@payloadcms/tanstack-start 4.0.0-canary.10

package/dist/utilities/toSerializable.js

@@ -0,0 +1,111 @@
+/**
+ * Recursively strip values that seroval cannot serialize (React elements,
+ * functions, Symbols) while preserving Maps, Sets, Dates, typed arrays, etc.
+ *
+ * TanStack Start uses seroval to transfer server function return values to
+ * the client.  Payload's `getClientConfig` / `getLayoutData` may include
+ * callback functions or RegExp instances that seroval chokes on.  Running
+ * the data through this function before returning from a `createServerFn`
+ * handler keeps the transfer safe.
+ *
+ * For server functions whose payloads contain React elements (e.g. the
+ * shared `form-state` / `render-list` / `render-document` handlers), use
+ * `serializeForRsc` instead — it converts elements into RSC handles rather
+ * than stripping them.
+ *
+ * Uses a WeakMap cache so that shared object references (e.g. the same array
+ * referenced by both `doc.hasMany` and `formState.hasMany.value`) are
+ * returned correctly instead of being dropped as "already seen".
+ *
+ * A separate `ancestors` WeakSet tracks objects currently being recursed into.
+ * If an object is encountered while it is still on the recursion stack, the
+ * reference is circular and is replaced with `undefined` to keep the output
+ * JSON-safe.  Once recursion completes the object is removed from `ancestors`,
+ * so sibling/cousin references to the same (fully-processed) object still
+ * resolve to the cached clone.
+ */ function stripUnserializable(value, cache = new WeakMap(), ancestors = new WeakSet()) {
+    if (value === null || value === undefined) {
+        return value;
+    }
+    const t = typeof value;
+    if (t === 'function' || t === 'symbol') {
+        return undefined;
+    }
+    if (t !== 'object') {
+        return value;
+    }
+    const obj = value;
+    if (typeof obj.$$typeof === 'symbol') {
+        return undefined;
+    }
+    if (ancestors.has(obj)) {
+        return undefined;
+    }
+    if (cache.has(obj)) {
+        return cache.get(obj);
+    }
+    if (obj instanceof Date) {
+        return obj;
+    }
+    // RegExp: seroval's SSR bootstrap emits regex literals with broken escape
+    // sequences (e.g. `/!\\[.../` instead of `/!\[.../`), crashing the client
+    // script that populates `window.$_TSR` and preventing hydration. Rich-text
+    // feature transformer regexes aren't needed on the client (they drive
+    // server-side markdown import/export), so strip them here.
+    if (obj instanceof RegExp) {
+        return undefined;
+    }
+    ancestors.add(obj);
+    if (obj instanceof Map) {
+        const cleaned = new Map();
+        cache.set(obj, cleaned);
+        for (const [k, v] of obj){
+            const cv = stripUnserializable(v, cache, ancestors);
+            if (cv !== undefined) {
+                cleaned.set(k, cv);
+            }
+        }
+        ancestors.delete(obj);
+        return cleaned;
+    }
+    if (obj instanceof Set) {
+        const cleaned = new Set();
+        cache.set(obj, cleaned);
+        for (const v of obj){
+            const cv = stripUnserializable(v, cache, ancestors);
+            if (cv !== undefined) {
+                cleaned.add(cv);
+            }
+        }
+        ancestors.delete(obj);
+        return cleaned;
+    }
+    if (Array.isArray(obj)) {
+        const arr = [];
+        cache.set(obj, arr);
+        for (const item of obj){
+            arr.push(stripUnserializable(item, cache, ancestors));
+        }
+        ancestors.delete(obj);
+        return arr;
+    }
+    if (ArrayBuffer.isView(obj)) {
+        ancestors.delete(obj);
+        return obj;
+    }
+    const result = {};
+    cache.set(obj, result);
+    for (const key of Object.keys(obj)){
+        const v = stripUnserializable(obj[key], cache, ancestors);
+        if (v !== undefined) {
+            result[key] = v;
+        }
+    }
+    ancestors.delete(obj);
+    return result;
+}
+export function toSerializable(value) {
+    return stripUnserializable(value);
+}
+
+//# sourceMappingURL=toSerializable.js.map

package/dist/utilities/toSerializable.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/toSerializable.ts"],"sourcesContent":["/**\n * Recursively strip values that seroval cannot serialize (React elements,\n * functions, Symbols) while preserving Maps, Sets, Dates, typed arrays, etc.\n *\n * TanStack Start uses seroval to transfer server function return values to\n * the client.  Payload's `getClientConfig` / `getLayoutData` may include\n * callback functions or RegExp instances that seroval chokes on.  Running\n * the data through this function before returning from a `createServerFn`\n * handler keeps the transfer safe.\n *\n * For server functions whose payloads contain React elements (e.g. the\n * shared `form-state` / `render-list` / `render-document` handlers), use\n * `serializeForRsc` instead — it converts elements into RSC handles rather\n * than stripping them.\n *\n * Uses a WeakMap cache so that shared object references (e.g. the same array\n * referenced by both `doc.hasMany` and `formState.hasMany.value`) are\n * returned correctly instead of being dropped as \"already seen\".\n *\n * A separate `ancestors` WeakSet tracks objects currently being recursed into.\n * If an object is encountered while it is still on the recursion stack, the\n * reference is circular and is replaced with `undefined` to keep the output\n * JSON-safe.  Once recursion completes the object is removed from `ancestors`,\n * so sibling/cousin references to the same (fully-processed) object still\n * resolve to the cached clone.\n */\nfunction stripUnserializable(\n  value: unknown,\n  cache = new WeakMap<object, unknown>(),\n  ancestors = new WeakSet<object>(),\n): unknown {\n  if (value === null || value === undefined) {\n    return value\n  }\n\n  const t = typeof value\n  if (t === 'function' || t === 'symbol') {\n    return undefined\n  }\n  if (t !== 'object') {\n    return value\n  }\n\n  const obj = value as Record<string, unknown>\n\n  if (typeof obj.$$typeof === 'symbol') {\n    return undefined\n  }\n\n  if (ancestors.has(obj)) {\n    return undefined\n  }\n\n  if (cache.has(obj)) {\n    return cache.get(obj)\n  }\n\n  if (obj instanceof Date) {\n    return obj\n  }\n\n  // RegExp: seroval's SSR bootstrap emits regex literals with broken escape\n  // sequences (e.g. `/!\\\\[.../` instead of `/!\\[.../`), crashing the client\n  // script that populates `window.$_TSR` and preventing hydration. Rich-text\n  // feature transformer regexes aren't needed on the client (they drive\n  // server-side markdown import/export), so strip them here.\n  if (obj instanceof RegExp) {\n    return undefined\n  }\n\n  ancestors.add(obj)\n\n  if (obj instanceof Map) {\n    const cleaned = new Map()\n    cache.set(obj, cleaned)\n    for (const [k, v] of obj) {\n      const cv = stripUnserializable(v, cache, ancestors)\n      if (cv !== undefined) {\n        cleaned.set(k, cv)\n      }\n    }\n    ancestors.delete(obj)\n    return cleaned\n  }\n\n  if (obj instanceof Set) {\n    const cleaned = new Set()\n    cache.set(obj, cleaned)\n    for (const v of obj) {\n      const cv = stripUnserializable(v, cache, ancestors)\n      if (cv !== undefined) {\n        cleaned.add(cv)\n      }\n    }\n    ancestors.delete(obj)\n    return cleaned\n  }\n\n  if (Array.isArray(obj)) {\n    const arr: unknown[] = []\n    cache.set(obj, arr)\n    for (const item of obj) {\n      arr.push(stripUnserializable(item, cache, ancestors))\n    }\n    ancestors.delete(obj)\n    return arr\n  }\n\n  if (ArrayBuffer.isView(obj)) {\n    ancestors.delete(obj)\n    return obj\n  }\n\n  const result: Record<string, unknown> = {}\n  cache.set(obj, result)\n  for (const key of Object.keys(obj)) {\n    const v = stripUnserializable(obj[key], cache, ancestors)\n    if (v !== undefined) {\n      result[key] = v\n    }\n  }\n  ancestors.delete(obj)\n  return result\n}\n\nexport function toSerializable<T>(value: T): T {\n  return stripUnserializable(value) as T\n}\n"],"names":["stripUnserializable","value","cache","WeakMap","ancestors","WeakSet","undefined","t","obj","$$typeof","has","get","Date","RegExp","add","Map","cleaned","set","k","v","cv","delete","Set","Array","isArray","arr","item","push","ArrayBuffer","isView","result","key","Object","keys","toSerializable"],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GACD,SAASA,oBACPC,KAAc,EACdC,QAAQ,IAAIC,SAA0B,EACtCC,YAAY,IAAIC,SAAiB;IAEjC,IAAIJ,UAAU,QAAQA,UAAUK,WAAW;QACzC,OAAOL;IACT;IAEA,MAAMM,IAAI,OAAON;IACjB,IAAIM,MAAM,cAAcA,MAAM,UAAU;QACtC,OAAOD;IACT;IACA,IAAIC,MAAM,UAAU;QAClB,OAAON;IACT;IAEA,MAAMO,MAAMP;IAEZ,IAAI,OAAOO,IAAIC,QAAQ,KAAK,UAAU;QACpC,OAAOH;IACT;IAEA,IAAIF,UAAUM,GAAG,CAACF,MAAM;QACtB,OAAOF;IACT;IAEA,IAAIJ,MAAMQ,GAAG,CAACF,MAAM;QAClB,OAAON,MAAMS,GAAG,CAACH;IACnB;IAEA,IAAIA,eAAeI,MAAM;QACvB,OAAOJ;IACT;IAEA,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,sEAAsE;IACtE,2DAA2D;IAC3D,IAAIA,eAAeK,QAAQ;QACzB,OAAOP;IACT;IAEAF,UAAUU,GAAG,CAACN;IAEd,IAAIA,eAAeO,KAAK;QACtB,MAAMC,UAAU,IAAID;QACpBb,MAAMe,GAAG,CAACT,KAAKQ;QACf,KAAK,MAAM,CAACE,GAAGC,EAAE,IAAIX,IAAK;YACxB,MAAMY,KAAKpB,oBAAoBmB,GAAGjB,OAAOE;YACzC,IAAIgB,OAAOd,WAAW;gBACpBU,QAAQC,GAAG,CAACC,GAAGE;YACjB;QACF;QACAhB,UAAUiB,MAAM,CAACb;QACjB,OAAOQ;IACT;IAEA,IAAIR,eAAec,KAAK;QACtB,MAAMN,UAAU,IAAIM;QACpBpB,MAAMe,GAAG,CAACT,KAAKQ;QACf,KAAK,MAAMG,KAAKX,IAAK;YACnB,MAAMY,KAAKpB,oBAAoBmB,GAAGjB,OAAOE;YACzC,IAAIgB,OAAOd,WAAW;gBACpBU,QAAQF,GAAG,CAACM;YACd;QACF;QACAhB,UAAUiB,MAAM,CAACb;QACjB,OAAOQ;IACT;IAEA,IAAIO,MAAMC,OAAO,CAAChB,MAAM;QACtB,MAAMiB,MAAiB,EAAE;QACzBvB,MAAMe,GAAG,CAACT,KAAKiB;QACf,KAAK,MAAMC,QAAQlB,IAAK;YACtBiB,IAAIE,IAAI,CAAC3B,oBAAoB0B,MAAMxB,OAAOE;QAC5C;QACAA,UAAUiB,MAAM,CAACb;QACjB,OAAOiB;IACT;IAEA,IAAIG,YAAYC,MAAM,CAACrB,MAAM;QAC3BJ,UAAUiB,MAAM,CAACb;QACjB,OAAOA;IACT;IAEA,MAAMsB,SAAkC,CAAC;IACzC5B,MAAMe,GAAG,CAACT,KAAKsB;IACf,KAAK,MAAMC,OAAOC,OAAOC,IAAI,CAACzB,KAAM;QAClC,MAAMW,IAAInB,oBAAoBQ,GAAG,CAACuB,IAAI,EAAE7B,OAAOE;QAC/C,IAAIe,MAAMb,WAAW;YACnBwB,MAAM,CAACC,IAAI,GAAGZ;QAChB;IACF;IACAf,UAAUiB,MAAM,CAACb;IACjB,OAAOsB;AACT;AAEA,OAAO,SAASI,eAAkBjC,KAAQ;IACxC,OAAOD,oBAAoBC;AAC7B"}

package/dist/vite/config/external.d.ts

@@ -0,0 +1,11 @@
+/**
+ * SSR/RSC externalization config used by `withPayload`. Kept separate from the
+ * client optimizer config (`./optimizeDeps.ts`) so each concern stays small.
+ */
+/**
+ * Server-only packages (Node-only or only ever used by the server bundle).
+ * These are the Vite equivalent of Next.js's `serverExternalPackages`.
+ */
+export declare const ssrExternalPackages: string[];
+export declare const payloadNoExternalPatterns: Array<RegExp | string>;
+//# sourceMappingURL=external.d.ts.map

package/dist/vite/config/external.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external.d.ts","sourceRoot":"","sources":["../../../src/vite/config/external.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,EA+BvC,CAAA;AAED,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAO5D,CAAA"}

package/dist/vite/config/external.js

@@ -0,0 +1,48 @@
+/**
+ * SSR/RSC externalization config used by `withPayload`. Kept separate from the
+ * client optimizer config (`./optimizeDeps.ts`) so each concern stays small.
+ */ /**
+ * Server-only packages (Node-only or only ever used by the server bundle).
+ * These are the Vite equivalent of Next.js's `serverExternalPackages`.
+ */ export const ssrExternalPackages = [
+    'ajv',
+    'fast-uri',
+    'drizzle-kit',
+    'drizzle-kit/api',
+    'drizzle-orm',
+    'sharp',
+    'require-in-the-middle',
+    'json-schema-to-typescript',
+    'pino',
+    'pino-pretty',
+    'graphql',
+    'nodemailer',
+    'aws4',
+    'pluralize',
+    'console-table-printer',
+    '@azure/storage-blob',
+    '@aws-sdk/client-s3',
+    '@aws-sdk/s3-request-presigner',
+    '@google-cloud/storage',
+    // Database drivers + their lazily-required companions, one group per adapter.
+    // Postgres (`@payloadcms/db-postgres`, `@payloadcms/db-vercel-postgres`)
+    'pg',
+    'pg-native',
+    'pg-cloudflare',
+    // SQLite (`@payloadcms/db-sqlite`)
+    'better-sqlite3',
+    'libsql',
+    // Mongo (`@payloadcms/db-mongodb`)
+    'mongodb',
+    'mongoose'
+];
+export const payloadNoExternalPatterns = [
+    '@payloadcms/ui',
+    '@payloadcms/translations',
+    '@payloadcms/tanstack-start',
+    /^@payloadcms\/richtext-lexical/,
+    /^@payloadcms\/plugin-/,
+    /^@payloadcms\/storage-/
+];
+
+//# sourceMappingURL=external.js.map

package/dist/vite/config/external.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/vite/config/external.ts"],"sourcesContent":["/**\n * SSR/RSC externalization config used by `withPayload`. Kept separate from the\n * client optimizer config (`./optimizeDeps.ts`) so each concern stays small.\n */\n\n/**\n * Server-only packages (Node-only or only ever used by the server bundle).\n * These are the Vite equivalent of Next.js's `serverExternalPackages`.\n */\nexport const ssrExternalPackages: string[] = [\n  'ajv',\n  'fast-uri',\n  'drizzle-kit',\n  'drizzle-kit/api',\n  'drizzle-orm',\n  'sharp',\n  'require-in-the-middle',\n  'json-schema-to-typescript',\n  'pino',\n  'pino-pretty',\n  'graphql',\n  'nodemailer',\n  'aws4',\n  'pluralize',\n  'console-table-printer',\n  '@azure/storage-blob',\n  '@aws-sdk/client-s3',\n  '@aws-sdk/s3-request-presigner',\n  '@google-cloud/storage',\n  // Database drivers + their lazily-required companions, one group per adapter.\n  // Postgres (`@payloadcms/db-postgres`, `@payloadcms/db-vercel-postgres`)\n  'pg',\n  'pg-native',\n  'pg-cloudflare',\n  // SQLite (`@payloadcms/db-sqlite`)\n  'better-sqlite3',\n  'libsql',\n  // Mongo (`@payloadcms/db-mongodb`)\n  'mongodb',\n  'mongoose',\n]\n\nexport const payloadNoExternalPatterns: Array<RegExp | string> = [\n  '@payloadcms/ui',\n  '@payloadcms/translations',\n  '@payloadcms/tanstack-start',\n  /^@payloadcms\\/richtext-lexical/,\n  /^@payloadcms\\/plugin-/,\n  /^@payloadcms\\/storage-/,\n]\n"],"names":["ssrExternalPackages","payloadNoExternalPatterns"],"mappings":"AAAA;;;CAGC,GAED;;;CAGC,GACD,OAAO,MAAMA,sBAAgC;IAC3C;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,8EAA8E;IAC9E,yEAAyE;IACzE;IACA;IACA;IACA,mCAAmC;IACnC;IACA;IACA,mCAAmC;IACnC;IACA;CACD,CAAA;AAED,OAAO,MAAMC,4BAAoD;IAC/D;IACA;IACA;IACA;IACA;IACA;CACD,CAAA"}

package/dist/vite/config/optimizeDeps.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Client dep-optimizer config used by `withPayload`. Kept separate from the
+ * SSR/RSC externalization config (`./external.ts`) so each concern stays small.
+ */
+/**
+ * Packages we know contain Node-only code or top-level side effects requiring
+ * Node APIs. Excluding them from the client optimizer prevents Vite from
+ * walking into their main entries and trying to bundle server-only imports
+ * for the browser.
+ */
+export declare const optimizeDepsExcludeDefaults: string[];
+/**
+ * Transitive dependencies of `@payloadcms/ui` and `payload` that need to be
+ * pre-bundled for the client. Vite's auto-discovery doesn't reliably pick
+ * these up because their parent packages are in `optimizeDeps.exclude`, so we
+ * list them explicitly using the `parent > child` syntax.
+ *
+ * Each entry below fixes a specific late-discovery re-optimization: without it,
+ * Vite discovers the dep *after* its initial crawl, forcing a full dep
+ * re-optimization mid-session that 404s in-flight `.vite/deps/*` chunks and
+ * remounts the admin (dropping client state). This is why the list can't simply
+ * be deleted — it is the "complete first pass" for the admin's dep graph.
+ */
+export declare const optimizeDepsIncludeDefaults: string[];
+//# sourceMappingURL=optimizeDeps.d.ts.map

package/dist/vite/config/optimizeDeps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimizeDeps.d.ts","sourceRoot":"","sources":["../../../src/vite/config/optimizeDeps.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,EAAE,MAAM,EAsB/C,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,EAAE,MAAM,EA8E/C,CAAA"}

package/dist/vite/config/optimizeDeps.js

@@ -0,0 +1,123 @@
+/**
+ * Client dep-optimizer config used by `withPayload`. Kept separate from the
+ * SSR/RSC externalization config (`./external.ts`) so each concern stays small.
+ */ /**
+ * Packages we know contain Node-only code or top-level side effects requiring
+ * Node APIs. Excluding them from the client optimizer prevents Vite from
+ * walking into their main entries and trying to bundle server-only imports
+ * for the browser.
+ */ export const optimizeDepsExcludeDefaults = [
+    'sharp',
+    '@payloadcms/ui',
+    '@payloadcms/tanstack-start',
+    'payload',
+    'pino',
+    'pino-pretty',
+    'busboy',
+    'get-tsconfig',
+    'ws',
+    'croner',
+    'prompts',
+    'file-type',
+    // Server-only SDKs used by `@payloadcms/storage-*` adapters. Vite
+    // sometimes walks these from the main package entry while scanning
+    // workspace deps, and the browser sub-bundles do not expose the
+    // server-only APIs (e.g. `BlobSASPermissions`), which crashes the dev
+    // server with a `MISSING_EXPORT` error before any test runs.
+    '@azure/storage-blob',
+    '@aws-sdk/client-s3',
+    '@aws-sdk/s3-request-presigner',
+    '@google-cloud/storage'
+];
+/**
+ * Transitive dependencies of `@payloadcms/ui` and `payload` that need to be
+ * pre-bundled for the client. Vite's auto-discovery doesn't reliably pick
+ * these up because their parent packages are in `optimizeDeps.exclude`, so we
+ * list them explicitly using the `parent > child` syntax.
+ *
+ * Each entry below fixes a specific late-discovery re-optimization: without it,
+ * Vite discovers the dep *after* its initial crawl, forcing a full dep
+ * re-optimization mid-session that 404s in-flight `.vite/deps/*` chunks and
+ * remounts the admin (dropping client state). This is why the list can't simply
+ * be deleted — it is the "complete first pass" for the admin's dep graph.
+ */ export const optimizeDepsIncludeDefaults = [
+    '@payloadcms/ui > sonner',
+    '@payloadcms/ui > @faceless-ui/modal',
+    '@payloadcms/ui > @faceless-ui/window-info',
+    '@payloadcms/ui > @faceless-ui/scroll-info',
+    '@payloadcms/ui > @dnd-kit/core',
+    '@payloadcms/ui > @dnd-kit/sortable',
+    '@payloadcms/ui > @dnd-kit/utilities',
+    '@payloadcms/ui > react-datepicker',
+    '@payloadcms/ui > react-select',
+    '@payloadcms/ui > react-select/creatable',
+    '@payloadcms/ui > react-image-crop',
+    '@payloadcms/ui > @monaco-editor/react',
+    '@payloadcms/ui > date-fns',
+    '@payloadcms/ui > date-fns/transpose',
+    '@payloadcms/ui > @date-fns/tz/date/mini',
+    '@payloadcms/ui > uuid',
+    '@payloadcms/ui > use-context-selector',
+    '@payloadcms/ui > bson-objectid',
+    '@payloadcms/ui > dequal',
+    '@payloadcms/ui > object-to-formdata',
+    '@payloadcms/ui > md5',
+    'payload > deepmerge',
+    'payload > pluralize',
+    // `scheduler` is a transitive dep of `react-dom`, not a direct dependency of
+    // the app, so a bare `'scheduler'` specifier fails to resolve from an isolated
+    // install (`test/node_modules` built with `pnpm i --ignore-workspace`), where
+    // it isn't hoisted to the top level. Path it through `react-dom` so the
+    // optimizer resolves the exact copy the runtime loads.
+    'react-dom > scheduler',
+    // `@payloadcms/ui` (in `optimizeDeps.exclude`) ships compiled output that the
+    // React Compiler rewrote to `import { c } from 'react/compiler-runtime'`.
+    // Because its parent is excluded, the optimizer never crawls in to discover
+    // this entry, so Vite serves `react/compiler-runtime` raw. That file is
+    // CommonJS (`module.exports = require(...)`), so the named `c` export can't be
+    // statically extracted and every client component throws "does not provide an
+    // export named 'c'". Pre-bundling it lets esbuild synthesize the named export.
+    'react/compiler-runtime',
+    // Transitive deps that Vite otherwise discovers *after* the initial crawl
+    // (react-select pulls in @floating-ui at runtime; react-is is reached via
+    // react-transition-group/prop-types; the default date-fns locale is loaded
+    // through a dynamic `date-fns/locale/${key}` import). A late discovery forces
+    // a full dep re-optimization mid-session, which 404s every in-flight
+    // `.vite/deps/*` chunk ("Pre-transform error: file does not exist in the
+    // optimize deps directory") and breaks the admin UI in CI cold starts.
+    // Pre-bundling them keeps the first optimization pass complete.
+    '@payloadcms/ui > react-select > @floating-ui/dom',
+    '@payloadcms/ui > react-select > @floating-ui/dom > @floating-ui/core',
+    '@payloadcms/ui > react-select > prop-types > react-is',
+    '@payloadcms/ui > date-fns/locale/en-US',
+    // Further late discoveries observed re-optimizing mid-run in CI cold starts
+    // (see CI logs: "✨ new dependencies optimized: @dnd-kit/modifiers / ajv /
+    // dequal/lite"). The modular dashboard pulls in `@dnd-kit/modifiers` on first
+    // render; form-state diffing reaches `dequal/lite` (a distinct entry point
+    // from the already-listed `dequal`); client-side field validation reaches
+    // `ajv` *through `payload`* — it is `ssrExternal` server-side but still
+    // bundled into the client, and must be pathed via `payload` so the optimizer
+    // pre-bundles the exact copy the runtime loads.
+    '@payloadcms/ui > @dnd-kit/modifiers',
+    '@payloadcms/ui > dequal/lite',
+    'payload > ajv',
+    // The storage client-upload suites (esp. vercel-blob) crawl part of the
+    // `payload` server runtime into the client bundle and discover these late,
+    // triggering several "optimized dependencies changed. reloading" waves that
+    // reload the page mid-test (the bulk-upload drawer's Create New button /
+    // dropzone vanish and the direct-to-bucket PUT never fires). Pre-bundle the
+    // whole observed set so the first pass is complete.
+    'payload > undici',
+    'payload > jose',
+    'payload > dataloader',
+    'payload > path-to-regexp',
+    'payload > console-table-printer',
+    'payload > ci-info',
+    'payload > image-size',
+    'payload > image-size/fromFile',
+    'payload > ipaddr.js',
+    'payload > range-parser',
+    'payload > sanitize-filename'
+];
+
+//# sourceMappingURL=optimizeDeps.js.map

package/dist/vite/config/optimizeDeps.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/vite/config/optimizeDeps.ts"],"sourcesContent":["/**\n * Client dep-optimizer config used by `withPayload`. Kept separate from the\n * SSR/RSC externalization config (`./external.ts`) so each concern stays small.\n */\n\n/**\n * Packages we know contain Node-only code or top-level side effects requiring\n * Node APIs. Excluding them from the client optimizer prevents Vite from\n * walking into their main entries and trying to bundle server-only imports\n * for the browser.\n */\nexport const optimizeDepsExcludeDefaults: string[] = [\n  'sharp',\n  '@payloadcms/ui',\n  '@payloadcms/tanstack-start',\n  'payload',\n  'pino',\n  'pino-pretty',\n  'busboy',\n  'get-tsconfig',\n  'ws',\n  'croner',\n  'prompts',\n  'file-type',\n  // Server-only SDKs used by `@payloadcms/storage-*` adapters. Vite\n  // sometimes walks these from the main package entry while scanning\n  // workspace deps, and the browser sub-bundles do not expose the\n  // server-only APIs (e.g. `BlobSASPermissions`), which crashes the dev\n  // server with a `MISSING_EXPORT` error before any test runs.\n  '@azure/storage-blob',\n  '@aws-sdk/client-s3',\n  '@aws-sdk/s3-request-presigner',\n  '@google-cloud/storage',\n]\n\n/**\n * Transitive dependencies of `@payloadcms/ui` and `payload` that need to be\n * pre-bundled for the client. Vite's auto-discovery doesn't reliably pick\n * these up because their parent packages are in `optimizeDeps.exclude`, so we\n * list them explicitly using the `parent > child` syntax.\n *\n * Each entry below fixes a specific late-discovery re-optimization: without it,\n * Vite discovers the dep *after* its initial crawl, forcing a full dep\n * re-optimization mid-session that 404s in-flight `.vite/deps/*` chunks and\n * remounts the admin (dropping client state). This is why the list can't simply\n * be deleted — it is the \"complete first pass\" for the admin's dep graph.\n */\nexport const optimizeDepsIncludeDefaults: string[] = [\n  '@payloadcms/ui > sonner',\n  '@payloadcms/ui > @faceless-ui/modal',\n  '@payloadcms/ui > @faceless-ui/window-info',\n  '@payloadcms/ui > @faceless-ui/scroll-info',\n  '@payloadcms/ui > @dnd-kit/core',\n  '@payloadcms/ui > @dnd-kit/sortable',\n  '@payloadcms/ui > @dnd-kit/utilities',\n  '@payloadcms/ui > react-datepicker',\n  '@payloadcms/ui > react-select',\n  '@payloadcms/ui > react-select/creatable',\n  '@payloadcms/ui > react-image-crop',\n  '@payloadcms/ui > @monaco-editor/react',\n  '@payloadcms/ui > date-fns',\n  '@payloadcms/ui > date-fns/transpose',\n  '@payloadcms/ui > @date-fns/tz/date/mini',\n  '@payloadcms/ui > uuid',\n  '@payloadcms/ui > use-context-selector',\n  '@payloadcms/ui > bson-objectid',\n  '@payloadcms/ui > dequal',\n  '@payloadcms/ui > object-to-formdata',\n  '@payloadcms/ui > md5',\n  'payload > deepmerge',\n  'payload > pluralize',\n  // `scheduler` is a transitive dep of `react-dom`, not a direct dependency of\n  // the app, so a bare `'scheduler'` specifier fails to resolve from an isolated\n  // install (`test/node_modules` built with `pnpm i --ignore-workspace`), where\n  // it isn't hoisted to the top level. Path it through `react-dom` so the\n  // optimizer resolves the exact copy the runtime loads.\n  'react-dom > scheduler',\n  // `@payloadcms/ui` (in `optimizeDeps.exclude`) ships compiled output that the\n  // React Compiler rewrote to `import { c } from 'react/compiler-runtime'`.\n  // Because its parent is excluded, the optimizer never crawls in to discover\n  // this entry, so Vite serves `react/compiler-runtime` raw. That file is\n  // CommonJS (`module.exports = require(...)`), so the named `c` export can't be\n  // statically extracted and every client component throws \"does not provide an\n  // export named 'c'\". Pre-bundling it lets esbuild synthesize the named export.\n  'react/compiler-runtime',\n  // Transitive deps that Vite otherwise discovers *after* the initial crawl\n  // (react-select pulls in @floating-ui at runtime; react-is is reached via\n  // react-transition-group/prop-types; the default date-fns locale is loaded\n  // through a dynamic `date-fns/locale/${key}` import). A late discovery forces\n  // a full dep re-optimization mid-session, which 404s every in-flight\n  // `.vite/deps/*` chunk (\"Pre-transform error: file does not exist in the\n  // optimize deps directory\") and breaks the admin UI in CI cold starts.\n  // Pre-bundling them keeps the first optimization pass complete.\n  '@payloadcms/ui > react-select > @floating-ui/dom',\n  '@payloadcms/ui > react-select > @floating-ui/dom > @floating-ui/core',\n  '@payloadcms/ui > react-select > prop-types > react-is',\n  '@payloadcms/ui > date-fns/locale/en-US',\n  // Further late discoveries observed re-optimizing mid-run in CI cold starts\n  // (see CI logs: \"✨ new dependencies optimized: @dnd-kit/modifiers / ajv /\n  // dequal/lite\"). The modular dashboard pulls in `@dnd-kit/modifiers` on first\n  // render; form-state diffing reaches `dequal/lite` (a distinct entry point\n  // from the already-listed `dequal`); client-side field validation reaches\n  // `ajv` *through `payload`* — it is `ssrExternal` server-side but still\n  // bundled into the client, and must be pathed via `payload` so the optimizer\n  // pre-bundles the exact copy the runtime loads.\n  '@payloadcms/ui > @dnd-kit/modifiers',\n  '@payloadcms/ui > dequal/lite',\n  'payload > ajv',\n  // The storage client-upload suites (esp. vercel-blob) crawl part of the\n  // `payload` server runtime into the client bundle and discover these late,\n  // triggering several \"optimized dependencies changed. reloading\" waves that\n  // reload the page mid-test (the bulk-upload drawer's Create New button /\n  // dropzone vanish and the direct-to-bucket PUT never fires). Pre-bundle the\n  // whole observed set so the first pass is complete.\n  'payload > undici',\n  'payload > jose',\n  'payload > dataloader',\n  'payload > path-to-regexp',\n  'payload > console-table-printer',\n  'payload > ci-info',\n  'payload > image-size',\n  'payload > image-size/fromFile',\n  'payload > ipaddr.js',\n  'payload > range-parser',\n  'payload > sanitize-filename',\n]\n"],"names":["optimizeDepsExcludeDefaults","optimizeDepsIncludeDefaults"],"mappings":"AAAA;;;CAGC,GAED;;;;;CAKC,GACD,OAAO,MAAMA,8BAAwC;IACnD;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,kEAAkE;IAClE,mEAAmE;IACnE,gEAAgE;IAChE,sEAAsE;IACtE,6DAA6D;IAC7D;IACA;IACA;IACA;CACD,CAAA;AAED;;;;;;;;;;;CAWC,GACD,OAAO,MAAMC,8BAAwC;IACnD;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,6EAA6E;IAC7E,+EAA+E;IAC/E,8EAA8E;IAC9E,wEAAwE;IACxE,uDAAuD;IACvD;IACA,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,+EAA+E;IAC/E,8EAA8E;IAC9E,+EAA+E;IAC/E;IACA,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9E,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,gEAAgE;IAChE;IACA;IACA;IACA;IACA,4EAA4E;IAC5E,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,6EAA6E;IAC7E,gDAAgD;IAChD;IACA;IACA;IACA,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,oDAAoD;IACpD;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAA"}

package/dist/vite/config/scss.d.ts

@@ -0,0 +1,14 @@
+/**
+ * SCSS `@import`/`@use` importers applied for every Payload consumer.
+ *
+ * Resolves webpack-style `~@payloadcms/...` tilde specifiers (emitted by
+ * first-party Payload package styles, e.g. `@payloadcms/richtext-slate`) to the
+ * installed package via Node resolution. Because it goes through the package's
+ * `exports` map, it picks the workspace `src` scss in the monorepo and the
+ * published `dist` scss in a consumer install automatically — no per-app
+ * `findFileUrl` shim needed.
+ */
+export declare const payloadScssImporters: {
+    findFileUrl(url: string): null | URL;
+}[];
+//# sourceMappingURL=scss.d.ts.map

package/dist/vite/config/scss.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scss.d.ts","sourceRoot":"","sources":["../../../src/vite/config/scss.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB;qBAEZ,MAAM,GAAG,IAAI,GAAG,GAAG;GAWvC,CAAA"}

package/dist/vite/config/scss.js

@@ -0,0 +1,28 @@
+import { createRequire } from 'node:module';
+import { pathToFileURL } from 'node:url';
+const require = createRequire(import.meta.url);
+/**
+ * SCSS `@import`/`@use` importers applied for every Payload consumer.
+ *
+ * Resolves webpack-style `~@payloadcms/...` tilde specifiers (emitted by
+ * first-party Payload package styles, e.g. `@payloadcms/richtext-slate`) to the
+ * installed package via Node resolution. Because it goes through the package's
+ * `exports` map, it picks the workspace `src` scss in the monorepo and the
+ * published `dist` scss in a consumer install automatically — no per-app
+ * `findFileUrl` shim needed.
+ */ export const payloadScssImporters = [
+    {
+        findFileUrl (url) {
+            if (!url.startsWith('~@payloadcms/')) {
+                return null;
+            }
+            try {
+                return pathToFileURL(require.resolve(url.slice(1)));
+            } catch  {
+                return null;
+            }
+        }
+    }
+];
+
+//# sourceMappingURL=scss.js.map

package/dist/vite/config/scss.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/vite/config/scss.ts"],"sourcesContent":["import { createRequire } from 'node:module'\nimport { pathToFileURL } from 'node:url'\n\nconst require = createRequire(import.meta.url)\n\n/**\n * SCSS `@import`/`@use` importers applied for every Payload consumer.\n *\n * Resolves webpack-style `~@payloadcms/...` tilde specifiers (emitted by\n * first-party Payload package styles, e.g. `@payloadcms/richtext-slate`) to the\n * installed package via Node resolution. Because it goes through the package's\n * `exports` map, it picks the workspace `src` scss in the monorepo and the\n * published `dist` scss in a consumer install automatically — no per-app\n * `findFileUrl` shim needed.\n */\nexport const payloadScssImporters = [\n  {\n    findFileUrl(url: string): null | URL {\n      if (!url.startsWith('~@payloadcms/')) {\n        return null\n      }\n      try {\n        return pathToFileURL(require.resolve(url.slice(1)))\n      } catch {\n        return null\n      }\n    },\n  },\n]\n"],"names":["createRequire","pathToFileURL","require","url","payloadScssImporters","findFileUrl","startsWith","resolve","slice"],"mappings":"AAAA,SAASA,aAAa,QAAQ,cAAa;AAC3C,SAASC,aAAa,QAAQ,WAAU;AAExC,MAAMC,UAAUF,cAAc,YAAYG,GAAG;AAE7C;;;;;;;;;CASC,GACD,OAAO,MAAMC,uBAAuB;IAClC;QACEC,aAAYF,GAAW;YACrB,IAAI,CAACA,IAAIG,UAAU,CAAC,kBAAkB;gBACpC,OAAO;YACT;YACA,IAAI;gBACF,OAAOL,cAAcC,QAAQK,OAAO,CAACJ,IAAIK,KAAK,CAAC;YACjD,EAAE,OAAM;gBACN,OAAO;YACT;QACF;IACF;CACD,CAAA"}

package/dist/vite/importProtection.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Specifiers that must never appear in the client module graph. These are the
+ * server-only Payload entry points plus Node.js built-ins and a handful of
+ * Node-only npm packages that Payload pulls in transitively.
+ */
+export declare const serverOnlyClientSpecifiers: Array<RegExp | string>;
+/**
+ * Allowlist callback for the `tanstackStart` plugin's import-protection. These
+ * are the legitimate cross-environment imports in our monorepo that we want
+ * to permit even when they appear to cross a server/client boundary.
+ */
+export declare function onImportProtectionViolation(violation: unknown): boolean | void;
+export declare const defaultImportProtectionIgnoreImporters: RegExp[];
+//# sourceMappingURL=importProtection.d.ts.map

package/dist/vite/importProtection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"importProtection.d.ts","sourceRoot":"","sources":["../../src/vite/importProtection.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAoB7D,CAAA;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAoC9E;AAED,eAAO,MAAM,sCAAsC,EAAE,MAAM,EAAsC,CAAA"}

package/dist/vite/importProtection.js

@@ -0,0 +1,54 @@
+import { builtinModules } from 'node:module';
+/**
+ * Specifiers that must never appear in the client module graph. These are the
+ * server-only Payload entry points plus Node.js built-ins and a handful of
+ * Node-only npm packages that Payload pulls in transitively.
+ */ export const serverOnlyClientSpecifiers = [
+    /^node:/,
+    new RegExp(`^(${builtinModules.join('|')})(\\/|$)`),
+    '@payload-config',
+    /^@payloadcms\/next\/rsc/,
+    /^@payloadcms\/richtext-lexical\/rsc/,
+    /^@payloadcms\/richtext-slate\/rsc/,
+    '@payloadcms/ui/server',
+    /^@payloadcms\/tanstack-start\/(layouts|rsc|server|views\/server)/,
+    'sharp',
+    'busboy',
+    'croner',
+    'pino',
+    'pino-pretty',
+    'prompts',
+    'ws',
+    'undici',
+    'get-tsconfig',
+    /^file-type/,
+    /^react-dom\/server/
+];
+/**
+ * Allowlist callback for the `tanstackStart` plugin's import-protection. These
+ * are the legitimate cross-environment imports in our monorepo that we want
+ * to permit even when they appear to cross a server/client boundary.
+ */ export function onImportProtectionViolation(violation) {
+    const info = violation;
+    const allowedClientFileImporters = /\/richtext-lexical\/.*\/exports\/client\/|\/tanstack-start\/.*\/views\/AdminView|\/ui\//;
+    if (info.envType === 'server' && info.resolved?.includes('.client.') && allowedClientFileImporters.test(info.importer)) {
+        return false;
+    }
+    if (info.importer.includes('/richtext-lexical/') && info.importer.includes('/field/Diff/')) {
+        return false;
+    }
+    if (info.importer.includes('/packages/payload/') || info.importer.includes('/payload/dist/')) {
+        return false;
+    }
+    if (info.importer.includes('@payloadcms/ui') && (info.importer.includes('/exports/rsc/') || info.importer.includes('/rsc/index'))) {
+        return false;
+    }
+    if (info.envType === 'server' && info.importer.includes('vite-rsc/client-references')) {
+        return false;
+    }
+}
+export const defaultImportProtectionIgnoreImporters = [
+    /^src\/importMap\.js(?:\?.*)?$/
+];
+
+//# sourceMappingURL=importProtection.js.map

package/dist/vite/importProtection.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/vite/importProtection.ts"],"sourcesContent":["import { builtinModules } from 'node:module'\n\n/**\n * Specifiers that must never appear in the client module graph. These are the\n * server-only Payload entry points plus Node.js built-ins and a handful of\n * Node-only npm packages that Payload pulls in transitively.\n */\nexport const serverOnlyClientSpecifiers: Array<RegExp | string> = [\n  /^node:/,\n  new RegExp(`^(${builtinModules.join('|')})(\\\\/|$)`),\n  '@payload-config',\n  /^@payloadcms\\/next\\/rsc/,\n  /^@payloadcms\\/richtext-lexical\\/rsc/,\n  /^@payloadcms\\/richtext-slate\\/rsc/,\n  '@payloadcms/ui/server',\n  /^@payloadcms\\/tanstack-start\\/(layouts|rsc|server|views\\/server)/,\n  'sharp',\n  'busboy',\n  'croner',\n  'pino',\n  'pino-pretty',\n  'prompts',\n  'ws',\n  'undici',\n  'get-tsconfig',\n  /^file-type/,\n  /^react-dom\\/server/,\n]\n\n/**\n * Allowlist callback for the `tanstackStart` plugin's import-protection. These\n * are the legitimate cross-environment imports in our monorepo that we want\n * to permit even when they appear to cross a server/client boundary.\n */\nexport function onImportProtectionViolation(violation: unknown): boolean | void {\n  const info = violation as {\n    envType: 'client' | 'server'\n    importer: string\n    resolved?: string\n  }\n\n  const allowedClientFileImporters =\n    /\\/richtext-lexical\\/.*\\/exports\\/client\\/|\\/tanstack-start\\/.*\\/views\\/AdminView|\\/ui\\//\n\n  if (\n    info.envType === 'server' &&\n    info.resolved?.includes('.client.') &&\n    allowedClientFileImporters.test(info.importer)\n  ) {\n    return false\n  }\n\n  if (info.importer.includes('/richtext-lexical/') && info.importer.includes('/field/Diff/')) {\n    return false\n  }\n\n  if (info.importer.includes('/packages/payload/') || info.importer.includes('/payload/dist/')) {\n    return false\n  }\n\n  if (\n    info.importer.includes('@payloadcms/ui') &&\n    (info.importer.includes('/exports/rsc/') || info.importer.includes('/rsc/index'))\n  ) {\n    return false\n  }\n\n  if (info.envType === 'server' && info.importer.includes('vite-rsc/client-references')) {\n    return false\n  }\n}\n\nexport const defaultImportProtectionIgnoreImporters: RegExp[] = [/^src\\/importMap\\.js(?:\\?.*)?$/]\n"],"names":["builtinModules","serverOnlyClientSpecifiers","RegExp","join","onImportProtectionViolation","violation","info","allowedClientFileImporters","envType","resolved","includes","test","importer","defaultImportProtectionIgnoreImporters"],"mappings":"AAAA,SAASA,cAAc,QAAQ,cAAa;AAE5C;;;;CAIC,GACD,OAAO,MAAMC,6BAAqD;IAChE;IACA,IAAIC,OAAO,CAAC,EAAE,EAAEF,eAAeG,IAAI,CAAC,KAAK,QAAQ,CAAC;IAClD;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAA;AAED;;;;CAIC,GACD,OAAO,SAASC,4BAA4BC,SAAkB;IAC5D,MAAMC,OAAOD;IAMb,MAAME,6BACJ;IAEF,IACED,KAAKE,OAAO,KAAK,YACjBF,KAAKG,QAAQ,EAAEC,SAAS,eACxBH,2BAA2BI,IAAI,CAACL,KAAKM,QAAQ,GAC7C;QACA,OAAO;IACT;IAEA,IAAIN,KAAKM,QAAQ,CAACF,QAAQ,CAAC,yBAAyBJ,KAAKM,QAAQ,CAACF,QAAQ,CAAC,iBAAiB;QAC1F,OAAO;IACT;IAEA,IAAIJ,KAAKM,QAAQ,CAACF,QAAQ,CAAC,yBAAyBJ,KAAKM,QAAQ,CAACF,QAAQ,CAAC,mBAAmB;QAC5F,OAAO;IACT;IAEA,IACEJ,KAAKM,QAAQ,CAACF,QAAQ,CAAC,qBACtBJ,CAAAA,KAAKM,QAAQ,CAACF,QAAQ,CAAC,oBAAoBJ,KAAKM,QAAQ,CAACF,QAAQ,CAAC,aAAY,GAC/E;QACA,OAAO;IACT;IAEA,IAAIJ,KAAKE,OAAO,KAAK,YAAYF,KAAKM,QAAQ,CAACF,QAAQ,CAAC,+BAA+B;QACrF,OAAO;IACT;AACF;AAEA,OAAO,MAAMG,yCAAmD;IAAC;CAAgC,CAAA"}

package/dist/vite/index.d.ts

@@ -0,0 +1,99 @@
+import type { ConfigEnv, UserConfig, UserConfigFnObject } from 'vite';
+import { tanstackStart } from '@tanstack/react-start/plugin/vite';
+import viteReact from '@vitejs/plugin-react';
+import rsc from '@vitejs/plugin-rsc';
+export type WithPayloadOptions = {
+    /** Extra import-protection `ignoreImporters` patterns for the TanStack Start plugin. */
+    additionalIgnoreImporters?: RegExp[];
+    /** Route id of Payload's admin layout, eager-loaded instead of code-split. Defaults to `'/_payload'`. */
+    adminRouteId?: string;
+    /** Extra globs exempted from the `.client.*` SSR denial (beyond the default node_modules exemption). */
+    clientDenialExcludeFiles?: string[];
+    /** Path to the user's `payload.config.ts` (required) */
+    payloadConfigPath: string;
+    /** TanStack router routes directory relative to `srcDirectory`. Defaults to `'app'` */
+    routesDirectory?: string;
+    /** Silence Vite warnings about third-party dependency sourcemaps. Defaults to `true`. */
+    silenceDependencyWarnings?: boolean;
+    /** TanStack source directory. Defaults to `'src'` */
+    srcDirectory?: string;
+    /** Extra Vite config deep-merged over the Payload defaults. Ignored in `build` mode. */
+    vite?: UserConfig;
+};
+/** The options Payload's admin requires for each third-party plugin. */
+export type PayloadPluginOptions = {
+    react: NonNullable<Parameters<typeof viteReact>[0]>;
+    rsc: NonNullable<Parameters<typeof rsc>[0]>;
+    tanstackStart: NonNullable<Parameters<typeof tanstackStart>[0]>;
+};
+export type WithPayloadBuilderContext = {
+    env: ConfigEnv;
+    /** Options to pass to the `viteReact`/`rsc`/`tanstackStart` factories you import. */
+    pluginOptions: PayloadPluginOptions;
+};
+/**
+ * Returns the extra Vite config — the plugins you instantiate plus any overrides.
+ * `withPayload` deep-merges it onto Payload's base config, so you don't spread or
+ * merge the base yourself.
+ */
+export type WithPayloadBuilder = (context: WithPayloadBuilderContext) => UserConfig;
+/**
+ * Vite config helper for Payload + TanStack Start; the counterpart to Next.js'
+ * `withPayload`.
+ *
+ * Zero-config — Payload instantiates the RSC, React, and TanStack Start plugins:
+ *
+ * ```ts
+ * export default withPayload(undefined, { payloadConfigPath: './src/payload.config.ts' })
+ * ```
+ *
+ * Guest mode — pass a `build` callback to instantiate them yourself (one copy of
+ * each; `@vitejs/plugin-rsc` is a hard singleton). Return only your additions;
+ * `withPayload` deep-merges them onto Payload's base config:
+ *
+ * ```ts
+ * export default withPayload(
+ *   ({ pluginOptions }) => ({
+ *     plugins: [
+ *       rsc(pluginOptions.rsc),
+ *       tanstackStart(pluginOptions.tanstackStart),
+ *       viteReact(pluginOptions.react),
+ *     ],
+ *     // ...other config options
+ *   }),
+ *   { payloadConfigPath: './src/payload.config.ts' },
+ * )
+ * ```
+ */
+export declare function withPayload(build: undefined | WithPayloadBuilder, options: WithPayloadOptions): UserConfigFnObject;
+/** `@vitejs/plugin-rsc` options for Payload: `serverHandler: false` (TanStack owns the handler). */
+export declare function payloadRscOptions(): NonNullable<Parameters<typeof rsc>[0]>;
+/** `@vitejs/plugin-react` options for Payload: transform every `.[jt]sx?` file. */
+export declare function payloadReactOptions(): NonNullable<Parameters<typeof viteReact>[0]>;
+export type PayloadTanstackStartOptionsArgs = {
+    /** Additional import-protection `ignoreImporters` patterns. */
+    additionalIgnoreImporters?: RegExp[];
+    /**
+     * Route id of Payload's admin layout route, eager-loaded (not code-split) so it
+     * hydrates on first paint. It and its children skip splitting; host routes keep
+     * TanStack's default. Defaults to `'/_payload'` (the `_payload.tsx` convention).
+     */
+    adminRouteId?: string;
+    /**
+     * Extra globs exempted from TanStack's `.client.*` SSR denial, on top of the
+     * default node_modules exemption. Needed only when Payload's own `.client.*`
+     * files resolve outside node_modules (e.g. the monorepo's `packages` sources).
+     */
+    clientDenialExcludeFiles?: string[];
+    /** TanStack router routes directory relative to `srcDirectory`. Defaults to `'app'`. */
+    routesDirectory?: string;
+    /** TanStack source directory. Defaults to `'src'`. */
+    srcDirectory?: string;
+};
+/**
+ * The `tanstackStart` options Payload's admin requires (import-protection and
+ * code-splitting). TanStack Start is one-per-app, so a host that already runs it
+ * should merge these into its single `tanstackStart` call.
+ */
+export declare function payloadTanstackStartOptions(args?: PayloadTanstackStartOptionsArgs): NonNullable<Parameters<typeof tanstackStart>[0]>;
+//# sourceMappingURL=index.d.ts.map

package/dist/vite/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/vite/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAwB,UAAU,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAA;AAI3F,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAA;AACjE,OAAO,SAAS,MAAM,sBAAsB,CAAA;AAC5C,OAAO,GAAG,MAAM,oBAAoB,CAAA;AA0DpC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,wFAAwF;IACxF,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAA;IACpC,yGAAyG;IACzG,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wGAAwG;IACxG,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAA;IACnC,wDAAwD;IACxD,iBAAiB,EAAE,MAAM,CAAA;IACzB,uFAAuF;IACvF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yFAAyF;IACzF,yBAAyB,CAAC,EAAE,OAAO,CAAA;IACnC,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wFAAwF;IACxF,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB,CAAA;AAED,wEAAwE;AACxE,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnD,GAAG,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3C,aAAa,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;CAChE,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,GAAG,EAAE,SAAS,CAAA;IACd,qFAAqF;IACrF,aAAa,EAAE,oBAAoB,CAAA;CACpC,CAAA;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,yBAAyB,KAAK,UAAU,CAAA;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,SAAS,GAAG,kBAAkB,EACrC,OAAO,EAAE,kBAAkB,GAC1B,kBAAkB,CAqGpB;AAED,oGAAoG;AACpG,wBAAgB,iBAAiB,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAE1E;AAED,mFAAmF;AACnF,wBAAgB,mBAAmB,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAElF;AAED,MAAM,MAAM,+BAA+B,GAAG;IAC5C,+DAA+D;IAC/D,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAA;IACpC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAA;IACnC,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,GAAE,+BAAoC,GACzC,WAAW,CAAC,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAwClD"}