@payloadcms/ui 4.0.0-internal.1f9ae9a → 4.0.0-internal.21664f3

package/dist/utilities/hasSavePermission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hasSavePermission.d.ts","sourceRoot":"","sources":["../../src/utilities/hasSavePermission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,4BAA4B,EAE7B,MAAM,SAAS,CAAA;AAEhB,eAAO,MAAM,iBAAiB,GAAI,MAAM;IAItC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,4BAA4B,CAAA;IAI5C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;CACnB,YAeA,CAAA"}
+{"version":3,"file":"hasSavePermission.d.ts","sourceRoot":"","sources":["../../src/utilities/hasSavePermission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,4BAA4B,EAE7B,MAAM,SAAS,CAAA;AAEhB,eAAO,MAAM,iBAAiB,SAAU;IAItC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,4BAA4B,CAAA;IAI5C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;CACnB,YAeA,CAAA"}

package/dist/utilities/initReq.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initReq.d.ts","sourceRoot":"","sources":["../../src/utilities/initReq.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EAEb,eAAe,EACf,aAAa,EACd,MAAM,SAAS,CAAA;AAGhB,OAAO,EACL,cAAc,EAMf,MAAM,SAAS,CAAA;AAahB;;;;GAIG;AACH,eAAO,MAAM,OAAO,GAAmB,6EAOpC;IACD,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAA;IACzD,SAAS,EAAE,SAAS,CAAA;IACpB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,aAAa,EAAE,aAAa,CAAA;CAC7B,KAAG,OAAO,CAAC,aAAa,CA2FxB,CAAA"}
+{"version":3,"file":"initReq.d.ts","sourceRoot":"","sources":["../../src/utilities/initReq.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EAEb,eAAe,EACf,aAAa,EACd,MAAM,SAAS,CAAA;AAGhB,OAAO,EACL,cAAc,EAMf,MAAM,SAAS,CAAA;AAahB;;;;GAIG;AACH,eAAO,MAAM,OAAO,gFAOjB;IACD,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAA;IACzD,SAAS,EAAE,SAAS,CAAA;IACpB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,aAAa,EAAE,aAAa,CAAA;CAC7B,KAAG,OAAO,CAAC,aAAa,CA2FxB,CAAA"}

package/dist/utilities/isClientUserObject.d.ts

@@ -1,3 +1,3 @@
-import type { ClientUser } from 'payload';
-export declare const isClientUserObject: (user: any) => user is ClientUser;
+import type { User } from 'payload';
+export declare const isClientUserObject: (user: any) => user is User;
 //# sourceMappingURL=isClientUserObject.d.ts.map

package/dist/utilities/isClientUserObject.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"isClientUserObject.d.ts","sourceRoot":"","sources":["../../src/utilities/isClientUserObject.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAEzC,eAAO,MAAM,kBAAkB,GAAI,SAAI,KAAG,IAAI,IAAI,UAEjD,CAAA"}
+{"version":3,"file":"isClientUserObject.d.ts","sourceRoot":"","sources":["../../src/utilities/isClientUserObject.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAEnC,eAAO,MAAM,kBAAkB,iBAAW,IAAI,IAAI,IAEjD,CAAA"}

package/dist/utilities/isClientUserObject.js.map

@@ -1 +1 @@
-{"version":3,"file":"isClientUserObject.js","names":["isClientUserObject","user"],"sources":["../../src/utilities/isClientUserObject.ts"],"sourcesContent":["import type { ClientUser } from 'payload'\n\nexport const isClientUserObject = (user): user is ClientUser => {\n  return user && typeof user === 'object'\n}\n"],"mappings":"AAEA,OAAO,MAAMA,kBAAA,GAAsBC,IAAA;EACjC,OAAOA,IAAA,IAAQ,OAAOA,IAAA,KAAS;AACjC","ignoreList":[]}
+{"version":3,"file":"isClientUserObject.js","names":["isClientUserObject","user"],"sources":["../../src/utilities/isClientUserObject.ts"],"sourcesContent":["import type { User } from 'payload'\n\nexport const isClientUserObject = (user): user is User => {\n  return user && typeof user === 'object'\n}\n"],"mappings":"AAEA,OAAO,MAAMA,kBAAA,GAAsBC,IAAA;EACjC,OAAOA,IAAA,IAAQ,OAAOA,IAAA,KAAS;AACjC","ignoreList":[]}

package/dist/utilities/isCustomAdminView.d.ts

@@ -0,0 +1,8 @@
+import type { SanitizedConfig } from 'payload';
+/** Returns true if the given route matches a custom admin view defined in the config. */
+export declare const isCustomAdminView: ({ adminRoute, config, route, }: {
+    adminRoute: string;
+    config: SanitizedConfig;
+    route: string;
+}) => boolean;
+//# sourceMappingURL=isCustomAdminView.d.ts.map

package/dist/utilities/isCustomAdminView.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isCustomAdminView.d.ts","sourceRoot":"","sources":["../../src/utilities/isCustomAdminView.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAI9C,yFAAyF;AACzF,eAAO,MAAM,iBAAiB,mCAI3B;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,eAAe,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;CACd,KAAG,OAiBH,CAAA"}

package/dist/utilities/isCustomAdminView.js

@@ -0,0 +1,22 @@
+import { getRouteWithoutAdmin } from './getRouteWithoutAdmin.js';
+/** Returns true if the given route matches a custom admin view defined in the config. */
+export const isCustomAdminView = ({
+  adminRoute,
+  config,
+  route
+}) => {
+  if (config.admin?.components?.views) {
+    return Object.entries(config.admin.components.views).some(([_, view]) => {
+      const routeWithoutAdmin = getRouteWithoutAdmin({
+        adminRoute,
+        route
+      });
+      if (view.exact) {
+        return routeWithoutAdmin === view.path;
+      }
+      return view.path && view.path !== '/' && (routeWithoutAdmin === view.path || routeWithoutAdmin.startsWith(view.path + '/'));
+    });
+  }
+  return false;
+};
+//# sourceMappingURL=isCustomAdminView.js.map

package/dist/utilities/isCustomAdminView.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isCustomAdminView.js","names":["getRouteWithoutAdmin","isCustomAdminView","adminRoute","config","route","admin","components","views","Object","entries","some","_","view","routeWithoutAdmin","exact","path","startsWith"],"sources":["../../src/utilities/isCustomAdminView.ts"],"sourcesContent":["import type { SanitizedConfig } from 'payload'\n\nimport { getRouteWithoutAdmin } from './getRouteWithoutAdmin.js'\n\n/** Returns true if the given route matches a custom admin view defined in the config. */\nexport const isCustomAdminView = ({\n  adminRoute,\n  config,\n  route,\n}: {\n  adminRoute: string\n  config: SanitizedConfig\n  route: string\n}): boolean => {\n  if (config.admin?.components?.views) {\n    return Object.entries(config.admin.components.views).some(([_, view]) => {\n      const routeWithoutAdmin = getRouteWithoutAdmin({ adminRoute, route })\n\n      if (view.exact) {\n        return routeWithoutAdmin === view.path\n      }\n\n      return (\n        view.path &&\n        view.path !== '/' &&\n        (routeWithoutAdmin === view.path || routeWithoutAdmin.startsWith(view.path + '/'))\n      )\n    })\n  }\n  return false\n}\n"],"mappings":"AAEA,SAASA,oBAAoB,QAAQ;AAErC;AACA,OAAO,MAAMC,iBAAA,GAAoBA,CAAC;EAChCC,UAAU;EACVC,MAAM;EACNC;AAAK,CAKN;EACC,IAAID,MAAA,CAAOE,KAAK,EAAEC,UAAA,EAAYC,KAAA,EAAO;IACnC,OAAOC,MAAA,CAAOC,OAAO,CAACN,MAAA,CAAOE,KAAK,CAACC,UAAU,CAACC,KAAK,EAAEG,IAAI,CAAC,CAAC,CAACC,CAAA,EAAGC,IAAA,CAAK;MAClE,MAAMC,iBAAA,GAAoBb,oBAAA,CAAqB;QAAEE,UAAA;QAAYE;MAAM;MAEnE,IAAIQ,IAAA,CAAKE,KAAK,EAAE;QACd,OAAOD,iBAAA,KAAsBD,IAAA,CAAKG,IAAI;MACxC;MAEA,OACEH,IAAA,CAAKG,IAAI,IACTH,IAAA,CAAKG,IAAI,KAAK,QACbF,iBAAA,KAAsBD,IAAA,CAAKG,IAAI,IAAIF,iBAAA,CAAkBG,UAAU,CAACJ,IAAA,CAAKG,IAAI,GAAG,IAAG;IAEpF;EACF;EACA,OAAO;AACT","ignoreList":[]}

package/dist/utilities/isCustomAdminView.spec.js

@@ -0,0 +1,90 @@
+import { describe, expect, it } from 'vitest';
+import { isCustomAdminView } from './isCustomAdminView.js';
+describe('isCustomAdminView', () => {
+  const adminRoute = '/admin';
+  const configWithCustomDashboard = {
+    admin: {
+      components: {
+        views: {
+          dashboard: {
+            path: '/'
+          }
+        }
+      }
+    }
+  };
+  it('should not bypass admin access for the root admin route even with a custom dashboard view', () => {
+    // The root path '/' maps to the dashboard — it is not a public custom view.
+    // canAccessAdmin must still be enforced for the admin root.
+    const result = isCustomAdminView({
+      adminRoute,
+      config: configWithCustomDashboard,
+      route: '/admin'
+    });
+    expect(result).toBe(false);
+  });
+  it('should not match collection routes as custom dashboard views when dashboard path is "/"', () => {
+    const result = isCustomAdminView({
+      adminRoute,
+      config: configWithCustomDashboard,
+      route: '/admin/collections/tickets'
+    });
+    expect(result).toBe(false);
+  });
+  it('should not match document routes as custom dashboard views when dashboard path is "/"', () => {
+    const result = isCustomAdminView({
+      adminRoute,
+      config: configWithCustomDashboard,
+      route: '/admin/collections/tickets/123'
+    });
+    expect(result).toBe(false);
+  });
+  it('should return false when no custom views are configured', () => {
+    const config = {};
+    const result = isCustomAdminView({
+      adminRoute,
+      config,
+      route: '/admin/collections/tickets'
+    });
+    expect(result).toBe(false);
+  });
+  it('should return true for a custom view with a non-root path', () => {
+    const config = {
+      admin: {
+        components: {
+          views: {
+            myCustomView: {
+              path: '/my-custom-view'
+            }
+          }
+        }
+      }
+    };
+    const result = isCustomAdminView({
+      adminRoute,
+      config,
+      route: '/admin/my-custom-view'
+    });
+    expect(result).toBe(true);
+  });
+  it('should not match collection routes when a non-root custom view path is set', () => {
+    const config = {
+      admin: {
+        components: {
+          views: {
+            myCustomView: {
+              path: '/my-custom-view'
+            }
+          }
+        }
+      }
+    };
+    const result = isCustomAdminView({
+      adminRoute,
+      config,
+      route: '/admin/collections/tickets'
+    });
+    expect(result).toBe(false);
+  });
+});
+//# sourceMappingURL=isCustomAdminView.spec.js.map

package/dist/utilities/isCustomAdminView.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isCustomAdminView.spec.js","names":["describe","expect","it","isCustomAdminView","adminRoute","configWithCustomDashboard","admin","components","views","dashboard","path","result","config","route","toBe","myCustomView"],"sources":["../../src/utilities/isCustomAdminView.spec.ts"],"sourcesContent":["import type { SanitizedConfig } from 'payload'\n\nimport { describe, expect, it } from 'vitest'\n\nimport { isCustomAdminView } from './isCustomAdminView.js'\n\ndescribe('isCustomAdminView', () => {\n  const adminRoute = '/admin'\n\n  const configWithCustomDashboard = {\n    admin: {\n      components: {\n        views: {\n          dashboard: {\n            path: '/',\n          },\n        },\n      },\n    },\n  } as unknown as SanitizedConfig\n\n  it('should not bypass admin access for the root admin route even with a custom dashboard view', () => {\n    // The root path '/' maps to the dashboard — it is not a public custom view.\n    // canAccessAdmin must still be enforced for the admin root.\n    const result = isCustomAdminView({\n      adminRoute,\n      config: configWithCustomDashboard,\n      route: '/admin',\n    })\n\n    expect(result).toBe(false)\n  })\n\n  it('should not match collection routes as custom dashboard views when dashboard path is \"/\"', () => {\n    const result = isCustomAdminView({\n      adminRoute,\n      config: configWithCustomDashboard,\n      route: '/admin/collections/tickets',\n    })\n\n    expect(result).toBe(false)\n  })\n\n  it('should not match document routes as custom dashboard views when dashboard path is \"/\"', () => {\n    const result = isCustomAdminView({\n      adminRoute,\n      config: configWithCustomDashboard,\n      route: '/admin/collections/tickets/123',\n    })\n\n    expect(result).toBe(false)\n  })\n\n  it('should return false when no custom views are configured', () => {\n    const config = {} as SanitizedConfig\n\n    const result = isCustomAdminView({\n      adminRoute,\n      config,\n      route: '/admin/collections/tickets',\n    })\n\n    expect(result).toBe(false)\n  })\n\n  it('should return true for a custom view with a non-root path', () => {\n    const config = {\n      admin: {\n        components: {\n          views: {\n            myCustomView: {\n              path: '/my-custom-view',\n            },\n          },\n        },\n      },\n    } as unknown as SanitizedConfig\n\n    const result = isCustomAdminView({\n      adminRoute,\n      config,\n      route: '/admin/my-custom-view',\n    })\n\n    expect(result).toBe(true)\n  })\n\n  it('should not match collection routes when a non-root custom view path is set', () => {\n    const config = {\n      admin: {\n        components: {\n          views: {\n            myCustomView: {\n              path: '/my-custom-view',\n            },\n          },\n        },\n      },\n    } as unknown as SanitizedConfig\n\n    const result = isCustomAdminView({\n      adminRoute,\n      config,\n      route: '/admin/collections/tickets',\n    })\n\n    expect(result).toBe(false)\n  })\n})\n"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ;AAErC,SAASC,iBAAiB,QAAQ;AAElCH,QAAA,CAAS,qBAAqB;EAC5B,MAAMI,UAAA,GAAa;EAEnB,MAAMC,yBAAA,GAA4B;IAChCC,KAAA,EAAO;MACLC,UAAA,EAAY;QACVC,KAAA,EAAO;UACLC,SAAA,EAAW;YACTC,IAAA,EAAM;UACR;QACF;MACF;IACF;EACF;EAEAR,EAAA,CAAG,6FAA6F;IAC9F;IACA;IACA,MAAMS,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA,EAAQP,yBAAA;MACRQ,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;EAEAZ,EAAA,CAAG,2FAA2F;IAC5F,MAAMS,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA,EAAQP,yBAAA;MACRQ,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;EAEAZ,EAAA,CAAG,yFAAyF;IAC1F,MAAMS,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA,EAAQP,yBAAA;MACRQ,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;EAEAZ,EAAA,CAAG,2DAA2D;IAC5D,MAAMU,MAAA,GAAS,CAAC;IAEhB,MAAMD,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA;MACAC,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;EAEAZ,EAAA,CAAG,6DAA6D;IAC9D,MAAMU,MAAA,GAAS;MACbN,KAAA,EAAO;QACLC,UAAA,EAAY;UACVC,KAAA,EAAO;YACLO,YAAA,EAAc;cACZL,IAAA,EAAM;YACR;UACF;QACF;MACF;IACF;IAEA,MAAMC,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA;MACAC,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;EAEAZ,EAAA,CAAG,8EAA8E;IAC/E,MAAMU,MAAA,GAAS;MACbN,KAAA,EAAO;QACLC,UAAA,EAAY;UACVC,KAAA,EAAO;YACLO,YAAA,EAAc;cACZL,IAAA,EAAM;YACR;UACF;QACF;MACF;IACF;IAEA,MAAMC,MAAA,GAASR,iBAAA,CAAkB;MAC/BC,UAAA;MACAQ,MAAA;MACAC,KAAA,EAAO;IACT;IAEAZ,MAAA,CAAOU,MAAA,EAAQG,IAAI,CAAC;EACtB;AACF","ignoreList":[]}

package/dist/utilities/isEditing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"isEditing.d.ts","sourceRoot":"","sources":["../../src/utilities/isEditing.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,GAAI,qCAIvB;IACD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CACrB,KAAG,OAA0D,CAAA"}
+{"version":3,"file":"isEditing.d.ts","sourceRoot":"","sources":["../../src/utilities/isEditing.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,wCAInB;IACD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CACrB,KAAG,OAA0D,CAAA"}

package/dist/utilities/isPathMatchingRoute.d.ts

@@ -0,0 +1,8 @@
+export declare const isPathMatchingRoute: ({ currentRoute, exact, path: viewPath, sensitive, strict, }: {
+    currentRoute: string;
+    exact?: boolean;
+    path?: string;
+    sensitive?: boolean;
+    strict?: boolean;
+}) => boolean;
+//# sourceMappingURL=isPathMatchingRoute.d.ts.map

package/dist/utilities/isPathMatchingRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isPathMatchingRoute.d.ts","sourceRoot":"","sources":["../../src/utilities/isPathMatchingRoute.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,mBAAmB,gEAM7B;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB,YA4BA,CAAA"}

package/dist/utilities/isPathMatchingRoute.js

@@ -0,0 +1,30 @@
+import { pathToRegexp } from 'path-to-regexp';
+export const isPathMatchingRoute = ({
+  currentRoute,
+  exact,
+  path: viewPath,
+  sensitive,
+  strict
+}) => {
+  if (!viewPath) {
+    return false;
+  }
+  const keys = [];
+  const regex = pathToRegexp(viewPath, keys, {
+    sensitive,
+    strict
+  });
+  const match = regex.exec(currentRoute);
+  const viewRoute = match?.[0] || viewPath;
+  if (exact) {
+    return currentRoute === viewRoute;
+  }
+  if (!exact) {
+    if (!currentRoute.startsWith(viewRoute)) {
+      return false;
+    }
+    const remainingPath = currentRoute.slice(viewRoute.length);
+    return remainingPath === '' || remainingPath.startsWith('/');
+  }
+};
+//# sourceMappingURL=isPathMatchingRoute.js.map

package/dist/utilities/isPathMatchingRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isPathMatchingRoute.js","names":["pathToRegexp","isPathMatchingRoute","currentRoute","exact","path","viewPath","sensitive","strict","keys","regex","match","exec","viewRoute","startsWith","remainingPath","slice","length"],"sources":["../../src/utilities/isPathMatchingRoute.ts"],"sourcesContent":["import { pathToRegexp } from 'path-to-regexp'\n\nexport const isPathMatchingRoute = ({\n  currentRoute,\n  exact,\n  path: viewPath,\n  sensitive,\n  strict,\n}: {\n  currentRoute: string\n  exact?: boolean\n  path?: string\n  sensitive?: boolean\n  strict?: boolean\n}) => {\n  if (!viewPath) {\n    return false\n  }\n\n  const keys = []\n\n  const regex = pathToRegexp(viewPath, keys, {\n    sensitive,\n    strict,\n  })\n\n  const match = regex.exec(currentRoute)\n  const viewRoute = match?.[0] || viewPath\n\n  if (exact) {\n    return currentRoute === viewRoute\n  }\n\n  if (!exact) {\n    if (!currentRoute.startsWith(viewRoute)) {\n      return false\n    }\n\n    const remainingPath = currentRoute.slice(viewRoute.length)\n\n    return remainingPath === '' || remainingPath.startsWith('/')\n  }\n}\n"],"mappings":"AAAA,SAASA,YAAY,QAAQ;AAE7B,OAAO,MAAMC,mBAAA,GAAsBA,CAAC;EAClCC,YAAY;EACZC,KAAK;EACLC,IAAA,EAAMC,QAAQ;EACdC,SAAS;EACTC;AAAM,CAOP;EACC,IAAI,CAACF,QAAA,EAAU;IACb,OAAO;EACT;EAEA,MAAMG,IAAA,GAAO,EAAE;EAEf,MAAMC,KAAA,GAAQT,YAAA,CAAaK,QAAA,EAAUG,IAAA,EAAM;IACzCF,SAAA;IACAC;EACF;EAEA,MAAMG,KAAA,GAAQD,KAAA,CAAME,IAAI,CAACT,YAAA;EACzB,MAAMU,SAAA,GAAYF,KAAA,GAAQ,EAAE,IAAIL,QAAA;EAEhC,IAAIF,KAAA,EAAO;IACT,OAAOD,YAAA,KAAiBU,SAAA;EAC1B;EAEA,IAAI,CAACT,KAAA,EAAO;IACV,IAAI,CAACD,YAAA,CAAaW,UAAU,CAACD,SAAA,GAAY;MACvC,OAAO;IACT;IAEA,MAAME,aAAA,GAAgBZ,YAAA,CAAaa,KAAK,CAACH,SAAA,CAAUI,MAAM;IAEzD,OAAOF,aAAA,KAAkB,MAAMA,aAAA,CAAcD,UAAU,CAAC;EAC1D;AACF","ignoreList":[]}

package/dist/utilities/isPathMatchingRoute.spec.js

@@ -0,0 +1,178 @@
+import { describe, expect, it } from 'vitest';
+import { isPathMatchingRoute } from './isPathMatchingRoute.js';
+describe('isPathMatchingRoute', () => {
+  describe('no path defined', () => {
+    it('should return false when path is undefined', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/anything',
+        path: undefined
+      })).toBe(false);
+    });
+    it('should return false when path is empty string', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/anything',
+        path: ''
+      })).toBe(false);
+    });
+  });
+  describe('exact matching', () => {
+    it('should match when currentRoute exactly equals the static path', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/dashboard',
+        exact: true,
+        path: '/dashboard'
+      })).toBe(true);
+    });
+    it('should not match when currentRoute differs from the path', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/settings',
+        exact: true,
+        path: '/dashboard'
+      })).toBe(false);
+    });
+    it('should not match a sub-path when exact is true', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/dashboard/settings',
+        exact: true,
+        path: '/dashboard'
+      })).toBe(false);
+    });
+    it('should match a parameterized path exactly', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/custom/123',
+        exact: true,
+        path: '/custom/:id'
+      })).toBe(true);
+    });
+    it('should not match a parameterized path with extra segments', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/custom/123/edit',
+        exact: true,
+        path: '/custom/:id'
+      })).toBe(false);
+    });
+    it('should match root path exactly', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/',
+        exact: true,
+        path: '/'
+      })).toBe(true);
+    });
+    it('should not match root path against other routes when exact', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/login',
+        exact: true,
+        path: '/'
+      })).toBe(false);
+    });
+  });
+  describe('non-exact (prefix) matching', () => {
+    it('should match when currentRoute equals the path', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/dashboard',
+        path: '/dashboard'
+      })).toBe(true);
+    });
+    it('should match a sub-path at a segment boundary', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/dashboard/settings',
+        path: '/dashboard'
+      })).toBe(true);
+    });
+    it('should match deeply nested sub-paths', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/dashboard/settings/advanced/debug',
+        path: '/dashboard'
+      })).toBe(true);
+    });
+    it('should not match when route shares a prefix but not at a segment boundary', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/dashboard-extra',
+        path: '/dashboard'
+      })).toBe(false);
+    });
+    it('should not match a completely different route', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/settings',
+        path: '/dashboard'
+      })).toBe(false);
+    });
+    it('should match a parameterized path with a sub-path', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/custom/123/edit',
+        path: '/custom/:id'
+      })).toBe(false);
+      // pathToRegexp is end-anchored by default, so /custom/:id does not match /custom/123/edit.
+      // The literal fallback '/custom/:id' also won't startsWith-match.
+      // Parameterized views should use exact: true or include all segments in the pattern.
+    });
+    it('should match when :id captures the full segment including non-slash characters', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/custom/123extra',
+        path: '/custom/:id'
+      })).toBe(true);
+      // :id captures everything up to the next / — '123extra' is a valid :id value
+    });
+  });
+  describe('root path / without exact — regression for route shadowing bug', () => {
+    it('should match root path against itself', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/',
+        path: '/'
+      })).toBe(true);
+    });
+    it('should not match root path against /login', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/login',
+        path: '/'
+      })).toBe(false);
+    });
+    it('should not match root path against /collections/posts', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/collections/posts',
+        path: '/'
+      })).toBe(false);
+    });
+    it('should not match root path against /collections/posts/123', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/collections/posts/123',
+        path: '/'
+      })).toBe(false);
+    });
+  });
+  describe('sensitive option', () => {
+    it('should match case-insensitively by default', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/Dashboard',
+        exact: true,
+        path: '/dashboard'
+      })).toBe(true);
+    });
+    it('should not match different cases when sensitive is true', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/Dashboard',
+        exact: true,
+        path: '/dashboard',
+        sensitive: true
+      })).toBe(false);
+    });
+  });
+  describe('strict option', () => {
+    it('should match with or without trailing slash by default', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/dashboard/',
+        exact: true,
+        path: '/dashboard'
+      })).toBe(true);
+    });
+    it('should not match trailing slash mismatch when strict is true', () => {
+      expect(isPathMatchingRoute({
+        currentRoute: '/dashboard/',
+        exact: true,
+        path: '/dashboard',
+        strict: true
+      })).toBe(false);
+    });
+  });
+});
+//# sourceMappingURL=isPathMatchingRoute.spec.js.map

package/dist/utilities/isPathMatchingRoute.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isPathMatchingRoute.spec.js","names":["describe","expect","it","isPathMatchingRoute","currentRoute","path","undefined","toBe","exact","sensitive","strict"],"sources":["../../src/utilities/isPathMatchingRoute.spec.ts"],"sourcesContent":["import { describe, expect, it } from 'vitest'\n\nimport { isPathMatchingRoute } from './isPathMatchingRoute.js'\n\ndescribe('isPathMatchingRoute', () => {\n  describe('no path defined', () => {\n    it('should return false when path is undefined', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/anything', path: undefined })).toBe(false)\n    })\n\n    it('should return false when path is empty string', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/anything', path: '' })).toBe(false)\n    })\n  })\n\n  describe('exact matching', () => {\n    it('should match when currentRoute exactly equals the static path', () => {\n      expect(\n        isPathMatchingRoute({ currentRoute: '/dashboard', exact: true, path: '/dashboard' }),\n      ).toBe(true)\n    })\n\n    it('should not match when currentRoute differs from the path', () => {\n      expect(\n        isPathMatchingRoute({ currentRoute: '/settings', exact: true, path: '/dashboard' }),\n      ).toBe(false)\n    })\n\n    it('should not match a sub-path when exact is true', () => {\n      expect(\n        isPathMatchingRoute({\n          currentRoute: '/dashboard/settings',\n          exact: true,\n          path: '/dashboard',\n        }),\n      ).toBe(false)\n    })\n\n    it('should match a parameterized path exactly', () => {\n      expect(\n        isPathMatchingRoute({\n          currentRoute: '/custom/123',\n          exact: true,\n          path: '/custom/:id',\n        }),\n      ).toBe(true)\n    })\n\n    it('should not match a parameterized path with extra segments', () => {\n      expect(\n        isPathMatchingRoute({\n          currentRoute: '/custom/123/edit',\n          exact: true,\n          path: '/custom/:id',\n        }),\n      ).toBe(false)\n    })\n\n    it('should match root path exactly', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/', exact: true, path: '/' })).toBe(true)\n    })\n\n    it('should not match root path against other routes when exact', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/login', exact: true, path: '/' })).toBe(false)\n    })\n  })\n\n  describe('non-exact (prefix) matching', () => {\n    it('should match when currentRoute equals the path', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/dashboard', path: '/dashboard' })).toBe(true)\n    })\n\n    it('should match a sub-path at a segment boundary', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/dashboard/settings', path: '/dashboard' })).toBe(\n        true,\n      )\n    })\n\n    it('should match deeply nested sub-paths', () => {\n      expect(\n        isPathMatchingRoute({\n          currentRoute: '/dashboard/settings/advanced/debug',\n          path: '/dashboard',\n        }),\n      ).toBe(true)\n    })\n\n    it('should not match when route shares a prefix but not at a segment boundary', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/dashboard-extra', path: '/dashboard' })).toBe(\n        false,\n      )\n    })\n\n    it('should not match a completely different route', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/settings', path: '/dashboard' })).toBe(false)\n    })\n\n    it('should match a parameterized path with a sub-path', () => {\n      expect(\n        isPathMatchingRoute({\n          currentRoute: '/custom/123/edit',\n          path: '/custom/:id',\n        }),\n      ).toBe(false)\n      // pathToRegexp is end-anchored by default, so /custom/:id does not match /custom/123/edit.\n      // The literal fallback '/custom/:id' also won't startsWith-match.\n      // Parameterized views should use exact: true or include all segments in the pattern.\n    })\n\n    it('should match when :id captures the full segment including non-slash characters', () => {\n      expect(\n        isPathMatchingRoute({\n          currentRoute: '/custom/123extra',\n          path: '/custom/:id',\n        }),\n      ).toBe(true)\n      // :id captures everything up to the next / — '123extra' is a valid :id value\n    })\n  })\n\n  describe('root path / without exact — regression for route shadowing bug', () => {\n    it('should match root path against itself', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/', path: '/' })).toBe(true)\n    })\n\n    it('should not match root path against /login', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/login', path: '/' })).toBe(false)\n    })\n\n    it('should not match root path against /collections/posts', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/collections/posts', path: '/' })).toBe(false)\n    })\n\n    it('should not match root path against /collections/posts/123', () => {\n      expect(isPathMatchingRoute({ currentRoute: '/collections/posts/123', path: '/' })).toBe(false)\n    })\n  })\n\n  describe('sensitive option', () => {\n    it('should match case-insensitively by default', () => {\n      expect(\n        isPathMatchingRoute({\n          currentRoute: '/Dashboard',\n          exact: true,\n          path: '/dashboard',\n        }),\n      ).toBe(true)\n    })\n\n    it('should not match different cases when sensitive is true', () => {\n      expect(\n        isPathMatchingRoute({\n          currentRoute: '/Dashboard',\n          exact: true,\n          path: '/dashboard',\n          sensitive: true,\n        }),\n      ).toBe(false)\n    })\n  })\n\n  describe('strict option', () => {\n    it('should match with or without trailing slash by default', () => {\n      expect(\n        isPathMatchingRoute({\n          currentRoute: '/dashboard/',\n          exact: true,\n          path: '/dashboard',\n        }),\n      ).toBe(true)\n    })\n\n    it('should not match trailing slash mismatch when strict is true', () => {\n      expect(\n        isPathMatchingRoute({\n          currentRoute: '/dashboard/',\n          exact: true,\n          path: '/dashboard',\n          strict: true,\n        }),\n      ).toBe(false)\n    })\n  })\n})\n"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ;AAErC,SAASC,mBAAmB,QAAQ;AAEpCH,QAAA,CAAS,uBAAuB;EAC9BA,QAAA,CAAS,mBAAmB;IAC1BE,EAAA,CAAG,8CAA8C;MAC/CD,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAaC,IAAA,EAAMC;MAAU,IAAIC,IAAI,CAAC;IACnF;IAEAL,EAAA,CAAG,iDAAiD;MAClDD,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAaC,IAAA,EAAM;MAAG,IAAIE,IAAI,CAAC;IAC5E;EACF;EAEAP,QAAA,CAAS,kBAAkB;IACzBE,EAAA,CAAG,iEAAiE;MAClED,MAAA,CACEE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAcI,KAAA,EAAO;QAAMH,IAAA,EAAM;MAAa,IAClFE,IAAI,CAAC;IACT;IAEAL,EAAA,CAAG,4DAA4D;MAC7DD,MAAA,CACEE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAaI,KAAA,EAAO;QAAMH,IAAA,EAAM;MAAa,IACjFE,IAAI,CAAC;IACT;IAEAL,EAAA,CAAG,kDAAkD;MACnDD,MAAA,CACEE,mBAAA,CAAoB;QAClBC,YAAA,EAAc;QACdI,KAAA,EAAO;QACPH,IAAA,EAAM;MACR,IACAE,IAAI,CAAC;IACT;IAEAL,EAAA,CAAG,6CAA6C;MAC9CD,MAAA,CACEE,mBAAA,CAAoB;QAClBC,YAAA,EAAc;QACdI,KAAA,EAAO;QACPH,IAAA,EAAM;MACR,IACAE,IAAI,CAAC;IACT;IAEAL,EAAA,CAAG,6DAA6D;MAC9DD,MAAA,CACEE,mBAAA,CAAoB;QAClBC,YAAA,EAAc;QACdI,KAAA,EAAO;QACPH,IAAA,EAAM;MACR,IACAE,IAAI,CAAC;IACT;IAEAL,EAAA,CAAG,kCAAkC;MACnCD,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAKI,KAAA,EAAO;QAAMH,IAAA,EAAM;MAAI,IAAIE,IAAI,CAAC;IAClF;IAEAL,EAAA,CAAG,8DAA8D;MAC/DD,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAUI,KAAA,EAAO;QAAMH,IAAA,EAAM;MAAI,IAAIE,IAAI,CAAC;IACvF;EACF;EAEAP,QAAA,CAAS,+BAA+B;IACtCE,EAAA,CAAG,kDAAkD;MACnDD,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAcC,IAAA,EAAM;MAAa,IAAIE,IAAI,CAAC;IACvF;IAEAL,EAAA,CAAG,iDAAiD;MAClDD,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAuBC,IAAA,EAAM;MAAa,IAAIE,IAAI,CAC3F;IAEJ;IAEAL,EAAA,CAAG,wCAAwC;MACzCD,MAAA,CACEE,mBAAA,CAAoB;QAClBC,YAAA,EAAc;QACdC,IAAA,EAAM;MACR,IACAE,IAAI,CAAC;IACT;IAEAL,EAAA,CAAG,6EAA6E;MAC9ED,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAoBC,IAAA,EAAM;MAAa,IAAIE,IAAI,CACxF;IAEJ;IAEAL,EAAA,CAAG,iDAAiD;MAClDD,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAaC,IAAA,EAAM;MAAa,IAAIE,IAAI,CAAC;IACtF;IAEAL,EAAA,CAAG,qDAAqD;MACtDD,MAAA,CACEE,mBAAA,CAAoB;QAClBC,YAAA,EAAc;QACdC,IAAA,EAAM;MACR,IACAE,IAAI,CAAC;MACP;MACA;MACA;IACF;IAEAL,EAAA,CAAG,kFAAkF;MACnFD,MAAA,CACEE,mBAAA,CAAoB;QAClBC,YAAA,EAAc;QACdC,IAAA,EAAM;MACR,IACAE,IAAI,CAAC;MACP;IACF;EACF;EAEAP,QAAA,CAAS,kEAAkE;IACzEE,EAAA,CAAG,yCAAyC;MAC1CD,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAKC,IAAA,EAAM;MAAI,IAAIE,IAAI,CAAC;IACrE;IAEAL,EAAA,CAAG,6CAA6C;MAC9CD,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAUC,IAAA,EAAM;MAAI,IAAIE,IAAI,CAAC;IAC1E;IAEAL,EAAA,CAAG,yDAAyD;MAC1DD,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAAsBC,IAAA,EAAM;MAAI,IAAIE,IAAI,CAAC;IACtF;IAEAL,EAAA,CAAG,6DAA6D;MAC9DD,MAAA,CAAOE,mBAAA,CAAoB;QAAEC,YAAA,EAAc;QAA0BC,IAAA,EAAM;MAAI,IAAIE,IAAI,CAAC;IAC1F;EACF;EAEAP,QAAA,CAAS,oBAAoB;IAC3BE,EAAA,CAAG,8CAA8C;MAC/CD,MAAA,CACEE,mBAAA,CAAoB;QAClBC,YAAA,EAAc;QACdI,KAAA,EAAO;QACPH,IAAA,EAAM;MACR,IACAE,IAAI,CAAC;IACT;IAEAL,EAAA,CAAG,2DAA2D;MAC5DD,MAAA,CACEE,mBAAA,CAAoB;QAClBC,YAAA,EAAc;QACdI,KAAA,EAAO;QACPH,IAAA,EAAM;QACNI,SAAA,EAAW;MACb,IACAF,IAAI,CAAC;IACT;EACF;EAEAP,QAAA,CAAS,iBAAiB;IACxBE,EAAA,CAAG,0DAA0D;MAC3DD,MAAA,CACEE,mBAAA,CAAoB;QAClBC,YAAA,EAAc;QACdI,KAAA,EAAO;QACPH,IAAA,EAAM;MACR,IACAE,IAAI,CAAC;IACT;IAEAL,EAAA,CAAG,gEAAgE;MACjED,MAAA,CACEE,mBAAA,CAAoB;QAClBC,YAAA,EAAc;QACdI,KAAA,EAAO;QACPH,IAAA,EAAM;QACNK,MAAA,EAAQ;MACV,IACAH,IAAI,CAAC;IACT;EACF;AACF","ignoreList":[]}

package/dist/utilities/isPublicAdminRoute.d.ts

@@ -0,0 +1,7 @@
+import type { SanitizedConfig } from 'payload';
+export declare const isPublicAdminRoute: ({ adminRoute, config, route, }: {
+    adminRoute: string;
+    config: SanitizedConfig;
+    route: string;
+}) => boolean;
+//# sourceMappingURL=isPublicAdminRoute.d.ts.map

package/dist/utilities/isPublicAdminRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isPublicAdminRoute.d.ts","sourceRoot":"","sources":["../../src/utilities/isPublicAdminRoute.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAmB9C,eAAO,MAAM,kBAAkB,mCAI5B;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,eAAe,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;CACd,KAAG,OAaH,CAAA"}

package/dist/utilities/isPublicAdminRoute.js

@@ -0,0 +1,24 @@
+import { getRouteWithoutAdmin } from './getRouteWithoutAdmin.js';
+// Routes that are accessible without admin authentication
+const publicAdminRoutes = ['createFirstUser', 'forgot', 'login', 'logout', 'forgot', 'inactivity', 'unauthorized', 'reset'];
+export const isPublicAdminRoute = ({
+  adminRoute,
+  config,
+  route
+}) => {
+  return publicAdminRoutes.some(routeSegment => {
+    const segment = config.admin?.routes?.[routeSegment] || routeSegment;
+    const routeWithoutAdmin = getRouteWithoutAdmin({
+      adminRoute,
+      route
+    });
+    if (routeWithoutAdmin.startsWith(segment)) {
+      return true;
+    } else if (routeWithoutAdmin.includes('/verify/')) {
+      return true;
+    } else {
+      return false;
+    }
+  });
+};
+//# sourceMappingURL=isPublicAdminRoute.js.map

package/dist/utilities/isPublicAdminRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isPublicAdminRoute.js","names":["getRouteWithoutAdmin","publicAdminRoutes","isPublicAdminRoute","adminRoute","config","route","some","routeSegment","segment","admin","routes","routeWithoutAdmin","startsWith","includes"],"sources":["../../src/utilities/isPublicAdminRoute.ts"],"sourcesContent":["import type { SanitizedConfig } from 'payload'\n\nimport { getRouteWithoutAdmin } from './getRouteWithoutAdmin.js'\n\n// Routes that are accessible without admin authentication\nconst publicAdminRoutes: (keyof Pick<\n  SanitizedConfig['admin']['routes'],\n  'createFirstUser' | 'forgot' | 'inactivity' | 'login' | 'logout' | 'reset' | 'unauthorized'\n>)[] = [\n  'createFirstUser',\n  'forgot',\n  'login',\n  'logout',\n  'forgot',\n  'inactivity',\n  'unauthorized',\n  'reset',\n]\n\nexport const isPublicAdminRoute = ({\n  adminRoute,\n  config,\n  route,\n}: {\n  adminRoute: string\n  config: SanitizedConfig\n  route: string\n}): boolean => {\n  return publicAdminRoutes.some((routeSegment) => {\n    const segment = config.admin?.routes?.[routeSegment] || routeSegment\n    const routeWithoutAdmin = getRouteWithoutAdmin({ adminRoute, route })\n\n    if (routeWithoutAdmin.startsWith(segment)) {\n      return true\n    } else if (routeWithoutAdmin.includes('/verify/')) {\n      return true\n    } else {\n      return false\n    }\n  })\n}\n"],"mappings":"AAEA,SAASA,oBAAoB,QAAQ;AAErC;AACA,MAAMC,iBAAA,GAGC,CACL,mBACA,UACA,SACA,UACA,UACA,cACA,gBACA,QACD;AAED,OAAO,MAAMC,kBAAA,GAAqBA,CAAC;EACjCC,UAAU;EACVC,MAAM;EACNC;AAAK,CAKN;EACC,OAAOJ,iBAAA,CAAkBK,IAAI,CAAEC,YAAA;IAC7B,MAAMC,OAAA,GAAUJ,MAAA,CAAOK,KAAK,EAAEC,MAAA,GAASH,YAAA,CAAa,IAAIA,YAAA;IACxD,MAAMI,iBAAA,GAAoBX,oBAAA,CAAqB;MAAEG,UAAA;MAAYE;IAAM;IAEnE,IAAIM,iBAAA,CAAkBC,UAAU,CAACJ,OAAA,GAAU;MACzC,OAAO;IACT,OAAO,IAAIG,iBAAA,CAAkBE,QAAQ,CAAC,aAAa;MACjD,OAAO;IACT,OAAO;MACL,OAAO;IACT;EACF;AACF","ignoreList":[]}

package/dist/utilities/isURLAllowed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"isURLAllowed.d.ts","sourceRoot":"","sources":["../../src/utilities/isURLAllowed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAExC,eAAO,MAAM,YAAY,GAAI,KAAK,MAAM,EAAE,WAAW,SAAS,KAAG,OA+BhE,CAAA"}
+{"version":3,"file":"isURLAllowed.d.ts","sourceRoot":"","sources":["../../src/utilities/isURLAllowed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAExC,eAAO,MAAM,YAAY,QAAS,MAAM,aAAa,SAAS,KAAG,OAqChE,CAAA"}

package/dist/utilities/isURLAllowed.js

@@ -12,9 +12,15 @@ export const isURLAllowed = (url, allowList) => {
           return typeof value === 'string' && parsedUrl.protocol === `${value}:`;
         }
         if (key === 'pathname') {
-          // Convert wildcards to a regex
-          const regexPattern = value.replace(/\*\*/g, '.*') // Match any path
-          .replace(/\*/g, '[^/]*') // Match any part of a path segment
+          // Translate a small glob syntax to a regex. The pattern is escaped
+          // first so that metacharacters in the configured value (e.g. `.`)
+          // match literally and cannot broaden what the allow-list accepts.
+          // Wildcards become `\*` once escaped, so they are restored afterwards
+          // — translating `**` before `*` is safe because the resulting `.*`
+          // no longer contains an escaped `\*` for the next replace to match.
+          const regexPattern = value.replace(/[\\^$*+?.()|[\]{}]/g, '\\$&') // Escape regex metacharacters
+          .replace(/\\\*\\\*/g, '.*') // `**` → match any path
+          .replace(/\\\*/g, '[^/]*') // `*` → match any part of a path segment
 ;
           const regex = new RegExp(`^${regexPattern}$`);
           return regex.test(parsedUrl.pathname);

package/dist/utilities/isURLAllowed.js.map

@@ -1 +1 @@
-{"version":3,"file":"isURLAllowed.js","names":["isURLAllowed","url","allowList","parsedUrl","URL","some","allowItem","Object","entries","every","key","value","protocol","regexPattern","replace","regex","RegExp","test","pathname"],"sources":["../../src/utilities/isURLAllowed.ts"],"sourcesContent":["import type { AllowList } from 'payload'\n\nexport const isURLAllowed = (url: string, allowList: AllowList): boolean => {\n  try {\n    const parsedUrl = new URL(url)\n\n    return allowList.some((allowItem) => {\n      return Object.entries(allowItem).every(([key, value]) => {\n        // Skip undefined or null values\n        if (!value) {\n          return true\n        }\n        // Compare protocol with colon\n        if (key === 'protocol') {\n          return typeof value === 'string' && parsedUrl.protocol === `${value}:`\n        }\n\n        if (key === 'pathname') {\n          // Convert wildcards to a regex\n          const regexPattern = value\n            .replace(/\\*\\*/g, '.*') // Match any path\n            .replace(/\\*/g, '[^/]*') // Match any part of a path segment\n          const regex = new RegExp(`^${regexPattern}$`)\n          return regex.test(parsedUrl.pathname)\n        }\n\n        // Default comparison for all other properties (hostname, port, search)\n        return parsedUrl[key as keyof URL] === value\n      })\n    })\n  } catch {\n    return false // If the URL is invalid, deny by default\n  }\n}\n"],"mappings":"AAEA,OAAO,MAAMA,YAAA,GAAeA,CAACC,GAAA,EAAaC,SAAA;EACxC,IAAI;IACF,MAAMC,SAAA,GAAY,IAAIC,GAAA,CAAIH,GAAA;IAE1B,OAAOC,SAAA,CAAUG,IAAI,CAAEC,SAAA;MACrB,OAAOC,MAAA,CAAOC,OAAO,CAACF,SAAA,EAAWG,KAAK,CAAC,CAAC,CAACC,GAAA,EAAKC,KAAA,CAAM;QAClD;QACA,IAAI,CAACA,KAAA,EAAO;UACV,OAAO;QACT;QACA;QACA,IAAID,GAAA,KAAQ,YAAY;UACtB,OAAO,OAAOC,KAAA,KAAU,YAAYR,SAAA,CAAUS,QAAQ,KAAK,GAAGD,KAAA,GAAQ;QACxE;QAEA,IAAID,GAAA,KAAQ,YAAY;UACtB;UACA,MAAMG,YAAA,GAAeF,KAAA,CAClBG,OAAO,CAAC,SAAS,MAAM;UAAA,CACvBA,OAAO,CAAC,OAAO,SAAS;AAAA;UAC3B,MAAMC,KAAA,GAAQ,IAAIC,MAAA,CAAO,IAAIH,YAAA,GAAe;UAC5C,OAAOE,KAAA,CAAME,IAAI,CAACd,SAAA,CAAUe,QAAQ;QACtC;QAEA;QACA,OAAOf,SAAS,CAACO,GAAA,CAAiB,KAAKC,KAAA;MACzC;IACF;EACF,EAAE,MAAM;IACN,OAAO,MAAM;AAAA;EACf;AACF","ignoreList":[]}
+{"version":3,"file":"isURLAllowed.js","names":["isURLAllowed","url","allowList","parsedUrl","URL","some","allowItem","Object","entries","every","key","value","protocol","regexPattern","replace","regex","RegExp","test","pathname"],"sources":["../../src/utilities/isURLAllowed.ts"],"sourcesContent":["import type { AllowList } from 'payload'\n\nexport const isURLAllowed = (url: string, allowList: AllowList): boolean => {\n  try {\n    const parsedUrl = new URL(url)\n\n    return allowList.some((allowItem) => {\n      return Object.entries(allowItem).every(([key, value]) => {\n        // Skip undefined or null values\n        if (!value) {\n          return true\n        }\n        // Compare protocol with colon\n        if (key === 'protocol') {\n          return typeof value === 'string' && parsedUrl.protocol === `${value}:`\n        }\n\n        if (key === 'pathname') {\n          // Translate a small glob syntax to a regex. The pattern is escaped\n          // first so that metacharacters in the configured value (e.g. `.`)\n          // match literally and cannot broaden what the allow-list accepts.\n          // Wildcards become `\\*` once escaped, so they are restored afterwards\n          // — translating `**` before `*` is safe because the resulting `.*`\n          // no longer contains an escaped `\\*` for the next replace to match.\n          const regexPattern = value\n            .replace(/[\\\\^$*+?.()|[\\]{}]/g, '\\\\$&') // Escape regex metacharacters\n            .replace(/\\\\\\*\\\\\\*/g, '.*') // `**` → match any path\n            .replace(/\\\\\\*/g, '[^/]*') // `*` → match any part of a path segment\n          const regex = new RegExp(`^${regexPattern}$`)\n          return regex.test(parsedUrl.pathname)\n        }\n\n        // Default comparison for all other properties (hostname, port, search)\n        return parsedUrl[key as keyof URL] === value\n      })\n    })\n  } catch {\n    return false // If the URL is invalid, deny by default\n  }\n}\n"],"mappings":"AAEA,OAAO,MAAMA,YAAA,GAAeA,CAACC,GAAA,EAAaC,SAAA;EACxC,IAAI;IACF,MAAMC,SAAA,GAAY,IAAIC,GAAA,CAAIH,GAAA;IAE1B,OAAOC,SAAA,CAAUG,IAAI,CAAEC,SAAA;MACrB,OAAOC,MAAA,CAAOC,OAAO,CAACF,SAAA,EAAWG,KAAK,CAAC,CAAC,CAACC,GAAA,EAAKC,KAAA,CAAM;QAClD;QACA,IAAI,CAACA,KAAA,EAAO;UACV,OAAO;QACT;QACA;QACA,IAAID,GAAA,KAAQ,YAAY;UACtB,OAAO,OAAOC,KAAA,KAAU,YAAYR,SAAA,CAAUS,QAAQ,KAAK,GAAGD,KAAA,GAAQ;QACxE;QAEA,IAAID,GAAA,KAAQ,YAAY;UACtB;UACA;UACA;UACA;UACA;UACA;UACA,MAAMG,YAAA,GAAeF,KAAA,CAClBG,OAAO,CAAC,uBAAuB,QAAQ;UAAA,CACvCA,OAAO,CAAC,aAAa,MAAM;UAAA,CAC3BA,OAAO,CAAC,SAAS,SAAS;AAAA;UAC7B,MAAMC,KAAA,GAAQ,IAAIC,MAAA,CAAO,IAAIH,YAAA,GAAe;UAC5C,OAAOE,KAAA,CAAME,IAAI,CAACd,SAAA,CAAUe,QAAQ;QACtC;QAEA;QACA,OAAOf,SAAS,CAACO,GAAA,CAAiB,KAAKC,KAAA;MACzC;IACF;EACF,EAAE,MAAM;IACN,OAAO,MAAM;AAAA;EACf;AACF","ignoreList":[]}

package/dist/utilities/recentlyViewed.d.ts

@@ -0,0 +1,16 @@
+import type { RecentlyViewedItem, RecentlyViewedPreferences } from 'payload';
+/**
+ * Maximum number of documents retained in the `recently-viewed` preference. The dashboard widget
+ * typically shows fewer; the extra entries act as a buffer once excluded collections are filtered.
+ */
+export declare const recentlyViewedMaxItems = 20;
+/**
+ * Returns a new preference value with `item` moved to the front, deduped by collection + id, and
+ * capped at `max`. Pure so it can be unit tested and reused as `upsertPreferences`' customMerge.
+ */
+export declare const addRecentlyViewedItem: ({ existing, item, max, }: {
+    existing: RecentlyViewedPreferences | undefined;
+    item: RecentlyViewedItem;
+    max?: number;
+}) => RecentlyViewedPreferences;
+//# sourceMappingURL=recentlyViewed.d.ts.map

package/dist/utilities/recentlyViewed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recentlyViewed.d.ts","sourceRoot":"","sources":["../../src/utilities/recentlyViewed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAA;AAE5E;;;GAGG;AACH,eAAO,MAAM,sBAAsB,KAAK,CAAA;AAKxC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,6BAI/B;IACD,QAAQ,EAAE,yBAAyB,GAAG,SAAS,CAAA;IAC/C,IAAI,EAAE,kBAAkB,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,KAAG,yBASH,CAAA"}

package/dist/utilities/recentlyViewed.js

@@ -0,0 +1,21 @@
+/**
+ * Maximum number of documents retained in the `recently-viewed` preference. The dashboard widget
+ * typically shows fewer; the extra entries act as a buffer once excluded collections are filtered.
+ */export const recentlyViewedMaxItems = 20;
+const isSameDocument = (a, b) => a.collectionSlug === b.collectionSlug && String(a.id) === String(b.id);
+/**
+ * Returns a new preference value with `item` moved to the front, deduped by collection + id, and
+ * capped at `max`. Pure so it can be unit tested and reused as `upsertPreferences`' customMerge.
+ */
+export const addRecentlyViewedItem = ({
+  existing,
+  item,
+  max = recentlyViewedMaxItems
+}) => {
+  const previousItems = Array.isArray(existing?.items) ? existing.items : [];
+  const withoutDuplicate = previousItems.filter(existingItem => !isSameDocument(existingItem, item));
+  return {
+    items: [item, ...withoutDuplicate].slice(0, max)
+  };
+};
+//# sourceMappingURL=recentlyViewed.js.map

package/dist/utilities/recentlyViewed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recentlyViewed.js","names":["recentlyViewedMaxItems","isSameDocument","a","b","collectionSlug","String","id","addRecentlyViewedItem","existing","item","max","previousItems","Array","isArray","items","withoutDuplicate","filter","existingItem","slice"],"sources":["../../src/utilities/recentlyViewed.ts"],"sourcesContent":["import type { RecentlyViewedItem, RecentlyViewedPreferences } from 'payload'\n\n/**\n * Maximum number of documents retained in the `recently-viewed` preference. The dashboard widget\n * typically shows fewer; the extra entries act as a buffer once excluded collections are filtered.\n */\nexport const recentlyViewedMaxItems = 20\n\nconst isSameDocument = (a: RecentlyViewedItem, b: RecentlyViewedItem) =>\n  a.collectionSlug === b.collectionSlug && String(a.id) === String(b.id)\n\n/**\n * Returns a new preference value with `item` moved to the front, deduped by collection + id, and\n * capped at `max`. Pure so it can be unit tested and reused as `upsertPreferences`' customMerge.\n */\nexport const addRecentlyViewedItem = ({\n  existing,\n  item,\n  max = recentlyViewedMaxItems,\n}: {\n  existing: RecentlyViewedPreferences | undefined\n  item: RecentlyViewedItem\n  max?: number\n}): RecentlyViewedPreferences => {\n  const previousItems = Array.isArray(existing?.items) ? existing.items : []\n  const withoutDuplicate = previousItems.filter(\n    (existingItem) => !isSameDocument(existingItem, item),\n  )\n\n  return {\n    items: [item, ...withoutDuplicate].slice(0, max),\n  }\n}\n"],"mappings":"AAEA;;;GAIA,OAAO,MAAMA,sBAAA,GAAyB;AAEtC,MAAMC,cAAA,GAAiBA,CAACC,CAAA,EAAuBC,CAAA,KAC7CD,CAAA,CAAEE,cAAc,KAAKD,CAAA,CAAEC,cAAc,IAAIC,MAAA,CAAOH,CAAA,CAAEI,EAAE,MAAMD,MAAA,CAAOF,CAAA,CAAEG,EAAE;AAEvE;;;;AAIA,OAAO,MAAMC,qBAAA,GAAwBA,CAAC;EACpCC,QAAQ;EACRC,IAAI;EACJC,GAAA,GAAMV;AAAsB,CAK7B;EACC,MAAMW,aAAA,GAAgBC,KAAA,CAAMC,OAAO,CAACL,QAAA,EAAUM,KAAA,IAASN,QAAA,CAASM,KAAK,GAAG,EAAE;EAC1E,MAAMC,gBAAA,GAAmBJ,aAAA,CAAcK,MAAM,CAC1CC,YAAA,IAAiB,CAAChB,cAAA,CAAegB,YAAA,EAAcR,IAAA;EAGlD,OAAO;IACLK,KAAA,EAAO,CAACL,IAAA,E,GAASM,gBAAA,CAAiB,CAACG,KAAK,CAAC,GAAGR,GAAA;EAC9C;AACF","ignoreList":[]}