@payloadcms/storage-azure 3.89.0-internal.95c9cba → 3.90.0

package/dist/generateURL.js

@@ -1,12 +1,12 @@
-import { getFileKey } from '@payloadcms/plugin-cloud-storage/utilities';
+import { buildStoragePathData } from '@payloadcms/plugin-cloud-storage/utilities';
 export function generateURL({ baseURL, collectionPrefix = '', containerName, filename, prefix, useCompositePrefixes = false }) {
-    const { fileKey } = getFileKey({
+    const { storageFilePath } = buildStoragePathData({
         collectionPrefix,
         docPrefix: prefix,
         filename,
         useCompositePrefixes
     });
-    return `${baseURL}/${containerName}/${fileKey}`;
+    return `${baseURL}/${containerName}/${storageFilePath}`;
 }
 
 //# sourceMappingURL=generateURL.js.map

package/dist/generateURL.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/generateURL.ts"],"sourcesContent":["import { getFileKey } from '@payloadcms/plugin-cloud-storage/utilities'\n\ninterface GenerateURLArgs {\n  baseURL: string\n  collectionPrefix?: string\n  containerName: string\n  filename: string\n  prefix: string\n  useCompositePrefixes?: boolean\n}\n\nexport function generateURL({\n  baseURL,\n  collectionPrefix = '',\n  containerName,\n  filename,\n  prefix,\n  useCompositePrefixes = false,\n}: GenerateURLArgs): string {\n  const { fileKey } = getFileKey({\n    collectionPrefix,\n    docPrefix: prefix,\n    filename,\n    useCompositePrefixes,\n  })\n\n  return `${baseURL}/${containerName}/${fileKey}`\n}\n"],"names":["getFileKey","generateURL","baseURL","collectionPrefix","containerName","filename","prefix","useCompositePrefixes","fileKey","docPrefix"],"mappings":"AAAA,SAASA,UAAU,QAAQ,6CAA4C;AAWvE,OAAO,SAASC,YAAY,EAC1BC,OAAO,EACPC,mBAAmB,EAAE,EACrBC,aAAa,EACbC,QAAQ,EACRC,MAAM,EACNC,uBAAuB,KAAK,EACZ;IAChB,MAAM,EAAEC,OAAO,EAAE,GAAGR,WAAW;QAC7BG;QACAM,WAAWH;QACXD;QACAE;IACF;IAEA,OAAO,GAAGL,QAAQ,CAAC,EAAEE,cAAc,CAAC,EAAEI,SAAS;AACjD"}
+{"version":3,"sources":["../src/generateURL.ts"],"sourcesContent":["import { buildStoragePathData } from '@payloadcms/plugin-cloud-storage/utilities'\n\ninterface GenerateURLArgs {\n  baseURL: string\n  collectionPrefix?: string\n  containerName: string\n  filename: string\n  prefix: string\n  useCompositePrefixes?: boolean\n}\n\nexport function generateURL({\n  baseURL,\n  collectionPrefix = '',\n  containerName,\n  filename,\n  prefix,\n  useCompositePrefixes = false,\n}: GenerateURLArgs): string {\n  const { storageFilePath } = buildStoragePathData({\n    collectionPrefix,\n    docPrefix: prefix,\n    filename,\n    useCompositePrefixes,\n  })\n\n  return `${baseURL}/${containerName}/${storageFilePath}`\n}\n"],"names":["buildStoragePathData","generateURL","baseURL","collectionPrefix","containerName","filename","prefix","useCompositePrefixes","storageFilePath","docPrefix"],"mappings":"AAAA,SAASA,oBAAoB,QAAQ,6CAA4C;AAWjF,OAAO,SAASC,YAAY,EAC1BC,OAAO,EACPC,mBAAmB,EAAE,EACrBC,aAAa,EACbC,QAAQ,EACRC,MAAM,EACNC,uBAAuB,KAAK,EACZ;IAChB,MAAM,EAAEC,eAAe,EAAE,GAAGR,qBAAqB;QAC/CG;QACAM,WAAWH;QACXD;QACAE;IACF;IAEA,OAAO,GAAGL,QAAQ,CAAC,EAAEE,cAAc,CAAC,EAAEI,iBAAiB;AACzD"}

package/dist/getFile.d.ts

@@ -1,16 +1,16 @@
 import type { ContainerClient } from '@azure/storage-blob';
-import type { CollectionConfig, PayloadRequest } from 'payload';
+import type { CollectionConfig, PayloadRequest, TypeWithID } from 'payload';
 interface GetFileArgs {
     client: ContainerClient;
     clientUploadContext?: unknown;
     collection: CollectionConfig;
     collectionPrefix?: string;
+    doc?: TypeWithID;
     filename: string;
     incomingHeaders?: Headers;
-    prefixQueryParam?: string;
     req: PayloadRequest;
     useCompositePrefixes?: boolean;
 }
-export declare function getFile({ client, clientUploadContext, collection, collectionPrefix, filename, incomingHeaders, prefixQueryParam, req, useCompositePrefixes, }: GetFileArgs): Promise<Response>;
+export declare function getFile({ client, clientUploadContext, collection, collectionPrefix, doc, filename, incomingHeaders, req, useCompositePrefixes, }: GetFileArgs): Promise<Response>;
 export {};
 //# sourceMappingURL=getFile.d.ts.map

package/dist/getFile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getFile.d.ts","sourceRoot":"","sources":["../src/getFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA8B,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAU/D,UAAU,WAAW;IACnB,MAAM,EAAE,eAAe,CAAA;IACvB,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,UAAU,EAAE,gBAAgB,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,GAAG,EAAE,cAAc,CAAA;IACnB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B;AAgCD,wBAAsB,OAAO,CAAC,EAC5B,MAAM,EACN,mBAAmB,EACnB,UAAU,EACV,gBAAqB,EACrB,QAAQ,EACR,eAAe,EACf,gBAAgB,EAChB,GAAG,EACH,oBAA4B,GAC7B,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAuHjC"}
+{"version":3,"file":"getFile.d.ts","sourceRoot":"","sources":["../src/getFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA8B,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAW3E,UAAU,WAAW;IACnB,MAAM,EAAE,eAAe,CAAA;IACvB,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,UAAU,EAAE,gBAAgB,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,GAAG,CAAC,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,GAAG,EAAE,cAAc,CAAA;IACnB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B;AAgCD,wBAAsB,OAAO,CAAC,EAC5B,MAAM,EACN,mBAAmB,EACnB,UAAU,EACV,gBAAqB,EACrB,GAAG,EACH,QAAQ,EACR,eAAe,EACf,GAAG,EACH,oBAA4B,GAC7B,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkHjC"}

package/dist/getFile.js

@@ -1,6 +1,6 @@
 import { RestError } from '@azure/storage-blob';
-import { getFilePrefix as getDocPrefix, getFileKey } from '@payloadcms/plugin-cloud-storage/utilities';
-import { getRangeRequestInfo } from 'payload/internal';
+import { getStorageFilePath } from '@payloadcms/plugin-cloud-storage/utilities';
+import { getRangeRequestInfo, isXmlMimeType, UPLOAD_CONTENT_SECURITY_POLICY } from 'payload/internal';
 const isNodeReadableStream = (body)=>{
     return typeof body === 'object' && body !== null && 'pipe' in body && typeof body.pipe === 'function' && 'destroy' in body && typeof body.destroy === 'function';
 };
@@ -13,7 +13,7 @@ const abortRequestAndDestroyStream = ({ abortController, blob })=>{
         blob.readableStreamBody.destroy();
     }
 };
-export async function getFile({ client, clientUploadContext, collection, collectionPrefix = '', filename, incomingHeaders, prefixQueryParam, req, useCompositePrefixes = false }) {
+export async function getFile({ client, clientUploadContext, collection, collectionPrefix = '', doc, filename, incomingHeaders, req, useCompositePrefixes = false }) {
     let blob = undefined;
     let streamed = false;
     const abortController = new AbortController();
@@ -26,20 +26,16 @@ export async function getFile({ client, clientUploadContext, collection, collect
         });
     }
     try {
-        const docPrefix = await getDocPrefix({
+        const filePath = await getStorageFilePath({
             clientUploadContext,
             collection,
-            filename,
-            prefixQueryParam,
-            req
-        });
-        const { fileKey } = getFileKey({
             collectionPrefix,
-            docPrefix,
+            doc,
             filename,
+            req,
             useCompositePrefixes
         });
-        const blockBlobClient = client.getBlockBlobClient(fileKey);
+        const blockBlobClient = client.getBlockBlobClient(filePath);
         // Get file size for range validation
         const properties = await blockBlobClient.getProperties();
         const fileSize = properties.contentLength;
@@ -76,9 +72,9 @@ export async function getFile({ client, clientUploadContext, collection, collect
         if (properties.etag) {
             headers.append('ETag', String(properties.etag));
         }
-        // Add Content-Security-Policy header for SVG files to prevent executable code
-        if (properties.contentType === 'image/svg+xml') {
-            headers.append('Content-Security-Policy', "script-src 'none'");
+        // Add Content-Security-Policy header for XML-family files
+        if (isXmlMimeType(properties.contentType)) {
+            headers.append('Content-Security-Policy', UPLOAD_CONTENT_SECURITY_POLICY);
         }
         const etagFromHeaders = req.headers.get('etag') || req.headers.get('if-none-match');
         if (collection.upload && typeof collection.upload === 'object' && typeof collection.upload.modifyResponseHeaders === 'function') {

package/dist/getFile.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/getFile.ts"],"sourcesContent":["import type { BlobDownloadResponseParsed, ContainerClient } from '@azure/storage-blob'\nimport type { CollectionConfig, PayloadRequest } from 'payload'\nimport type { Readable } from 'stream'\n\nimport { RestError } from '@azure/storage-blob'\nimport {\n  getFilePrefix as getDocPrefix,\n  getFileKey,\n} from '@payloadcms/plugin-cloud-storage/utilities'\nimport { getRangeRequestInfo } from 'payload/internal'\n\ninterface GetFileArgs {\n  client: ContainerClient\n  clientUploadContext?: unknown\n  collection: CollectionConfig\n  collectionPrefix?: string\n  filename: string\n  incomingHeaders?: Headers\n  prefixQueryParam?: string\n  req: PayloadRequest\n  useCompositePrefixes?: boolean\n}\n\nconst isNodeReadableStream = (\n  body: BlobDownloadResponseParsed['readableStreamBody'],\n): body is Readable => {\n  return (\n    typeof body === 'object' &&\n    body !== null &&\n    'pipe' in body &&\n    typeof body.pipe === 'function' &&\n    'destroy' in body &&\n    typeof body.destroy === 'function'\n  )\n}\n\nconst abortRequestAndDestroyStream = ({\n  abortController,\n  blob,\n}: {\n  abortController: AbortController\n  blob?: BlobDownloadResponseParsed\n}) => {\n  try {\n    abortController.abort()\n  } catch {\n    /* noop */\n  }\n  if (blob?.readableStreamBody && isNodeReadableStream(blob.readableStreamBody)) {\n    blob.readableStreamBody.destroy()\n  }\n}\n\nexport async function getFile({\n  client,\n  clientUploadContext,\n  collection,\n  collectionPrefix = '',\n  filename,\n  incomingHeaders,\n  prefixQueryParam,\n  req,\n  useCompositePrefixes = false,\n}: GetFileArgs): Promise<Response> {\n  let blob: BlobDownloadResponseParsed | undefined = undefined\n  let streamed = false\n\n  const abortController = new AbortController()\n  if (req.signal) {\n    req.signal.addEventListener('abort', () => {\n      abortRequestAndDestroyStream({ abortController, blob })\n    })\n  }\n\n  try {\n    const docPrefix = await getDocPrefix({\n      clientUploadContext,\n      collection,\n      filename,\n      prefixQueryParam,\n      req,\n    })\n\n    const { fileKey } = getFileKey({\n      collectionPrefix,\n      docPrefix,\n      filename,\n      useCompositePrefixes,\n    })\n\n    const blockBlobClient = client.getBlockBlobClient(fileKey)\n\n    // Get file size for range validation\n    const properties = await blockBlobClient.getProperties()\n    const fileSize = properties.contentLength\n\n    if (!fileSize) {\n      return new Response('Internal Server Error', { status: 500 })\n    }\n\n    // Handle range request\n    const rangeHeader = req.headers.get('range')\n    const rangeResult = getRangeRequestInfo({ fileSize, rangeHeader })\n\n    if (rangeResult.type === 'invalid') {\n      return new Response(null, {\n        headers: new Headers(rangeResult.headers),\n        status: rangeResult.status,\n      })\n    }\n\n    // Download with range if partial\n    blob =\n      rangeResult.type === 'partial'\n        ? await blockBlobClient.download(\n            rangeResult.rangeStart,\n            rangeResult.rangeEnd - rangeResult.rangeStart + 1,\n            { abortSignal: abortController.signal },\n          )\n        : await blockBlobClient.download(0, undefined, { abortSignal: abortController.signal })\n\n    let headers = new Headers(incomingHeaders)\n\n    // Add range-related headers from the result\n    for (const [key, value] of Object.entries(rangeResult.headers)) {\n      headers.append(key, value)\n    }\n\n    // Add Azure-specific headers\n    headers.append('Content-Type', String(properties.contentType))\n    if (properties.etag) {\n      headers.append('ETag', String(properties.etag))\n    }\n\n    // Add Content-Security-Policy header for SVG files to prevent executable code\n    if (properties.contentType === 'image/svg+xml') {\n      headers.append('Content-Security-Policy', \"script-src 'none'\")\n    }\n\n    const etagFromHeaders = req.headers.get('etag') || req.headers.get('if-none-match')\n\n    if (\n      collection.upload &&\n      typeof collection.upload === 'object' &&\n      typeof collection.upload.modifyResponseHeaders === 'function'\n    ) {\n      headers = collection.upload.modifyResponseHeaders({ headers }) || headers\n    }\n\n    if (etagFromHeaders && etagFromHeaders === properties.etag) {\n      return new Response(null, {\n        headers,\n        status: 304,\n      })\n    }\n\n    if (!blob.readableStreamBody || !isNodeReadableStream(blob.readableStreamBody)) {\n      return new Response('Internal Server Error', { status: 500 })\n    }\n\n    const stream = blob.readableStreamBody\n    stream.on('error', (err: Error) => {\n      req.payload.logger.error({\n        err,\n        msg: 'Error while streaming Azure blob (aborting)',\n      })\n      abortRequestAndDestroyStream({ abortController, blob })\n    })\n\n    streamed = true\n    return new Response(stream, { headers, status: rangeResult.status })\n  } catch (err: unknown) {\n    if (err instanceof RestError && err.statusCode === 404) {\n      return new Response(null, { status: 404, statusText: 'Not Found' })\n    }\n    req.payload.logger.error(err)\n    return new Response('Internal Server Error', { status: 500 })\n  } finally {\n    if (!streamed) {\n      abortRequestAndDestroyStream({ abortController, blob })\n    }\n  }\n}\n"],"names":["RestError","getFilePrefix","getDocPrefix","getFileKey","getRangeRequestInfo","isNodeReadableStream","body","pipe","destroy","abortRequestAndDestroyStream","abortController","blob","abort","readableStreamBody","getFile","client","clientUploadContext","collection","collectionPrefix","filename","incomingHeaders","prefixQueryParam","req","useCompositePrefixes","undefined","streamed","AbortController","signal","addEventListener","docPrefix","fileKey","blockBlobClient","getBlockBlobClient","properties","getProperties","fileSize","contentLength","Response","status","rangeHeader","headers","get","rangeResult","type","Headers","download","rangeStart","rangeEnd","abortSignal","key","value","Object","entries","append","String","contentType","etag","etagFromHeaders","upload","modifyResponseHeaders","stream","on","err","payload","logger","error","msg","statusCode","statusText"],"mappings":"AAIA,SAASA,SAAS,QAAQ,sBAAqB;AAC/C,SACEC,iBAAiBC,YAAY,EAC7BC,UAAU,QACL,6CAA4C;AACnD,SAASC,mBAAmB,QAAQ,mBAAkB;AActD,MAAMC,uBAAuB,CAC3BC;IAEA,OACE,OAAOA,SAAS,YAChBA,SAAS,QACT,UAAUA,QACV,OAAOA,KAAKC,IAAI,KAAK,cACrB,aAAaD,QACb,OAAOA,KAAKE,OAAO,KAAK;AAE5B;AAEA,MAAMC,+BAA+B,CAAC,EACpCC,eAAe,EACfC,IAAI,EAIL;IACC,IAAI;QACFD,gBAAgBE,KAAK;IACvB,EAAE,OAAM;IACN,QAAQ,GACV;IACA,IAAID,MAAME,sBAAsBR,qBAAqBM,KAAKE,kBAAkB,GAAG;QAC7EF,KAAKE,kBAAkB,CAACL,OAAO;IACjC;AACF;AAEA,OAAO,eAAeM,QAAQ,EAC5BC,MAAM,EACNC,mBAAmB,EACnBC,UAAU,EACVC,mBAAmB,EAAE,EACrBC,QAAQ,EACRC,eAAe,EACfC,gBAAgB,EAChBC,GAAG,EACHC,uBAAuB,KAAK,EAChB;IACZ,IAAIZ,OAA+Ca;IACnD,IAAIC,WAAW;IAEf,MAAMf,kBAAkB,IAAIgB;IAC5B,IAAIJ,IAAIK,MAAM,EAAE;QACdL,IAAIK,MAAM,CAACC,gBAAgB,CAAC,SAAS;YACnCnB,6BAA6B;gBAAEC;gBAAiBC;YAAK;QACvD;IACF;IAEA,IAAI;QACF,MAAMkB,YAAY,MAAM3B,aAAa;YACnCc;YACAC;YACAE;YACAE;YACAC;QACF;QAEA,MAAM,EAAEQ,OAAO,EAAE,GAAG3B,WAAW;YAC7Be;YACAW;YACAV;YACAI;QACF;QAEA,MAAMQ,kBAAkBhB,OAAOiB,kBAAkB,CAACF;QAElD,qCAAqC;QACrC,MAAMG,aAAa,MAAMF,gBAAgBG,aAAa;QACtD,MAAMC,WAAWF,WAAWG,aAAa;QAEzC,IAAI,CAACD,UAAU;YACb,OAAO,IAAIE,SAAS,yBAAyB;gBAAEC,QAAQ;YAAI;QAC7D;QAEA,uBAAuB;QACvB,MAAMC,cAAcjB,IAAIkB,OAAO,CAACC,GAAG,CAAC;QACpC,MAAMC,cAActC,oBAAoB;YAAE+B;YAAUI;QAAY;QAEhE,IAAIG,YAAYC,IAAI,KAAK,WAAW;YAClC,OAAO,IAAIN,SAAS,MAAM;gBACxBG,SAAS,IAAII,QAAQF,YAAYF,OAAO;gBACxCF,QAAQI,YAAYJ,MAAM;YAC5B;QACF;QAEA,iCAAiC;QACjC3B,OACE+B,YAAYC,IAAI,KAAK,YACjB,MAAMZ,gBAAgBc,QAAQ,CAC5BH,YAAYI,UAAU,EACtBJ,YAAYK,QAAQ,GAAGL,YAAYI,UAAU,GAAG,GAChD;YAAEE,aAAatC,gBAAgBiB,MAAM;QAAC,KAExC,MAAMI,gBAAgBc,QAAQ,CAAC,GAAGrB,WAAW;YAAEwB,aAAatC,gBAAgBiB,MAAM;QAAC;QAEzF,IAAIa,UAAU,IAAII,QAAQxB;QAE1B,4CAA4C;QAC5C,KAAK,MAAM,CAAC6B,KAAKC,MAAM,IAAIC,OAAOC,OAAO,CAACV,YAAYF,OAAO,EAAG;YAC9DA,QAAQa,MAAM,CAACJ,KAAKC;QACtB;QAEA,6BAA6B;QAC7BV,QAAQa,MAAM,CAAC,gBAAgBC,OAAOrB,WAAWsB,WAAW;QAC5D,IAAItB,WAAWuB,IAAI,EAAE;YACnBhB,QAAQa,MAAM,CAAC,QAAQC,OAAOrB,WAAWuB,IAAI;QAC/C;QAEA,8EAA8E;QAC9E,IAAIvB,WAAWsB,WAAW,KAAK,iBAAiB;YAC9Cf,QAAQa,MAAM,CAAC,2BAA2B;QAC5C;QAEA,MAAMI,kBAAkBnC,IAAIkB,OAAO,CAACC,GAAG,CAAC,WAAWnB,IAAIkB,OAAO,CAACC,GAAG,CAAC;QAEnE,IACExB,WAAWyC,MAAM,IACjB,OAAOzC,WAAWyC,MAAM,KAAK,YAC7B,OAAOzC,WAAWyC,MAAM,CAACC,qBAAqB,KAAK,YACnD;YACAnB,UAAUvB,WAAWyC,MAAM,CAACC,qBAAqB,CAAC;gBAAEnB;YAAQ,MAAMA;QACpE;QAEA,IAAIiB,mBAAmBA,oBAAoBxB,WAAWuB,IAAI,EAAE;YAC1D,OAAO,IAAInB,SAAS,MAAM;gBACxBG;gBACAF,QAAQ;YACV;QACF;QAEA,IAAI,CAAC3B,KAAKE,kBAAkB,IAAI,CAACR,qBAAqBM,KAAKE,kBAAkB,GAAG;YAC9E,OAAO,IAAIwB,SAAS,yBAAyB;gBAAEC,QAAQ;YAAI;QAC7D;QAEA,MAAMsB,SAASjD,KAAKE,kBAAkB;QACtC+C,OAAOC,EAAE,CAAC,SAAS,CAACC;YAClBxC,IAAIyC,OAAO,CAACC,MAAM,CAACC,KAAK,CAAC;gBACvBH;gBACAI,KAAK;YACP;YACAzD,6BAA6B;gBAAEC;gBAAiBC;YAAK;QACvD;QAEAc,WAAW;QACX,OAAO,IAAIY,SAASuB,QAAQ;YAAEpB;YAASF,QAAQI,YAAYJ,MAAM;QAAC;IACpE,EAAE,OAAOwB,KAAc;QACrB,IAAIA,eAAe9D,aAAa8D,IAAIK,UAAU,KAAK,KAAK;YACtD,OAAO,IAAI9B,SAAS,MAAM;gBAAEC,QAAQ;gBAAK8B,YAAY;YAAY;QACnE;QACA9C,IAAIyC,OAAO,CAACC,MAAM,CAACC,KAAK,CAACH;QACzB,OAAO,IAAIzB,SAAS,yBAAyB;YAAEC,QAAQ;QAAI;IAC7D,SAAU;QACR,IAAI,CAACb,UAAU;YACbhB,6BAA6B;gBAAEC;gBAAiBC;YAAK;QACvD;IACF;AACF"}
+{"version":3,"sources":["../src/getFile.ts"],"sourcesContent":["import type { BlobDownloadResponseParsed, ContainerClient } from '@azure/storage-blob'\nimport type { CollectionConfig, PayloadRequest, TypeWithID } from 'payload'\nimport type { Readable } from 'stream'\n\nimport { RestError } from '@azure/storage-blob'\nimport { getStorageFilePath } from '@payloadcms/plugin-cloud-storage/utilities'\nimport {\n  getRangeRequestInfo,\n  isXmlMimeType,\n  UPLOAD_CONTENT_SECURITY_POLICY,\n} from 'payload/internal'\n\ninterface GetFileArgs {\n  client: ContainerClient\n  clientUploadContext?: unknown\n  collection: CollectionConfig\n  collectionPrefix?: string\n  doc?: TypeWithID\n  filename: string\n  incomingHeaders?: Headers\n  req: PayloadRequest\n  useCompositePrefixes?: boolean\n}\n\nconst isNodeReadableStream = (\n  body: BlobDownloadResponseParsed['readableStreamBody'],\n): body is Readable => {\n  return (\n    typeof body === 'object' &&\n    body !== null &&\n    'pipe' in body &&\n    typeof body.pipe === 'function' &&\n    'destroy' in body &&\n    typeof body.destroy === 'function'\n  )\n}\n\nconst abortRequestAndDestroyStream = ({\n  abortController,\n  blob,\n}: {\n  abortController: AbortController\n  blob?: BlobDownloadResponseParsed\n}) => {\n  try {\n    abortController.abort()\n  } catch {\n    /* noop */\n  }\n  if (blob?.readableStreamBody && isNodeReadableStream(blob.readableStreamBody)) {\n    blob.readableStreamBody.destroy()\n  }\n}\n\nexport async function getFile({\n  client,\n  clientUploadContext,\n  collection,\n  collectionPrefix = '',\n  doc,\n  filename,\n  incomingHeaders,\n  req,\n  useCompositePrefixes = false,\n}: GetFileArgs): Promise<Response> {\n  let blob: BlobDownloadResponseParsed | undefined = undefined\n  let streamed = false\n\n  const abortController = new AbortController()\n  if (req.signal) {\n    req.signal.addEventListener('abort', () => {\n      abortRequestAndDestroyStream({ abortController, blob })\n    })\n  }\n\n  try {\n    const filePath = await getStorageFilePath({\n      clientUploadContext,\n      collection,\n      collectionPrefix,\n      doc,\n      filename,\n      req,\n      useCompositePrefixes,\n    })\n\n    const blockBlobClient = client.getBlockBlobClient(filePath)\n\n    // Get file size for range validation\n    const properties = await blockBlobClient.getProperties()\n    const fileSize = properties.contentLength\n\n    if (!fileSize) {\n      return new Response('Internal Server Error', { status: 500 })\n    }\n\n    // Handle range request\n    const rangeHeader = req.headers.get('range')\n    const rangeResult = getRangeRequestInfo({ fileSize, rangeHeader })\n\n    if (rangeResult.type === 'invalid') {\n      return new Response(null, {\n        headers: new Headers(rangeResult.headers),\n        status: rangeResult.status,\n      })\n    }\n\n    // Download with range if partial\n    blob =\n      rangeResult.type === 'partial'\n        ? await blockBlobClient.download(\n            rangeResult.rangeStart,\n            rangeResult.rangeEnd - rangeResult.rangeStart + 1,\n            { abortSignal: abortController.signal },\n          )\n        : await blockBlobClient.download(0, undefined, { abortSignal: abortController.signal })\n\n    let headers = new Headers(incomingHeaders)\n\n    // Add range-related headers from the result\n    for (const [key, value] of Object.entries(rangeResult.headers)) {\n      headers.append(key, value)\n    }\n\n    // Add Azure-specific headers\n    headers.append('Content-Type', String(properties.contentType))\n    if (properties.etag) {\n      headers.append('ETag', String(properties.etag))\n    }\n\n    // Add Content-Security-Policy header for XML-family files\n    if (isXmlMimeType(properties.contentType)) {\n      headers.append('Content-Security-Policy', UPLOAD_CONTENT_SECURITY_POLICY)\n    }\n\n    const etagFromHeaders = req.headers.get('etag') || req.headers.get('if-none-match')\n\n    if (\n      collection.upload &&\n      typeof collection.upload === 'object' &&\n      typeof collection.upload.modifyResponseHeaders === 'function'\n    ) {\n      headers = collection.upload.modifyResponseHeaders({ headers }) || headers\n    }\n\n    if (etagFromHeaders && etagFromHeaders === properties.etag) {\n      return new Response(null, {\n        headers,\n        status: 304,\n      })\n    }\n\n    if (!blob.readableStreamBody || !isNodeReadableStream(blob.readableStreamBody)) {\n      return new Response('Internal Server Error', { status: 500 })\n    }\n\n    const stream = blob.readableStreamBody\n    stream.on('error', (err: Error) => {\n      req.payload.logger.error({\n        err,\n        msg: 'Error while streaming Azure blob (aborting)',\n      })\n      abortRequestAndDestroyStream({ abortController, blob })\n    })\n\n    streamed = true\n    return new Response(stream, { headers, status: rangeResult.status })\n  } catch (err: unknown) {\n    if (err instanceof RestError && err.statusCode === 404) {\n      return new Response(null, { status: 404, statusText: 'Not Found' })\n    }\n    req.payload.logger.error(err)\n    return new Response('Internal Server Error', { status: 500 })\n  } finally {\n    if (!streamed) {\n      abortRequestAndDestroyStream({ abortController, blob })\n    }\n  }\n}\n"],"names":["RestError","getStorageFilePath","getRangeRequestInfo","isXmlMimeType","UPLOAD_CONTENT_SECURITY_POLICY","isNodeReadableStream","body","pipe","destroy","abortRequestAndDestroyStream","abortController","blob","abort","readableStreamBody","getFile","client","clientUploadContext","collection","collectionPrefix","doc","filename","incomingHeaders","req","useCompositePrefixes","undefined","streamed","AbortController","signal","addEventListener","filePath","blockBlobClient","getBlockBlobClient","properties","getProperties","fileSize","contentLength","Response","status","rangeHeader","headers","get","rangeResult","type","Headers","download","rangeStart","rangeEnd","abortSignal","key","value","Object","entries","append","String","contentType","etag","etagFromHeaders","upload","modifyResponseHeaders","stream","on","err","payload","logger","error","msg","statusCode","statusText"],"mappings":"AAIA,SAASA,SAAS,QAAQ,sBAAqB;AAC/C,SAASC,kBAAkB,QAAQ,6CAA4C;AAC/E,SACEC,mBAAmB,EACnBC,aAAa,EACbC,8BAA8B,QACzB,mBAAkB;AAczB,MAAMC,uBAAuB,CAC3BC;IAEA,OACE,OAAOA,SAAS,YAChBA,SAAS,QACT,UAAUA,QACV,OAAOA,KAAKC,IAAI,KAAK,cACrB,aAAaD,QACb,OAAOA,KAAKE,OAAO,KAAK;AAE5B;AAEA,MAAMC,+BAA+B,CAAC,EACpCC,eAAe,EACfC,IAAI,EAIL;IACC,IAAI;QACFD,gBAAgBE,KAAK;IACvB,EAAE,OAAM;IACN,QAAQ,GACV;IACA,IAAID,MAAME,sBAAsBR,qBAAqBM,KAAKE,kBAAkB,GAAG;QAC7EF,KAAKE,kBAAkB,CAACL,OAAO;IACjC;AACF;AAEA,OAAO,eAAeM,QAAQ,EAC5BC,MAAM,EACNC,mBAAmB,EACnBC,UAAU,EACVC,mBAAmB,EAAE,EACrBC,GAAG,EACHC,QAAQ,EACRC,eAAe,EACfC,GAAG,EACHC,uBAAuB,KAAK,EAChB;IACZ,IAAIZ,OAA+Ca;IACnD,IAAIC,WAAW;IAEf,MAAMf,kBAAkB,IAAIgB;IAC5B,IAAIJ,IAAIK,MAAM,EAAE;QACdL,IAAIK,MAAM,CAACC,gBAAgB,CAAC,SAAS;YACnCnB,6BAA6B;gBAAEC;gBAAiBC;YAAK;QACvD;IACF;IAEA,IAAI;QACF,MAAMkB,WAAW,MAAM5B,mBAAmB;YACxCe;YACAC;YACAC;YACAC;YACAC;YACAE;YACAC;QACF;QAEA,MAAMO,kBAAkBf,OAAOgB,kBAAkB,CAACF;QAElD,qCAAqC;QACrC,MAAMG,aAAa,MAAMF,gBAAgBG,aAAa;QACtD,MAAMC,WAAWF,WAAWG,aAAa;QAEzC,IAAI,CAACD,UAAU;YACb,OAAO,IAAIE,SAAS,yBAAyB;gBAAEC,QAAQ;YAAI;QAC7D;QAEA,uBAAuB;QACvB,MAAMC,cAAchB,IAAIiB,OAAO,CAACC,GAAG,CAAC;QACpC,MAAMC,cAAcvC,oBAAoB;YAAEgC;YAAUI;QAAY;QAEhE,IAAIG,YAAYC,IAAI,KAAK,WAAW;YAClC,OAAO,IAAIN,SAAS,MAAM;gBACxBG,SAAS,IAAII,QAAQF,YAAYF,OAAO;gBACxCF,QAAQI,YAAYJ,MAAM;YAC5B;QACF;QAEA,iCAAiC;QACjC1B,OACE8B,YAAYC,IAAI,KAAK,YACjB,MAAMZ,gBAAgBc,QAAQ,CAC5BH,YAAYI,UAAU,EACtBJ,YAAYK,QAAQ,GAAGL,YAAYI,UAAU,GAAG,GAChD;YAAEE,aAAarC,gBAAgBiB,MAAM;QAAC,KAExC,MAAMG,gBAAgBc,QAAQ,CAAC,GAAGpB,WAAW;YAAEuB,aAAarC,gBAAgBiB,MAAM;QAAC;QAEzF,IAAIY,UAAU,IAAII,QAAQtB;QAE1B,4CAA4C;QAC5C,KAAK,MAAM,CAAC2B,KAAKC,MAAM,IAAIC,OAAOC,OAAO,CAACV,YAAYF,OAAO,EAAG;YAC9DA,QAAQa,MAAM,CAACJ,KAAKC;QACtB;QAEA,6BAA6B;QAC7BV,QAAQa,MAAM,CAAC,gBAAgBC,OAAOrB,WAAWsB,WAAW;QAC5D,IAAItB,WAAWuB,IAAI,EAAE;YACnBhB,QAAQa,MAAM,CAAC,QAAQC,OAAOrB,WAAWuB,IAAI;QAC/C;QAEA,0DAA0D;QAC1D,IAAIpD,cAAc6B,WAAWsB,WAAW,GAAG;YACzCf,QAAQa,MAAM,CAAC,2BAA2BhD;QAC5C;QAEA,MAAMoD,kBAAkBlC,IAAIiB,OAAO,CAACC,GAAG,CAAC,WAAWlB,IAAIiB,OAAO,CAACC,GAAG,CAAC;QAEnE,IACEvB,WAAWwC,MAAM,IACjB,OAAOxC,WAAWwC,MAAM,KAAK,YAC7B,OAAOxC,WAAWwC,MAAM,CAACC,qBAAqB,KAAK,YACnD;YACAnB,UAAUtB,WAAWwC,MAAM,CAACC,qBAAqB,CAAC;gBAAEnB;YAAQ,MAAMA;QACpE;QAEA,IAAIiB,mBAAmBA,oBAAoBxB,WAAWuB,IAAI,EAAE;YAC1D,OAAO,IAAInB,SAAS,MAAM;gBACxBG;gBACAF,QAAQ;YACV;QACF;QAEA,IAAI,CAAC1B,KAAKE,kBAAkB,IAAI,CAACR,qBAAqBM,KAAKE,kBAAkB,GAAG;YAC9E,OAAO,IAAIuB,SAAS,yBAAyB;gBAAEC,QAAQ;YAAI;QAC7D;QAEA,MAAMsB,SAAShD,KAAKE,kBAAkB;QACtC8C,OAAOC,EAAE,CAAC,SAAS,CAACC;YAClBvC,IAAIwC,OAAO,CAACC,MAAM,CAACC,KAAK,CAAC;gBACvBH;gBACAI,KAAK;YACP;YACAxD,6BAA6B;gBAAEC;gBAAiBC;YAAK;QACvD;QAEAc,WAAW;QACX,OAAO,IAAIW,SAASuB,QAAQ;YAAEpB;YAASF,QAAQI,YAAYJ,MAAM;QAAC;IACpE,EAAE,OAAOwB,KAAc;QACrB,IAAIA,eAAe7D,aAAa6D,IAAIK,UAAU,KAAK,KAAK;YACtD,OAAO,IAAI9B,SAAS,MAAM;gBAAEC,QAAQ;gBAAK8B,YAAY;YAAY;QACnE;QACA7C,IAAIwC,OAAO,CAACC,MAAM,CAACC,KAAK,CAACH;QACzB,OAAO,IAAIzB,SAAS,yBAAyB;YAAEC,QAAQ;QAAI;IAC7D,SAAU;QACR,IAAI,CAACZ,UAAU;YACbhB,6BAA6B;gBAAEC;gBAAiBC;YAAK;QACvD;IACF;AACF"}

package/dist/index.containerAccess.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.containerAccess.spec.d.ts.map

package/dist/index.containerAccess.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.containerAccess.spec.d.ts","sourceRoot":"","sources":["../src/index.containerAccess.spec.ts"],"names":[],"mappings":""}

package/dist/index.containerAccess.spec.js

@@ -0,0 +1,78 @@
+import { describe, expect, it, vi } from 'vitest';
+// Inspect the access level the adapter passes when it provisions a container.
+const { createIfNotExists } = vi.hoisted(()=>({
+        createIfNotExists: vi.fn()
+    }));
+// Capture the closure index.ts hands to the adapter (normally run via onInit).
+const captured = vi.hoisted(()=>({
+        createContainerIfNotExists: undefined
+    }));
+vi.mock('./utils/getStorageClient.js', ()=>({
+        getStorageClient: ()=>({
+                createIfNotExists
+            })
+    }));
+vi.mock('./adapter.js', ()=>({
+        createAzureAdapter: (args)=>{
+            captured.createContainerIfNotExists = args.createContainerIfNotExists;
+            return ()=>({
+                    name: 'azure'
+                });
+        }
+    }));
+vi.mock('@payloadcms/plugin-cloud-storage', ()=>({
+        cloudStoragePlugin: ()=>(config)=>config
+    }));
+const { azureStorage } = await import('./index.js');
+const runContainerCreate = (containerAccess)=>{
+    createIfNotExists.mockClear();
+    azureStorage({
+        allowContainerCreate: true,
+        baseURL: 'https://account.blob.core.windows.net',
+        collections: {
+            media: true
+        },
+        connectionString: 'UseDevelopmentStorage=true',
+        containerAccess,
+        containerName: 'media'
+    })({
+        collections: []
+    });
+    captured.createContainerIfNotExists?.();
+    return createIfNotExists.mock.calls[0]?.[0];
+};
+describe('azureStorage container creation', ()=>{
+    it('should not create the container with anonymous public blob access by default', ()=>{
+        const options = runContainerCreate();
+        expect(createIfNotExists).toHaveBeenCalledTimes(1);
+        // No access level == private. Any public value would bypass Payload's
+        // access-controlled route, so the default must stay private.
+        expect(options?.access).toBeUndefined();
+    });
+    it('should create a private container when containerAccess is private', ()=>{
+        const options = runContainerCreate('private');
+        expect(options?.access).toBeUndefined();
+    });
+    it('should apply public access only when explicitly opted in', ()=>{
+        expect(runContainerCreate('blob')?.access).toBe('blob');
+        expect(runContainerCreate('container')?.access).toBe('container');
+    });
+    it('should surface a creation failure as an awaitable rejection, not a swallowed promise', async ()=>{
+        createIfNotExists.mockClear();
+        createIfNotExists.mockRejectedValueOnce(new Error('AuthorizationFailure: public access is not permitted on this storage account'));
+        azureStorage({
+            allowContainerCreate: true,
+            baseURL: 'https://account.blob.core.windows.net',
+            collections: {
+                media: true
+            },
+            connectionString: 'UseDevelopmentStorage=true',
+            containerName: 'media'
+        })({
+            collections: []
+        });
+        await expect(captured.createContainerIfNotExists?.()).rejects.toThrow('AuthorizationFailure');
+    });
+});
+
+//# sourceMappingURL=index.containerAccess.spec.js.map

package/dist/index.containerAccess.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.containerAccess.spec.ts"],"sourcesContent":["import type { Config } from 'payload'\n\nimport { describe, expect, it, vi } from 'vitest'\n\n// Inspect the access level the adapter passes when it provisions a container.\nconst { createIfNotExists } = vi.hoisted(() => ({ createIfNotExists: vi.fn() }))\n\n// Capture the closure index.ts hands to the adapter (normally run via onInit).\nconst captured = vi.hoisted(\n  () => ({ createContainerIfNotExists: undefined }) as { createContainerIfNotExists?: () => void },\n)\n\nvi.mock('./utils/getStorageClient.js', () => ({\n  getStorageClient: () => ({ createIfNotExists }),\n}))\n\nvi.mock('./adapter.js', () => ({\n  createAzureAdapter: (args: { createContainerIfNotExists: () => void }) => {\n    captured.createContainerIfNotExists = args.createContainerIfNotExists\n    return () => ({ name: 'azure' })\n  },\n}))\n\nvi.mock('@payloadcms/plugin-cloud-storage', () => ({\n  cloudStoragePlugin: () => (config: Config) => config,\n}))\n\nconst { azureStorage } = await import('./index.js')\n\nconst runContainerCreate = (\n  containerAccess?: 'blob' | 'container' | 'private',\n): { access?: string } | undefined => {\n  createIfNotExists.mockClear()\n\n  azureStorage({\n    allowContainerCreate: true,\n    baseURL: 'https://account.blob.core.windows.net',\n    collections: { media: true },\n    connectionString: 'UseDevelopmentStorage=true',\n    containerAccess,\n    containerName: 'media',\n  })({ collections: [] } as unknown as Config)\n\n  captured.createContainerIfNotExists?.()\n\n  return createIfNotExists.mock.calls[0]?.[0] as { access?: string } | undefined\n}\n\ndescribe('azureStorage container creation', () => {\n  it('should not create the container with anonymous public blob access by default', () => {\n    const options = runContainerCreate()\n\n    expect(createIfNotExists).toHaveBeenCalledTimes(1)\n    // No access level == private. Any public value would bypass Payload's\n    // access-controlled route, so the default must stay private.\n    expect(options?.access).toBeUndefined()\n  })\n\n  it('should create a private container when containerAccess is private', () => {\n    const options = runContainerCreate('private')\n\n    expect(options?.access).toBeUndefined()\n  })\n\n  it('should apply public access only when explicitly opted in', () => {\n    expect(runContainerCreate('blob')?.access).toBe('blob')\n    expect(runContainerCreate('container')?.access).toBe('container')\n  })\n\n  it('should surface a creation failure as an awaitable rejection, not a swallowed promise', async () => {\n    createIfNotExists.mockClear()\n    createIfNotExists.mockRejectedValueOnce(\n      new Error('AuthorizationFailure: public access is not permitted on this storage account'),\n    )\n\n    azureStorage({\n      allowContainerCreate: true,\n      baseURL: 'https://account.blob.core.windows.net',\n      collections: { media: true },\n      connectionString: 'UseDevelopmentStorage=true',\n      containerName: 'media',\n    })({ collections: [] } as unknown as Config)\n\n    await expect(captured.createContainerIfNotExists?.()).rejects.toThrow('AuthorizationFailure')\n  })\n})\n"],"names":["describe","expect","it","vi","createIfNotExists","hoisted","fn","captured","createContainerIfNotExists","undefined","mock","getStorageClient","createAzureAdapter","args","name","cloudStoragePlugin","config","azureStorage","runContainerCreate","containerAccess","mockClear","allowContainerCreate","baseURL","collections","media","connectionString","containerName","calls","options","toHaveBeenCalledTimes","access","toBeUndefined","toBe","mockRejectedValueOnce","Error","rejects","toThrow"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAEjD,8EAA8E;AAC9E,MAAM,EAAEC,iBAAiB,EAAE,GAAGD,GAAGE,OAAO,CAAC,IAAO,CAAA;QAAED,mBAAmBD,GAAGG,EAAE;IAAG,CAAA;AAE7E,+EAA+E;AAC/E,MAAMC,WAAWJ,GAAGE,OAAO,CACzB,IAAO,CAAA;QAAEG,4BAA4BC;IAAU,CAAA;AAGjDN,GAAGO,IAAI,CAAC,+BAA+B,IAAO,CAAA;QAC5CC,kBAAkB,IAAO,CAAA;gBAAEP;YAAkB,CAAA;IAC/C,CAAA;AAEAD,GAAGO,IAAI,CAAC,gBAAgB,IAAO,CAAA;QAC7BE,oBAAoB,CAACC;YACnBN,SAASC,0BAA0B,GAAGK,KAAKL,0BAA0B;YACrE,OAAO,IAAO,CAAA;oBAAEM,MAAM;gBAAQ,CAAA;QAChC;IACF,CAAA;AAEAX,GAAGO,IAAI,CAAC,oCAAoC,IAAO,CAAA;QACjDK,oBAAoB,IAAM,CAACC,SAAmBA;IAChD,CAAA;AAEA,MAAM,EAAEC,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC;AAEtC,MAAMC,qBAAqB,CACzBC;IAEAf,kBAAkBgB,SAAS;IAE3BH,aAAa;QACXI,sBAAsB;QACtBC,SAAS;QACTC,aAAa;YAAEC,OAAO;QAAK;QAC3BC,kBAAkB;QAClBN;QACAO,eAAe;IACjB,GAAG;QAAEH,aAAa,EAAE;IAAC;IAErBhB,SAASC,0BAA0B;IAEnC,OAAOJ,kBAAkBM,IAAI,CAACiB,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE;AAC7C;AAEA3B,SAAS,mCAAmC;IAC1CE,GAAG,gFAAgF;QACjF,MAAM0B,UAAUV;QAEhBjB,OAAOG,mBAAmByB,qBAAqB,CAAC;QAChD,sEAAsE;QACtE,6DAA6D;QAC7D5B,OAAO2B,SAASE,QAAQC,aAAa;IACvC;IAEA7B,GAAG,qEAAqE;QACtE,MAAM0B,UAAUV,mBAAmB;QAEnCjB,OAAO2B,SAASE,QAAQC,aAAa;IACvC;IAEA7B,GAAG,4DAA4D;QAC7DD,OAAOiB,mBAAmB,SAASY,QAAQE,IAAI,CAAC;QAChD/B,OAAOiB,mBAAmB,cAAcY,QAAQE,IAAI,CAAC;IACvD;IAEA9B,GAAG,wFAAwF;QACzFE,kBAAkBgB,SAAS;QAC3BhB,kBAAkB6B,qBAAqB,CACrC,IAAIC,MAAM;QAGZjB,aAAa;YACXI,sBAAsB;YACtBC,SAAS;YACTC,aAAa;gBAAEC,OAAO;YAAK;YAC3BC,kBAAkB;YAClBC,eAAe;QACjB,GAAG;YAAEH,aAAa,EAAE;QAAC;QAErB,MAAMtB,OAAOM,SAASC,0BAA0B,MAAM2B,OAAO,CAACC,OAAO,CAAC;IACxE;AACF"}

package/dist/index.d.ts

@@ -59,6 +59,21 @@ export type AzureStorageOptions = {
      * Azure Blob storage connection string
      */
     connectionString: string;
+    /**
+     * Public access level applied to a container that the plugin creates via
+     * `allowContainerCreate`. Has no effect on containers that already exist.
+     *
+     * - `'private'` (default): no anonymous access. Blobs are reachable only
+     *   through Payload's access-controlled file route.
+     * - `'blob'`: unauthenticated clients can read any blob directly from Azure.
+     * - `'container'`: unauthenticated clients can read and list blobs directly.
+     *
+     * Only choose `'blob'` or `'container'` if you deliberately want files served
+     * publicly from Azure, bypassing Payload read access control.
+     *
+     * @default 'private'
+     */
+    containerAccess?: 'blob' | 'container' | 'private';
     /**
      * Azure Blob storage container name
      */
@@ -71,14 +86,15 @@ export type AzureStorageOptions = {
     enabled?: boolean;
     /**
      * When true, the collection-level prefix and document-level prefix are combined
-     * (compositional). When false (default), document prefix overrides collection
-     * prefix entirely.
+     * (compositional). When false (default), a document prefix already within the
+     * collection prefix is used as-is for new uploads; otherwise it is nested beneath it.
+     * Existing files retain their stored prefixes for reads, URLs, and cleanup.
      *
-     * Example:
-     * - collection prefix: `collection-prefix/`
-     * - document prefix: `document-prefix/`
-     * - resulting prefix with useCompositePrefixes=true: `collection-prefix/document-prefix/`
-     * - resulting prefix with useCompositePrefixes=false: `document-prefix/`
+     * Example with a document prefix already contained by the collection prefix:
+     * - collection prefix: `uploads/`
+     * - document prefix: `uploads/documents/`
+     * - resulting prefix with useCompositePrefixes=true: `uploads/uploads/documents/`
+     * - resulting prefix with useCompositePrefixes=false: `uploads/documents/`
      *
      * @default false
      */

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEnB,iBAAiB,EAClB,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EAAU,MAAM,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAOnE,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEtF,MAAM,MAAM,wBAAwB,GAChC;IACE,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B,GACD,OAAO,CAAA;AAEX,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAA;IAE7B;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAE5B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,wBAAwB,CAAA;IAExC;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IAE7F;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAA;IAExB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAA;IAErB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,KAAK,kBAAkB,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,KAAK,MAAM,CAAA;AAE3E,eAAO,MAAM,YAAY,EAAE,kBA+FxB,CAAA;AAEH,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEnB,iBAAiB,EAClB,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EAAU,MAAM,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAQnE,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEtF,MAAM,MAAM,wBAAwB,GAChC;IACE,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B,GACD,OAAO,CAAA;AAEX,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAA;IAE7B;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAE5B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,wBAAwB,CAAA;IAExC;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IAE7F;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAA;IAExB;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAA;IAElD;;OAEG;IACH,aAAa,EAAE,MAAM,CAAA;IAErB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;;;;;OAaG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,KAAK,kBAAkB,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,KAAK,MAAM,CAAA;AAE3E,eAAO,MAAM,YAAY,EAAE,kBA8GxB,CAAA;AAEH,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,CAAA"}

package/dist/index.js

@@ -2,6 +2,7 @@ import { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage';
 import { initClientUploads } from '@payloadcms/plugin-cloud-storage/utilities';
 import { createAzureAdapter } from './adapter.js';
 import { getGenerateSignedURLHandler } from './generateSignedURL.js';
+import { isAzureClientUploadAllowed } from './isClientUploadAllowed.js';
 import { getStorageClient as getStorageClientFunc } from './utils/getStorageClient.js';
 export const azureStorage = (azureStorageOptions)=>(incomingConfig)=>{
         const getStorageClient = ()=>getStorageClientFunc({
@@ -9,9 +10,10 @@ export const azureStorage = (azureStorageOptions)=>(incomingConfig)=>{
                 containerName: azureStorageOptions.containerName
             });
         const isPluginDisabled = azureStorageOptions.enabled === false;
+        const clientUploadCollections = Object.fromEntries(Object.entries(azureStorageOptions.collections).filter(([slug])=>isAzureClientUploadAllowed(incomingConfig.collections?.find((collection)=>collection.slug === slug))));
         initClientUploads({
             clientHandler: '@payloadcms/storage-azure/client#AzureClientUploadHandler',
-            collections: azureStorageOptions.collections,
+            collections: clientUploadCollections,
             config: incomingConfig,
             enabled: !isPluginDisabled && Boolean(azureStorageOptions.clientUploads),
             extraClientHandlerProps: ()=>({
@@ -29,13 +31,20 @@ export const azureStorage = (azureStorageOptions)=>(incomingConfig)=>{
         if (isPluginDisabled) {
             return incomingConfig;
         }
-        const createContainerIfNotExists = ()=>{
-            void getStorageClientFunc({
+        const createContainerIfNotExists = async ()=>{
+            const containerClient = getStorageClientFunc({
                 connectionString: azureStorageOptions.connectionString,
                 containerName: azureStorageOptions.containerName
-            }).createIfNotExists({
-                access: 'blob'
             });
+            // Private by default; public access is opt-in via `containerAccess`.
+            const containerAccess = azureStorageOptions.containerAccess ?? 'private';
+            if (containerAccess === 'private') {
+                await containerClient.createIfNotExists();
+            } else {
+                await containerClient.createIfNotExists({
+                    access: containerAccess
+                });
+            }
         };
         const adapter = createAzureAdapter({
             allowContainerCreate: azureStorageOptions.allowContainerCreate,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {\n  ClientUploadsAccess,\n  PluginOptions as CloudStoragePluginOptions,\n  CollectionOptions,\n} from '@payloadcms/plugin-cloud-storage/types'\nimport type { Config, Plugin, UploadCollectionSlug } from 'payload'\n\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\nimport { initClientUploads } from '@payloadcms/plugin-cloud-storage/utilities'\n\nimport { createAzureAdapter } from './adapter.js'\nimport { getGenerateSignedURLHandler } from './generateSignedURL.js'\nimport { getStorageClient as getStorageClientFunc } from './utils/getStorageClient.js'\n\nexport type AzureClientUploadsConfig =\n  | {\n      access?: ClientUploadsAccess\n      /**\n       * Upload large files in blocks via the Azure Blob SDK, lifting the ~5GB\n       * single-request limit. Requires broader CORS on the storage account\n       * (the `OPTIONS`/`PUT` methods and `x-ms-*` headers).\n       *\n       * @default false\n       */\n      chunkLargeFiles?: boolean\n    }\n  | boolean\n\nexport type AzureStorageOptions = {\n  /**\n   * Whether or not to allow the container to be created if it does not exist\n   *\n   * @default false\n   */\n  allowContainerCreate: boolean\n\n  /**\n   * When enabled, fields (like the prefix field) will always be inserted into\n   * the collection schema regardless of whether the plugin is enabled. This\n   * ensures a consistent schema across all environments.\n   *\n   * This will be enabled by default in Payload v4.\n   *\n   * @default false\n   */\n  alwaysInsertFields?: boolean\n\n  /**\n   * Base URL for the Azure Blob storage account\n   */\n  baseURL: string\n\n  /**\n   * Optional cache key to identify the Azure Blob storage client instance.\n   * If not provided, a default key will be used.\n   *\n   * @default `azure:containerName`\n   */\n  clientCacheKey?: string\n\n  /**\n   * Do uploads directly on the client to bypass limits on Vercel. You must allow CORS PUT method to your website.\n   *\n   * Set `chunkLargeFiles: true` to upload through the Azure Blob SDK, which splits\n   * large files into blocks and lifts the ~5GB single-request limit. The SDK sends\n   * additional `x-ms-*` headers, so your storage account's CORS rules must allow the\n   * `OPTIONS` and `PUT` methods and those headers (allowed headers `*`, or at minimum\n   * `x-ms-*,content-type,content-length`). Left off, uploads use a single request\n   * (the default) and are capped at ~5GB.\n   */\n  clientUploads?: AzureClientUploadsConfig\n\n  /**\n   * Collection options to apply the Azure Blob adapter to.\n   */\n  collections: Partial<Record<UploadCollectionSlug, Omit<CollectionOptions, 'adapter'> | true>>\n\n  /**\n   * Azure Blob storage connection string\n   */\n  connectionString: string\n\n  /**\n   * Azure Blob storage container name\n   */\n  containerName: string\n\n  /**\n   * Whether or not to enable the plugin\n   *\n   * Default: true\n   */\n  enabled?: boolean\n  /**\n   * When true, the collection-level prefix and document-level prefix are combined\n   * (compositional). When false (default), document prefix overrides collection\n   * prefix entirely.\n   *\n   * Example:\n   * - collection prefix: `collection-prefix/`\n   * - document prefix: `document-prefix/`\n   * - resulting prefix with useCompositePrefixes=true: `collection-prefix/document-prefix/`\n   * - resulting prefix with useCompositePrefixes=false: `document-prefix/`\n   *\n   * @default false\n   */\n  useCompositePrefixes?: boolean\n}\n\ntype AzureStoragePlugin = (azureStorageArgs: AzureStorageOptions) => Plugin\n\nexport const azureStorage: AzureStoragePlugin =\n  (azureStorageOptions: AzureStorageOptions) =>\n  (incomingConfig: Config): Config => {\n    const getStorageClient = () =>\n      getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n    const isPluginDisabled = azureStorageOptions.enabled === false\n\n    initClientUploads({\n      clientHandler: '@payloadcms/storage-azure/client#AzureClientUploadHandler',\n      collections: azureStorageOptions.collections,\n      config: incomingConfig,\n      enabled: !isPluginDisabled && Boolean(azureStorageOptions.clientUploads),\n      extraClientHandlerProps: () => ({\n        chunkLargeFiles:\n          typeof azureStorageOptions.clientUploads === 'object'\n            ? Boolean(azureStorageOptions.clientUploads.chunkLargeFiles)\n            : false,\n      }),\n      serverHandler: getGenerateSignedURLHandler({\n        access:\n          typeof azureStorageOptions.clientUploads === 'object'\n            ? azureStorageOptions.clientUploads.access\n            : undefined,\n        collections: azureStorageOptions.collections,\n        containerName: azureStorageOptions.containerName,\n        getStorageClient,\n        useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n      }),\n      serverHandlerPath: '/storage-azure-generate-signed-url',\n    })\n\n    if (isPluginDisabled) {\n      return incomingConfig\n    }\n\n    const createContainerIfNotExists = () => {\n      void getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      }).createIfNotExists({\n        access: 'blob',\n      })\n    }\n\n    const adapter = createAzureAdapter({\n      allowContainerCreate: azureStorageOptions.allowContainerCreate,\n      baseURL: azureStorageOptions.baseURL,\n      clientUploads: azureStorageOptions.clientUploads,\n      containerName: azureStorageOptions.containerName,\n      createContainerIfNotExists,\n      getStorageClient,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })\n\n    // Add adapter to each collection option object\n    const collectionsWithAdapter: CloudStoragePluginOptions['collections'] = Object.entries(\n      azureStorageOptions.collections,\n    ).reduce(\n      (acc, [slug, collOptions]) => ({\n        ...acc,\n        [slug]: {\n          ...(collOptions === true ? {} : collOptions),\n          adapter,\n        },\n      }),\n      {} as Record<string, CollectionOptions>,\n    )\n\n    // Set disableLocalStorage: true for collections specified in the plugin options\n    const config = {\n      ...incomingConfig,\n      collections: (incomingConfig.collections || []).map((collection) => {\n        if (!collectionsWithAdapter[collection.slug]) {\n          return collection\n        }\n\n        return {\n          ...collection,\n          upload: {\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            disableLocalStorage: true,\n          },\n        }\n      }),\n    }\n\n    return cloudStoragePlugin({\n      alwaysInsertFields: azureStorageOptions.alwaysInsertFields,\n      collections: collectionsWithAdapter,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })(config)\n  }\n\nexport { getStorageClientFunc as getStorageClient }\n"],"names":["cloudStoragePlugin","initClientUploads","createAzureAdapter","getGenerateSignedURLHandler","getStorageClient","getStorageClientFunc","azureStorage","azureStorageOptions","incomingConfig","connectionString","containerName","isPluginDisabled","enabled","clientHandler","collections","config","Boolean","clientUploads","extraClientHandlerProps","chunkLargeFiles","serverHandler","access","undefined","useCompositePrefixes","serverHandlerPath","createContainerIfNotExists","createIfNotExists","adapter","allowContainerCreate","baseURL","collectionsWithAdapter","Object","entries","reduce","acc","slug","collOptions","map","collection","upload","disableLocalStorage","alwaysInsertFields"],"mappings":"AAOA,SAASA,kBAAkB,QAAQ,mCAAkC;AACrE,SAASC,iBAAiB,QAAQ,6CAA4C;AAE9E,SAASC,kBAAkB,QAAQ,eAAc;AACjD,SAASC,2BAA2B,QAAQ,yBAAwB;AACpE,SAASC,oBAAoBC,oBAAoB,QAAQ,8BAA6B;AAmGtF,OAAO,MAAMC,eACX,CAACC,sBACD,CAACC;QACC,MAAMJ,mBAAmB,IACvBC,qBAAqB;gBACnBI,kBAAkBF,oBAAoBE,gBAAgB;gBACtDC,eAAeH,oBAAoBG,aAAa;YAClD;QAEF,MAAMC,mBAAmBJ,oBAAoBK,OAAO,KAAK;QAEzDX,kBAAkB;YAChBY,eAAe;YACfC,aAAaP,oBAAoBO,WAAW;YAC5CC,QAAQP;YACRI,SAAS,CAACD,oBAAoBK,QAAQT,oBAAoBU,aAAa;YACvEC,yBAAyB,IAAO,CAAA;oBAC9BC,iBACE,OAAOZ,oBAAoBU,aAAa,KAAK,WACzCD,QAAQT,oBAAoBU,aAAa,CAACE,eAAe,IACzD;gBACR,CAAA;YACAC,eAAejB,4BAA4B;gBACzCkB,QACE,OAAOd,oBAAoBU,aAAa,KAAK,WACzCV,oBAAoBU,aAAa,CAACI,MAAM,GACxCC;gBACNR,aAAaP,oBAAoBO,WAAW;gBAC5CJ,eAAeH,oBAAoBG,aAAa;gBAChDN;gBACAmB,sBAAsBhB,oBAAoBgB,oBAAoB;YAChE;YACAC,mBAAmB;QACrB;QAEA,IAAIb,kBAAkB;YACpB,OAAOH;QACT;QAEA,MAAMiB,6BAA6B;YACjC,KAAKpB,qBAAqB;gBACxBI,kBAAkBF,oBAAoBE,gBAAgB;gBACtDC,eAAeH,oBAAoBG,aAAa;YAClD,GAAGgB,iBAAiB,CAAC;gBACnBL,QAAQ;YACV;QACF;QAEA,MAAMM,UAAUzB,mBAAmB;YACjC0B,sBAAsBrB,oBAAoBqB,oBAAoB;YAC9DC,SAAStB,oBAAoBsB,OAAO;YACpCZ,eAAeV,oBAAoBU,aAAa;YAChDP,eAAeH,oBAAoBG,aAAa;YAChDe;YACArB;YACAmB,sBAAsBhB,oBAAoBgB,oBAAoB;QAChE;QAEA,+CAA+C;QAC/C,MAAMO,yBAAmEC,OAAOC,OAAO,CACrFzB,oBAAoBO,WAAW,EAC/BmB,MAAM,CACN,CAACC,KAAK,CAACC,MAAMC,YAAY,GAAM,CAAA;gBAC7B,GAAGF,GAAG;gBACN,CAACC,KAAK,EAAE;oBACN,GAAIC,gBAAgB,OAAO,CAAC,IAAIA,WAAW;oBAC3CT;gBACF;YACF,CAAA,GACA,CAAC;QAGH,gFAAgF;QAChF,MAAMZ,SAAS;YACb,GAAGP,cAAc;YACjBM,aAAa,AAACN,CAAAA,eAAeM,WAAW,IAAI,EAAE,AAAD,EAAGuB,GAAG,CAAC,CAACC;gBACnD,IAAI,CAACR,sBAAsB,CAACQ,WAAWH,IAAI,CAAC,EAAE;oBAC5C,OAAOG;gBACT;gBAEA,OAAO;oBACL,GAAGA,UAAU;oBACbC,QAAQ;wBACN,GAAI,OAAOD,WAAWC,MAAM,KAAK,WAAWD,WAAWC,MAAM,GAAG,CAAC,CAAC;wBAClEC,qBAAqB;oBACvB;gBACF;YACF;QACF;QAEA,OAAOxC,mBAAmB;YACxByC,oBAAoBlC,oBAAoBkC,kBAAkB;YAC1D3B,aAAagB;YACbP,sBAAsBhB,oBAAoBgB,oBAAoB;QAChE,GAAGR;IACL,EAAC;AAEH,SAASV,wBAAwBD,gBAAgB,GAAE"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {\n  ClientUploadsAccess,\n  PluginOptions as CloudStoragePluginOptions,\n  CollectionOptions,\n} from '@payloadcms/plugin-cloud-storage/types'\nimport type { Config, Plugin, UploadCollectionSlug } from 'payload'\n\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\nimport { initClientUploads } from '@payloadcms/plugin-cloud-storage/utilities'\n\nimport { createAzureAdapter } from './adapter.js'\nimport { getGenerateSignedURLHandler } from './generateSignedURL.js'\nimport { isAzureClientUploadAllowed } from './isClientUploadAllowed.js'\nimport { getStorageClient as getStorageClientFunc } from './utils/getStorageClient.js'\n\nexport type AzureClientUploadsConfig =\n  | {\n      access?: ClientUploadsAccess\n      /**\n       * Upload large files in blocks via the Azure Blob SDK, lifting the ~5GB\n       * single-request limit. Requires broader CORS on the storage account\n       * (the `OPTIONS`/`PUT` methods and `x-ms-*` headers).\n       *\n       * @default false\n       */\n      chunkLargeFiles?: boolean\n    }\n  | boolean\n\nexport type AzureStorageOptions = {\n  /**\n   * Whether or not to allow the container to be created if it does not exist\n   *\n   * @default false\n   */\n  allowContainerCreate: boolean\n\n  /**\n   * When enabled, fields (like the prefix field) will always be inserted into\n   * the collection schema regardless of whether the plugin is enabled. This\n   * ensures a consistent schema across all environments.\n   *\n   * This will be enabled by default in Payload v4.\n   *\n   * @default false\n   */\n  alwaysInsertFields?: boolean\n\n  /**\n   * Base URL for the Azure Blob storage account\n   */\n  baseURL: string\n\n  /**\n   * Optional cache key to identify the Azure Blob storage client instance.\n   * If not provided, a default key will be used.\n   *\n   * @default `azure:containerName`\n   */\n  clientCacheKey?: string\n\n  /**\n   * Do uploads directly on the client to bypass limits on Vercel. You must allow CORS PUT method to your website.\n   *\n   * Set `chunkLargeFiles: true` to upload through the Azure Blob SDK, which splits\n   * large files into blocks and lifts the ~5GB single-request limit. The SDK sends\n   * additional `x-ms-*` headers, so your storage account's CORS rules must allow the\n   * `OPTIONS` and `PUT` methods and those headers (allowed headers `*`, or at minimum\n   * `x-ms-*,content-type,content-length`). Left off, uploads use a single request\n   * (the default) and are capped at ~5GB.\n   */\n  clientUploads?: AzureClientUploadsConfig\n\n  /**\n   * Collection options to apply the Azure Blob adapter to.\n   */\n  collections: Partial<Record<UploadCollectionSlug, Omit<CollectionOptions, 'adapter'> | true>>\n\n  /**\n   * Azure Blob storage connection string\n   */\n  connectionString: string\n\n  /**\n   * Public access level applied to a container that the plugin creates via\n   * `allowContainerCreate`. Has no effect on containers that already exist.\n   *\n   * - `'private'` (default): no anonymous access. Blobs are reachable only\n   *   through Payload's access-controlled file route.\n   * - `'blob'`: unauthenticated clients can read any blob directly from Azure.\n   * - `'container'`: unauthenticated clients can read and list blobs directly.\n   *\n   * Only choose `'blob'` or `'container'` if you deliberately want files served\n   * publicly from Azure, bypassing Payload read access control.\n   *\n   * @default 'private'\n   */\n  containerAccess?: 'blob' | 'container' | 'private'\n\n  /**\n   * Azure Blob storage container name\n   */\n  containerName: string\n\n  /**\n   * Whether or not to enable the plugin\n   *\n   * Default: true\n   */\n  enabled?: boolean\n  /**\n   * When true, the collection-level prefix and document-level prefix are combined\n   * (compositional). When false (default), a document prefix already within the\n   * collection prefix is used as-is for new uploads; otherwise it is nested beneath it.\n   * Existing files retain their stored prefixes for reads, URLs, and cleanup.\n   *\n   * Example with a document prefix already contained by the collection prefix:\n   * - collection prefix: `uploads/`\n   * - document prefix: `uploads/documents/`\n   * - resulting prefix with useCompositePrefixes=true: `uploads/uploads/documents/`\n   * - resulting prefix with useCompositePrefixes=false: `uploads/documents/`\n   *\n   * @default false\n   */\n  useCompositePrefixes?: boolean\n}\n\ntype AzureStoragePlugin = (azureStorageArgs: AzureStorageOptions) => Plugin\n\nexport const azureStorage: AzureStoragePlugin =\n  (azureStorageOptions: AzureStorageOptions) =>\n  (incomingConfig: Config): Config => {\n    const getStorageClient = () =>\n      getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n    const isPluginDisabled = azureStorageOptions.enabled === false\n\n    const clientUploadCollections = Object.fromEntries(\n      Object.entries(azureStorageOptions.collections).filter(([slug]) =>\n        isAzureClientUploadAllowed(\n          incomingConfig.collections?.find((collection) => collection.slug === slug),\n        ),\n      ),\n    )\n\n    initClientUploads({\n      clientHandler: '@payloadcms/storage-azure/client#AzureClientUploadHandler',\n      collections: clientUploadCollections,\n      config: incomingConfig,\n      enabled: !isPluginDisabled && Boolean(azureStorageOptions.clientUploads),\n      extraClientHandlerProps: () => ({\n        chunkLargeFiles:\n          typeof azureStorageOptions.clientUploads === 'object'\n            ? Boolean(azureStorageOptions.clientUploads.chunkLargeFiles)\n            : false,\n      }),\n      serverHandler: getGenerateSignedURLHandler({\n        access:\n          typeof azureStorageOptions.clientUploads === 'object'\n            ? azureStorageOptions.clientUploads.access\n            : undefined,\n        collections: azureStorageOptions.collections,\n        containerName: azureStorageOptions.containerName,\n        getStorageClient,\n        useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n      }),\n      serverHandlerPath: '/storage-azure-generate-signed-url',\n    })\n\n    if (isPluginDisabled) {\n      return incomingConfig\n    }\n\n    const createContainerIfNotExists = async (): Promise<void> => {\n      const containerClient = getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n      // Private by default; public access is opt-in via `containerAccess`.\n      const containerAccess = azureStorageOptions.containerAccess ?? 'private'\n\n      if (containerAccess === 'private') {\n        await containerClient.createIfNotExists()\n      } else {\n        await containerClient.createIfNotExists({ access: containerAccess })\n      }\n    }\n\n    const adapter = createAzureAdapter({\n      allowContainerCreate: azureStorageOptions.allowContainerCreate,\n      baseURL: azureStorageOptions.baseURL,\n      clientUploads: azureStorageOptions.clientUploads,\n      containerName: azureStorageOptions.containerName,\n      createContainerIfNotExists,\n      getStorageClient,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })\n\n    // Add adapter to each collection option object\n    const collectionsWithAdapter: CloudStoragePluginOptions['collections'] = Object.entries(\n      azureStorageOptions.collections,\n    ).reduce(\n      (acc, [slug, collOptions]) => ({\n        ...acc,\n        [slug]: {\n          ...(collOptions === true ? {} : collOptions),\n          adapter,\n        },\n      }),\n      {} as Record<string, CollectionOptions>,\n    )\n\n    // Set disableLocalStorage: true for collections specified in the plugin options\n    const config = {\n      ...incomingConfig,\n      collections: (incomingConfig.collections || []).map((collection) => {\n        if (!collectionsWithAdapter[collection.slug]) {\n          return collection\n        }\n\n        return {\n          ...collection,\n          upload: {\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            disableLocalStorage: true,\n          },\n        }\n      }),\n    }\n\n    return cloudStoragePlugin({\n      alwaysInsertFields: azureStorageOptions.alwaysInsertFields,\n      collections: collectionsWithAdapter,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })(config)\n  }\n\nexport { getStorageClientFunc as getStorageClient }\n"],"names":["cloudStoragePlugin","initClientUploads","createAzureAdapter","getGenerateSignedURLHandler","isAzureClientUploadAllowed","getStorageClient","getStorageClientFunc","azureStorage","azureStorageOptions","incomingConfig","connectionString","containerName","isPluginDisabled","enabled","clientUploadCollections","Object","fromEntries","entries","collections","filter","slug","find","collection","clientHandler","config","Boolean","clientUploads","extraClientHandlerProps","chunkLargeFiles","serverHandler","access","undefined","useCompositePrefixes","serverHandlerPath","createContainerIfNotExists","containerClient","containerAccess","createIfNotExists","adapter","allowContainerCreate","baseURL","collectionsWithAdapter","reduce","acc","collOptions","map","upload","disableLocalStorage","alwaysInsertFields"],"mappings":"AAOA,SAASA,kBAAkB,QAAQ,mCAAkC;AACrE,SAASC,iBAAiB,QAAQ,6CAA4C;AAE9E,SAASC,kBAAkB,QAAQ,eAAc;AACjD,SAASC,2BAA2B,QAAQ,yBAAwB;AACpE,SAASC,0BAA0B,QAAQ,6BAA4B;AACvE,SAASC,oBAAoBC,oBAAoB,QAAQ,8BAA6B;AAoHtF,OAAO,MAAMC,eACX,CAACC,sBACD,CAACC;QACC,MAAMJ,mBAAmB,IACvBC,qBAAqB;gBACnBI,kBAAkBF,oBAAoBE,gBAAgB;gBACtDC,eAAeH,oBAAoBG,aAAa;YAClD;QAEF,MAAMC,mBAAmBJ,oBAAoBK,OAAO,KAAK;QAEzD,MAAMC,0BAA0BC,OAAOC,WAAW,CAChDD,OAAOE,OAAO,CAACT,oBAAoBU,WAAW,EAAEC,MAAM,CAAC,CAAC,CAACC,KAAK,GAC5DhB,2BACEK,eAAeS,WAAW,EAAEG,KAAK,CAACC,aAAeA,WAAWF,IAAI,KAAKA;QAK3EnB,kBAAkB;YAChBsB,eAAe;YACfL,aAAaJ;YACbU,QAAQf;YACRI,SAAS,CAACD,oBAAoBa,QAAQjB,oBAAoBkB,aAAa;YACvEC,yBAAyB,IAAO,CAAA;oBAC9BC,iBACE,OAAOpB,oBAAoBkB,aAAa,KAAK,WACzCD,QAAQjB,oBAAoBkB,aAAa,CAACE,eAAe,IACzD;gBACR,CAAA;YACAC,eAAe1B,4BAA4B;gBACzC2B,QACE,OAAOtB,oBAAoBkB,aAAa,KAAK,WACzClB,oBAAoBkB,aAAa,CAACI,MAAM,GACxCC;gBACNb,aAAaV,oBAAoBU,WAAW;gBAC5CP,eAAeH,oBAAoBG,aAAa;gBAChDN;gBACA2B,sBAAsBxB,oBAAoBwB,oBAAoB;YAChE;YACAC,mBAAmB;QACrB;QAEA,IAAIrB,kBAAkB;YACpB,OAAOH;QACT;QAEA,MAAMyB,6BAA6B;YACjC,MAAMC,kBAAkB7B,qBAAqB;gBAC3CI,kBAAkBF,oBAAoBE,gBAAgB;gBACtDC,eAAeH,oBAAoBG,aAAa;YAClD;YAEA,qEAAqE;YACrE,MAAMyB,kBAAkB5B,oBAAoB4B,eAAe,IAAI;YAE/D,IAAIA,oBAAoB,WAAW;gBACjC,MAAMD,gBAAgBE,iBAAiB;YACzC,OAAO;gBACL,MAAMF,gBAAgBE,iBAAiB,CAAC;oBAAEP,QAAQM;gBAAgB;YACpE;QACF;QAEA,MAAME,UAAUpC,mBAAmB;YACjCqC,sBAAsB/B,oBAAoB+B,oBAAoB;YAC9DC,SAAShC,oBAAoBgC,OAAO;YACpCd,eAAelB,oBAAoBkB,aAAa;YAChDf,eAAeH,oBAAoBG,aAAa;YAChDuB;YACA7B;YACA2B,sBAAsBxB,oBAAoBwB,oBAAoB;QAChE;QAEA,+CAA+C;QAC/C,MAAMS,yBAAmE1B,OAAOE,OAAO,CACrFT,oBAAoBU,WAAW,EAC/BwB,MAAM,CACN,CAACC,KAAK,CAACvB,MAAMwB,YAAY,GAAM,CAAA;gBAC7B,GAAGD,GAAG;gBACN,CAACvB,KAAK,EAAE;oBACN,GAAIwB,gBAAgB,OAAO,CAAC,IAAIA,WAAW;oBAC3CN;gBACF;YACF,CAAA,GACA,CAAC;QAGH,gFAAgF;QAChF,MAAMd,SAAS;YACb,GAAGf,cAAc;YACjBS,aAAa,AAACT,CAAAA,eAAeS,WAAW,IAAI,EAAE,AAAD,EAAG2B,GAAG,CAAC,CAACvB;gBACnD,IAAI,CAACmB,sBAAsB,CAACnB,WAAWF,IAAI,CAAC,EAAE;oBAC5C,OAAOE;gBACT;gBAEA,OAAO;oBACL,GAAGA,UAAU;oBACbwB,QAAQ;wBACN,GAAI,OAAOxB,WAAWwB,MAAM,KAAK,WAAWxB,WAAWwB,MAAM,GAAG,CAAC,CAAC;wBAClEC,qBAAqB;oBACvB;gBACF;YACF;QACF;QAEA,OAAO/C,mBAAmB;YACxBgD,oBAAoBxC,oBAAoBwC,kBAAkB;YAC1D9B,aAAauB;YACbT,sBAAsBxB,oBAAoBwB,oBAAoB;QAChE,GAAGR;IACL,EAAC;AAEH,SAASlB,wBAAwBD,gBAAgB,GAAE"}

package/dist/index.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.spec.d.ts.map

package/dist/index.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.spec.d.ts","sourceRoot":"","sources":["../src/index.spec.ts"],"names":[],"mappings":""}

package/dist/index.spec.js

@@ -0,0 +1,44 @@
+import { describe, expect, it } from 'vitest';
+import { azureStorage } from './index.js';
+const createConfig = ()=>({
+        collections: [
+            {
+                slug: 'media',
+                fields: [],
+                upload: true
+            },
+            {
+                slug: 'direct-media',
+                fields: [],
+                upload: {
+                    allowRestrictedFileTypes: true
+                }
+            }
+        ],
+        secret: 'test-secret'
+    });
+describe('azureStorage client uploads', ()=>{
+    it('should register direct uploads only for explicit opt-out collections', ()=>{
+        const config = azureStorage({
+            allowContainerCreate: false,
+            baseURL: 'https://account.blob.core.windows.net',
+            clientUploads: true,
+            collections: {
+                'direct-media': true,
+                media: true
+            },
+            connectionString: 'UseDevelopmentStorage=true',
+            containerName: 'media'
+        })(createConfig());
+        const providers = config.admin?.components?.providers ?? [];
+        const providerCollections = providers.map((provider)=>{
+            const clientProps = provider.clientProps;
+            return typeof clientProps?.collectionSlug === 'string' ? clientProps.collectionSlug : undefined;
+        }).filter(Boolean);
+        expect(providerCollections).toEqual([
+            'direct-media'
+        ]);
+    });
+});
+
+//# sourceMappingURL=index.spec.js.map

package/dist/index.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.spec.ts"],"sourcesContent":["import type { Config } from 'payload'\n\nimport { describe, expect, it } from 'vitest'\n\nimport { azureStorage } from './index.js'\n\nconst createConfig = (): Config =>\n  ({\n    collections: [\n      {\n        slug: 'media',\n        fields: [],\n        upload: true,\n      },\n      {\n        slug: 'direct-media',\n        fields: [],\n        upload: { allowRestrictedFileTypes: true },\n      },\n    ],\n    secret: 'test-secret',\n  }) as unknown as Config\n\ndescribe('azureStorage client uploads', () => {\n  it('should register direct uploads only for explicit opt-out collections', () => {\n    const config = azureStorage({\n      allowContainerCreate: false,\n      baseURL: 'https://account.blob.core.windows.net',\n      clientUploads: true,\n      collections: {\n        'direct-media': true,\n        media: true,\n      },\n      connectionString: 'UseDevelopmentStorage=true',\n      containerName: 'media',\n    })(createConfig()) as Config\n\n    const providers = config.admin?.components?.providers ?? []\n    const providerCollections = providers\n      .map((provider) => {\n        const clientProps = (provider as { clientProps?: { collectionSlug?: unknown } }).clientProps\n        return typeof clientProps?.collectionSlug === 'string'\n          ? clientProps.collectionSlug\n          : undefined\n      })\n      .filter(Boolean)\n\n    expect(providerCollections).toEqual(['direct-media'])\n  })\n})\n"],"names":["describe","expect","it","azureStorage","createConfig","collections","slug","fields","upload","allowRestrictedFileTypes","secret","config","allowContainerCreate","baseURL","clientUploads","media","connectionString","containerName","providers","admin","components","providerCollections","map","provider","clientProps","collectionSlug","undefined","filter","Boolean","toEqual"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7C,SAASC,YAAY,QAAQ,aAAY;AAEzC,MAAMC,eAAe,IAClB,CAAA;QACCC,aAAa;YACX;gBACEC,MAAM;gBACNC,QAAQ,EAAE;gBACVC,QAAQ;YACV;YACA;gBACEF,MAAM;gBACNC,QAAQ,EAAE;gBACVC,QAAQ;oBAAEC,0BAA0B;gBAAK;YAC3C;SACD;QACDC,QAAQ;IACV,CAAA;AAEFV,SAAS,+BAA+B;IACtCE,GAAG,wEAAwE;QACzE,MAAMS,SAASR,aAAa;YAC1BS,sBAAsB;YACtBC,SAAS;YACTC,eAAe;YACfT,aAAa;gBACX,gBAAgB;gBAChBU,OAAO;YACT;YACAC,kBAAkB;YAClBC,eAAe;QACjB,GAAGb;QAEH,MAAMc,YAAYP,OAAOQ,KAAK,EAAEC,YAAYF,aAAa,EAAE;QAC3D,MAAMG,sBAAsBH,UACzBI,GAAG,CAAC,CAACC;YACJ,MAAMC,cAAc,AAACD,SAA4DC,WAAW;YAC5F,OAAO,OAAOA,aAAaC,mBAAmB,WAC1CD,YAAYC,cAAc,GAC1BC;QACN,GACCC,MAAM,CAACC;QAEV3B,OAAOoB,qBAAqBQ,OAAO,CAAC;YAAC;SAAe;IACtD;AACF"}

package/dist/isClientUploadAllowed.d.ts

@@ -0,0 +1,3 @@
+import type { CollectionConfig } from 'payload';
+export declare const isAzureClientUploadAllowed: (collection: CollectionConfig | undefined) => boolean;
+//# sourceMappingURL=isClientUploadAllowed.d.ts.map

package/dist/isClientUploadAllowed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isClientUploadAllowed.d.ts","sourceRoot":"","sources":["../src/isClientUploadAllowed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAE/C,eAAO,MAAM,0BAA0B,eAAgB,gBAAgB,GAAG,SAAS,KAAG,OAKnF,CAAA"}

package/dist/isClientUploadAllowed.js

@@ -0,0 +1,3 @@
+export const isAzureClientUploadAllowed = (collection)=>Boolean(collection?.upload && typeof collection.upload === 'object' && collection.upload.allowRestrictedFileTypes === true);
+
+//# sourceMappingURL=isClientUploadAllowed.js.map

package/dist/isClientUploadAllowed.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/isClientUploadAllowed.ts"],"sourcesContent":["import type { CollectionConfig } from 'payload'\n\nexport const isAzureClientUploadAllowed = (collection: CollectionConfig | undefined): boolean =>\n  Boolean(\n    collection?.upload &&\n      typeof collection.upload === 'object' &&\n      collection.upload.allowRestrictedFileTypes === true,\n  )\n"],"names":["isAzureClientUploadAllowed","collection","Boolean","upload","allowRestrictedFileTypes"],"mappings":"AAEA,OAAO,MAAMA,6BAA6B,CAACC,aACzCC,QACED,YAAYE,UACV,OAAOF,WAAWE,MAAM,KAAK,YAC7BF,WAAWE,MAAM,CAACC,wBAAwB,KAAK,MAClD"}

package/dist/uploadFile.d.ts

@@ -2,13 +2,10 @@ import type { ContainerClient } from '@azure/storage-blob';
 interface UploadArgs {
     buffer: Buffer;
     client: ContainerClient;
-    collectionPrefix?: string;
-    docPrefix?: string;
-    filename: string;
     mimeType: string;
+    storageFilePath: string;
     tempFilePath?: string;
-    useCompositePrefixes?: boolean;
 }
-export declare function uploadFile({ buffer, client, collectionPrefix, docPrefix, filename, mimeType, tempFilePath, useCompositePrefixes, }: UploadArgs): Promise<void>;
+export declare function uploadFile({ buffer, client, mimeType, storageFilePath, tempFilePath, }: UploadArgs): Promise<void>;
 export {};
 //# sourceMappingURL=uploadFile.d.ts.map

package/dist/uploadFile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uploadFile.d.ts","sourceRoot":"","sources":["../src/uploadFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAO1D,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,eAAe,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B;AAID,wBAAsB,UAAU,CAAC,EAC/B,MAAM,EACN,MAAM,EACN,gBAAqB,EACrB,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,oBAA4B,GAC7B,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B5B"}
+{"version":3,"file":"uploadFile.d.ts","sourceRoot":"","sources":["../src/uploadFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAM1D,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,eAAe,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAID,wBAAsB,UAAU,CAAC,EAC/B,MAAM,EACN,MAAM,EACN,QAAQ,EACR,eAAe,EACf,YAAY,GACb,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB5B"}

package/dist/uploadFile.js

@@ -1,17 +1,10 @@
 import { AbortController } from '@azure/abort-controller';
-import { getFileKey } from '@payloadcms/plugin-cloud-storage/utilities';
 import fs from 'fs';
 import { Readable } from 'stream';
 const multipartThreshold = 1024 * 1024 * 50 // 50MB
 ;
-export async function uploadFile({ buffer, client, collectionPrefix = '', docPrefix, filename, mimeType, tempFilePath, useCompositePrefixes = false }) {
-    const { fileKey } = getFileKey({
-        collectionPrefix,
-        docPrefix,
-        filename,
-        useCompositePrefixes
-    });
-    const blockBlobClient = client.getBlockBlobClient(fileKey);
+export async function uploadFile({ buffer, client, mimeType, storageFilePath, tempFilePath }) {
+    const blockBlobClient = client.getBlockBlobClient(storageFilePath);
     // when there are no temp files, or the upload is less than the threshold size, do not stream files
     if (!tempFilePath && buffer.length > 0 && buffer.length < multipartThreshold) {
         await blockBlobClient.upload(buffer, buffer.byteLength, {

package/dist/uploadFile.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/uploadFile.ts"],"sourcesContent":["import type { ContainerClient } from '@azure/storage-blob'\n\nimport { AbortController } from '@azure/abort-controller'\nimport { getFileKey } from '@payloadcms/plugin-cloud-storage/utilities'\nimport fs from 'fs'\nimport { Readable } from 'stream'\n\ninterface UploadArgs {\n  buffer: Buffer\n  client: ContainerClient\n  collectionPrefix?: string\n  docPrefix?: string\n  filename: string\n  mimeType: string\n  tempFilePath?: string\n  useCompositePrefixes?: boolean\n}\n\nconst multipartThreshold = 1024 * 1024 * 50 // 50MB\n\nexport async function uploadFile({\n  buffer,\n  client,\n  collectionPrefix = '',\n  docPrefix,\n  filename,\n  mimeType,\n  tempFilePath,\n  useCompositePrefixes = false,\n}: UploadArgs): Promise<void> {\n  const { fileKey } = getFileKey({\n    collectionPrefix,\n    docPrefix,\n    filename,\n    useCompositePrefixes,\n  })\n\n  const blockBlobClient = client.getBlockBlobClient(fileKey)\n\n  // when there are no temp files, or the upload is less than the threshold size, do not stream files\n  if (!tempFilePath && buffer.length > 0 && buffer.length < multipartThreshold) {\n    await blockBlobClient.upload(buffer, buffer.byteLength, {\n      blobHTTPHeaders: { blobContentType: mimeType },\n    })\n    return\n  }\n\n  const fileBufferOrStream: Readable = tempFilePath\n    ? fs.createReadStream(tempFilePath)\n    : Readable.from(buffer)\n\n  await blockBlobClient.uploadStream(fileBufferOrStream, 4 * 1024 * 1024, 4, {\n    abortSignal: AbortController.timeout(30 * 60 * 1000),\n    blobHTTPHeaders: { blobContentType: mimeType },\n  })\n}\n"],"names":["AbortController","getFileKey","fs","Readable","multipartThreshold","uploadFile","buffer","client","collectionPrefix","docPrefix","filename","mimeType","tempFilePath","useCompositePrefixes","fileKey","blockBlobClient","getBlockBlobClient","length","upload","byteLength","blobHTTPHeaders","blobContentType","fileBufferOrStream","createReadStream","from","uploadStream","abortSignal","timeout"],"mappings":"AAEA,SAASA,eAAe,QAAQ,0BAAyB;AACzD,SAASC,UAAU,QAAQ,6CAA4C;AACvE,OAAOC,QAAQ,KAAI;AACnB,SAASC,QAAQ,QAAQ,SAAQ;AAajC,MAAMC,qBAAqB,OAAO,OAAO,GAAG,OAAO;;AAEnD,OAAO,eAAeC,WAAW,EAC/BC,MAAM,EACNC,MAAM,EACNC,mBAAmB,EAAE,EACrBC,SAAS,EACTC,QAAQ,EACRC,QAAQ,EACRC,YAAY,EACZC,uBAAuB,KAAK,EACjB;IACX,MAAM,EAAEC,OAAO,EAAE,GAAGb,WAAW;QAC7BO;QACAC;QACAC;QACAG;IACF;IAEA,MAAME,kBAAkBR,OAAOS,kBAAkB,CAACF;IAElD,mGAAmG;IACnG,IAAI,CAACF,gBAAgBN,OAAOW,MAAM,GAAG,KAAKX,OAAOW,MAAM,GAAGb,oBAAoB;QAC5E,MAAMW,gBAAgBG,MAAM,CAACZ,QAAQA,OAAOa,UAAU,EAAE;YACtDC,iBAAiB;gBAAEC,iBAAiBV;YAAS;QAC/C;QACA;IACF;IAEA,MAAMW,qBAA+BV,eACjCV,GAAGqB,gBAAgB,CAACX,gBACpBT,SAASqB,IAAI,CAAClB;IAElB,MAAMS,gBAAgBU,YAAY,CAACH,oBAAoB,IAAI,OAAO,MAAM,GAAG;QACzEI,aAAa1B,gBAAgB2B,OAAO,CAAC,KAAK,KAAK;QAC/CP,iBAAiB;YAAEC,iBAAiBV;QAAS;IAC/C;AACF"}
+{"version":3,"sources":["../src/uploadFile.ts"],"sourcesContent":["import type { ContainerClient } from '@azure/storage-blob'\n\nimport { AbortController } from '@azure/abort-controller'\nimport fs from 'fs'\nimport { Readable } from 'stream'\n\ninterface UploadArgs {\n  buffer: Buffer\n  client: ContainerClient\n  mimeType: string\n  storageFilePath: string\n  tempFilePath?: string\n}\n\nconst multipartThreshold = 1024 * 1024 * 50 // 50MB\n\nexport async function uploadFile({\n  buffer,\n  client,\n  mimeType,\n  storageFilePath,\n  tempFilePath,\n}: UploadArgs): Promise<void> {\n  const blockBlobClient = client.getBlockBlobClient(storageFilePath)\n\n  // when there are no temp files, or the upload is less than the threshold size, do not stream files\n  if (!tempFilePath && buffer.length > 0 && buffer.length < multipartThreshold) {\n    await blockBlobClient.upload(buffer, buffer.byteLength, {\n      blobHTTPHeaders: { blobContentType: mimeType },\n    })\n    return\n  }\n\n  const fileBufferOrStream: Readable = tempFilePath\n    ? fs.createReadStream(tempFilePath)\n    : Readable.from(buffer)\n\n  await blockBlobClient.uploadStream(fileBufferOrStream, 4 * 1024 * 1024, 4, {\n    abortSignal: AbortController.timeout(30 * 60 * 1000),\n    blobHTTPHeaders: { blobContentType: mimeType },\n  })\n}\n"],"names":["AbortController","fs","Readable","multipartThreshold","uploadFile","buffer","client","mimeType","storageFilePath","tempFilePath","blockBlobClient","getBlockBlobClient","length","upload","byteLength","blobHTTPHeaders","blobContentType","fileBufferOrStream","createReadStream","from","uploadStream","abortSignal","timeout"],"mappings":"AAEA,SAASA,eAAe,QAAQ,0BAAyB;AACzD,OAAOC,QAAQ,KAAI;AACnB,SAASC,QAAQ,QAAQ,SAAQ;AAUjC,MAAMC,qBAAqB,OAAO,OAAO,GAAG,OAAO;;AAEnD,OAAO,eAAeC,WAAW,EAC/BC,MAAM,EACNC,MAAM,EACNC,QAAQ,EACRC,eAAe,EACfC,YAAY,EACD;IACX,MAAMC,kBAAkBJ,OAAOK,kBAAkB,CAACH;IAElD,mGAAmG;IACnG,IAAI,CAACC,gBAAgBJ,OAAOO,MAAM,GAAG,KAAKP,OAAOO,MAAM,GAAGT,oBAAoB;QAC5E,MAAMO,gBAAgBG,MAAM,CAACR,QAAQA,OAAOS,UAAU,EAAE;YACtDC,iBAAiB;gBAAEC,iBAAiBT;YAAS;QAC/C;QACA;IACF;IAEA,MAAMU,qBAA+BR,eACjCR,GAAGiB,gBAAgB,CAACT,gBACpBP,SAASiB,IAAI,CAACd;IAElB,MAAMK,gBAAgBU,YAAY,CAACH,oBAAoB,IAAI,OAAO,MAAM,GAAG;QACzEI,aAAarB,gBAAgBsB,OAAO,CAAC,KAAK,KAAK;QAC/CP,iBAAiB;YAAEC,iBAAiBT;QAAS;IAC/C;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/storage-azure",
-  "version": "3.89.0-internal.95c9cba",
+  "version": "3.90.0",
   "description": "Payload storage adapter for Azure Blob Storage",
   "homepage": "https://payloadcms.com",
   "repository": {
@@ -39,13 +39,13 @@
   "dependencies": {
     "@azure/abort-controller": "^1.1.0",
     "@azure/storage-blob": "^12.11.0",
-    "@payloadcms/plugin-cloud-storage": "3.89.0-internal.95c9cba"
+    "@payloadcms/plugin-cloud-storage": "3.90.0"
   },
   "devDependencies": {
-    "payload": "3.89.0-internal.95c9cba"
+    "payload": "3.90.0"
   },
   "peerDependencies": {
-    "payload": "3.89.0-internal.95c9cba"
+    "payload": "3.90.0"
   },
   "engines": {
     "node": "^18.20.2 || >=20.9.0"