@payloadcms/storage-azure 4.0.0-canary.34 → 4.0.0-canary.36

package/dist/index.d.ts

@@ -8,16 +8,6 @@ export type AzureStorageOptions = {
      * @default false
      */
     allowContainerCreate: boolean;
-    /**
-     * When enabled, fields (like the prefix field) will always be inserted into
-     * the collection schema regardless of whether the plugin is enabled. This
-     * ensures a consistent schema across all environments.
-     *
-     * This will be enabled by default in Payload v4.
-     *
-     * @default false
-     */
-    alwaysInsertFields?: boolean;
     /**
      * Base URL for the Azure Blob storage account
      */

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEnB,iBAAiB,EAClB,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EAAU,cAAc,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAK3E,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEtF,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAA;IAE7B;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAE5B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAA;IAEnC;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IAE7F;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAA;IAExB;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAA;IAElD;;OAEG;IACH,aAAa,EAAE,MAAM,CAAA;IAErB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;;;;;OAaG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,KAAK,mBAAmB,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,KAAK,cAAc,CAAA;AAEpF,eAAO,MAAM,YAAY,EAAE,mBAkFzB,CAAA;AAEF,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEnB,iBAAiB,EAClB,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EAAU,cAAc,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAK3E,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEtF,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAA;IAE7B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAA;IAEnC;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IAE7F;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAA;IAExB;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAA;IAElD;;OAEG;IACH,aAAa,EAAE,MAAM,CAAA;IAErB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;;;;;OAaG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,KAAK,mBAAmB,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,KAAK,cAAc,CAAA;AAEpF,eAAO,MAAM,YAAY,EAAE,mBAiGzB,CAAA;AAEF,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,CAAA"}

package/dist/index.js

@@ -11,7 +11,20 @@ export const azureStorage = (azureStorageOptions)=>({
                 });
             const isPluginDisabled = azureStorageOptions.enabled === false;
             if (isPluginDisabled) {
-                return incomingConfig;
+                // Still call cloudStoragePlugin with adapter: null so fields (like prefix) are
+                // inserted into the schema, keeping it consistent across environments.
+                const collectionsWithoutAdapter = Object.entries(azureStorageOptions.collections).reduce((acc, [slug, collOptions])=>({
+                        ...acc,
+                        [slug]: {
+                            ...collOptions === true ? {} : collOptions,
+                            adapter: null
+                        }
+                    }), {});
+                return cloudStoragePlugin({
+                    collections: collectionsWithoutAdapter,
+                    enabled: false,
+                    useCompositePrefixes: azureStorageOptions.useCompositePrefixes
+                })(incomingConfig);
             }
             const createContainerIfNotExists = async ()=>{
                 const containerClient = getStorageClientFunc({
@@ -62,7 +75,6 @@ export const azureStorage = (azureStorageOptions)=>({
                 })
             };
             return cloudStoragePlugin({
-                alwaysInsertFields: azureStorageOptions.alwaysInsertFields,
                 collections: collectionsWithAdapter,
                 useCompositePrefixes: azureStorageOptions.useCompositePrefixes
             })(config);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {\n  ClientUploadsConfig,\n  PluginOptions as CloudStoragePluginOptions,\n  CollectionOptions,\n} from '@payloadcms/plugin-cloud-storage/types'\nimport type { Config, StorageAdapter, UploadCollectionSlug } from 'payload'\n\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\n\nimport { createAzureAdapter } from './adapter.js'\nimport { getStorageClient as getStorageClientFunc } from './utils/getStorageClient.js'\n\nexport type AzureStorageOptions = {\n  /**\n   * Whether or not to allow the container to be created if it does not exist\n   *\n   * @default false\n   */\n  allowContainerCreate: boolean\n\n  /**\n   * When enabled, fields (like the prefix field) will always be inserted into\n   * the collection schema regardless of whether the plugin is enabled. This\n   * ensures a consistent schema across all environments.\n   *\n   * This will be enabled by default in Payload v4.\n   *\n   * @default false\n   */\n  alwaysInsertFields?: boolean\n\n  /**\n   * Base URL for the Azure Blob storage account\n   */\n  baseURL: string\n\n  /**\n   * Optional cache key to identify the Azure Blob storage client instance.\n   * If not provided, a default key will be used.\n   *\n   * @default `azure:containerName`\n   */\n  clientCacheKey?: string\n\n  /**\n   * Do uploads directly on the client to bypass limits on Vercel.\n   *\n   * Client uploads use the Azure Blob SDK, which splits large files into blocks\n   * (avoiding the ~5GB limit of a single upload request). The SDK sends `x-ms-*`\n   * headers, so the browser issues a CORS preflight: your storage account's CORS\n   * rules must allow the `OPTIONS` and `PUT` methods and the required headers\n   * (allowed headers `*`, or at minimum `x-ms-*,content-type,content-length`).\n   */\n  clientUploads?: ClientUploadsConfig\n\n  /**\n   * Collection options to apply the Azure Blob adapter to.\n   */\n  collections: Partial<Record<UploadCollectionSlug, Omit<CollectionOptions, 'adapter'> | true>>\n\n  /**\n   * Azure Blob storage connection string\n   */\n  connectionString: string\n\n  /**\n   * Public access level applied to a container that the plugin creates via\n   * `allowContainerCreate`. Has no effect on containers that already exist.\n   *\n   * - `'private'` (default): no anonymous access. Blobs are reachable only\n   *   through Payload's access-controlled file route.\n   * - `'blob'`: unauthenticated clients can read any blob directly from Azure.\n   * - `'container'`: unauthenticated clients can read and list blobs directly.\n   *\n   * Only choose `'blob'` or `'container'` if you deliberately want files served\n   * publicly from Azure, bypassing Payload read access control.\n   *\n   * @default 'private'\n   */\n  containerAccess?: 'blob' | 'container' | 'private'\n\n  /**\n   * Azure Blob storage container name\n   */\n  containerName: string\n\n  /**\n   * Whether or not to enable the plugin\n   *\n   * Default: true\n   */\n  enabled?: boolean\n  /**\n   * When true, the collection-level prefix and document-level prefix are combined\n   * (compositional). When false (default), a document prefix already within the\n   * collection prefix is used as-is for new uploads; otherwise it is nested beneath it.\n   * Existing files retain their stored prefixes for reads, URLs, and cleanup.\n   *\n   * Example with a document prefix already contained by the collection prefix:\n   * - collection prefix: `uploads/`\n   * - document prefix: `uploads/documents/`\n   * - resulting prefix with useCompositePrefixes=true: `uploads/uploads/documents/`\n   * - resulting prefix with useCompositePrefixes=false: `uploads/documents/`\n   *\n   * @default false\n   */\n  useCompositePrefixes?: boolean\n}\n\ntype AzureStorageFactory = (azureStorageArgs: AzureStorageOptions) => StorageAdapter\n\nexport const azureStorage: AzureStorageFactory = (\n  azureStorageOptions: AzureStorageOptions,\n): StorageAdapter => ({\n  name: 'azure',\n  collections: Object.keys(azureStorageOptions.collections),\n  init: (incomingConfig: Config): Config => {\n    const getStorageClient = () =>\n      getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n    const isPluginDisabled = azureStorageOptions.enabled === false\n\n    if (isPluginDisabled) {\n      return incomingConfig\n    }\n\n    const createContainerIfNotExists = async (): Promise<void> => {\n      const containerClient = getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n      // Private by default; public access is opt-in via `containerAccess`.\n      const containerAccess = azureStorageOptions.containerAccess ?? 'private'\n\n      if (containerAccess === 'private') {\n        await containerClient.createIfNotExists()\n      } else {\n        await containerClient.createIfNotExists({ access: containerAccess })\n      }\n    }\n\n    const adapter = createAzureAdapter({\n      allowContainerCreate: azureStorageOptions.allowContainerCreate,\n      baseURL: azureStorageOptions.baseURL,\n      clientUploads: azureStorageOptions.clientUploads,\n      containerName: azureStorageOptions.containerName,\n      createContainerIfNotExists,\n      getStorageClient,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })\n\n    // Add adapter to each collection option object\n    const collectionsWithAdapter: CloudStoragePluginOptions['collections'] = Object.entries(\n      azureStorageOptions.collections,\n    ).reduce(\n      (acc, [slug, collOptions]) => ({\n        ...acc,\n        [slug]: {\n          ...(collOptions === true ? {} : collOptions),\n          adapter,\n        },\n      }),\n      {} as Record<string, CollectionOptions>,\n    )\n\n    // Set disableLocalStorage: true for collections specified in the plugin options\n    const config = {\n      ...incomingConfig,\n      collections: (incomingConfig.collections || []).map((collection) => {\n        if (!collectionsWithAdapter[collection.slug]) {\n          return collection\n        }\n\n        return {\n          ...collection,\n          upload: {\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            disableLocalStorage: true,\n          },\n        }\n      }),\n    }\n\n    return cloudStoragePlugin({\n      alwaysInsertFields: azureStorageOptions.alwaysInsertFields,\n      collections: collectionsWithAdapter,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })(config)\n  },\n})\n\nexport { getStorageClientFunc as getStorageClient }\n"],"names":["cloudStoragePlugin","createAzureAdapter","getStorageClient","getStorageClientFunc","azureStorage","azureStorageOptions","name","collections","Object","keys","init","incomingConfig","connectionString","containerName","isPluginDisabled","enabled","createContainerIfNotExists","containerClient","containerAccess","createIfNotExists","access","adapter","allowContainerCreate","baseURL","clientUploads","useCompositePrefixes","collectionsWithAdapter","entries","reduce","acc","slug","collOptions","config","map","collection","upload","disableLocalStorage","alwaysInsertFields"],"mappings":"AAOA,SAASA,kBAAkB,QAAQ,mCAAkC;AAErE,SAASC,kBAAkB,QAAQ,eAAc;AACjD,SAASC,oBAAoBC,oBAAoB,QAAQ,8BAA6B;AAqGtF,OAAO,MAAMC,eAAoC,CAC/CC,sBACoB,CAAA;QACpBC,MAAM;QACNC,aAAaC,OAAOC,IAAI,CAACJ,oBAAoBE,WAAW;QACxDG,MAAM,CAACC;YACL,MAAMT,mBAAmB,IACvBC,qBAAqB;oBACnBS,kBAAkBP,oBAAoBO,gBAAgB;oBACtDC,eAAeR,oBAAoBQ,aAAa;gBAClD;YAEF,MAAMC,mBAAmBT,oBAAoBU,OAAO,KAAK;YAEzD,IAAID,kBAAkB;gBACpB,OAAOH;YACT;YAEA,MAAMK,6BAA6B;gBACjC,MAAMC,kBAAkBd,qBAAqB;oBAC3CS,kBAAkBP,oBAAoBO,gBAAgB;oBACtDC,eAAeR,oBAAoBQ,aAAa;gBAClD;gBAEA,qEAAqE;gBACrE,MAAMK,kBAAkBb,oBAAoBa,eAAe,IAAI;gBAE/D,IAAIA,oBAAoB,WAAW;oBACjC,MAAMD,gBAAgBE,iBAAiB;gBACzC,OAAO;oBACL,MAAMF,gBAAgBE,iBAAiB,CAAC;wBAAEC,QAAQF;oBAAgB;gBACpE;YACF;YAEA,MAAMG,UAAUpB,mBAAmB;gBACjCqB,sBAAsBjB,oBAAoBiB,oBAAoB;gBAC9DC,SAASlB,oBAAoBkB,OAAO;gBACpCC,eAAenB,oBAAoBmB,aAAa;gBAChDX,eAAeR,oBAAoBQ,aAAa;gBAChDG;gBACAd;gBACAuB,sBAAsBpB,oBAAoBoB,oBAAoB;YAChE;YAEA,+CAA+C;YAC/C,MAAMC,yBAAmElB,OAAOmB,OAAO,CACrFtB,oBAAoBE,WAAW,EAC/BqB,MAAM,CACN,CAACC,KAAK,CAACC,MAAMC,YAAY,GAAM,CAAA;oBAC7B,GAAGF,GAAG;oBACN,CAACC,KAAK,EAAE;wBACN,GAAIC,gBAAgB,OAAO,CAAC,IAAIA,WAAW;wBAC3CV;oBACF;gBACF,CAAA,GACA,CAAC;YAGH,gFAAgF;YAChF,MAAMW,SAAS;gBACb,GAAGrB,cAAc;gBACjBJ,aAAa,AAACI,CAAAA,eAAeJ,WAAW,IAAI,EAAE,AAAD,EAAG0B,GAAG,CAAC,CAACC;oBACnD,IAAI,CAACR,sBAAsB,CAACQ,WAAWJ,IAAI,CAAC,EAAE;wBAC5C,OAAOI;oBACT;oBAEA,OAAO;wBACL,GAAGA,UAAU;wBACbC,QAAQ;4BACN,GAAI,OAAOD,WAAWC,MAAM,KAAK,WAAWD,WAAWC,MAAM,GAAG,CAAC,CAAC;4BAClEC,qBAAqB;wBACvB;oBACF;gBACF;YACF;YAEA,OAAOpC,mBAAmB;gBACxBqC,oBAAoBhC,oBAAoBgC,kBAAkB;gBAC1D9B,aAAamB;gBACbD,sBAAsBpB,oBAAoBoB,oBAAoB;YAChE,GAAGO;QACL;IACF,CAAA,EAAE;AAEF,SAAS7B,wBAAwBD,gBAAgB,GAAE"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {\n  ClientUploadsConfig,\n  PluginOptions as CloudStoragePluginOptions,\n  CollectionOptions,\n} from '@payloadcms/plugin-cloud-storage/types'\nimport type { Config, StorageAdapter, UploadCollectionSlug } from 'payload'\n\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\n\nimport { createAzureAdapter } from './adapter.js'\nimport { getStorageClient as getStorageClientFunc } from './utils/getStorageClient.js'\n\nexport type AzureStorageOptions = {\n  /**\n   * Whether or not to allow the container to be created if it does not exist\n   *\n   * @default false\n   */\n  allowContainerCreate: boolean\n\n  /**\n   * Base URL for the Azure Blob storage account\n   */\n  baseURL: string\n\n  /**\n   * Optional cache key to identify the Azure Blob storage client instance.\n   * If not provided, a default key will be used.\n   *\n   * @default `azure:containerName`\n   */\n  clientCacheKey?: string\n\n  /**\n   * Do uploads directly on the client to bypass limits on Vercel.\n   *\n   * Client uploads use the Azure Blob SDK, which splits large files into blocks\n   * (avoiding the ~5GB limit of a single upload request). The SDK sends `x-ms-*`\n   * headers, so the browser issues a CORS preflight: your storage account's CORS\n   * rules must allow the `OPTIONS` and `PUT` methods and the required headers\n   * (allowed headers `*`, or at minimum `x-ms-*,content-type,content-length`).\n   */\n  clientUploads?: ClientUploadsConfig\n\n  /**\n   * Collection options to apply the Azure Blob adapter to.\n   */\n  collections: Partial<Record<UploadCollectionSlug, Omit<CollectionOptions, 'adapter'> | true>>\n\n  /**\n   * Azure Blob storage connection string\n   */\n  connectionString: string\n\n  /**\n   * Public access level applied to a container that the plugin creates via\n   * `allowContainerCreate`. Has no effect on containers that already exist.\n   *\n   * - `'private'` (default): no anonymous access. Blobs are reachable only\n   *   through Payload's access-controlled file route.\n   * - `'blob'`: unauthenticated clients can read any blob directly from Azure.\n   * - `'container'`: unauthenticated clients can read and list blobs directly.\n   *\n   * Only choose `'blob'` or `'container'` if you deliberately want files served\n   * publicly from Azure, bypassing Payload read access control.\n   *\n   * @default 'private'\n   */\n  containerAccess?: 'blob' | 'container' | 'private'\n\n  /**\n   * Azure Blob storage container name\n   */\n  containerName: string\n\n  /**\n   * Whether or not to enable the plugin\n   *\n   * Default: true\n   */\n  enabled?: boolean\n  /**\n   * When true, the collection-level prefix and document-level prefix are combined\n   * (compositional). When false (default), a document prefix already within the\n   * collection prefix is used as-is for new uploads; otherwise it is nested beneath it.\n   * Existing files retain their stored prefixes for reads, URLs, and cleanup.\n   *\n   * Example with a document prefix already contained by the collection prefix:\n   * - collection prefix: `uploads/`\n   * - document prefix: `uploads/documents/`\n   * - resulting prefix with useCompositePrefixes=true: `uploads/uploads/documents/`\n   * - resulting prefix with useCompositePrefixes=false: `uploads/documents/`\n   *\n   * @default false\n   */\n  useCompositePrefixes?: boolean\n}\n\ntype AzureStorageFactory = (azureStorageArgs: AzureStorageOptions) => StorageAdapter\n\nexport const azureStorage: AzureStorageFactory = (\n  azureStorageOptions: AzureStorageOptions,\n): StorageAdapter => ({\n  name: 'azure',\n  collections: Object.keys(azureStorageOptions.collections),\n  init: (incomingConfig: Config): Config => {\n    const getStorageClient = () =>\n      getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n    const isPluginDisabled = azureStorageOptions.enabled === false\n\n    if (isPluginDisabled) {\n      // Still call cloudStoragePlugin with adapter: null so fields (like prefix) are\n      // inserted into the schema, keeping it consistent across environments.\n      const collectionsWithoutAdapter: CloudStoragePluginOptions['collections'] = Object.entries(\n        azureStorageOptions.collections,\n      ).reduce(\n        (acc, [slug, collOptions]) => ({\n          ...acc,\n          [slug]: { ...(collOptions === true ? {} : collOptions), adapter: null },\n        }),\n        {} as Record<string, CollectionOptions>,\n      )\n\n      return cloudStoragePlugin({\n        collections: collectionsWithoutAdapter,\n        enabled: false,\n        useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n      })(incomingConfig)\n    }\n\n    const createContainerIfNotExists = async (): Promise<void> => {\n      const containerClient = getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n      // Private by default; public access is opt-in via `containerAccess`.\n      const containerAccess = azureStorageOptions.containerAccess ?? 'private'\n\n      if (containerAccess === 'private') {\n        await containerClient.createIfNotExists()\n      } else {\n        await containerClient.createIfNotExists({ access: containerAccess })\n      }\n    }\n\n    const adapter = createAzureAdapter({\n      allowContainerCreate: azureStorageOptions.allowContainerCreate,\n      baseURL: azureStorageOptions.baseURL,\n      clientUploads: azureStorageOptions.clientUploads,\n      containerName: azureStorageOptions.containerName,\n      createContainerIfNotExists,\n      getStorageClient,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })\n\n    // Add adapter to each collection option object\n    const collectionsWithAdapter: CloudStoragePluginOptions['collections'] = Object.entries(\n      azureStorageOptions.collections,\n    ).reduce(\n      (acc, [slug, collOptions]) => ({\n        ...acc,\n        [slug]: {\n          ...(collOptions === true ? {} : collOptions),\n          adapter,\n        },\n      }),\n      {} as Record<string, CollectionOptions>,\n    )\n\n    // Set disableLocalStorage: true for collections specified in the plugin options\n    const config = {\n      ...incomingConfig,\n      collections: (incomingConfig.collections || []).map((collection) => {\n        if (!collectionsWithAdapter[collection.slug]) {\n          return collection\n        }\n\n        return {\n          ...collection,\n          upload: {\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            disableLocalStorage: true,\n          },\n        }\n      }),\n    }\n\n    return cloudStoragePlugin({\n      collections: collectionsWithAdapter,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })(config)\n  },\n})\n\nexport { getStorageClientFunc as getStorageClient }\n"],"names":["cloudStoragePlugin","createAzureAdapter","getStorageClient","getStorageClientFunc","azureStorage","azureStorageOptions","name","collections","Object","keys","init","incomingConfig","connectionString","containerName","isPluginDisabled","enabled","collectionsWithoutAdapter","entries","reduce","acc","slug","collOptions","adapter","useCompositePrefixes","createContainerIfNotExists","containerClient","containerAccess","createIfNotExists","access","allowContainerCreate","baseURL","clientUploads","collectionsWithAdapter","config","map","collection","upload","disableLocalStorage"],"mappings":"AAOA,SAASA,kBAAkB,QAAQ,mCAAkC;AAErE,SAASC,kBAAkB,QAAQ,eAAc;AACjD,SAASC,oBAAoBC,oBAAoB,QAAQ,8BAA6B;AA0FtF,OAAO,MAAMC,eAAoC,CAC/CC,sBACoB,CAAA;QACpBC,MAAM;QACNC,aAAaC,OAAOC,IAAI,CAACJ,oBAAoBE,WAAW;QACxDG,MAAM,CAACC;YACL,MAAMT,mBAAmB,IACvBC,qBAAqB;oBACnBS,kBAAkBP,oBAAoBO,gBAAgB;oBACtDC,eAAeR,oBAAoBQ,aAAa;gBAClD;YAEF,MAAMC,mBAAmBT,oBAAoBU,OAAO,KAAK;YAEzD,IAAID,kBAAkB;gBACpB,+EAA+E;gBAC/E,uEAAuE;gBACvE,MAAME,4BAAsER,OAAOS,OAAO,CACxFZ,oBAAoBE,WAAW,EAC/BW,MAAM,CACN,CAACC,KAAK,CAACC,MAAMC,YAAY,GAAM,CAAA;wBAC7B,GAAGF,GAAG;wBACN,CAACC,KAAK,EAAE;4BAAE,GAAIC,gBAAgB,OAAO,CAAC,IAAIA,WAAW;4BAAGC,SAAS;wBAAK;oBACxE,CAAA,GACA,CAAC;gBAGH,OAAOtB,mBAAmB;oBACxBO,aAAaS;oBACbD,SAAS;oBACTQ,sBAAsBlB,oBAAoBkB,oBAAoB;gBAChE,GAAGZ;YACL;YAEA,MAAMa,6BAA6B;gBACjC,MAAMC,kBAAkBtB,qBAAqB;oBAC3CS,kBAAkBP,oBAAoBO,gBAAgB;oBACtDC,eAAeR,oBAAoBQ,aAAa;gBAClD;gBAEA,qEAAqE;gBACrE,MAAMa,kBAAkBrB,oBAAoBqB,eAAe,IAAI;gBAE/D,IAAIA,oBAAoB,WAAW;oBACjC,MAAMD,gBAAgBE,iBAAiB;gBACzC,OAAO;oBACL,MAAMF,gBAAgBE,iBAAiB,CAAC;wBAAEC,QAAQF;oBAAgB;gBACpE;YACF;YAEA,MAAMJ,UAAUrB,mBAAmB;gBACjC4B,sBAAsBxB,oBAAoBwB,oBAAoB;gBAC9DC,SAASzB,oBAAoByB,OAAO;gBACpCC,eAAe1B,oBAAoB0B,aAAa;gBAChDlB,eAAeR,oBAAoBQ,aAAa;gBAChDW;gBACAtB;gBACAqB,sBAAsBlB,oBAAoBkB,oBAAoB;YAChE;YAEA,+CAA+C;YAC/C,MAAMS,yBAAmExB,OAAOS,OAAO,CACrFZ,oBAAoBE,WAAW,EAC/BW,MAAM,CACN,CAACC,KAAK,CAACC,MAAMC,YAAY,GAAM,CAAA;oBAC7B,GAAGF,GAAG;oBACN,CAACC,KAAK,EAAE;wBACN,GAAIC,gBAAgB,OAAO,CAAC,IAAIA,WAAW;wBAC3CC;oBACF;gBACF,CAAA,GACA,CAAC;YAGH,gFAAgF;YAChF,MAAMW,SAAS;gBACb,GAAGtB,cAAc;gBACjBJ,aAAa,AAACI,CAAAA,eAAeJ,WAAW,IAAI,EAAE,AAAD,EAAG2B,GAAG,CAAC,CAACC;oBACnD,IAAI,CAACH,sBAAsB,CAACG,WAAWf,IAAI,CAAC,EAAE;wBAC5C,OAAOe;oBACT;oBAEA,OAAO;wBACL,GAAGA,UAAU;wBACbC,QAAQ;4BACN,GAAI,OAAOD,WAAWC,MAAM,KAAK,WAAWD,WAAWC,MAAM,GAAG,CAAC,CAAC;4BAClEC,qBAAqB;wBACvB;oBACF;gBACF;YACF;YAEA,OAAOrC,mBAAmB;gBACxBO,aAAayB;gBACbT,sBAAsBlB,oBAAoBkB,oBAAoB;YAChE,GAAGU;QACL;IACF,CAAA,EAAE;AAEF,SAAS9B,wBAAwBD,gBAAgB,GAAE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/storage-azure",
-  "version": "4.0.0-canary.34",
+  "version": "4.0.0-canary.36",
   "description": "Payload storage adapter for Azure Blob Storage",
   "homepage": "https://payloadcms.com",
   "repository": {
@@ -39,13 +39,13 @@
   "dependencies": {
     "@azure/abort-controller": "^1.1.0",
     "@azure/storage-blob": "^12.33.0",
-    "@payloadcms/plugin-cloud-storage": "4.0.0-canary.34"
+    "@payloadcms/plugin-cloud-storage": "4.0.0-canary.36"
   },
   "devDependencies": {
-    "payload": "4.0.0-canary.34"
+    "payload": "4.0.0-canary.36"
   },
   "peerDependencies": {
-    "payload": "4.0.0-canary.34"
+    "payload": "4.0.0-canary.36"
   },
   "engines": {
     "node": ">=24.15.0"

package/dist/adapter.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=adapter.spec.d.ts.map

package/dist/adapter.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"adapter.spec.d.ts","sourceRoot":"","sources":["../src/adapter.spec.ts"],"names":[],"mappings":""}

package/dist/adapter.spec.js

@@ -1,54 +0,0 @@
-import { describe, expect, it, vi } from 'vitest';
-import { createAzureAdapter } from './adapter.js';
-const createAdapter = ()=>createAzureAdapter({
-        allowContainerCreate: false,
-        baseURL: 'https://account.blob.core.windows.net',
-        clientUploads: true,
-        containerName: 'media',
-        createContainerIfNotExists: vi.fn(),
-        getStorageClient: vi.fn()
-    });
-describe('Azure client uploads', ()=>{
-    it.each([
-        [
-            'secure defaults',
-            {
-                upload: true
-            },
-            false
-        ],
-        [
-            'explicit opt-out',
-            {
-                upload: {
-                    allowRestrictedFileTypes: true
-                }
-            },
-            true
-        ]
-    ])('should use server uploads for %s', (_, collection, expected)=>{
-        const adapter = createAdapter()({
-            collection: collection,
-            prefix: ''
-        });
-        expect(adapter.uploadInstructions?.enabled).toBe(expected);
-    });
-});
-it('should generate a public URL for the stored legacy prefix', ()=>{
-    const collection = {
-        slug: 'media',
-        fields: []
-    };
-    const adapter = createAdapter()({
-        collection,
-        prefix: 'uploads'
-    });
-    expect(adapter.generateURL({
-        collection,
-        data: {},
-        filename: 'file.png',
-        prefix: 'legacy'
-    })).toBe('https://account.blob.core.windows.net/media/legacy/file.png');
-});
-
-//# sourceMappingURL=adapter.spec.js.map

package/dist/adapter.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/adapter.spec.ts"],"sourcesContent":["import type { CollectionConfig } from 'payload'\n\nimport { describe, expect, it, vi } from 'vitest'\n\nimport { createAzureAdapter } from './adapter.js'\n\nconst createAdapter = () =>\n  createAzureAdapter({\n    allowContainerCreate: false,\n    baseURL: 'https://account.blob.core.windows.net',\n    clientUploads: true,\n    containerName: 'media',\n    createContainerIfNotExists: vi.fn(),\n    getStorageClient: vi.fn(),\n  })\n\ndescribe('Azure client uploads', () => {\n  it.each([\n    ['secure defaults', { upload: true }, false],\n    ['explicit opt-out', { upload: { allowRestrictedFileTypes: true } }, true],\n  ])('should use server uploads for %s', (_, collection, expected) => {\n    const adapter = createAdapter()({\n      collection: collection as unknown as CollectionConfig,\n      prefix: '',\n    })\n\n    expect(adapter.uploadInstructions?.enabled).toBe(expected)\n  })\n})\n\nit('should generate a public URL for the stored legacy prefix', () => {\n  const collection: CollectionConfig = { slug: 'media', fields: [] }\n  const adapter = createAdapter()({\n    collection,\n    prefix: 'uploads',\n  })\n\n  expect(\n    adapter.generateURL!({ collection, data: {}, filename: 'file.png', prefix: 'legacy' }),\n  ).toBe('https://account.blob.core.windows.net/media/legacy/file.png')\n})\n"],"names":["describe","expect","it","vi","createAzureAdapter","createAdapter","allowContainerCreate","baseURL","clientUploads","containerName","createContainerIfNotExists","fn","getStorageClient","each","upload","allowRestrictedFileTypes","_","collection","expected","adapter","prefix","uploadInstructions","enabled","toBe","slug","fields","generateURL","data","filename"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAEjD,SAASC,kBAAkB,QAAQ,eAAc;AAEjD,MAAMC,gBAAgB,IACpBD,mBAAmB;QACjBE,sBAAsB;QACtBC,SAAS;QACTC,eAAe;QACfC,eAAe;QACfC,4BAA4BP,GAAGQ,EAAE;QACjCC,kBAAkBT,GAAGQ,EAAE;IACzB;AAEFX,SAAS,wBAAwB;IAC/BE,GAAGW,IAAI,CAAC;QACN;YAAC;YAAmB;gBAAEC,QAAQ;YAAK;YAAG;SAAM;QAC5C;YAAC;YAAoB;gBAAEA,QAAQ;oBAAEC,0BAA0B;gBAAK;YAAE;YAAG;SAAK;KAC3E,EAAE,oCAAoC,CAACC,GAAGC,YAAYC;QACrD,MAAMC,UAAUd,gBAAgB;YAC9BY,YAAYA;YACZG,QAAQ;QACV;QAEAnB,OAAOkB,QAAQE,kBAAkB,EAAEC,SAASC,IAAI,CAACL;IACnD;AACF;AAEAhB,GAAG,6DAA6D;IAC9D,MAAMe,aAA+B;QAAEO,MAAM;QAASC,QAAQ,EAAE;IAAC;IACjE,MAAMN,UAAUd,gBAAgB;QAC9BY;QACAG,QAAQ;IACV;IAEAnB,OACEkB,QAAQO,WAAW,CAAE;QAAET;QAAYU,MAAM,CAAC;QAAGC,UAAU;QAAYR,QAAQ;IAAS,IACpFG,IAAI,CAAC;AACT"}

package/dist/client/handleAzureUpload.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=handleAzureUpload.spec.d.ts.map

package/dist/client/handleAzureUpload.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handleAzureUpload.spec.d.ts","sourceRoot":"","sources":["../../src/client/handleAzureUpload.spec.ts"],"names":[],"mappings":""}

package/dist/client/handleAzureUpload.spec.js

@@ -1,65 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from 'vitest';
-const uploadDataMock = vi.fn();
-const blockBlobClientMock = vi.fn(function() {
-    return {
-        uploadData: uploadDataMock
-    };
-});
-vi.mock('@azure/storage-blob', ()=>({
-        BlockBlobClient: blockBlobClientMock
-    }));
-import { handleAzureUpload } from './handleAzureUpload.js';
-const signedURL = 'https://account.blob.core.windows.net/container/file.png?sig=abc';
-const createFile = ()=>new File([
-        new Uint8Array([
-            1,
-            2,
-            3
-        ])
-    ], 'file.png', {
-        type: 'image/png'
-    });
-describe('handleAzureUpload', ()=>{
-    beforeEach(()=>{
-        vi.clearAllMocks();
-        uploadDataMock.mockResolvedValue(undefined);
-    });
-    it('should upload via BlockBlobClient.uploadData', async ()=>{
-        const file = createFile();
-        await handleAzureUpload({
-            data: {
-                url: signedURL
-            },
-            file
-        });
-        expect(blockBlobClientMock).toHaveBeenCalledWith(signedURL);
-        expect(uploadDataMock).toHaveBeenCalledTimes(1);
-        const [uploadedFile, options] = uploadDataMock.mock.calls[0];
-        expect(uploadedFile).toBe(file);
-        expect(options.blockSize).toBeGreaterThan(0);
-        expect(options.concurrency).toBeGreaterThan(0);
-    });
-    it('should pass the file content type to the blob headers', async ()=>{
-        await handleAzureUpload({
-            data: {
-                url: signedURL
-            },
-            file: createFile()
-        });
-        const [, options] = uploadDataMock.mock.calls[0];
-        expect(options.blobHTTPHeaders).toEqual({
-            blobContentType: 'image/png'
-        });
-    });
-    it('should propagate errors from uploadData', async ()=>{
-        uploadDataMock.mockRejectedValue(new Error('block upload failed'));
-        await expect(handleAzureUpload({
-            data: {
-                url: signedURL
-            },
-            file: createFile()
-        })).rejects.toThrow('block upload failed');
-    });
-});
-
-//# sourceMappingURL=handleAzureUpload.spec.js.map

package/dist/client/handleAzureUpload.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/client/handleAzureUpload.spec.ts"],"sourcesContent":["import { beforeEach, describe, expect, it, vi } from 'vitest'\n\nconst uploadDataMock = vi.fn()\nconst blockBlobClientMock = vi.fn(function () {\n  return { uploadData: uploadDataMock }\n})\n\nvi.mock('@azure/storage-blob', () => ({\n  BlockBlobClient: blockBlobClientMock,\n}))\n\nimport { handleAzureUpload } from './handleAzureUpload.js'\n\nconst signedURL = 'https://account.blob.core.windows.net/container/file.png?sig=abc'\n\nconst createFile = () => new File([new Uint8Array([1, 2, 3])], 'file.png', { type: 'image/png' })\n\ndescribe('handleAzureUpload', () => {\n  beforeEach(() => {\n    vi.clearAllMocks()\n    uploadDataMock.mockResolvedValue(undefined)\n  })\n\n  it('should upload via BlockBlobClient.uploadData', async () => {\n    const file = createFile()\n\n    await handleAzureUpload({ data: { url: signedURL }, file })\n\n    expect(blockBlobClientMock).toHaveBeenCalledWith(signedURL)\n    expect(uploadDataMock).toHaveBeenCalledTimes(1)\n\n    const [uploadedFile, options] = uploadDataMock.mock.calls[0]!\n    expect(uploadedFile).toBe(file)\n    expect(options.blockSize).toBeGreaterThan(0)\n    expect(options.concurrency).toBeGreaterThan(0)\n  })\n\n  it('should pass the file content type to the blob headers', async () => {\n    await handleAzureUpload({ data: { url: signedURL }, file: createFile() })\n\n    const [, options] = uploadDataMock.mock.calls[0]!\n    expect(options.blobHTTPHeaders).toEqual({ blobContentType: 'image/png' })\n  })\n\n  it('should propagate errors from uploadData', async () => {\n    uploadDataMock.mockRejectedValue(new Error('block upload failed'))\n\n    await expect(\n      handleAzureUpload({ data: { url: signedURL }, file: createFile() }),\n    ).rejects.toThrow('block upload failed')\n  })\n})\n"],"names":["beforeEach","describe","expect","it","vi","uploadDataMock","fn","blockBlobClientMock","uploadData","mock","BlockBlobClient","handleAzureUpload","signedURL","createFile","File","Uint8Array","type","clearAllMocks","mockResolvedValue","undefined","file","data","url","toHaveBeenCalledWith","toHaveBeenCalledTimes","uploadedFile","options","calls","toBe","blockSize","toBeGreaterThan","concurrency","blobHTTPHeaders","toEqual","blobContentType","mockRejectedValue","Error","rejects","toThrow"],"mappings":"AAAA,SAASA,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAE7D,MAAMC,iBAAiBD,GAAGE,EAAE;AAC5B,MAAMC,sBAAsBH,GAAGE,EAAE,CAAC;IAChC,OAAO;QAAEE,YAAYH;IAAe;AACtC;AAEAD,GAAGK,IAAI,CAAC,uBAAuB,IAAO,CAAA;QACpCC,iBAAiBH;IACnB,CAAA;AAEA,SAASI,iBAAiB,QAAQ,yBAAwB;AAE1D,MAAMC,YAAY;AAElB,MAAMC,aAAa,IAAM,IAAIC,KAAK;QAAC,IAAIC,WAAW;YAAC;YAAG;YAAG;SAAE;KAAE,EAAE,YAAY;QAAEC,MAAM;IAAY;AAE/Ff,SAAS,qBAAqB;IAC5BD,WAAW;QACTI,GAAGa,aAAa;QAChBZ,eAAea,iBAAiB,CAACC;IACnC;IAEAhB,GAAG,gDAAgD;QACjD,MAAMiB,OAAOP;QAEb,MAAMF,kBAAkB;YAAEU,MAAM;gBAAEC,KAAKV;YAAU;YAAGQ;QAAK;QAEzDlB,OAAOK,qBAAqBgB,oBAAoB,CAACX;QACjDV,OAAOG,gBAAgBmB,qBAAqB,CAAC;QAE7C,MAAM,CAACC,cAAcC,QAAQ,GAAGrB,eAAeI,IAAI,CAACkB,KAAK,CAAC,EAAE;QAC5DzB,OAAOuB,cAAcG,IAAI,CAACR;QAC1BlB,OAAOwB,QAAQG,SAAS,EAAEC,eAAe,CAAC;QAC1C5B,OAAOwB,QAAQK,WAAW,EAAED,eAAe,CAAC;IAC9C;IAEA3B,GAAG,yDAAyD;QAC1D,MAAMQ,kBAAkB;YAAEU,MAAM;gBAAEC,KAAKV;YAAU;YAAGQ,MAAMP;QAAa;QAEvE,MAAM,GAAGa,QAAQ,GAAGrB,eAAeI,IAAI,CAACkB,KAAK,CAAC,EAAE;QAChDzB,OAAOwB,QAAQM,eAAe,EAAEC,OAAO,CAAC;YAAEC,iBAAiB;QAAY;IACzE;IAEA/B,GAAG,2CAA2C;QAC5CE,eAAe8B,iBAAiB,CAAC,IAAIC,MAAM;QAE3C,MAAMlC,OACJS,kBAAkB;YAAEU,MAAM;gBAAEC,KAAKV;YAAU;YAAGQ,MAAMP;QAAa,IACjEwB,OAAO,CAACC,OAAO,CAAC;IACpB;AACF"}

package/dist/generateUploadInstructions.createOnly.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=generateUploadInstructions.createOnly.spec.d.ts.map

package/dist/generateUploadInstructions.createOnly.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"generateUploadInstructions.createOnly.spec.d.ts","sourceRoot":"","sources":["../src/generateUploadInstructions.createOnly.spec.ts"],"names":[],"mappings":""}

package/dist/generateUploadInstructions.createOnly.spec.js

@@ -1,63 +0,0 @@
-import { describe, expect, it, vi } from 'vitest';
-const azureMocks = vi.hoisted(()=>({
-        generateBlobSASQueryParameters: vi.fn(()=>({
-                toString: ()=>'signature'
-            })),
-        parsePermissions: vi.fn(()=>({
-                create: true
-            }))
-    }));
-vi.mock('@azure/storage-blob', ()=>({
-        BlobSASPermissions: {
-            parse: azureMocks.parsePermissions
-        },
-        generateBlobSASQueryParameters: azureMocks.generateBlobSASQueryParameters
-    }));
-vi.mock('@payloadcms/plugin-cloud-storage/utilities', ()=>({
-        resolveSignedURLKey: vi.fn(async ()=>({
-                storageFilePath: 'reference.png',
-                sanitizedDocPrefix: '',
-                sanitizedFilename: 'reference.png'
-            }))
-    }));
-import { generateUploadInstructions } from './generateUploadInstructions.js';
-describe('generateUploadInstructions', ()=>{
-    it('should issue create-only Azure upload instructions', async ()=>{
-        const generate = generateUploadInstructions({
-            collectionPrefix: '',
-            containerName: 'media',
-            getStorageClient: ()=>({
-                    credential: {},
-                    getBlobClient: ()=>({
-                            url: 'https://example.com/reference.png'
-                        })
-                })
-        });
-        await generate({
-            collectionSlug: 'media',
-            filename: 'reference.png',
-            filesize: 100,
-            mimeType: 'image/png',
-            overrideAccess: true,
-            req: {
-                payload: {
-                    collections: {
-                        media: {
-                            config: {
-                                upload: {
-                                    allowRestrictedFileTypes: true
-                                }
-                            }
-                        }
-                    }
-                }
-            }
-        });
-        expect(azureMocks.parsePermissions).toHaveBeenCalledExactlyOnceWith('c');
-        expect(azureMocks.generateBlobSASQueryParameters).toHaveBeenCalledWith(expect.objectContaining({
-            version: '2026-04-06'
-        }), expect.anything());
-    });
-});
-
-//# sourceMappingURL=generateUploadInstructions.createOnly.spec.js.map

package/dist/generateUploadInstructions.createOnly.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/generateUploadInstructions.createOnly.spec.ts"],"sourcesContent":["import type { ContainerClient } from '@azure/storage-blob'\nimport type { PayloadRequest } from 'payload'\n\nimport { describe, expect, it, vi } from 'vitest'\n\nconst azureMocks = vi.hoisted(() => ({\n  generateBlobSASQueryParameters: vi.fn(() => ({ toString: () => 'signature' })),\n  parsePermissions: vi.fn(() => ({ create: true })),\n}))\n\nvi.mock('@azure/storage-blob', () => ({\n  BlobSASPermissions: { parse: azureMocks.parsePermissions },\n  generateBlobSASQueryParameters: azureMocks.generateBlobSASQueryParameters,\n}))\n\nvi.mock('@payloadcms/plugin-cloud-storage/utilities', () => ({\n  resolveSignedURLKey: vi.fn(async () => ({\n    storageFilePath: 'reference.png',\n    sanitizedDocPrefix: '',\n    sanitizedFilename: 'reference.png',\n  })),\n}))\n\nimport { generateUploadInstructions } from './generateUploadInstructions.js'\n\ndescribe('generateUploadInstructions', () => {\n  it('should issue create-only Azure upload instructions', async () => {\n    const generate = generateUploadInstructions({\n      collectionPrefix: '',\n      containerName: 'media',\n      getStorageClient: () =>\n        ({\n          credential: {},\n          getBlobClient: () => ({ url: 'https://example.com/reference.png' }),\n        }) as unknown as ContainerClient,\n    })\n\n    await generate({\n      collectionSlug: 'media',\n      filename: 'reference.png',\n      filesize: 100,\n      mimeType: 'image/png',\n      overrideAccess: true,\n      req: {\n        payload: {\n          collections: {\n            media: {\n              config: {\n                upload: { allowRestrictedFileTypes: true },\n              },\n            },\n          },\n        },\n      } as unknown as PayloadRequest,\n    })\n\n    expect(azureMocks.parsePermissions).toHaveBeenCalledExactlyOnceWith('c')\n    expect(azureMocks.generateBlobSASQueryParameters).toHaveBeenCalledWith(\n      expect.objectContaining({ version: '2026-04-06' }),\n      expect.anything(),\n    )\n  })\n})\n"],"names":["describe","expect","it","vi","azureMocks","hoisted","generateBlobSASQueryParameters","fn","toString","parsePermissions","create","mock","BlobSASPermissions","parse","resolveSignedURLKey","storageFilePath","sanitizedDocPrefix","sanitizedFilename","generateUploadInstructions","generate","collectionPrefix","containerName","getStorageClient","credential","getBlobClient","url","collectionSlug","filename","filesize","mimeType","overrideAccess","req","payload","collections","media","config","upload","allowRestrictedFileTypes","toHaveBeenCalledExactlyOnceWith","toHaveBeenCalledWith","objectContaining","version","anything"],"mappings":"AAGA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAEjD,MAAMC,aAAaD,GAAGE,OAAO,CAAC,IAAO,CAAA;QACnCC,gCAAgCH,GAAGI,EAAE,CAAC,IAAO,CAAA;gBAAEC,UAAU,IAAM;YAAY,CAAA;QAC3EC,kBAAkBN,GAAGI,EAAE,CAAC,IAAO,CAAA;gBAAEG,QAAQ;YAAK,CAAA;IAChD,CAAA;AAEAP,GAAGQ,IAAI,CAAC,uBAAuB,IAAO,CAAA;QACpCC,oBAAoB;YAAEC,OAAOT,WAAWK,gBAAgB;QAAC;QACzDH,gCAAgCF,WAAWE,8BAA8B;IAC3E,CAAA;AAEAH,GAAGQ,IAAI,CAAC,8CAA8C,IAAO,CAAA;QAC3DG,qBAAqBX,GAAGI,EAAE,CAAC,UAAa,CAAA;gBACtCQ,iBAAiB;gBACjBC,oBAAoB;gBACpBC,mBAAmB;YACrB,CAAA;IACF,CAAA;AAEA,SAASC,0BAA0B,QAAQ,kCAAiC;AAE5ElB,SAAS,8BAA8B;IACrCE,GAAG,sDAAsD;QACvD,MAAMiB,WAAWD,2BAA2B;YAC1CE,kBAAkB;YAClBC,eAAe;YACfC,kBAAkB,IACf,CAAA;oBACCC,YAAY,CAAC;oBACbC,eAAe,IAAO,CAAA;4BAAEC,KAAK;wBAAoC,CAAA;gBACnE,CAAA;QACJ;QAEA,MAAMN,SAAS;YACbO,gBAAgB;YAChBC,UAAU;YACVC,UAAU;YACVC,UAAU;YACVC,gBAAgB;YAChBC,KAAK;gBACHC,SAAS;oBACPC,aAAa;wBACXC,OAAO;4BACLC,QAAQ;gCACNC,QAAQ;oCAAEC,0BAA0B;gCAAK;4BAC3C;wBACF;oBACF;gBACF;YACF;QACF;QAEApC,OAAOG,WAAWK,gBAAgB,EAAE6B,+BAA+B,CAAC;QACpErC,OAAOG,WAAWE,8BAA8B,EAAEiC,oBAAoB,CACpEtC,OAAOuC,gBAAgB,CAAC;YAAEC,SAAS;QAAa,IAChDxC,OAAOyC,QAAQ;IAEnB;AACF"}

package/dist/generateUploadInstructions.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=generateUploadInstructions.spec.d.ts.map

package/dist/generateUploadInstructions.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"generateUploadInstructions.spec.d.ts","sourceRoot":"","sources":["../src/generateUploadInstructions.spec.ts"],"names":[],"mappings":""}

package/dist/generateUploadInstructions.spec.js

@@ -1,72 +0,0 @@
-import { StorageSharedKeyCredential } from '@azure/storage-blob';
-import { describe, expect, it, vi } from 'vitest';
-import { generateUploadInstructions } from './generateUploadInstructions.js';
-const createRequest = (allowRestrictedFileTypes)=>({
-        payload: {
-            collections: {
-                media: {
-                    config: {
-                        slug: 'media',
-                        upload: {
-                            allowRestrictedFileTypes
-                        }
-                    }
-                }
-            },
-            config: {
-                upload: {}
-            },
-            db: {
-                findOne: ()=>Promise.resolve(null)
-            }
-        },
-        user: {
-            id: 'user-id'
-        }
-    });
-const createGenerator = (getStorageClient)=>generateUploadInstructions({
-        collectionPrefix: '',
-        containerName: 'media',
-        getStorageClient
-    });
-describe('generateUploadInstructions', ()=>{
-    it('should use Payload uploads under secure defaults', async ()=>{
-        const getStorageClient = vi.fn();
-        await expect(createGenerator(getStorageClient)({
-            collectionSlug: 'media',
-            filename: 'reference.png',
-            filesize: 1,
-            mimeType: 'image/png',
-            overrideAccess: false,
-            req: createRequest(false)
-        })).rejects.toThrow('Azure client uploads require allowRestrictedFileTypes to be enabled.');
-        expect(getStorageClient).not.toHaveBeenCalled();
-    });
-    it('should generate direct instructions for the explicit opt-out', async ()=>{
-        const credential = new StorageSharedKeyCredential('account', Buffer.alloc(32, 'a').toString('base64'));
-        const getStorageClient = ()=>({
-                credential,
-                getBlobClient: (key)=>({
-                        url: `https://account.blob.core.windows.net/media/${key}`
-                    })
-            });
-        await expect(createGenerator(getStorageClient)({
-            collectionSlug: 'media',
-            filename: 'reference.png',
-            filesize: 1,
-            mimeType: 'image/png',
-            overrideAccess: false,
-            req: createRequest(true)
-        })).resolves.toMatchObject({
-            file: {
-                filename: 'reference.png',
-                mimeType: 'image/png',
-                size: 1
-            },
-            name: 'uploadToAzure',
-            type: 'dispatch'
-        });
-    });
-});
-
-//# sourceMappingURL=generateUploadInstructions.spec.js.map

package/dist/generateUploadInstructions.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/generateUploadInstructions.spec.ts"],"sourcesContent":["import type { ContainerClient } from '@azure/storage-blob'\nimport type { PayloadRequest } from 'payload'\n\nimport { StorageSharedKeyCredential } from '@azure/storage-blob'\nimport { describe, expect, it, vi } from 'vitest'\n\nimport { generateUploadInstructions } from './generateUploadInstructions.js'\n\nconst createRequest = (allowRestrictedFileTypes: boolean): PayloadRequest =>\n  ({\n    payload: {\n      collections: {\n        media: {\n          config: {\n            slug: 'media',\n            upload: { allowRestrictedFileTypes },\n          },\n        },\n      },\n      config: { upload: {} },\n      db: { findOne: () => Promise.resolve(null) },\n    },\n    user: { id: 'user-id' },\n  }) as unknown as PayloadRequest\n\nconst createGenerator = (getStorageClient: () => ContainerClient) =>\n  generateUploadInstructions({\n    collectionPrefix: '',\n    containerName: 'media',\n    getStorageClient,\n  })\n\ndescribe('generateUploadInstructions', () => {\n  it('should use Payload uploads under secure defaults', async () => {\n    const getStorageClient = vi.fn()\n\n    await expect(\n      createGenerator(getStorageClient)({\n        collectionSlug: 'media',\n        filename: 'reference.png',\n        filesize: 1,\n        mimeType: 'image/png',\n        overrideAccess: false,\n        req: createRequest(false),\n      }),\n    ).rejects.toThrow('Azure client uploads require allowRestrictedFileTypes to be enabled.')\n\n    expect(getStorageClient).not.toHaveBeenCalled()\n  })\n\n  it('should generate direct instructions for the explicit opt-out', async () => {\n    const credential = new StorageSharedKeyCredential(\n      'account',\n      Buffer.alloc(32, 'a').toString('base64'),\n    )\n    const getStorageClient = () =>\n      ({\n        credential,\n        getBlobClient: (key: string) => ({\n          url: `https://account.blob.core.windows.net/media/${key}`,\n        }),\n      }) as unknown as ContainerClient\n\n    await expect(\n      createGenerator(getStorageClient)({\n        collectionSlug: 'media',\n        filename: 'reference.png',\n        filesize: 1,\n        mimeType: 'image/png',\n        overrideAccess: false,\n        req: createRequest(true),\n      }),\n    ).resolves.toMatchObject({\n      file: {\n        filename: 'reference.png',\n        mimeType: 'image/png',\n        size: 1,\n      },\n      name: 'uploadToAzure',\n      type: 'dispatch',\n    })\n  })\n})\n"],"names":["StorageSharedKeyCredential","describe","expect","it","vi","generateUploadInstructions","createRequest","allowRestrictedFileTypes","payload","collections","media","config","slug","upload","db","findOne","Promise","resolve","user","id","createGenerator","getStorageClient","collectionPrefix","containerName","fn","collectionSlug","filename","filesize","mimeType","overrideAccess","req","rejects","toThrow","not","toHaveBeenCalled","credential","Buffer","alloc","toString","getBlobClient","key","url","resolves","toMatchObject","file","size","name","type"],"mappings":"AAGA,SAASA,0BAA0B,QAAQ,sBAAqB;AAChE,SAASC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAEjD,SAASC,0BAA0B,QAAQ,kCAAiC;AAE5E,MAAMC,gBAAgB,CAACC,2BACpB,CAAA;QACCC,SAAS;YACPC,aAAa;gBACXC,OAAO;oBACLC,QAAQ;wBACNC,MAAM;wBACNC,QAAQ;4BAAEN;wBAAyB;oBACrC;gBACF;YACF;YACAI,QAAQ;gBAAEE,QAAQ,CAAC;YAAE;YACrBC,IAAI;gBAAEC,SAAS,IAAMC,QAAQC,OAAO,CAAC;YAAM;QAC7C;QACAC,MAAM;YAAEC,IAAI;QAAU;IACxB,CAAA;AAEF,MAAMC,kBAAkB,CAACC,mBACvBhB,2BAA2B;QACzBiB,kBAAkB;QAClBC,eAAe;QACfF;IACF;AAEFpB,SAAS,8BAA8B;IACrCE,GAAG,oDAAoD;QACrD,MAAMkB,mBAAmBjB,GAAGoB,EAAE;QAE9B,MAAMtB,OACJkB,gBAAgBC,kBAAkB;YAChCI,gBAAgB;YAChBC,UAAU;YACVC,UAAU;YACVC,UAAU;YACVC,gBAAgB;YAChBC,KAAKxB,cAAc;QACrB,IACAyB,OAAO,CAACC,OAAO,CAAC;QAElB9B,OAAOmB,kBAAkBY,GAAG,CAACC,gBAAgB;IAC/C;IAEA/B,GAAG,gEAAgE;QACjE,MAAMgC,aAAa,IAAInC,2BACrB,WACAoC,OAAOC,KAAK,CAAC,IAAI,KAAKC,QAAQ,CAAC;QAEjC,MAAMjB,mBAAmB,IACtB,CAAA;gBACCc;gBACAI,eAAe,CAACC,MAAiB,CAAA;wBAC/BC,KAAK,CAAC,4CAA4C,EAAED,KAAK;oBAC3D,CAAA;YACF,CAAA;QAEF,MAAMtC,OACJkB,gBAAgBC,kBAAkB;YAChCI,gBAAgB;YAChBC,UAAU;YACVC,UAAU;YACVC,UAAU;YACVC,gBAAgB;YAChBC,KAAKxB,cAAc;QACrB,IACAoC,QAAQ,CAACC,aAAa,CAAC;YACvBC,MAAM;gBACJlB,UAAU;gBACVE,UAAU;gBACViB,MAAM;YACR;YACAC,MAAM;YACNC,MAAM;QACR;IACF;AACF"}

package/dist/index.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=index.spec.d.ts.map

package/dist/index.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.spec.d.ts","sourceRoot":"","sources":["../src/index.spec.ts"],"names":[],"mappings":""}

package/dist/index.spec.js

@@ -1,80 +0,0 @@
-import { describe, expect, it, vi } from 'vitest';
-// Inspect the access level the adapter passes when it provisions a container.
-const { createIfNotExists } = vi.hoisted(()=>({
-        createIfNotExists: vi.fn()
-    }));
-// Capture the closure index.ts hands to the adapter (normally run via onInit).
-const captured = vi.hoisted(()=>({
-        createContainerIfNotExists: undefined
-    }));
-vi.mock('./utils/getStorageClient.js', ()=>({
-        getStorageClient: ()=>({
-                createIfNotExists
-            })
-    }));
-vi.mock('./adapter.js', ()=>({
-        createAzureAdapter: (args)=>{
-            captured.createContainerIfNotExists = args.createContainerIfNotExists;
-            return ()=>({
-                    name: 'azure'
-                });
-        }
-    }));
-vi.mock('@payloadcms/plugin-cloud-storage', ()=>({
-        cloudStoragePlugin: ()=>(config)=>config
-    }));
-const { azureStorage } = await import('./index.js');
-const runContainerCreate = (containerAccess)=>{
-    createIfNotExists.mockClear();
-    const adapter = azureStorage({
-        allowContainerCreate: true,
-        baseURL: 'https://account.blob.core.windows.net',
-        collections: {
-            media: true
-        },
-        connectionString: 'UseDevelopmentStorage=true',
-        containerAccess,
-        containerName: 'media'
-    });
-    adapter.init({
-        collections: []
-    });
-    captured.createContainerIfNotExists?.();
-    return createIfNotExists.mock.calls[0]?.[0];
-};
-describe('azureStorage container creation', ()=>{
-    it('should not create the container with anonymous public blob access by default', ()=>{
-        const options = runContainerCreate();
-        expect(createIfNotExists).toHaveBeenCalledTimes(1);
-        // No access level == private. Any public value would bypass Payload's
-        // access-controlled route, so the default must stay private.
-        expect(options?.access).toBeUndefined();
-    });
-    it('should create a private container when containerAccess is private', ()=>{
-        const options = runContainerCreate('private');
-        expect(options?.access).toBeUndefined();
-    });
-    it('should apply public access only when explicitly opted in', ()=>{
-        expect(runContainerCreate('blob')?.access).toBe('blob');
-        expect(runContainerCreate('container')?.access).toBe('container');
-    });
-    it('should surface a creation failure as an awaitable rejection, not a swallowed promise', async ()=>{
-        createIfNotExists.mockClear();
-        createIfNotExists.mockRejectedValueOnce(new Error('AuthorizationFailure: public access is not permitted on this storage account'));
-        const adapter = azureStorage({
-            allowContainerCreate: true,
-            baseURL: 'https://account.blob.core.windows.net',
-            collections: {
-                media: true
-            },
-            connectionString: 'UseDevelopmentStorage=true',
-            containerName: 'media'
-        });
-        adapter.init({
-            collections: []
-        });
-        await expect(captured.createContainerIfNotExists?.()).rejects.toThrow('AuthorizationFailure');
-    });
-});
-
-//# sourceMappingURL=index.spec.js.map

package/dist/index.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.spec.ts"],"sourcesContent":["import type { Config } from 'payload'\n\nimport { describe, expect, it, vi } from 'vitest'\n\n// Inspect the access level the adapter passes when it provisions a container.\nconst { createIfNotExists } = vi.hoisted(() => ({ createIfNotExists: vi.fn() }))\n\n// Capture the closure index.ts hands to the adapter (normally run via onInit).\nconst captured = vi.hoisted(\n  () => ({ createContainerIfNotExists: undefined }) as { createContainerIfNotExists?: () => void },\n)\n\nvi.mock('./utils/getStorageClient.js', () => ({\n  getStorageClient: () => ({ createIfNotExists }),\n}))\n\nvi.mock('./adapter.js', () => ({\n  createAzureAdapter: (args: { createContainerIfNotExists: () => void }) => {\n    captured.createContainerIfNotExists = args.createContainerIfNotExists\n    return () => ({ name: 'azure' })\n  },\n}))\n\nvi.mock('@payloadcms/plugin-cloud-storage', () => ({\n  cloudStoragePlugin: () => (config: Config) => config,\n}))\n\nconst { azureStorage } = await import('./index.js')\n\nconst runContainerCreate = (\n  containerAccess?: 'blob' | 'container' | 'private',\n): { access?: string } | undefined => {\n  createIfNotExists.mockClear()\n\n  const adapter = azureStorage({\n    allowContainerCreate: true,\n    baseURL: 'https://account.blob.core.windows.net',\n    collections: { media: true },\n    connectionString: 'UseDevelopmentStorage=true',\n    containerAccess,\n    containerName: 'media',\n  })\n\n  adapter.init({ collections: [] } as unknown as Config)\n\n  captured.createContainerIfNotExists?.()\n\n  return createIfNotExists.mock.calls[0]?.[0] as { access?: string } | undefined\n}\n\ndescribe('azureStorage container creation', () => {\n  it('should not create the container with anonymous public blob access by default', () => {\n    const options = runContainerCreate()\n\n    expect(createIfNotExists).toHaveBeenCalledTimes(1)\n    // No access level == private. Any public value would bypass Payload's\n    // access-controlled route, so the default must stay private.\n    expect(options?.access).toBeUndefined()\n  })\n\n  it('should create a private container when containerAccess is private', () => {\n    const options = runContainerCreate('private')\n\n    expect(options?.access).toBeUndefined()\n  })\n\n  it('should apply public access only when explicitly opted in', () => {\n    expect(runContainerCreate('blob')?.access).toBe('blob')\n    expect(runContainerCreate('container')?.access).toBe('container')\n  })\n\n  it('should surface a creation failure as an awaitable rejection, not a swallowed promise', async () => {\n    createIfNotExists.mockClear()\n    createIfNotExists.mockRejectedValueOnce(\n      new Error('AuthorizationFailure: public access is not permitted on this storage account'),\n    )\n\n    const adapter = azureStorage({\n      allowContainerCreate: true,\n      baseURL: 'https://account.blob.core.windows.net',\n      collections: { media: true },\n      connectionString: 'UseDevelopmentStorage=true',\n      containerName: 'media',\n    })\n\n    adapter.init({ collections: [] } as unknown as Config)\n\n    await expect(captured.createContainerIfNotExists?.()).rejects.toThrow('AuthorizationFailure')\n  })\n})\n"],"names":["describe","expect","it","vi","createIfNotExists","hoisted","fn","captured","createContainerIfNotExists","undefined","mock","getStorageClient","createAzureAdapter","args","name","cloudStoragePlugin","config","azureStorage","runContainerCreate","containerAccess","mockClear","adapter","allowContainerCreate","baseURL","collections","media","connectionString","containerName","init","calls","options","toHaveBeenCalledTimes","access","toBeUndefined","toBe","mockRejectedValueOnce","Error","rejects","toThrow"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAEjD,8EAA8E;AAC9E,MAAM,EAAEC,iBAAiB,EAAE,GAAGD,GAAGE,OAAO,CAAC,IAAO,CAAA;QAAED,mBAAmBD,GAAGG,EAAE;IAAG,CAAA;AAE7E,+EAA+E;AAC/E,MAAMC,WAAWJ,GAAGE,OAAO,CACzB,IAAO,CAAA;QAAEG,4BAA4BC;IAAU,CAAA;AAGjDN,GAAGO,IAAI,CAAC,+BAA+B,IAAO,CAAA;QAC5CC,kBAAkB,IAAO,CAAA;gBAAEP;YAAkB,CAAA;IAC/C,CAAA;AAEAD,GAAGO,IAAI,CAAC,gBAAgB,IAAO,CAAA;QAC7BE,oBAAoB,CAACC;YACnBN,SAASC,0BAA0B,GAAGK,KAAKL,0BAA0B;YACrE,OAAO,IAAO,CAAA;oBAAEM,MAAM;gBAAQ,CAAA;QAChC;IACF,CAAA;AAEAX,GAAGO,IAAI,CAAC,oCAAoC,IAAO,CAAA;QACjDK,oBAAoB,IAAM,CAACC,SAAmBA;IAChD,CAAA;AAEA,MAAM,EAAEC,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC;AAEtC,MAAMC,qBAAqB,CACzBC;IAEAf,kBAAkBgB,SAAS;IAE3B,MAAMC,UAAUJ,aAAa;QAC3BK,sBAAsB;QACtBC,SAAS;QACTC,aAAa;YAAEC,OAAO;QAAK;QAC3BC,kBAAkB;QAClBP;QACAQ,eAAe;IACjB;IAEAN,QAAQO,IAAI,CAAC;QAAEJ,aAAa,EAAE;IAAC;IAE/BjB,SAASC,0BAA0B;IAEnC,OAAOJ,kBAAkBM,IAAI,CAACmB,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE;AAC7C;AAEA7B,SAAS,mCAAmC;IAC1CE,GAAG,gFAAgF;QACjF,MAAM4B,UAAUZ;QAEhBjB,OAAOG,mBAAmB2B,qBAAqB,CAAC;QAChD,sEAAsE;QACtE,6DAA6D;QAC7D9B,OAAO6B,SAASE,QAAQC,aAAa;IACvC;IAEA/B,GAAG,qEAAqE;QACtE,MAAM4B,UAAUZ,mBAAmB;QAEnCjB,OAAO6B,SAASE,QAAQC,aAAa;IACvC;IAEA/B,GAAG,4DAA4D;QAC7DD,OAAOiB,mBAAmB,SAASc,QAAQE,IAAI,CAAC;QAChDjC,OAAOiB,mBAAmB,cAAcc,QAAQE,IAAI,CAAC;IACvD;IAEAhC,GAAG,wFAAwF;QACzFE,kBAAkBgB,SAAS;QAC3BhB,kBAAkB+B,qBAAqB,CACrC,IAAIC,MAAM;QAGZ,MAAMf,UAAUJ,aAAa;YAC3BK,sBAAsB;YACtBC,SAAS;YACTC,aAAa;gBAAEC,OAAO;YAAK;YAC3BC,kBAAkB;YAClBC,eAAe;QACjB;QAEAN,QAAQO,IAAI,CAAC;YAAEJ,aAAa,EAAE;QAAC;QAE/B,MAAMvB,OAAOM,SAASC,0BAA0B,MAAM6B,OAAO,CAACC,OAAO,CAAC;IACxE;AACF"}