@trieb.work/payload-plugin-backup-mongodb 0.1.1

package/dist/utils/blobName.js

@@ -0,0 +1,99 @@
+const SEPARATOR = '---';
+/**
+ * Last segment is `{collectionCount}-{timestampMs}` (new) or legacy `{timestampMs}` only.
+ * A hyphenated tail that does not pass {@link isPlausibleNewFormatTail} is treated as legacy
+ * (whole `last` string, no collection count) so older blobs are never mis-parsed.
+ */ const NEW_NAME_TAIL = /^(\d+)-(\d{10,})$/;
+const NEW_TAIL_MAX_COLLECTIONS = 100_000;
+/** Max length for a user-supplied manual backup label (after sanitization). */ export const BACKUP_LABEL_MAX_LENGTH = 64;
+function isPlausibleNewFormatTail(collectionCount, timestampMs) {
+    return Number.isFinite(collectionCount) && Number.isFinite(timestampMs) && collectionCount >= 0 && collectionCount <= NEW_TAIL_MAX_COLLECTIONS && timestampMs > 0 && timestampMs < 1e15;
+}
+/**
+ * Normalize a user-supplied manual backup label so it is safe to embed as a
+ * blob-name segment. Trims, collapses whitespace, removes characters that would
+ * confuse the separator, and enforces {@link BACKUP_LABEL_MAX_LENGTH}.
+ * Returns an empty string when nothing usable remains.
+ */ export function sanitizeBackupLabel(raw) {
+    if (typeof raw !== 'string') {
+        return '';
+    }
+    const collapsed = raw.replace(/\s+/g, ' ').trim();
+    if (!collapsed) {
+        return '';
+    }
+    // The blob-name separator is three hyphens; collapse any hyphen run in the
+    // label to a single hyphen so round-trip parsing stays unambiguous.
+    const deHyphen = collapsed.replace(/-{2,}/g, '-');
+    return deHyphen.slice(0, BACKUP_LABEL_MAX_LENGTH).trim();
+}
+export function transformBlobName(blobName) {
+    const fileType = blobName.endsWith('json') ? 'json' : blobName.endsWith('tar.gz') ? 'tar.gz' : 'na';
+    const [type = '', dbName = '', hostname = '', last = '', labelEncoded = ''] = blobName.replace(/\.(?:json|tar\.gz)$/, '').replace(/^backups\//, '').split(SEPARATOR);
+    let label;
+    if (labelEncoded) {
+        try {
+            const decoded = decodeURIComponent(labelEncoded);
+            if (decoded) {
+                label = decoded;
+            }
+        } catch  {
+            label = labelEncoded;
+        }
+    }
+    const m = NEW_NAME_TAIL.exec(last);
+    if (m) {
+        const collectionCount = Number(m[1]);
+        const timestampMs = Number(m[2]);
+        if (isPlausibleNewFormatTail(collectionCount, timestampMs)) {
+            return {
+                type,
+                collectionCount,
+                date: m[2],
+                dbName: decodeURIComponent(dbName),
+                fileType,
+                hostname: decodeURIComponent(hostname),
+                label
+            };
+        }
+    }
+    return {
+        type,
+        date: last,
+        dbName: decodeURIComponent(dbName),
+        fileType,
+        hostname: decodeURIComponent(hostname),
+        label
+    };
+}
+/**
+ * Backup blob pathname segment (without `backups/` prefix or extension).
+ * New format: `{collectionCount}-{timestampMs}` encodes included collection count + backup time.
+ * When a non-empty `label` is supplied it is appended as a separate URL-encoded segment
+ * (`---{encodedLabel}`) so older parsers that only read the first 4 segments still work.
+ */ export function createBlobName(type, dbName, hostname, collectionCount, timestampMs, fileType, label) {
+    const tail = `${Math.max(0, Math.floor(collectionCount))}-${Math.floor(timestampMs)}`;
+    const sanitizedLabel = sanitizeBackupLabel(label);
+    const labelSegment = sanitizedLabel ? `${SEPARATOR}${encodeURIComponent(sanitizedLabel)}` : '';
+    return `${type}${SEPARATOR}${encodeURIComponent(dbName)}${SEPARATOR}${encodeURIComponent(hostname)}${SEPARATOR}${tail}${labelSegment}.${fileType}`;
+}
+/**
+ * Prefer timestamp encoded in filename (stable across blob store migration); else blob upload time.
+ * Legacy tails are digits-only epoch values; if {@link TransformBlobNameResult.collectionCount}
+ * is absent, values below 1e12 are treated as **Unix seconds** (common older convention), else ms.
+ */ export function getBackupSortTimeMs(parsed, uploadedAt) {
+    if (!parsed.date || !/^\d+$/.test(parsed.date)) {
+        return uploadedAt.getTime();
+    }
+    const n = Number(parsed.date);
+    if (!Number.isFinite(n)) {
+        return uploadedAt.getTime();
+    }
+    const isLegacyTimestampOnly = parsed.collectionCount === undefined;
+    if (isLegacyTimestampOnly && n < 1e12) {
+        return n * 1000;
+    }
+    return n;
+}
+
+//# sourceMappingURL=blobName.js.map

package/dist/utils/blobName.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/blobName.ts"],"sourcesContent":["const SEPARATOR = '---'\n\n/**\n * Last segment is `{collectionCount}-{timestampMs}` (new) or legacy `{timestampMs}` only.\n * A hyphenated tail that does not pass {@link isPlausibleNewFormatTail} is treated as legacy\n * (whole `last` string, no collection count) so older blobs are never mis-parsed.\n */\nconst NEW_NAME_TAIL = /^(\\d+)-(\\d{10,})$/\n\nconst NEW_TAIL_MAX_COLLECTIONS = 100_000\n\n/** Max length for a user-supplied manual backup label (after sanitization). */\nexport const BACKUP_LABEL_MAX_LENGTH = 64\n\nfunction isPlausibleNewFormatTail(collectionCount: number, timestampMs: number): boolean {\n  return (\n    Number.isFinite(collectionCount) &&\n    Number.isFinite(timestampMs) &&\n    collectionCount >= 0 &&\n    collectionCount <= NEW_TAIL_MAX_COLLECTIONS &&\n    timestampMs > 0 &&\n    timestampMs < 1e15\n  )\n}\n\n/**\n * Normalize a user-supplied manual backup label so it is safe to embed as a\n * blob-name segment. Trims, collapses whitespace, removes characters that would\n * confuse the separator, and enforces {@link BACKUP_LABEL_MAX_LENGTH}.\n * Returns an empty string when nothing usable remains.\n */\nexport function sanitizeBackupLabel(raw: unknown): string {\n  if (typeof raw !== 'string') {return ''}\n  const collapsed = raw.replace(/\\s+/g, ' ').trim()\n  if (!collapsed) {return ''}\n  // The blob-name separator is three hyphens; collapse any hyphen run in the\n  // label to a single hyphen so round-trip parsing stays unambiguous.\n  const deHyphen = collapsed.replace(/-{2,}/g, '-')\n  return deHyphen.slice(0, BACKUP_LABEL_MAX_LENGTH).trim()\n}\n\nexport interface TransformBlobNameResult {\n  collectionCount?: number\n  date: string\n  dbName: string\n  fileType: 'json' | 'na' | 'tar.gz'\n  hostname: string\n  label?: string\n  type: string\n}\n\nexport function transformBlobName(blobName: string): TransformBlobNameResult {\n  const fileType: 'json' | 'na' | 'tar.gz' = blobName.endsWith('json')\n    ? 'json'\n    : blobName.endsWith('tar.gz')\n      ? 'tar.gz'\n      : 'na'\n  const [type = '', dbName = '', hostname = '', last = '', labelEncoded = ''] = blobName\n    .replace(/\\.(?:json|tar\\.gz)$/, '')\n    .replace(/^backups\\//, '')\n    .split(SEPARATOR)\n\n  let label: string | undefined\n  if (labelEncoded) {\n    try {\n      const decoded = decodeURIComponent(labelEncoded)\n      if (decoded) {label = decoded}\n    } catch {\n      label = labelEncoded\n    }\n  }\n\n  const m = NEW_NAME_TAIL.exec(last)\n  if (m) {\n    const collectionCount = Number(m[1])\n    const timestampMs = Number(m[2])\n    if (isPlausibleNewFormatTail(collectionCount, timestampMs)) {\n      return {\n        type,\n        collectionCount,\n        date: m[2],\n        dbName: decodeURIComponent(dbName),\n        fileType,\n        hostname: decodeURIComponent(hostname),\n        label,\n      }\n    }\n  }\n\n  return {\n    type,\n    date: last,\n    dbName: decodeURIComponent(dbName),\n    fileType,\n    hostname: decodeURIComponent(hostname),\n    label,\n  }\n}\n\n/**\n * Backup blob pathname segment (without `backups/` prefix or extension).\n * New format: `{collectionCount}-{timestampMs}` encodes included collection count + backup time.\n * When a non-empty `label` is supplied it is appended as a separate URL-encoded segment\n * (`---{encodedLabel}`) so older parsers that only read the first 4 segments still work.\n */\nexport function createBlobName(\n  type: string,\n  dbName: string,\n  hostname: string,\n  collectionCount: number,\n  timestampMs: number,\n  fileType: 'json' | 'tar.gz',\n  label?: string,\n): string {\n  const tail = `${Math.max(0, Math.floor(collectionCount))}-${Math.floor(timestampMs)}`\n  const sanitizedLabel = sanitizeBackupLabel(label)\n  const labelSegment = sanitizedLabel ? `${SEPARATOR}${encodeURIComponent(sanitizedLabel)}` : ''\n  return `${type}${SEPARATOR}${encodeURIComponent(dbName)}${SEPARATOR}${encodeURIComponent(hostname)}${SEPARATOR}${tail}${labelSegment}.${fileType}`\n}\n\n/**\n * Prefer timestamp encoded in filename (stable across blob store migration); else blob upload time.\n * Legacy tails are digits-only epoch values; if {@link TransformBlobNameResult.collectionCount}\n * is absent, values below 1e12 are treated as **Unix seconds** (common older convention), else ms.\n */\nexport function getBackupSortTimeMs(parsed: TransformBlobNameResult, uploadedAt: Date): number {\n  if (!parsed.date || !/^\\d+$/.test(parsed.date)) {\n    return uploadedAt.getTime()\n  }\n  const n = Number(parsed.date)\n  if (!Number.isFinite(n)) {\n    return uploadedAt.getTime()\n  }\n  const isLegacyTimestampOnly = parsed.collectionCount === undefined\n  if (isLegacyTimestampOnly && n < 1e12) {\n    return n * 1000\n  }\n  return n\n}\n"],"names":["SEPARATOR","NEW_NAME_TAIL","NEW_TAIL_MAX_COLLECTIONS","BACKUP_LABEL_MAX_LENGTH","isPlausibleNewFormatTail","collectionCount","timestampMs","Number","isFinite","sanitizeBackupLabel","raw","collapsed","replace","trim","deHyphen","slice","transformBlobName","blobName","fileType","endsWith","type","dbName","hostname","last","labelEncoded","split","label","decoded","decodeURIComponent","m","exec","date","createBlobName","tail","Math","max","floor","sanitizedLabel","labelSegment","encodeURIComponent","getBackupSortTimeMs","parsed","uploadedAt","test","getTime","n","isLegacyTimestampOnly","undefined"],"mappings":"AAAA,MAAMA,YAAY;AAElB;;;;CAIC,GACD,MAAMC,gBAAgB;AAEtB,MAAMC,2BAA2B;AAEjC,6EAA6E,GAC7E,OAAO,MAAMC,0BAA0B,GAAE;AAEzC,SAASC,yBAAyBC,eAAuB,EAAEC,WAAmB;IAC5E,OACEC,OAAOC,QAAQ,CAACH,oBAChBE,OAAOC,QAAQ,CAACF,gBAChBD,mBAAmB,KACnBA,mBAAmBH,4BACnBI,cAAc,KACdA,cAAc;AAElB;AAEA;;;;;CAKC,GACD,OAAO,SAASG,oBAAoBC,GAAY;IAC9C,IAAI,OAAOA,QAAQ,UAAU;QAAC,OAAO;IAAE;IACvC,MAAMC,YAAYD,IAAIE,OAAO,CAAC,QAAQ,KAAKC,IAAI;IAC/C,IAAI,CAACF,WAAW;QAAC,OAAO;IAAE;IAC1B,2EAA2E;IAC3E,oEAAoE;IACpE,MAAMG,WAAWH,UAAUC,OAAO,CAAC,UAAU;IAC7C,OAAOE,SAASC,KAAK,CAAC,GAAGZ,yBAAyBU,IAAI;AACxD;AAYA,OAAO,SAASG,kBAAkBC,QAAgB;IAChD,MAAMC,WAAqCD,SAASE,QAAQ,CAAC,UACzD,SACAF,SAASE,QAAQ,CAAC,YAChB,WACA;IACN,MAAM,CAACC,OAAO,EAAE,EAAEC,SAAS,EAAE,EAAEC,WAAW,EAAE,EAAEC,OAAO,EAAE,EAAEC,eAAe,EAAE,CAAC,GAAGP,SAC3EL,OAAO,CAAC,uBAAuB,IAC/BA,OAAO,CAAC,cAAc,IACtBa,KAAK,CAACzB;IAET,IAAI0B;IACJ,IAAIF,cAAc;QAChB,IAAI;YACF,MAAMG,UAAUC,mBAAmBJ;YACnC,IAAIG,SAAS;gBAACD,QAAQC;YAAO;QAC/B,EAAE,OAAM;YACND,QAAQF;QACV;IACF;IAEA,MAAMK,IAAI5B,cAAc6B,IAAI,CAACP;IAC7B,IAAIM,GAAG;QACL,MAAMxB,kBAAkBE,OAAOsB,CAAC,CAAC,EAAE;QACnC,MAAMvB,cAAcC,OAAOsB,CAAC,CAAC,EAAE;QAC/B,IAAIzB,yBAAyBC,iBAAiBC,cAAc;YAC1D,OAAO;gBACLc;gBACAf;gBACA0B,MAAMF,CAAC,CAAC,EAAE;gBACVR,QAAQO,mBAAmBP;gBAC3BH;gBACAI,UAAUM,mBAAmBN;gBAC7BI;YACF;QACF;IACF;IAEA,OAAO;QACLN;QACAW,MAAMR;QACNF,QAAQO,mBAAmBP;QAC3BH;QACAI,UAAUM,mBAAmBN;QAC7BI;IACF;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASM,eACdZ,IAAY,EACZC,MAAc,EACdC,QAAgB,EAChBjB,eAAuB,EACvBC,WAAmB,EACnBY,QAA2B,EAC3BQ,KAAc;IAEd,MAAMO,OAAO,GAAGC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAAC/B,kBAAkB,CAAC,EAAE6B,KAAKE,KAAK,CAAC9B,cAAc;IACrF,MAAM+B,iBAAiB5B,oBAAoBiB;IAC3C,MAAMY,eAAeD,iBAAiB,GAAGrC,YAAYuC,mBAAmBF,iBAAiB,GAAG;IAC5F,OAAO,GAAGjB,OAAOpB,YAAYuC,mBAAmBlB,UAAUrB,YAAYuC,mBAAmBjB,YAAYtB,YAAYiC,OAAOK,aAAa,CAAC,EAAEpB,UAAU;AACpJ;AAEA;;;;CAIC,GACD,OAAO,SAASsB,oBAAoBC,MAA+B,EAAEC,UAAgB;IACnF,IAAI,CAACD,OAAOV,IAAI,IAAI,CAAC,QAAQY,IAAI,CAACF,OAAOV,IAAI,GAAG;QAC9C,OAAOW,WAAWE,OAAO;IAC3B;IACA,MAAMC,IAAItC,OAAOkC,OAAOV,IAAI;IAC5B,IAAI,CAACxB,OAAOC,QAAQ,CAACqC,IAAI;QACvB,OAAOH,WAAWE,OAAO;IAC3B;IACA,MAAME,wBAAwBL,OAAOpC,eAAe,KAAK0C;IACzD,IAAID,yBAAyBD,IAAI,MAAM;QACrC,OAAOA,IAAI;IACb;IACA,OAAOA;AACT"}

package/dist/utils/dashboardRoleAccess.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Resolves which users may see/use the backup dashboard when no custom `access`
+ * option is passed to the plugin. Driven by the `PAYLOAD_BACKUP_ALLOWED_ROLES`
+ * environment variable.
+ *
+ * Syntax:
+ *   PAYLOAD_BACKUP_ALLOWED_ROLES=admin,editor   // any user whose roles[].slug matches
+ *   PAYLOAD_BACKUP_ALLOWED_ROLES=*              // any authenticated user
+ *   (unset / empty)                             // backwards-compatible default:
+ *                                               //   - roles present -> require `admin`
+ *                                               //   - no roles field -> allow
+ */
+export declare const BACKUP_ALLOWED_ROLES_ENV = "PAYLOAD_BACKUP_ALLOWED_ROLES";
+/** Parses the env var value into a normalized list of role slugs (lower-cased, trimmed). */
+export declare function parseAllowedRolesEnv(raw: string | undefined): string[];
+/**
+ * Returns true when the authenticated user is allowed to view the backup dashboard based
+ * on the `PAYLOAD_BACKUP_ALLOWED_ROLES` env var. Unauthenticated users always return false.
+ *
+ * Exported for unit testing and for advanced consumers that want to reuse the same check
+ * (e.g. wrap it inside their own `access` option).
+ */
+export declare function isUserAllowedByEnvRoles(user: null | Record<string, unknown>, envValue?: string | undefined): boolean;

package/dist/utils/dashboardRoleAccess.js

@@ -0,0 +1,64 @@
+/**
+ * Resolves which users may see/use the backup dashboard when no custom `access`
+ * option is passed to the plugin. Driven by the `PAYLOAD_BACKUP_ALLOWED_ROLES`
+ * environment variable.
+ *
+ * Syntax:
+ *   PAYLOAD_BACKUP_ALLOWED_ROLES=admin,editor   // any user whose roles[].slug matches
+ *   PAYLOAD_BACKUP_ALLOWED_ROLES=*              // any authenticated user
+ *   (unset / empty)                             // backwards-compatible default:
+ *                                               //   - roles present -> require `admin`
+ *                                               //   - no roles field -> allow
+ */ export const BACKUP_ALLOWED_ROLES_ENV = 'PAYLOAD_BACKUP_ALLOWED_ROLES';
+/** Parses the env var value into a normalized list of role slugs (lower-cased, trimmed). */ export function parseAllowedRolesEnv(raw) {
+    if (!raw) {
+        return [];
+    }
+    return raw.split(',').map((s)=>s.trim().toLowerCase()).filter((s)=>s.length > 0);
+}
+function extractRoleSlugs(user) {
+    const roles = user.roles;
+    if (!Array.isArray(roles)) {
+        return null;
+    }
+    const slugs = [];
+    for (const entry of roles){
+        if (typeof entry === 'string') {
+            slugs.push(entry.toLowerCase());
+        } else if (entry && typeof entry === 'object' && typeof entry.slug === 'string') {
+            slugs.push(entry.slug.toLowerCase());
+        }
+    }
+    return slugs;
+}
+/**
+ * Returns true when the authenticated user is allowed to view the backup dashboard based
+ * on the `PAYLOAD_BACKUP_ALLOWED_ROLES` env var. Unauthenticated users always return false.
+ *
+ * Exported for unit testing and for advanced consumers that want to reuse the same check
+ * (e.g. wrap it inside their own `access` option).
+ */ export function isUserAllowedByEnvRoles(user, envValue = process.env[BACKUP_ALLOWED_ROLES_ENV]) {
+    if (!user) {
+        return false;
+    }
+    const allowed = parseAllowedRolesEnv(envValue);
+    const userRoles = extractRoleSlugs(user);
+    // Env var not set -> backwards-compatible default.
+    if (allowed.length === 0) {
+        if (userRoles === null || userRoles.length === 0) {
+            return true;
+        }
+        return userRoles.includes('admin');
+    }
+    // Wildcard -> any authenticated user.
+    if (allowed.includes('*')) {
+        return true;
+    }
+    // Explicit allow-list requires the user to actually expose roles that match.
+    if (!userRoles || userRoles.length === 0) {
+        return false;
+    }
+    return userRoles.some((slug)=>allowed.includes(slug));
+}
+
+//# sourceMappingURL=dashboardRoleAccess.js.map

package/dist/utils/dashboardRoleAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/dashboardRoleAccess.ts"],"sourcesContent":["/**\n * Resolves which users may see/use the backup dashboard when no custom `access`\n * option is passed to the plugin. Driven by the `PAYLOAD_BACKUP_ALLOWED_ROLES`\n * environment variable.\n *\n * Syntax:\n *   PAYLOAD_BACKUP_ALLOWED_ROLES=admin,editor   // any user whose roles[].slug matches\n *   PAYLOAD_BACKUP_ALLOWED_ROLES=*              // any authenticated user\n *   (unset / empty)                             // backwards-compatible default:\n *                                               //   - roles present -> require `admin`\n *                                               //   - no roles field -> allow\n */\n\nexport const BACKUP_ALLOWED_ROLES_ENV = 'PAYLOAD_BACKUP_ALLOWED_ROLES'\n\n/** Parses the env var value into a normalized list of role slugs (lower-cased, trimmed). */\nexport function parseAllowedRolesEnv(raw: string | undefined): string[] {\n  if (!raw) {return []}\n  return raw\n    .split(',')\n    .map((s) => s.trim().toLowerCase())\n    .filter((s) => s.length > 0)\n}\n\nfunction extractRoleSlugs(user: Record<string, unknown>): null | string[] {\n  const roles = user.roles as Array<{ slug?: unknown } | string> | undefined\n  if (!Array.isArray(roles)) {return null}\n  const slugs: string[] = []\n  for (const entry of roles) {\n    if (typeof entry === 'string') {\n      slugs.push(entry.toLowerCase())\n    } else if (entry && typeof entry === 'object' && typeof entry.slug === 'string') {\n      slugs.push(entry.slug.toLowerCase())\n    }\n  }\n  return slugs\n}\n\n/**\n * Returns true when the authenticated user is allowed to view the backup dashboard based\n * on the `PAYLOAD_BACKUP_ALLOWED_ROLES` env var. Unauthenticated users always return false.\n *\n * Exported for unit testing and for advanced consumers that want to reuse the same check\n * (e.g. wrap it inside their own `access` option).\n */\nexport function isUserAllowedByEnvRoles(\n  user: null | Record<string, unknown>,\n  envValue: string | undefined = process.env[BACKUP_ALLOWED_ROLES_ENV],\n): boolean {\n  if (!user) {return false}\n  const allowed = parseAllowedRolesEnv(envValue)\n  const userRoles = extractRoleSlugs(user)\n\n  // Env var not set -> backwards-compatible default.\n  if (allowed.length === 0) {\n    if (userRoles === null || userRoles.length === 0) {return true}\n    return userRoles.includes('admin')\n  }\n\n  // Wildcard -> any authenticated user.\n  if (allowed.includes('*')) {return true}\n\n  // Explicit allow-list requires the user to actually expose roles that match.\n  if (!userRoles || userRoles.length === 0) {return false}\n  return userRoles.some((slug) => allowed.includes(slug))\n}\n"],"names":["BACKUP_ALLOWED_ROLES_ENV","parseAllowedRolesEnv","raw","split","map","s","trim","toLowerCase","filter","length","extractRoleSlugs","user","roles","Array","isArray","slugs","entry","push","slug","isUserAllowedByEnvRoles","envValue","process","env","allowed","userRoles","includes","some"],"mappings":"AAAA;;;;;;;;;;;CAWC,GAED,OAAO,MAAMA,2BAA2B,+BAA8B;AAEtE,0FAA0F,GAC1F,OAAO,SAASC,qBAAqBC,GAAuB;IAC1D,IAAI,CAACA,KAAK;QAAC,OAAO,EAAE;IAAA;IACpB,OAAOA,IACJC,KAAK,CAAC,KACNC,GAAG,CAAC,CAACC,IAAMA,EAAEC,IAAI,GAAGC,WAAW,IAC/BC,MAAM,CAAC,CAACH,IAAMA,EAAEI,MAAM,GAAG;AAC9B;AAEA,SAASC,iBAAiBC,IAA6B;IACrD,MAAMC,QAAQD,KAAKC,KAAK;IACxB,IAAI,CAACC,MAAMC,OAAO,CAACF,QAAQ;QAAC,OAAO;IAAI;IACvC,MAAMG,QAAkB,EAAE;IAC1B,KAAK,MAAMC,SAASJ,MAAO;QACzB,IAAI,OAAOI,UAAU,UAAU;YAC7BD,MAAME,IAAI,CAACD,MAAMT,WAAW;QAC9B,OAAO,IAAIS,SAAS,OAAOA,UAAU,YAAY,OAAOA,MAAME,IAAI,KAAK,UAAU;YAC/EH,MAAME,IAAI,CAACD,MAAME,IAAI,CAACX,WAAW;QACnC;IACF;IACA,OAAOQ;AACT;AAEA;;;;;;CAMC,GACD,OAAO,SAASI,wBACdR,IAAoC,EACpCS,WAA+BC,QAAQC,GAAG,CAACtB,yBAAyB;IAEpE,IAAI,CAACW,MAAM;QAAC,OAAO;IAAK;IACxB,MAAMY,UAAUtB,qBAAqBmB;IACrC,MAAMI,YAAYd,iBAAiBC;IAEnC,mDAAmD;IACnD,IAAIY,QAAQd,MAAM,KAAK,GAAG;QACxB,IAAIe,cAAc,QAAQA,UAAUf,MAAM,KAAK,GAAG;YAAC,OAAO;QAAI;QAC9D,OAAOe,UAAUC,QAAQ,CAAC;IAC5B;IAEA,sCAAsC;IACtC,IAAIF,QAAQE,QAAQ,CAAC,MAAM;QAAC,OAAO;IAAI;IAEvC,6EAA6E;IAC7E,IAAI,CAACD,aAAaA,UAAUf,MAAM,KAAK,GAAG;QAAC,OAAO;IAAK;IACvD,OAAOe,UAAUE,IAAI,CAAC,CAACR,OAASK,QAAQE,QAAQ,CAACP;AACnD"}

package/dist/utils/dialogBackdrop.d.ts

@@ -0,0 +1,9 @@
+import type { MouseEvent, PointerEvent, RefObject } from 'react';
+/** Mouse or pointer event with viewport coordinates (native {@code <dialog>} backdrop close). */
+export type DialogBackdropPointer = Pick<MouseEvent<HTMLDialogElement>, 'clientX' | 'clientY'> | Pick<PointerEvent<HTMLDialogElement>, 'clientX' | 'clientY'>;
+/**
+ * Closes a native {@code <dialog>} when the pointer event is outside the dialog panel
+ * (on the dimmed backdrop). Modal dialogs only expose the panel in {@code getBoundingClientRect()},
+ * not the full viewport overlay.
+ */
+export declare function closeNativeDialogOnBackdropPointer(event: DialogBackdropPointer, dialogRef: RefObject<HTMLDialogElement | null>): void;

package/dist/utils/dialogBackdrop.js

@@ -0,0 +1,17 @@
+/**
+ * Closes a native {@code <dialog>} when the pointer event is outside the dialog panel
+ * (on the dimmed backdrop). Modal dialogs only expose the panel in {@code getBoundingClientRect()},
+ * not the full viewport overlay.
+ */ export function closeNativeDialogOnBackdropPointer(event, dialogRef) {
+    const el = dialogRef.current;
+    if (!el) {
+        return;
+    }
+    const r = el.getBoundingClientRect();
+    const { clientX: x, clientY: y } = event;
+    if (x < r.left || x > r.right || y < r.top || y > r.bottom) {
+        el.close();
+    }
+}
+
+//# sourceMappingURL=dialogBackdrop.js.map

package/dist/utils/dialogBackdrop.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/dialogBackdrop.ts"],"sourcesContent":["import type { MouseEvent, PointerEvent, RefObject } from 'react'\n\n/** Mouse or pointer event with viewport coordinates (native {@code <dialog>} backdrop close). */\nexport type DialogBackdropPointer =\n  | Pick<MouseEvent<HTMLDialogElement>, 'clientX' | 'clientY'>\n  | Pick<PointerEvent<HTMLDialogElement>, 'clientX' | 'clientY'>\n\n/**\n * Closes a native {@code <dialog>} when the pointer event is outside the dialog panel\n * (on the dimmed backdrop). Modal dialogs only expose the panel in {@code getBoundingClientRect()},\n * not the full viewport overlay.\n */\nexport function closeNativeDialogOnBackdropPointer(\n  event: DialogBackdropPointer,\n  dialogRef: RefObject<HTMLDialogElement | null>,\n): void {\n  const el = dialogRef.current\n  if (!el) {return}\n  const r = el.getBoundingClientRect()\n  const { clientX: x, clientY: y } = event\n  if (x < r.left || x > r.right || y < r.top || y > r.bottom) {\n    el.close()\n  }\n}\n"],"names":["closeNativeDialogOnBackdropPointer","event","dialogRef","el","current","r","getBoundingClientRect","clientX","x","clientY","y","left","right","top","bottom","close"],"mappings":"AAOA;;;;CAIC,GACD,OAAO,SAASA,mCACdC,KAA4B,EAC5BC,SAA8C;IAE9C,MAAMC,KAAKD,UAAUE,OAAO;IAC5B,IAAI,CAACD,IAAI;QAAC;IAAM;IAChB,MAAME,IAAIF,GAAGG,qBAAqB;IAClC,MAAM,EAAEC,SAASC,CAAC,EAAEC,SAASC,CAAC,EAAE,GAAGT;IACnC,IAAIO,IAAIH,EAAEM,IAAI,IAAIH,IAAIH,EAAEO,KAAK,IAAIF,IAAIL,EAAEQ,GAAG,IAAIH,IAAIL,EAAES,MAAM,EAAE;QAC1DX,GAAGY,KAAK;IACV;AACF"}

package/dist/utils/formatBytes.d.ts

@@ -0,0 +1,2 @@
+/** Human-readable file size (binary units: KiB, MiB, GiB — shown as KB/MB/GB for familiarity). */
+export declare function formatBytes(bytes: number): string;

package/dist/utils/formatBytes.js

@@ -0,0 +1,20 @@
+/** Human-readable file size (binary units: KiB, MiB, GiB — shown as KB/MB/GB for familiarity). */ export function formatBytes(bytes) {
+    if (!Number.isFinite(bytes) || bytes < 0) {
+        return '—';
+    }
+    if (bytes < 1024) {
+        return `${Math.round(bytes)} B`;
+    }
+    const kb = bytes / 1024;
+    if (kb < 1024) {
+        return kb < 10 ? `${kb.toFixed(1)} KB` : `${Math.round(kb)} KB`;
+    }
+    const mb = kb / 1024;
+    if (mb < 1024) {
+        return mb < 10 ? `${mb.toFixed(1)} MB` : `${mb.toFixed(1)} MB`;
+    }
+    const gb = mb / 1024;
+    return gb < 10 ? `${gb.toFixed(2)} GB` : `${gb.toFixed(1)} GB`;
+}
+
+//# sourceMappingURL=formatBytes.js.map

package/dist/utils/formatBytes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/formatBytes.ts"],"sourcesContent":["/** Human-readable file size (binary units: KiB, MiB, GiB — shown as KB/MB/GB for familiarity). */\nexport function formatBytes(bytes: number): string {\n  if (!Number.isFinite(bytes) || bytes < 0) {\n    return '—'\n  }\n  if (bytes < 1024) {\n    return `${Math.round(bytes)} B`\n  }\n  const kb = bytes / 1024\n  if (kb < 1024) {\n    return kb < 10 ? `${kb.toFixed(1)} KB` : `${Math.round(kb)} KB`\n  }\n  const mb = kb / 1024\n  if (mb < 1024) {\n    return mb < 10 ? `${mb.toFixed(1)} MB` : `${mb.toFixed(1)} MB`\n  }\n  const gb = mb / 1024\n  return gb < 10 ? `${gb.toFixed(2)} GB` : `${gb.toFixed(1)} GB`\n}\n"],"names":["formatBytes","bytes","Number","isFinite","Math","round","kb","toFixed","mb","gb"],"mappings":"AAAA,gGAAgG,GAChG,OAAO,SAASA,YAAYC,KAAa;IACvC,IAAI,CAACC,OAAOC,QAAQ,CAACF,UAAUA,QAAQ,GAAG;QACxC,OAAO;IACT;IACA,IAAIA,QAAQ,MAAM;QAChB,OAAO,GAAGG,KAAKC,KAAK,CAACJ,OAAO,EAAE,CAAC;IACjC;IACA,MAAMK,KAAKL,QAAQ;IACnB,IAAIK,KAAK,MAAM;QACb,OAAOA,KAAK,KAAK,GAAGA,GAAGC,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,GAAGH,KAAKC,KAAK,CAACC,IAAI,GAAG,CAAC;IACjE;IACA,MAAME,KAAKF,KAAK;IAChB,IAAIE,KAAK,MAAM;QACb,OAAOA,KAAK,KAAK,GAAGA,GAAGD,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,GAAGC,GAAGD,OAAO,CAAC,GAAG,GAAG,CAAC;IAChE;IACA,MAAME,KAAKD,KAAK;IAChB,OAAOC,KAAK,KAAK,GAAGA,GAAGF,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,GAAGE,GAAGF,OAAO,CAAC,GAAG,GAAG,CAAC;AAChE"}

package/dist/utils/hostname.d.ts

@@ -0,0 +1,2 @@
+export declare function getCurrentDbName(): string;
+export declare function getCurrentHostname(): string;

package/dist/utils/hostname.js

@@ -0,0 +1,17 @@
+export function getCurrentDbName() {
+    try {
+        const { hostname, pathname } = new URL(process.env.MONGODB_URI);
+        return hostname + pathname;
+    } catch  {
+        return 'none';
+    }
+}
+export function getCurrentHostname() {
+    try {
+        return process.env.NEXT_PUBLIC_SERVER_URL ? new URL(process.env.NEXT_PUBLIC_SERVER_URL).hostname : process.env.VERCEL_URL ?? 'none';
+    } catch  {
+        return process.env.VERCEL_URL || 'none';
+    }
+}
+
+//# sourceMappingURL=hostname.js.map

package/dist/utils/hostname.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/hostname.ts"],"sourcesContent":["export function getCurrentDbName(): string {\n  try {\n    const { hostname, pathname } = new URL(process.env.MONGODB_URI!)\n    return hostname + pathname\n  } catch {\n    return 'none'\n  }\n}\n\nexport function getCurrentHostname(): string {\n  try {\n    return process.env.NEXT_PUBLIC_SERVER_URL\n      ? new URL(process.env.NEXT_PUBLIC_SERVER_URL).hostname\n      : (process.env.VERCEL_URL ?? 'none')\n  } catch {\n    return process.env.VERCEL_URL! || 'none'\n  }\n}\n"],"names":["getCurrentDbName","hostname","pathname","URL","process","env","MONGODB_URI","getCurrentHostname","NEXT_PUBLIC_SERVER_URL","VERCEL_URL"],"mappings":"AAAA,OAAO,SAASA;IACd,IAAI;QACF,MAAM,EAAEC,QAAQ,EAAEC,QAAQ,EAAE,GAAG,IAAIC,IAAIC,QAAQC,GAAG,CAACC,WAAW;QAC9D,OAAOL,WAAWC;IACpB,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,OAAO,SAASK;IACd,IAAI;QACF,OAAOH,QAAQC,GAAG,CAACG,sBAAsB,GACrC,IAAIL,IAAIC,QAAQC,GAAG,CAACG,sBAAsB,EAAEP,QAAQ,GACnDG,QAAQC,GAAG,CAACI,UAAU,IAAI;IACjC,EAAE,OAAM;QACN,OAAOL,QAAQC,GAAG,CAACI,UAAU,IAAK;IACpC;AACF"}

package/dist/utils/index.d.ts

@@ -0,0 +1,5 @@
+export * from './blobName';
+export * from './dashboardRoleAccess';
+export * from './formatBytes';
+export * from './hostname';
+export * from './maskBlobToken';

package/dist/utils/index.js

@@ -0,0 +1,7 @@
+export * from './blobName';
+export * from './dashboardRoleAccess';
+export * from './formatBytes';
+export * from './hostname';
+export * from './maskBlobToken';
+
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/index.ts"],"sourcesContent":["export * from './blobName'\nexport * from './dashboardRoleAccess'\nexport * from './formatBytes'\nexport * from './hostname'\nexport * from './maskBlobToken'\n"],"names":[],"mappings":"AAAA,cAAc,aAAY;AAC1B,cAAc,wBAAuB;AACrC,cAAc,gBAAe;AAC7B,cAAc,aAAY;AAC1B,cAAc,kBAAiB"}

package/dist/utils/maskBlobToken.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Mask a Vercel Blob read/write token for display in the admin UI (never send the full secret).
+ * Shape: prefix + fixed-length asterisk run + suffix (length of real token does not change star count).
+ * Example: vercel_blob_rw_yfn + 23×* + bsM7
+ */
+export declare function maskBlobReadWriteToken(raw: string): string;
+/**
+ * When a token is already stored, treat the client value as "do not change the stored token" if
+ * they left the masked placeholder or cleared the field while editing other settings.
+ */
+export declare function shouldPreserveBackupBlobTokenField(clientValue: string, hadStoredToken: boolean): boolean;

package/dist/utils/maskBlobToken.js

@@ -0,0 +1,42 @@
+/**
+ * Mask a Vercel Blob read/write token for display in the admin UI (never send the full secret).
+ * Shape: prefix + fixed-length asterisk run + suffix (length of real token does not change star count).
+ * Example: vercel_blob_rw_yfn + 23×* + bsM7
+ */ export function maskBlobReadWriteToken(raw) {
+    const t = raw.trim();
+    if (t.length === 0) {
+        return '';
+    }
+    /** Fixed number of asterisks between prefix and suffix (UI stays compact for any token length). */ const middleRun = 32;
+    const prefixLen = Math.min(18, Math.max(8, Math.floor(t.length * 0.42)));
+    const suffixLen = Math.min(4, Math.max(3, Math.floor(t.length * 0.12)));
+    if (t.length <= prefixLen + suffixLen + 6) {
+        const headLen = Math.min(6, t.length);
+        const head = t.slice(0, headLen);
+        const tailLen = Math.min(3, Math.max(0, t.length - headLen));
+        const tail = tailLen > 0 ? t.slice(-tailLen) : '';
+        const middle = '*'.repeat(middleRun);
+        return tail ? `${head}${middle}${tail}` : `${head}${middle}`;
+    }
+    const prefix = t.slice(0, prefixLen);
+    const suffix = t.slice(-suffixLen);
+    return `${prefix}${'*'.repeat(middleRun)}${suffix}`;
+}
+/**
+ * When a token is already stored, treat the client value as "do not change the stored token" if
+ * they left the masked placeholder or cleared the field while editing other settings.
+ */ export function shouldPreserveBackupBlobTokenField(clientValue, hadStoredToken) {
+    if (!hadStoredToken) {
+        return false;
+    }
+    const v = clientValue.trim();
+    if (v.length === 0) {
+        return true;
+    }
+    if (/\*{2,}/.test(v)) {
+        return true;
+    }
+    return false;
+}
+
+//# sourceMappingURL=maskBlobToken.js.map

package/dist/utils/maskBlobToken.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/maskBlobToken.ts"],"sourcesContent":["/**\n * Mask a Vercel Blob read/write token for display in the admin UI (never send the full secret).\n * Shape: prefix + fixed-length asterisk run + suffix (length of real token does not change star count).\n * Example: vercel_blob_rw_yfn + 23×* + bsM7\n */\nexport function maskBlobReadWriteToken(raw: string): string {\n  const t = raw.trim()\n  if (t.length === 0) {return ''}\n\n  /** Fixed number of asterisks between prefix and suffix (UI stays compact for any token length). */\n  const middleRun = 32\n\n  const prefixLen = Math.min(18, Math.max(8, Math.floor(t.length * 0.42)))\n  const suffixLen = Math.min(4, Math.max(3, Math.floor(t.length * 0.12)))\n\n  if (t.length <= prefixLen + suffixLen + 6) {\n    const headLen = Math.min(6, t.length)\n    const head = t.slice(0, headLen)\n    const tailLen = Math.min(3, Math.max(0, t.length - headLen))\n    const tail = tailLen > 0 ? t.slice(-tailLen) : ''\n    const middle = '*'.repeat(middleRun)\n    return tail ? `${head}${middle}${tail}` : `${head}${middle}`\n  }\n\n  const prefix = t.slice(0, prefixLen)\n  const suffix = t.slice(-suffixLen)\n  return `${prefix}${'*'.repeat(middleRun)}${suffix}`\n}\n\n/**\n * When a token is already stored, treat the client value as \"do not change the stored token\" if\n * they left the masked placeholder or cleared the field while editing other settings.\n */\nexport function shouldPreserveBackupBlobTokenField(\n  clientValue: string,\n  hadStoredToken: boolean,\n): boolean {\n  if (!hadStoredToken) {return false}\n  const v = clientValue.trim()\n  if (v.length === 0) {return true}\n  if (/\\*{2,}/.test(v)) {return true}\n  return false\n}\n"],"names":["maskBlobReadWriteToken","raw","t","trim","length","middleRun","prefixLen","Math","min","max","floor","suffixLen","headLen","head","slice","tailLen","tail","middle","repeat","prefix","suffix","shouldPreserveBackupBlobTokenField","clientValue","hadStoredToken","v","test"],"mappings":"AAAA;;;;CAIC,GACD,OAAO,SAASA,uBAAuBC,GAAW;IAChD,MAAMC,IAAID,IAAIE,IAAI;IAClB,IAAID,EAAEE,MAAM,KAAK,GAAG;QAAC,OAAO;IAAE;IAE9B,iGAAiG,GACjG,MAAMC,YAAY;IAElB,MAAMC,YAAYC,KAAKC,GAAG,CAAC,IAAID,KAAKE,GAAG,CAAC,GAAGF,KAAKG,KAAK,CAACR,EAAEE,MAAM,GAAG;IACjE,MAAMO,YAAYJ,KAAKC,GAAG,CAAC,GAAGD,KAAKE,GAAG,CAAC,GAAGF,KAAKG,KAAK,CAACR,EAAEE,MAAM,GAAG;IAEhE,IAAIF,EAAEE,MAAM,IAAIE,YAAYK,YAAY,GAAG;QACzC,MAAMC,UAAUL,KAAKC,GAAG,CAAC,GAAGN,EAAEE,MAAM;QACpC,MAAMS,OAAOX,EAAEY,KAAK,CAAC,GAAGF;QACxB,MAAMG,UAAUR,KAAKC,GAAG,CAAC,GAAGD,KAAKE,GAAG,CAAC,GAAGP,EAAEE,MAAM,GAAGQ;QACnD,MAAMI,OAAOD,UAAU,IAAIb,EAAEY,KAAK,CAAC,CAACC,WAAW;QAC/C,MAAME,SAAS,IAAIC,MAAM,CAACb;QAC1B,OAAOW,OAAO,GAAGH,OAAOI,SAASD,MAAM,GAAG,GAAGH,OAAOI,QAAQ;IAC9D;IAEA,MAAME,SAASjB,EAAEY,KAAK,CAAC,GAAGR;IAC1B,MAAMc,SAASlB,EAAEY,KAAK,CAAC,CAACH;IACxB,OAAO,GAAGQ,SAAS,IAAID,MAAM,CAACb,aAAae,QAAQ;AACrD;AAEA;;;CAGC,GACD,OAAO,SAASC,mCACdC,WAAmB,EACnBC,cAAuB;IAEvB,IAAI,CAACA,gBAAgB;QAAC,OAAO;IAAK;IAClC,MAAMC,IAAIF,YAAYnB,IAAI;IAC1B,IAAIqB,EAAEpB,MAAM,KAAK,GAAG;QAAC,OAAO;IAAI;IAChC,IAAI,SAASqB,IAAI,CAACD,IAAI;QAAC,OAAO;IAAI;IAClC,OAAO;AACT"}

package/package.json

@@ -0,0 +1,140 @@
+{
+  "name": "@trieb.work/payload-plugin-backup-mongodb",
+  "version": "0.1.1",
+  "description": "Payload CMS plugin for MongoDB backup and recovery via Vercel Blob Storage",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/trieb-work/payload-plugin-backup-mongodb.git"
+  },
+  "license": "MIT",
+  "type": "module",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./client": {
+      "import": "./dist/exports/client.js",
+      "types": "./dist/exports/client.d.ts",
+      "default": "./dist/exports/client.js"
+    },
+    "./rsc": {
+      "import": "./dist/exports/rsc.js",
+      "types": "./dist/exports/rsc.d.ts",
+      "default": "./dist/exports/rsc.js"
+    },
+    "./styles.css": "./dist/backup-dashboard.css"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "lint-staged": {
+    "*.{ts,tsx}": [
+      "eslint --fix --no-warn-ignored",
+      "prettier --write"
+    ],
+    "*.{js,mjs,cjs,jsx,json,md,css,scss,yml,yaml}": [
+      "prettier --write --ignore-unknown"
+    ],
+    "package.json": [
+      "sort-package-json"
+    ]
+  },
+  "dependencies": {
+    "@vercel/blob": "^2.3.3",
+    "bson": "^6.10.0",
+    "cronstrue": "^3.14.0",
+    "tar-stream": "^3.1.7"
+  },
+  "devDependencies": {
+    "@changesets/cli": "^2.29.8",
+    "@eslint/eslintrc": "^3.2.0",
+    "@payloadcms/db-mongodb": "3.82.1",
+    "@payloadcms/eslint-config": "3.28.0",
+    "@payloadcms/next": "3.82.1",
+    "@payloadcms/richtext-lexical": "3.82.1",
+    "@payloadcms/translations": "3.82.1",
+    "@payloadcms/ui": "3.82.1",
+    "@playwright/test": "1.58.2",
+    "@swc-node/register": "1.10.9",
+    "@swc/cli": "0.6.0",
+    "@types/node": "22.19.9",
+    "@types/react": "19.2.14",
+    "@types/react-dom": "19.2.3",
+    "@types/tar-stream": "^3.1.4",
+    "@vitest/coverage-v8": "^4.1.5",
+    "copyfiles": "2.4.1",
+    "cross-env": "^7.0.3",
+    "dotenv": "^16.4.7",
+    "eslint": "^9.23.0",
+    "eslint-config-next": "16.2.3",
+    "graphql": "^16.8.1",
+    "husky": "^9.1.7",
+    "lint-staged": "^16.4.0",
+    "mongodb-memory-server": "10.1.4",
+    "next": "16.2.3",
+    "open": "^10.1.0",
+    "payload": "3.82.1",
+    "prettier": "^3.4.2",
+    "qs-esm": "8.0.1",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "rimraf": "3.0.2",
+    "sass": "^1.85.0",
+    "sharp": "0.34.2",
+    "sort-package-json": "^2.10.0",
+    "typescript": "5.7.3",
+    "vite-tsconfig-paths": "6.0.5",
+    "vitest": "4.1.5"
+  },
+  "peerDependencies": {
+    "@payloadcms/db-mongodb": "^3.0.0",
+    "@payloadcms/ui": "^3.0.0",
+    "next": "^15.0.0",
+    "payload": "^3.0.0",
+    "react": "^19.0.0"
+  },
+  "engines": {
+    "node": "^18.20.2 || >=20.9.0",
+    "pnpm": "^9 || ^10"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "registry": "https://registry.npmjs.org/",
+  "scripts": {
+    "build": "pnpm copyfiles && pnpm build:css && pnpm build:embed-css && pnpm build:types && pnpm build:swc",
+    "build:css": "sass src/components/BackupDashboard/index.scss dist/backup-dashboard.css --no-source-map --pkg-importer=node --quiet-deps --silence-deprecation=import",
+    "build:dev": "cross-env NODE_OPTIONS=--no-deprecation PAYLOAD_CONFIG_PATH=./dev/payload.config.ts next build dev --webpack",
+    "build:embed-css": "node ./scripts/embed-backup-css.mjs",
+    "build:swc": "swc ./src -d ./dist --config-file .swcrc --strip-leading-paths",
+    "build:types": "tsc -p tsconfig.build.json",
+    "changeset": "changeset",
+    "clean": "rimraf {dist,*.tsbuildinfo}",
+    "copyfiles": "copyfiles -u 1 \"src/**/*.{html,css,ttf,woff,woff2,eot,svg,jpg,png,json}\" dist/",
+    "predev": "pnpm build:css && pnpm build:embed-css",
+    "dev": "node ./scripts/dev.mjs",
+    "dev:generate-importmap": "pnpm dev:payload generate:importmap",
+    "dev:generate-types": "pnpm dev:payload generate:types",
+    "dev:next": "next dev dev --webpack",
+    "dev:payload": "cross-env PAYLOAD_CONFIG_PATH=./dev/payload.config.ts payload",
+    "dev:turbo": "node ./scripts/dev.mjs --turbo",
+    "dev:watch-css": "node ./scripts/watch-backup-css.mjs",
+    "generate:importmap": "pnpm dev:generate-importmap",
+    "generate:types": "pnpm dev:generate-types",
+    "lint": "eslint \"src/**/*.{ts,tsx}\" \"dev/**/*.{ts,tsx}\" \"tests/**/*.{ts,tsx}\"",
+    "lint:fix": "eslint \"src/**/*.{ts,tsx}\" \"dev/**/*.{ts,tsx}\" \"tests/**/*.{ts,tsx}\" --fix",
+    "playwright:install": "playwright install chromium",
+    "release": "pnpm run build && changeset publish",
+    "start:dev": "cross-env NODE_OPTIONS=--no-deprecation PAYLOAD_CONFIG_PATH=./dev/payload.config.ts next start dev -p 3000",
+    "test": "pnpm test:int && pnpm test:e2e",
+    "test:e2e": "cross-env NODE_OPTIONS=--no-deprecation playwright test",
+    "test:int": "vitest run",
+    "test:int:cov": "vitest run --coverage",
+    "test:int:watch": "vitest",
+    "typecheck": "tsc --noEmit"
+  }
+}