@payloadcms/ui 4.0.0-canary.33 → 4.0.0-canary.35

package/dist/utilities/buildFormState.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildFormState.d.ts","sourceRoot":"","sources":["../../src/utilities/buildFormState.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,SAAS,EACT,cAAc,EACd,IAAI,EACL,MAAM,SAAS,CAAA;AAehB,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,OAAO,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;CAC9B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,gBAAgB,EAAE,MAAM,CAAA;IACxB,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED,KAAK,2BAA2B,GAAG;IACjC,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,MAAM,CAAC,EAAE,KAAK,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,KAAK,EAAE,SAAS,CAAA;CACjB,CAAA;AAED,KAAK,yBAAyB,GAAG;IAC/B,cAAc,CAAC,EAAE,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,KAAK,CAAA;IACnB,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,cAAc,CAAC,EAAE,KAAK,CAAA;IACtB,KAAK,CAAC,EAAE,KAAK,CAAA;CACd,GAAG,CACA;IACE,OAAO,EAAE,MAAM,CAAA;CAChB,GACD,WAAW,CACd,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,GAAG,2BAA2B,CAAA;AAE1F,eAAO,MAAM,qBAAqB,EAAE,cAAc,CAChD,kBAAkB,EAClB,OAAO,CAAC,oBAAoB,CAAC,CAwB9B,CAAA;AAED,eAAO,MAAM,cAAc,SACnB,kBAAkB,KACvB,OAAO,CAAC,2BAA2B,CAuNrC,CAAA"}
+{"version":3,"file":"buildFormState.d.ts","sourceRoot":"","sources":["../../src/utilities/buildFormState.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,SAAS,EACT,cAAc,EACd,IAAI,EACL,MAAM,SAAS,CAAA;AAehB,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,OAAO,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;CAC9B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,gBAAgB,EAAE,MAAM,CAAA;IACxB,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED,KAAK,2BAA2B,GAAG;IACjC,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,MAAM,CAAC,EAAE,KAAK,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,KAAK,EAAE,SAAS,CAAA;CACjB,CAAA;AAED,KAAK,yBAAyB,GAAG;IAC/B,cAAc,CAAC,EAAE,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,KAAK,CAAA;IACnB,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,cAAc,CAAC,EAAE,KAAK,CAAA;IACtB,KAAK,CAAC,EAAE,KAAK,CAAA;CACd,GAAG,CACA;IACE,OAAO,EAAE,MAAM,CAAA;CAChB,GACD,WAAW,CACd,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,GAAG,2BAA2B,CAAA;AAE1F,eAAO,MAAM,qBAAqB,EAAE,cAAc,CAChD,kBAAkB,EAClB,OAAO,CAAC,oBAAoB,CAAC,CAwB9B,CAAA;AAED,eAAO,MAAM,cAAc,SACnB,kBAAkB,KACvB,OAAO,CAAC,2BAA2B,CAwNrC,CAAA"}

package/dist/utilities/buildFormState.js

@@ -69,7 +69,8 @@ export const buildFormState = async args => {
     select,
     skipClientConfigAuth,
     skipValidation,
-    updateLastEdited
+    updateLastEdited,
+    user
   } = args;
   const selectMode = select ? getSelectMode(select) : undefined;
   if (!collectionSlug && !globalSlug && !widgetSlug) {
@@ -149,7 +150,10 @@ export const buildFormState = async args => {
     previousFormState: formState,
     readOnly,
     renderAllFields,
-    renderFieldFn: renderField,
+    renderFieldFn: args => renderField({
+      ...args,
+      user
+    }),
     req,
     schemaPath,
     select,

package/dist/utilities/buildFormState.js.map

@@ -1 +1 @@
-{"version":3,"file":"buildFormState.js","names":["canAccessAdmin","formatErrors","UnauthorizedError","getSelectMode","reduceFieldsToValues","fieldSchemasToFormState","renderField","getClientConfig","getClientSchemaMap","getSchemaMap","handleFormStateLocking","handleLivePreview","handlePreview","handleStaleDataCheck","buildFormStateHandler","args","req","res","buildFormState","err","payload","logger","error","msg","message","id","idFromArgs","checkForStaleData","collectionSlug","data","incomingData","docPermissions","docPreferences","documentFormState","formState","globalSlug","initialBlockData","initialBlockFormState","mockRSCs","operation","originalUpdatedAt","readOnly","renderAllFields","i18n","config","returnLivePreviewURL","returnLockStatus","returnPreviewURL","widgetSlug","schemaPath","select","skipClientConfigAuth","skipValidation","updateLastEdited","selectMode","undefined","Error","schemaMap","clientSchemaMap","importMap","user","fieldOrEntityConfig","get","fields","length","type","documentData","blockData","Array","isArray","formStateResult","clientFieldSchemaMap","fieldSchemaMap","permissions","preferences","previousFormState","renderFieldFn","collections","upload","file","lockedStateResult","staleDataStateResult","lockedState","staleDataState","state","livePreviewURL","previewURL"],"sources":["../../src/utilities/buildFormState.ts"],"sourcesContent":["import type {\n  BuildFormStateArgs,\n  ClientConfig,\n  ErrorResult,\n  FormState,\n  ServerFunction,\n  User,\n} from 'payload'\n\nimport { canAccessAdmin, formatErrors, UnauthorizedError } from 'payload'\nimport { getSelectMode, reduceFieldsToValues } from 'payload/shared'\n\nimport { fieldSchemasToFormState } from '../forms/fieldSchemasToFormState/index.js'\nimport { renderField } from '../forms/fieldSchemasToFormState/renderField.js'\nimport { getClientConfig } from './getClientConfig.js'\nimport { getClientSchemaMap } from './getClientSchemaMap.js'\nimport { getSchemaMap } from './getSchemaMap.js'\nimport { handleFormStateLocking } from './handleFormStateLocking.js'\nimport { handleLivePreview } from './handleLivePreview.js'\nimport { handlePreview } from './handlePreview.js'\nimport { handleStaleDataCheck } from './handleStaleDataCheck.js'\n\nexport type LockedState = {\n  isLocked: boolean\n  lastEditedAt: string\n  user?: number | string | User\n}\n\nexport type StaleDataState = {\n  currentUpdatedAt: string\n  isStale: boolean\n}\n\ntype BuildFormStateSuccessResult = {\n  clientConfig?: ClientConfig\n  errors?: never\n  indexPath?: string\n  livePreviewURL?: string\n  lockedState?: LockedState\n  previewURL?: string\n  staleDataState?: StaleDataState\n  state: FormState\n}\n\ntype BuildFormStateErrorResult = {\n  livePreviewURL?: never\n  lockedState?: never\n  previewURL?: never\n  staleDataState?: never\n  state?: never\n} & (\n  | {\n      message: string\n    }\n  | ErrorResult\n)\n\nexport type BuildFormStateResult = BuildFormStateErrorResult | BuildFormStateSuccessResult\n\nexport const buildFormStateHandler: ServerFunction<\n  BuildFormStateArgs,\n  Promise<BuildFormStateResult>\n> = async (args) => {\n  const { req } = args\n\n  try {\n    await canAccessAdmin({ req })\n    const res = await buildFormState(args)\n\n    return res\n  } catch (err) {\n    req.payload.logger.error({ err, msg: `There was an error building form state` })\n\n    if (err.message === 'Could not find field schema for given path') {\n      return {\n        message: err.message,\n      }\n    }\n\n    if (err.message === 'Unauthorized') {\n      throw new UnauthorizedError()\n    }\n\n    return formatErrors(err)\n  }\n}\n\nexport const buildFormState = async (\n  args: BuildFormStateArgs,\n): Promise<BuildFormStateSuccessResult> => {\n  const {\n    id: idFromArgs,\n    checkForStaleData,\n    collectionSlug,\n    data: incomingData,\n    docPermissions,\n    docPreferences,\n    documentFormState,\n    formState,\n    globalSlug,\n    initialBlockData,\n    initialBlockFormState,\n    mockRSCs,\n    operation,\n    originalUpdatedAt,\n    readOnly,\n    renderAllFields,\n    req,\n    req: {\n      i18n,\n      payload,\n      payload: { config },\n    },\n    returnLivePreviewURL,\n    returnLockStatus,\n    returnPreviewURL,\n    widgetSlug,\n    schemaPath = collectionSlug || globalSlug || widgetSlug,\n    select,\n    skipClientConfigAuth,\n    skipValidation,\n    updateLastEdited,\n  } = args\n\n  const selectMode = select ? getSelectMode(select) : undefined\n\n  if (!collectionSlug && !globalSlug && !widgetSlug) {\n    throw new Error('Either collectionSlug, globalSlug, or widgetSlug must be provided')\n  }\n\n  const schemaMap = getSchemaMap({\n    collectionSlug,\n    config,\n    globalSlug,\n    i18n,\n    widgetSlug,\n  })\n\n  const clientSchemaMap = getClientSchemaMap({\n    collectionSlug,\n    config: getClientConfig({\n      config,\n      i18n,\n      importMap: req.payload.importMap,\n      user: skipClientConfigAuth ? true : req.user,\n    }),\n    globalSlug,\n    i18n,\n    payload,\n    schemaMap,\n    widgetSlug,\n  })\n\n  const id = collectionSlug ? idFromArgs : undefined\n  const fieldOrEntityConfig = schemaMap.get(schemaPath)\n\n  if (!fieldOrEntityConfig) {\n    throw new Error(`Could not find \"${schemaPath}\" in the fieldSchemaMap`)\n  }\n\n  if (\n    (!('fields' in fieldOrEntityConfig) ||\n      !fieldOrEntityConfig.fields ||\n      !fieldOrEntityConfig.fields.length) &&\n    'type' in fieldOrEntityConfig &&\n    fieldOrEntityConfig.type !== 'blocks'\n  ) {\n    throw new Error(\n      `The field found in fieldSchemaMap for \"${schemaPath}\" does not contain any subfields.`,\n    )\n  }\n\n  // If there is form state but no data, deduce data from that form state, e.g. on initial load\n  // Otherwise, use the incoming data as the source of truth, e.g. on subsequent saves\n  const data = incomingData || reduceFieldsToValues(formState, true)\n\n  let documentData = undefined\n\n  if (documentFormState) {\n    documentData = reduceFieldsToValues(documentFormState, true)\n  }\n\n  let blockData = initialBlockData\n\n  if (initialBlockFormState) {\n    blockData = reduceFieldsToValues(initialBlockFormState, true)\n  }\n\n  /**\n   * When building state for sub schemas we need to adjust:\n   * - `fields`\n   * - `parentSchemaPath`\n   * - `parentPath`\n   *\n   * Type assertion is fine because we wrap sub schemas in an array\n   * so we can safely map over them within `fieldSchemasToFormState`\n   */\n  const fields = Array.isArray(fieldOrEntityConfig)\n    ? fieldOrEntityConfig\n    : 'fields' in fieldOrEntityConfig\n      ? fieldOrEntityConfig.fields\n      : [fieldOrEntityConfig]\n\n  // Ensure data.id is present during form state requests, where the data\n  // is passed from the client as an argument, without the ID\n  if (!data.id && id) {\n    data.id = id\n  }\n\n  const formStateResult = await fieldSchemasToFormState({\n    id,\n    clientFieldSchemaMap: clientSchemaMap,\n    collectionSlug,\n    data,\n    documentData,\n    fields,\n    fieldSchemaMap: schemaMap,\n    globalSlug,\n    initialBlockData: blockData,\n    mockRSCs,\n    operation,\n    permissions: docPermissions?.fields || {},\n    preferences: docPreferences || { fields: {} },\n    previousFormState: formState,\n    readOnly,\n    renderAllFields,\n    renderFieldFn: renderField,\n    req,\n    schemaPath,\n    select,\n    selectMode,\n    skipValidation,\n  })\n\n  // Maintain form state of auth / upload fields\n  if (collectionSlug && formState) {\n    if (payload.collections[collectionSlug]?.config?.upload && formState.file) {\n      formStateResult.file = formState.file\n    }\n  }\n\n  let lockedStateResult: LockedState | undefined\n\n  if (returnLockStatus) {\n    lockedStateResult = await handleFormStateLocking({\n      id,\n      collectionSlug,\n      globalSlug,\n      req,\n      updateLastEdited,\n    })\n  }\n\n  let staleDataStateResult: StaleDataState | undefined\n\n  if (checkForStaleData && originalUpdatedAt && ((collectionSlug && id) || globalSlug)) {\n    staleDataStateResult = await handleStaleDataCheck({\n      id,\n      collectionSlug,\n      globalSlug,\n      originalUpdatedAt,\n      req,\n    })\n  }\n\n  const res: BuildFormStateSuccessResult = {\n    lockedState: lockedStateResult,\n    staleDataState: staleDataStateResult,\n    state: formStateResult,\n  }\n\n  if (returnLivePreviewURL) {\n    const { livePreviewURL } = await handleLivePreview({\n      collectionSlug,\n      config,\n      data,\n      globalSlug,\n      req,\n    })\n\n    // Important: only set this when not undefined,\n    // Otherwise it will travel through the network as `$undefined`\n    if (livePreviewURL) {\n      res.livePreviewURL = livePreviewURL\n    }\n  }\n\n  if (returnPreviewURL) {\n    const { previewURL } = await handlePreview({\n      collectionSlug,\n      config,\n      data,\n      globalSlug,\n      req,\n    })\n\n    // Important: only set this when not undefined,\n    // Otherwise it will travel through the network as `$undefined`\n    if (previewURL) {\n      res.previewURL = previewURL\n    }\n  }\n\n  return res\n}\n"],"mappings":"AASA,SAASA,cAAc,EAAEC,YAAY,EAAEC,iBAAiB,QAAQ;AAChE,SAASC,aAAa,EAAEC,oBAAoB,QAAQ;AAEpD,SAASC,uBAAuB,QAAQ;AACxC,SAASC,WAAW,QAAQ;AAC5B,SAASC,eAAe,QAAQ;AAChC,SAASC,kBAAkB,QAAQ;AACnC,SAASC,YAAY,QAAQ;AAC7B,SAASC,sBAAsB,QAAQ;AACvC,SAASC,iBAAiB,QAAQ;AAClC,SAASC,aAAa,QAAQ;AAC9B,SAASC,oBAAoB,QAAQ;AAuCrC,OAAO,MAAMC,qBAAA,GAGT,MAAOC,IAAA;EACT,MAAM;IAAEC;EAAG,CAAE,GAAGD,IAAA;EAEhB,IAAI;IACF,MAAMf,cAAA,CAAe;MAAEgB;IAAI;IAC3B,MAAMC,GAAA,GAAM,MAAMC,cAAA,CAAeH,IAAA;IAEjC,OAAOE,GAAA;EACT,EAAE,OAAOE,GAAA,EAAK;IACZH,GAAA,CAAII,OAAO,CAACC,MAAM,CAACC,KAAK,CAAC;MAAEH,GAAA;MAAKI,GAAA,EAAK;IAAyC;IAE9E,IAAIJ,GAAA,CAAIK,OAAO,KAAK,8CAA8C;MAChE,OAAO;QACLA,OAAA,EAASL,GAAA,CAAIK;MACf;IACF;IAEA,IAAIL,GAAA,CAAIK,OAAO,KAAK,gBAAgB;MAClC,MAAM,IAAItB,iBAAA;IACZ;IAEA,OAAOD,YAAA,CAAakB,GAAA;EACtB;AACF;AAEA,OAAO,MAAMD,cAAA,GAAiB,MAC5BH,IAAA;EAEA,MAAM;IACJU,EAAA,EAAIC,UAAU;IACdC,iBAAiB;IACjBC,cAAc;IACdC,IAAA,EAAMC,YAAY;IAClBC,cAAc;IACdC,cAAc;IACdC,iBAAiB;IACjBC,SAAS;IACTC,UAAU;IACVC,gBAAgB;IAChBC,qBAAqB;IACrBC,QAAQ;IACRC,SAAS;IACTC,iBAAiB;IACjBC,QAAQ;IACRC,eAAe;IACf1B,GAAG;IACHA,GAAA,EAAK;MACH2B,IAAI;MACJvB,OAAO;MACPA,OAAA,EAAS;QAAEwB;MAAM;IAAE,CACpB;IACDC,oBAAoB;IACpBC,gBAAgB;IAChBC,gBAAgB;IAChBC,UAAU;IACVC,UAAA,GAAarB,cAAA,IAAkBO,UAAA,IAAca,UAAU;IACvDE,MAAM;IACNC,oBAAoB;IACpBC,cAAc;IACdC;EAAgB,CACjB,GAAGtC,IAAA;EAEJ,MAAMuC,UAAA,GAAaJ,MAAA,GAAS/C,aAAA,CAAc+C,MAAA,IAAUK,SAAA;EAEpD,IAAI,CAAC3B,cAAA,IAAkB,CAACO,UAAA,IAAc,CAACa,UAAA,EAAY;IACjD,MAAM,IAAIQ,KAAA,CAAM;EAClB;EAEA,MAAMC,SAAA,GAAYhD,YAAA,CAAa;IAC7BmB,cAAA;IACAgB,MAAA;IACAT,UAAA;IACAQ,IAAA;IACAK;EACF;EAEA,MAAMU,eAAA,GAAkBlD,kBAAA,CAAmB;IACzCoB,cAAA;IACAgB,MAAA,EAAQrC,eAAA,CAAgB;MACtBqC,MAAA;MACAD,IAAA;MACAgB,SAAA,EAAW3C,GAAA,CAAII,OAAO,CAACuC,SAAS;MAChCC,IAAA,EAAMT,oBAAA,GAAuB,OAAOnC,GAAA,CAAI4C;IAC1C;IACAzB,UAAA;IACAQ,IAAA;IACAvB,OAAA;IACAqC,SAAA;IACAT;EACF;EAEA,MAAMvB,EAAA,GAAKG,cAAA,GAAiBF,UAAA,GAAa6B,SAAA;EACzC,MAAMM,mBAAA,GAAsBJ,SAAA,CAAUK,GAAG,CAACb,UAAA;EAE1C,IAAI,CAACY,mBAAA,EAAqB;IACxB,MAAM,IAAIL,KAAA,CAAM,mBAAmBP,UAAA,yBAAmC;EACxE;EAEA,IACE,CAAC,EAAE,YAAYY,mBAAkB,KAC/B,CAACA,mBAAA,CAAoBE,MAAM,IAC3B,CAACF,mBAAA,CAAoBE,MAAM,CAACC,MAAM,KACpC,UAAUH,mBAAA,IACVA,mBAAA,CAAoBI,IAAI,KAAK,UAC7B;IACA,MAAM,IAAIT,KAAA,CACR,0CAA0CP,UAAA,mCAA6C;EAE3F;EAEA;EACA;EACA,MAAMpB,IAAA,GAAOC,YAAA,IAAgB1B,oBAAA,CAAqB8B,SAAA,EAAW;EAE7D,IAAIgC,YAAA,GAAeX,SAAA;EAEnB,IAAItB,iBAAA,EAAmB;IACrBiC,YAAA,GAAe9D,oBAAA,CAAqB6B,iBAAA,EAAmB;EACzD;EAEA,IAAIkC,SAAA,GAAY/B,gBAAA;EAEhB,IAAIC,qBAAA,EAAuB;IACzB8B,SAAA,GAAY/D,oBAAA,CAAqBiC,qBAAA,EAAuB;EAC1D;EAEA;;;;;;;;;EASA,MAAM0B,MAAA,GAASK,KAAA,CAAMC,OAAO,CAACR,mBAAA,IACzBA,mBAAA,GACA,YAAYA,mBAAA,GACVA,mBAAA,CAAoBE,MAAM,GAC1B,CAACF,mBAAA,CAAoB;EAE3B;EACA;EACA,IAAI,CAAChC,IAAA,CAAKJ,EAAE,IAAIA,EAAA,EAAI;IAClBI,IAAA,CAAKJ,EAAE,GAAGA,EAAA;EACZ;EAEA,MAAM6C,eAAA,GAAkB,MAAMjE,uBAAA,CAAwB;IACpDoB,EAAA;IACA8C,oBAAA,EAAsBb,eAAA;IACtB9B,cAAA;IACAC,IAAA;IACAqC,YAAA;IACAH,MAAA;IACAS,cAAA,EAAgBf,SAAA;IAChBtB,UAAA;IACAC,gBAAA,EAAkB+B,SAAA;IAClB7B,QAAA;IACAC,SAAA;IACAkC,WAAA,EAAa1C,cAAA,EAAgBgC,MAAA,IAAU,CAAC;IACxCW,WAAA,EAAa1C,cAAA,IAAkB;MAAE+B,MAAA,EAAQ,CAAC;IAAE;IAC5CY,iBAAA,EAAmBzC,SAAA;IACnBO,QAAA;IACAC,eAAA;IACAkC,aAAA,EAAetE,WAAA;IACfU,GAAA;IACAiC,UAAA;IACAC,MAAA;IACAI,UAAA;IACAF;EACF;EAEA;EACA,IAAIxB,cAAA,IAAkBM,SAAA,EAAW;IAC/B,IAAId,OAAA,CAAQyD,WAAW,CAACjD,cAAA,CAAe,EAAEgB,MAAA,EAAQkC,MAAA,IAAU5C,SAAA,CAAU6C,IAAI,EAAE;MACzET,eAAA,CAAgBS,IAAI,GAAG7C,SAAA,CAAU6C,IAAI;IACvC;EACF;EAEA,IAAIC,iBAAA;EAEJ,IAAIlC,gBAAA,EAAkB;IACpBkC,iBAAA,GAAoB,MAAMtE,sBAAA,CAAuB;MAC/Ce,EAAA;MACAG,cAAA;MACAO,UAAA;MACAnB,GAAA;MACAqC;IACF;EACF;EAEA,IAAI4B,oBAAA;EAEJ,IAAItD,iBAAA,IAAqBa,iBAAA,KAAsBZ,cAAC,IAAkBH,EAAA,IAAOU,UAAS,GAAI;IACpF8C,oBAAA,GAAuB,MAAMpE,oBAAA,CAAqB;MAChDY,EAAA;MACAG,cAAA;MACAO,UAAA;MACAK,iBAAA;MACAxB;IACF;EACF;EAEA,MAAMC,GAAA,GAAmC;IACvCiE,WAAA,EAAaF,iBAAA;IACbG,cAAA,EAAgBF,oBAAA;IAChBG,KAAA,EAAOd;EACT;EAEA,IAAIzB,oBAAA,EAAsB;IACxB,MAAM;MAAEwC;IAAc,CAAE,GAAG,MAAM1E,iBAAA,CAAkB;MACjDiB,cAAA;MACAgB,MAAA;MACAf,IAAA;MACAM,UAAA;MACAnB;IACF;IAEA;IACA;IACA,IAAIqE,cAAA,EAAgB;MAClBpE,GAAA,CAAIoE,cAAc,GAAGA,cAAA;IACvB;EACF;EAEA,IAAItC,gBAAA,EAAkB;IACpB,MAAM;MAAEuC;IAAU,CAAE,GAAG,MAAM1E,aAAA,CAAc;MACzCgB,cAAA;MACAgB,MAAA;MACAf,IAAA;MACAM,UAAA;MACAnB;IACF;IAEA;IACA;IACA,IAAIsE,UAAA,EAAY;MACdrE,GAAA,CAAIqE,UAAU,GAAGA,UAAA;IACnB;EACF;EAEA,OAAOrE,GAAA;AACT","ignoreList":[]}
+{"version":3,"file":"buildFormState.js","names":["canAccessAdmin","formatErrors","UnauthorizedError","getSelectMode","reduceFieldsToValues","fieldSchemasToFormState","renderField","getClientConfig","getClientSchemaMap","getSchemaMap","handleFormStateLocking","handleLivePreview","handlePreview","handleStaleDataCheck","buildFormStateHandler","args","req","res","buildFormState","err","payload","logger","error","msg","message","id","idFromArgs","checkForStaleData","collectionSlug","data","incomingData","docPermissions","docPreferences","documentFormState","formState","globalSlug","initialBlockData","initialBlockFormState","mockRSCs","operation","originalUpdatedAt","readOnly","renderAllFields","i18n","config","returnLivePreviewURL","returnLockStatus","returnPreviewURL","widgetSlug","schemaPath","select","skipClientConfigAuth","skipValidation","updateLastEdited","user","selectMode","undefined","Error","schemaMap","clientSchemaMap","importMap","fieldOrEntityConfig","get","fields","length","type","documentData","blockData","Array","isArray","formStateResult","clientFieldSchemaMap","fieldSchemaMap","permissions","preferences","previousFormState","renderFieldFn","collections","upload","file","lockedStateResult","staleDataStateResult","lockedState","staleDataState","state","livePreviewURL","previewURL"],"sources":["../../src/utilities/buildFormState.ts"],"sourcesContent":["import type {\n  BuildFormStateArgs,\n  ClientConfig,\n  ErrorResult,\n  FormState,\n  ServerFunction,\n  User,\n} from 'payload'\n\nimport { canAccessAdmin, formatErrors, UnauthorizedError } from 'payload'\nimport { getSelectMode, reduceFieldsToValues } from 'payload/shared'\n\nimport { fieldSchemasToFormState } from '../forms/fieldSchemasToFormState/index.js'\nimport { renderField } from '../forms/fieldSchemasToFormState/renderField.js'\nimport { getClientConfig } from './getClientConfig.js'\nimport { getClientSchemaMap } from './getClientSchemaMap.js'\nimport { getSchemaMap } from './getSchemaMap.js'\nimport { handleFormStateLocking } from './handleFormStateLocking.js'\nimport { handleLivePreview } from './handleLivePreview.js'\nimport { handlePreview } from './handlePreview.js'\nimport { handleStaleDataCheck } from './handleStaleDataCheck.js'\n\nexport type LockedState = {\n  isLocked: boolean\n  lastEditedAt: string\n  user?: number | string | User\n}\n\nexport type StaleDataState = {\n  currentUpdatedAt: string\n  isStale: boolean\n}\n\ntype BuildFormStateSuccessResult = {\n  clientConfig?: ClientConfig\n  errors?: never\n  indexPath?: string\n  livePreviewURL?: string\n  lockedState?: LockedState\n  previewURL?: string\n  staleDataState?: StaleDataState\n  state: FormState\n}\n\ntype BuildFormStateErrorResult = {\n  livePreviewURL?: never\n  lockedState?: never\n  previewURL?: never\n  staleDataState?: never\n  state?: never\n} & (\n  | {\n      message: string\n    }\n  | ErrorResult\n)\n\nexport type BuildFormStateResult = BuildFormStateErrorResult | BuildFormStateSuccessResult\n\nexport const buildFormStateHandler: ServerFunction<\n  BuildFormStateArgs,\n  Promise<BuildFormStateResult>\n> = async (args) => {\n  const { req } = args\n\n  try {\n    await canAccessAdmin({ req })\n    const res = await buildFormState(args)\n\n    return res\n  } catch (err) {\n    req.payload.logger.error({ err, msg: `There was an error building form state` })\n\n    if (err.message === 'Could not find field schema for given path') {\n      return {\n        message: err.message,\n      }\n    }\n\n    if (err.message === 'Unauthorized') {\n      throw new UnauthorizedError()\n    }\n\n    return formatErrors(err)\n  }\n}\n\nexport const buildFormState = async (\n  args: BuildFormStateArgs,\n): Promise<BuildFormStateSuccessResult> => {\n  const {\n    id: idFromArgs,\n    checkForStaleData,\n    collectionSlug,\n    data: incomingData,\n    docPermissions,\n    docPreferences,\n    documentFormState,\n    formState,\n    globalSlug,\n    initialBlockData,\n    initialBlockFormState,\n    mockRSCs,\n    operation,\n    originalUpdatedAt,\n    readOnly,\n    renderAllFields,\n    req,\n    req: {\n      i18n,\n      payload,\n      payload: { config },\n    },\n    returnLivePreviewURL,\n    returnLockStatus,\n    returnPreviewURL,\n    widgetSlug,\n    schemaPath = collectionSlug || globalSlug || widgetSlug,\n    select,\n    skipClientConfigAuth,\n    skipValidation,\n    updateLastEdited,\n    user,\n  } = args\n\n  const selectMode = select ? getSelectMode(select) : undefined\n\n  if (!collectionSlug && !globalSlug && !widgetSlug) {\n    throw new Error('Either collectionSlug, globalSlug, or widgetSlug must be provided')\n  }\n\n  const schemaMap = getSchemaMap({\n    collectionSlug,\n    config,\n    globalSlug,\n    i18n,\n    widgetSlug,\n  })\n\n  const clientSchemaMap = getClientSchemaMap({\n    collectionSlug,\n    config: getClientConfig({\n      config,\n      i18n,\n      importMap: req.payload.importMap,\n      user: skipClientConfigAuth ? true : req.user,\n    }),\n    globalSlug,\n    i18n,\n    payload,\n    schemaMap,\n    widgetSlug,\n  })\n\n  const id = collectionSlug ? idFromArgs : undefined\n  const fieldOrEntityConfig = schemaMap.get(schemaPath)\n\n  if (!fieldOrEntityConfig) {\n    throw new Error(`Could not find \"${schemaPath}\" in the fieldSchemaMap`)\n  }\n\n  if (\n    (!('fields' in fieldOrEntityConfig) ||\n      !fieldOrEntityConfig.fields ||\n      !fieldOrEntityConfig.fields.length) &&\n    'type' in fieldOrEntityConfig &&\n    fieldOrEntityConfig.type !== 'blocks'\n  ) {\n    throw new Error(\n      `The field found in fieldSchemaMap for \"${schemaPath}\" does not contain any subfields.`,\n    )\n  }\n\n  // If there is form state but no data, deduce data from that form state, e.g. on initial load\n  // Otherwise, use the incoming data as the source of truth, e.g. on subsequent saves\n  const data = incomingData || reduceFieldsToValues(formState, true)\n\n  let documentData = undefined\n\n  if (documentFormState) {\n    documentData = reduceFieldsToValues(documentFormState, true)\n  }\n\n  let blockData = initialBlockData\n\n  if (initialBlockFormState) {\n    blockData = reduceFieldsToValues(initialBlockFormState, true)\n  }\n\n  /**\n   * When building state for sub schemas we need to adjust:\n   * - `fields`\n   * - `parentSchemaPath`\n   * - `parentPath`\n   *\n   * Type assertion is fine because we wrap sub schemas in an array\n   * so we can safely map over them within `fieldSchemasToFormState`\n   */\n  const fields = Array.isArray(fieldOrEntityConfig)\n    ? fieldOrEntityConfig\n    : 'fields' in fieldOrEntityConfig\n      ? fieldOrEntityConfig.fields\n      : [fieldOrEntityConfig]\n\n  // Ensure data.id is present during form state requests, where the data\n  // is passed from the client as an argument, without the ID\n  if (!data.id && id) {\n    data.id = id\n  }\n\n  const formStateResult = await fieldSchemasToFormState({\n    id,\n    clientFieldSchemaMap: clientSchemaMap,\n    collectionSlug,\n    data,\n    documentData,\n    fields,\n    fieldSchemaMap: schemaMap,\n    globalSlug,\n    initialBlockData: blockData,\n    mockRSCs,\n    operation,\n    permissions: docPermissions?.fields || {},\n    preferences: docPreferences || { fields: {} },\n    previousFormState: formState,\n    readOnly,\n    renderAllFields,\n    renderFieldFn: (args) => renderField({ ...args, user }),\n    req,\n    schemaPath,\n    select,\n    selectMode,\n    skipValidation,\n  })\n\n  // Maintain form state of auth / upload fields\n  if (collectionSlug && formState) {\n    if (payload.collections[collectionSlug]?.config?.upload && formState.file) {\n      formStateResult.file = formState.file\n    }\n  }\n\n  let lockedStateResult: LockedState | undefined\n\n  if (returnLockStatus) {\n    lockedStateResult = await handleFormStateLocking({\n      id,\n      collectionSlug,\n      globalSlug,\n      req,\n      updateLastEdited,\n    })\n  }\n\n  let staleDataStateResult: StaleDataState | undefined\n\n  if (checkForStaleData && originalUpdatedAt && ((collectionSlug && id) || globalSlug)) {\n    staleDataStateResult = await handleStaleDataCheck({\n      id,\n      collectionSlug,\n      globalSlug,\n      originalUpdatedAt,\n      req,\n    })\n  }\n\n  const res: BuildFormStateSuccessResult = {\n    lockedState: lockedStateResult,\n    staleDataState: staleDataStateResult,\n    state: formStateResult,\n  }\n\n  if (returnLivePreviewURL) {\n    const { livePreviewURL } = await handleLivePreview({\n      collectionSlug,\n      config,\n      data,\n      globalSlug,\n      req,\n    })\n\n    // Important: only set this when not undefined,\n    // Otherwise it will travel through the network as `$undefined`\n    if (livePreviewURL) {\n      res.livePreviewURL = livePreviewURL\n    }\n  }\n\n  if (returnPreviewURL) {\n    const { previewURL } = await handlePreview({\n      collectionSlug,\n      config,\n      data,\n      globalSlug,\n      req,\n    })\n\n    // Important: only set this when not undefined,\n    // Otherwise it will travel through the network as `$undefined`\n    if (previewURL) {\n      res.previewURL = previewURL\n    }\n  }\n\n  return res\n}\n"],"mappings":"AASA,SAASA,cAAc,EAAEC,YAAY,EAAEC,iBAAiB,QAAQ;AAChE,SAASC,aAAa,EAAEC,oBAAoB,QAAQ;AAEpD,SAASC,uBAAuB,QAAQ;AACxC,SAASC,WAAW,QAAQ;AAC5B,SAASC,eAAe,QAAQ;AAChC,SAASC,kBAAkB,QAAQ;AACnC,SAASC,YAAY,QAAQ;AAC7B,SAASC,sBAAsB,QAAQ;AACvC,SAASC,iBAAiB,QAAQ;AAClC,SAASC,aAAa,QAAQ;AAC9B,SAASC,oBAAoB,QAAQ;AAuCrC,OAAO,MAAMC,qBAAA,GAGT,MAAOC,IAAA;EACT,MAAM;IAAEC;EAAG,CAAE,GAAGD,IAAA;EAEhB,IAAI;IACF,MAAMf,cAAA,CAAe;MAAEgB;IAAI;IAC3B,MAAMC,GAAA,GAAM,MAAMC,cAAA,CAAeH,IAAA;IAEjC,OAAOE,GAAA;EACT,EAAE,OAAOE,GAAA,EAAK;IACZH,GAAA,CAAII,OAAO,CAACC,MAAM,CAACC,KAAK,CAAC;MAAEH,GAAA;MAAKI,GAAA,EAAK;IAAyC;IAE9E,IAAIJ,GAAA,CAAIK,OAAO,KAAK,8CAA8C;MAChE,OAAO;QACLA,OAAA,EAASL,GAAA,CAAIK;MACf;IACF;IAEA,IAAIL,GAAA,CAAIK,OAAO,KAAK,gBAAgB;MAClC,MAAM,IAAItB,iBAAA;IACZ;IAEA,OAAOD,YAAA,CAAakB,GAAA;EACtB;AACF;AAEA,OAAO,MAAMD,cAAA,GAAiB,MAC5BH,IAAA;EAEA,MAAM;IACJU,EAAA,EAAIC,UAAU;IACdC,iBAAiB;IACjBC,cAAc;IACdC,IAAA,EAAMC,YAAY;IAClBC,cAAc;IACdC,cAAc;IACdC,iBAAiB;IACjBC,SAAS;IACTC,UAAU;IACVC,gBAAgB;IAChBC,qBAAqB;IACrBC,QAAQ;IACRC,SAAS;IACTC,iBAAiB;IACjBC,QAAQ;IACRC,eAAe;IACf1B,GAAG;IACHA,GAAA,EAAK;MACH2B,IAAI;MACJvB,OAAO;MACPA,OAAA,EAAS;QAAEwB;MAAM;IAAE,CACpB;IACDC,oBAAoB;IACpBC,gBAAgB;IAChBC,gBAAgB;IAChBC,UAAU;IACVC,UAAA,GAAarB,cAAA,IAAkBO,UAAA,IAAca,UAAU;IACvDE,MAAM;IACNC,oBAAoB;IACpBC,cAAc;IACdC,gBAAgB;IAChBC;EAAI,CACL,GAAGvC,IAAA;EAEJ,MAAMwC,UAAA,GAAaL,MAAA,GAAS/C,aAAA,CAAc+C,MAAA,IAAUM,SAAA;EAEpD,IAAI,CAAC5B,cAAA,IAAkB,CAACO,UAAA,IAAc,CAACa,UAAA,EAAY;IACjD,MAAM,IAAIS,KAAA,CAAM;EAClB;EAEA,MAAMC,SAAA,GAAYjD,YAAA,CAAa;IAC7BmB,cAAA;IACAgB,MAAA;IACAT,UAAA;IACAQ,IAAA;IACAK;EACF;EAEA,MAAMW,eAAA,GAAkBnD,kBAAA,CAAmB;IACzCoB,cAAA;IACAgB,MAAA,EAAQrC,eAAA,CAAgB;MACtBqC,MAAA;MACAD,IAAA;MACAiB,SAAA,EAAW5C,GAAA,CAAII,OAAO,CAACwC,SAAS;MAChCN,IAAA,EAAMH,oBAAA,GAAuB,OAAOnC,GAAA,CAAIsC;IAC1C;IACAnB,UAAA;IACAQ,IAAA;IACAvB,OAAA;IACAsC,SAAA;IACAV;EACF;EAEA,MAAMvB,EAAA,GAAKG,cAAA,GAAiBF,UAAA,GAAa8B,SAAA;EACzC,MAAMK,mBAAA,GAAsBH,SAAA,CAAUI,GAAG,CAACb,UAAA;EAE1C,IAAI,CAACY,mBAAA,EAAqB;IACxB,MAAM,IAAIJ,KAAA,CAAM,mBAAmBR,UAAA,yBAAmC;EACxE;EAEA,IACE,CAAC,EAAE,YAAYY,mBAAkB,KAC/B,CAACA,mBAAA,CAAoBE,MAAM,IAC3B,CAACF,mBAAA,CAAoBE,MAAM,CAACC,MAAM,KACpC,UAAUH,mBAAA,IACVA,mBAAA,CAAoBI,IAAI,KAAK,UAC7B;IACA,MAAM,IAAIR,KAAA,CACR,0CAA0CR,UAAA,mCAA6C;EAE3F;EAEA;EACA;EACA,MAAMpB,IAAA,GAAOC,YAAA,IAAgB1B,oBAAA,CAAqB8B,SAAA,EAAW;EAE7D,IAAIgC,YAAA,GAAeV,SAAA;EAEnB,IAAIvB,iBAAA,EAAmB;IACrBiC,YAAA,GAAe9D,oBAAA,CAAqB6B,iBAAA,EAAmB;EACzD;EAEA,IAAIkC,SAAA,GAAY/B,gBAAA;EAEhB,IAAIC,qBAAA,EAAuB;IACzB8B,SAAA,GAAY/D,oBAAA,CAAqBiC,qBAAA,EAAuB;EAC1D;EAEA;;;;;;;;;EASA,MAAM0B,MAAA,GAASK,KAAA,CAAMC,OAAO,CAACR,mBAAA,IACzBA,mBAAA,GACA,YAAYA,mBAAA,GACVA,mBAAA,CAAoBE,MAAM,GAC1B,CAACF,mBAAA,CAAoB;EAE3B;EACA;EACA,IAAI,CAAChC,IAAA,CAAKJ,EAAE,IAAIA,EAAA,EAAI;IAClBI,IAAA,CAAKJ,EAAE,GAAGA,EAAA;EACZ;EAEA,MAAM6C,eAAA,GAAkB,MAAMjE,uBAAA,CAAwB;IACpDoB,EAAA;IACA8C,oBAAA,EAAsBZ,eAAA;IACtB/B,cAAA;IACAC,IAAA;IACAqC,YAAA;IACAH,MAAA;IACAS,cAAA,EAAgBd,SAAA;IAChBvB,UAAA;IACAC,gBAAA,EAAkB+B,SAAA;IAClB7B,QAAA;IACAC,SAAA;IACAkC,WAAA,EAAa1C,cAAA,EAAgBgC,MAAA,IAAU,CAAC;IACxCW,WAAA,EAAa1C,cAAA,IAAkB;MAAE+B,MAAA,EAAQ,CAAC;IAAE;IAC5CY,iBAAA,EAAmBzC,SAAA;IACnBO,QAAA;IACAC,eAAA;IACAkC,aAAA,EAAgB7D,IAAA,IAAST,WAAA,CAAY;MAAE,GAAGS,IAAI;MAAEuC;IAAK;IACrDtC,GAAA;IACAiC,UAAA;IACAC,MAAA;IACAK,UAAA;IACAH;EACF;EAEA;EACA,IAAIxB,cAAA,IAAkBM,SAAA,EAAW;IAC/B,IAAId,OAAA,CAAQyD,WAAW,CAACjD,cAAA,CAAe,EAAEgB,MAAA,EAAQkC,MAAA,IAAU5C,SAAA,CAAU6C,IAAI,EAAE;MACzET,eAAA,CAAgBS,IAAI,GAAG7C,SAAA,CAAU6C,IAAI;IACvC;EACF;EAEA,IAAIC,iBAAA;EAEJ,IAAIlC,gBAAA,EAAkB;IACpBkC,iBAAA,GAAoB,MAAMtE,sBAAA,CAAuB;MAC/Ce,EAAA;MACAG,cAAA;MACAO,UAAA;MACAnB,GAAA;MACAqC;IACF;EACF;EAEA,IAAI4B,oBAAA;EAEJ,IAAItD,iBAAA,IAAqBa,iBAAA,KAAsBZ,cAAC,IAAkBH,EAAA,IAAOU,UAAS,GAAI;IACpF8C,oBAAA,GAAuB,MAAMpE,oBAAA,CAAqB;MAChDY,EAAA;MACAG,cAAA;MACAO,UAAA;MACAK,iBAAA;MACAxB;IACF;EACF;EAEA,MAAMC,GAAA,GAAmC;IACvCiE,WAAA,EAAaF,iBAAA;IACbG,cAAA,EAAgBF,oBAAA;IAChBG,KAAA,EAAOd;EACT;EAEA,IAAIzB,oBAAA,EAAsB;IACxB,MAAM;MAAEwC;IAAc,CAAE,GAAG,MAAM1E,iBAAA,CAAkB;MACjDiB,cAAA;MACAgB,MAAA;MACAf,IAAA;MACAM,UAAA;MACAnB;IACF;IAEA;IACA;IACA,IAAIqE,cAAA,EAAgB;MAClBpE,GAAA,CAAIoE,cAAc,GAAGA,cAAA;IACvB;EACF;EAEA,IAAItC,gBAAA,EAAkB;IACpB,MAAM;MAAEuC;IAAU,CAAE,GAAG,MAAM1E,aAAA,CAAc;MACzCgB,cAAA;MACAgB,MAAA;MACAf,IAAA;MACAM,UAAA;MACAnB;IACF;IAEA;IACA;IACA,IAAIsE,UAAA,EAAY;MACdrE,GAAA,CAAIqE,UAAU,GAAGA,UAAA;IACnB;EACF;EAEA,OAAOrE,GAAA;AACT","ignoreList":[]}

package/dist/utilities/formatAbsoluteURL.d.ts

@@ -4,5 +4,5 @@
  * Note: This MUST be called within the client environment as it relies on the `window` object
  * to determine the absolute URL.
  */
-export declare const formatAbsoluteURL: (incomingURL: string) => any;
+export declare const formatAbsoluteURL: (incomingURL: string) => string | undefined;
 //# sourceMappingURL=formatAbsoluteURL.d.ts.map

package/dist/utilities/formatAbsoluteURL.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formatAbsoluteURL.d.ts","sourceRoot":"","sources":["../../src/utilities/formatAbsoluteURL.ts"],"names":[],"mappings":"AAQA;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,gBAAiB,MAAM,QAGpB,CAAA"}
+{"version":3,"file":"formatAbsoluteURL.d.ts","sourceRoot":"","sources":["../../src/utilities/formatAbsoluteURL.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,gBAAiB,MAAM,KAAG,MAAM,GAAG,SAmBhE,CAAA"}

package/dist/utilities/formatAbsoluteURL.js

@@ -1,15 +1,25 @@
-const getAbsoluteUrl = url => {
-  try {
-    return new URL(url, window.location.origin).href;
-  } catch {
-    return url;
-  }
-};
+import { isHttpURL } from './isHttpURL.js';
 /**
  * Ensures the provided URL is absolute. If not, it converts it to an absolute URL based
  * on the current window location.
  * Note: This MUST be called within the client environment as it relies on the `window` object
  * to determine the absolute URL.
  */
-export const formatAbsoluteURL = incomingURL => incomingURL?.startsWith('http://') || incomingURL?.startsWith('https://') ? incomingURL : getAbsoluteUrl(incomingURL);
+export const formatAbsoluteURL = incomingURL => {
+  try {
+    // This throws for malformed URLs, e.g. `https://[wrong`.
+    // Preformed absolute URLs ignore `window.location.origin` when parsed.
+    const parsedURL = new URL(incomingURL, window.location.origin);
+    // If the given URL is already absolute, preserve its original format exactly, i.e. `new URL()` may have added a trailing slash
+    if (incomingURL.startsWith('http://') || incomingURL.startsWith('https://')) {
+      return incomingURL;
+    }
+    if (isHttpURL(parsedURL)) {
+      return parsedURL.href;
+    }
+    return undefined;
+  } catch {
+    return undefined;
+  }
+};
 //# sourceMappingURL=formatAbsoluteURL.js.map

package/dist/utilities/formatAbsoluteURL.js.map

@@ -1 +1 @@
-{"version":3,"file":"formatAbsoluteURL.js","names":["getAbsoluteUrl","url","URL","window","location","origin","href","formatAbsoluteURL","incomingURL","startsWith"],"sources":["../../src/utilities/formatAbsoluteURL.ts"],"sourcesContent":["const getAbsoluteUrl = (url) => {\n  try {\n    return new URL(url, window.location.origin).href\n  } catch {\n    return url\n  }\n}\n\n/**\n * Ensures the provided URL is absolute. If not, it converts it to an absolute URL based\n * on the current window location.\n * Note: This MUST be called within the client environment as it relies on the `window` object\n * to determine the absolute URL.\n */\nexport const formatAbsoluteURL = (incomingURL: string) =>\n  incomingURL?.startsWith('http://') || incomingURL?.startsWith('https://')\n    ? incomingURL\n    : getAbsoluteUrl(incomingURL)\n"],"mappings":"AAAA,MAAMA,cAAA,GAAkBC,GAAA;EACtB,IAAI;IACF,OAAO,IAAIC,GAAA,CAAID,GAAA,EAAKE,MAAA,CAAOC,QAAQ,CAACC,MAAM,EAAEC,IAAI;EAClD,EAAE,MAAM;IACN,OAAOL,GAAA;EACT;AACF;AAEA;;;;;;AAMA,OAAO,MAAMM,iBAAA,GAAqBC,WAAA,IAChCA,WAAA,EAAaC,UAAA,CAAW,cAAcD,WAAA,EAAaC,UAAA,CAAW,cAC1DD,WAAA,GACAR,cAAA,CAAeQ,WAAA","ignoreList":[]}
+{"version":3,"file":"formatAbsoluteURL.js","names":["isHttpURL","formatAbsoluteURL","incomingURL","parsedURL","URL","window","location","origin","startsWith","href","undefined"],"sources":["../../src/utilities/formatAbsoluteURL.ts"],"sourcesContent":["import { isHttpURL } from './isHttpURL.js'\n\n/**\n * Ensures the provided URL is absolute. If not, it converts it to an absolute URL based\n * on the current window location.\n * Note: This MUST be called within the client environment as it relies on the `window` object\n * to determine the absolute URL.\n */\nexport const formatAbsoluteURL = (incomingURL: string): string | undefined => {\n  try {\n    // This throws for malformed URLs, e.g. `https://[wrong`.\n    // Preformed absolute URLs ignore `window.location.origin` when parsed.\n    const parsedURL = new URL(incomingURL, window.location.origin)\n\n    // If the given URL is already absolute, preserve its original format exactly, i.e. `new URL()` may have added a trailing slash\n    if (incomingURL.startsWith('http://') || incomingURL.startsWith('https://')) {\n      return incomingURL\n    }\n\n    if (isHttpURL(parsedURL)) {\n      return parsedURL.href\n    }\n\n    return undefined\n  } catch {\n    return undefined\n  }\n}\n"],"mappings":"AAAA,SAASA,SAAS,QAAQ;AAE1B;;;;;;AAMA,OAAO,MAAMC,iBAAA,GAAqBC,WAAA;EAChC,IAAI;IACF;IACA;IACA,MAAMC,SAAA,GAAY,IAAIC,GAAA,CAAIF,WAAA,EAAaG,MAAA,CAAOC,QAAQ,CAACC,MAAM;IAE7D;IACA,IAAIL,WAAA,CAAYM,UAAU,CAAC,cAAcN,WAAA,CAAYM,UAAU,CAAC,aAAa;MAC3E,OAAON,WAAA;IACT;IAEA,IAAIF,SAAA,CAAUG,SAAA,GAAY;MACxB,OAAOA,SAAA,CAAUM,IAAI;IACvB;IAEA,OAAOC,SAAA;EACT,EAAE,MAAM;IACN,OAAOA,SAAA;EACT;AACF","ignoreList":[]}

package/dist/utilities/formatAbsoluteURL.spec.js

@@ -0,0 +1,27 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { formatAbsoluteURL } from './formatAbsoluteURL.js';
+describe('formatAbsoluteURL', () => {
+  beforeEach(() => {
+    vi.stubGlobal('window', {
+      location: {
+        origin: 'https://admin.example.com'
+      }
+    });
+  });
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+  it.each([['/preview', 'https://admin.example.com/preview'], ['preview?draft=true', 'https://admin.example.com/preview?draft=true'], ['../preview', 'https://admin.example.com/preview'], ['?draft=true', 'https://admin.example.com/?draft=true'], ['#preview', 'https://admin.example.com/#preview'], ['//preview.example.com/page', 'https://preview.example.com/page'], ['', 'https://admin.example.com/']])('should resolve relative URL %s against the admin origin', (input, expected) => {
+    expect(formatAbsoluteURL(input)).toBe(expected);
+  });
+  it.each(['http://preview.example.com', 'https://preview.example.com', 'https://preview.example.com:443/one/../two?draft=true#preview'])('should preserve absolute HTTP(S) URL %s', input => {
+    expect(formatAbsoluteURL(input)).toBe(input);
+  });
+  it.each(['mailto:editor@example.com', 'file:///preview.html'])('should return undefined for unsupported URL %s', input => {
+    expect(formatAbsoluteURL(input)).toBeUndefined();
+  });
+  it.each(['http://', 'https://', 'https://[invalid'])('should return undefined for invalid URL %s', input => {
+    expect(formatAbsoluteURL(input)).toBeUndefined();
+  });
+});
+//# sourceMappingURL=formatAbsoluteURL.spec.js.map

package/dist/utilities/formatAbsoluteURL.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatAbsoluteURL.spec.js","names":["afterEach","beforeEach","describe","expect","it","vi","formatAbsoluteURL","stubGlobal","location","origin","unstubAllGlobals","each","input","expected","toBe","toBeUndefined"],"sources":["../../src/utilities/formatAbsoluteURL.spec.ts"],"sourcesContent":["import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'\n\nimport { formatAbsoluteURL } from './formatAbsoluteURL.js'\n\ndescribe('formatAbsoluteURL', () => {\n  beforeEach(() => {\n    vi.stubGlobal('window', {\n      location: { origin: 'https://admin.example.com' },\n    })\n  })\n\n  afterEach(() => {\n    vi.unstubAllGlobals()\n  })\n\n  it.each([\n    ['/preview', 'https://admin.example.com/preview'],\n    ['preview?draft=true', 'https://admin.example.com/preview?draft=true'],\n    ['../preview', 'https://admin.example.com/preview'],\n    ['?draft=true', 'https://admin.example.com/?draft=true'],\n    ['#preview', 'https://admin.example.com/#preview'],\n    ['//preview.example.com/page', 'https://preview.example.com/page'],\n    ['', 'https://admin.example.com/'],\n  ])('should resolve relative URL %s against the admin origin', (input, expected) => {\n    expect(formatAbsoluteURL(input)).toBe(expected)\n  })\n\n  it.each([\n    'http://preview.example.com',\n    'https://preview.example.com',\n    'https://preview.example.com:443/one/../two?draft=true#preview',\n  ])('should preserve absolute HTTP(S) URL %s', (input) => {\n    expect(formatAbsoluteURL(input)).toBe(input)\n  })\n\n  it.each(['mailto:editor@example.com', 'file:///preview.html'])(\n    'should return undefined for unsupported URL %s',\n    (input) => {\n      expect(formatAbsoluteURL(input)).toBeUndefined()\n    },\n  )\n\n  it.each(['http://', 'https://', 'https://[invalid'])(\n    'should return undefined for invalid URL %s',\n    (input) => {\n      expect(formatAbsoluteURL(input)).toBeUndefined()\n    },\n  )\n})\n"],"mappings":"AAAA,SAASA,SAAS,EAAEC,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ;AAEhE,SAASC,iBAAiB,QAAQ;AAElCJ,QAAA,CAAS,qBAAqB;EAC5BD,UAAA,CAAW;IACTI,EAAA,CAAGE,UAAU,CAAC,UAAU;MACtBC,QAAA,EAAU;QAAEC,MAAA,EAAQ;MAA4B;IAClD;EACF;EAEAT,SAAA,CAAU;IACRK,EAAA,CAAGK,gBAAgB;EACrB;EAEAN,EAAA,CAAGO,IAAI,CAAC,CACN,CAAC,YAAY,oCAAoC,EACjD,CAAC,sBAAsB,+CAA+C,EACtE,CAAC,cAAc,oCAAoC,EACnD,CAAC,eAAe,wCAAwC,EACxD,CAAC,YAAY,qCAAqC,EAClD,CAAC,8BAA8B,mCAAmC,EAClE,CAAC,IAAI,6BAA6B,CACnC,EAAE,2DAA2D,CAACC,KAAA,EAAOC,QAAA;IACpEV,MAAA,CAAOG,iBAAA,CAAkBM,KAAA,GAAQE,IAAI,CAACD,QAAA;EACxC;EAEAT,EAAA,CAAGO,IAAI,CAAC,CACN,8BACA,+BACA,gEACD,EAAE,2CAA4CC,KAAA;IAC7CT,MAAA,CAAOG,iBAAA,CAAkBM,KAAA,GAAQE,IAAI,CAACF,KAAA;EACxC;EAEAR,EAAA,CAAGO,IAAI,CAAC,CAAC,6BAA6B,uBAAuB,EAC3D,kDACCC,KAAA;IACCT,MAAA,CAAOG,iBAAA,CAAkBM,KAAA,GAAQG,aAAa;EAChD;EAGFX,EAAA,CAAGO,IAAI,CAAC,CAAC,WAAW,YAAY,mBAAmB,EACjD,8CACCC,KAAA;IACCT,MAAA,CAAOG,iBAAA,CAAkBM,KAAA,GAAQG,aAAa;EAChD;AAEJ","ignoreList":[]}

package/dist/utilities/handleServerFunctions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handleServerFunctions.d.ts","sourceRoot":"","sources":["../../src/utilities/handleServerFunctions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,SAAS,EACT,aAAa,EACb,eAAe,EACf,cAAc,EACd,qBAAqB,EACtB,MAAM,SAAS,CAAA;AAIhB,KAAK,OAAO,GAAG,CAAC,IAAI,EAAE;IACpB,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAA;IACzD,SAAS,EAAE,SAAS,CAAA;CACrB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;AAE5B,KAAK,+BAA+B,GAAG;IACrC;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAA;IAChB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1D;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;CAClE,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,mDAIrC,+BAA+B,KAAG,qBAmCpC,CAAA"}
+{"version":3,"file":"handleServerFunctions.d.ts","sourceRoot":"","sources":["../../src/utilities/handleServerFunctions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,SAAS,EACT,aAAa,EACb,eAAe,EACf,cAAc,EACd,qBAAqB,EACtB,MAAM,SAAS,CAAA;AAIhB,KAAK,OAAO,GAAG,CAAC,IAAI,EAAE;IACpB,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAA;IACzD,SAAS,EAAE,SAAS,CAAA;CACrB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;AAE5B,KAAK,+BAA+B,GAAG;IACrC;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAA;IAChB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1D;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;CAClE,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,mDAIrC,+BAA+B,KAAG,qBAoCpC,CAAA"}

package/dist/utilities/handleServerFunctions.js

@@ -28,7 +28,8 @@ export const createServerFunctionHandler = ({
       cookies,
       locale,
       permissions,
-      req
+      req,
+      user
     } = await initReq({
       configPromise,
       importMap
@@ -39,7 +40,8 @@ export const createServerFunctionHandler = ({
       importMap,
       locale,
       permissions,
-      req
+      req,
+      user
     };
     const fn = extraServerFunctions?.[fnKey] || baseServerFunctions[fnKey];
     if (!fn) {

package/dist/utilities/handleServerFunctions.js.map

@@ -1 +1 @@
-{"version":3,"file":"handleServerFunctions.js","names":["sharedServerFunctions","createServerFunctionHandler","initReq","serverFunctions","transformResult","baseServerFunctions","args","name","fnKey","fnArgs","config","configPromise","importMap","extraServerFunctions","cookies","locale","permissions","req","augmentedArgs","fn","Error","result"],"sources":["../../src/utilities/handleServerFunctions.ts"],"sourcesContent":["import type {\n  DefaultServerFunctionArgs,\n  ImportMap,\n  InitReqResult,\n  SanitizedConfig,\n  ServerFunction,\n  ServerFunctionHandler,\n} from 'payload'\n\nimport { sharedServerFunctions } from './serverFunctionRegistry.js'\n\ntype InitReq = (args: {\n  configPromise: Promise<SanitizedConfig> | SanitizedConfig\n  importMap: ImportMap\n}) => Promise<InitReqResult>\n\ntype CreateServerFunctionHandlerArgs = {\n  /**\n   * Framework-specific request initialization. The adapter closes over its own\n   * `ServerAdapter` / request source (Next.js: `initReq` + `nextServerAdapter`;\n   * TanStack Start: its `getRequest()`-based `initReq`).\n   */\n  initReq: InitReq\n  /**\n   * Additional handlers registered alongside `sharedServerFunctions`. Reserved\n   * for adapter-specific functions; today both adapters run the shared set only.\n   */\n  serverFunctions?: Record<string, ServerFunction<any, any>>\n  /**\n   * Post-processes each handler's return value before it goes over the wire.\n   * The TanStack Start adapter passes `serializeForRsc` to convert React\n   * elements into RSC handles; Next.js ships them natively and omits this.\n   */\n  transformResult?: (result: unknown) => Promise<unknown> | unknown\n}\n\n/**\n * Factory for the framework-agnostic `handleServerFunctions` entry point.\n *\n * All adapters dispatch from the shared registry (`sharedServerFunctions`) and\n * differ only in the two injected hooks below — `initReq` and `transformResult`\n * — so there is a single dispatch implementation and the handler sets cannot\n * drift between frameworks.\n */\nexport const createServerFunctionHandler = ({\n  initReq,\n  serverFunctions,\n  transformResult,\n}: CreateServerFunctionHandlerArgs): ServerFunctionHandler => {\n  const baseServerFunctions: Record<string, ServerFunction<any, any>> = serverFunctions\n    ? { ...sharedServerFunctions, ...serverFunctions }\n    : sharedServerFunctions\n\n  return async (args) => {\n    const {\n      name: fnKey,\n      args: fnArgs,\n      config: configPromise,\n      importMap,\n      serverFunctions: extraServerFunctions,\n    } = args\n\n    const { cookies, locale, permissions, req } = await initReq({ configPromise, importMap })\n\n    const augmentedArgs: DefaultServerFunctionArgs = {\n      ...fnArgs,\n      cookies,\n      importMap,\n      locale,\n      permissions,\n      req,\n    }\n\n    const fn = extraServerFunctions?.[fnKey] || baseServerFunctions[fnKey]\n\n    if (!fn) {\n      throw new Error(`Unknown Server Function: ${fnKey}`)\n    }\n\n    const result = await fn(augmentedArgs)\n\n    return transformResult ? await transformResult(result) : result\n  }\n}\n"],"mappings":"AASA,SAASA,qBAAqB,QAAQ;AA2BtC;;;;;;;;AAQA,OAAO,MAAMC,2BAAA,GAA8BA,CAAC;EAC1CC,OAAO;EACPC,eAAe;EACfC;AAAe,CACiB;EAChC,MAAMC,mBAAA,GAAgEF,eAAA,GAClE;IAAE,GAAGH,qBAAqB;IAAE,GAAGG;EAAgB,IAC/CH,qBAAA;EAEJ,OAAO,MAAOM,IAAA;IACZ,MAAM;MACJC,IAAA,EAAMC,KAAK;MACXF,IAAA,EAAMG,MAAM;MACZC,MAAA,EAAQC,aAAa;MACrBC,SAAS;MACTT,eAAA,EAAiBU;IAAoB,CACtC,GAAGP,IAAA;IAEJ,MAAM;MAAEQ,OAAO;MAAEC,MAAM;MAAEC,WAAW;MAAEC;IAAG,CAAE,GAAG,MAAMf,OAAA,CAAQ;MAAES,aAAA;MAAeC;IAAU;IAEvF,MAAMM,aAAA,GAA2C;MAC/C,GAAGT,MAAM;MACTK,OAAA;MACAF,SAAA;MACAG,MAAA;MACAC,WAAA;MACAC;IACF;IAEA,MAAME,EAAA,GAAKN,oBAAA,GAAuBL,KAAA,CAAM,IAAIH,mBAAmB,CAACG,KAAA,CAAM;IAEtE,IAAI,CAACW,EAAA,EAAI;MACP,MAAM,IAAIC,KAAA,CAAM,4BAA4BZ,KAAA,EAAO;IACrD;IAEA,MAAMa,MAAA,GAAS,MAAMF,EAAA,CAAGD,aAAA;IAExB,OAAOd,eAAA,GAAkB,MAAMA,eAAA,CAAgBiB,MAAA,IAAUA,MAAA;EAC3D;AACF","ignoreList":[]}
+{"version":3,"file":"handleServerFunctions.js","names":["sharedServerFunctions","createServerFunctionHandler","initReq","serverFunctions","transformResult","baseServerFunctions","args","name","fnKey","fnArgs","config","configPromise","importMap","extraServerFunctions","cookies","locale","permissions","req","user","augmentedArgs","fn","Error","result"],"sources":["../../src/utilities/handleServerFunctions.ts"],"sourcesContent":["import type {\n  DefaultServerFunctionArgs,\n  ImportMap,\n  InitReqResult,\n  SanitizedConfig,\n  ServerFunction,\n  ServerFunctionHandler,\n} from 'payload'\n\nimport { sharedServerFunctions } from './serverFunctionRegistry.js'\n\ntype InitReq = (args: {\n  configPromise: Promise<SanitizedConfig> | SanitizedConfig\n  importMap: ImportMap\n}) => Promise<InitReqResult>\n\ntype CreateServerFunctionHandlerArgs = {\n  /**\n   * Framework-specific request initialization. The adapter closes over its own\n   * `ServerAdapter` / request source (Next.js: `initReq` + `nextServerAdapter`;\n   * TanStack Start: its `getRequest()`-based `initReq`).\n   */\n  initReq: InitReq\n  /**\n   * Additional handlers registered alongside `sharedServerFunctions`. Reserved\n   * for adapter-specific functions; today both adapters run the shared set only.\n   */\n  serverFunctions?: Record<string, ServerFunction<any, any>>\n  /**\n   * Post-processes each handler's return value before it goes over the wire.\n   * The TanStack Start adapter passes `serializeForRsc` to convert React\n   * elements into RSC handles; Next.js ships them natively and omits this.\n   */\n  transformResult?: (result: unknown) => Promise<unknown> | unknown\n}\n\n/**\n * Factory for the framework-agnostic `handleServerFunctions` entry point.\n *\n * All adapters dispatch from the shared registry (`sharedServerFunctions`) and\n * differ only in the two injected hooks below — `initReq` and `transformResult`\n * — so there is a single dispatch implementation and the handler sets cannot\n * drift between frameworks.\n */\nexport const createServerFunctionHandler = ({\n  initReq,\n  serverFunctions,\n  transformResult,\n}: CreateServerFunctionHandlerArgs): ServerFunctionHandler => {\n  const baseServerFunctions: Record<string, ServerFunction<any, any>> = serverFunctions\n    ? { ...sharedServerFunctions, ...serverFunctions }\n    : sharedServerFunctions\n\n  return async (args) => {\n    const {\n      name: fnKey,\n      args: fnArgs,\n      config: configPromise,\n      importMap,\n      serverFunctions: extraServerFunctions,\n    } = args\n\n    const { cookies, locale, permissions, req, user } = await initReq({ configPromise, importMap })\n\n    const augmentedArgs: DefaultServerFunctionArgs = {\n      ...fnArgs,\n      cookies,\n      importMap,\n      locale,\n      permissions,\n      req,\n      user,\n    }\n\n    const fn = extraServerFunctions?.[fnKey] || baseServerFunctions[fnKey]\n\n    if (!fn) {\n      throw new Error(`Unknown Server Function: ${fnKey}`)\n    }\n\n    const result = await fn(augmentedArgs)\n\n    return transformResult ? await transformResult(result) : result\n  }\n}\n"],"mappings":"AASA,SAASA,qBAAqB,QAAQ;AA2BtC;;;;;;;;AAQA,OAAO,MAAMC,2BAAA,GAA8BA,CAAC;EAC1CC,OAAO;EACPC,eAAe;EACfC;AAAe,CACiB;EAChC,MAAMC,mBAAA,GAAgEF,eAAA,GAClE;IAAE,GAAGH,qBAAqB;IAAE,GAAGG;EAAgB,IAC/CH,qBAAA;EAEJ,OAAO,MAAOM,IAAA;IACZ,MAAM;MACJC,IAAA,EAAMC,KAAK;MACXF,IAAA,EAAMG,MAAM;MACZC,MAAA,EAAQC,aAAa;MACrBC,SAAS;MACTT,eAAA,EAAiBU;IAAoB,CACtC,GAAGP,IAAA;IAEJ,MAAM;MAAEQ,OAAO;MAAEC,MAAM;MAAEC,WAAW;MAAEC,GAAG;MAAEC;IAAI,CAAE,GAAG,MAAMhB,OAAA,CAAQ;MAAES,aAAA;MAAeC;IAAU;IAE7F,MAAMO,aAAA,GAA2C;MAC/C,GAAGV,MAAM;MACTK,OAAA;MACAF,SAAA;MACAG,MAAA;MACAC,WAAA;MACAC,GAAA;MACAC;IACF;IAEA,MAAME,EAAA,GAAKP,oBAAA,GAAuBL,KAAA,CAAM,IAAIH,mBAAmB,CAACG,KAAA,CAAM;IAEtE,IAAI,CAACY,EAAA,EAAI;MACP,MAAM,IAAIC,KAAA,CAAM,4BAA4Bb,KAAA,EAAO;IACrD;IAEA,MAAMc,MAAA,GAAS,MAAMF,EAAA,CAAGD,aAAA;IAExB,OAAOf,eAAA,GAAkB,MAAMA,eAAA,CAAgBkB,MAAA,IAAUA,MAAA;EAC3D;AACF","ignoreList":[]}

package/dist/utilities/initReq.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initReq.d.ts","sourceRoot":"","sources":["../../src/utilities/initReq.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EAEb,eAAe,EACf,aAAa,EACd,MAAM,SAAS,CAAA;AAGhB,OAAO,EACL,cAAc,EAMf,MAAM,SAAS,CAAA;AAahB;;;;GAIG;AACH,eAAO,MAAM,OAAO,gFAOjB;IACD,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAA;IACzD,SAAS,EAAE,SAAS,CAAA;IACpB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,aAAa,EAAE,aAAa,CAAA;CAC7B,KAAG,OAAO,CAAC,aAAa,CA2FxB,CAAA"}
+{"version":3,"file":"initReq.d.ts","sourceRoot":"","sources":["../../src/utilities/initReq.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EAEb,eAAe,EACf,aAAa,EACd,MAAM,SAAS,CAAA;AAGhB,OAAO,EACL,cAAc,EAMf,MAAM,SAAS,CAAA;AAchB;;;;GAIG;AACH,eAAO,MAAM,OAAO,gFAOjB;IACD,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAA;IACzD,SAAS,EAAE,SAAS,CAAA;IACpB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,aAAa,EAAE,aAAa,CAAA;CAC7B,KAAG,OAAO,CAAC,aAAa,CA2HxB,CAAA"}

package/dist/utilities/initReq.js

@@ -1,5 +1,6 @@
 import { initI18n } from '@payloadcms/translations';
 import { createLocalReq, executeAuthStrategies, getAccessResults, getPayload, getRequestLanguage, parseCookies } from 'payload';
+import { applyUserReadAccess } from 'payload/internal';
 import { getRequestLocale } from './getRequestLocale.js';
 import { selectiveCache } from './selectiveCache.js';
 const partialReqCache = selectiveCache('partialReq');
@@ -19,7 +20,7 @@ export const initReq = async function ({
 }) {
   const headers = await serverAdapter.getHeaders();
   const cookies = parseCookies(headers);
-  const partialResult = await partialReqCache.get(async () => {
+  const getPartialResult = async () => {
     const config = await configPromise;
     const payload = await getPayload({
       config,
@@ -51,8 +52,9 @@ export const initReq = async function ({
       responseHeaders,
       user
     };
-  }, 'global');
-  return reqCache.get(async () => {
+  };
+  const partialResult = await partialReqCache.get(getPartialResult, 'global');
+  const getResult = async () => {
     const {
       i18n,
       languageCode,
@@ -64,6 +66,10 @@ export const initReq = async function ({
       req: reqOverrides,
       ...optionsOverrides
     } = overrides || {};
+    const hasOptionsUserOverride = Object.hasOwn(optionsOverrides, 'user');
+    const hasReqUserOverride = Object.hasOwn(reqOverrides ?? {}, 'user');
+    const hasUserOverride = hasOptionsUserOverride || hasReqUserOverride;
+    const userOverride = hasOptionsUserOverride ? optionsOverrides.user : reqOverrides?.user;
     const req = await createLocalReq({
       req: {
         headers,
@@ -76,10 +82,37 @@ export const initReq = async function ({
       },
       ...(optionsOverrides || {})
     }, payload);
+    if (hasUserOverride && userOverride == null) {
+      req.user = null;
+    }
+    let userWithReadAccess = req.user;
     const locale = await getRequestLocale({
       req
     });
     req.locale = locale?.code;
+    if (!hasUserOverride && req.user) {
+      try {
+        const collectionSlug = req.user.collection ?? payload.config.admin.user;
+        const collection = payload.collections[collectionSlug]?.config;
+        if (!collection?.auth) {
+          throw new Error('Authenticated user collection not found');
+        }
+        userWithReadAccess = await applyUserReadAccess({
+          collection,
+          depth: collection.auth.depth,
+          overrideAccess: false,
+          req,
+          showHiddenFields: false,
+          user: req.user
+        });
+      } catch (error) {
+        payload.logger.error({
+          err: error
+        });
+        req.user = null;
+        userWithReadAccess = null;
+      }
+    }
     const permissions = await getAccessResults({
       req
     });
@@ -89,9 +122,11 @@ export const initReq = async function ({
       languageCode,
       locale,
       permissions,
-      req
+      req,
+      user: userWithReadAccess
     };
-  }, key).then(result => {
+  };
+  return reqCache.get(getResult, key, overrides).then(result => {
     // Shallow-copy req before returning to prevent
     // mutations from propagating to the cached req object.
     // This ensures parallel operations using the same cache key don't affect each other.

package/dist/utilities/initReq.js.map

@@ -1 +1 @@
-{"version":3,"file":"initReq.js","names":["initI18n","createLocalReq","executeAuthStrategies","getAccessResults","getPayload","getRequestLanguage","parseCookies","getRequestLocale","selectiveCache","partialReqCache","reqCache","initReq","canSetHeaders","configPromise","importMap","key","overrides","serverAdapter","headers","getHeaders","cookies","partialResult","get","config","payload","cron","languageCode","i18n","context","language","responseHeaders","user","req","reqOverrides","optionsOverrides","host","server","locale","code","permissions","then","result"],"sources":["../../src/utilities/initReq.ts"],"sourcesContent":["import type { I18n, I18nClient } from '@payloadcms/translations'\nimport type {\n  ImportMap,\n  InitReqResult,\n  PayloadRequest,\n  SanitizedConfig,\n  ServerAdapter,\n} from 'payload'\n\nimport { initI18n } from '@payloadcms/translations'\nimport {\n  createLocalReq,\n  executeAuthStrategies,\n  getAccessResults,\n  getPayload,\n  getRequestLanguage,\n  parseCookies,\n} from 'payload'\n\nimport { getRequestLocale } from './getRequestLocale.js'\nimport { selectiveCache } from './selectiveCache.js'\n\ntype PartialResult = {\n  i18n: I18nClient\n} & Pick<InitReqResult, 'languageCode'> &\n  Pick<PayloadRequest, 'payload' | 'responseHeaders' | 'user'>\n\nconst partialReqCache = selectiveCache<PartialResult>('partialReq')\nconst reqCache = selectiveCache<InitReqResult>('req')\n\n/**\n * Initializes a full request object, including the `req` object and access control.\n * Reads headers/cookies through the supplied `serverAdapter` so the function is\n * framework-agnostic; the consuming framework wires its own adapter.\n */\nexport const initReq = async function ({\n  canSetHeaders,\n  configPromise,\n  importMap,\n  key,\n  overrides,\n  serverAdapter,\n}: {\n  canSetHeaders?: boolean\n  configPromise: Promise<SanitizedConfig> | SanitizedConfig\n  importMap: ImportMap\n  key: string\n  overrides?: Parameters<typeof createLocalReq>[0]\n  serverAdapter: ServerAdapter\n}): Promise<InitReqResult> {\n  const headers = await serverAdapter.getHeaders()\n  const cookies = parseCookies(headers)\n\n  const partialResult = await partialReqCache.get(async () => {\n    const config = await configPromise\n    const payload = await getPayload({ config, cron: true, importMap })\n    const languageCode = getRequestLanguage({\n      config,\n      cookies,\n      headers,\n    })\n\n    const i18n: I18nClient = await initI18n({\n      config: config.i18n,\n      context: 'client',\n      language: languageCode,\n    })\n\n    const { responseHeaders, user } = await executeAuthStrategies({\n      canSetHeaders,\n      headers,\n      payload,\n    })\n\n    return {\n      i18n,\n      languageCode,\n      payload,\n      responseHeaders,\n      user,\n    }\n  }, 'global')\n\n  return reqCache\n    .get(async () => {\n      const { i18n, languageCode, payload, responseHeaders, user } = partialResult\n\n      const { req: reqOverrides, ...optionsOverrides } = overrides || {}\n\n      const req = await createLocalReq(\n        {\n          req: {\n            headers,\n            host: headers.get('host'),\n            i18n: i18n as I18n,\n            responseHeaders,\n            server: serverAdapter,\n            user,\n            ...(reqOverrides || {}),\n          },\n          ...(optionsOverrides || {}),\n        },\n        payload,\n      )\n\n      const locale = await getRequestLocale({\n        req,\n      })\n\n      req.locale = locale?.code\n\n      const permissions = await getAccessResults({\n        req,\n      })\n\n      return {\n        cookies,\n        headers,\n        languageCode,\n        locale,\n        permissions,\n        req,\n      }\n    }, key)\n    .then((result) => {\n      // Shallow-copy req before returning to prevent\n      // mutations from propagating to the cached req object.\n      // This ensures parallel operations using the same cache key don't affect each other.\n      return {\n        ...result,\n        req: {\n          ...result.req,\n          ...(result.req?.context\n            ? {\n                context: { ...result.req.context },\n              }\n            : {}),\n        },\n      }\n    })\n}\n"],"mappings":"AASA,SAASA,QAAQ,QAAQ;AACzB,SACEC,cAAc,EACdC,qBAAqB,EACrBC,gBAAgB,EAChBC,UAAU,EACVC,kBAAkB,EAClBC,YAAY,QACP;AAEP,SAASC,gBAAgB,QAAQ;AACjC,SAASC,cAAc,QAAQ;AAO/B,MAAMC,eAAA,GAAkBD,cAAA,CAA8B;AACtD,MAAME,QAAA,GAAWF,cAAA,CAA8B;AAE/C;;;;;AAKA,OAAO,MAAMG,OAAA,GAAU,eAAAA,CAAgB;EACrCC,aAAa;EACbC,aAAa;EACbC,SAAS;EACTC,GAAG;EACHC,SAAS;EACTC;AAAa,CAQd;EACC,MAAMC,OAAA,GAAU,MAAMD,aAAA,CAAcE,UAAU;EAC9C,MAAMC,OAAA,GAAUd,YAAA,CAAaY,OAAA;EAE7B,MAAMG,aAAA,GAAgB,MAAMZ,eAAA,CAAgBa,GAAG,CAAC;IAC9C,MAAMC,MAAA,GAAS,MAAMV,aAAA;IACrB,MAAMW,OAAA,GAAU,MAAMpB,UAAA,CAAW;MAAEmB,MAAA;MAAQE,IAAA,EAAM;MAAMX;IAAU;IACjE,MAAMY,YAAA,GAAerB,kBAAA,CAAmB;MACtCkB,MAAA;MACAH,OAAA;MACAF;IACF;IAEA,MAAMS,IAAA,GAAmB,MAAM3B,QAAA,CAAS;MACtCuB,MAAA,EAAQA,MAAA,CAAOI,IAAI;MACnBC,OAAA,EAAS;MACTC,QAAA,EAAUH;IACZ;IAEA,MAAM;MAAEI,eAAe;MAAEC;IAAI,CAAE,GAAG,MAAM7B,qBAAA,CAAsB;MAC5DU,aAAA;MACAM,OAAA;MACAM;IACF;IAEA,OAAO;MACLG,IAAA;MACAD,YAAA;MACAF,OAAA;MACAM,eAAA;MACAC;IACF;EACF,GAAG;EAEH,OAAOrB,QAAA,CACJY,GAAG,CAAC;IACH,MAAM;MAAEK,IAAI;MAAED,YAAY;MAAEF,OAAO;MAAEM,eAAe;MAAEC;IAAI,CAAE,GAAGV,aAAA;IAE/D,MAAM;MAAEW,GAAA,EAAKC,YAAY;MAAE,GAAGC;IAAA,CAAkB,GAAGlB,SAAA,IAAa,CAAC;IAEjE,MAAMgB,GAAA,GAAM,MAAM/B,cAAA,CAChB;MACE+B,GAAA,EAAK;QACHd,OAAA;QACAiB,IAAA,EAAMjB,OAAA,CAAQI,GAAG,CAAC;QAClBK,IAAA,EAAMA,IAAA;QACNG,eAAA;QACAM,MAAA,EAAQnB,aAAA;QACRc,IAAA;QACA,IAAIE,YAAA,IAAgB,CAAC,CAAC;MACxB;MACA,IAAIC,gBAAA,IAAoB,CAAC,CAAC;IAC5B,GACAV,OAAA;IAGF,MAAMa,MAAA,GAAS,MAAM9B,gBAAA,CAAiB;MACpCyB;IACF;IAEAA,GAAA,CAAIK,MAAM,GAAGA,MAAA,EAAQC,IAAA;IAErB,MAAMC,WAAA,GAAc,MAAMpC,gBAAA,CAAiB;MACzC6B;IACF;IAEA,OAAO;MACLZ,OAAA;MACAF,OAAA;MACAQ,YAAA;MACAW,MAAA;MACAE,WAAA;MACAP;IACF;EACF,GAAGjB,GAAA,EACFyB,IAAI,CAAEC,MAAA;IACL;IACA;IACA;IACA,OAAO;MACL,GAAGA,MAAM;MACTT,GAAA,EAAK;QACH,GAAGS,MAAA,CAAOT,GAAG;QACb,IAAIS,MAAA,CAAOT,GAAG,EAAEJ,OAAA,GACZ;UACEA,OAAA,EAAS;YAAE,GAAGa,MAAA,CAAOT,GAAG,CAACJ;UAAQ;QACnC,IACA,CAAC,CAAC;MACR;IACF;EACF;AACJ","ignoreList":[]}
+{"version":3,"file":"initReq.js","names":["initI18n","createLocalReq","executeAuthStrategies","getAccessResults","getPayload","getRequestLanguage","parseCookies","applyUserReadAccess","getRequestLocale","selectiveCache","partialReqCache","reqCache","initReq","canSetHeaders","configPromise","importMap","key","overrides","serverAdapter","headers","getHeaders","cookies","getPartialResult","config","payload","cron","languageCode","i18n","context","language","responseHeaders","user","partialResult","get","getResult","req","reqOverrides","optionsOverrides","hasOptionsUserOverride","Object","hasOwn","hasReqUserOverride","hasUserOverride","userOverride","host","server","userWithReadAccess","locale","code","collectionSlug","collection","admin","collections","auth","Error","depth","overrideAccess","showHiddenFields","error","logger","err","permissions","then","result"],"sources":["../../src/utilities/initReq.ts"],"sourcesContent":["import type { I18n, I18nClient } from '@payloadcms/translations'\nimport type {\n  ImportMap,\n  InitReqResult,\n  PayloadRequest,\n  SanitizedConfig,\n  ServerAdapter,\n} from 'payload'\n\nimport { initI18n } from '@payloadcms/translations'\nimport {\n  createLocalReq,\n  executeAuthStrategies,\n  getAccessResults,\n  getPayload,\n  getRequestLanguage,\n  parseCookies,\n} from 'payload'\nimport { applyUserReadAccess } from 'payload/internal'\n\nimport { getRequestLocale } from './getRequestLocale.js'\nimport { selectiveCache } from './selectiveCache.js'\n\ntype PartialResult = {\n  i18n: I18nClient\n} & Pick<InitReqResult, 'languageCode'> &\n  Pick<PayloadRequest, 'payload' | 'responseHeaders' | 'user'>\n\nconst partialReqCache = selectiveCache<PartialResult>('partialReq')\nconst reqCache = selectiveCache<InitReqResult>('req')\n\n/**\n * Initializes a full request object, including the `req` object and access control.\n * Reads headers/cookies through the supplied `serverAdapter` so the function is\n * framework-agnostic; the consuming framework wires its own adapter.\n */\nexport const initReq = async function ({\n  canSetHeaders,\n  configPromise,\n  importMap,\n  key,\n  overrides,\n  serverAdapter,\n}: {\n  canSetHeaders?: boolean\n  configPromise: Promise<SanitizedConfig> | SanitizedConfig\n  importMap: ImportMap\n  key: string\n  overrides?: Parameters<typeof createLocalReq>[0]\n  serverAdapter: ServerAdapter\n}): Promise<InitReqResult> {\n  const headers = await serverAdapter.getHeaders()\n  const cookies = parseCookies(headers)\n\n  const getPartialResult = async () => {\n    const config = await configPromise\n    const payload = await getPayload({ config, cron: true, importMap })\n    const languageCode = getRequestLanguage({\n      config,\n      cookies,\n      headers,\n    })\n\n    const i18n: I18nClient = await initI18n({\n      config: config.i18n,\n      context: 'client',\n      language: languageCode,\n    })\n\n    const { responseHeaders, user } = await executeAuthStrategies({\n      canSetHeaders,\n      headers,\n      payload,\n    })\n\n    return {\n      i18n,\n      languageCode,\n      payload,\n      responseHeaders,\n      user,\n    }\n  }\n\n  const partialResult = await partialReqCache.get(getPartialResult, 'global')\n\n  const getResult = async () => {\n    const { i18n, languageCode, payload, responseHeaders, user } = partialResult\n\n    const { req: reqOverrides, ...optionsOverrides } = overrides || {}\n    const hasOptionsUserOverride = Object.hasOwn(optionsOverrides, 'user')\n    const hasReqUserOverride = Object.hasOwn(reqOverrides ?? {}, 'user')\n    const hasUserOverride = hasOptionsUserOverride || hasReqUserOverride\n    const userOverride = hasOptionsUserOverride ? optionsOverrides.user : reqOverrides?.user\n\n    const req = await createLocalReq(\n      {\n        req: {\n          headers,\n          host: headers.get('host'),\n          i18n: i18n as I18n,\n          responseHeaders,\n          server: serverAdapter,\n          user,\n          ...(reqOverrides || {}),\n        },\n        ...(optionsOverrides || {}),\n      },\n      payload,\n    )\n\n    if (hasUserOverride && userOverride == null) {\n      req.user = null\n    }\n\n    let userWithReadAccess = req.user\n\n    const locale = await getRequestLocale({ req })\n    req.locale = locale?.code\n\n    if (!hasUserOverride && req.user) {\n      try {\n        const collectionSlug = req.user.collection ?? payload.config.admin.user\n        const collection = payload.collections[collectionSlug]?.config\n\n        if (!collection?.auth) {\n          throw new Error('Authenticated user collection not found')\n        }\n\n        userWithReadAccess = await applyUserReadAccess({\n          collection,\n          depth: collection.auth.depth,\n          overrideAccess: false,\n          req,\n          showHiddenFields: false,\n          user: req.user,\n        })\n      } catch (error) {\n        payload.logger.error({ err: error })\n        req.user = null\n        userWithReadAccess = null\n      }\n    }\n\n    const permissions = await getAccessResults({ req })\n\n    return {\n      cookies,\n      headers,\n      languageCode,\n      locale,\n      permissions,\n      req,\n      user: userWithReadAccess,\n    }\n  }\n\n  return reqCache.get(getResult, key, overrides).then((result) => {\n    // Shallow-copy req before returning to prevent\n    // mutations from propagating to the cached req object.\n    // This ensures parallel operations using the same cache key don't affect each other.\n    return {\n      ...result,\n      req: {\n        ...result.req,\n        ...(result.req?.context\n          ? {\n              context: { ...result.req.context },\n            }\n          : {}),\n      },\n    }\n  })\n}\n"],"mappings":"AASA,SAASA,QAAQ,QAAQ;AACzB,SACEC,cAAc,EACdC,qBAAqB,EACrBC,gBAAgB,EAChBC,UAAU,EACVC,kBAAkB,EAClBC,YAAY,QACP;AACP,SAASC,mBAAmB,QAAQ;AAEpC,SAASC,gBAAgB,QAAQ;AACjC,SAASC,cAAc,QAAQ;AAO/B,MAAMC,eAAA,GAAkBD,cAAA,CAA8B;AACtD,MAAME,QAAA,GAAWF,cAAA,CAA8B;AAE/C;;;;;AAKA,OAAO,MAAMG,OAAA,GAAU,eAAAA,CAAgB;EACrCC,aAAa;EACbC,aAAa;EACbC,SAAS;EACTC,GAAG;EACHC,SAAS;EACTC;AAAa,CAQd;EACC,MAAMC,OAAA,GAAU,MAAMD,aAAA,CAAcE,UAAU;EAC9C,MAAMC,OAAA,GAAUf,YAAA,CAAaa,OAAA;EAE7B,MAAMG,gBAAA,GAAmB,MAAAA,CAAA;IACvB,MAAMC,MAAA,GAAS,MAAMT,aAAA;IACrB,MAAMU,OAAA,GAAU,MAAMpB,UAAA,CAAW;MAAEmB,MAAA;MAAQE,IAAA,EAAM;MAAMV;IAAU;IACjE,MAAMW,YAAA,GAAerB,kBAAA,CAAmB;MACtCkB,MAAA;MACAF,OAAA;MACAF;IACF;IAEA,MAAMQ,IAAA,GAAmB,MAAM3B,QAAA,CAAS;MACtCuB,MAAA,EAAQA,MAAA,CAAOI,IAAI;MACnBC,OAAA,EAAS;MACTC,QAAA,EAAUH;IACZ;IAEA,MAAM;MAAEI,eAAe;MAAEC;IAAI,CAAE,GAAG,MAAM7B,qBAAA,CAAsB;MAC5DW,aAAA;MACAM,OAAA;MACAK;IACF;IAEA,OAAO;MACLG,IAAA;MACAD,YAAA;MACAF,OAAA;MACAM,eAAA;MACAC;IACF;EACF;EAEA,MAAMC,aAAA,GAAgB,MAAMtB,eAAA,CAAgBuB,GAAG,CAACX,gBAAA,EAAkB;EAElE,MAAMY,SAAA,GAAY,MAAAA,CAAA;IAChB,MAAM;MAAEP,IAAI;MAAED,YAAY;MAAEF,OAAO;MAAEM,eAAe;MAAEC;IAAI,CAAE,GAAGC,aAAA;IAE/D,MAAM;MAAEG,GAAA,EAAKC,YAAY;MAAE,GAAGC;IAAA,CAAkB,GAAGpB,SAAA,IAAa,CAAC;IACjE,MAAMqB,sBAAA,GAAyBC,MAAA,CAAOC,MAAM,CAACH,gBAAA,EAAkB;IAC/D,MAAMI,kBAAA,GAAqBF,MAAA,CAAOC,MAAM,CAACJ,YAAA,IAAgB,CAAC,GAAG;IAC7D,MAAMM,eAAA,GAAkBJ,sBAAA,IAA0BG,kBAAA;IAClD,MAAME,YAAA,GAAeL,sBAAA,GAAyBD,gBAAA,CAAiBN,IAAI,GAAGK,YAAA,EAAcL,IAAA;IAEpF,MAAMI,GAAA,GAAM,MAAMlC,cAAA,CAChB;MACEkC,GAAA,EAAK;QACHhB,OAAA;QACAyB,IAAA,EAAMzB,OAAA,CAAQc,GAAG,CAAC;QAClBN,IAAA,EAAMA,IAAA;QACNG,eAAA;QACAe,MAAA,EAAQ3B,aAAA;QACRa,IAAA;QACA,IAAIK,YAAA,IAAgB,CAAC,CAAC;MACxB;MACA,IAAIC,gBAAA,IAAoB,CAAC,CAAC;IAC5B,GACAb,OAAA;IAGF,IAAIkB,eAAA,IAAmBC,YAAA,IAAgB,MAAM;MAC3CR,GAAA,CAAIJ,IAAI,GAAG;IACb;IAEA,IAAIe,kBAAA,GAAqBX,GAAA,CAAIJ,IAAI;IAEjC,MAAMgB,MAAA,GAAS,MAAMvC,gBAAA,CAAiB;MAAE2B;IAAI;IAC5CA,GAAA,CAAIY,MAAM,GAAGA,MAAA,EAAQC,IAAA;IAErB,IAAI,CAACN,eAAA,IAAmBP,GAAA,CAAIJ,IAAI,EAAE;MAChC,IAAI;QACF,MAAMkB,cAAA,GAAiBd,GAAA,CAAIJ,IAAI,CAACmB,UAAU,IAAI1B,OAAA,CAAQD,MAAM,CAAC4B,KAAK,CAACpB,IAAI;QACvE,MAAMmB,UAAA,GAAa1B,OAAA,CAAQ4B,WAAW,CAACH,cAAA,CAAe,EAAE1B,MAAA;QAExD,IAAI,CAAC2B,UAAA,EAAYG,IAAA,EAAM;UACrB,MAAM,IAAIC,KAAA,CAAM;QAClB;QAEAR,kBAAA,GAAqB,MAAMvC,mBAAA,CAAoB;UAC7C2C,UAAA;UACAK,KAAA,EAAOL,UAAA,CAAWG,IAAI,CAACE,KAAK;UAC5BC,cAAA,EAAgB;UAChBrB,GAAA;UACAsB,gBAAA,EAAkB;UAClB1B,IAAA,EAAMI,GAAA,CAAIJ;QACZ;MACF,EAAE,OAAO2B,KAAA,EAAO;QACdlC,OAAA,CAAQmC,MAAM,CAACD,KAAK,CAAC;UAAEE,GAAA,EAAKF;QAAM;QAClCvB,GAAA,CAAIJ,IAAI,GAAG;QACXe,kBAAA,GAAqB;MACvB;IACF;IAEA,MAAMe,WAAA,GAAc,MAAM1D,gBAAA,CAAiB;MAAEgC;IAAI;IAEjD,OAAO;MACLd,OAAA;MACAF,OAAA;MACAO,YAAA;MACAqB,MAAA;MACAc,WAAA;MACA1B,GAAA;MACAJ,IAAA,EAAMe;IACR;EACF;EAEA,OAAOnC,QAAA,CAASsB,GAAG,CAACC,SAAA,EAAWlB,GAAA,EAAKC,SAAA,EAAW6C,IAAI,CAAEC,MAAA;IACnD;IACA;IACA;IACA,OAAO;MACL,GAAGA,MAAM;MACT5B,GAAA,EAAK;QACH,GAAG4B,MAAA,CAAO5B,GAAG;QACb,IAAI4B,MAAA,CAAO5B,GAAG,EAAEP,OAAA,GACZ;UACEA,OAAA,EAAS;YAAE,GAAGmC,MAAA,CAAO5B,GAAG,CAACP;UAAQ;QACnC,IACA,CAAC,CAAC;MACR;IACF;EACF;AACF","ignoreList":[]}

package/dist/utilities/initReq.spec.js

@@ -0,0 +1,226 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+const mocks = vi.hoisted(() => ({
+  accessContexts: [],
+  accessUser: null,
+  applyUserReadAccess: vi.fn(),
+  cacheStores: new Map(),
+  executeAuthStrategies: vi.fn(),
+  user: {
+    collection: 'users',
+    id: 'user-id',
+    role: 'admin'
+  }
+}));
+vi.mock('@payloadcms/translations', () => ({
+  initI18n: vi.fn(async () => ({
+    fallbackLanguage: 'en',
+    language: 'en',
+    t: key => key,
+    translations: {}
+  }))
+}));
+vi.mock('payload', () => ({
+  createLocalReq: vi.fn(async (options, payload) => {
+    const request = options.req ?? {};
+    const user = options.user ?? request.user ?? null;
+    return {
+      ...request,
+      context: options.context ?? request.context ?? {},
+      headers: request.headers ?? new Headers(),
+      locale: options.locale ?? request.locale ?? 'en',
+      pathname: options.urlSuffix,
+      payload,
+      query: request.query ?? {},
+      responseHeaders: request.responseHeaders ?? new Headers(),
+      user: user && !user.collection ? {
+        ...user,
+        collection: payload.config.admin.user
+      } : user
+    };
+  }),
+  executeAuthStrategies: mocks.executeAuthStrategies,
+  getAccessResults: vi.fn(async ({
+    req
+  }) => {
+    mocks.accessContexts.push(req.context.name);
+    mocks.accessUser = req.user;
+    return {};
+  }),
+  getPayload: vi.fn(async () => ({
+    collections: {
+      users: {
+        config: {
+          auth: {
+            depth: 1
+          },
+          slug: 'users'
+        }
+      }
+    },
+    config: {
+      admin: {
+        user: 'users'
+      },
+      i18n: {
+        fallbackLanguage: 'en',
+        supportedLanguages: {
+          en: {}
+        },
+        translations: {}
+      }
+    },
+    logger: {
+      error: vi.fn()
+    }
+  })),
+  getRequestLanguage: vi.fn(() => 'en'),
+  parseCookies: vi.fn(() => new Map())
+}));
+vi.mock('payload/internal', () => ({
+  applyUserReadAccess: mocks.applyUserReadAccess
+}));
+vi.mock('./getRequestLocale.js', () => ({
+  getRequestLocale: vi.fn(async ({
+    req
+  }) => ({
+    code: req.locale
+  }))
+}));
+vi.mock('./selectiveCache.js', () => ({
+  selectiveCache: namespace => ({
+    get: async (factory, ...args) => {
+      let entries = mocks.cacheStores.get(namespace);
+      if (!entries) {
+        entries = [];
+        mocks.cacheStores.set(namespace, entries);
+      }
+      const cached = entries.find(entry => entry.args.length === args.length && entry.args.every((arg, i) => arg === args[i]));
+      if (cached) {
+        return cached.value;
+      }
+      const value = await factory();
+      entries.push({
+        args,
+        value
+      });
+      return value;
+    }
+  })
+}));
+import { initReq } from './initReq.js';
+describe('initReq', () => {
+  beforeEach(() => {
+    mocks.accessContexts = [];
+    mocks.accessUser = null;
+    mocks.applyUserReadAccess.mockReset();
+    mocks.applyUserReadAccess.mockImplementation(async ({
+      req,
+      user
+    }) => ({
+      collection: user.collection,
+      id: user.id,
+      name: req.context.name
+    }));
+    mocks.cacheStores.clear();
+    mocks.executeAuthStrategies.mockReset();
+    mocks.executeAuthStrategies.mockResolvedValue({
+      user: mocks.user
+    });
+  });
+  it('should keep the complete req.user and filter the user for each response', async () => {
+    const first = await initReq({
+      configPromise: {},
+      importMap: {},
+      key: 'response',
+      overrides: {
+        context: {
+          name: 'First'
+        }
+      },
+      serverAdapter: {
+        getHeaders: async () => new Headers()
+      }
+    });
+    const second = await initReq({
+      configPromise: {},
+      importMap: {},
+      key: 'response',
+      overrides: {
+        context: {
+          name: 'Second'
+        }
+      },
+      serverAdapter: {
+        getHeaders: async () => new Headers()
+      }
+    });
+    expect(mocks.executeAuthStrategies).toHaveBeenCalledOnce();
+    expect(mocks.applyUserReadAccess).toHaveBeenCalledTimes(2);
+    expect(first.req.user).toHaveProperty('role', 'admin');
+    expect(second.req.user).toHaveProperty('role', 'admin');
+    expect(first.user).toMatchObject({
+      name: 'First'
+    });
+    expect(second.user).toMatchObject({
+      name: 'Second'
+    });
+    expect(first.user).not.toHaveProperty('role');
+    expect(mocks.accessUser).toHaveProperty('role', 'admin');
+    expect(mocks.accessContexts).toEqual(['First', 'Second']);
+  });
+  it('should use anonymous access when user read access fails', async () => {
+    mocks.applyUserReadAccess.mockRejectedValue(new Error('read access failed'));
+    const result = await initReq({
+      configPromise: {},
+      importMap: {},
+      key: 'failure',
+      serverAdapter: {
+        getHeaders: async () => new Headers()
+      }
+    });
+    expect(result.req.user).toBeNull();
+    expect(result.user).toBeNull();
+    expect(mocks.accessUser).toBeNull();
+  });
+  it('should preserve an explicit req.user override', async () => {
+    const user = {
+      id: 'override-user'
+    };
+    const result = await initReq({
+      configPromise: {},
+      importMap: {},
+      key: 'override',
+      overrides: {
+        req: {
+          user
+        }
+      },
+      serverAdapter: {
+        getHeaders: async () => new Headers()
+      }
+    });
+    expect(result.req.user).toMatchObject({
+      collection: 'users',
+      id: 'override-user'
+    });
+    expect(result.user).toBe(result.req.user);
+    expect(mocks.applyUserReadAccess).not.toHaveBeenCalled();
+  });
+  it('should preserve an explicit null user override', async () => {
+    const result = await initReq({
+      configPromise: {},
+      importMap: {},
+      key: 'anonymous',
+      overrides: {
+        user: null
+      },
+      serverAdapter: {
+        getHeaders: async () => new Headers()
+      }
+    });
+    expect(result.req.user).toBeNull();
+    expect(result.user).toBeNull();
+    expect(mocks.applyUserReadAccess).not.toHaveBeenCalled();
+  });
+});
+//# sourceMappingURL=initReq.spec.js.map