@payloadcms/storage-azure 4.0.0-internal.cea8867 → 4.0.0-internal.d21c039

package/dist/index.d.ts

@@ -8,16 +8,6 @@ export type AzureStorageOptions = {
      * @default false
      */
     allowContainerCreate: boolean;
-    /**
-     * When enabled, fields (like the prefix field) will always be inserted into
-     * the collection schema regardless of whether the plugin is enabled. This
-     * ensures a consistent schema across all environments.
-     *
-     * This will be enabled by default in Payload v4.
-     *
-     * @default false
-     */
-    alwaysInsertFields?: boolean;
     /**
      * Base URL for the Azure Blob storage account
      */
@@ -47,6 +37,21 @@ export type AzureStorageOptions = {
      * Azure Blob storage connection string
      */
     connectionString: string;
+    /**
+     * Public access level applied to a container that the plugin creates via
+     * `allowContainerCreate`. Has no effect on containers that already exist.
+     *
+     * - `'private'` (default): no anonymous access. Blobs are reachable only
+     *   through Payload's access-controlled file route.
+     * - `'blob'`: unauthenticated clients can read any blob directly from Azure.
+     * - `'container'`: unauthenticated clients can read and list blobs directly.
+     *
+     * Only choose `'blob'` or `'container'` if you deliberately want files served
+     * publicly from Azure, bypassing Payload read access control.
+     *
+     * @default 'private'
+     */
+    containerAccess?: 'blob' | 'container' | 'private';
     /**
      * Azure Blob storage container name
      */
@@ -59,14 +64,15 @@ export type AzureStorageOptions = {
     enabled?: boolean;
     /**
      * When true, the collection-level prefix and document-level prefix are combined
-     * (compositional). When false (default), document prefix overrides collection
-     * prefix entirely.
+     * (compositional). When false (default), a document prefix already within the
+     * collection prefix is used as-is for new uploads; otherwise it is nested beneath it.
+     * Existing files retain their stored prefixes for reads, URLs, and cleanup.
      *
-     * Example:
-     * - collection prefix: `collection-prefix/`
-     * - document prefix: `document-prefix/`
-     * - resulting prefix with useCompositePrefixes=true: `collection-prefix/document-prefix/`
-     * - resulting prefix with useCompositePrefixes=false: `document-prefix/`
+     * Example with a document prefix already contained by the collection prefix:
+     * - collection prefix: `uploads/`
+     * - document prefix: `uploads/documents/`
+     * - resulting prefix with useCompositePrefixes=true: `uploads/uploads/documents/`
+     * - resulting prefix with useCompositePrefixes=false: `uploads/documents/`
      *
      * @default false
      */

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEnB,iBAAiB,EAClB,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EAAU,cAAc,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAO3E,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEtF,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAA;IAE7B;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAE5B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAA;IAEnC;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IAE7F;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAA;IAExB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAA;IAErB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,KAAK,mBAAmB,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,KAAK,cAAc,CAAA;AAEpF,eAAO,MAAM,YAAY,EAAE,mBA6FzB,CAAA;AAEF,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEnB,iBAAiB,EAClB,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EAAU,cAAc,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAK3E,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEtF,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAA;IAE7B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAA;IAEnC;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IAE7F;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAA;IAExB;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAA;IAElD;;OAEG;IACH,aAAa,EAAE,MAAM,CAAA;IAErB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;;;;;OAaG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B,CAAA;AAED,KAAK,mBAAmB,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,KAAK,cAAc,CAAA;AAEpF,eAAO,MAAM,YAAY,EAAE,mBAiGzB,CAAA;AAEF,OAAO,EAAE,oBAAoB,IAAI,gBAAgB,EAAE,CAAA"}

package/dist/index.js

@@ -1,7 +1,5 @@
 import { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage';
-import { initClientUploads } from '@payloadcms/plugin-cloud-storage/utilities';
 import { createAzureAdapter } from './adapter.js';
-import { getGenerateSignedURLHandler } from './generateSignedURL.js';
 import { getStorageClient as getStorageClientFunc } from './utils/getStorageClient.js';
 export const azureStorage = (azureStorageOptions)=>({
         name: 'azure',
@@ -12,30 +10,36 @@ export const azureStorage = (azureStorageOptions)=>({
                     containerName: azureStorageOptions.containerName
                 });
             const isPluginDisabled = azureStorageOptions.enabled === false;
-            initClientUploads({
-                clientHandler: '@payloadcms/storage-azure/client#AzureClientUploadHandler',
-                collections: azureStorageOptions.collections,
-                config: incomingConfig,
-                enabled: !isPluginDisabled && Boolean(azureStorageOptions.clientUploads),
-                serverHandler: getGenerateSignedURLHandler({
-                    access: typeof azureStorageOptions.clientUploads === 'object' ? azureStorageOptions.clientUploads.access : undefined,
-                    collections: azureStorageOptions.collections,
-                    containerName: azureStorageOptions.containerName,
-                    getStorageClient,
-                    useCompositePrefixes: azureStorageOptions.useCompositePrefixes
-                }),
-                serverHandlerPath: '/storage-azure-generate-signed-url'
-            });
             if (isPluginDisabled) {
-                return incomingConfig;
+                // Still call cloudStoragePlugin with adapter: null so fields (like prefix) are
+                // inserted into the schema, keeping it consistent across environments.
+                const collectionsWithoutAdapter = Object.entries(azureStorageOptions.collections).reduce((acc, [slug, collOptions])=>({
+                        ...acc,
+                        [slug]: {
+                            ...collOptions === true ? {} : collOptions,
+                            adapter: null
+                        }
+                    }), {});
+                return cloudStoragePlugin({
+                    collections: collectionsWithoutAdapter,
+                    enabled: false,
+                    useCompositePrefixes: azureStorageOptions.useCompositePrefixes
+                })(incomingConfig);
             }
-            const createContainerIfNotExists = ()=>{
-                void getStorageClientFunc({
+            const createContainerIfNotExists = async ()=>{
+                const containerClient = getStorageClientFunc({
                     connectionString: azureStorageOptions.connectionString,
                     containerName: azureStorageOptions.containerName
-                }).createIfNotExists({
-                    access: 'blob'
                 });
+                // Private by default; public access is opt-in via `containerAccess`.
+                const containerAccess = azureStorageOptions.containerAccess ?? 'private';
+                if (containerAccess === 'private') {
+                    await containerClient.createIfNotExists();
+                } else {
+                    await containerClient.createIfNotExists({
+                        access: containerAccess
+                    });
+                }
             };
             const adapter = createAzureAdapter({
                 allowContainerCreate: azureStorageOptions.allowContainerCreate,
@@ -71,7 +75,6 @@ export const azureStorage = (azureStorageOptions)=>({
                 })
             };
             return cloudStoragePlugin({
-                alwaysInsertFields: azureStorageOptions.alwaysInsertFields,
                 collections: collectionsWithAdapter,
                 useCompositePrefixes: azureStorageOptions.useCompositePrefixes
             })(config);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {\n  ClientUploadsConfig,\n  PluginOptions as CloudStoragePluginOptions,\n  CollectionOptions,\n} from '@payloadcms/plugin-cloud-storage/types'\nimport type { Config, StorageAdapter, UploadCollectionSlug } from 'payload'\n\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\nimport { initClientUploads } from '@payloadcms/plugin-cloud-storage/utilities'\n\nimport { createAzureAdapter } from './adapter.js'\nimport { getGenerateSignedURLHandler } from './generateSignedURL.js'\nimport { getStorageClient as getStorageClientFunc } from './utils/getStorageClient.js'\n\nexport type AzureStorageOptions = {\n  /**\n   * Whether or not to allow the container to be created if it does not exist\n   *\n   * @default false\n   */\n  allowContainerCreate: boolean\n\n  /**\n   * When enabled, fields (like the prefix field) will always be inserted into\n   * the collection schema regardless of whether the plugin is enabled. This\n   * ensures a consistent schema across all environments.\n   *\n   * This will be enabled by default in Payload v4.\n   *\n   * @default false\n   */\n  alwaysInsertFields?: boolean\n\n  /**\n   * Base URL for the Azure Blob storage account\n   */\n  baseURL: string\n\n  /**\n   * Optional cache key to identify the Azure Blob storage client instance.\n   * If not provided, a default key will be used.\n   *\n   * @default `azure:containerName`\n   */\n  clientCacheKey?: string\n\n  /**\n   * Do uploads directly on the client to bypass limits on Vercel.\n   *\n   * Client uploads use the Azure Blob SDK, which splits large files into blocks\n   * (avoiding the ~5GB limit of a single upload request). The SDK sends `x-ms-*`\n   * headers, so the browser issues a CORS preflight: your storage account's CORS\n   * rules must allow the `OPTIONS` and `PUT` methods and the required headers\n   * (allowed headers `*`, or at minimum `x-ms-*,content-type,content-length`).\n   */\n  clientUploads?: ClientUploadsConfig\n\n  /**\n   * Collection options to apply the Azure Blob adapter to.\n   */\n  collections: Partial<Record<UploadCollectionSlug, Omit<CollectionOptions, 'adapter'> | true>>\n\n  /**\n   * Azure Blob storage connection string\n   */\n  connectionString: string\n\n  /**\n   * Azure Blob storage container name\n   */\n  containerName: string\n\n  /**\n   * Whether or not to enable the plugin\n   *\n   * Default: true\n   */\n  enabled?: boolean\n  /**\n   * When true, the collection-level prefix and document-level prefix are combined\n   * (compositional). When false (default), document prefix overrides collection\n   * prefix entirely.\n   *\n   * Example:\n   * - collection prefix: `collection-prefix/`\n   * - document prefix: `document-prefix/`\n   * - resulting prefix with useCompositePrefixes=true: `collection-prefix/document-prefix/`\n   * - resulting prefix with useCompositePrefixes=false: `document-prefix/`\n   *\n   * @default false\n   */\n  useCompositePrefixes?: boolean\n}\n\ntype AzureStorageFactory = (azureStorageArgs: AzureStorageOptions) => StorageAdapter\n\nexport const azureStorage: AzureStorageFactory = (\n  azureStorageOptions: AzureStorageOptions,\n): StorageAdapter => ({\n  name: 'azure',\n  collections: Object.keys(azureStorageOptions.collections),\n  init: (incomingConfig: Config): Config => {\n    const getStorageClient = () =>\n      getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n    const isPluginDisabled = azureStorageOptions.enabled === false\n\n    initClientUploads({\n      clientHandler: '@payloadcms/storage-azure/client#AzureClientUploadHandler',\n      collections: azureStorageOptions.collections,\n      config: incomingConfig,\n      enabled: !isPluginDisabled && Boolean(azureStorageOptions.clientUploads),\n      serverHandler: getGenerateSignedURLHandler({\n        access:\n          typeof azureStorageOptions.clientUploads === 'object'\n            ? azureStorageOptions.clientUploads.access\n            : undefined,\n        collections: azureStorageOptions.collections,\n        containerName: azureStorageOptions.containerName,\n        getStorageClient,\n        useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n      }),\n      serverHandlerPath: '/storage-azure-generate-signed-url',\n    })\n\n    if (isPluginDisabled) {\n      return incomingConfig\n    }\n\n    const createContainerIfNotExists = () => {\n      void getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      }).createIfNotExists({\n        access: 'blob',\n      })\n    }\n\n    const adapter = createAzureAdapter({\n      allowContainerCreate: azureStorageOptions.allowContainerCreate,\n      baseURL: azureStorageOptions.baseURL,\n      clientUploads: azureStorageOptions.clientUploads,\n      containerName: azureStorageOptions.containerName,\n      createContainerIfNotExists,\n      getStorageClient,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })\n\n    // Add adapter to each collection option object\n    const collectionsWithAdapter: CloudStoragePluginOptions['collections'] = Object.entries(\n      azureStorageOptions.collections,\n    ).reduce(\n      (acc, [slug, collOptions]) => ({\n        ...acc,\n        [slug]: {\n          ...(collOptions === true ? {} : collOptions),\n          adapter,\n        },\n      }),\n      {} as Record<string, CollectionOptions>,\n    )\n\n    // Set disableLocalStorage: true for collections specified in the plugin options\n    const config = {\n      ...incomingConfig,\n      collections: (incomingConfig.collections || []).map((collection) => {\n        if (!collectionsWithAdapter[collection.slug]) {\n          return collection\n        }\n\n        return {\n          ...collection,\n          upload: {\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            disableLocalStorage: true,\n          },\n        }\n      }),\n    }\n\n    return cloudStoragePlugin({\n      alwaysInsertFields: azureStorageOptions.alwaysInsertFields,\n      collections: collectionsWithAdapter,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })(config)\n  },\n})\n\nexport { getStorageClientFunc as getStorageClient }\n"],"names":["cloudStoragePlugin","initClientUploads","createAzureAdapter","getGenerateSignedURLHandler","getStorageClient","getStorageClientFunc","azureStorage","azureStorageOptions","name","collections","Object","keys","init","incomingConfig","connectionString","containerName","isPluginDisabled","enabled","clientHandler","config","Boolean","clientUploads","serverHandler","access","undefined","useCompositePrefixes","serverHandlerPath","createContainerIfNotExists","createIfNotExists","adapter","allowContainerCreate","baseURL","collectionsWithAdapter","entries","reduce","acc","slug","collOptions","map","collection","upload","disableLocalStorage","alwaysInsertFields"],"mappings":"AAOA,SAASA,kBAAkB,QAAQ,mCAAkC;AACrE,SAASC,iBAAiB,QAAQ,6CAA4C;AAE9E,SAASC,kBAAkB,QAAQ,eAAc;AACjD,SAASC,2BAA2B,QAAQ,yBAAwB;AACpE,SAASC,oBAAoBC,oBAAoB,QAAQ,8BAA6B;AAoFtF,OAAO,MAAMC,eAAoC,CAC/CC,sBACoB,CAAA;QACpBC,MAAM;QACNC,aAAaC,OAAOC,IAAI,CAACJ,oBAAoBE,WAAW;QACxDG,MAAM,CAACC;YACL,MAAMT,mBAAmB,IACvBC,qBAAqB;oBACnBS,kBAAkBP,oBAAoBO,gBAAgB;oBACtDC,eAAeR,oBAAoBQ,aAAa;gBAClD;YAEF,MAAMC,mBAAmBT,oBAAoBU,OAAO,KAAK;YAEzDhB,kBAAkB;gBAChBiB,eAAe;gBACfT,aAAaF,oBAAoBE,WAAW;gBAC5CU,QAAQN;gBACRI,SAAS,CAACD,oBAAoBI,QAAQb,oBAAoBc,aAAa;gBACvEC,eAAenB,4BAA4B;oBACzCoB,QACE,OAAOhB,oBAAoBc,aAAa,KAAK,WACzCd,oBAAoBc,aAAa,CAACE,MAAM,GACxCC;oBACNf,aAAaF,oBAAoBE,WAAW;oBAC5CM,eAAeR,oBAAoBQ,aAAa;oBAChDX;oBACAqB,sBAAsBlB,oBAAoBkB,oBAAoB;gBAChE;gBACAC,mBAAmB;YACrB;YAEA,IAAIV,kBAAkB;gBACpB,OAAOH;YACT;YAEA,MAAMc,6BAA6B;gBACjC,KAAKtB,qBAAqB;oBACxBS,kBAAkBP,oBAAoBO,gBAAgB;oBACtDC,eAAeR,oBAAoBQ,aAAa;gBAClD,GAAGa,iBAAiB,CAAC;oBACnBL,QAAQ;gBACV;YACF;YAEA,MAAMM,UAAU3B,mBAAmB;gBACjC4B,sBAAsBvB,oBAAoBuB,oBAAoB;gBAC9DC,SAASxB,oBAAoBwB,OAAO;gBACpCV,eAAed,oBAAoBc,aAAa;gBAChDN,eAAeR,oBAAoBQ,aAAa;gBAChDY;gBACAvB;gBACAqB,sBAAsBlB,oBAAoBkB,oBAAoB;YAChE;YAEA,+CAA+C;YAC/C,MAAMO,yBAAmEtB,OAAOuB,OAAO,CACrF1B,oBAAoBE,WAAW,EAC/ByB,MAAM,CACN,CAACC,KAAK,CAACC,MAAMC,YAAY,GAAM,CAAA;oBAC7B,GAAGF,GAAG;oBACN,CAACC,KAAK,EAAE;wBACN,GAAIC,gBAAgB,OAAO,CAAC,IAAIA,WAAW;wBAC3CR;oBACF;gBACF,CAAA,GACA,CAAC;YAGH,gFAAgF;YAChF,MAAMV,SAAS;gBACb,GAAGN,cAAc;gBACjBJ,aAAa,AAACI,CAAAA,eAAeJ,WAAW,IAAI,EAAE,AAAD,EAAG6B,GAAG,CAAC,CAACC;oBACnD,IAAI,CAACP,sBAAsB,CAACO,WAAWH,IAAI,CAAC,EAAE;wBAC5C,OAAOG;oBACT;oBAEA,OAAO;wBACL,GAAGA,UAAU;wBACbC,QAAQ;4BACN,GAAI,OAAOD,WAAWC,MAAM,KAAK,WAAWD,WAAWC,MAAM,GAAG,CAAC,CAAC;4BAClEC,qBAAqB;wBACvB;oBACF;gBACF;YACF;YAEA,OAAOzC,mBAAmB;gBACxB0C,oBAAoBnC,oBAAoBmC,kBAAkB;gBAC1DjC,aAAauB;gBACbP,sBAAsBlB,oBAAoBkB,oBAAoB;YAChE,GAAGN;QACL;IACF,CAAA,EAAE;AAEF,SAASd,wBAAwBD,gBAAgB,GAAE"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {\n  ClientUploadsConfig,\n  PluginOptions as CloudStoragePluginOptions,\n  CollectionOptions,\n} from '@payloadcms/plugin-cloud-storage/types'\nimport type { Config, StorageAdapter, UploadCollectionSlug } from 'payload'\n\nimport { cloudStoragePlugin } from '@payloadcms/plugin-cloud-storage'\n\nimport { createAzureAdapter } from './adapter.js'\nimport { getStorageClient as getStorageClientFunc } from './utils/getStorageClient.js'\n\nexport type AzureStorageOptions = {\n  /**\n   * Whether or not to allow the container to be created if it does not exist\n   *\n   * @default false\n   */\n  allowContainerCreate: boolean\n\n  /**\n   * Base URL for the Azure Blob storage account\n   */\n  baseURL: string\n\n  /**\n   * Optional cache key to identify the Azure Blob storage client instance.\n   * If not provided, a default key will be used.\n   *\n   * @default `azure:containerName`\n   */\n  clientCacheKey?: string\n\n  /**\n   * Do uploads directly on the client to bypass limits on Vercel.\n   *\n   * Client uploads use the Azure Blob SDK, which splits large files into blocks\n   * (avoiding the ~5GB limit of a single upload request). The SDK sends `x-ms-*`\n   * headers, so the browser issues a CORS preflight: your storage account's CORS\n   * rules must allow the `OPTIONS` and `PUT` methods and the required headers\n   * (allowed headers `*`, or at minimum `x-ms-*,content-type,content-length`).\n   */\n  clientUploads?: ClientUploadsConfig\n\n  /**\n   * Collection options to apply the Azure Blob adapter to.\n   */\n  collections: Partial<Record<UploadCollectionSlug, Omit<CollectionOptions, 'adapter'> | true>>\n\n  /**\n   * Azure Blob storage connection string\n   */\n  connectionString: string\n\n  /**\n   * Public access level applied to a container that the plugin creates via\n   * `allowContainerCreate`. Has no effect on containers that already exist.\n   *\n   * - `'private'` (default): no anonymous access. Blobs are reachable only\n   *   through Payload's access-controlled file route.\n   * - `'blob'`: unauthenticated clients can read any blob directly from Azure.\n   * - `'container'`: unauthenticated clients can read and list blobs directly.\n   *\n   * Only choose `'blob'` or `'container'` if you deliberately want files served\n   * publicly from Azure, bypassing Payload read access control.\n   *\n   * @default 'private'\n   */\n  containerAccess?: 'blob' | 'container' | 'private'\n\n  /**\n   * Azure Blob storage container name\n   */\n  containerName: string\n\n  /**\n   * Whether or not to enable the plugin\n   *\n   * Default: true\n   */\n  enabled?: boolean\n  /**\n   * When true, the collection-level prefix and document-level prefix are combined\n   * (compositional). When false (default), a document prefix already within the\n   * collection prefix is used as-is for new uploads; otherwise it is nested beneath it.\n   * Existing files retain their stored prefixes for reads, URLs, and cleanup.\n   *\n   * Example with a document prefix already contained by the collection prefix:\n   * - collection prefix: `uploads/`\n   * - document prefix: `uploads/documents/`\n   * - resulting prefix with useCompositePrefixes=true: `uploads/uploads/documents/`\n   * - resulting prefix with useCompositePrefixes=false: `uploads/documents/`\n   *\n   * @default false\n   */\n  useCompositePrefixes?: boolean\n}\n\ntype AzureStorageFactory = (azureStorageArgs: AzureStorageOptions) => StorageAdapter\n\nexport const azureStorage: AzureStorageFactory = (\n  azureStorageOptions: AzureStorageOptions,\n): StorageAdapter => ({\n  name: 'azure',\n  collections: Object.keys(azureStorageOptions.collections),\n  init: (incomingConfig: Config): Config => {\n    const getStorageClient = () =>\n      getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n    const isPluginDisabled = azureStorageOptions.enabled === false\n\n    if (isPluginDisabled) {\n      // Still call cloudStoragePlugin with adapter: null so fields (like prefix) are\n      // inserted into the schema, keeping it consistent across environments.\n      const collectionsWithoutAdapter: CloudStoragePluginOptions['collections'] = Object.entries(\n        azureStorageOptions.collections,\n      ).reduce(\n        (acc, [slug, collOptions]) => ({\n          ...acc,\n          [slug]: { ...(collOptions === true ? {} : collOptions), adapter: null },\n        }),\n        {} as Record<string, CollectionOptions>,\n      )\n\n      return cloudStoragePlugin({\n        collections: collectionsWithoutAdapter,\n        enabled: false,\n        useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n      })(incomingConfig)\n    }\n\n    const createContainerIfNotExists = async (): Promise<void> => {\n      const containerClient = getStorageClientFunc({\n        connectionString: azureStorageOptions.connectionString,\n        containerName: azureStorageOptions.containerName,\n      })\n\n      // Private by default; public access is opt-in via `containerAccess`.\n      const containerAccess = azureStorageOptions.containerAccess ?? 'private'\n\n      if (containerAccess === 'private') {\n        await containerClient.createIfNotExists()\n      } else {\n        await containerClient.createIfNotExists({ access: containerAccess })\n      }\n    }\n\n    const adapter = createAzureAdapter({\n      allowContainerCreate: azureStorageOptions.allowContainerCreate,\n      baseURL: azureStorageOptions.baseURL,\n      clientUploads: azureStorageOptions.clientUploads,\n      containerName: azureStorageOptions.containerName,\n      createContainerIfNotExists,\n      getStorageClient,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })\n\n    // Add adapter to each collection option object\n    const collectionsWithAdapter: CloudStoragePluginOptions['collections'] = Object.entries(\n      azureStorageOptions.collections,\n    ).reduce(\n      (acc, [slug, collOptions]) => ({\n        ...acc,\n        [slug]: {\n          ...(collOptions === true ? {} : collOptions),\n          adapter,\n        },\n      }),\n      {} as Record<string, CollectionOptions>,\n    )\n\n    // Set disableLocalStorage: true for collections specified in the plugin options\n    const config = {\n      ...incomingConfig,\n      collections: (incomingConfig.collections || []).map((collection) => {\n        if (!collectionsWithAdapter[collection.slug]) {\n          return collection\n        }\n\n        return {\n          ...collection,\n          upload: {\n            ...(typeof collection.upload === 'object' ? collection.upload : {}),\n            disableLocalStorage: true,\n          },\n        }\n      }),\n    }\n\n    return cloudStoragePlugin({\n      collections: collectionsWithAdapter,\n      useCompositePrefixes: azureStorageOptions.useCompositePrefixes,\n    })(config)\n  },\n})\n\nexport { getStorageClientFunc as getStorageClient }\n"],"names":["cloudStoragePlugin","createAzureAdapter","getStorageClient","getStorageClientFunc","azureStorage","azureStorageOptions","name","collections","Object","keys","init","incomingConfig","connectionString","containerName","isPluginDisabled","enabled","collectionsWithoutAdapter","entries","reduce","acc","slug","collOptions","adapter","useCompositePrefixes","createContainerIfNotExists","containerClient","containerAccess","createIfNotExists","access","allowContainerCreate","baseURL","clientUploads","collectionsWithAdapter","config","map","collection","upload","disableLocalStorage"],"mappings":"AAOA,SAASA,kBAAkB,QAAQ,mCAAkC;AAErE,SAASC,kBAAkB,QAAQ,eAAc;AACjD,SAASC,oBAAoBC,oBAAoB,QAAQ,8BAA6B;AA0FtF,OAAO,MAAMC,eAAoC,CAC/CC,sBACoB,CAAA;QACpBC,MAAM;QACNC,aAAaC,OAAOC,IAAI,CAACJ,oBAAoBE,WAAW;QACxDG,MAAM,CAACC;YACL,MAAMT,mBAAmB,IACvBC,qBAAqB;oBACnBS,kBAAkBP,oBAAoBO,gBAAgB;oBACtDC,eAAeR,oBAAoBQ,aAAa;gBAClD;YAEF,MAAMC,mBAAmBT,oBAAoBU,OAAO,KAAK;YAEzD,IAAID,kBAAkB;gBACpB,+EAA+E;gBAC/E,uEAAuE;gBACvE,MAAME,4BAAsER,OAAOS,OAAO,CACxFZ,oBAAoBE,WAAW,EAC/BW,MAAM,CACN,CAACC,KAAK,CAACC,MAAMC,YAAY,GAAM,CAAA;wBAC7B,GAAGF,GAAG;wBACN,CAACC,KAAK,EAAE;4BAAE,GAAIC,gBAAgB,OAAO,CAAC,IAAIA,WAAW;4BAAGC,SAAS;wBAAK;oBACxE,CAAA,GACA,CAAC;gBAGH,OAAOtB,mBAAmB;oBACxBO,aAAaS;oBACbD,SAAS;oBACTQ,sBAAsBlB,oBAAoBkB,oBAAoB;gBAChE,GAAGZ;YACL;YAEA,MAAMa,6BAA6B;gBACjC,MAAMC,kBAAkBtB,qBAAqB;oBAC3CS,kBAAkBP,oBAAoBO,gBAAgB;oBACtDC,eAAeR,oBAAoBQ,aAAa;gBAClD;gBAEA,qEAAqE;gBACrE,MAAMa,kBAAkBrB,oBAAoBqB,eAAe,IAAI;gBAE/D,IAAIA,oBAAoB,WAAW;oBACjC,MAAMD,gBAAgBE,iBAAiB;gBACzC,OAAO;oBACL,MAAMF,gBAAgBE,iBAAiB,CAAC;wBAAEC,QAAQF;oBAAgB;gBACpE;YACF;YAEA,MAAMJ,UAAUrB,mBAAmB;gBACjC4B,sBAAsBxB,oBAAoBwB,oBAAoB;gBAC9DC,SAASzB,oBAAoByB,OAAO;gBACpCC,eAAe1B,oBAAoB0B,aAAa;gBAChDlB,eAAeR,oBAAoBQ,aAAa;gBAChDW;gBACAtB;gBACAqB,sBAAsBlB,oBAAoBkB,oBAAoB;YAChE;YAEA,+CAA+C;YAC/C,MAAMS,yBAAmExB,OAAOS,OAAO,CACrFZ,oBAAoBE,WAAW,EAC/BW,MAAM,CACN,CAACC,KAAK,CAACC,MAAMC,YAAY,GAAM,CAAA;oBAC7B,GAAGF,GAAG;oBACN,CAACC,KAAK,EAAE;wBACN,GAAIC,gBAAgB,OAAO,CAAC,IAAIA,WAAW;wBAC3CC;oBACF;gBACF,CAAA,GACA,CAAC;YAGH,gFAAgF;YAChF,MAAMW,SAAS;gBACb,GAAGtB,cAAc;gBACjBJ,aAAa,AAACI,CAAAA,eAAeJ,WAAW,IAAI,EAAE,AAAD,EAAG2B,GAAG,CAAC,CAACC;oBACnD,IAAI,CAACH,sBAAsB,CAACG,WAAWf,IAAI,CAAC,EAAE;wBAC5C,OAAOe;oBACT;oBAEA,OAAO;wBACL,GAAGA,UAAU;wBACbC,QAAQ;4BACN,GAAI,OAAOD,WAAWC,MAAM,KAAK,WAAWD,WAAWC,MAAM,GAAG,CAAC,CAAC;4BAClEC,qBAAqB;wBACvB;oBACF;gBACF;YACF;YAEA,OAAOrC,mBAAmB;gBACxBO,aAAayB;gBACbT,sBAAsBlB,oBAAoBkB,oBAAoB;YAChE,GAAGU;QACL;IACF,CAAA,EAAE;AAEF,SAAS9B,wBAAwBD,gBAAgB,GAAE"}

package/dist/isClientUploadAllowed.d.ts

@@ -0,0 +1,6 @@
+export declare const isClientUploadAllowed: (collection?: {
+    upload?: {
+        allowRestrictedFileTypes?: boolean;
+    } | boolean;
+}) => boolean;
+//# sourceMappingURL=isClientUploadAllowed.d.ts.map

package/dist/isClientUploadAllowed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isClientUploadAllowed.d.ts","sourceRoot":"","sources":["../src/isClientUploadAllowed.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,gBAAiB;IACjD,MAAM,CAAC,EAAE;QAAE,wBAAwB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAA;CAC1D,KAAG,OAKD,CAAA"}

package/dist/isClientUploadAllowed.js

@@ -0,0 +1,3 @@
+export const isClientUploadAllowed = (collection)=>Boolean(collection && typeof collection.upload === 'object' && collection.upload.allowRestrictedFileTypes);
+
+//# sourceMappingURL=isClientUploadAllowed.js.map

package/dist/isClientUploadAllowed.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/isClientUploadAllowed.ts"],"sourcesContent":["export const isClientUploadAllowed = (collection?: {\n  upload?: { allowRestrictedFileTypes?: boolean } | boolean\n}): boolean =>\n  Boolean(\n    collection &&\n      typeof collection.upload === 'object' &&\n      collection.upload.allowRestrictedFileTypes,\n  )\n"],"names":["isClientUploadAllowed","collection","Boolean","upload","allowRestrictedFileTypes"],"mappings":"AAAA,OAAO,MAAMA,wBAAwB,CAACC,aAGpCC,QACED,cACE,OAAOA,WAAWE,MAAM,KAAK,YAC7BF,WAAWE,MAAM,CAACC,wBAAwB,EAC7C"}

package/dist/uploadFile.d.ts

@@ -2,13 +2,10 @@ import type { ContainerClient } from '@azure/storage-blob';
 interface UploadArgs {
     buffer: Buffer;
     client: ContainerClient;
-    collectionPrefix?: string;
-    docPrefix?: string;
-    filename: string;
     mimeType: string;
+    storageFilePath: string;
     tempFilePath?: string;
-    useCompositePrefixes?: boolean;
 }
-export declare function uploadFile({ buffer, client, collectionPrefix, docPrefix, filename, mimeType, tempFilePath, useCompositePrefixes, }: UploadArgs): Promise<void>;
+export declare function uploadFile({ buffer, client, mimeType, storageFilePath, tempFilePath, }: UploadArgs): Promise<void>;
 export {};
 //# sourceMappingURL=uploadFile.d.ts.map

package/dist/uploadFile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uploadFile.d.ts","sourceRoot":"","sources":["../src/uploadFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAO1D,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,eAAe,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B;AAID,wBAAsB,UAAU,CAAC,EAC/B,MAAM,EACN,MAAM,EACN,gBAAqB,EACrB,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,oBAA4B,GAC7B,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B5B"}
+{"version":3,"file":"uploadFile.d.ts","sourceRoot":"","sources":["../src/uploadFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAM1D,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,eAAe,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAID,wBAAsB,UAAU,CAAC,EAC/B,MAAM,EACN,MAAM,EACN,QAAQ,EACR,eAAe,EACf,YAAY,GACb,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB5B"}

package/dist/uploadFile.js

@@ -1,17 +1,10 @@
 import { AbortController } from '@azure/abort-controller';
-import { getFileKey } from '@payloadcms/plugin-cloud-storage/utilities';
 import fs from 'fs';
 import { Readable } from 'stream';
 const multipartThreshold = 1024 * 1024 * 50 // 50MB
 ;
-export async function uploadFile({ buffer, client, collectionPrefix = '', docPrefix, filename, mimeType, tempFilePath, useCompositePrefixes = false }) {
-    const { fileKey } = getFileKey({
-        collectionPrefix,
-        docPrefix,
-        filename,
-        useCompositePrefixes
-    });
-    const blockBlobClient = client.getBlockBlobClient(fileKey);
+export async function uploadFile({ buffer, client, mimeType, storageFilePath, tempFilePath }) {
+    const blockBlobClient = client.getBlockBlobClient(storageFilePath);
     // when there are no temp files, or the upload is less than the threshold size, do not stream files
     if (!tempFilePath && buffer.length > 0 && buffer.length < multipartThreshold) {
         await blockBlobClient.upload(buffer, buffer.byteLength, {

package/dist/uploadFile.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/uploadFile.ts"],"sourcesContent":["import type { ContainerClient } from '@azure/storage-blob'\n\nimport { AbortController } from '@azure/abort-controller'\nimport { getFileKey } from '@payloadcms/plugin-cloud-storage/utilities'\nimport fs from 'fs'\nimport { Readable } from 'stream'\n\ninterface UploadArgs {\n  buffer: Buffer\n  client: ContainerClient\n  collectionPrefix?: string\n  docPrefix?: string\n  filename: string\n  mimeType: string\n  tempFilePath?: string\n  useCompositePrefixes?: boolean\n}\n\nconst multipartThreshold = 1024 * 1024 * 50 // 50MB\n\nexport async function uploadFile({\n  buffer,\n  client,\n  collectionPrefix = '',\n  docPrefix,\n  filename,\n  mimeType,\n  tempFilePath,\n  useCompositePrefixes = false,\n}: UploadArgs): Promise<void> {\n  const { fileKey } = getFileKey({\n    collectionPrefix,\n    docPrefix,\n    filename,\n    useCompositePrefixes,\n  })\n\n  const blockBlobClient = client.getBlockBlobClient(fileKey)\n\n  // when there are no temp files, or the upload is less than the threshold size, do not stream files\n  if (!tempFilePath && buffer.length > 0 && buffer.length < multipartThreshold) {\n    await blockBlobClient.upload(buffer, buffer.byteLength, {\n      blobHTTPHeaders: { blobContentType: mimeType },\n    })\n    return\n  }\n\n  const fileBufferOrStream: Readable = tempFilePath\n    ? fs.createReadStream(tempFilePath)\n    : Readable.from(buffer)\n\n  await blockBlobClient.uploadStream(fileBufferOrStream, 4 * 1024 * 1024, 4, {\n    abortSignal: AbortController.timeout(30 * 60 * 1000),\n    blobHTTPHeaders: { blobContentType: mimeType },\n  })\n}\n"],"names":["AbortController","getFileKey","fs","Readable","multipartThreshold","uploadFile","buffer","client","collectionPrefix","docPrefix","filename","mimeType","tempFilePath","useCompositePrefixes","fileKey","blockBlobClient","getBlockBlobClient","length","upload","byteLength","blobHTTPHeaders","blobContentType","fileBufferOrStream","createReadStream","from","uploadStream","abortSignal","timeout"],"mappings":"AAEA,SAASA,eAAe,QAAQ,0BAAyB;AACzD,SAASC,UAAU,QAAQ,6CAA4C;AACvE,OAAOC,QAAQ,KAAI;AACnB,SAASC,QAAQ,QAAQ,SAAQ;AAajC,MAAMC,qBAAqB,OAAO,OAAO,GAAG,OAAO;;AAEnD,OAAO,eAAeC,WAAW,EAC/BC,MAAM,EACNC,MAAM,EACNC,mBAAmB,EAAE,EACrBC,SAAS,EACTC,QAAQ,EACRC,QAAQ,EACRC,YAAY,EACZC,uBAAuB,KAAK,EACjB;IACX,MAAM,EAAEC,OAAO,EAAE,GAAGb,WAAW;QAC7BO;QACAC;QACAC;QACAG;IACF;IAEA,MAAME,kBAAkBR,OAAOS,kBAAkB,CAACF;IAElD,mGAAmG;IACnG,IAAI,CAACF,gBAAgBN,OAAOW,MAAM,GAAG,KAAKX,OAAOW,MAAM,GAAGb,oBAAoB;QAC5E,MAAMW,gBAAgBG,MAAM,CAACZ,QAAQA,OAAOa,UAAU,EAAE;YACtDC,iBAAiB;gBAAEC,iBAAiBV;YAAS;QAC/C;QACA;IACF;IAEA,MAAMW,qBAA+BV,eACjCV,GAAGqB,gBAAgB,CAACX,gBACpBT,SAASqB,IAAI,CAAClB;IAElB,MAAMS,gBAAgBU,YAAY,CAACH,oBAAoB,IAAI,OAAO,MAAM,GAAG;QACzEI,aAAa1B,gBAAgB2B,OAAO,CAAC,KAAK,KAAK;QAC/CP,iBAAiB;YAAEC,iBAAiBV;QAAS;IAC/C;AACF"}
+{"version":3,"sources":["../src/uploadFile.ts"],"sourcesContent":["import type { ContainerClient } from '@azure/storage-blob'\n\nimport { AbortController } from '@azure/abort-controller'\nimport fs from 'fs'\nimport { Readable } from 'stream'\n\ninterface UploadArgs {\n  buffer: Buffer\n  client: ContainerClient\n  mimeType: string\n  storageFilePath: string\n  tempFilePath?: string\n}\n\nconst multipartThreshold = 1024 * 1024 * 50 // 50MB\n\nexport async function uploadFile({\n  buffer,\n  client,\n  mimeType,\n  storageFilePath,\n  tempFilePath,\n}: UploadArgs): Promise<void> {\n  const blockBlobClient = client.getBlockBlobClient(storageFilePath)\n\n  // when there are no temp files, or the upload is less than the threshold size, do not stream files\n  if (!tempFilePath && buffer.length > 0 && buffer.length < multipartThreshold) {\n    await blockBlobClient.upload(buffer, buffer.byteLength, {\n      blobHTTPHeaders: { blobContentType: mimeType },\n    })\n    return\n  }\n\n  const fileBufferOrStream: Readable = tempFilePath\n    ? fs.createReadStream(tempFilePath)\n    : Readable.from(buffer)\n\n  await blockBlobClient.uploadStream(fileBufferOrStream, 4 * 1024 * 1024, 4, {\n    abortSignal: AbortController.timeout(30 * 60 * 1000),\n    blobHTTPHeaders: { blobContentType: mimeType },\n  })\n}\n"],"names":["AbortController","fs","Readable","multipartThreshold","uploadFile","buffer","client","mimeType","storageFilePath","tempFilePath","blockBlobClient","getBlockBlobClient","length","upload","byteLength","blobHTTPHeaders","blobContentType","fileBufferOrStream","createReadStream","from","uploadStream","abortSignal","timeout"],"mappings":"AAEA,SAASA,eAAe,QAAQ,0BAAyB;AACzD,OAAOC,QAAQ,KAAI;AACnB,SAASC,QAAQ,QAAQ,SAAQ;AAUjC,MAAMC,qBAAqB,OAAO,OAAO,GAAG,OAAO;;AAEnD,OAAO,eAAeC,WAAW,EAC/BC,MAAM,EACNC,MAAM,EACNC,QAAQ,EACRC,eAAe,EACfC,YAAY,EACD;IACX,MAAMC,kBAAkBJ,OAAOK,kBAAkB,CAACH;IAElD,mGAAmG;IACnG,IAAI,CAACC,gBAAgBJ,OAAOO,MAAM,GAAG,KAAKP,OAAOO,MAAM,GAAGT,oBAAoB;QAC5E,MAAMO,gBAAgBG,MAAM,CAACR,QAAQA,OAAOS,UAAU,EAAE;YACtDC,iBAAiB;gBAAEC,iBAAiBT;YAAS;QAC/C;QACA;IACF;IAEA,MAAMU,qBAA+BR,eACjCR,GAAGiB,gBAAgB,CAACT,gBACpBP,SAASiB,IAAI,CAACd;IAElB,MAAMK,gBAAgBU,YAAY,CAACH,oBAAoB,IAAI,OAAO,MAAM,GAAG;QACzEI,aAAarB,gBAAgBsB,OAAO,CAAC,KAAK,KAAK;QAC/CP,iBAAiB;YAAEC,iBAAiBT;QAAS;IAC/C;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/storage-azure",
-  "version": "4.0.0-internal.cea8867",
+  "version": "4.0.0-internal.d21c039",
   "description": "Payload storage adapter for Azure Blob Storage",
   "homepage": "https://payloadcms.com",
   "repository": {
@@ -38,14 +38,14 @@
   ],
   "dependencies": {
     "@azure/abort-controller": "^1.1.0",
-    "@azure/storage-blob": "^12.11.0",
-    "@payloadcms/plugin-cloud-storage": "4.0.0-internal.cea8867"
+    "@azure/storage-blob": "^12.33.0",
+    "@payloadcms/plugin-cloud-storage": "4.0.0-internal.d21c039"
   },
   "devDependencies": {
-    "payload": "4.0.0-internal.cea8867"
+    "payload": "4.0.0-internal.d21c039"
   },
   "peerDependencies": {
-    "payload": "4.0.0-internal.cea8867"
+    "payload": "4.0.0-internal.d21c039"
   },
   "engines": {
     "node": ">=24.15.0"

package/dist/client/handleAzureUpload.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=handleAzureUpload.spec.d.ts.map

package/dist/client/handleAzureUpload.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handleAzureUpload.spec.d.ts","sourceRoot":"","sources":["../../src/client/handleAzureUpload.spec.ts"],"names":[],"mappings":""}

package/dist/client/handleAzureUpload.spec.js

@@ -1,185 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from 'vitest';
-const uploadDataMock = vi.fn();
-const blockBlobClientMock = vi.fn(function() {
-    return {
-        uploadData: uploadDataMock
-    };
-});
-vi.mock('@azure/storage-blob', ()=>({
-        BlockBlobClient: blockBlobClientMock
-    }));
-import { handleAzureUpload } from './handleAzureUpload.js';
-const serverURL = 'https://example.com';
-const apiRoute = '/api';
-const serverHandlerPath = '/storage-azure-generate-signed-url';
-const signedURL = 'https://account.blob.core.windows.net/container/file.png?sig=abc';
-const createFile = ()=>new File([
-        new Uint8Array([
-            1,
-            2,
-            3
-        ])
-    ], 'file.png', {
-        type: 'image/png'
-    });
-const mockSignedURLResponse = (body, ok = true)=>{
-    const fetchMock = vi.fn().mockResolvedValue({
-        json: ()=>Promise.resolve(body),
-        ok
-    });
-    vi.stubGlobal('fetch', fetchMock);
-    return fetchMock;
-};
-describe('handleAzureUpload', ()=>{
-    beforeEach(()=>{
-        vi.clearAllMocks();
-        vi.unstubAllGlobals();
-        uploadDataMock.mockResolvedValue(undefined);
-    });
-    it('should request a signed URL from the server handler', async ()=>{
-        const fetchMock = mockSignedURLResponse({
-            docPrefix: 'docs',
-            url: signedURL
-        });
-        await handleAzureUpload({
-            apiRoute,
-            collectionSlug: 'media',
-            docPrefix: 'docs',
-            file: createFile(),
-            serverHandlerPath,
-            serverURL,
-            updateFilename: vi.fn()
-        });
-        expect(fetchMock).toHaveBeenCalledTimes(1);
-        const [calledURL, init] = fetchMock.mock.calls[0];
-        expect(calledURL).toBe(`${serverURL}${apiRoute}${serverHandlerPath}`);
-        expect(init.method).toBe('POST');
-        expect(JSON.parse(init.body)).toEqual({
-            collectionSlug: 'media',
-            docPrefix: 'docs',
-            filename: 'file.png',
-            mimeType: 'image/png'
-        });
-    });
-    it('should upload via BlockBlobClient.uploadData rather than a raw PUT', async ()=>{
-        const fetchMock = mockSignedURLResponse({
-            docPrefix: 'docs',
-            url: signedURL
-        });
-        const file = createFile();
-        await handleAzureUpload({
-            apiRoute,
-            collectionSlug: 'media',
-            file,
-            serverHandlerPath,
-            serverURL,
-            updateFilename: vi.fn()
-        });
-        expect(blockBlobClientMock).toHaveBeenCalledWith(signedURL);
-        expect(uploadDataMock).toHaveBeenCalledTimes(1);
-        const [uploadedFile, options] = uploadDataMock.mock.calls[0];
-        expect(uploadedFile).toBe(file);
-        expect(options.blockSize).toBeGreaterThan(0);
-        expect(options.concurrency).toBeGreaterThan(0);
-        // Only the signed-URL request should hit fetch; no raw PUT to the blob URL.
-        expect(fetchMock).toHaveBeenCalledTimes(1);
-    });
-    it('should pass the file content type to the blob headers', async ()=>{
-        mockSignedURLResponse({
-            docPrefix: 'docs',
-            url: signedURL
-        });
-        await handleAzureUpload({
-            apiRoute,
-            collectionSlug: 'media',
-            file: createFile(),
-            serverHandlerPath,
-            serverURL,
-            updateFilename: vi.fn()
-        });
-        const [, options] = uploadDataMock.mock.calls[0];
-        expect(options.blobHTTPHeaders).toEqual({
-            blobContentType: 'image/png'
-        });
-    });
-    it('should call updateFilename when the server returns a sanitized filename', async ()=>{
-        mockSignedURLResponse({
-            docPrefix: 'docs',
-            filename: 'file-1.png',
-            url: signedURL
-        });
-        const updateFilename = vi.fn();
-        await handleAzureUpload({
-            apiRoute,
-            collectionSlug: 'media',
-            file: createFile(),
-            serverHandlerPath,
-            serverURL,
-            updateFilename
-        });
-        expect(updateFilename).toHaveBeenCalledWith('file-1.png');
-    });
-    it('should not call updateFilename when the filename is unchanged', async ()=>{
-        mockSignedURLResponse({
-            docPrefix: 'docs',
-            filename: 'file.png',
-            url: signedURL
-        });
-        const updateFilename = vi.fn();
-        await handleAzureUpload({
-            apiRoute,
-            collectionSlug: 'media',
-            file: createFile(),
-            serverHandlerPath,
-            serverURL,
-            updateFilename
-        });
-        expect(updateFilename).not.toHaveBeenCalled();
-    });
-    it('should return the sanitized doc prefix', async ()=>{
-        mockSignedURLResponse({
-            docPrefix: 'sanitized-docs',
-            url: signedURL
-        });
-        const result = await handleAzureUpload({
-            apiRoute,
-            collectionSlug: 'media',
-            file: createFile(),
-            serverHandlerPath,
-            serverURL,
-            updateFilename: vi.fn()
-        });
-        expect(result).toEqual({
-            prefix: 'sanitized-docs'
-        });
-    });
-    it('should throw when the signed URL request fails', async ()=>{
-        mockSignedURLResponse({}, false);
-        await expect(handleAzureUpload({
-            apiRoute,
-            collectionSlug: 'media',
-            file: createFile(),
-            serverHandlerPath,
-            serverURL,
-            updateFilename: vi.fn()
-        })).rejects.toThrow();
-        expect(uploadDataMock).not.toHaveBeenCalled();
-    });
-    it('should propagate errors from uploadData', async ()=>{
-        mockSignedURLResponse({
-            docPrefix: 'docs',
-            url: signedURL
-        });
-        uploadDataMock.mockRejectedValue(new Error('block upload failed'));
-        await expect(handleAzureUpload({
-            apiRoute,
-            collectionSlug: 'media',
-            file: createFile(),
-            serverHandlerPath,
-            serverURL,
-            updateFilename: vi.fn()
-        })).rejects.toThrow('block upload failed');
-    });
-});
-
-//# sourceMappingURL=handleAzureUpload.spec.js.map

package/dist/client/handleAzureUpload.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/client/handleAzureUpload.spec.ts"],"sourcesContent":["import { beforeEach, describe, expect, it, vi } from 'vitest'\n\nconst uploadDataMock = vi.fn()\nconst blockBlobClientMock = vi.fn(function () {\n  return { uploadData: uploadDataMock }\n})\n\nvi.mock('@azure/storage-blob', () => ({\n  BlockBlobClient: blockBlobClientMock,\n}))\n\nimport { handleAzureUpload } from './handleAzureUpload.js'\n\nconst serverURL = 'https://example.com'\nconst apiRoute = '/api'\nconst serverHandlerPath = '/storage-azure-generate-signed-url' as const\nconst signedURL = 'https://account.blob.core.windows.net/container/file.png?sig=abc'\n\nconst createFile = () => new File([new Uint8Array([1, 2, 3])], 'file.png', { type: 'image/png' })\n\nconst mockSignedURLResponse = (body: Record<string, unknown>, ok = true) => {\n  const fetchMock = vi.fn().mockResolvedValue({\n    json: () => Promise.resolve(body),\n    ok,\n  })\n  vi.stubGlobal('fetch', fetchMock)\n  return fetchMock\n}\n\ndescribe('handleAzureUpload', () => {\n  beforeEach(() => {\n    vi.clearAllMocks()\n    vi.unstubAllGlobals()\n    uploadDataMock.mockResolvedValue(undefined)\n  })\n\n  it('should request a signed URL from the server handler', async () => {\n    const fetchMock = mockSignedURLResponse({ docPrefix: 'docs', url: signedURL })\n\n    await handleAzureUpload({\n      apiRoute,\n      collectionSlug: 'media',\n      docPrefix: 'docs',\n      file: createFile(),\n      serverHandlerPath,\n      serverURL,\n      updateFilename: vi.fn(),\n    })\n\n    expect(fetchMock).toHaveBeenCalledTimes(1)\n    const [calledURL, init] = fetchMock.mock.calls[0]!\n\n    expect(calledURL).toBe(`${serverURL}${apiRoute}${serverHandlerPath}`)\n    expect(init.method).toBe('POST')\n    expect(JSON.parse(init.body)).toEqual({\n      collectionSlug: 'media',\n      docPrefix: 'docs',\n      filename: 'file.png',\n      mimeType: 'image/png',\n    })\n  })\n\n  it('should upload via BlockBlobClient.uploadData rather than a raw PUT', async () => {\n    const fetchMock = mockSignedURLResponse({ docPrefix: 'docs', url: signedURL })\n    const file = createFile()\n\n    await handleAzureUpload({\n      apiRoute,\n      collectionSlug: 'media',\n      file,\n      serverHandlerPath,\n      serverURL,\n      updateFilename: vi.fn(),\n    })\n\n    expect(blockBlobClientMock).toHaveBeenCalledWith(signedURL)\n    expect(uploadDataMock).toHaveBeenCalledTimes(1)\n\n    const [uploadedFile, options] = uploadDataMock.mock.calls[0]!\n    expect(uploadedFile).toBe(file)\n    expect(options.blockSize).toBeGreaterThan(0)\n    expect(options.concurrency).toBeGreaterThan(0)\n\n    // Only the signed-URL request should hit fetch; no raw PUT to the blob URL.\n    expect(fetchMock).toHaveBeenCalledTimes(1)\n  })\n\n  it('should pass the file content type to the blob headers', async () => {\n    mockSignedURLResponse({ docPrefix: 'docs', url: signedURL })\n\n    await handleAzureUpload({\n      apiRoute,\n      collectionSlug: 'media',\n      file: createFile(),\n      serverHandlerPath,\n      serverURL,\n      updateFilename: vi.fn(),\n    })\n\n    const [, options] = uploadDataMock.mock.calls[0]!\n    expect(options.blobHTTPHeaders).toEqual({ blobContentType: 'image/png' })\n  })\n\n  it('should call updateFilename when the server returns a sanitized filename', async () => {\n    mockSignedURLResponse({ docPrefix: 'docs', filename: 'file-1.png', url: signedURL })\n    const updateFilename = vi.fn()\n\n    await handleAzureUpload({\n      apiRoute,\n      collectionSlug: 'media',\n      file: createFile(),\n      serverHandlerPath,\n      serverURL,\n      updateFilename,\n    })\n\n    expect(updateFilename).toHaveBeenCalledWith('file-1.png')\n  })\n\n  it('should not call updateFilename when the filename is unchanged', async () => {\n    mockSignedURLResponse({ docPrefix: 'docs', filename: 'file.png', url: signedURL })\n    const updateFilename = vi.fn()\n\n    await handleAzureUpload({\n      apiRoute,\n      collectionSlug: 'media',\n      file: createFile(),\n      serverHandlerPath,\n      serverURL,\n      updateFilename,\n    })\n\n    expect(updateFilename).not.toHaveBeenCalled()\n  })\n\n  it('should return the sanitized doc prefix', async () => {\n    mockSignedURLResponse({ docPrefix: 'sanitized-docs', url: signedURL })\n\n    const result = await handleAzureUpload({\n      apiRoute,\n      collectionSlug: 'media',\n      file: createFile(),\n      serverHandlerPath,\n      serverURL,\n      updateFilename: vi.fn(),\n    })\n\n    expect(result).toEqual({ prefix: 'sanitized-docs' })\n  })\n\n  it('should throw when the signed URL request fails', async () => {\n    mockSignedURLResponse({}, false)\n\n    await expect(\n      handleAzureUpload({\n        apiRoute,\n        collectionSlug: 'media',\n        file: createFile(),\n        serverHandlerPath,\n        serverURL,\n        updateFilename: vi.fn(),\n      }),\n    ).rejects.toThrow()\n\n    expect(uploadDataMock).not.toHaveBeenCalled()\n  })\n\n  it('should propagate errors from uploadData', async () => {\n    mockSignedURLResponse({ docPrefix: 'docs', url: signedURL })\n    uploadDataMock.mockRejectedValue(new Error('block upload failed'))\n\n    await expect(\n      handleAzureUpload({\n        apiRoute,\n        collectionSlug: 'media',\n        file: createFile(),\n        serverHandlerPath,\n        serverURL,\n        updateFilename: vi.fn(),\n      }),\n    ).rejects.toThrow('block upload failed')\n  })\n})\n"],"names":["beforeEach","describe","expect","it","vi","uploadDataMock","fn","blockBlobClientMock","uploadData","mock","BlockBlobClient","handleAzureUpload","serverURL","apiRoute","serverHandlerPath","signedURL","createFile","File","Uint8Array","type","mockSignedURLResponse","body","ok","fetchMock","mockResolvedValue","json","Promise","resolve","stubGlobal","clearAllMocks","unstubAllGlobals","undefined","docPrefix","url","collectionSlug","file","updateFilename","toHaveBeenCalledTimes","calledURL","init","calls","toBe","method","JSON","parse","toEqual","filename","mimeType","toHaveBeenCalledWith","uploadedFile","options","blockSize","toBeGreaterThan","concurrency","blobHTTPHeaders","blobContentType","not","toHaveBeenCalled","result","prefix","rejects","toThrow","mockRejectedValue","Error"],"mappings":"AAAA,SAASA,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAE7D,MAAMC,iBAAiBD,GAAGE,EAAE;AAC5B,MAAMC,sBAAsBH,GAAGE,EAAE,CAAC;IAChC,OAAO;QAAEE,YAAYH;IAAe;AACtC;AAEAD,GAAGK,IAAI,CAAC,uBAAuB,IAAO,CAAA;QACpCC,iBAAiBH;IACnB,CAAA;AAEA,SAASI,iBAAiB,QAAQ,yBAAwB;AAE1D,MAAMC,YAAY;AAClB,MAAMC,WAAW;AACjB,MAAMC,oBAAoB;AAC1B,MAAMC,YAAY;AAElB,MAAMC,aAAa,IAAM,IAAIC,KAAK;QAAC,IAAIC,WAAW;YAAC;YAAG;YAAG;SAAE;KAAE,EAAE,YAAY;QAAEC,MAAM;IAAY;AAE/F,MAAMC,wBAAwB,CAACC,MAA+BC,KAAK,IAAI;IACrE,MAAMC,YAAYnB,GAAGE,EAAE,GAAGkB,iBAAiB,CAAC;QAC1CC,MAAM,IAAMC,QAAQC,OAAO,CAACN;QAC5BC;IACF;IACAlB,GAAGwB,UAAU,CAAC,SAASL;IACvB,OAAOA;AACT;AAEAtB,SAAS,qBAAqB;IAC5BD,WAAW;QACTI,GAAGyB,aAAa;QAChBzB,GAAG0B,gBAAgB;QACnBzB,eAAemB,iBAAiB,CAACO;IACnC;IAEA5B,GAAG,uDAAuD;QACxD,MAAMoB,YAAYH,sBAAsB;YAAEY,WAAW;YAAQC,KAAKlB;QAAU;QAE5E,MAAMJ,kBAAkB;YACtBE;YACAqB,gBAAgB;YAChBF,WAAW;YACXG,MAAMnB;YACNF;YACAF;YACAwB,gBAAgBhC,GAAGE,EAAE;QACvB;QAEAJ,OAAOqB,WAAWc,qBAAqB,CAAC;QACxC,MAAM,CAACC,WAAWC,KAAK,GAAGhB,UAAUd,IAAI,CAAC+B,KAAK,CAAC,EAAE;QAEjDtC,OAAOoC,WAAWG,IAAI,CAAC,GAAG7B,YAAYC,WAAWC,mBAAmB;QACpEZ,OAAOqC,KAAKG,MAAM,EAAED,IAAI,CAAC;QACzBvC,OAAOyC,KAAKC,KAAK,CAACL,KAAKlB,IAAI,GAAGwB,OAAO,CAAC;YACpCX,gBAAgB;YAChBF,WAAW;YACXc,UAAU;YACVC,UAAU;QACZ;IACF;IAEA5C,GAAG,sEAAsE;QACvE,MAAMoB,YAAYH,sBAAsB;YAAEY,WAAW;YAAQC,KAAKlB;QAAU;QAC5E,MAAMoB,OAAOnB;QAEb,MAAML,kBAAkB;YACtBE;YACAqB,gBAAgB;YAChBC;YACArB;YACAF;YACAwB,gBAAgBhC,GAAGE,EAAE;QACvB;QAEAJ,OAAOK,qBAAqByC,oBAAoB,CAACjC;QACjDb,OAAOG,gBAAgBgC,qBAAqB,CAAC;QAE7C,MAAM,CAACY,cAAcC,QAAQ,GAAG7C,eAAeI,IAAI,CAAC+B,KAAK,CAAC,EAAE;QAC5DtC,OAAO+C,cAAcR,IAAI,CAACN;QAC1BjC,OAAOgD,QAAQC,SAAS,EAAEC,eAAe,CAAC;QAC1ClD,OAAOgD,QAAQG,WAAW,EAAED,eAAe,CAAC;QAE5C,4EAA4E;QAC5ElD,OAAOqB,WAAWc,qBAAqB,CAAC;IAC1C;IAEAlC,GAAG,yDAAyD;QAC1DiB,sBAAsB;YAAEY,WAAW;YAAQC,KAAKlB;QAAU;QAE1D,MAAMJ,kBAAkB;YACtBE;YACAqB,gBAAgB;YAChBC,MAAMnB;YACNF;YACAF;YACAwB,gBAAgBhC,GAAGE,EAAE;QACvB;QAEA,MAAM,GAAG4C,QAAQ,GAAG7C,eAAeI,IAAI,CAAC+B,KAAK,CAAC,EAAE;QAChDtC,OAAOgD,QAAQI,eAAe,EAAET,OAAO,CAAC;YAAEU,iBAAiB;QAAY;IACzE;IAEApD,GAAG,2EAA2E;QAC5EiB,sBAAsB;YAAEY,WAAW;YAAQc,UAAU;YAAcb,KAAKlB;QAAU;QAClF,MAAMqB,iBAAiBhC,GAAGE,EAAE;QAE5B,MAAMK,kBAAkB;YACtBE;YACAqB,gBAAgB;YAChBC,MAAMnB;YACNF;YACAF;YACAwB;QACF;QAEAlC,OAAOkC,gBAAgBY,oBAAoB,CAAC;IAC9C;IAEA7C,GAAG,iEAAiE;QAClEiB,sBAAsB;YAAEY,WAAW;YAAQc,UAAU;YAAYb,KAAKlB;QAAU;QAChF,MAAMqB,iBAAiBhC,GAAGE,EAAE;QAE5B,MAAMK,kBAAkB;YACtBE;YACAqB,gBAAgB;YAChBC,MAAMnB;YACNF;YACAF;YACAwB;QACF;QAEAlC,OAAOkC,gBAAgBoB,GAAG,CAACC,gBAAgB;IAC7C;IAEAtD,GAAG,0CAA0C;QAC3CiB,sBAAsB;YAAEY,WAAW;YAAkBC,KAAKlB;QAAU;QAEpE,MAAM2C,SAAS,MAAM/C,kBAAkB;YACrCE;YACAqB,gBAAgB;YAChBC,MAAMnB;YACNF;YACAF;YACAwB,gBAAgBhC,GAAGE,EAAE;QACvB;QAEAJ,OAAOwD,QAAQb,OAAO,CAAC;YAAEc,QAAQ;QAAiB;IACpD;IAEAxD,GAAG,kDAAkD;QACnDiB,sBAAsB,CAAC,GAAG;QAE1B,MAAMlB,OACJS,kBAAkB;YAChBE;YACAqB,gBAAgB;YAChBC,MAAMnB;YACNF;YACAF;YACAwB,gBAAgBhC,GAAGE,EAAE;QACvB,IACAsD,OAAO,CAACC,OAAO;QAEjB3D,OAAOG,gBAAgBmD,GAAG,CAACC,gBAAgB;IAC7C;IAEAtD,GAAG,2CAA2C;QAC5CiB,sBAAsB;YAAEY,WAAW;YAAQC,KAAKlB;QAAU;QAC1DV,eAAeyD,iBAAiB,CAAC,IAAIC,MAAM;QAE3C,MAAM7D,OACJS,kBAAkB;YAChBE;YACAqB,gBAAgB;YAChBC,MAAMnB;YACNF;YACAF;YACAwB,gBAAgBhC,GAAGE,EAAE;QACvB,IACAsD,OAAO,CAACC,OAAO,CAAC;IACpB;AACF"}

package/dist/generateSignedURL.d.ts

@@ -1,14 +0,0 @@
-import type { ContainerClient } from '@azure/storage-blob';
-import type { ClientUploadsAccess } from '@payloadcms/plugin-cloud-storage/types';
-import type { PayloadHandler } from 'payload';
-import type { AzureStorageOptions } from './index.js';
-interface Args {
-    access?: ClientUploadsAccess;
-    collections: AzureStorageOptions['collections'];
-    containerName: string;
-    getStorageClient: () => ContainerClient;
-    useCompositePrefixes?: boolean;
-}
-export declare const getGenerateSignedURLHandler: ({ access, collections, containerName, getStorageClient, useCompositePrefixes, }: Args) => PayloadHandler;
-export {};
-//# sourceMappingURL=generateSignedURL.d.ts.map

package/dist/generateSignedURL.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"generateSignedURL.d.ts","sourceRoot":"","sources":["../src/generateSignedURL.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAA8B,MAAM,qBAAqB,CAAA;AACtF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAA;AACjF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAM7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAErD,UAAU,IAAI;IACZ,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B,WAAW,EAAE,mBAAmB,CAAC,aAAa,CAAC,CAAA;IAC/C,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,eAAe,CAAA;IACvC,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B;AAID,eAAO,MAAM,2BAA2B,oFAMrC,IAAI,KAAG,cAsDT,CAAA"}

package/dist/generateSignedURL.js

@@ -1,47 +0,0 @@
-import { BlobSASPermissions, generateBlobSASQueryParameters } from '@azure/storage-blob';
-import { resolveSignedURLKey } from '@payloadcms/plugin-cloud-storage/utilities';
-import { APIError, Forbidden } from 'payload';
-const defaultAccess = ({ req })=>!!req.user;
-export const getGenerateSignedURLHandler = ({ access = defaultAccess, collections, containerName, getStorageClient, useCompositePrefixes = false })=>{
-    return async (req)=>{
-        if (!req.json) {
-            throw new APIError('Unreachable');
-        }
-        const { collectionSlug, docPrefix, filename, mimeType } = await req.json();
-        const collectionStorageConfig = collections[collectionSlug];
-        if (!collectionStorageConfig) {
-            throw new APIError(`Collection ${collectionSlug} was not found in Azure storage options`);
-        }
-        const collectionPrefix = typeof collectionStorageConfig === 'object' && collectionStorageConfig.prefix || '';
-        if (!await access({
-            collectionSlug,
-            req
-        })) {
-            throw new Forbidden();
-        }
-        const { fileKey, sanitizedDocPrefix, sanitizedFilename } = await resolveSignedURLKey({
-            collectionPrefix,
-            collectionSlug,
-            docPrefix,
-            filename,
-            req,
-            useCompositePrefixes
-        });
-        const blobClient = getStorageClient().getBlobClient(fileKey);
-        const sasToken = generateBlobSASQueryParameters({
-            blobName: fileKey,
-            containerName,
-            contentType: mimeType,
-            expiresOn: new Date(Date.now() + 3 * 60 * 60 * 1000),
-            permissions: BlobSASPermissions.parse('w'),
-            startsOn: new Date()
-        }, getStorageClient().credential);
-        return Response.json({
-            docPrefix: sanitizedDocPrefix,
-            filename: sanitizedFilename,
-            url: `${blobClient.url}?${sasToken.toString()}`
-        });
-    };
-};
-
-//# sourceMappingURL=generateSignedURL.js.map

package/dist/generateSignedURL.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/generateSignedURL.ts"],"sourcesContent":["import type { ContainerClient, StorageSharedKeyCredential } from '@azure/storage-blob'\nimport type { ClientUploadsAccess } from '@payloadcms/plugin-cloud-storage/types'\nimport type { PayloadHandler } from 'payload'\n\nimport { BlobSASPermissions, generateBlobSASQueryParameters } from '@azure/storage-blob'\nimport { resolveSignedURLKey } from '@payloadcms/plugin-cloud-storage/utilities'\nimport { APIError, Forbidden } from 'payload'\n\nimport type { AzureStorageOptions } from './index.js'\n\ninterface Args {\n  access?: ClientUploadsAccess\n  collections: AzureStorageOptions['collections']\n  containerName: string\n  getStorageClient: () => ContainerClient\n  useCompositePrefixes?: boolean\n}\n\nconst defaultAccess: Args['access'] = ({ req }) => !!req.user\n\nexport const getGenerateSignedURLHandler = ({\n  access = defaultAccess,\n  collections,\n  containerName,\n  getStorageClient,\n  useCompositePrefixes = false,\n}: Args): PayloadHandler => {\n  return async (req) => {\n    if (!req.json) {\n      throw new APIError('Unreachable')\n    }\n\n    const { collectionSlug, docPrefix, filename, mimeType } = (await req.json()) as {\n      collectionSlug: string\n      docPrefix?: string\n      filename: string\n      mimeType: string\n    }\n\n    const collectionStorageConfig = collections[collectionSlug]\n    if (!collectionStorageConfig) {\n      throw new APIError(`Collection ${collectionSlug} was not found in Azure storage options`)\n    }\n\n    const collectionPrefix =\n      (typeof collectionStorageConfig === 'object' && collectionStorageConfig.prefix) || ''\n\n    if (!(await access({ collectionSlug, req }))) {\n      throw new Forbidden()\n    }\n\n    const { fileKey, sanitizedDocPrefix, sanitizedFilename } = await resolveSignedURLKey({\n      collectionPrefix,\n      collectionSlug,\n      docPrefix,\n      filename,\n      req,\n      useCompositePrefixes,\n    })\n\n    const blobClient = getStorageClient().getBlobClient(fileKey)\n\n    const sasToken = generateBlobSASQueryParameters(\n      {\n        blobName: fileKey,\n        containerName,\n        contentType: mimeType,\n        expiresOn: new Date(Date.now() + 3 * 60 * 60 * 1000),\n        permissions: BlobSASPermissions.parse('w'),\n        startsOn: new Date(),\n      },\n      getStorageClient().credential as StorageSharedKeyCredential,\n    )\n\n    return Response.json({\n      docPrefix: sanitizedDocPrefix,\n      filename: sanitizedFilename,\n      url: `${blobClient.url}?${sasToken.toString()}`,\n    })\n  }\n}\n"],"names":["BlobSASPermissions","generateBlobSASQueryParameters","resolveSignedURLKey","APIError","Forbidden","defaultAccess","req","user","getGenerateSignedURLHandler","access","collections","containerName","getStorageClient","useCompositePrefixes","json","collectionSlug","docPrefix","filename","mimeType","collectionStorageConfig","collectionPrefix","prefix","fileKey","sanitizedDocPrefix","sanitizedFilename","blobClient","getBlobClient","sasToken","blobName","contentType","expiresOn","Date","now","permissions","parse","startsOn","credential","Response","url","toString"],"mappings":"AAIA,SAASA,kBAAkB,EAAEC,8BAA8B,QAAQ,sBAAqB;AACxF,SAASC,mBAAmB,QAAQ,6CAA4C;AAChF,SAASC,QAAQ,EAAEC,SAAS,QAAQ,UAAS;AAY7C,MAAMC,gBAAgC,CAAC,EAAEC,GAAG,EAAE,GAAK,CAAC,CAACA,IAAIC,IAAI;AAE7D,OAAO,MAAMC,8BAA8B,CAAC,EAC1CC,SAASJ,aAAa,EACtBK,WAAW,EACXC,aAAa,EACbC,gBAAgB,EAChBC,uBAAuB,KAAK,EACvB;IACL,OAAO,OAAOP;QACZ,IAAI,CAACA,IAAIQ,IAAI,EAAE;YACb,MAAM,IAAIX,SAAS;QACrB;QAEA,MAAM,EAAEY,cAAc,EAAEC,SAAS,EAAEC,QAAQ,EAAEC,QAAQ,EAAE,GAAI,MAAMZ,IAAIQ,IAAI;QAOzE,MAAMK,0BAA0BT,WAAW,CAACK,eAAe;QAC3D,IAAI,CAACI,yBAAyB;YAC5B,MAAM,IAAIhB,SAAS,CAAC,WAAW,EAAEY,eAAe,uCAAuC,CAAC;QAC1F;QAEA,MAAMK,mBACJ,AAAC,OAAOD,4BAA4B,YAAYA,wBAAwBE,MAAM,IAAK;QAErF,IAAI,CAAE,MAAMZ,OAAO;YAAEM;YAAgBT;QAAI,IAAK;YAC5C,MAAM,IAAIF;QACZ;QAEA,MAAM,EAAEkB,OAAO,EAAEC,kBAAkB,EAAEC,iBAAiB,EAAE,GAAG,MAAMtB,oBAAoB;YACnFkB;YACAL;YACAC;YACAC;YACAX;YACAO;QACF;QAEA,MAAMY,aAAab,mBAAmBc,aAAa,CAACJ;QAEpD,MAAMK,WAAW1B,+BACf;YACE2B,UAAUN;YACVX;YACAkB,aAAaX;YACbY,WAAW,IAAIC,KAAKA,KAAKC,GAAG,KAAK,IAAI,KAAK,KAAK;YAC/CC,aAAajC,mBAAmBkC,KAAK,CAAC;YACtCC,UAAU,IAAIJ;QAChB,GACAnB,mBAAmBwB,UAAU;QAG/B,OAAOC,SAASvB,IAAI,CAAC;YACnBE,WAAWO;YACXN,UAAUO;YACVc,KAAK,GAAGb,WAAWa,GAAG,CAAC,CAAC,EAAEX,SAASY,QAAQ,IAAI;QACjD;IACF;AACF,EAAC"}