@pro-laico/payload-icons 0.0.0

package/dist/hooks/formatSVG.js

@@ -0,0 +1,270 @@
+// Strip executable content from untrusted SVG uploads before they're stored and later inlined
+// via dangerouslySetInnerHTML: <script> elements (svgo 4's `removeScripts`, renamed from 3.x's
+// `removeScriptElement`) + on* event handlers. Also drop legacy editor attributes that survive
+// preset-default and break React rendering when the root attrs are spread onto a JSX <svg>
+// (`xml:space` → "Invalid DOM property") or mean nothing inline (`version`, `enable-background`).
+const sanitizePlugins = [
+    'removeScripts',
+    // elemSeparator '|': removeAttrs treats ':' as its element:attr:value separator, which would
+    // split the literal attribute name `xml:space` — swap the separator so it matches verbatim.
+    {
+        name: 'removeAttrs',
+        params: {
+            attrs: [
+                'on.*',
+                'xml:space',
+                'enable-background',
+                'version'
+            ],
+            elemSeparator: '|'
+        }
+    }
+];
+// svgo has no builtin for javascript: URLs, so scrub (xlink:)href values from the serialized
+// output as a final pass.
+const stripDangerousUrls = (svg)=>svg.replace(/\s(?:xlink:)?href\s*=\s*(["'])\s*javascript:[^"']*\1/gi, '');
+// The optimizer targets FILL glyphs: presentation attrs are stripped and fill="currentColor" is
+// re-added, so a stroke-outline source (Lucide-style) renders its enclosed shapes as solid blobs.
+const STROKE_WARNING = 'Warning: stroke-based icon detected — enclosed shapes will render filled. Use a fill-based glyph.';
+const isStrokeBased = (svg)=>/fill\s*=\s*(["'])\s*none\s*\1/i.test(svg) && /\bstroke(?:-width)?\s*=/i.test(svg);
+/**
+ * Optimize and sanitize an uploaded SVG: run svgo (sanitize → preset-default → strip presentation
+ * attrs → re-add `currentColor` fill/stroke so the icon themes with CSS color), tighten the
+ * `viewBox` to the real path bounds, and store the result as `svgString` for inline rendering.
+ *
+ * svgo + svg-path-bbox are imported dynamically so they never land in a frontend/edge bundle —
+ * this only runs server-side when an SVG is actually uploaded. On failure the raw upload is still
+ * stored (never optimized/inlined) and the `optimized` field carries the error so the doc shows it.
+ */ export const formatSvg = async (icon, svgData, logger)=>{
+    try {
+        const [{ optimize }, { svgPathBbox }] = await Promise.all([
+            import("svgo"),
+            import("svg-path-bbox")
+        ]);
+        const svg = svgData.toString('utf-8');
+        const originalSize = svgData.length;
+        const strokeBased = isStrokeBased(svg);
+        if (strokeBased) logger.warn(`[payload-icons] ${STROKE_WARNING}`);
+        // Prefix the report field so the editor sees the warning on the doc, not just in the server log.
+        const report = (msg)=>strokeBased ? `${STROKE_WARNING} ${msg}` : msg;
+        const hasTransforms = svg.includes('transform=');
+        const hasClipPaths = svg.includes('clip-path=') || svg.includes('<clipPath');
+        if (hasTransforms || hasClipPaths) {
+            logger.warn({
+                msg: '[payload-icons] Unsupported SVG features; skipping optimization (scripts still stripped)',
+                hasClipPaths,
+                hasTransforms
+            });
+            // Even when we skip optimization we MUST strip scripts/event handlers, because svgString is
+            // later inlined via dangerouslySetInnerHTML for every visitor.
+            const sanitized = stripDangerousUrls(optimize(svg, {
+                multipass: false,
+                plugins: sanitizePlugins
+            }).data);
+            return {
+                ...icon,
+                optimized: report('Skipped optimization (transform/clip-path present); scripts stripped'),
+                svgString: sanitized
+            };
+        }
+        const optimized = optimize(svg, {
+            path: 'input.svg',
+            multipass: true,
+            plugins: [
+                // Strip <script> elements + on* handlers first so nothing downstream re-introduces them.
+                ...sanitizePlugins,
+                'preset-default',
+                'convertStyleToAttrs',
+                'removeDimensions',
+                {
+                    name: 'removeAttrs',
+                    params: {
+                        attrs: [
+                            'fill',
+                            'stroke',
+                            'stroke-width',
+                            'stroke-linecap',
+                            'stroke-linejoin',
+                            'stroke-miterlimit',
+                            'stroke-dasharray',
+                            'stroke-dashoffset'
+                        ]
+                    }
+                },
+                {
+                    name: 'cleanupIds',
+                    params: {
+                        minify: true,
+                        remove: false
+                    }
+                },
+                {
+                    name: 'mergePaths',
+                    params: {
+                        force: false,
+                        noSpaceAfterFlags: true
+                    }
+                },
+                {
+                    name: 'cleanupNumericValues',
+                    params: {
+                        floatPrecision: 1,
+                        leadingZero: true
+                    }
+                },
+                {
+                    name: 'removeUnknownsAndDefaults',
+                    params: {
+                        keepAriaAttrs: true,
+                        keepDataAttrs: true,
+                        keepRoleAttr: true
+                    }
+                },
+                // Re-add currentColor so the icon inherits CSS `color` on the frontend (after the
+                // presentation attrs above were stripped).
+                {
+                    name: 'addAttributesToSVGElement',
+                    params: {
+                        attributes: [
+                            {
+                                fill: 'currentColor'
+                            },
+                            {
+                                stroke: 'currentColor'
+                            }
+                        ]
+                    }
+                },
+                {
+                    name: 'convertTransform',
+                    params: {
+                        convertToShorts: true,
+                        degPrecision: 1,
+                        floatPrecision: 1,
+                        transformPrecision: 1
+                    }
+                },
+                {
+                    name: 'convertPathData',
+                    params: {
+                        floatPrecision: 1,
+                        leadingZero: true,
+                        noSpaceAfterFlags: true,
+                        removeUseless: true,
+                        straightCurves: true,
+                        transformPrecision: 1
+                    }
+                },
+                {
+                    name: 'sortAttrs',
+                    params: {
+                        order: [
+                            'id',
+                            'class',
+                            'style',
+                            'x',
+                            'y',
+                            'width',
+                            'height',
+                            'viewBox',
+                            'fill',
+                            'stroke',
+                            'stroke-width',
+                            'stroke-linecap',
+                            'stroke-linejoin',
+                            'stroke-miterlimit',
+                            'stroke-dasharray',
+                            'stroke-dashoffset',
+                            'd',
+                            'transform'
+                        ]
+                    }
+                }
+            ],
+            js2svg: {
+                pretty: true,
+                indent: 2,
+                eol: 'lf'
+            }
+        });
+        let svgStr = optimized.data;
+        svgStr = svgStr.replace(/viewBox="([^"]+)"/g, (_match, viewBox)=>{
+            const coords = viewBox.split(' ').map((coord)=>Number.isNaN(parseFloat(coord)) ? coord : parseFloat(coord).toFixed(1)).join(' ');
+            return `viewBox="${coords}"`;
+        });
+        const paths = Array.from(svgStr.matchAll(/<path[^>]*d="([^"]+)"/g));
+        if (paths.length) {
+            let minX = Infinity;
+            let minY = Infinity;
+            let maxX = -Infinity;
+            let maxY = -Infinity;
+            for (const [, d] of paths){
+                if (!d) continue;
+                try {
+                    const [x1, y1, x2, y2] = svgPathBbox(d);
+                    minX = Math.min(minX, x1);
+                    minY = Math.min(minY, y1);
+                    maxX = Math.max(maxX, x2);
+                    maxY = Math.max(maxY, y2);
+                } catch (e) {
+                    logger.warn({
+                        msg: '[payload-icons] Failed to calculate path bounds',
+                        err: e
+                    });
+                }
+            }
+            if (minX !== Infinity && minY !== Infinity && maxX !== -Infinity && maxY !== -Infinity) {
+                const width = maxX - minX;
+                const height = maxY - minY;
+                // Square the viewBox around the glyph's center so icons share a consistent box.
+                const side = Math.max(width, height);
+                const centerX = minX + width / 2;
+                const centerY = minY + height / 2;
+                const newViewBox = `${(centerX - side / 2).toFixed(1)} ${(centerY - side / 2).toFixed(1)} ${side.toFixed(1)} ${side.toFixed(1)}`;
+                svgStr = svgStr.includes('viewBox=') ? svgStr.replace(/viewBox="[^"]+"/, `viewBox="${newViewBox}"`) : svgStr.replace('<svg', `<svg viewBox="${newViewBox}"`);
+            }
+        }
+        svgStr = stripDangerousUrls(svgStr);
+        const finalSize = Buffer.from(svgStr).length;
+        const reduction = originalSize - finalSize;
+        const reductionPercentage = (reduction / originalSize * 100).toFixed(1);
+        const optimizedString = `SVG optimized: ${originalSize} to ${finalSize} bytes (${reductionPercentage}% reduction)`;
+        logger.info(`[payload-icons] ${optimizedString}`);
+        return {
+            ...icon,
+            filesize: finalSize,
+            optimized: report(optimizedString),
+            svgString: svgStr
+        };
+    } catch (error) {
+        logger.error({
+            msg: '[payload-icons] Error processing SVG',
+            err: error
+        });
+        // Surface the failure on the doc itself — both output fields are condition-hidden when empty,
+        // so a silent return would look like a normal save while the icon never renders.
+        return {
+            ...icon,
+            optimized: `Optimization failed: ${error instanceof Error ? error.message : String(error)} — icon will not render.`
+        };
+    }
+};
+/** `beforeChange` hook: when an SVG file is uploaded (create or update), optimize + sanitize it
+ *  and fold `svgString`/`optimized` into the doc. A no-op for changes that carry no new file. */ export const formatSVGHook = async ({ data, operation, req })=>{
+    if (operation === 'create' || operation === 'update') {
+        if (data?.filename && req.file) {
+            try {
+                return await formatSvg(data, req.file.data, req.payload.logger);
+            } catch (error) {
+                req.payload.logger.warn({
+                    msg: '[payload-icons] Error in formatSVGHook',
+                    err: error
+                });
+                return data;
+            }
+        }
+    }
+    return data;
+};
+
+//# sourceMappingURL=formatSVG.js.map

package/dist/hooks/formatSVG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/hooks/formatSVG.ts"],"sourcesContent":["import type { CollectionBeforeChangeHook, Payload } from 'payload'\nimport type { PluginConfig } from 'svgo'\n\n/** The subset of an icon doc this hook writes. */\ntype IconData = Record<string, unknown> & { filesize?: number; optimized?: string; svgString?: string }\n\n// Strip executable content from untrusted SVG uploads before they're stored and later inlined\n// via dangerouslySetInnerHTML: <script> elements (svgo 4's `removeScripts`, renamed from 3.x's\n// `removeScriptElement`) + on* event handlers. Also drop legacy editor attributes that survive\n// preset-default and break React rendering when the root attrs are spread onto a JSX <svg>\n// (`xml:space` → \"Invalid DOM property\") or mean nothing inline (`version`, `enable-background`).\nconst sanitizePlugins: PluginConfig[] = [\n  'removeScripts',\n  // elemSeparator '|': removeAttrs treats ':' as its element:attr:value separator, which would\n  // split the literal attribute name `xml:space` — swap the separator so it matches verbatim.\n  { name: 'removeAttrs', params: { attrs: ['on.*', 'xml:space', 'enable-background', 'version'], elemSeparator: '|' } },\n]\n\n// svgo has no builtin for javascript: URLs, so scrub (xlink:)href values from the serialized\n// output as a final pass.\nconst stripDangerousUrls = (svg: string): string => svg.replace(/\\s(?:xlink:)?href\\s*=\\s*([\"'])\\s*javascript:[^\"']*\\1/gi, '')\n\n// The optimizer targets FILL glyphs: presentation attrs are stripped and fill=\"currentColor\" is\n// re-added, so a stroke-outline source (Lucide-style) renders its enclosed shapes as solid blobs.\nconst STROKE_WARNING = 'Warning: stroke-based icon detected — enclosed shapes will render filled. Use a fill-based glyph.'\nconst isStrokeBased = (svg: string): boolean => /fill\\s*=\\s*([\"'])\\s*none\\s*\\1/i.test(svg) && /\\bstroke(?:-width)?\\s*=/i.test(svg)\n\n/**\n * Optimize and sanitize an uploaded SVG: run svgo (sanitize → preset-default → strip presentation\n * attrs → re-add `currentColor` fill/stroke so the icon themes with CSS color), tighten the\n * `viewBox` to the real path bounds, and store the result as `svgString` for inline rendering.\n *\n * svgo + svg-path-bbox are imported dynamically so they never land in a frontend/edge bundle —\n * this only runs server-side when an SVG is actually uploaded. On failure the raw upload is still\n * stored (never optimized/inlined) and the `optimized` field carries the error so the doc shows it.\n */\nexport const formatSvg = async (icon: IconData, svgData: Buffer, logger: Payload['logger']): Promise<IconData> => {\n  try {\n    const [{ optimize }, { svgPathBbox }] = await Promise.all([import('svgo'), import('svg-path-bbox')])\n\n    const svg = svgData.toString('utf-8')\n    const originalSize = svgData.length\n\n    const strokeBased = isStrokeBased(svg)\n    if (strokeBased) logger.warn(`[payload-icons] ${STROKE_WARNING}`)\n    // Prefix the report field so the editor sees the warning on the doc, not just in the server log.\n    const report = (msg: string): string => (strokeBased ? `${STROKE_WARNING} ${msg}` : msg)\n\n    const hasTransforms = svg.includes('transform=')\n    const hasClipPaths = svg.includes('clip-path=') || svg.includes('<clipPath')\n    if (hasTransforms || hasClipPaths) {\n      logger.warn({\n        msg: '[payload-icons] Unsupported SVG features; skipping optimization (scripts still stripped)',\n        hasClipPaths,\n        hasTransforms,\n      })\n      // Even when we skip optimization we MUST strip scripts/event handlers, because svgString is\n      // later inlined via dangerouslySetInnerHTML for every visitor.\n      const sanitized = stripDangerousUrls(optimize(svg, { multipass: false, plugins: sanitizePlugins }).data)\n      return { ...icon, optimized: report('Skipped optimization (transform/clip-path present); scripts stripped'), svgString: sanitized }\n    }\n\n    const optimized = optimize(svg, {\n      path: 'input.svg',\n      multipass: true,\n      plugins: [\n        // Strip <script> elements + on* handlers first so nothing downstream re-introduces them.\n        ...sanitizePlugins,\n        'preset-default',\n        'convertStyleToAttrs',\n        'removeDimensions',\n        {\n          name: 'removeAttrs',\n          params: {\n            attrs: [\n              'fill',\n              'stroke',\n              'stroke-width',\n              'stroke-linecap',\n              'stroke-linejoin',\n              'stroke-miterlimit',\n              'stroke-dasharray',\n              'stroke-dashoffset',\n            ],\n          },\n        },\n        { name: 'cleanupIds', params: { minify: true, remove: false } },\n        { name: 'mergePaths', params: { force: false, noSpaceAfterFlags: true } },\n        { name: 'cleanupNumericValues', params: { floatPrecision: 1, leadingZero: true } },\n        { name: 'removeUnknownsAndDefaults', params: { keepAriaAttrs: true, keepDataAttrs: true, keepRoleAttr: true } },\n        // Re-add currentColor so the icon inherits CSS `color` on the frontend (after the\n        // presentation attrs above were stripped).\n        { name: 'addAttributesToSVGElement', params: { attributes: [{ fill: 'currentColor' }, { stroke: 'currentColor' }] } },\n        { name: 'convertTransform', params: { convertToShorts: true, degPrecision: 1, floatPrecision: 1, transformPrecision: 1 } },\n        {\n          name: 'convertPathData',\n          params: {\n            floatPrecision: 1,\n            leadingZero: true,\n            noSpaceAfterFlags: true,\n            removeUseless: true,\n            straightCurves: true,\n            transformPrecision: 1,\n          },\n        },\n        {\n          name: 'sortAttrs',\n          params: {\n            order: [\n              'id',\n              'class',\n              'style',\n              'x',\n              'y',\n              'width',\n              'height',\n              'viewBox',\n              'fill',\n              'stroke',\n              'stroke-width',\n              'stroke-linecap',\n              'stroke-linejoin',\n              'stroke-miterlimit',\n              'stroke-dasharray',\n              'stroke-dashoffset',\n              'd',\n              'transform',\n            ],\n          },\n        },\n      ],\n      js2svg: { pretty: true, indent: 2, eol: 'lf' },\n    })\n\n    let svgStr = optimized.data\n\n    svgStr = svgStr.replace(/viewBox=\"([^\"]+)\"/g, (_match, viewBox) => {\n      const coords = viewBox\n        .split(' ')\n        .map((coord: string) => (Number.isNaN(parseFloat(coord)) ? coord : parseFloat(coord).toFixed(1)))\n        .join(' ')\n      return `viewBox=\"${coords}\"`\n    })\n\n    const paths = Array.from(svgStr.matchAll(/<path[^>]*d=\"([^\"]+)\"/g))\n\n    if (paths.length) {\n      let minX = Infinity\n      let minY = Infinity\n      let maxX = -Infinity\n      let maxY = -Infinity\n\n      for (const [, d] of paths) {\n        if (!d) continue\n        try {\n          const [x1, y1, x2, y2] = svgPathBbox(d)\n          minX = Math.min(minX, x1)\n          minY = Math.min(minY, y1)\n          maxX = Math.max(maxX, x2)\n          maxY = Math.max(maxY, y2)\n        } catch (e) {\n          logger.warn({ msg: '[payload-icons] Failed to calculate path bounds', err: e })\n        }\n      }\n\n      if (minX !== Infinity && minY !== Infinity && maxX !== -Infinity && maxY !== -Infinity) {\n        const width = maxX - minX\n        const height = maxY - minY\n\n        // Square the viewBox around the glyph's center so icons share a consistent box.\n        const side = Math.max(width, height)\n        const centerX = minX + width / 2\n        const centerY = minY + height / 2\n        const newViewBox = `${(centerX - side / 2).toFixed(1)} ${(centerY - side / 2).toFixed(1)} ${side.toFixed(1)} ${side.toFixed(1)}`\n\n        svgStr = svgStr.includes('viewBox=')\n          ? svgStr.replace(/viewBox=\"[^\"]+\"/, `viewBox=\"${newViewBox}\"`)\n          : svgStr.replace('<svg', `<svg viewBox=\"${newViewBox}\"`)\n      }\n    }\n\n    svgStr = stripDangerousUrls(svgStr)\n\n    const finalSize = Buffer.from(svgStr).length\n    const reduction = originalSize - finalSize\n    const reductionPercentage = ((reduction / originalSize) * 100).toFixed(1)\n    const optimizedString = `SVG optimized: ${originalSize} to ${finalSize} bytes (${reductionPercentage}% reduction)`\n    logger.info(`[payload-icons] ${optimizedString}`)\n\n    return { ...icon, filesize: finalSize, optimized: report(optimizedString), svgString: svgStr }\n  } catch (error) {\n    logger.error({ msg: '[payload-icons] Error processing SVG', err: error })\n    // Surface the failure on the doc itself — both output fields are condition-hidden when empty,\n    // so a silent return would look like a normal save while the icon never renders.\n    return { ...icon, optimized: `Optimization failed: ${error instanceof Error ? error.message : String(error)} — icon will not render.` }\n  }\n}\n\n/** `beforeChange` hook: when an SVG file is uploaded (create or update), optimize + sanitize it\n *  and fold `svgString`/`optimized` into the doc. A no-op for changes that carry no new file. */\nexport const formatSVGHook: CollectionBeforeChangeHook = async ({ data, operation, req }) => {\n  if (operation === 'create' || operation === 'update') {\n    if (data?.filename && req.file) {\n      try {\n        return await formatSvg(data, req.file.data, req.payload.logger)\n      } catch (error) {\n        req.payload.logger.warn({ msg: '[payload-icons] Error in formatSVGHook', err: error })\n        return data\n      }\n    }\n  }\n  return data\n}\n"],"names":["sanitizePlugins","name","params","attrs","elemSeparator","stripDangerousUrls","svg","replace","STROKE_WARNING","isStrokeBased","test","formatSvg","icon","svgData","logger","optimize","svgPathBbox","Promise","all","toString","originalSize","length","strokeBased","warn","report","msg","hasTransforms","includes","hasClipPaths","sanitized","multipass","plugins","data","optimized","svgString","path","minify","remove","force","noSpaceAfterFlags","floatPrecision","leadingZero","keepAriaAttrs","keepDataAttrs","keepRoleAttr","attributes","fill","stroke","convertToShorts","degPrecision","transformPrecision","removeUseless","straightCurves","order","js2svg","pretty","indent","eol","svgStr","_match","viewBox","coords","split","map","coord","Number","isNaN","parseFloat","toFixed","join","paths","Array","from","matchAll","minX","Infinity","minY","maxX","maxY","d","x1","y1","x2","y2","Math","min","max","e","err","width","height","side","centerX","centerY","newViewBox","finalSize","Buffer","reduction","reductionPercentage","optimizedString","info","filesize","error","Error","message","String","formatSVGHook","operation","req","filename","file","payload"],"mappings":"AAMA,8FAA8F;AAC9F,+FAA+F;AAC/F,+FAA+F;AAC/F,2FAA2F;AAC3F,kGAAkG;AAClG,MAAMA,kBAAkC;IACtC;IACA,6FAA6F;IAC7F,4FAA4F;IAC5F;QAAEC,MAAM;QAAeC,QAAQ;YAAEC,OAAO;gBAAC;gBAAQ;gBAAa;gBAAqB;aAAU;YAAEC,eAAe;QAAI;IAAE;CACrH;AAED,6FAA6F;AAC7F,0BAA0B;AAC1B,MAAMC,qBAAqB,CAACC,MAAwBA,IAAIC,OAAO,CAAC,0DAA0D;AAE1H,gGAAgG;AAChG,kGAAkG;AAClG,MAAMC,iBAAiB;AACvB,MAAMC,gBAAgB,CAACH,MAAyB,iCAAiCI,IAAI,CAACJ,QAAQ,2BAA2BI,IAAI,CAACJ;AAE9H;;;;;;;;CAQC,GACD,OAAO,MAAMK,YAAY,OAAOC,MAAgBC,SAAiBC;IAC/D,IAAI;QACF,MAAM,CAAC,EAAEC,QAAQ,EAAE,EAAE,EAAEC,WAAW,EAAE,CAAC,GAAG,MAAMC,QAAQC,GAAG,CAAC;YAAC,MAAM,CAAC;YAAS,MAAM,CAAC;SAAiB;QAEnG,MAAMZ,MAAMO,QAAQM,QAAQ,CAAC;QAC7B,MAAMC,eAAeP,QAAQQ,MAAM;QAEnC,MAAMC,cAAcb,cAAcH;QAClC,IAAIgB,aAAaR,OAAOS,IAAI,CAAC,CAAC,gBAAgB,EAAEf,gBAAgB;QAChE,iGAAiG;QACjG,MAAMgB,SAAS,CAACC,MAAyBH,cAAc,GAAGd,eAAe,CAAC,EAAEiB,KAAK,GAAGA;QAEpF,MAAMC,gBAAgBpB,IAAIqB,QAAQ,CAAC;QACnC,MAAMC,eAAetB,IAAIqB,QAAQ,CAAC,iBAAiBrB,IAAIqB,QAAQ,CAAC;QAChE,IAAID,iBAAiBE,cAAc;YACjCd,OAAOS,IAAI,CAAC;gBACVE,KAAK;gBACLG;gBACAF;YACF;YACA,4FAA4F;YAC5F,+DAA+D;YAC/D,MAAMG,YAAYxB,mBAAmBU,SAAST,KAAK;gBAAEwB,WAAW;gBAAOC,SAAS/B;YAAgB,GAAGgC,IAAI;YACvG,OAAO;gBAAE,GAAGpB,IAAI;gBAAEqB,WAAWT,OAAO;gBAAyEU,WAAWL;YAAU;QACpI;QAEA,MAAMI,YAAYlB,SAAST,KAAK;YAC9B6B,MAAM;YACNL,WAAW;YACXC,SAAS;gBACP,yFAAyF;mBACtF/B;gBACH;gBACA;gBACA;gBACA;oBACEC,MAAM;oBACNC,QAAQ;wBACNC,OAAO;4BACL;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;yBACD;oBACH;gBACF;gBACA;oBAAEF,MAAM;oBAAcC,QAAQ;wBAAEkC,QAAQ;wBAAMC,QAAQ;oBAAM;gBAAE;gBAC9D;oBAAEpC,MAAM;oBAAcC,QAAQ;wBAAEoC,OAAO;wBAAOC,mBAAmB;oBAAK;gBAAE;gBACxE;oBAAEtC,MAAM;oBAAwBC,QAAQ;wBAAEsC,gBAAgB;wBAAGC,aAAa;oBAAK;gBAAE;gBACjF;oBAAExC,MAAM;oBAA6BC,QAAQ;wBAAEwC,eAAe;wBAAMC,eAAe;wBAAMC,cAAc;oBAAK;gBAAE;gBAC9G,kFAAkF;gBAClF,2CAA2C;gBAC3C;oBAAE3C,MAAM;oBAA6BC,QAAQ;wBAAE2C,YAAY;4BAAC;gCAAEC,MAAM;4BAAe;4BAAG;gCAAEC,QAAQ;4BAAe;yBAAE;oBAAC;gBAAE;gBACpH;oBAAE9C,MAAM;oBAAoBC,QAAQ;wBAAE8C,iBAAiB;wBAAMC,cAAc;wBAAGT,gBAAgB;wBAAGU,oBAAoB;oBAAE;gBAAE;gBACzH;oBACEjD,MAAM;oBACNC,QAAQ;wBACNsC,gBAAgB;wBAChBC,aAAa;wBACbF,mBAAmB;wBACnBY,eAAe;wBACfC,gBAAgB;wBAChBF,oBAAoB;oBACtB;gBACF;gBACA;oBACEjD,MAAM;oBACNC,QAAQ;wBACNmD,OAAO;4BACL;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;yBACD;oBACH;gBACF;aACD;YACDC,QAAQ;gBAAEC,QAAQ;gBAAMC,QAAQ;gBAAGC,KAAK;YAAK;QAC/C;QAEA,IAAIC,SAASzB,UAAUD,IAAI;QAE3B0B,SAASA,OAAOnD,OAAO,CAAC,sBAAsB,CAACoD,QAAQC;YACrD,MAAMC,SAASD,QACZE,KAAK,CAAC,KACNC,GAAG,CAAC,CAACC,QAAmBC,OAAOC,KAAK,CAACC,WAAWH,UAAUA,QAAQG,WAAWH,OAAOI,OAAO,CAAC,IAC5FC,IAAI,CAAC;YACR,OAAO,CAAC,SAAS,EAAER,OAAO,CAAC,CAAC;QAC9B;QAEA,MAAMS,QAAQC,MAAMC,IAAI,CAACd,OAAOe,QAAQ,CAAC;QAEzC,IAAIH,MAAMjD,MAAM,EAAE;YAChB,IAAIqD,OAAOC;YACX,IAAIC,OAAOD;YACX,IAAIE,OAAO,CAACF;YACZ,IAAIG,OAAO,CAACH;YAEZ,KAAK,MAAM,GAAGI,EAAE,IAAIT,MAAO;gBACzB,IAAI,CAACS,GAAG;gBACR,IAAI;oBACF,MAAM,CAACC,IAAIC,IAAIC,IAAIC,GAAG,GAAGnE,YAAY+D;oBACrCL,OAAOU,KAAKC,GAAG,CAACX,MAAMM;oBACtBJ,OAAOQ,KAAKC,GAAG,CAACT,MAAMK;oBACtBJ,OAAOO,KAAKE,GAAG,CAACT,MAAMK;oBACtBJ,OAAOM,KAAKE,GAAG,CAACR,MAAMK;gBACxB,EAAE,OAAOI,GAAG;oBACVzE,OAAOS,IAAI,CAAC;wBAAEE,KAAK;wBAAmD+D,KAAKD;oBAAE;gBAC/E;YACF;YAEA,IAAIb,SAASC,YAAYC,SAASD,YAAYE,SAAS,CAACF,YAAYG,SAAS,CAACH,UAAU;gBACtF,MAAMc,QAAQZ,OAAOH;gBACrB,MAAMgB,SAASZ,OAAOF;gBAEtB,gFAAgF;gBAChF,MAAMe,OAAOP,KAAKE,GAAG,CAACG,OAAOC;gBAC7B,MAAME,UAAUlB,OAAOe,QAAQ;gBAC/B,MAAMI,UAAUjB,OAAOc,SAAS;gBAChC,MAAMI,aAAa,GAAG,AAACF,CAAAA,UAAUD,OAAO,CAAA,EAAGvB,OAAO,CAAC,GAAG,CAAC,EAAE,AAACyB,CAAAA,UAAUF,OAAO,CAAA,EAAGvB,OAAO,CAAC,GAAG,CAAC,EAAEuB,KAAKvB,OAAO,CAAC,GAAG,CAAC,EAAEuB,KAAKvB,OAAO,CAAC,IAAI;gBAEhIV,SAASA,OAAO/B,QAAQ,CAAC,cACrB+B,OAAOnD,OAAO,CAAC,mBAAmB,CAAC,SAAS,EAAEuF,WAAW,CAAC,CAAC,IAC3DpC,OAAOnD,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAEuF,WAAW,CAAC,CAAC;YAC3D;QACF;QAEApC,SAASrD,mBAAmBqD;QAE5B,MAAMqC,YAAYC,OAAOxB,IAAI,CAACd,QAAQrC,MAAM;QAC5C,MAAM4E,YAAY7E,eAAe2E;QACjC,MAAMG,sBAAsB,AAAC,CAAA,AAACD,YAAY7E,eAAgB,GAAE,EAAGgD,OAAO,CAAC;QACvE,MAAM+B,kBAAkB,CAAC,eAAe,EAAE/E,aAAa,IAAI,EAAE2E,UAAU,QAAQ,EAAEG,oBAAoB,YAAY,CAAC;QAClHpF,OAAOsF,IAAI,CAAC,CAAC,gBAAgB,EAAED,iBAAiB;QAEhD,OAAO;YAAE,GAAGvF,IAAI;YAAEyF,UAAUN;YAAW9D,WAAWT,OAAO2E;YAAkBjE,WAAWwB;QAAO;IAC/F,EAAE,OAAO4C,OAAO;QACdxF,OAAOwF,KAAK,CAAC;YAAE7E,KAAK;YAAwC+D,KAAKc;QAAM;QACvE,8FAA8F;QAC9F,iFAAiF;QACjF,OAAO;YAAE,GAAG1F,IAAI;YAAEqB,WAAW,CAAC,qBAAqB,EAAEqE,iBAAiBC,QAAQD,MAAME,OAAO,GAAGC,OAAOH,OAAO,wBAAwB,CAAC;QAAC;IACxI;AACF,EAAC;AAED;+FAC+F,GAC/F,OAAO,MAAMI,gBAA4C,OAAO,EAAE1E,IAAI,EAAE2E,SAAS,EAAEC,GAAG,EAAE;IACtF,IAAID,cAAc,YAAYA,cAAc,UAAU;QACpD,IAAI3E,MAAM6E,YAAYD,IAAIE,IAAI,EAAE;YAC9B,IAAI;gBACF,OAAO,MAAMnG,UAAUqB,MAAM4E,IAAIE,IAAI,CAAC9E,IAAI,EAAE4E,IAAIG,OAAO,CAACjG,MAAM;YAChE,EAAE,OAAOwF,OAAO;gBACdM,IAAIG,OAAO,CAACjG,MAAM,CAACS,IAAI,CAAC;oBAAEE,KAAK;oBAA0C+D,KAAKc;gBAAM;gBACpF,OAAOtE;YACT;QACF;IACF;IACA,OAAOA;AACT,EAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { iconsPlugin, default } from './plugin';
+export type { IconsPluginOptions } from './plugin';
+export type { IconCollectionOverrides, IconDoc } from './types';
+export type { IconSetCollectionOverrides } from './collections/IconSet';
+export type { IconRequestCollectionOverrides } from './collections/IconRequest';
+export { extractSvgContent, extractSvgProps } from './lib/extractSVG';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAG/C,YAAY,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAClD,YAAY,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAC/D,YAAY,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAA;AACvE,YAAY,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAA;AAK/E,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/index.js

@@ -0,0 +1,10 @@
+// The plugin — the single entry point.
+export { iconsPlugin, default } from "./plugin.js";
+// SVG string helpers — inline an icon's `svgString` as a real `<svg>` when rendering it yourself
+// (e.g. with `getIconSvg` from the `./cache` subpath):
+//   <svg {...extractSvgProps(svg)} className="size-6" dangerouslySetInnerHTML={{ __html: extractSvgContent(svg) }} />
+export { extractSvgContent, extractSvgProps } from "./lib/extractSVG.js"; // NOTE: server-only / Next-coupled / React entry points are exposed via subpaths to keep them out of
+ // this server/config module: the drop-in `<Icon name="…" />` server component is `./components/Icon`,
+ // the active-set resolver `getIconSvg` is `./cache`, and the admin field components are `./admin/*`.
+
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// The plugin — the single entry point.\nexport { iconsPlugin, default } from './plugin'\n\n// Public types, re-exported so consumers can type options/helpers without deep imports.\nexport type { IconsPluginOptions } from './plugin'\nexport type { IconCollectionOverrides, IconDoc } from './types'\nexport type { IconSetCollectionOverrides } from './collections/IconSet'\nexport type { IconRequestCollectionOverrides } from './collections/IconRequest'\n\n// SVG string helpers — inline an icon's `svgString` as a real `<svg>` when rendering it yourself\n// (e.g. with `getIconSvg` from the `./cache` subpath):\n//   <svg {...extractSvgProps(svg)} className=\"size-6\" dangerouslySetInnerHTML={{ __html: extractSvgContent(svg) }} />\nexport { extractSvgContent, extractSvgProps } from './lib/extractSVG'\n\n// NOTE: server-only / Next-coupled / React entry points are exposed via subpaths to keep them out of\n// this server/config module: the drop-in `<Icon name=\"…\" />` server component is `./components/Icon`,\n// the active-set resolver `getIconSvg` is `./cache`, and the admin field components are `./admin/*`.\n"],"names":["iconsPlugin","default","extractSvgContent","extractSvgProps"],"mappings":"AAAA,uCAAuC;AACvC,SAASA,WAAW,EAAEC,OAAO,QAAQ,cAAU;AAQ/C,iGAAiG;AACjG,uDAAuD;AACvD,sHAAsH;AACtH,SAASC,iBAAiB,EAAEC,eAAe,QAAQ,sBAAkB,CAErE,qGAAqG;CACrG,sGAAsG;CACtG,qGAAqG"}

package/dist/lib/activeField.d.ts

@@ -0,0 +1,24 @@
+import type { CheckboxField, CollectionBeforeChangeHook } from 'payload';
+/**
+ * The single-active toggle for the `iconSet` collection. The frontend renders
+ * whichever set has `active: true` (in its status lane), so flipping this on one
+ * set re-skins every `<Icon>` across the site. The invariant is enforced by
+ * {@link enforceSingleActive}.
+ */
+export declare const activeField: CheckboxField;
+/**
+ * `beforeChange` hook enforcing the single-active invariant, adapted (standalone,
+ * no `@pro-laico/core`) from Atomic's `unsetActive`. When a set is saved
+ * `active`, every other set in the **same status lane** is flipped `active:
+ * false` in the same request/transaction:
+ *
+ * - The `_status: draft | published` filter scopes the deactivation to the lane
+ *   being written, so staging a new active set as a *draft* doesn't disturb the
+ *   live (published) active set — the swap only goes live on publish. (Skipped
+ *   when the collection has no drafts.)
+ * - It runs in `beforeChange` and **rethrows** on failure, so a failed
+ *   deactivation rolls the whole save back atomically rather than leaving two
+ *   active sets.
+ */
+export declare const enforceSingleActive: CollectionBeforeChangeHook;
+//# sourceMappingURL=activeField.d.ts.map

package/dist/lib/activeField.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activeField.d.ts","sourceRoot":"","sources":["../../src/lib/activeField.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,0BAA0B,EAAkB,MAAM,SAAS,CAAA;AAExF;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,aASzB,CAAA;AAKD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB,EAAE,0BAwBjC,CAAA"}

package/dist/lib/activeField.js

@@ -0,0 +1,71 @@
+/**
+ * The single-active toggle for the `iconSet` collection. The frontend renders
+ * whichever set has `active: true` (in its status lane), so flipping this on one
+ * set re-skins every `<Icon>` across the site. The invariant is enforced by
+ * {@link enforceSingleActive}.
+ */ export const activeField = {
+    name: 'active',
+    type: 'checkbox',
+    defaultValue: false,
+    index: true,
+    admin: {
+        description: 'Render this set across the frontend. Activating a set deactivates the others.',
+        style: {
+            maxWidth: '160px',
+            alignSelf: 'center'
+        }
+    }
+};
+/** Hook-`context` flag so the cascade of deactivations we trigger doesn't recurse. */ const CASCADE = 'iconSetEnforceSingleActive';
+/**
+ * `beforeChange` hook enforcing the single-active invariant, adapted (standalone,
+ * no `@pro-laico/core`) from Atomic's `unsetActive`. When a set is saved
+ * `active`, every other set in the **same status lane** is flipped `active:
+ * false` in the same request/transaction:
+ *
+ * - The `_status: draft | published` filter scopes the deactivation to the lane
+ *   being written, so staging a new active set as a *draft* doesn't disturb the
+ *   live (published) active set — the swap only goes live on publish. (Skipped
+ *   when the collection has no drafts.)
+ * - It runs in `beforeChange` and **rethrows** on failure, so a failed
+ *   deactivation rolls the whole save back atomically rather than leaving two
+ *   active sets.
+ */ export const enforceSingleActive = async ({ data, originalDoc, collection, req, context })=>{
+    if (!data?.active || context[CASCADE]) return data;
+    const hasDrafts = Boolean(collection.versions?.drafts);
+    const draft = hasDrafts && data._status === 'draft';
+    const id = originalDoc?.id // undefined on create — then there are no other rows to exclude
+    ;
+    await req.payload.update({
+        req,
+        draft,
+        collection: collection.slug,
+        // `active` isn't a field on every collection slug, so the bulk-update `data`
+        // union has no matching branch under a partial schema — cast past it.
+        data: {
+            active: false
+        },
+        where: {
+            active: {
+                equals: true
+            },
+            ...id != null ? {
+                id: {
+                    not_equals: id
+                }
+            } : {},
+            ...hasDrafts ? {
+                _status: {
+                    equals: draft ? 'draft' : 'published'
+                }
+            } : {}
+        },
+        context: {
+            [CASCADE]: true
+        },
+        overrideAccess: true
+    });
+    return data;
+};
+
+//# sourceMappingURL=activeField.js.map

package/dist/lib/activeField.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lib/activeField.ts"],"sourcesContent":["import type { CheckboxField, CollectionBeforeChangeHook, CollectionSlug } from 'payload'\n\n/**\n * The single-active toggle for the `iconSet` collection. The frontend renders\n * whichever set has `active: true` (in its status lane), so flipping this on one\n * set re-skins every `<Icon>` across the site. The invariant is enforced by\n * {@link enforceSingleActive}.\n */\nexport const activeField: CheckboxField = {\n  name: 'active',\n  type: 'checkbox',\n  defaultValue: false,\n  index: true,\n  admin: {\n    description: 'Render this set across the frontend. Activating a set deactivates the others.',\n    style: { maxWidth: '160px', alignSelf: 'center' },\n  },\n}\n\n/** Hook-`context` flag so the cascade of deactivations we trigger doesn't recurse. */\nconst CASCADE = 'iconSetEnforceSingleActive'\n\n/**\n * `beforeChange` hook enforcing the single-active invariant, adapted (standalone,\n * no `@pro-laico/core`) from Atomic's `unsetActive`. When a set is saved\n * `active`, every other set in the **same status lane** is flipped `active:\n * false` in the same request/transaction:\n *\n * - The `_status: draft | published` filter scopes the deactivation to the lane\n *   being written, so staging a new active set as a *draft* doesn't disturb the\n *   live (published) active set — the swap only goes live on publish. (Skipped\n *   when the collection has no drafts.)\n * - It runs in `beforeChange` and **rethrows** on failure, so a failed\n *   deactivation rolls the whole save back atomically rather than leaving two\n *   active sets.\n */\nexport const enforceSingleActive: CollectionBeforeChangeHook = async ({ data, originalDoc, collection, req, context }) => {\n  if (!data?.active || context[CASCADE]) return data\n\n  const hasDrafts = Boolean((collection.versions as { drafts?: unknown } | undefined)?.drafts)\n  const draft = hasDrafts && data._status === 'draft'\n  const id = originalDoc?.id // undefined on create — then there are no other rows to exclude\n\n  await req.payload.update({\n    req,\n    draft,\n    collection: collection.slug as CollectionSlug,\n    // `active` isn't a field on every collection slug, so the bulk-update `data`\n    // union has no matching branch under a partial schema — cast past it.\n    data: { active: false } as unknown as never,\n    where: {\n      active: { equals: true },\n      ...(id != null ? { id: { not_equals: id } } : {}),\n      ...(hasDrafts ? { _status: { equals: draft ? 'draft' : 'published' } } : {}),\n    },\n    context: { [CASCADE]: true },\n    overrideAccess: true,\n  })\n\n  return data\n}\n"],"names":["activeField","name","type","defaultValue","index","admin","description","style","maxWidth","alignSelf","CASCADE","enforceSingleActive","data","originalDoc","collection","req","context","active","hasDrafts","Boolean","versions","drafts","draft","_status","id","payload","update","slug","where","equals","not_equals","overrideAccess"],"mappings":"AAEA;;;;;CAKC,GACD,OAAO,MAAMA,cAA6B;IACxCC,MAAM;IACNC,MAAM;IACNC,cAAc;IACdC,OAAO;IACPC,OAAO;QACLC,aAAa;QACbC,OAAO;YAAEC,UAAU;YAASC,WAAW;QAAS;IAClD;AACF,EAAC;AAED,oFAAoF,GACpF,MAAMC,UAAU;AAEhB;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAMC,sBAAkD,OAAO,EAAEC,IAAI,EAAEC,WAAW,EAAEC,UAAU,EAAEC,GAAG,EAAEC,OAAO,EAAE;IACnH,IAAI,CAACJ,MAAMK,UAAUD,OAAO,CAACN,QAAQ,EAAE,OAAOE;IAE9C,MAAMM,YAAYC,QAASL,WAAWM,QAAQ,EAAuCC;IACrF,MAAMC,QAAQJ,aAAaN,KAAKW,OAAO,KAAK;IAC5C,MAAMC,KAAKX,aAAaW,GAAG,gEAAgE;;IAE3F,MAAMT,IAAIU,OAAO,CAACC,MAAM,CAAC;QACvBX;QACAO;QACAR,YAAYA,WAAWa,IAAI;QAC3B,6EAA6E;QAC7E,sEAAsE;QACtEf,MAAM;YAAEK,QAAQ;QAAM;QACtBW,OAAO;YACLX,QAAQ;gBAAEY,QAAQ;YAAK;YACvB,GAAIL,MAAM,OAAO;gBAAEA,IAAI;oBAAEM,YAAYN;gBAAG;YAAE,IAAI,CAAC,CAAC;YAChD,GAAIN,YAAY;gBAAEK,SAAS;oBAAEM,QAAQP,QAAQ,UAAU;gBAAY;YAAE,IAAI,CAAC,CAAC;QAC7E;QACAN,SAAS;YAAE,CAACN,QAAQ,EAAE;QAAK;QAC3BqB,gBAAgB;IAClB;IAEA,OAAOnB;AACT,EAAC"}

package/dist/lib/authenticated.d.ts

@@ -0,0 +1,5 @@
+import type { Access } from 'payload';
+/** Access gate: any logged-in user. Used for the `iconSet` / `iconRequest`
+ *  collections, which are author/diagnostic data rather than public assets. */
+export declare const authd: Access;
+//# sourceMappingURL=authenticated.d.ts.map

package/dist/lib/authenticated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated.d.ts","sourceRoot":"","sources":["../../src/lib/authenticated.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAErC;+EAC+E;AAC/E,eAAO,MAAM,KAAK,EAAE,MAAuC,CAAA"}

package/dist/lib/authenticated.js

@@ -0,0 +1,4 @@
+/** Access gate: any logged-in user. Used for the `iconSet` / `iconRequest`
+ *  collections, which are author/diagnostic data rather than public assets. */ export const authd = ({ req })=>Boolean(req.user);
+
+//# sourceMappingURL=authenticated.js.map

package/dist/lib/authenticated.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lib/authenticated.ts"],"sourcesContent":["import type { Access } from 'payload'\n\n/** Access gate: any logged-in user. Used for the `iconSet` / `iconRequest`\n *  collections, which are author/diagnostic data rather than public assets. */\nexport const authd: Access = ({ req }) => Boolean(req.user)\n"],"names":["authd","req","Boolean","user"],"mappings":"AAEA;6EAC6E,GAC7E,OAAO,MAAMA,QAAgB,CAAC,EAAEC,GAAG,EAAE,GAAKC,QAAQD,IAAIE,IAAI,EAAC"}

package/dist/lib/defaultAccess.d.ts

@@ -0,0 +1,8 @@
+import type { Access } from 'payload';
+/** Default write gate: allow only a logged-in user from the configured admin collection.
+ *  Override per-operation via the plugin's `access` option. */
+export declare const defaultAdminAccess: Access;
+/** Default read gate: public. Icons are frontend assets, so anyone can read them; tighten this
+ *  via `access.read` if your icons are private. */
+export declare const defaultReadAccess: Access;
+//# sourceMappingURL=defaultAccess.d.ts.map

package/dist/lib/defaultAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultAccess.d.ts","sourceRoot":"","sources":["../../src/lib/defaultAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAErC;+DAC+D;AAC/D,eAAO,MAAM,kBAAkB,EAAE,MAAgG,CAAA;AAEjI;mDACmD;AACnD,eAAO,MAAM,iBAAiB,EAAE,MAAmB,CAAA"}

package/dist/lib/defaultAccess.js

@@ -0,0 +1,6 @@
+/** Default write gate: allow only a logged-in user from the configured admin collection.
+ *  Override per-operation via the plugin's `access` option. */ export const defaultAdminAccess = ({ req })=>Boolean(req.user && req.user.collection === req.payload.config.admin.user);
+/** Default read gate: public. Icons are frontend assets, so anyone can read them; tighten this
+ *  via `access.read` if your icons are private. */ export const defaultReadAccess = ()=>true;
+
+//# sourceMappingURL=defaultAccess.js.map

package/dist/lib/defaultAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lib/defaultAccess.ts"],"sourcesContent":["import type { Access } from 'payload'\n\n/** Default write gate: allow only a logged-in user from the configured admin collection.\n *  Override per-operation via the plugin's `access` option. */\nexport const defaultAdminAccess: Access = ({ req }) => Boolean(req.user && req.user.collection === req.payload.config.admin.user)\n\n/** Default read gate: public. Icons are frontend assets, so anyone can read them; tighten this\n *  via `access.read` if your icons are private. */\nexport const defaultReadAccess: Access = () => true\n"],"names":["defaultAdminAccess","req","Boolean","user","collection","payload","config","admin","defaultReadAccess"],"mappings":"AAEA;6DAC6D,GAC7D,OAAO,MAAMA,qBAA6B,CAAC,EAAEC,GAAG,EAAE,GAAKC,QAAQD,IAAIE,IAAI,IAAIF,IAAIE,IAAI,CAACC,UAAU,KAAKH,IAAII,OAAO,CAACC,MAAM,CAACC,KAAK,CAACJ,IAAI,EAAC;AAEjI;iDACiD,GACjD,OAAO,MAAMK,oBAA4B,IAAM,KAAI"}

package/dist/lib/extractSVG.d.ts

@@ -0,0 +1,3 @@
+export declare const extractSvgContent: (svgString: string) => string;
+export declare const extractSvgProps: (svgString: string) => Record<string, string>;
+//# sourceMappingURL=extractSVG.d.ts.map

package/dist/lib/extractSVG.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extractSVG.d.ts","sourceRoot":"","sources":["../../src/lib/extractSVG.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,iBAAiB,GAAI,WAAW,MAAM,KAAG,MAA2E,CAAA;AAgBjI,eAAO,MAAM,eAAe,GAAI,WAAW,MAAM,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAUxE,CAAA"}

package/dist/lib/extractSVG.js

@@ -0,0 +1,27 @@
+// Pull the inner markup out of an `<svg>` wrapper so the `<Icon>` component can re-emit it
+// inside its own `<svg>` (props merged from the JSX node). Lazy `*?` so a (valid) nested
+// `<svg>` doesn't make the match run to the outer document's last `</svg>` and swallow the
+// inner closing tag.
+export const extractSvgContent = (svgString)=>svgString.match(/<svg[^>]*>([\s\S]*?)<\/svg>/i)?.[1] || svgString;
+/** Root attributes that are useless on an inlined `<svg>` AND unsafe to spread onto a React
+ *  element: React rejects namespaced names, and `xmlns`/`version`/`enable-background` mean
+ *  nothing inline. */ const DROP_PROPS = /^(?:xmlns(?::.+)?|xml:.+|version|enable-background)$/i;
+/** React's SVG props are camelCase (`fill-rule` → `fillRule`, `xlink:href` → `xlinkHref`) —
+ *  spreading the raw hyphenated/namespaced names triggers "Invalid DOM property" errors.
+ *  `data-*` / `aria-*` are the exception: React expects those verbatim. */ const toReactProp = (key)=>/^(?:data|aria)-/i.test(key) ? key : key.replace(/[-:]([a-z])/gi, (_, ch)=>ch.toUpperCase());
+// Parse the attributes off the opening `<svg …>` tag into a React-safe props object (viewBox,
+// fill, fillRule, …), so the rendered element keeps the source's intrinsic attributes unless a
+// JSX prop overrides them.
+export const extractSvgProps = (svgString)=>{
+    const match = svgString.match(/<svg([^>]*)>/i);
+    if (!match?.[1]) return {};
+    const props = {};
+    // Allow namespaced/hyphenated attribute names (`xmlns:xlink`, `fill-rule`, `xml:space`,
+    // `stroke-width`) and both single- and double-quoted values.
+    for (const [, key, dq, sq] of match[1].matchAll(/([\w:.-]+)\s*=\s*(?:"([^"]*)"|'([^']*)')/g)){
+        if (key && !DROP_PROPS.test(key)) props[toReactProp(key)] = dq ?? sq ?? '';
+    }
+    return props;
+};
+
+//# sourceMappingURL=extractSVG.js.map

package/dist/lib/extractSVG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lib/extractSVG.ts"],"sourcesContent":["// Pull the inner markup out of an `<svg>` wrapper so the `<Icon>` component can re-emit it\n// inside its own `<svg>` (props merged from the JSX node). Lazy `*?` so a (valid) nested\n// `<svg>` doesn't make the match run to the outer document's last `</svg>` and swallow the\n// inner closing tag.\nexport const extractSvgContent = (svgString: string): string => svgString.match(/<svg[^>]*>([\\s\\S]*?)<\\/svg>/i)?.[1] || svgString\n\n/** Root attributes that are useless on an inlined `<svg>` AND unsafe to spread onto a React\n *  element: React rejects namespaced names, and `xmlns`/`version`/`enable-background` mean\n *  nothing inline. */\nconst DROP_PROPS = /^(?:xmlns(?::.+)?|xml:.+|version|enable-background)$/i\n\n/** React's SVG props are camelCase (`fill-rule` → `fillRule`, `xlink:href` → `xlinkHref`) —\n *  spreading the raw hyphenated/namespaced names triggers \"Invalid DOM property\" errors.\n *  `data-*` / `aria-*` are the exception: React expects those verbatim. */\nconst toReactProp = (key: string): string =>\n  /^(?:data|aria)-/i.test(key) ? key : key.replace(/[-:]([a-z])/gi, (_, ch: string) => ch.toUpperCase())\n\n// Parse the attributes off the opening `<svg …>` tag into a React-safe props object (viewBox,\n// fill, fillRule, …), so the rendered element keeps the source's intrinsic attributes unless a\n// JSX prop overrides them.\nexport const extractSvgProps = (svgString: string): Record<string, string> => {\n  const match = svgString.match(/<svg([^>]*)>/i)\n  if (!match?.[1]) return {}\n  const props: Record<string, string> = {}\n  // Allow namespaced/hyphenated attribute names (`xmlns:xlink`, `fill-rule`, `xml:space`,\n  // `stroke-width`) and both single- and double-quoted values.\n  for (const [, key, dq, sq] of match[1].matchAll(/([\\w:.-]+)\\s*=\\s*(?:\"([^\"]*)\"|'([^']*)')/g)) {\n    if (key && !DROP_PROPS.test(key)) props[toReactProp(key)] = dq ?? sq ?? ''\n  }\n  return props\n}\n"],"names":["extractSvgContent","svgString","match","DROP_PROPS","toReactProp","key","test","replace","_","ch","toUpperCase","extractSvgProps","props","dq","sq","matchAll"],"mappings":"AAAA,2FAA2F;AAC3F,yFAAyF;AACzF,2FAA2F;AAC3F,qBAAqB;AACrB,OAAO,MAAMA,oBAAoB,CAACC,YAA8BA,UAAUC,KAAK,CAAC,iCAAiC,CAAC,EAAE,IAAID,UAAS;AAEjI;;oBAEoB,GACpB,MAAME,aAAa;AAEnB;;yEAEyE,GACzE,MAAMC,cAAc,CAACC,MACnB,mBAAmBC,IAAI,CAACD,OAAOA,MAAMA,IAAIE,OAAO,CAAC,iBAAiB,CAACC,GAAGC,KAAeA,GAAGC,WAAW;AAErG,8FAA8F;AAC9F,+FAA+F;AAC/F,2BAA2B;AAC3B,OAAO,MAAMC,kBAAkB,CAACV;IAC9B,MAAMC,QAAQD,UAAUC,KAAK,CAAC;IAC9B,IAAI,CAACA,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC;IACzB,MAAMU,QAAgC,CAAC;IACvC,wFAAwF;IACxF,6DAA6D;IAC7D,KAAK,MAAM,GAAGP,KAAKQ,IAAIC,GAAG,IAAIZ,KAAK,CAAC,EAAE,CAACa,QAAQ,CAAC,6CAA8C;QAC5F,IAAIV,OAAO,CAACF,WAAWG,IAAI,CAACD,MAAMO,KAAK,CAACR,YAAYC,KAAK,GAAGQ,MAAMC,MAAM;IAC1E;IACA,OAAOF;AACT,EAAC"}

package/dist/lib/getPayloadClient.d.ts

@@ -0,0 +1,22 @@
+import { type Payload, type SanitizedConfig } from 'payload';
+/** Called from the plugin's `onInit`: remember the running app's config for the server components. */
+export declare const stashConfig: (config: SanitizedConfig) => void;
+/** Called from the plugin factory: remember the resolved `iconSet` slug for the cache resolver. */
+export declare const stashIconSetSlug: (slug: string) => void;
+/** The app's icon-set collection slug (honors `iconSetOverrides.slug`); the default when unset. */
+export declare const getIconSetSlug: () => string;
+/**
+ * Resolve the host app's Payload config, in order:
+ *  1. the globalThis stash the plugin's `onInit` fills the moment Payload boots — covers every
+ *     render after init with no bundler involvement, or
+ *  2. the `@payload-config` alias `withPayload` sets up — which only resolves from inside a
+ *     published package when the consumer transpiles it
+ *     (`transpilePackages: ['@pro-laico/payload-icons']` in next.config). The `as string` keeps
+ *     TS from resolving the alias at this package's own build time.
+ */
+export declare const getConfig: () => Promise<SanitizedConfig>;
+/** A booted Payload instance, using the host app's config. The shared server-side entry point
+ *  for the cache resolvers, the usage panel, and the runtime miss recorder, so the
+ *  config-resolution trick lives in one place. */
+export declare const getPayloadClient: () => Promise<Payload>;
+//# sourceMappingURL=getPayloadClient.d.ts.map

package/dist/lib/getPayloadClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getPayloadClient.d.ts","sourceRoot":"","sources":["../../src/lib/getPayloadClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAA;AASxE,sGAAsG;AACtG,eAAO,MAAM,WAAW,GAAI,QAAQ,eAAe,KAAG,IAErD,CAAA;AAMD,mGAAmG;AACnG,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,IAE/C,CAAA;AAED,mGAAmG;AACnG,eAAO,MAAM,cAAc,QAAO,MAA0G,CAAA;AAE5I;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS,QAAa,OAAO,CAAC,eAAe,CAYzD,CAAA;AAED;;kDAEkD;AAClD,eAAO,MAAM,gBAAgB,QAAa,OAAO,CAAC,OAAO,CAA8C,CAAA"}

package/dist/lib/getPayloadClient.js

@@ -0,0 +1,39 @@
+import { getPayload } from "payload";
+/** The globalThis slot the plugin's `onInit` fills with the app's sanitized config.
+ *  `Symbol.for` → one shared registry entry, so every pro-laico package reads the same
+ *  stash without importing each other. */ const CONFIG_SLOT = Symbol.for('pro-laico.payload-config');
+/** Called from the plugin's `onInit`: remember the running app's config for the server components. */ export const stashConfig = (config)=>{
+    ;
+    globalThis[CONFIG_SLOT] = config;
+};
+/** globalThis slot for the resolved `iconSet` slug, filled when the plugin is APPLIED (config build
+ *  time), so it's set in any process that loaded the config — which `getConfig` always does. */ const ICON_SET_SLUG_SLOT = Symbol.for('pro-laico.payload-icons.iconSetSlug');
+/** Called from the plugin factory: remember the resolved `iconSet` slug for the cache resolver. */ export const stashIconSetSlug = (slug)=>{
+    ;
+    globalThis[ICON_SET_SLUG_SLOT] = slug;
+};
+/** The app's icon-set collection slug (honors `iconSetOverrides.slug`); the default when unset. */ export const getIconSetSlug = ()=>globalThis[ICON_SET_SLUG_SLOT] ?? 'iconSet';
+/**
+ * Resolve the host app's Payload config, in order:
+ *  1. the globalThis stash the plugin's `onInit` fills the moment Payload boots — covers every
+ *     render after init with no bundler involvement, or
+ *  2. the `@payload-config` alias `withPayload` sets up — which only resolves from inside a
+ *     published package when the consumer transpiles it
+ *     (`transpilePackages: ['@pro-laico/payload-icons']` in next.config). The `as string` keeps
+ *     TS from resolving the alias at this package's own build time.
+ */ export const getConfig = async ()=>{
+    const stashed = globalThis[CONFIG_SLOT];
+    if (stashed) return stashed;
+    try {
+        return await (await import("@payload-config")).default;
+    } catch  {
+        throw new Error("[payload-icons] could not resolve the app's Payload config: Payload hasn't initialized in this process yet, and the '@payload-config' alias didn't resolve from inside this package. Either add '@pro-laico/payload-icons' to `transpilePackages` in next.config (so the host alias applies), or ensure something calls getPayload() before this component renders.");
+    }
+};
+/** A booted Payload instance, using the host app's config. The shared server-side entry point
+ *  for the cache resolvers, the usage panel, and the runtime miss recorder, so the
+ *  config-resolution trick lives in one place. */ export const getPayloadClient = async ()=>getPayload({
+        config: await getConfig()
+    });
+
+//# sourceMappingURL=getPayloadClient.js.map

package/dist/lib/getPayloadClient.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lib/getPayloadClient.ts"],"sourcesContent":["import { getPayload, type Payload, type SanitizedConfig } from 'payload'\n\ntype Awaitable<T> = T | Promise<T>\n\n/** The globalThis slot the plugin's `onInit` fills with the app's sanitized config.\n *  `Symbol.for` → one shared registry entry, so every pro-laico package reads the same\n *  stash without importing each other. */\nconst CONFIG_SLOT = Symbol.for('pro-laico.payload-config')\n\n/** Called from the plugin's `onInit`: remember the running app's config for the server components. */\nexport const stashConfig = (config: SanitizedConfig): void => {\n  ;(globalThis as Record<symbol, unknown>)[CONFIG_SLOT] = config\n}\n\n/** globalThis slot for the resolved `iconSet` slug, filled when the plugin is APPLIED (config build\n *  time), so it's set in any process that loaded the config — which `getConfig` always does. */\nconst ICON_SET_SLUG_SLOT = Symbol.for('pro-laico.payload-icons.iconSetSlug')\n\n/** Called from the plugin factory: remember the resolved `iconSet` slug for the cache resolver. */\nexport const stashIconSetSlug = (slug: string): void => {\n  ;(globalThis as Record<symbol, unknown>)[ICON_SET_SLUG_SLOT] = slug\n}\n\n/** The app's icon-set collection slug (honors `iconSetOverrides.slug`); the default when unset. */\nexport const getIconSetSlug = (): string => ((globalThis as Record<symbol, unknown>)[ICON_SET_SLUG_SLOT] as string | undefined) ?? 'iconSet'\n\n/**\n * Resolve the host app's Payload config, in order:\n *  1. the globalThis stash the plugin's `onInit` fills the moment Payload boots — covers every\n *     render after init with no bundler involvement, or\n *  2. the `@payload-config` alias `withPayload` sets up — which only resolves from inside a\n *     published package when the consumer transpiles it\n *     (`transpilePackages: ['@pro-laico/payload-icons']` in next.config). The `as string` keeps\n *     TS from resolving the alias at this package's own build time.\n */\nexport const getConfig = async (): Promise<SanitizedConfig> => {\n  const stashed = (globalThis as Record<symbol, unknown>)[CONFIG_SLOT] as SanitizedConfig | undefined\n  if (stashed) return stashed\n  try {\n    return (await ((\n      await import('@payload-config' as string)\n    ).default as Awaitable<SanitizedConfig>)) as SanitizedConfig\n  } catch {\n    throw new Error(\n      \"[payload-icons] could not resolve the app's Payload config: Payload hasn't initialized in this process yet, and the '@payload-config' alias didn't resolve from inside this package. Either add '@pro-laico/payload-icons' to `transpilePackages` in next.config (so the host alias applies), or ensure something calls getPayload() before this component renders.\",\n    )\n  }\n}\n\n/** A booted Payload instance, using the host app's config. The shared server-side entry point\n *  for the cache resolvers, the usage panel, and the runtime miss recorder, so the\n *  config-resolution trick lives in one place. */\nexport const getPayloadClient = async (): Promise<Payload> => getPayload({ config: await getConfig() })\n"],"names":["getPayload","CONFIG_SLOT","Symbol","for","stashConfig","config","globalThis","ICON_SET_SLUG_SLOT","stashIconSetSlug","slug","getIconSetSlug","getConfig","stashed","default","Error","getPayloadClient"],"mappings":"AAAA,SAASA,UAAU,QAA4C,UAAS;AAIxE;;wCAEwC,GACxC,MAAMC,cAAcC,OAAOC,GAAG,CAAC;AAE/B,oGAAoG,GACpG,OAAO,MAAMC,cAAc,CAACC;;IACxBC,UAAsC,CAACL,YAAY,GAAGI;AAC1D,EAAC;AAED;8FAC8F,GAC9F,MAAME,qBAAqBL,OAAOC,GAAG,CAAC;AAEtC,iGAAiG,GACjG,OAAO,MAAMK,mBAAmB,CAACC;;IAC7BH,UAAsC,CAACC,mBAAmB,GAAGE;AACjE,EAAC;AAED,iGAAiG,GACjG,OAAO,MAAMC,iBAAiB,IAAc,AAAC,AAACJ,UAAsC,CAACC,mBAAmB,IAA2B,UAAS;AAE5I;;;;;;;;CAQC,GACD,OAAO,MAAMI,YAAY;IACvB,MAAMC,UAAU,AAACN,UAAsC,CAACL,YAAY;IACpE,IAAIW,SAAS,OAAOA;IACpB,IAAI;QACF,OAAQ,MAAO,AACb,CAAA,MAAM,MAAM,CAAC,kBAA2B,EACxCC,OAAO;IACX,EAAE,OAAM;QACN,MAAM,IAAIC,MACR;IAEJ;AACF,EAAC;AAED;;gDAEgD,GAChD,OAAO,MAAMC,mBAAmB,UAA8Bf,WAAW;QAAEK,QAAQ,MAAMM;IAAY,GAAE"}