@payloadcms/tanstack-start 4.0.0-internal.435b2d6 → 4.0.0-internal.44ac9c8

package/dist/withPayload/config/external.d.ts

@@ -0,0 +1,44 @@
+/**
+ * SSR/RSC externalization config used by `withPayload`. Kept separate from the
+ * client optimizer config (`./optimizeDeps.ts`) so each concern stays small.
+ */
+/**
+ * Packages externalized during dev serve (`ssr.external`). Node's loader resolves
+ * their CJS/UMD directly; letting Vite's dev SSR transform touch them can break
+ * fragile UMD wrappers (e.g. `pluralize`, whose `this`-based global assignment
+ * throws when transformed rather than required).
+ *
+ * Safe here whoever declared the entry: Node resolves from the importing package,
+ * so pnpm's isolated layout never applies. The build is stricter — see
+ * {@link buildBundledPackages}.
+ */
+export declare const ssrExternalPackages: string[];
+/**
+ * Entries of {@link ssrExternalPackages} that must bundle in the production build.
+ *
+ * Externalizing only works for specifiers resolvable from the project root. These
+ * are leaf deps of Payload packages, so under pnpm they live in `.pnpm/…` and a bare
+ * specifier in a root-resolved chunk is invisible — `ERR_MODULE_NOT_FOUND` at
+ * runtime, or a build-time resolve failure under Nitro's re-bundle pass.
+ *
+ * `pluralize` also needs forcing back via `noExternal` (see `withPayload`); the
+ * storage leaves don't, since their adapters are already `noExternal`.
+ */
+export declare const buildBundledPackages: string[];
+/**
+ * External packages for the production `vite build` only (not dev serve).
+ *
+ * Externalizes the `@payloadcms/*` package boundaries — plus `payload` — so each
+ * resolves its own transitive Node deps (`pino`, `drizzle-orm`, `libsql`, …) from
+ * its own `node_modules` at runtime. Externalizing only the leaf deps breaks under
+ * pnpm: a leaf imported by bundled code becomes an unresolvable bare specifier from
+ * `dist/`, since pnpm does not hoist it; see {@link buildBundledPackages}.
+ *
+ * Kept out of dev's `ssr.external` on purpose: the monorepo resolves these to
+ * TypeScript source (`.ts` imported via `.js` specifiers), which only Vite's
+ * transform can resolve — an externalized copy would hit Node's raw resolver and
+ * fail on the `.js`→`.ts` mismatch.
+ */
+export declare const buildExternalPackages: string[];
+export declare const payloadNoExternalPatterns: Array<RegExp | string>;
+//# sourceMappingURL=external.d.ts.map

package/dist/withPayload/config/external.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external.d.ts","sourceRoot":"","sources":["../../../src/withPayload/config/external.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,EA+BvC,CAAA;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,EAOxC,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,EAUzC,CAAA;AAED,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAO5D,CAAA"}

package/dist/withPayload/config/external.js

@@ -0,0 +1,96 @@
+/**
+ * SSR/RSC externalization config used by `withPayload`. Kept separate from the
+ * client optimizer config (`./optimizeDeps.ts`) so each concern stays small.
+ */ /**
+ * Packages externalized during dev serve (`ssr.external`). Node's loader resolves
+ * their CJS/UMD directly; letting Vite's dev SSR transform touch them can break
+ * fragile UMD wrappers (e.g. `pluralize`, whose `this`-based global assignment
+ * throws when transformed rather than required).
+ *
+ * Safe here whoever declared the entry: Node resolves from the importing package,
+ * so pnpm's isolated layout never applies. The build is stricter — see
+ * {@link buildBundledPackages}.
+ */ export const ssrExternalPackages = [
+    'zod',
+    'fast-uri',
+    'drizzle-kit',
+    'drizzle-kit/api',
+    'drizzle-orm',
+    'sharp',
+    'require-in-the-middle',
+    'json-schema-to-typescript',
+    'pino',
+    'pino-pretty',
+    'graphql',
+    'nodemailer',
+    'aws4',
+    'pluralize',
+    'console-table-printer',
+    '@azure/storage-blob',
+    '@aws-sdk/client-s3',
+    '@aws-sdk/s3-request-presigner',
+    '@google-cloud/storage',
+    // Database drivers + their lazily-required companions, one group per adapter.
+    // Postgres (`@payloadcms/db-postgres`, `@payloadcms/db-vercel-postgres`)
+    'pg',
+    'pg-native',
+    'pg-cloudflare',
+    // SQLite (`@payloadcms/db-sqlite`)
+    'better-sqlite3',
+    'libsql',
+    // Mongo (`@payloadcms/db-mongodb`)
+    'mongodb',
+    'mongoose'
+];
+/**
+ * Entries of {@link ssrExternalPackages} that must bundle in the production build.
+ *
+ * Externalizing only works for specifiers resolvable from the project root. These
+ * are leaf deps of Payload packages, so under pnpm they live in `.pnpm/…` and a bare
+ * specifier in a root-resolved chunk is invisible — `ERR_MODULE_NOT_FOUND` at
+ * runtime, or a build-time resolve failure under Nitro's re-bundle pass.
+ *
+ * `pluralize` also needs forcing back via `noExternal` (see `withPayload`); the
+ * storage leaves don't, since their adapters are already `noExternal`.
+ */ export const buildBundledPackages = [
+    'pluralize',
+    // Leaf deps of the `@payloadcms/storage-*` adapters.
+    '@aws-sdk/client-s3',
+    '@aws-sdk/s3-request-presigner',
+    '@azure/storage-blob',
+    '@google-cloud/storage'
+];
+/**
+ * External packages for the production `vite build` only (not dev serve).
+ *
+ * Externalizes the `@payloadcms/*` package boundaries — plus `payload` — so each
+ * resolves its own transitive Node deps (`pino`, `drizzle-orm`, `libsql`, …) from
+ * its own `node_modules` at runtime. Externalizing only the leaf deps breaks under
+ * pnpm: a leaf imported by bundled code becomes an unresolvable bare specifier from
+ * `dist/`, since pnpm does not hoist it; see {@link buildBundledPackages}.
+ *
+ * Kept out of dev's `ssr.external` on purpose: the monorepo resolves these to
+ * TypeScript source (`.ts` imported via `.js` specifiers), which only Vite's
+ * transform can resolve — an externalized copy would hit Node's raw resolver and
+ * fail on the `.js`→`.ts` mismatch.
+ */ export const buildExternalPackages = [
+    'payload',
+    'payload/node',
+    '@payloadcms/drizzle',
+    '@payloadcms/db-mongodb',
+    '@payloadcms/db-postgres',
+    '@payloadcms/db-vercel-postgres',
+    '@payloadcms/db-sqlite',
+    '@payloadcms/db-d1-sqlite',
+    ...ssrExternalPackages.filter((pkg)=>!buildBundledPackages.includes(pkg))
+];
+export const payloadNoExternalPatterns = [
+    '@payloadcms/ui',
+    '@payloadcms/translations',
+    '@payloadcms/tanstack-start',
+    /^@payloadcms\/richtext-lexical/,
+    /^@payloadcms\/plugin-/,
+    /^@payloadcms\/storage-/
+];
+
+//# sourceMappingURL=external.js.map

package/dist/withPayload/config/external.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/withPayload/config/external.ts"],"sourcesContent":["/**\n * SSR/RSC externalization config used by `withPayload`. Kept separate from the\n * client optimizer config (`./optimizeDeps.ts`) so each concern stays small.\n */\n\n/**\n * Packages externalized during dev serve (`ssr.external`). Node's loader resolves\n * their CJS/UMD directly; letting Vite's dev SSR transform touch them can break\n * fragile UMD wrappers (e.g. `pluralize`, whose `this`-based global assignment\n * throws when transformed rather than required).\n *\n * Safe here whoever declared the entry: Node resolves from the importing package,\n * so pnpm's isolated layout never applies. The build is stricter — see\n * {@link buildBundledPackages}.\n */\nexport const ssrExternalPackages: string[] = [\n  'zod',\n  'fast-uri',\n  'drizzle-kit',\n  'drizzle-kit/api',\n  'drizzle-orm',\n  'sharp',\n  'require-in-the-middle',\n  'json-schema-to-typescript',\n  'pino',\n  'pino-pretty',\n  'graphql',\n  'nodemailer',\n  'aws4',\n  'pluralize',\n  'console-table-printer',\n  '@azure/storage-blob',\n  '@aws-sdk/client-s3',\n  '@aws-sdk/s3-request-presigner',\n  '@google-cloud/storage',\n  // Database drivers + their lazily-required companions, one group per adapter.\n  // Postgres (`@payloadcms/db-postgres`, `@payloadcms/db-vercel-postgres`)\n  'pg',\n  'pg-native',\n  'pg-cloudflare',\n  // SQLite (`@payloadcms/db-sqlite`)\n  'better-sqlite3',\n  'libsql',\n  // Mongo (`@payloadcms/db-mongodb`)\n  'mongodb',\n  'mongoose',\n]\n\n/**\n * Entries of {@link ssrExternalPackages} that must bundle in the production build.\n *\n * Externalizing only works for specifiers resolvable from the project root. These\n * are leaf deps of Payload packages, so under pnpm they live in `.pnpm/…` and a bare\n * specifier in a root-resolved chunk is invisible — `ERR_MODULE_NOT_FOUND` at\n * runtime, or a build-time resolve failure under Nitro's re-bundle pass.\n *\n * `pluralize` also needs forcing back via `noExternal` (see `withPayload`); the\n * storage leaves don't, since their adapters are already `noExternal`.\n */\nexport const buildBundledPackages: string[] = [\n  'pluralize',\n  // Leaf deps of the `@payloadcms/storage-*` adapters.\n  '@aws-sdk/client-s3',\n  '@aws-sdk/s3-request-presigner',\n  '@azure/storage-blob',\n  '@google-cloud/storage',\n]\n\n/**\n * External packages for the production `vite build` only (not dev serve).\n *\n * Externalizes the `@payloadcms/*` package boundaries — plus `payload` — so each\n * resolves its own transitive Node deps (`pino`, `drizzle-orm`, `libsql`, …) from\n * its own `node_modules` at runtime. Externalizing only the leaf deps breaks under\n * pnpm: a leaf imported by bundled code becomes an unresolvable bare specifier from\n * `dist/`, since pnpm does not hoist it; see {@link buildBundledPackages}.\n *\n * Kept out of dev's `ssr.external` on purpose: the monorepo resolves these to\n * TypeScript source (`.ts` imported via `.js` specifiers), which only Vite's\n * transform can resolve — an externalized copy would hit Node's raw resolver and\n * fail on the `.js`→`.ts` mismatch.\n */\nexport const buildExternalPackages: string[] = [\n  'payload',\n  'payload/node',\n  '@payloadcms/drizzle',\n  '@payloadcms/db-mongodb',\n  '@payloadcms/db-postgres',\n  '@payloadcms/db-vercel-postgres',\n  '@payloadcms/db-sqlite',\n  '@payloadcms/db-d1-sqlite',\n  ...ssrExternalPackages.filter((pkg) => !buildBundledPackages.includes(pkg)),\n]\n\nexport const payloadNoExternalPatterns: Array<RegExp | string> = [\n  '@payloadcms/ui',\n  '@payloadcms/translations',\n  '@payloadcms/tanstack-start',\n  /^@payloadcms\\/richtext-lexical/,\n  /^@payloadcms\\/plugin-/,\n  /^@payloadcms\\/storage-/,\n]\n"],"names":["ssrExternalPackages","buildBundledPackages","buildExternalPackages","filter","pkg","includes","payloadNoExternalPatterns"],"mappings":"AAAA;;;CAGC,GAED;;;;;;;;;CASC,GACD,OAAO,MAAMA,sBAAgC;IAC3C;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,8EAA8E;IAC9E,yEAAyE;IACzE;IACA;IACA;IACA,mCAAmC;IACnC;IACA;IACA,mCAAmC;IACnC;IACA;CACD,CAAA;AAED;;;;;;;;;;CAUC,GACD,OAAO,MAAMC,uBAAiC;IAC5C;IACA,qDAAqD;IACrD;IACA;IACA;IACA;CACD,CAAA;AAED;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAMC,wBAAkC;IAC7C;IACA;IACA;IACA;IACA;IACA;IACA;IACA;OACGF,oBAAoBG,MAAM,CAAC,CAACC,MAAQ,CAACH,qBAAqBI,QAAQ,CAACD;CACvE,CAAA;AAED,OAAO,MAAME,4BAAoD;IAC/D;IACA;IACA;IACA;IACA;IACA;CACD,CAAA"}

package/dist/withPayload/config/optimizeDeps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimizeDeps.d.ts","sourceRoot":"","sources":["../../../src/withPayload/config/optimizeDeps.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,EAAE,MAAM,EAyC/C,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,EAAE,MAAM,EA+E/C,CAAA"}

package/dist/{vite → withPayload}/config/optimizeDeps.js

@@ -25,9 +25,28 @@
     // server-only APIs (e.g. `BlobSASPermissions`), which crashes the dev
     // server with a `MISSING_EXPORT` error before any test runs.
     '@azure/storage-blob',
+    // Preserve RSC client boundaries on storage admin upload handlers.
+    '@payloadcms/storage-azure',
+    '@payloadcms/storage-vercel-blob',
     '@aws-sdk/client-s3',
     '@aws-sdk/s3-request-presigner',
-    '@google-cloud/storage'
+    '@google-cloud/storage',
+    // Database adapters and their drivers. The client scan reaches them through the
+    // Payload config (it follows server functions' `import('@payload-config')`
+    // without TanStack's server-fn stripping), so Vite would pre-bundle the whole
+    // driver for a browser that never loads it. Mongoose 9 has no browser build, so
+    // that bundles `mongodb`, whose optional `@aws-sdk/credential-providers` peer —
+    // when linked, as in the monorepo via `@payloadcms/payload-cloud` — fails the
+    // same `MISSING_EXPORT` way. Published installs reach the adapter packages;
+    // the monorepo, which resolves them to source, reaches the drivers.
+    '@payloadcms/db-d1-sqlite',
+    '@payloadcms/db-mongodb',
+    '@payloadcms/db-postgres',
+    '@payloadcms/db-sqlite',
+    '@payloadcms/db-vercel-postgres',
+    '@payloadcms/drizzle',
+    'mongodb',
+    'mongoose'
 ];
 /**
  * Transitive dependencies of `@payloadcms/ui` and `payload` that need to be
@@ -91,16 +110,16 @@
     '@payloadcms/ui > react-select > prop-types > react-is',
     '@payloadcms/ui > date-fns/locale/en-US',
     // Further late discoveries observed re-optimizing mid-run in CI cold starts
-    // (see CI logs: "✨ new dependencies optimized: @dnd-kit/modifiers / ajv /
+    // (see CI logs: "✨ new dependencies optimized: @dnd-kit/modifiers / zod /
     // dequal/lite"). The modular dashboard pulls in `@dnd-kit/modifiers` on first
     // render; form-state diffing reaches `dequal/lite` (a distinct entry point
     // from the already-listed `dequal`); client-side field validation reaches
-    // `ajv` *through `payload`* — it is `ssrExternal` server-side but still
+    // `zod` *through `payload`* — it is `ssrExternal` server-side but still
     // bundled into the client, and must be pathed via `payload` so the optimizer
     // pre-bundles the exact copy the runtime loads.
     '@payloadcms/ui > @dnd-kit/modifiers',
     '@payloadcms/ui > dequal/lite',
-    'payload > ajv',
+    'payload > zod',
     // The storage client-upload suites (esp. vercel-blob) crawl part of the
     // `payload` server runtime into the client bundle and discover these late,
     // triggering several "optimized dependencies changed. reloading" waves that
@@ -113,11 +132,12 @@
     'payload > path-to-regexp',
     'payload > console-table-printer',
     'payload > ci-info',
-    'payload > image-size',
-    'payload > image-size/fromFile',
+    'payload > image-dimensions',
     'payload > ipaddr.js',
     'payload > range-parser',
-    'payload > sanitize-filename'
+    'payload > sanitize-filename',
+    // `@azure/storage-blob` is excluded, so pre-bundle its CommonJS browser dependency explicitly.
+    '@azure/storage-blob > events'
 ];
 
 //# sourceMappingURL=optimizeDeps.js.map

package/dist/withPayload/config/optimizeDeps.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/withPayload/config/optimizeDeps.ts"],"sourcesContent":["/**\n * Client dep-optimizer config used by `withPayload`. Kept separate from the\n * SSR/RSC externalization config (`./external.ts`) so each concern stays small.\n */\n\n/**\n * Packages we know contain Node-only code or top-level side effects requiring\n * Node APIs. Excluding them from the client optimizer prevents Vite from\n * walking into their main entries and trying to bundle server-only imports\n * for the browser.\n */\nexport const optimizeDepsExcludeDefaults: string[] = [\n  'sharp',\n  '@payloadcms/ui',\n  '@payloadcms/tanstack-start',\n  'payload',\n  'pino',\n  'pino-pretty',\n  'busboy',\n  'get-tsconfig',\n  'ws',\n  'croner',\n  'prompts',\n  'file-type',\n  // Server-only SDKs used by `@payloadcms/storage-*` adapters. Vite\n  // sometimes walks these from the main package entry while scanning\n  // workspace deps, and the browser sub-bundles do not expose the\n  // server-only APIs (e.g. `BlobSASPermissions`), which crashes the dev\n  // server with a `MISSING_EXPORT` error before any test runs.\n  '@azure/storage-blob',\n  // Preserve RSC client boundaries on storage admin upload handlers.\n  '@payloadcms/storage-azure',\n  '@payloadcms/storage-vercel-blob',\n  '@aws-sdk/client-s3',\n  '@aws-sdk/s3-request-presigner',\n  '@google-cloud/storage',\n  // Database adapters and their drivers. The client scan reaches them through the\n  // Payload config (it follows server functions' `import('@payload-config')`\n  // without TanStack's server-fn stripping), so Vite would pre-bundle the whole\n  // driver for a browser that never loads it. Mongoose 9 has no browser build, so\n  // that bundles `mongodb`, whose optional `@aws-sdk/credential-providers` peer —\n  // when linked, as in the monorepo via `@payloadcms/payload-cloud` — fails the\n  // same `MISSING_EXPORT` way. Published installs reach the adapter packages;\n  // the monorepo, which resolves them to source, reaches the drivers.\n  '@payloadcms/db-d1-sqlite',\n  '@payloadcms/db-mongodb',\n  '@payloadcms/db-postgres',\n  '@payloadcms/db-sqlite',\n  '@payloadcms/db-vercel-postgres',\n  '@payloadcms/drizzle',\n  'mongodb',\n  'mongoose',\n]\n\n/**\n * Transitive dependencies of `@payloadcms/ui` and `payload` that need to be\n * pre-bundled for the client. Vite's auto-discovery doesn't reliably pick\n * these up because their parent packages are in `optimizeDeps.exclude`, so we\n * list them explicitly using the `parent > child` syntax.\n *\n * Each entry below fixes a specific late-discovery re-optimization: without it,\n * Vite discovers the dep *after* its initial crawl, forcing a full dep\n * re-optimization mid-session that 404s in-flight `.vite/deps/*` chunks and\n * remounts the admin (dropping client state). This is why the list can't simply\n * be deleted — it is the \"complete first pass\" for the admin's dep graph.\n */\nexport const optimizeDepsIncludeDefaults: string[] = [\n  '@payloadcms/ui > sonner',\n  '@payloadcms/ui > @faceless-ui/modal',\n  '@payloadcms/ui > @faceless-ui/window-info',\n  '@payloadcms/ui > @faceless-ui/scroll-info',\n  '@payloadcms/ui > @dnd-kit/core',\n  '@payloadcms/ui > @dnd-kit/sortable',\n  '@payloadcms/ui > @dnd-kit/utilities',\n  '@payloadcms/ui > react-datepicker',\n  '@payloadcms/ui > react-select',\n  '@payloadcms/ui > react-select/creatable',\n  '@payloadcms/ui > react-image-crop',\n  '@payloadcms/ui > @monaco-editor/react',\n  '@payloadcms/ui > date-fns',\n  '@payloadcms/ui > date-fns/transpose',\n  '@payloadcms/ui > @date-fns/tz/date/mini',\n  '@payloadcms/ui > uuid',\n  '@payloadcms/ui > use-context-selector',\n  '@payloadcms/ui > bson-objectid',\n  '@payloadcms/ui > dequal',\n  '@payloadcms/ui > object-to-formdata',\n  '@payloadcms/ui > md5',\n  'payload > deepmerge',\n  'payload > pluralize',\n  // `scheduler` is a transitive dep of `react-dom`, not a direct dependency of\n  // the app, so a bare `'scheduler'` specifier fails to resolve from an isolated\n  // install (`test/node_modules` built with `pnpm i --ignore-workspace`), where\n  // it isn't hoisted to the top level. Path it through `react-dom` so the\n  // optimizer resolves the exact copy the runtime loads.\n  'react-dom > scheduler',\n  // `@payloadcms/ui` (in `optimizeDeps.exclude`) ships compiled output that the\n  // React Compiler rewrote to `import { c } from 'react/compiler-runtime'`.\n  // Because its parent is excluded, the optimizer never crawls in to discover\n  // this entry, so Vite serves `react/compiler-runtime` raw. That file is\n  // CommonJS (`module.exports = require(...)`), so the named `c` export can't be\n  // statically extracted and every client component throws \"does not provide an\n  // export named 'c'\". Pre-bundling it lets esbuild synthesize the named export.\n  'react/compiler-runtime',\n  // Transitive deps that Vite otherwise discovers *after* the initial crawl\n  // (react-select pulls in @floating-ui at runtime; react-is is reached via\n  // react-transition-group/prop-types; the default date-fns locale is loaded\n  // through a dynamic `date-fns/locale/${key}` import). A late discovery forces\n  // a full dep re-optimization mid-session, which 404s every in-flight\n  // `.vite/deps/*` chunk (\"Pre-transform error: file does not exist in the\n  // optimize deps directory\") and breaks the admin UI in CI cold starts.\n  // Pre-bundling them keeps the first optimization pass complete.\n  '@payloadcms/ui > react-select > @floating-ui/dom',\n  '@payloadcms/ui > react-select > @floating-ui/dom > @floating-ui/core',\n  '@payloadcms/ui > react-select > prop-types > react-is',\n  '@payloadcms/ui > date-fns/locale/en-US',\n  // Further late discoveries observed re-optimizing mid-run in CI cold starts\n  // (see CI logs: \"✨ new dependencies optimized: @dnd-kit/modifiers / zod /\n  // dequal/lite\"). The modular dashboard pulls in `@dnd-kit/modifiers` on first\n  // render; form-state diffing reaches `dequal/lite` (a distinct entry point\n  // from the already-listed `dequal`); client-side field validation reaches\n  // `zod` *through `payload`* — it is `ssrExternal` server-side but still\n  // bundled into the client, and must be pathed via `payload` so the optimizer\n  // pre-bundles the exact copy the runtime loads.\n  '@payloadcms/ui > @dnd-kit/modifiers',\n  '@payloadcms/ui > dequal/lite',\n  'payload > zod',\n  // The storage client-upload suites (esp. vercel-blob) crawl part of the\n  // `payload` server runtime into the client bundle and discover these late,\n  // triggering several \"optimized dependencies changed. reloading\" waves that\n  // reload the page mid-test (the bulk-upload drawer's Create New button /\n  // dropzone vanish and the direct-to-bucket PUT never fires). Pre-bundle the\n  // whole observed set so the first pass is complete.\n  'payload > undici',\n  'payload > jose',\n  'payload > dataloader',\n  'payload > path-to-regexp',\n  'payload > console-table-printer',\n  'payload > ci-info',\n  'payload > image-dimensions',\n  'payload > ipaddr.js',\n  'payload > range-parser',\n  'payload > sanitize-filename',\n  // `@azure/storage-blob` is excluded, so pre-bundle its CommonJS browser dependency explicitly.\n  '@azure/storage-blob > events',\n]\n"],"names":["optimizeDepsExcludeDefaults","optimizeDepsIncludeDefaults"],"mappings":"AAAA;;;CAGC,GAED;;;;;CAKC,GACD,OAAO,MAAMA,8BAAwC;IACnD;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,kEAAkE;IAClE,mEAAmE;IACnE,gEAAgE;IAChE,sEAAsE;IACtE,6DAA6D;IAC7D;IACA,mEAAmE;IACnE;IACA;IACA;IACA;IACA;IACA,gFAAgF;IAChF,2EAA2E;IAC3E,8EAA8E;IAC9E,gFAAgF;IAChF,gFAAgF;IAChF,8EAA8E;IAC9E,4EAA4E;IAC5E,oEAAoE;IACpE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAA;AAED;;;;;;;;;;;CAWC,GACD,OAAO,MAAMC,8BAAwC;IACnD;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,6EAA6E;IAC7E,+EAA+E;IAC/E,8EAA8E;IAC9E,wEAAwE;IACxE,uDAAuD;IACvD;IACA,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,+EAA+E;IAC/E,8EAA8E;IAC9E,+EAA+E;IAC/E;IACA,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9E,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,gEAAgE;IAChE;IACA;IACA;IACA;IACA,4EAA4E;IAC5E,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,6EAA6E;IAC7E,gDAAgD;IAChD;IACA;IACA;IACA,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,oDAAoD;IACpD;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,+FAA+F;IAC/F;CACD,CAAA"}

package/dist/withPayload/config/scss.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scss.d.ts","sourceRoot":"","sources":["../../../src/withPayload/config/scss.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB;qBAEZ,MAAM,GAAG,IAAI,GAAG,GAAG;GAWvC,CAAA"}

package/dist/withPayload/config/scss.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/withPayload/config/scss.ts"],"sourcesContent":["import { createRequire } from 'node:module'\nimport { pathToFileURL } from 'node:url'\n\nconst require = createRequire(import.meta.url)\n\n/**\n * SCSS `@import`/`@use` importers applied for every Payload consumer.\n *\n * Resolves webpack-style `~@payloadcms/...` tilde specifiers (emitted by\n * first-party Payload package styles, e.g. `@payloadcms/richtext-slate`) to the\n * installed package via Node resolution. Because it goes through the package's\n * `exports` map, it picks the workspace `src` scss in the monorepo and the\n * published `dist` scss in a consumer install automatically — no per-app\n * `findFileUrl` shim needed.\n */\nexport const payloadScssImporters = [\n  {\n    findFileUrl(url: string): null | URL {\n      if (!url.startsWith('~@payloadcms/')) {\n        return null\n      }\n      try {\n        return pathToFileURL(require.resolve(url.slice(1)))\n      } catch {\n        return null\n      }\n    },\n  },\n]\n"],"names":["createRequire","pathToFileURL","require","url","payloadScssImporters","findFileUrl","startsWith","resolve","slice"],"mappings":"AAAA,SAASA,aAAa,QAAQ,cAAa;AAC3C,SAASC,aAAa,QAAQ,WAAU;AAExC,MAAMC,UAAUF,cAAc,YAAYG,GAAG;AAE7C;;;;;;;;;CASC,GACD,OAAO,MAAMC,uBAAuB;IAClC;QACEC,aAAYF,GAAW;YACrB,IAAI,CAACA,IAAIG,UAAU,CAAC,kBAAkB;gBACpC,OAAO;YACT;YACA,IAAI;gBACF,OAAOL,cAAcC,QAAQK,OAAO,CAACJ,IAAIK,KAAK,CAAC;YACjD,EAAE,OAAM;gBACN,OAAO;YACT;QACF;IACF;CACD,CAAA"}

package/dist/withPayload/devConfigReload.d.ts

@@ -0,0 +1,14 @@
+import type { PluginOption } from 'vite';
+/**
+ * Reloads Payload when `payload.config.ts`, or anything it imports, changes.
+ *
+ * Vite re-evaluates the config module on its own, but `getPayload` keeps
+ * serving its cached instance until a `DevReloadStrategy` marks it stale. This
+ * plugin only broadcasts the change; `devConfigReload.server.ts` subscribes
+ * from inside the server runtime and marks the instance, which `getPayload`
+ * then reloads on its next call.
+ */
+export declare function payloadDevConfigReload({ payloadConfigPath, }: {
+    payloadConfigPath: string;
+}): PluginOption;
+//# sourceMappingURL=devConfigReload.d.ts.map

package/dist/withPayload/devConfigReload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devConfigReload.d.ts","sourceRoot":"","sources":["../../src/withPayload/devConfigReload.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAyB,YAAY,EAAiB,MAAM,MAAM,CAAA;AAO9E;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,iBAAiB,GAClB,EAAE;IACD,iBAAiB,EAAE,MAAM,CAAA;CAC1B,GAAG,YAAY,CA+Cf"}

package/dist/withPayload/devConfigReload.js

@@ -0,0 +1,84 @@
+import path from 'node:path';
+import { normalizePath } from 'vite';
+import { PAYLOAD_CONFIG_CHANGED_EVENT } from '../utilities/devConfigReloadEvent.js';
+/**
+ * Reloads Payload when `payload.config.ts`, or anything it imports, changes.
+ *
+ * Vite re-evaluates the config module on its own, but `getPayload` keeps
+ * serving its cached instance until a `DevReloadStrategy` marks it stale. This
+ * plugin only broadcasts the change; `devConfigReload.server.ts` subscribes
+ * from inside the server runtime and marks the instance, which `getPayload`
+ * then reloads on its next call.
+ */ export function payloadDevConfigReload({ payloadConfigPath }) {
+    const configFile = normalizePath(path.resolve(payloadConfigPath));
+    let server;
+    // Vite runs `hotUpdate` once per environment (client, ssr, rsc) per change,
+    // sharing one timestamp; without this the notice prints three times.
+    let lastHandled = '';
+    return {
+        name: 'payload:dev-config-reload',
+        apply: 'serve',
+        configureServer (devServer) {
+            server = devServer;
+        },
+        hotUpdate ({ file, modules, timestamp }) {
+            if (!server) {
+                return;
+            }
+            const changeKey = `${file}:${timestamp}`;
+            if (changeKey === lastHandled) {
+                return;
+            }
+            if (!affectsPayloadConfig({
+                configFile,
+                file,
+                modules
+            })) {
+                return;
+            }
+            lastHandled = changeKey;
+            server.config.logger.info(`payload config changed, reloading Payload (${path.basename(file)})`, {
+                timestamp: true
+            });
+            // Broadcast to every environment rather than just `this.environment`: the
+            // changed module may only be in the graph of the environment that saw it,
+            // while the Payload instance was built in another. Each environment's
+            // runtime subscribes with its own copy of `payload`, and environments with
+            // no subscriber (e.g. `client`) simply ignore the event.
+            for (const environment of Object.values(server.environments)){
+                environment.hot.send({
+                    type: 'custom',
+                    event: PAYLOAD_CONFIG_CHANGED_EVENT
+                });
+            }
+        }
+    };
+}
+/**
+ * Whether `file` is the Payload config or something it imports. Walks *up*
+ * through importers, since the config sits at the root of that subtree.
+ */ function affectsPayloadConfig({ configFile, file, modules }) {
+    if (normalizePath(file) === configFile) {
+        return true;
+    }
+    const seen = new Set();
+    const queue = [
+        ...modules
+    ];
+    while(queue.length > 0){
+        const mod = queue.pop();
+        if (seen.has(mod)) {
+            continue;
+        }
+        seen.add(mod);
+        if (mod.file && normalizePath(mod.file) === configFile) {
+            return true;
+        }
+        for (const importer of mod.importers){
+            queue.push(importer);
+        }
+    }
+    return false;
+}
+
+//# sourceMappingURL=devConfigReload.js.map

package/dist/withPayload/devConfigReload.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/withPayload/devConfigReload.ts"],"sourcesContent":["import type { EnvironmentModuleNode, PluginOption, ViteDevServer } from 'vite'\n\nimport path from 'node:path'\nimport { normalizePath } from 'vite'\n\nimport { PAYLOAD_CONFIG_CHANGED_EVENT } from '../utilities/devConfigReloadEvent.js'\n\n/**\n * Reloads Payload when `payload.config.ts`, or anything it imports, changes.\n *\n * Vite re-evaluates the config module on its own, but `getPayload` keeps\n * serving its cached instance until a `DevReloadStrategy` marks it stale. This\n * plugin only broadcasts the change; `devConfigReload.server.ts` subscribes\n * from inside the server runtime and marks the instance, which `getPayload`\n * then reloads on its next call.\n */\nexport function payloadDevConfigReload({\n  payloadConfigPath,\n}: {\n  payloadConfigPath: string\n}): PluginOption {\n  const configFile = normalizePath(path.resolve(payloadConfigPath))\n\n  let server: undefined | ViteDevServer\n\n  // Vite runs `hotUpdate` once per environment (client, ssr, rsc) per change,\n  // sharing one timestamp; without this the notice prints three times.\n  let lastHandled = ''\n\n  return {\n    name: 'payload:dev-config-reload',\n    apply: 'serve',\n    configureServer(devServer) {\n      server = devServer\n    },\n    hotUpdate({ file, modules, timestamp }) {\n      if (!server) {\n        return\n      }\n\n      const changeKey = `${file}:${timestamp}`\n\n      if (changeKey === lastHandled) {\n        return\n      }\n\n      if (!affectsPayloadConfig({ configFile, file, modules })) {\n        return\n      }\n\n      lastHandled = changeKey\n\n      server.config.logger.info(\n        `payload config changed, reloading Payload (${path.basename(file)})`,\n        { timestamp: true },\n      )\n\n      // Broadcast to every environment rather than just `this.environment`: the\n      // changed module may only be in the graph of the environment that saw it,\n      // while the Payload instance was built in another. Each environment's\n      // runtime subscribes with its own copy of `payload`, and environments with\n      // no subscriber (e.g. `client`) simply ignore the event.\n      for (const environment of Object.values(server.environments)) {\n        environment.hot.send({ type: 'custom', event: PAYLOAD_CONFIG_CHANGED_EVENT })\n      }\n    },\n  }\n}\n\n/**\n * Whether `file` is the Payload config or something it imports. Walks *up*\n * through importers, since the config sits at the root of that subtree.\n */\nfunction affectsPayloadConfig({\n  configFile,\n  file,\n  modules,\n}: {\n  configFile: string\n  file: string\n  modules: EnvironmentModuleNode[]\n}): boolean {\n  if (normalizePath(file) === configFile) {\n    return true\n  }\n\n  const seen = new Set<EnvironmentModuleNode>()\n  const queue = [...modules]\n\n  while (queue.length > 0) {\n    const mod = queue.pop()!\n\n    if (seen.has(mod)) {\n      continue\n    }\n    seen.add(mod)\n\n    if (mod.file && normalizePath(mod.file) === configFile) {\n      return true\n    }\n\n    for (const importer of mod.importers) {\n      queue.push(importer)\n    }\n  }\n\n  return false\n}\n"],"names":["path","normalizePath","PAYLOAD_CONFIG_CHANGED_EVENT","payloadDevConfigReload","payloadConfigPath","configFile","resolve","server","lastHandled","name","apply","configureServer","devServer","hotUpdate","file","modules","timestamp","changeKey","affectsPayloadConfig","config","logger","info","basename","environment","Object","values","environments","hot","send","type","event","seen","Set","queue","length","mod","pop","has","add","importer","importers","push"],"mappings":"AAEA,OAAOA,UAAU,YAAW;AAC5B,SAASC,aAAa,QAAQ,OAAM;AAEpC,SAASC,4BAA4B,QAAQ,uCAAsC;AAEnF;;;;;;;;CAQC,GACD,OAAO,SAASC,uBAAuB,EACrCC,iBAAiB,EAGlB;IACC,MAAMC,aAAaJ,cAAcD,KAAKM,OAAO,CAACF;IAE9C,IAAIG;IAEJ,4EAA4E;IAC5E,qEAAqE;IACrE,IAAIC,cAAc;IAElB,OAAO;QACLC,MAAM;QACNC,OAAO;QACPC,iBAAgBC,SAAS;YACvBL,SAASK;QACX;QACAC,WAAU,EAAEC,IAAI,EAAEC,OAAO,EAAEC,SAAS,EAAE;YACpC,IAAI,CAACT,QAAQ;gBACX;YACF;YAEA,MAAMU,YAAY,GAAGH,KAAK,CAAC,EAAEE,WAAW;YAExC,IAAIC,cAAcT,aAAa;gBAC7B;YACF;YAEA,IAAI,CAACU,qBAAqB;gBAAEb;gBAAYS;gBAAMC;YAAQ,IAAI;gBACxD;YACF;YAEAP,cAAcS;YAEdV,OAAOY,MAAM,CAACC,MAAM,CAACC,IAAI,CACvB,CAAC,2CAA2C,EAAErB,KAAKsB,QAAQ,CAACR,MAAM,CAAC,CAAC,EACpE;gBAAEE,WAAW;YAAK;YAGpB,0EAA0E;YAC1E,0EAA0E;YAC1E,sEAAsE;YACtE,2EAA2E;YAC3E,yDAAyD;YACzD,KAAK,MAAMO,eAAeC,OAAOC,MAAM,CAAClB,OAAOmB,YAAY,EAAG;gBAC5DH,YAAYI,GAAG,CAACC,IAAI,CAAC;oBAAEC,MAAM;oBAAUC,OAAO5B;gBAA6B;YAC7E;QACF;IACF;AACF;AAEA;;;CAGC,GACD,SAASgB,qBAAqB,EAC5Bb,UAAU,EACVS,IAAI,EACJC,OAAO,EAKR;IACC,IAAId,cAAca,UAAUT,YAAY;QACtC,OAAO;IACT;IAEA,MAAM0B,OAAO,IAAIC;IACjB,MAAMC,QAAQ;WAAIlB;KAAQ;IAE1B,MAAOkB,MAAMC,MAAM,GAAG,EAAG;QACvB,MAAMC,MAAMF,MAAMG,GAAG;QAErB,IAAIL,KAAKM,GAAG,CAACF,MAAM;YACjB;QACF;QACAJ,KAAKO,GAAG,CAACH;QAET,IAAIA,IAAIrB,IAAI,IAAIb,cAAckC,IAAIrB,IAAI,MAAMT,YAAY;YACtD,OAAO;QACT;QAEA,KAAK,MAAMkC,YAAYJ,IAAIK,SAAS,CAAE;YACpCP,MAAMQ,IAAI,CAACF;QACb;IACF;IAEA,OAAO;AACT"}

package/dist/withPayload/importProtection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"importProtection.d.ts","sourceRoot":"","sources":["../../src/withPayload/importProtection.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAoB7D,CAAA;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAmC9E;AAED,eAAO,MAAM,sCAAsC,EAAE,MAAM,EAAsC,CAAA"}

package/dist/{vite → withPayload}/importProtection.js

@@ -11,7 +11,7 @@ import { builtinModules } from 'node:module';
     /^@payloadcms\/richtext-lexical\/rsc/,
     /^@payloadcms\/richtext-slate\/rsc/,
     '@payloadcms/ui/server',
-    /^@payloadcms\/tanstack-start\/(layouts|rsc|server|views\/server)/,
+    /^@payloadcms\/tanstack-start\/(layouts|rsc|server)/,
     'sharp',
     'busboy',
     'croner',
@@ -30,7 +30,7 @@ import { builtinModules } from 'node:module';
  * to permit even when they appear to cross a server/client boundary.
  */ export function onImportProtectionViolation(violation) {
     const info = violation;
-    const allowedClientFileImporters = /\/richtext-lexical\/.*\/exports\/client\/|\/tanstack-start\/.*\/views\/AdminView|\/ui\//;
+    const allowedClientFileImporters = /\/richtext-lexical\/.*\/exports\/client\/|\/ui\//;
     if (info.envType === 'server' && info.resolved?.includes('.client.') && allowedClientFileImporters.test(info.importer)) {
         return false;
     }

package/dist/withPayload/importProtection.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/withPayload/importProtection.ts"],"sourcesContent":["import { builtinModules } from 'node:module'\n\n/**\n * Specifiers that must never appear in the client module graph. These are the\n * server-only Payload entry points plus Node.js built-ins and a handful of\n * Node-only npm packages that Payload pulls in transitively.\n */\nexport const serverOnlyClientSpecifiers: Array<RegExp | string> = [\n  /^node:/,\n  new RegExp(`^(${builtinModules.join('|')})(\\\\/|$)`),\n  '@payload-config',\n  /^@payloadcms\\/next\\/rsc/,\n  /^@payloadcms\\/richtext-lexical\\/rsc/,\n  /^@payloadcms\\/richtext-slate\\/rsc/,\n  '@payloadcms/ui/server',\n  /^@payloadcms\\/tanstack-start\\/(layouts|rsc|server)/,\n  'sharp',\n  'busboy',\n  'croner',\n  'pino',\n  'pino-pretty',\n  'prompts',\n  'ws',\n  'undici',\n  'get-tsconfig',\n  /^file-type/,\n  /^react-dom\\/server/,\n]\n\n/**\n * Allowlist callback for the `tanstackStart` plugin's import-protection. These\n * are the legitimate cross-environment imports in our monorepo that we want\n * to permit even when they appear to cross a server/client boundary.\n */\nexport function onImportProtectionViolation(violation: unknown): boolean | void {\n  const info = violation as {\n    envType: 'client' | 'server'\n    importer: string\n    resolved?: string\n  }\n\n  const allowedClientFileImporters = /\\/richtext-lexical\\/.*\\/exports\\/client\\/|\\/ui\\//\n\n  if (\n    info.envType === 'server' &&\n    info.resolved?.includes('.client.') &&\n    allowedClientFileImporters.test(info.importer)\n  ) {\n    return false\n  }\n\n  if (info.importer.includes('/richtext-lexical/') && info.importer.includes('/field/Diff/')) {\n    return false\n  }\n\n  if (info.importer.includes('/packages/payload/') || info.importer.includes('/payload/dist/')) {\n    return false\n  }\n\n  if (\n    info.importer.includes('@payloadcms/ui') &&\n    (info.importer.includes('/exports/rsc/') || info.importer.includes('/rsc/index'))\n  ) {\n    return false\n  }\n\n  if (info.envType === 'server' && info.importer.includes('vite-rsc/client-references')) {\n    return false\n  }\n}\n\nexport const defaultImportProtectionIgnoreImporters: RegExp[] = [/^src\\/importMap\\.js(?:\\?.*)?$/]\n"],"names":["builtinModules","serverOnlyClientSpecifiers","RegExp","join","onImportProtectionViolation","violation","info","allowedClientFileImporters","envType","resolved","includes","test","importer","defaultImportProtectionIgnoreImporters"],"mappings":"AAAA,SAASA,cAAc,QAAQ,cAAa;AAE5C;;;;CAIC,GACD,OAAO,MAAMC,6BAAqD;IAChE;IACA,IAAIC,OAAO,CAAC,EAAE,EAAEF,eAAeG,IAAI,CAAC,KAAK,QAAQ,CAAC;IAClD;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAA;AAED;;;;CAIC,GACD,OAAO,SAASC,4BAA4BC,SAAkB;IAC5D,MAAMC,OAAOD;IAMb,MAAME,6BAA6B;IAEnC,IACED,KAAKE,OAAO,KAAK,YACjBF,KAAKG,QAAQ,EAAEC,SAAS,eACxBH,2BAA2BI,IAAI,CAACL,KAAKM,QAAQ,GAC7C;QACA,OAAO;IACT;IAEA,IAAIN,KAAKM,QAAQ,CAACF,QAAQ,CAAC,yBAAyBJ,KAAKM,QAAQ,CAACF,QAAQ,CAAC,iBAAiB;QAC1F,OAAO;IACT;IAEA,IAAIJ,KAAKM,QAAQ,CAACF,QAAQ,CAAC,yBAAyBJ,KAAKM,QAAQ,CAACF,QAAQ,CAAC,mBAAmB;QAC5F,OAAO;IACT;IAEA,IACEJ,KAAKM,QAAQ,CAACF,QAAQ,CAAC,qBACtBJ,CAAAA,KAAKM,QAAQ,CAACF,QAAQ,CAAC,oBAAoBJ,KAAKM,QAAQ,CAACF,QAAQ,CAAC,aAAY,GAC/E;QACA,OAAO;IACT;IAEA,IAAIJ,KAAKE,OAAO,KAAK,YAAYF,KAAKM,QAAQ,CAACF,QAAQ,CAAC,+BAA+B;QACrF,OAAO;IACT;AACF;AAEA,OAAO,MAAMG,yCAAmD;IAAC;CAAgC,CAAA"}

package/dist/{vite → withPayload}/index.d.ts

@@ -9,6 +9,12 @@ export type WithPayloadOptions = {
     adminRouteId?: string;
     /** Extra globs exempted from the `.client.*` SSR denial (beyond the default node_modules exemption). */
     clientDenialExcludeFiles?: string[];
+    /**
+     * Packages added to `ssr.external` on dev serve only (the build bundles them).
+     * List CommonJS deps that 500 with `__cjs_module_runner_transform` — the RSC
+     * plugin's CJS-to-ESM rewrite breaks on their circular `require`s.
+     */
+    devServerExternalPackages?: string[];
     /** Path to the user's `payload.config.ts` (required) */
     payloadConfigPath: string;
     /** TanStack router routes directory relative to `srcDirectory`. Defaults to `'app'` */
@@ -20,8 +26,13 @@ export type WithPayloadOptions = {
     /** Extra Vite config deep-merged over the Payload defaults. Ignored in `build` mode. */
     vite?: UserConfig;
 };
+/** The `nitro()` options Payload's server build requires. Typed structurally — `nitro` is the host's dependency, not Payload's. */
+export type PayloadNitroOptions = {
+    traceDeps: string[];
+};
 /** The options Payload's admin requires for each third-party plugin. */
 export type PayloadPluginOptions = {
+    nitro: PayloadNitroOptions;
     react: NonNullable<Parameters<typeof viteReact>[0]>;
     rsc: NonNullable<Parameters<typeof rsc>[0]>;
     tanstackStart: NonNullable<Parameters<typeof tanstackStart>[0]>;
@@ -58,6 +69,7 @@ export type WithPayloadBuilder = (context: WithPayloadBuilderContext) => UserCon
  *       rsc(pluginOptions.rsc),
  *       tanstackStart(pluginOptions.tanstackStart),
  *       viteReact(pluginOptions.react),
+ *       nitro(pluginOptions.nitro), // only if the app deploys through Nitro
  *     ],
  *     // ...other config options
  *   }),
@@ -68,6 +80,13 @@ export type WithPayloadBuilder = (context: WithPayloadBuilderContext) => UserCon
 export declare function withPayload(build: undefined | WithPayloadBuilder, options: WithPayloadOptions): UserConfigFnObject;
 /** `@vitejs/plugin-rsc` options for Payload: `serverHandler: false` (TanStack owns the handler). */
 export declare function payloadRscOptions(): NonNullable<Parameters<typeof rsc>[0]>;
+/**
+ * `nitro/vite` options for Payload's server build. `tslib*` full-traces `tslib`
+ * so an externalized dep's `tslib/modules/index.js` import (its `import.node`
+ * export condition) ships — otherwise the build is green and the server 500s
+ * with `ERR_MODULE_NOT_FOUND` on the first request.
+ */
+export declare function payloadNitroOptions(): PayloadNitroOptions;
 /** `@vitejs/plugin-react` options for Payload: transform every `.[jt]sx?` file. */
 export declare function payloadReactOptions(): NonNullable<Parameters<typeof viteReact>[0]>;
 export type PayloadTanstackStartOptionsArgs = {

package/dist/withPayload/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/withPayload/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAwB,UAAU,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAA;AAI3F,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAA;AACjE,OAAO,SAAS,MAAM,sBAAsB,CAAA;AAC5C,OAAO,GAAG,MAAM,oBAAoB,CAAA;AAyEpC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,wFAAwF;IACxF,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAA;IACpC,yGAAyG;IACzG,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wGAAwG;IACxG,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAA;IACnC;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAA;IACpC,wDAAwD;IACxD,iBAAiB,EAAE,MAAM,CAAA;IACzB,uFAAuF;IACvF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yFAAyF;IACzF,yBAAyB,CAAC,EAAE,OAAO,CAAA;IACnC,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wFAAwF;IACxF,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB,CAAA;AAED,mIAAmI;AACnI,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,wEAAwE;AACxE,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,mBAAmB,CAAA;IAC1B,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnD,GAAG,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3C,aAAa,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;CAChE,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,GAAG,EAAE,SAAS,CAAA;IACd,qFAAqF;IACrF,aAAa,EAAE,oBAAoB,CAAA;CACpC,CAAA;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,yBAAyB,KAAK,UAAU,CAAA;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,SAAS,GAAG,kBAAkB,EACrC,OAAO,EAAE,kBAAkB,GAC1B,kBAAkB,CAgIpB;AAED,oGAAoG;AACpG,wBAAgB,iBAAiB,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAE1E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,mBAAmB,CAEzD;AAED,mFAAmF;AACnF,wBAAgB,mBAAmB,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAElF;AAED,MAAM,MAAM,+BAA+B,GAAG;IAC5C,+DAA+D;IAC/D,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAA;IACpC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAA;IACnC,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,GAAE,+BAAoC,GACzC,WAAW,CAAC,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAwClD"}

package/dist/{vite → withPayload}/index.js

@@ -5,9 +5,10 @@ import viteReact from '@vitejs/plugin-react';
 import rsc from '@vitejs/plugin-rsc';
 import path from 'node:path';
 import { createLogger, mergeConfig } from 'vite';
-import { payloadNoExternalPatterns, ssrExternalPackages } from './config/external.js';
+import { buildExternalPackages, payloadNoExternalPatterns, ssrExternalPackages } from './config/external.js';
 import { optimizeDepsExcludeDefaults, optimizeDepsIncludeDefaults } from './config/optimizeDeps.js';
 import { payloadScssImporters } from './config/scss.js';
+import { payloadDevConfigReload } from './devConfigReload.js';
 import { defaultImportProtectionIgnoreImporters, onImportProtectionViolation, serverOnlyClientSpecifiers } from './importProtection.js';
 import { clientModuleResolution } from './workarounds/clientModuleResolution.js';
 import { payloadDevTransforms } from './workarounds/devTransforms.js';
@@ -19,9 +20,16 @@ import { wrapCjsForClient } from './workarounds/wrapCjsForClient.js';
  * Vite dependency warnings Payload consumers can't act on: third-party packages
  * ship sourcemaps whose original sources aren't published, so Vite warns on
  * every one. Suppressed by default (see `silenceDependencyWarnings`).
+ *
+ * `Failed to load source map` covers deps that ship a `sourceMappingURL` comment
+ * without the `.map` file it points at (e.g. `undici`'s `lib/llhttp/*.js`, pulled
+ * in via `@vercel/blob`). Vite appends the underlying `ENOENT` stack to that one,
+ * so each occurrence is a ~10-line block that buries real log output.
  */ const suppressibleWarningPatterns = [
     'points to missing source files',
-    'Sourcemap for'
+    'Sourcemap for',
+    'Failed to load source map',
+    'references a map file outside its package'
 ];
 /**
  * Wraps a Vite logger so warnings matching {@link suppressibleWarningPatterns}
@@ -70,6 +78,7 @@ import { wrapCjsForClient } from './workarounds/wrapCjsForClient.js';
  *       rsc(pluginOptions.rsc),
  *       tanstackStart(pluginOptions.tanstackStart),
  *       viteReact(pluginOptions.react),
+ *       nitro(pluginOptions.nitro), // only if the app deploys through Nitro
  *     ],
  *     // ...other config options
  *   }),
@@ -77,8 +86,33 @@ import { wrapCjsForClient } from './workarounds/wrapCjsForClient.js';
  * )
  * ```
  */ export function withPayload(build, options) {
-    const { additionalIgnoreImporters = [], adminRouteId, clientDenialExcludeFiles = [], payloadConfigPath, routesDirectory = 'app', silenceDependencyWarnings = true, srcDirectory = 'src', vite } = options;
+    const { additionalIgnoreImporters = [], adminRouteId, clientDenialExcludeFiles = [], devServerExternalPackages = [], payloadConfigPath, routesDirectory = 'app', silenceDependencyWarnings = true, srcDirectory = 'src', vite } = options;
     return (env)=>{
+        // `pluralize` ships a UMD wrapper that throws when run through Vite's dev SSR
+        // transform, so dev serve keeps it external and lets Node require it.
+        // The production build must bundle it instead: it is reached from the
+        // force-bundled `@payloadcms/ui` / `@payloadcms/translations`, and Vite would
+        // otherwise externalize it into a client chunk as a bare specifier that pnpm
+        // can't resolve from `dist/` at runtime. Dropping it from the externals list
+        // isn't enough — Vite externalizes deps of `noExternal` packages by default,
+        // so it must be forced back in via `noExternal`.
+        const isBuild = env.command === 'build';
+        const noExternalPatterns = isBuild ? [
+            ...payloadNoExternalPatterns,
+            'pluralize'
+        ] : payloadNoExternalPatterns;
+        // Dev serve externalizes the server-only Node packages (including `pluralize`,
+        // whose UMD wrapper breaks under Vite's SSR transform). The prod build instead
+        // externalizes the package boundaries (`buildExternalPackages`) and drops
+        // `pluralize` so it bundles — leaving it in `ssr.external` here would win over
+        // `noExternal` and re-emit the bare specifier.
+        // Dev serve also honors `devServerExternalPackages`, the app's own CJS
+        // dependencies that break under the RSC plugin's CJS-to-ESM rewrite; the build
+        // needs none of it, since Rollup bundles CJS correctly.
+        const ssrExternal = isBuild ? buildExternalPackages : [
+            ...ssrExternalPackages,
+            ...devServerExternalPackages
+        ];
         const base = {
             build: {
                 cssMinify: 'esbuild'
@@ -101,21 +135,21 @@ import { wrapCjsForClient } from './workarounds/wrapCjsForClient.js';
                 rsc: {
                     build: {
                         rollupOptions: {
-                            external: ssrExternalPackages
+                            external: buildExternalPackages
                         }
                     },
                     resolve: {
-                        noExternal: payloadNoExternalPatterns
+                        noExternal: noExternalPatterns
                     }
                 },
                 ssr: {
                     build: {
                         rollupOptions: {
-                            external: ssrExternalPackages
+                            external: buildExternalPackages
                         }
                     },
                     resolve: {
-                        noExternal: payloadNoExternalPatterns
+                        noExternal: noExternalPatterns
                     }
                 }
             },
@@ -132,7 +166,10 @@ import { wrapCjsForClient } from './workarounds/wrapCjsForClient.js';
                 ssrStripDistStyleImports(),
                 reactDomServerInRsc(),
                 stubPrettierInClient(),
-                payloadDevTransforms()
+                payloadDevTransforms(),
+                payloadDevConfigReload({
+                    payloadConfigPath
+                })
             ],
             resolve: {
                 alias: [
@@ -160,11 +197,12 @@ import { wrapCjsForClient } from './workarounds/wrapCjsForClient.js';
                 tsconfigPaths: true
             },
             ssr: {
-                external: ssrExternalPackages,
-                noExternal: payloadNoExternalPatterns
+                external: ssrExternal,
+                noExternal: noExternalPatterns
             }
         };
         const pluginOptions = {
+            nitro: payloadNitroOptions(),
             react: payloadReactOptions(),
             rsc: payloadRscOptions(),
             tanstackStart: payloadTanstackStartOptions({
@@ -196,6 +234,18 @@ import { wrapCjsForClient } from './workarounds/wrapCjsForClient.js';
         serverHandler: false
     };
 }
+/**
+ * `nitro/vite` options for Payload's server build. `tslib*` full-traces `tslib`
+ * so an externalized dep's `tslib/modules/index.js` import (its `import.node`
+ * export condition) ships — otherwise the build is green and the server 500s
+ * with `ERR_MODULE_NOT_FOUND` on the first request.
+ */ export function payloadNitroOptions() {
+    return {
+        traceDeps: [
+            'tslib*'
+        ]
+    };
+}
 /** `@vitejs/plugin-react` options for Payload: transform every `.[jt]sx?` file. */ export function payloadReactOptions() {
     return {
         exclude: [],
@@ -245,7 +295,7 @@ import { wrapCjsForClient } from './workarounds/wrapCjsForClient.js';
             },
             // Ignore generated importMap files and colocated `*.functions.ts` modules
             // (they define `createServerFn`s, not routes).
-            routeFileIgnorePattern: 'importMap\\.(?:js|server\\.ts)$|\\.functions\\.',
+            routeFileIgnorePattern: 'importMap\\.(?:d\\.ts|js|server\\.ts)$|\\.functions\\.',
             routesDirectory
         },
         rsc: {