBAAqB,EAAE,MAAM,CAAA;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,IAAI,CAAA;IACV,yBAAyB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC,2BAA2B,CAAC,CAAA;CAC1F,KAAG,OAAO,CAAC,YAAY,EAAE,CAuDzB,CAAA"}
+{"version":3,"file":"getTenantOptions.d.ts","sourceRoot":"","sources":["../../src/utilities/getTenantOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAE1D,eAAO,MAAM,gBAAgB,yIAQ1B;IACD,OAAO,EAAE,OAAO,CAAA;IAChB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,2BAA2B,EAAE,MAAM,CAAA;IACnC,qBAAqB,EAAE,MAAM,CAAA;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,IAAI,CAAA;IACV,yBAAyB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC,2BAA2B,CAAC,CAAA;CAC1F,KAAG,OAAO,CAAC,YAAY,EAAE,CAuDzB,CAAA"}

package/dist/utilities/getUserTenantIDs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getUserTenantIDs.d.ts","sourceRoot":"","sources":["../../src/utilities/getUserTenantIDs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAK/D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAI,MAAM,SAAS,MAAM,GAAG,MAAM,EAC7D,MAAM,IAAI,GAAG,oBAAoB,EACjC,UAAU;IACR,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAA;CACrC,KACA,MAAM,EAoBR,CAAA"}
+{"version":3,"file":"getUserTenantIDs.d.ts","sourceRoot":"","sources":["../../src/utilities/getUserTenantIDs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAK/D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAI,MAAM,SAAS,MAAM,GAAG,MAAM,QACvD,IAAI,GAAG,oBAAoB,YACvB;IACR,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAA;CACrC,KACA,MAAM,EAqBR,CAAA"}

package/dist/utilities/getUserTenantIDs.js

@@ -12,8 +12,9 @@ import { extractID } from './extractID.js';
     const tenantsArrayTenantFieldName = options?.tenantsArrayTenantFieldName || defaults.tenantsArrayTenantFieldName;
     const tenantsArray = user[tenantsArrayFieldName];
     return (Array.isArray(tenantsArray) ? tenantsArray : [])?.reduce((acc, row)=>{
-        if (row[tenantsArrayTenantFieldName]) {
-            acc.push(extractID(row[tenantsArrayTenantFieldName]));
+        const tenantRow = row[tenantsArrayTenantFieldName];
+        if (tenantRow !== undefined && tenantRow !== null) {
+            acc.push(extractID(tenantRow));
         }
         return acc;
     }, []) || [];

package/dist/utilities/getUserTenantIDs.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/getUserTenantIDs.ts"],"sourcesContent":["import type { Tenant, UserWithTenantsField } from '../types.js'\n\nimport { defaults } from '../defaults.js'\nimport { extractID } from './extractID.js'\n\n/**\n * Returns array of all tenant IDs assigned to a user\n *\n * @param user - User object with tenants field\n */\nexport const getUserTenantIDs = <IDType extends number | string>(\n  user: null | UserWithTenantsField,\n  options?: {\n    tenantsArrayFieldName?: string\n    tenantsArrayTenantFieldName?: string\n  },\n): IDType[] => {\n  if (!user) {\n    return []\n  }\n\n  const tenantsArrayFieldName = options?.tenantsArrayFieldName || defaults.tenantsArrayFieldName\n  const tenantsArrayTenantFieldName =\n    options?.tenantsArrayTenantFieldName || defaults.tenantsArrayTenantFieldName\n\n  const tenantsArray = (user as Record<string, unknown>)[tenantsArrayFieldName]\n\n  return (\n    (Array.isArray(tenantsArray) ? tenantsArray : [])?.reduce<IDType[]>((acc, row) => {\n      if (row[tenantsArrayTenantFieldName]) {\n        acc.push(extractID<IDType>(row[tenantsArrayTenantFieldName] as Tenant<IDType>))\n      }\n\n      return acc\n    }, []) || []\n  )\n}\n"],"names":["defaults","extractID","getUserTenantIDs","user","options","tenantsArrayFieldName","tenantsArrayTenantFieldName","tenantsArray","Array","isArray","reduce","acc","row","push"],"mappings":"AAEA,SAASA,QAAQ,QAAQ,iBAAgB;AACzC,SAASC,SAAS,QAAQ,iBAAgB;AAE1C;;;;CAIC,GACD,OAAO,MAAMC,mBAAmB,CAC9BC,MACAC;IAKA,IAAI,CAACD,MAAM;QACT,OAAO,EAAE;IACX;IAEA,MAAME,wBAAwBD,SAASC,yBAAyBL,SAASK,qBAAqB;IAC9F,MAAMC,8BACJF,SAASE,+BAA+BN,SAASM,2BAA2B;IAE9E,MAAMC,eAAe,AAACJ,IAAgC,CAACE,sBAAsB;IAE7E,OACE,AAACG,CAAAA,MAAMC,OAAO,CAACF,gBAAgBA,eAAe,EAAE,AAAD,GAAIG,OAAiB,CAACC,KAAKC;QACxE,IAAIA,GAAG,CAACN,4BAA4B,EAAE;YACpCK,IAAIE,IAAI,CAACZ,UAAkBW,GAAG,CAACN,4BAA4B;QAC7D;QAEA,OAAOK;IACT,GAAG,EAAE,KAAK,EAAE;AAEhB,EAAC"}
+{"version":3,"sources":["../../src/utilities/getUserTenantIDs.ts"],"sourcesContent":["import type { Tenant, UserWithTenantsField } from '../types.js'\n\nimport { defaults } from '../defaults.js'\nimport { extractID } from './extractID.js'\n\n/**\n * Returns array of all tenant IDs assigned to a user\n *\n * @param user - User object with tenants field\n */\nexport const getUserTenantIDs = <IDType extends number | string>(\n  user: null | UserWithTenantsField,\n  options?: {\n    tenantsArrayFieldName?: string\n    tenantsArrayTenantFieldName?: string\n  },\n): IDType[] => {\n  if (!user) {\n    return []\n  }\n\n  const tenantsArrayFieldName = options?.tenantsArrayFieldName || defaults.tenantsArrayFieldName\n  const tenantsArrayTenantFieldName =\n    options?.tenantsArrayTenantFieldName || defaults.tenantsArrayTenantFieldName\n\n  const tenantsArray = (user as Record<string, unknown>)[tenantsArrayFieldName]\n\n  return (\n    (Array.isArray(tenantsArray) ? tenantsArray : [])?.reduce<IDType[]>((acc, row) => {\n      const tenantRow = row[tenantsArrayTenantFieldName] as Tenant<IDType>\n      if (tenantRow !== undefined && tenantRow !== null) {\n        acc.push(extractID(tenantRow))\n      }\n\n      return acc\n    }, []) || []\n  )\n}\n"],"names":["defaults","extractID","getUserTenantIDs","user","options","tenantsArrayFieldName","tenantsArrayTenantFieldName","tenantsArray","Array","isArray","reduce","acc","row","tenantRow","undefined","push"],"mappings":"AAEA,SAASA,QAAQ,QAAQ,iBAAgB;AACzC,SAASC,SAAS,QAAQ,iBAAgB;AAE1C;;;;CAIC,GACD,OAAO,MAAMC,mBAAmB,CAC9BC,MACAC;IAKA,IAAI,CAACD,MAAM;QACT,OAAO,EAAE;IACX;IAEA,MAAME,wBAAwBD,SAASC,yBAAyBL,SAASK,qBAAqB;IAC9F,MAAMC,8BACJF,SAASE,+BAA+BN,SAASM,2BAA2B;IAE9E,MAAMC,eAAe,AAACJ,IAAgC,CAACE,sBAAsB;IAE7E,OACE,AAACG,CAAAA,MAAMC,OAAO,CAACF,gBAAgBA,eAAe,EAAE,AAAD,GAAIG,OAAiB,CAACC,KAAKC;QACxE,MAAMC,YAAYD,GAAG,CAACN,4BAA4B;QAClD,IAAIO,cAAcC,aAAaD,cAAc,MAAM;YACjDF,IAAII,IAAI,CAACd,UAAUY;QACrB;QAEA,OAAOF;IACT,GAAG,EAAE,KAAK,EAAE;AAEhB,EAAC"}

package/dist/utilities/isValidTenantAssignment.d.ts

@@ -0,0 +1,13 @@
+import type { PayloadRequest } from 'payload';
+import type { MultiTenantPluginConfig } from '../types.js';
+type Args = {
+    previousValue?: unknown;
+    req: PayloadRequest;
+    tenantsArrayFieldName: string;
+    tenantsArrayTenantFieldName: string;
+    userHasAccessToAllTenants?: MultiTenantPluginConfig['userHasAccessToAllTenants'];
+    value: unknown;
+};
+export declare const isValidTenantAssignment: ({ previousValue, req, tenantsArrayFieldName, tenantsArrayTenantFieldName, userHasAccessToAllTenants, value, }: Args) => boolean;
+export {};
+//# sourceMappingURL=isValidTenantAssignment.d.ts.map

package/dist/utilities/isValidTenantAssignment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isValidTenantAssignment.d.ts","sourceRoot":"","sources":["../../src/utilities/isValidTenantAssignment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAK1D,KAAK,IAAI,GAAG;IACV,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,GAAG,EAAE,cAAc,CAAA;IACnB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,2BAA2B,EAAE,MAAM,CAAA;IACnC,yBAAyB,CAAC,EAAE,uBAAuB,CAAC,2BAA2B,CAAC,CAAA;IAChF,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAED,eAAO,MAAM,uBAAuB,kHAOjC,IAAI,KAAG,OAgCT,CAAA"}

package/dist/utilities/isValidTenantAssignment.js

@@ -0,0 +1,28 @@
+import { getTenantIDsFromValue } from './getTenantIDsFromValue.js';
+import { getUserTenantIDs } from './getUserTenantIDs.js';
+export const isValidTenantAssignment = ({ previousValue, req, tenantsArrayFieldName, tenantsArrayTenantFieldName, userHasAccessToAllTenants, value })=>{
+    const { user } = req;
+    if (user) {
+        if (userHasAccessToAllTenants?.(user)) {
+            return true;
+        }
+    } else if (req.payloadAPI === 'local') {
+        return true;
+    }
+    const submittedDocumentTenantIDs = getTenantIDsFromValue(value);
+    const storedDocumentTenantIDs = getTenantIDsFromValue(previousValue);
+    if (!hasTenantValueChanged(submittedDocumentTenantIDs, storedDocumentTenantIDs)) {
+        return true;
+    }
+    if (submittedDocumentTenantIDs.length === 0) {
+        return false;
+    }
+    const userAssignedTenantIDs = getUserTenantIDs(user, {
+        tenantsArrayFieldName,
+        tenantsArrayTenantFieldName
+    });
+    return submittedDocumentTenantIDs.every((tenantID)=>userAssignedTenantIDs.some((userAssignedTenantID)=>String(userAssignedTenantID) === String(tenantID)));
+};
+const hasTenantValueChanged = (submittedTenantIDs, storedTenantIDs)=>submittedTenantIDs.length !== storedTenantIDs.length || submittedTenantIDs.some((tenantID)=>!storedTenantIDs.includes(tenantID));
+
+//# sourceMappingURL=isValidTenantAssignment.js.map

package/dist/utilities/isValidTenantAssignment.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/isValidTenantAssignment.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport type { MultiTenantPluginConfig } from '../types.js'\n\nimport { getTenantIDsFromValue } from './getTenantIDsFromValue.js'\nimport { getUserTenantIDs } from './getUserTenantIDs.js'\n\ntype Args = {\n  previousValue?: unknown\n  req: PayloadRequest\n  tenantsArrayFieldName: string\n  tenantsArrayTenantFieldName: string\n  userHasAccessToAllTenants?: MultiTenantPluginConfig['userHasAccessToAllTenants']\n  value: unknown\n}\n\nexport const isValidTenantAssignment = ({\n  previousValue,\n  req,\n  tenantsArrayFieldName,\n  tenantsArrayTenantFieldName,\n  userHasAccessToAllTenants,\n  value,\n}: Args): boolean => {\n  const { user } = req\n\n  if (user) {\n    if (userHasAccessToAllTenants?.(user)) {\n      return true\n    }\n  } else if (req.payloadAPI === 'local') {\n    return true\n  }\n\n  const submittedDocumentTenantIDs = getTenantIDsFromValue(value)\n  const storedDocumentTenantIDs = getTenantIDsFromValue(previousValue)\n\n  if (!hasTenantValueChanged(submittedDocumentTenantIDs, storedDocumentTenantIDs)) {\n    return true\n  }\n\n  if (submittedDocumentTenantIDs.length === 0) {\n    return false\n  }\n\n  const userAssignedTenantIDs = getUserTenantIDs(user, {\n    tenantsArrayFieldName,\n    tenantsArrayTenantFieldName,\n  })\n\n  return submittedDocumentTenantIDs.every((tenantID) =>\n    userAssignedTenantIDs.some(\n      (userAssignedTenantID) => String(userAssignedTenantID) === String(tenantID),\n    ),\n  )\n}\n\nconst hasTenantValueChanged = (\n  submittedTenantIDs: (number | string)[],\n  storedTenantIDs: (number | string)[],\n): boolean =>\n  submittedTenantIDs.length !== storedTenantIDs.length ||\n  submittedTenantIDs.some((tenantID) => !storedTenantIDs.includes(tenantID))\n"],"names":["getTenantIDsFromValue","getUserTenantIDs","isValidTenantAssignment","previousValue","req","tenantsArrayFieldName","tenantsArrayTenantFieldName","userHasAccessToAllTenants","value","user","payloadAPI","submittedDocumentTenantIDs","storedDocumentTenantIDs","hasTenantValueChanged","length","userAssignedTenantIDs","every","tenantID","some","userAssignedTenantID","String","submittedTenantIDs","storedTenantIDs","includes"],"mappings":"AAIA,SAASA,qBAAqB,QAAQ,6BAA4B;AAClE,SAASC,gBAAgB,QAAQ,wBAAuB;AAWxD,OAAO,MAAMC,0BAA0B,CAAC,EACtCC,aAAa,EACbC,GAAG,EACHC,qBAAqB,EACrBC,2BAA2B,EAC3BC,yBAAyB,EACzBC,KAAK,EACA;IACL,MAAM,EAAEC,IAAI,EAAE,GAAGL;IAEjB,IAAIK,MAAM;QACR,IAAIF,4BAA4BE,OAAO;YACrC,OAAO;QACT;IACF,OAAO,IAAIL,IAAIM,UAAU,KAAK,SAAS;QACrC,OAAO;IACT;IAEA,MAAMC,6BAA6BX,sBAAsBQ;IACzD,MAAMI,0BAA0BZ,sBAAsBG;IAEtD,IAAI,CAACU,sBAAsBF,4BAA4BC,0BAA0B;QAC/E,OAAO;IACT;IAEA,IAAID,2BAA2BG,MAAM,KAAK,GAAG;QAC3C,OAAO;IACT;IAEA,MAAMC,wBAAwBd,iBAAiBQ,MAAM;QACnDJ;QACAC;IACF;IAEA,OAAOK,2BAA2BK,KAAK,CAAC,CAACC,WACvCF,sBAAsBG,IAAI,CACxB,CAACC,uBAAyBC,OAAOD,0BAA0BC,OAAOH;AAGxE,EAAC;AAED,MAAMJ,wBAAwB,CAC5BQ,oBACAC,kBAEAD,mBAAmBP,MAAM,KAAKQ,gBAAgBR,MAAM,IACpDO,mBAAmBH,IAAI,CAAC,CAACD,WAAa,CAACK,gBAAgBC,QAAQ,CAACN"}

package/dist/utilities/miniChalk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"miniChalk.d.ts","sourceRoot":"","sources":["../../src/utilities/miniChalk.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,SAAS;gBACR,MAAM;gBACN,MAAM;gBACN,MAAM;eACP,MAAM;iBACJ,MAAM;mBACJ,MAAM;eACV,MAAM;qBACA,MAAM;iBACV,MAAM;kBACL,MAAM;mBAGL,MAAM;sBACH,MAAM;CACzB,CAAA"}
+{"version":3,"file":"miniChalk.d.ts","sourceRoot":"","sources":["../../src/utilities/miniChalk.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,SAAS;IACpB,IAAI,QAAQ,MAAM;IAClB,IAAI,QAAQ,MAAM;IAClB,IAAI,QAAQ,MAAM;IAClB,GAAG,QAAQ,MAAM;IACjB,KAAK,QAAQ,MAAM;IACnB,OAAO,QAAQ,MAAM;IACrB,GAAG,QAAQ,MAAM;IACjB,SAAS,QAAQ,MAAM;IACvB,KAAK,QAAQ,MAAM;IACnB,MAAM,QAAQ,MAAM;IAGpB,OAAO,QAAQ,MAAM;IACrB,UAAU,QAAQ,MAAM;CACzB,CAAA"}

package/dist/utilities/shouldRefreshTenantSelection.d.ts

@@ -0,0 +1,5 @@
+export declare const shouldRefreshTenantSelection: ({ initialValue, tenantCookie, }: {
+    initialValue?: number | string;
+    tenantCookie?: string;
+}) => boolean;
+//# sourceMappingURL=shouldRefreshTenantSelection.d.ts.map

package/dist/utilities/shouldRefreshTenantSelection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shouldRefreshTenantSelection.d.ts","sourceRoot":"","sources":["../../src/utilities/shouldRefreshTenantSelection.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,oCAGtC;IACD,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,KAAG,OAAiD,CAAA"}

package/dist/utilities/shouldRefreshTenantSelection.js

@@ -0,0 +1,3 @@
+export const shouldRefreshTenantSelection = ({ initialValue, tenantCookie })=>!initialValue && Boolean(tenantCookie);
+
+//# sourceMappingURL=shouldRefreshTenantSelection.js.map

package/dist/utilities/shouldRefreshTenantSelection.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/shouldRefreshTenantSelection.ts"],"sourcesContent":["export const shouldRefreshTenantSelection = ({\n  initialValue,\n  tenantCookie,\n}: {\n  initialValue?: number | string\n  tenantCookie?: string\n}): boolean => !initialValue && Boolean(tenantCookie)\n"],"names":["shouldRefreshTenantSelection","initialValue","tenantCookie","Boolean"],"mappings":"AAAA,OAAO,MAAMA,+BAA+B,CAAC,EAC3CC,YAAY,EACZC,YAAY,EAIb,GAAc,CAACD,gBAAgBE,QAAQD,cAAa"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/plugin-multi-tenant",
-  "version": "4.0.0-internal.8ba6b5b",
+  "version": "4.0.0-internal.934870d",
   "description": "Multi Tenant plugin for Payload",
   "keywords": [
     "payload",
@@ -26,7 +26,6 @@
     }
   ],
   "sideEffects": [
-    "*.scss",
     "*.css"
   ],
   "type": "module",
@@ -81,13 +80,13 @@
   ],
   "devDependencies": {
     "@payloadcms/eslint-config": "3.28.0",
-    "@payloadcms/translations": "4.0.0-internal.8ba6b5b",
-    "@payloadcms/ui": "4.0.0-internal.8ba6b5b",
-    "payload": "4.0.0-internal.8ba6b5b"
+    "@payloadcms/translations": "4.0.0-internal.934870d",
+    "@payloadcms/ui": "4.0.0-internal.934870d",
+    "payload": "4.0.0-internal.934870d"
   },
   "peerDependencies": {
-    "@payloadcms/ui": "4.0.0-internal.8ba6b5b",
-    "payload": "4.0.0-internal.8ba6b5b"
+    "@payloadcms/ui": "4.0.0-internal.934870d",
+    "payload": "4.0.0-internal.934870d"
   },
   "homepage:": "https://payloadcms.com",
   "scripts": {
@@ -96,7 +95,7 @@
     "build:swc": "swc ./src -d ./dist --config-file .swcrc --strip-leading-paths",
     "build:types": "tsc --emitDeclarationOnly --outDir dist",
     "clean": "rimraf {dist,*.tsbuildinfo}",
-    "copyfiles": "copyfiles -u 1 \"src/**/*.{html,css,scss,ttf,woff,woff2,eot,svg,jpg,png,json}\" dist/",
+    "copyfiles": "copyfiles -u 1 -e \"**/*.spec.*\" \"src/**/*.{html,css,scss,ttf,woff,woff2,eot,svg,jpg,png,json}\" dist/",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "pack:plugin": "pnpm build && pnpm pack"

package/dist/utilities/combineWhereConstraints.d.ts

@@ -1,3 +0,0 @@
-import type { Where } from 'payload';
-export declare function combineWhereConstraints(constraints: Array<Where>): Where;
-//# sourceMappingURL=combineWhereConstraints.d.ts.map

package/dist/utilities/combineWhereConstraints.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"combineWhereConstraints.d.ts","sourceRoot":"","sources":["../../src/utilities/combineWhereConstraints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAEpC,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAgBxE"}

package/dist/utilities/combineWhereConstraints.js

@@ -1,19 +0,0 @@
-export function combineWhereConstraints(constraints) {
-    if (constraints.length === 0) {
-        return {};
-    }
-    if (constraints.length === 1 && constraints[0]) {
-        return constraints[0];
-    }
-    const andConstraint = {
-        and: []
-    };
-    constraints.forEach((constraint)=>{
-        if (andConstraint.and && constraint && typeof constraint === 'object') {
-            andConstraint.and.push(constraint);
-        }
-    });
-    return andConstraint;
-}
-
-//# sourceMappingURL=combineWhereConstraints.js.map

package/dist/utilities/combineWhereConstraints.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/utilities/combineWhereConstraints.ts"],"sourcesContent":["import type { Where } from 'payload'\n\nexport function combineWhereConstraints(constraints: Array<Where>): Where {\n  if (constraints.length === 0) {\n    return {}\n  }\n  if (constraints.length === 1 && constraints[0]) {\n    return constraints[0]\n  }\n  const andConstraint: Where = {\n    and: [],\n  }\n  constraints.forEach((constraint) => {\n    if (andConstraint.and && constraint && typeof constraint === 'object') {\n      andConstraint.and.push(constraint)\n    }\n  })\n  return andConstraint\n}\n"],"names":["combineWhereConstraints","constraints","length","andConstraint","and","forEach","constraint","push"],"mappings":"AAEA,OAAO,SAASA,wBAAwBC,WAAyB;IAC/D,IAAIA,YAAYC,MAAM,KAAK,GAAG;QAC5B,OAAO,CAAC;IACV;IACA,IAAID,YAAYC,MAAM,KAAK,KAAKD,WAAW,CAAC,EAAE,EAAE;QAC9C,OAAOA,WAAW,CAAC,EAAE;IACvB;IACA,MAAME,gBAAuB;QAC3BC,KAAK,EAAE;IACT;IACAH,YAAYI,OAAO,CAAC,CAACC;QACnB,IAAIH,cAAcC,GAAG,IAAIE,cAAc,OAAOA,eAAe,UAAU;YACrEH,cAAcC,GAAG,CAACG,IAAI,CAACD;QACzB;IACF;IACA,OAAOH;AACT"}